threatsim.com/
301 Moved Permanently 134 B IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4aa7a432bb447f094408f1bd6229c605
1965c4952cc8c082a6307ed67061a57aab6632fa
34ccdc351dc93dbf30a8630521968421091e3ed19c31a16e32c2eabb55c6a73a
GET / HTTP/1.1
Host: threatsim.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: awselb/2.0
Date: Tue, 30 Aug 2022 16:59:57 GMT
Content-Type: text/html
Content-Length: 134
Connection: keep-alive
Location: https://www.wombatsecurity.com:443/
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 517693963cc46e7a35a054296d0edfd5
11dfcd7e118e5f8d31e664e56ac29c57f973b8b3
ece269e8b9be8a5839d75c1343823d68b96930c593c2e3e8d522999176ee3149
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "ECE269E8B9BE8A5839D75C1343823D68B96930C593C2E3E8D522999176EE3149"
Last-Modified: Mon, 29 Aug 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2961
Expires: Tue, 30 Aug 2022 17:49:18 GMT
Date: Tue, 30 Aug 2022 16:59:57 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash c9e257ac851e1abcb133634f60230010
b149ffa15b92b7cb5294bb8d08e8a9273d446ac2
a3b68467b71b2c19a0d966fbde0f78cdcd19cb91d78a170528634e282797434a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A3B68467B71B2C19A0D966FBDE0F78CDCD19CB91D78A170528634E282797434A"
Last-Modified: Sun, 28 Aug 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11232
Expires: Tue, 30 Aug 2022 20:07:09 GMT
Date: Tue, 30 Aug 2022 16:59:57 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
IP
File type PEM certificate\012- , ASCII text
Hash 742edb4038f38bc533514982f3d2e861
cc3a20c8dc2a8c632ef9387a2744253f1e3fdef1
b6bfa49d3d135035701231db2fffc0c0643444394009a94c6a1b4d829d6b8345
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 20 Aug 2022 23:18:05 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Mon, 29 Aug 2022 22:35:59 GMT
etag: "742edb4038f38bc533514982f3d2e861"
x-cache: Hit from cloudfront
via: 1.1 bb1da7862c4968b28920b91b324095c0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: L_qtn078rZWWwplzY0OwePH3hvuo7UuE0lixFHJ4FCMGLQAgj4SkAA==
age: 66239
X-Firefox-Spdy: h2
getpocket.cdn.mozilla.net/v3/firefox/global-recs?version=3&consumer_key=40249-e88c401e1b1f2242d9e441c4&locale_lang=en-US®ion=NO&count=30
200 OK 41 kB URL HTTP/2 getpocket.cdn.mozilla.net/v3/firefox/global-recs?version=3&consumer_key=40249-e88c401e1b1f2242d9e441c4&locale_lang=en-US®ion=NO&count=30
IP
File type JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Hash 4e9f0eb802d95c059762068ea29770aa
887ab1c593cbe6db8696d259738dd2f101e420da
01be82dcb7696f8367093b99ca43d7248d9ea950249b401ba8543cd7fbd096f7
GET /v3/firefox/global-recs?version=3&consumer_key=40249-e88c401e1b1f2242d9e441c4&locale_lang=en-US®ion=NO&count=30 HTTP/1.1
Host: getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
vary: Accept-Encoding
content-location: global-recs.php
tcn: choice
x-frame-options: SAMEORIGIN
status: 200 OK
x-source: Pocket
pragma: cache
p3p: policyref="/w3c/p3p.xml", CP="ALL CURa ADMa DEVa OUR IND UNI COM NAV INT STA PRE"
x-cache: Hit from cloudfront
x-amz-cf-pop: SEA73-P2
x-amz-cf-id: 4rehZNlQXaxc7vL0lFFYjelBtVdfQK4Yt32C9SlGgtQXuVn7BM3RUQ==
content-encoding: gzip
via: 1.1 33d72803ad26b392c1b578a2b1276580.cloudfront.net (CloudFront), 1.1 google
date: Tue, 30 Aug 2022 16:49:52 GMT
age: 605
content-type: application/json
content-length: 40849
cache-control: s-maxage=900,public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
www.wombatsecurity.com/
301 Moved Permanently 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: www.wombatsecurity.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 301 Moved Permanently
Location: https://www.proofpoint.com/us/wombat-security-is-now-proofpoint
Content-Length: 0
Connection: close
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 91dd975a7b17b2922dd23c0e49314e40
57a2ece1e3cee7c4ebf927f2ba92f52cac395fe2
09966873bbf317f8910c59544cfde2a6d46e8acd2905797cc7c85c6b4d18ea8a
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length, Content-Type, Alert, Backoff, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Tue, 30 Aug 2022 16:25:57 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: Ub4gFO20ooaCrGMz8kZwwhKHI6eo4Bi7sa1Wvk9DdjWR3gexCU8kpg==
Age: 2040
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 30 Aug 2022 16:59:57 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
www.proofpoint.com/us/wombat-security-is-now-proofpoint
200 OK 16 kB URL HTTP/1.1 www.proofpoint.com/us/wombat-security-is-now-proofpoint
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (10233)
Hash 56b29fc976e685768b4a50c714cd0f09
a56d771f46d238531cf1afcb76d05748bfe8fc23
59e7b6af513de7a7a6bbfd9c2245090c68833dc4fe0f52b82b953aefcf4bdcf6
GET /us/wombat-security-is-now-proofpoint HTTP/1.1
Host: www.proofpoint.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: ppri=9B60587D-31C1-40F4-8837-D697DA8EB4CB; visid_incap_177663=MxaFur+FQ8GhyjTFRc4x/YyznWIAAAAAQUIPAAAAAABVL+8k2JhsBDutIV1lPhIY; _mkto_trk=id:309-RHV-619&token:_mch-proofpoint.com-1654502444683-74591; _gcl_au=1.1.841328466.1654502445
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 200 OK
Etag: "1661805180"
Last-Modified: Mon, 29 Aug 2022 20:33:00 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 15519
Content-Encoding: gzip
Feature-Policy: geolocation 'self'
Referrer-Policy: origin-when-cross-origin
X-Permitted-Cross-Domain-Policies: none
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Cache-Control: max-age=67692, public
Expires: Wed, 31 Aug 2022 11:48:09 GMT
Date: Tue, 30 Aug 2022 16:59:57 GMT
Set-Cookie: incap_ses_7233_177663=pMGhSYNNdTcbeUX6ocdgZA1CDmMAAAAAhccdFe2NZup03RC0p0Y97g==; path=/; Domain=.proofpoint.com; Secure; SameSite=None
___utmvmZZVuLalI=LHucsmTcdtx; path=/; Max-Age=900; Secure; SameSite=None
___utmvaZZVuLalI=ioXUwip; path=/; Max-Age=900; Secure; SameSite=None
___utmvbZZVuLalI=wZk XyAOzaly: ctc; path=/; Max-Age=900; Secure; SameSite=None
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-CDN: Imperva
X-Iinfo: 8-4237991-4237652 2CNN RT(1661878797211 18) q(0 0 0 0) r(0 0)
www.proofpoint.com/themes/custom/proofpoint/dist/app-drupal/assets/fonts/proofpoint.woff2
200 OK 18 kB URL HTTP/1.1 www.proofpoint.com/themes/custom/proofpoint/dist/app-drupal/assets/fonts/proofpoint.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 18296, version 1.0\012- data
Hash 57f90b512aba13b017086397ad20b4c9
ccc174c370bab127cf244cb80419a4ed41831a64
88b3102f2889489e2db30d672885b580d0275e944baacebc652c90ce2263d7ab
GET /themes/custom/proofpoint/dist/app-drupal/assets/fonts/proofpoint.woff2 HTTP/1.1
Host: www.proofpoint.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.proofpoint.com/us/wombat-security-is-now-proofpoint
Connection: keep-alive
Cookie: ppri=9B60587D-31C1-40F4-8837-D697DA8EB4CB; visid_incap_177663=MxaFur+FQ8GhyjTFRc4x/YyznWIAAAAAQUIPAAAAAABVL+8k2JhsBDutIV1lPhIY; _mkto_trk=id:309-RHV-619&token:_mch-proofpoint.com-1654502444683-74591; _gcl_au=1.1.841328466.1654502445; incap_ses_7233_177663=pMGhSYNNdTcbeUX6ocdgZA1CDmMAAAAAhccdFe2NZup03RC0p0Y97g==; ___utmvmZZVuLalI=LHucsmTcdtx; ___utmvbZZVuLalI=wZk XyAOzaly: ctc
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Etag: "01c16c31"
Last-Modified: Sat, 02 Jan 2021 08:56:17 GMT
Content-Length: 18296
X-Content-Type-Options: nosniff
Cache-Control: max-age=196157, public
Expires: Thu, 01 Sep 2022 23:29:14 GMT
Date: Tue, 30 Aug 2022 16:59:57 GMT
Set-Cookie: visid_incap_177663=MxaFur+FQ8GhyjTFRc4x/YyznWIAAAAAQUIPAAAAAABVL+8k2JhsBDutIV1lPhIY; expires=Tue, 29 Aug 2023 22:27:40 GMT; HttpOnly; path=/; Domain=.proofpoint.com; Secure; SameSite=None
incap_ses_7233_177663=pMGhSYNNdTcbeUX6ocdgZA1CDmMAAAAAhccdFe2NZup03RC0p0Y97g==; path=/; Domain=.proofpoint.com; Secure; SameSite=None
___utmvbZZVuLalI=a; Max-Age=0; path=/; expires=Sat, 20 Aug 2022 22:20:53 GMT
___utmvmZZVuLalI=a; Max-Age=0; path=/; expires=Sat, 20 Aug 2022 22:20:53 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-CDN: Imperva
X-Iinfo: 8-4237991-0 0CNN RT(1661878797211 156) q(0 -1 -1 -1) r(0 -1)
www.proofpoint.com/themes/custom/proofpoint/dist/app-drupal/assets/fonts/RobotoCondensed-Regular-webfont.woff
200 OK 21 kB URL HTTP/1.1 www.proofpoint.com/themes/custom/proofpoint/dist/app-drupal/assets/fonts/RobotoCondensed-Regular-webfont.woff
IP
File type Web Open Font Format, TrueType, length 21036, version 1.0\012- data
Hash 3f7afdef58cb65d3bd4b071cc0cc1434
521f70f25a26a6521ec9a5a03daf6c5e406c89c3
168ebd89f3a9ffb66f609bdf01034cb2dd90af136676fde9193abb2ac0e517f4
GET /themes/custom/proofpoint/dist/app-drupal/assets/fonts/RobotoCondensed-Regular-webfont.woff HTTP/1.1
Host: www.proofpoint.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.proofpoint.com/us/wombat-security-is-now-proofpoint
Connection: keep-alive
Cookie: ppri=9B60587D-31C1-40F4-8837-D697DA8EB4CB; visid_incap_177663=MxaFur+FQ8GhyjTFRc4x/YyznWIAAAAAQUIPAAAAAABVL+8k2JhsBDutIV1lPhIY; _mkto_trk=id:309-RHV-619&token:_mch-proofpoint.com-1654502444683-74591; _gcl_au=1.1.841328466.1654502445; incap_ses_7233_177663=pMGhSYNNdTcbeUX6ocdgZA1CDmMAAAAAhccdFe2NZup03RC0p0Y97g==; ___utmvmZZVuLalI=LHucsmTcdtx; ___utmvbZZVuLalI=wZk XyAOzaly: ctc
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Etag: "39ed386e"
Last-Modified: Sat, 02 Jan 2021 09:53:20 GMT
Content-Length: 21036
X-Content-Type-Options: nosniff
Cache-Control: max-age=176626, public
Expires: Thu, 01 Sep 2022 18:03:43 GMT
Date: Tue, 30 Aug 2022 16:59:57 GMT
Set-Cookie: visid_incap_177663=MxaFur+FQ8GhyjTFRc4x/YyznWIAAAAAQUIPAAAAAABVL+8k2JhsBDutIV1lPhIY; expires=Tue, 29 Aug 2023 22:27:40 GMT; HttpOnly; path=/; Domain=.proofpoint.com; Secure; SameSite=None
incap_ses_7233_177663=pMGhSYNNdTcbeUX6ocdgZA1CDmMAAAAAhccdFe2NZup03RC0p0Y97g==; path=/; Domain=.proofpoint.com; Secure; SameSite=None
___utmvbZZVuLalI=a; Max-Age=0; path=/; expires=Sat, 20 Aug 2022 22:20:53 GMT
___utmvmZZVuLalI=a; Max-Age=0; path=/; expires=Sat, 20 Aug 2022 22:20:53 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-CDN: Imperva
X-Iinfo: 8-4237991-0 0CNN RT(1661878797211 173) q(0 -1 -1 -1) r(0 -1)
www.proofpoint.com/modules/custom/pp_theme/js/modernizr.min.js?v=3.11.7
200 OK 2.5 kB URL HTTP/1.1 www.proofpoint.com/modules/custom/pp_theme/js/modernizr.min.js?v=3.11.7
IP
File type ASCII text, with very long lines (5395)
Hash 6f8de51727b3bcd6f1e7c7318836014a
abc2ba8498be2c72fd189627b88fa1dc5b3eb1ce
c0193067bd67da90d7a5f2370146665785175266025396d2dace710522e5bbbf
GET /modules/custom/pp_theme/js/modernizr.min.js?v=3.11.7 HTTP/1.1
Host: www.proofpoint.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.proofpoint.com/us/wombat-security-is-now-proofpoint
Connection: keep-alive
Cookie: ppri=9B60587D-31C1-40F4-8837-D697DA8EB4CB; visid_incap_177663=MxaFur+FQ8GhyjTFRc4x/YyznWIAAAAAQUIPAAAAAABVL+8k2JhsBDutIV1lPhIY; _mkto_trk=id:309-RHV-619&token:_mch-proofpoint.com-1654502444683-74591; _gcl_au=1.1.841328466.1654502445; incap_ses_7233_177663=pMGhSYNNdTcbeUX6ocdgZA1CDmMAAAAAhccdFe2NZup03RC0p0Y97g==; ___utmvmZZVuLalI=LHucsmTcdtx; ___utmvbZZVuLalI=wZk XyAOzaly: ctc
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Last-Modified: Wed, 03 Feb 2021 00:23:01 GMT
Content-Type: application/javascript
Content-Length: 2533
Content-Encoding: gzip
X-Content-Type-Options: nosniff
Cache-Control: max-age=176626, public
Expires: Thu, 01 Sep 2022 18:03:43 GMT
Date: Tue, 30 Aug 2022 16:59:57 GMT
Set-Cookie: visid_incap_177663=MxaFur+FQ8GhyjTFRc4x/YyznWIAAAAAQUIPAAAAAABVL+8k2JhsBDutIV1lPhIY; expires=Tue, 29 Aug 2023 22:27:40 GMT; HttpOnly; path=/; Domain=.proofpoint.com; Secure; SameSite=None
incap_ses_7233_177663=pMGhSYNNdTcbeUX6ocdgZA1CDmMAAAAAhccdFe2NZup03RC0p0Y97g==; path=/; Domain=.proofpoint.com; Secure; SameSite=None
___utmvbZZVuLalI=a; Max-Age=0; path=/; expires=Sat, 20 Aug 2022 22:20:53 GMT
___utmvmZZVuLalI=a; Max-Age=0; path=/; expires=Sat, 20 Aug 2022 22:20:53 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-CDN: Imperva
X-Iinfo: 8-4237991-0 0CNN RT(1661878797211 202) q(0 -1 -1 -1) r(0 -1)
www.proofpoint.com/sites/default/files/css/css_LB-c50DEPlEk6V1MjnKm7YTNx_RPyo6KsW3ytfstdcQ.css
200 OK 4.4 kB URL HTTP/1.1 www.proofpoint.com/sites/default/files/css/css_LB-c50DEPlEk6V1MjnKm7YTNx_RPyo6KsW3ytfstdcQ.css
IP
File type troff or preprocessor input text\012- assembler source, ASCII text, with very long lines (8279)
Hash e1578cdf6017d67b80243f13d196fec3
c692ab5e968ff42e6d83f49be6937ffcaaf3257d
ec684c0453cffac2b4f0ddfe4ae42746c9cd80dc08cefcc84bfcd48a6de51b44
GET /sites/default/files/css/css_LB-c50DEPlEk6V1MjnKm7YTNx_RPyo6KsW3ytfstdcQ.css HTTP/1.1
Host: www.proofpoint.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.proofpoint.com/us/wombat-security-is-now-proofpoint
Connection: keep-alive
Cookie: ppri=9B60587D-31C1-40F4-8837-D697DA8EB4CB; visid_incap_177663=MxaFur+FQ8GhyjTFRc4x/YyznWIAAAAAQUIPAAAAAABVL+8k2JhsBDutIV1lPhIY; _mkto_trk=id:309-RHV-619&token:_mch-proofpoint.com-1654502444683-74591; _gcl_au=1.1.841328466.1654502445; incap_ses_7233_177663=pMGhSYNNdTcbeUX6ocdgZA1CDmMAAAAAhccdFe2NZup03RC0p0Y97g==; ___utmvmZZVuLalI=LHucsmTcdtx; ___utmvbZZVuLalI=wZk XyAOzaly: ctc
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Etag: "1743d73f"
Last-Modified: Tue, 16 Aug 2022 23:13:16 GMT
Content-Type: text/css
Content-Length: 4399
Content-Encoding: gzip
X-Content-Type-Options: nosniff
Cache-Control: max-age=176626, public
Expires: Thu, 01 Sep 2022 18:03:43 GMT
Date: Tue, 30 Aug 2022 16:59:57 GMT
Set-Cookie: visid_incap_177663=MxaFur+FQ8GhyjTFRc4x/YyznWIAAAAAQUIPAAAAAABVL+8k2JhsBDutIV1lPhIY; expires=Tue, 29 Aug 2023 22:27:34 GMT; HttpOnly; path=/; Domain=.proofpoint.com; Secure; SameSite=None
incap_ses_7233_177663=pMGhSYNNdTcbeUX6ocdgZA1CDmMAAAAAhccdFe2NZup03RC0p0Y97g==; path=/; Domain=.proofpoint.com; Secure; SameSite=None
___utmvbZZVuLalI=a; Max-Age=0; path=/; expires=Sat, 20 Aug 2022 22:20:53 GMT
___utmvmZZVuLalI=a; Max-Age=0; path=/; expires=Sat, 20 Aug 2022 22:20:53 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-CDN: Imperva
X-Iinfo: 11-15961145-0 0CNN RT(1661878797380 44) q(0 -1 -1 -1) r(0 -1)
www.proofpoint.com/core/misc/modernizr-additional-tests.js?v=3.11.7
200 OK 411 B URL HTTP/1.1 www.proofpoint.com/core/misc/modernizr-additional-tests.js?v=3.11.7
IP
Hash aa3af04c13566633fccba9965859e5d7
34d33785157bb21d9b5a1ea6a6293012688daf1d
4ddecd024c7fbca72155d529a37cf64264a8660a9bc5a7d1ee2d849709d84b76
GET /core/misc/modernizr-additional-tests.js?v=3.11.7 HTTP/1.1
Host: www.proofpoint.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.proofpoint.com/us/wombat-security-is-now-proofpoint
Connection: keep-alive
Cookie: ppri=9B60587D-31C1-40F4-8837-D697DA8EB4CB; visid_incap_177663=MxaFur+FQ8GhyjTFRc4x/YyznWIAAAAAQUIPAAAAAABVL+8k2JhsBDutIV1lPhIY; _mkto_trk=id:309-RHV-619&token:_mch-proofpoint.com-1654502444683-74591; _gcl_au=1.1.841328466.1654502445; incap_ses_7233_177663=pMGhSYNNdTcbeUX6ocdgZA1CDmMAAAAAhccdFe2NZup03RC0p0Y97g==; ___utmvmZZVuLalI=LHucsmTcdtx; ___utmvbZZVuLalI=wZk XyAOzaly: ctc
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Last-Modified: Thu, 28 Oct 2021 00:38:28 GMT
Content-Type: application/javascript
Content-Length: 411
Content-Encoding: gzip
X-Content-Type-Options: nosniff
Cache-Control: max-age=176625, public
Expires: Thu, 01 Sep 2022 18:03:42 GMT
Date: Tue, 30 Aug 2022 16:59:57 GMT
Set-Cookie: visid_incap_177663=MxaFur+FQ8GhyjTFRc4x/YyznWIAAAAAQUIPAAAAAABVL+8k2JhsBDutIV1lPhIY; expires=Tue, 29 Aug 2023 22:27:40 GMT; HttpOnly; path=/; Domain=.proofpoint.com; Secure; SameSite=None
incap_ses_7233_177663=pMGhSYNNdTcbeUX6ocdgZA1CDmMAAAAAhccdFe2NZup03RC0p0Y97g==; path=/; Domain=.proofpoint.com; Secure; SameSite=None
___utmvbZZVuLalI=a; Max-Age=0; path=/; expires=Sat, 20 Aug 2022 22:20:53 GMT
___utmvmZZVuLalI=a; Max-Age=0; path=/; expires=Sat, 20 Aug 2022 22:20:53 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-CDN: Imperva
X-Iinfo: 8-4237991-0 0CNN RT(1661878797211 214) q(0 -1 -1 -1) r(0 -1)
www.proofpoint.com/themes/custom/proofpoint/dist/app-drupal/assets/fonts/fjalla-one-v7-latin-regular.woff
200 OK 20 kB URL HTTP/1.1 www.proofpoint.com/themes/custom/proofpoint/dist/app-drupal/assets/fonts/fjalla-one-v7-latin-regular.woff
IP
File type Web Open Font Format, TrueType, length 19976, version 1.1\012- data
Hash 7710e53ee1e24055dd9ba499766cbf2a
84b6d697b33ebfbdc7e7892d1b51fec3cc3af64b
da9b29cad35666ad35df54fc721ff8d0838660640456185a86521e6c506b81cd
GET /themes/custom/proofpoint/dist/app-drupal/assets/fonts/fjalla-one-v7-latin-regular.woff HTTP/1.1
Host: www.proofpoint.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.proofpoint.com/us/wombat-security-is-now-proofpoint
Connection: keep-alive
Cookie: ppri=9B60587D-31C1-40F4-8837-D697DA8EB4CB; visid_incap_177663=MxaFur+FQ8GhyjTFRc4x/YyznWIAAAAAQUIPAAAAAABVL+8k2JhsBDutIV1lPhIY; _mkto_trk=id:309-RHV-619&token:_mch-proofpoint.com-1654502444683-74591; _gcl_au=1.1.841328466.1654502445; incap_ses_7233_177663=pMGhSYNNdTcbeUX6ocdgZA1CDmMAAAAAhccdFe2NZup03RC0p0Y97g==; ___utmvmZZVuLalI=LHucsmTcdtx; ___utmvbZZVuLalI=wZk XyAOzaly: ctc
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Etag: "3a88d25f"
Last-Modified: Sat, 02 Jan 2021 08:56:17 GMT
Content-Length: 19976
X-Content-Type-Options: nosniff
Cache-Control: max-age=176626, public
Expires: Thu, 01 Sep 2022 18:03:43 GMT
Date: Tue, 30 Aug 2022 16:59:57 GMT
Set-Cookie: visid_incap_177663=MxaFur+FQ8GhyjTFRc4x/YyznWIAAAAAQUIPAAAAAABVL+8k2JhsBDutIV1lPhIY; expires=Tue, 29 Aug 2023 22:27:31 GMT; HttpOnly; path=/; Domain=.proofpoint.com; Secure; SameSite=None
incap_ses_7233_177663=pMGhSYNNdTcbeUX6ocdgZA1CDmMAAAAAhccdFe2NZup03RC0p0Y97g==; path=/; Domain=.proofpoint.com; Secure; SameSite=None
___utmvbZZVuLalI=a; Max-Age=0; path=/; expires=Sat, 20 Aug 2022 22:20:53 GMT
___utmvmZZVuLalI=a; Max-Age=0; path=/; expires=Sat, 20 Aug 2022 22:20:53 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-CDN: Imperva
X-Iinfo: 13-43845411-0 0CNN RT(1661878797378 40) q(0 -1 -1 -1) r(0 -1)
www.proofpoint.com/themes/custom/proofpoint/dist/app-drupal/assets/fonts/fjalla-one-v7-latin-regular.woff2
200 OK 16 kB URL HTTP/1.1 www.proofpoint.com/themes/custom/proofpoint/dist/app-drupal/assets/fonts/fjalla-one-v7-latin-regular.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 16540, version 1.0\012- data
Hash 48e76c8da8da2e695f7f6b65e5770283
f9484f6642f97c51053397e0edfc2b3de2b4d6b3
fe5f2a40422e9a55187b3204161cbce1ba1d03a2eb4fa971bd10451562fed99a
GET /themes/custom/proofpoint/dist/app-drupal/assets/fonts/fjalla-one-v7-latin-regular.woff2 HTTP/1.1
Host: www.proofpoint.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.proofpoint.com/us/wombat-security-is-now-proofpoint
Connection: keep-alive
Cookie: ppri=9B60587D-31C1-40F4-8837-D697DA8EB4CB; visid_incap_177663=MxaFur+FQ8GhyjTFRc4x/YyznWIAAAAAQUIPAAAAAABVL+8k2JhsBDutIV1lPhIY; _mkto_trk=id:309-RHV-619&token:_mch-proofpoint.com-1654502444683-74591; _gcl_au=1.1.841328466.1654502445; incap_ses_7233_177663=pMGhSYNNdTcbeUX6ocdgZA1CDmMAAAAAhccdFe2NZup03RC0p0Y97g==; ___utmvmZZVuLalI=LHucsmTcdtx; ___utmvbZZVuLalI=wZk XyAOzaly: ctc
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Etag: "80852160"
Last-Modified: Sat, 02 Jan 2021 08:56:17 GMT
Content-Length: 16540
X-Content-Type-Options: nosniff
Cache-Control: max-age=196157, public
Expires: Thu, 01 Sep 2022 23:29:14 GMT
Date: Tue, 30 Aug 2022 16:59:57 GMT
Set-Cookie: visid_incap_177663=MxaFur+FQ8GhyjTFRc4x/YyznWIAAAAAQUIPAAAAAABVL+8k2JhsBDutIV1lPhIY; expires=Tue, 29 Aug 2023 22:27:31 GMT; HttpOnly; path=/; Domain=.proofpoint.com; Secure; SameSite=None
incap_ses_7233_177663=pMGhSYNNdTcbeUX6ocdgZA1CDmMAAAAAhccdFe2NZup03RC0p0Y97g==; path=/; Domain=.proofpoint.com; Secure; SameSite=None
___utmvbZZVuLalI=a; Max-Age=0; path=/; expires=Sat, 20 Aug 2022 22:20:53 GMT
___utmvmZZVuLalI=a; Max-Age=0; path=/; expires=Sat, 20 Aug 2022 22:20:53 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-CDN: Imperva
X-Iinfo: 13-43845410-0 0CNN RT(1661878797378 41) q(0 -1 -1 -1) r(0 -1)
www.proofpoint.com/themes/custom/proofpoint/dist/app-drupal/assets/fonts/RobotoCondensed-Bold-webfont.woff
200 OK 21 kB URL HTTP/1.1 www.proofpoint.com/themes/custom/proofpoint/dist/app-drupal/assets/fonts/RobotoCondensed-Bold-webfont.woff
IP
File type Web Open Font Format, TrueType, length 21384, version 1.0\012- data
Hash e96a912a45cd4d01503ca8da609fa5fe
bb3d3d13ce9c60142f8b9252a76d7135e3dc9a95
68bf74082f8a4c49d604ea4c599e861b5dd032b1497a75231b74ca1b20853dcb
GET /themes/custom/proofpoint/dist/app-drupal/assets/fonts/RobotoCondensed-Bold-webfont.woff HTTP/1.1
Host: www.proofpoint.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.proofpoint.com/us/wombat-security-is-now-proofpoint
Connection: keep-alive
Cookie: ppri=9B60587D-31C1-40F4-8837-D697DA8EB4CB; visid_incap_177663=MxaFur+FQ8GhyjTFRc4x/YyznWIAAAAAQUIPAAAAAABVL+8k2JhsBDutIV1lPhIY; _mkto_trk=id:309-RHV-619&token:_mch-proofpoint.com-1654502444683-74591; _gcl_au=1.1.841328466.1654502445; incap_ses_7233_177663=pMGhSYNNdTcbeUX6ocdgZA1CDmMAAAAAhccdFe2NZup03RC0p0Y97g==; ___utmvmZZVuLalI=LHucsmTcdtx; ___utmvbZZVuLalI=wZk XyAOzaly: ctc
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Etag: "8df65834"
Last-Modified: Sat, 02 Jan 2021 09:53:20 GMT
Content-Length: 21384
X-Content-Type-Options: nosniff
Cache-Control: max-age=176626, public
Expires: Thu, 01 Sep 2022 18:03:43 GMT
Date: Tue, 30 Aug 2022 16:59:57 GMT
Set-Cookie: visid_incap_177663=MxaFur+FQ8GhyjTFRc4x/YyznWIAAAAAQUIPAAAAAABVL+8k2JhsBDutIV1lPhIY; expires=Tue, 29 Aug 2023 22:27:34 GMT; HttpOnly; path=/; Domain=.proofpoint.com; Secure; SameSite=None
incap_ses_7233_177663=pMGhSYNNdTcbeUX6ocdgZA1CDmMAAAAAhccdFe2NZup03RC0p0Y97g==; path=/; Domain=.proofpoint.com; Secure; SameSite=None
___utmvbZZVuLalI=a; Max-Age=0; path=/; expires=Sat, 20 Aug 2022 22:20:53 GMT
___utmvmZZVuLalI=a; Max-Age=0; path=/; expires=Sat, 20 Aug 2022 22:20:53 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-CDN: Imperva
X-Iinfo: 11-15961146-0 0CNN RT(1661878797380 42) q(0 -1 -1 -1) r(0 -1)
www.proofpoint.com/sites/default/files/js/js_KbN0hvotPjzjXVR-l8Vwhc-hznxyyVmRj4dkMoweSFY.js
200 OK 54 kB URL HTTP/1.1 www.proofpoint.com/sites/default/files/js/js_KbN0hvotPjzjXVR-l8Vwhc-hznxyyVmRj4dkMoweSFY.js
IP
File type Unicode text, UTF-8 text, with very long lines (40218)
Hash cf9664faf6e83b7994b0c4fd0a085c3e
b59a077fb8451936df5cc40e436e31920139d722
2c4f190057080eedfa5790ba467b297bc8c69ed2fe958877f97bc3e5507a8fe6
GET /sites/default/files/js/js_KbN0hvotPjzjXVR-l8Vwhc-hznxyyVmRj4dkMoweSFY.js HTTP/1.1
Host: www.proofpoint.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.proofpoint.com/us/wombat-security-is-now-proofpoint
Connection: keep-alive
Cookie: ppri=9B60587D-31C1-40F4-8837-D697DA8EB4CB; visid_incap_177663=MxaFur+FQ8GhyjTFRc4x/YyznWIAAAAAQUIPAAAAAABVL+8k2JhsBDutIV1lPhIY; _mkto_trk=id:309-RHV-619&token:_mch-proofpoint.com-1654502444683-74591; _gcl_au=1.1.841328466.1654502445; incap_ses_7233_177663=pMGhSYNNdTcbeUX6ocdgZA1CDmMAAAAAhccdFe2NZup03RC0p0Y97g==; ___utmvmZZVuLalI=LHucsmTcdtx; ___utmvbZZVuLalI=wZk XyAOzaly: ctc
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Etag: "023f1ecc"
Last-Modified: Tue, 23 Aug 2022 23:14:15 GMT
Content-Type: text/javascript
Content-Length: 54269
Content-Encoding: gzip
X-Content-Type-Options: nosniff
Cache-Control: max-age=629648, public
Expires: Tue, 06 Sep 2022 23:54:05 GMT
Date: Tue, 30 Aug 2022 16:59:57 GMT
Set-Cookie: visid_incap_177663=MxaFur+FQ8GhyjTFRc4x/YyznWIAAAAAQUIPAAAAAABVL+8k2JhsBDutIV1lPhIY; expires=Tue, 29 Aug 2023 22:27:34 GMT; HttpOnly; path=/; Domain=.proofpoint.com; Secure; SameSite=None
incap_ses_7233_177663=pMGhSYNNdTcbeUX6ocdgZA1CDmMAAAAAhccdFe2NZup03RC0p0Y97g==; path=/; Domain=.proofpoint.com; Secure; SameSite=None
___utmvbZZVuLalI=a; Max-Age=0; path=/; expires=Sat, 20 Aug 2022 22:20:53 GMT
___utmvmZZVuLalI=a; Max-Age=0; path=/; expires=Sat, 20 Aug 2022 22:20:53 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-CDN: Imperva
X-Iinfo: 11-15961145-0 0CNN RT(1661878797380 58) q(0 -1 -1 -1) r(0 -1)
www.proofpoint.com/sites/default/files/js/js_Mypic69v3AM_k2tnVLPIrzNXY0af6UrC_DJGJz1MY-A.js
200 OK 2.2 kB URL HTTP/1.1 www.proofpoint.com/sites/default/files/js/js_Mypic69v3AM_k2tnVLPIrzNXY0af6UrC_DJGJz1MY-A.js
IP
File type Unicode text, UTF-8 text, with very long lines (367)
Hash e5102d7d541dcac9bb7efcf4acaa040a
3c95645b2875d832199116302c727c3797f58676
88f1ea823ecee5f53498347c80d566a18317be0929698902b2247206dd3d0d28
GET /sites/default/files/js/js_Mypic69v3AM_k2tnVLPIrzNXY0af6UrC_DJGJz1MY-A.js HTTP/1.1
Host: www.proofpoint.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.proofpoint.com/us/wombat-security-is-now-proofpoint
Connection: keep-alive
Cookie: ppri=9B60587D-31C1-40F4-8837-D697DA8EB4CB; visid_incap_177663=MxaFur+FQ8GhyjTFRc4x/YyznWIAAAAAQUIPAAAAAABVL+8k2JhsBDutIV1lPhIY; _mkto_trk=id:309-RHV-619&token:_mch-proofpoint.com-1654502444683-74591; _gcl_au=1.1.841328466.1654502445; incap_ses_7233_177663=pMGhSYNNdTcbeUX6ocdgZA1CDmMAAAAAhccdFe2NZup03RC0p0Y97g==; ___utmvmZZVuLalI=LHucsmTcdtx; ___utmvbZZVuLalI=wZk XyAOzaly: ctc
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Etag: "6e3ea0aa"
Last-Modified: Thu, 21 Jul 2022 23:11:36 GMT
Content-Type: text/javascript
Content-Length: 2188
Content-Encoding: gzip
X-Content-Type-Options: nosniff
Cache-Control: max-age=176627, public
Expires: Thu, 01 Sep 2022 18:03:44 GMT
Date: Tue, 30 Aug 2022 16:59:57 GMT
Set-Cookie: visid_incap_177663=MxaFur+FQ8GhyjTFRc4x/YyznWIAAAAAQUIPAAAAAABVL+8k2JhsBDutIV1lPhIY; expires=Tue, 29 Aug 2023 22:27:40 GMT; HttpOnly; path=/; Domain=.proofpoint.com; Secure; SameSite=None
incap_ses_7233_177663=pMGhSYNNdTcbeUX6ocdgZA1CDmMAAAAAhccdFe2NZup03RC0p0Y97g==; path=/; Domain=.proofpoint.com; Secure; SameSite=None
___utmvbZZVuLalI=a; Max-Age=0; path=/; expires=Sat, 20 Aug 2022 22:20:53 GMT
___utmvmZZVuLalI=a; Max-Age=0; path=/; expires=Sat, 20 Aug 2022 22:20:53 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-CDN: Imperva
X-Iinfo: 8-4237991-0 0CNN RT(1661878797211 247) q(0 -1 -1 -1) r(0 -1)
www.proofpoint.com/sites/default/files/css/css_QZhXQTKCC3TeU0xhJTVTRhS8n_QjhEZPfy19JtBC7es.css
200 OK 1.2 MB URL HTTP/1.1 www.proofpoint.com/sites/default/files/css/css_QZhXQTKCC3TeU0xhJTVTRhS8n_QjhEZPfy19JtBC7es.css
IP
File type ASCII text, with very long lines (64382)
Size 1.2 MB (1188944 bytes)
Hash afe1fe19c2068224076355d15dedde82
3e4c2f3ffac6a19dded45ae9766318d501c2cbce
9a26586f77af794b428f341dfad11b124b04ec4be2ca8b522b2e61ea96f8e589
GET /sites/default/files/css/css_QZhXQTKCC3TeU0xhJTVTRhS8n_QjhEZPfy19JtBC7es.css HTTP/1.1
Host: www.proofpoint.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.proofpoint.com/us/wombat-security-is-now-proofpoint
Connection: keep-alive
Cookie: ppri=9B60587D-31C1-40F4-8837-D697DA8EB4CB; visid_incap_177663=MxaFur+FQ8GhyjTFRc4x/YyznWIAAAAAQUIPAAAAAABVL+8k2JhsBDutIV1lPhIY; _mkto_trk=id:309-RHV-619&token:_mch-proofpoint.com-1654502444683-74591; _gcl_au=1.1.841328466.1654502445; incap_ses_7233_177663=pMGhSYNNdTcbeUX6ocdgZA1CDmMAAAAAhccdFe2NZup03RC0p0Y97g==; ___utmvmZZVuLalI=LHucsmTcdtx; ___utmvbZZVuLalI=wZk XyAOzaly: ctc
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Etag: "7385435b"
Last-Modified: Thu, 25 Aug 2022 23:09:14 GMT
Content-Type: text/css
Content-Length: 1188944
Content-Encoding: gzip
X-Content-Type-Options: nosniff
Cache-Control: max-age=804635, public
Expires: Fri, 09 Sep 2022 00:30:32 GMT
Date: Tue, 30 Aug 2022 16:59:57 GMT
Set-Cookie: visid_incap_177663=MxaFur+FQ8GhyjTFRc4x/YyznWIAAAAAQUIPAAAAAABVL+8k2JhsBDutIV1lPhIY; expires=Tue, 29 Aug 2023 22:27:31 GMT; HttpOnly; path=/; Domain=.proofpoint.com; Secure; SameSite=None
incap_ses_7233_177663=pMGhSYNNdTcbeUX6ocdgZA1CDmMAAAAAhccdFe2NZup03RC0p0Y97g==; path=/; Domain=.proofpoint.com; Secure; SameSite=None
___utmvbZZVuLalI=a; Max-Age=0; path=/; expires=Sat, 20 Aug 2022 22:20:53 GMT
___utmvmZZVuLalI=a; Max-Age=0; path=/; expires=Sat, 20 Aug 2022 22:20:53 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-CDN: Imperva
X-Iinfo: 13-43845412-0 0CNN RT(1661878797380 45) q(0 -1 -1 -1) r(0 -1)
www.proofpoint.com/sites/default/files/js/js_SCT-JsP2mkpph2ZIircDzug0gE-DGick3vwhaHmy7mg.js
200 OK 446 kB URL HTTP/1.1 www.proofpoint.com/sites/default/files/js/js_SCT-JsP2mkpph2ZIircDzug0gE-DGick3vwhaHmy7mg.js
IP
File type Unicode text, UTF-8 text, with very long lines (4164)
Size 446 kB (446112 bytes)
Hash 664b0ddbef3c8afaf61b2205acbee487
70e4012a35685a146a0a895fcb0c8d0369535bad
a2c496b6dac4bc90177f00cda21bed78d5c6087de26e3ffa5c8354aa86989e72
GET /sites/default/files/js/js_SCT-JsP2mkpph2ZIircDzug0gE-DGick3vwhaHmy7mg.js HTTP/1.1
Host: www.proofpoint.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.proofpoint.com/us/wombat-security-is-now-proofpoint
Connection: keep-alive
Cookie: ppri=9B60587D-31C1-40F4-8837-D697DA8EB4CB; visid_incap_177663=MxaFur+FQ8GhyjTFRc4x/YyznWIAAAAAQUIPAAAAAABVL+8k2JhsBDutIV1lPhIY; _mkto_trk=id:309-RHV-619&token:_mch-proofpoint.com-1654502444683-74591; _gcl_au=1.1.841328466.1654502445; incap_ses_7233_177663=pMGhSYNNdTcbeUX6ocdgZA1CDmMAAAAAhccdFe2NZup03RC0p0Y97g==; ___utmvmZZVuLalI=LHucsmTcdtx; ___utmvbZZVuLalI=wZk XyAOzaly: ctc
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Etag: "67ede49d"
Last-Modified: Thu, 25 Aug 2022 23:09:50 GMT
Content-Type: text/javascript
Content-Length: 446112
Content-Encoding: gzip
X-Content-Type-Options: nosniff
Cache-Control: max-age=810098, public
Expires: Fri, 09 Sep 2022 02:01:35 GMT
Date: Tue, 30 Aug 2022 16:59:57 GMT
Set-Cookie: visid_incap_177663=MxaFur+FQ8GhyjTFRc4x/YyznWIAAAAAQUIPAAAAAABVL+8k2JhsBDutIV1lPhIY; expires=Tue, 29 Aug 2023 22:27:31 GMT; HttpOnly; path=/; Domain=.proofpoint.com; Secure; SameSite=None
incap_ses_7233_177663=pMGhSYNNdTcbeUX6ocdgZA1CDmMAAAAAhccdFe2NZup03RC0p0Y97g==; path=/; Domain=.proofpoint.com; Secure; SameSite=None
___utmvbZZVuLalI=a; Max-Age=0; path=/; expires=Sat, 20 Aug 2022 22:20:53 GMT
___utmvmZZVuLalI=a; Max-Age=0; path=/; expires=Sat, 20 Aug 2022 22:20:53 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-CDN: Imperva
X-Iinfo: 13-43845411-0 0CNN RT(1661878797378 80) q(0 -1 -1 -1) r(0 -1)
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash be11ccf526168e0fc95063341bef3032
0cb5d6ed3e9be87827b56457a9ce76adc6818c29
48a5d2bfda785095cbdeaba9987a32a86ff0f1d2aa804d7a5cbcb644c57d409e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 30 Aug 2022 16:59:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 0982b9e784a0a990d6318c92e33860a1
764377c393017e86d98a696da455509cba1806ac
27a19ec4ca0a052faface8ad45dca4d9a4a739c658d10f0e693aea065bdc607f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 30 Aug 2022 16:59:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
munchkin.marketo.net/munchkin.js
200 OK 740 B URL HTTP/1.1 munchkin.marketo.net/munchkin.js
IP
File type ASCII text, with very long lines (508)
Hash 25834c70cb507806e9da7f7b700d9cd7
8ab36c6c24a11f422d2bae4eed8e903901e87912
9cc4d914d26d3dce15b93b69d6175684a77d1fda1419a6fb95ab81996646fdff
GET /munchkin.js HTTP/1.1
Host: munchkin.marketo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.proofpoint.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Type: application/x-javascript
ETag: "652cf747f68f64e15276c347eb3aef37:1661464511.126488"
Last-Modified: Thu, 25 Aug 2022 21:55:11 GMT
Server: AkamaiNetStorage
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Tue, 30 Aug 2022 16:59:58 GMT
Content-Length: 740
Connection: keep-alive
P3P: policyref="http://www.marketo.com/w3c/p3p.xml", CP="NOI DSP COR NID CURi OUR NOR"
www.googleadservices.com/pagead/conversion.js
200 OK 17 kB URL HTTP/2 www.googleadservices.com/pagead/conversion.js
IP
File type ASCII text, with very long lines (1952)
Hash 2c26ce3715fa6c6a679d87314f70554c
f467520f68fa8d79ae6089e3cc58f70b671f3c18
651b4d861db24281be0c9b2e01cd3f49386f7937504d1219c9183a17e67bfb41
GET /pagead/conversion.js HTTP/1.1
Host: www.googleadservices.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.proofpoint.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
date: Tue, 30 Aug 2022 16:59:58 GMT
expires: Tue, 30 Aug 2022 16:59:58 GMT
cache-control: private, max-age=3600
content-type: text/javascript; charset=UTF-8
etag: 6623093480649364478
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 17446
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.googleoptimize.com/optimize.js?id=GTM-KKGL4NZ
200 OK 41 kB URL HTTP/2 www.googleoptimize.com/optimize.js?id=GTM-KKGL4NZ
IP
File type ASCII text, with very long lines (1615)
Hash a7b92b5d3955a9d345a08f4779745069
e1bcf0edf22271a87d2888dabd9d2cc70ade3486
3affd1741d6a42f9f47c2f16b43fbfcf8bb485265450ad0e2483368338da17c4
GET /optimize.js?id=GTM-KKGL4NZ HTTP/1.1
Host: www.googleoptimize.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.proofpoint.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 30 Aug 2022 16:59:58 GMT
expires: Tue, 30 Aug 2022 16:59:58 GMT
cache-control: private, max-age=900
last-modified: Tue, 30 Aug 2022 16:17:44 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 41264
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 0982b9e784a0a990d6318c92e33860a1
764377c393017e86d98a696da455509cba1806ac
27a19ec4ca0a052faface8ad45dca4d9a4a739c658d10f0e693aea065bdc607f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 30 Aug 2022 16:59:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, Alert, Cache-Control, Pragma, Backoff, Last-Modified, ETag, Expires, Content-Length, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600
Date: Tue, 30 Aug 2022 16:17:12 GMT
Expires: Tue, 30 Aug 2022 16:25:54 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 1d8cf7c8865ed1078c19a98771ad34ca.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: Tt0zhq4OPTvvftBAT36cEZkzszpU8qziTCoWxWO_BpRTtyqj4-uLew==
Age: 2566
www.proofpoint.com/sites/default/files/puzzle-piece.svg
200 OK 942 B URL HTTP/1.1 www.proofpoint.com/sites/default/files/puzzle-piece.svg
IP
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash e99f8d36bd443de2ed43b0a3bb40da66
cc1dfd763e1f15c65a6691ea447a636f6d862fb7
36e17fd68a00354e86416fd6883a21c3bf0c9afcd46faac093a2278b384fee86
GET /sites/default/files/puzzle-piece.svg HTTP/1.1
Host: www.proofpoint.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.proofpoint.com/us/wombat-security-is-now-proofpoint
Connection: keep-alive
Cookie: ppri=9B60587D-31C1-40F4-8837-D697DA8EB4CB; visid_incap_177663=MxaFur+FQ8GhyjTFRc4x/YyznWIAAAAAQUIPAAAAAABVL+8k2JhsBDutIV1lPhIY; _mkto_trk=id:309-RHV-619&token:_mch-proofpoint.com-1654502444683-74591; _gcl_au=1.1.841328466.1654502445; incap_ses_7233_177663=pMGhSYNNdTcbeUX6ocdgZA1CDmMAAAAAhccdFe2NZup03RC0p0Y97g==; ___utmvmZZVuLalI=LHucsmTcdtx; ___utmvbZZVuLalI=wZk XyAOzaly: ctc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Etag: "a28053e8"
Last-Modified: Sat, 07 Mar 2020 01:07:57 GMT
Content-Type: image/svg+xml
Content-Length: 942
Content-Encoding: gzip
X-Content-Type-Options: nosniff
Cache-Control: max-age=529277, public
Expires: Mon, 05 Sep 2022 20:01:14 GMT
Date: Tue, 30 Aug 2022 16:59:57 GMT
Set-Cookie: visid_incap_177663=MxaFur+FQ8GhyjTFRc4x/YyznWIAAAAAQUIPAAAAAABVL+8k2JhsBDutIV1lPhIY; expires=Tue, 29 Aug 2023 22:27:34 GMT; HttpOnly; path=/; Domain=.proofpoint.com; Secure; SameSite=None
incap_ses_7233_177663=pMGhSYNNdTcbeUX6ocdgZA1CDmMAAAAAhccdFe2NZup03RC0p0Y97g==; path=/; Domain=.proofpoint.com; Secure; SameSite=None
___utmvbZZVuLalI=a; Max-Age=0; path=/; expires=Sat, 20 Aug 2022 22:20:53 GMT
___utmvmZZVuLalI=a; Max-Age=0; path=/; expires=Sat, 20 Aug 2022 22:20:53 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-CDN: Imperva
X-Iinfo: 11-15961145-0 0CNN RT(1661878797380 464) q(0 -1 -1 -1) r(0 -1)
www.proofpoint.com/sites/default/files/globe.svg
200 OK 1.9 kB URL HTTP/1.1 www.proofpoint.com/sites/default/files/globe.svg
IP
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 8b9cacf21d5541d90fd47ebfe9248b14
70e4343f2b8f82c97d45e12ee267a66db5cef0dd
e2467836f0119f69b0f2be968e398bb6ca2f895c322241193428d677bf32ce05
GET /sites/default/files/globe.svg HTTP/1.1
Host: www.proofpoint.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.proofpoint.com/us/wombat-security-is-now-proofpoint
Connection: keep-alive
Cookie: ppri=9B60587D-31C1-40F4-8837-D697DA8EB4CB; visid_incap_177663=MxaFur+FQ8GhyjTFRc4x/YyznWIAAAAAQUIPAAAAAABVL+8k2JhsBDutIV1lPhIY; _mkto_trk=id:309-RHV-619&token:_mch-proofpoint.com-1654502444683-74591; _gcl_au=1.1.841328466.1654502445; incap_ses_7233_177663=pMGhSYNNdTcbeUX6ocdgZA1CDmMAAAAAhccdFe2NZup03RC0p0Y97g==; ___utmvmZZVuLalI=LHucsmTcdtx; ___utmvbZZVuLalI=wZk XyAOzaly: ctc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Etag: "432511db"
Last-Modified: Sat, 07 Mar 2020 01:07:57 GMT
Content-Type: image/svg+xml
Content-Length: 1939
Content-Encoding: gzip
X-Content-Type-Options: nosniff
Cache-Control: max-age=529277, public
Expires: Mon, 05 Sep 2022 20:01:14 GMT
Date: Tue, 30 Aug 2022 16:59:57 GMT
Set-Cookie: visid_incap_177663=MxaFur+FQ8GhyjTFRc4x/YyznWIAAAAAQUIPAAAAAABVL+8k2JhsBDutIV1lPhIY; expires=Tue, 29 Aug 2023 22:27:31 GMT; HttpOnly; path=/; Domain=.proofpoint.com; Secure; SameSite=None
incap_ses_7233_177663=pMGhSYNNdTcbeUX6ocdgZA1CDmMAAAAAhccdFe2NZup03RC0p0Y97g==; path=/; Domain=.proofpoint.com; Secure; SameSite=None
___utmvbZZVuLalI=a; Max-Age=0; path=/; expires=Sat, 20 Aug 2022 22:20:53 GMT
___utmvmZZVuLalI=a; Max-Age=0; path=/; expires=Sat, 20 Aug 2022 22:20:53 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-CDN: Imperva
X-Iinfo: 13-43845412-0 0CNN RT(1661878797380 464) q(0 -1 -1 -1) r(0 -1)
www.proofpoint.com/sites/default/files/pie-chart.svg
200 OK 545 B URL HTTP/1.1 www.proofpoint.com/sites/default/files/pie-chart.svg
IP
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a5a8a67d22edbc08cff09d7a285d97ce
dd973ddac96e7839c40a4bf9439d9bfbbeb1487a
88132ff156c32e4c63bce7189597e9cdba468b9c3faea759cc627b1a70ff924b
GET /sites/default/files/pie-chart.svg HTTP/1.1
Host: www.proofpoint.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.proofpoint.com/us/wombat-security-is-now-proofpoint
Connection: keep-alive
Cookie: ppri=9B60587D-31C1-40F4-8837-D697DA8EB4CB; visid_incap_177663=MxaFur+FQ8GhyjTFRc4x/YyznWIAAAAAQUIPAAAAAABVL+8k2JhsBDutIV1lPhIY; _mkto_trk=id:309-RHV-619&token:_mch-proofpoint.com-1654502444683-74591; _gcl_au=1.1.841328466.1654502445; incap_ses_7233_177663=pMGhSYNNdTcbeUX6ocdgZA1CDmMAAAAAhccdFe2NZup03RC0p0Y97g==; ___utmvmZZVuLalI=LHucsmTcdtx; ___utmvbZZVuLalI=wZk XyAOzaly: ctc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Etag: "83efa188"
Last-Modified: Sat, 07 Mar 2020 01:07:57 GMT
Content-Type: image/svg+xml
Content-Length: 545
Content-Encoding: gzip
X-Content-Type-Options: nosniff
Cache-Control: max-age=529277, public
Expires: Mon, 05 Sep 2022 20:01:14 GMT
Date: Tue, 30 Aug 2022 16:59:57 GMT
Set-Cookie: visid_incap_177663=MxaFur+FQ8GhyjTFRc4x/YyznWIAAAAAQUIPAAAAAABVL+8k2JhsBDutIV1lPhIY; expires=Tue, 29 Aug 2023 22:27:40 GMT; HttpOnly; path=/; Domain=.proofpoint.com; Secure; SameSite=None
incap_ses_7233_177663=pMGhSYNNdTcbeUX6ocdgZA1CDmMAAAAAhccdFe2NZup03RC0p0Y97g==; path=/; Domain=.proofpoint.com; Secure; SameSite=None
___utmvbZZVuLalI=a; Max-Age=0; path=/; expires=Sat, 20 Aug 2022 22:20:53 GMT
___utmvmZZVuLalI=a; Max-Age=0; path=/; expires=Sat, 20 Aug 2022 22:20:53 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-CDN: Imperva
X-Iinfo: 8-4237991-0 0CNN RT(1661878797211 634) q(0 -1 -1 -1) r(0 -1)
www.proofpoint.com/themes/custom/proofpoint/dist/app-drupal/assets/logo-reg.svg
200 OK 1.1 kB URL HTTP/1.1 www.proofpoint.com/themes/custom/proofpoint/dist/app-drupal/assets/logo-reg.svg
IP
File type SVG Scalable Vector Graphics image\012- HTML document text\012- HTML document, ASCII text, with very long lines (486)
Hash d542a1d033891b3a642964393a989168
6664864cc1571005cae8a8a3a19e0f8fc30ff6c7
20a046be6ae24953dca16c6b3e26bdb67e39df34782a0183fee58459184a930c
GET /themes/custom/proofpoint/dist/app-drupal/assets/logo-reg.svg HTTP/1.1
Host: www.proofpoint.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.proofpoint.com/us/wombat-security-is-now-proofpoint
Connection: keep-alive
Cookie: ppri=9B60587D-31C1-40F4-8837-D697DA8EB4CB; visid_incap_177663=MxaFur+FQ8GhyjTFRc4x/YyznWIAAAAAQUIPAAAAAABVL+8k2JhsBDutIV1lPhIY; _mkto_trk=id:309-RHV-619&token:_mch-proofpoint.com-1654502444683-74591; _gcl_au=1.1.841328466.1654502445; incap_ses_7233_177663=pMGhSYNNdTcbeUX6ocdgZA1CDmMAAAAAhccdFe2NZup03RC0p0Y97g==; ___utmvmZZVuLalI=LHucsmTcdtx; ___utmvbZZVuLalI=wZk XyAOzaly: ctc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Etag: "13fdd2ef"
Last-Modified: Sat, 02 Jan 2021 08:56:17 GMT
Content-Type: image/svg+xml
Content-Length: 1124
Content-Encoding: gzip
X-Content-Type-Options: nosniff
Cache-Control: max-age=196154, public
Expires: Thu, 01 Sep 2022 23:29:11 GMT
Date: Tue, 30 Aug 2022 16:59:57 GMT
Set-Cookie: visid_incap_177663=MxaFur+FQ8GhyjTFRc4x/YyznWIAAAAAQUIPAAAAAABVL+8k2JhsBDutIV1lPhIY; expires=Tue, 29 Aug 2023 22:27:31 GMT; HttpOnly; path=/; Domain=.proofpoint.com; Secure; SameSite=None
incap_ses_7233_177663=pMGhSYNNdTcbeUX6ocdgZA1CDmMAAAAAhccdFe2NZup03RC0p0Y97g==; path=/; Domain=.proofpoint.com; Secure; SameSite=None
___utmvbZZVuLalI=a; Max-Age=0; path=/; expires=Sat, 20 Aug 2022 22:20:53 GMT
___utmvmZZVuLalI=a; Max-Age=0; path=/; expires=Sat, 20 Aug 2022 22:20:53 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-CDN: Imperva
X-Iinfo: 13-43845411-0 0CNN RT(1661878797378 468) q(0 -1 -1 -1) r(0 -1)
www.proofpoint.com/sites/default/files/headphones.svg
200 OK 587 B URL HTTP/1.1 www.proofpoint.com/sites/default/files/headphones.svg
IP
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 0245bff1e735c1de24b6c4695b5ea2c9
8dfdd69a3af842cc044d490d5daa04b389529440
32fe3193d3028b423ea7fffe711efb4b81e6c2e46899c2453fe7902c0572c320
GET /sites/default/files/headphones.svg HTTP/1.1
Host: www.proofpoint.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.proofpoint.com/us/wombat-security-is-now-proofpoint
Connection: keep-alive
Cookie: ppri=9B60587D-31C1-40F4-8837-D697DA8EB4CB; visid_incap_177663=MxaFur+FQ8GhyjTFRc4x/YyznWIAAAAAQUIPAAAAAABVL+8k2JhsBDutIV1lPhIY; _mkto_trk=id:309-RHV-619&token:_mch-proofpoint.com-1654502444683-74591; _gcl_au=1.1.841328466.1654502445; incap_ses_7233_177663=pMGhSYNNdTcbeUX6ocdgZA1CDmMAAAAAhccdFe2NZup03RC0p0Y97g==; ___utmvmZZVuLalI=LHucsmTcdtx; ___utmvbZZVuLalI=wZk XyAOzaly: ctc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Etag: "4c27374d"
Last-Modified: Sat, 07 Mar 2020 01:07:56 GMT
Content-Type: image/svg+xml
Content-Length: 587
Content-Encoding: gzip
X-Content-Type-Options: nosniff
Cache-Control: max-age=529277, public
Expires: Mon, 05 Sep 2022 20:01:14 GMT
Date: Tue, 30 Aug 2022 16:59:57 GMT
Set-Cookie: visid_incap_177663=MxaFur+FQ8GhyjTFRc4x/YyznWIAAAAAQUIPAAAAAABVL+8k2JhsBDutIV1lPhIY; expires=Tue, 29 Aug 2023 22:27:34 GMT; HttpOnly; path=/; Domain=.proofpoint.com; Secure; SameSite=None
incap_ses_7233_177663=pMGhSYNNdTcbeUX6ocdgZA1CDmMAAAAAhccdFe2NZup03RC0p0Y97g==; path=/; Domain=.proofpoint.com; Secure; SameSite=None
___utmvbZZVuLalI=a; Max-Age=0; path=/; expires=Sat, 20 Aug 2022 22:20:53 GMT
___utmvmZZVuLalI=a; Max-Age=0; path=/; expires=Sat, 20 Aug 2022 22:20:53 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-CDN: Imperva
X-Iinfo: 11-15961146-0 0CNN RT(1661878797380 466) q(0 -1 -1 -1) r(0 -1)
www.proofpoint.com/sites/default/files/envelope.svg
200 OK 767 B URL HTTP/1.1 www.proofpoint.com/sites/default/files/envelope.svg
IP
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash c73ce303b098d88d42069923fe6acfb9
ea4251ff3de65d17979fcd4c38ba6ec0fe62f50e
db0a486cf987ead41b2a445f1c9ac254f040d3d4e9c8b8fdea41136c31ca79dd
GET /sites/default/files/envelope.svg HTTP/1.1
Host: www.proofpoint.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.proofpoint.com/us/wombat-security-is-now-proofpoint
Connection: keep-alive
Cookie: ppri=9B60587D-31C1-40F4-8837-D697DA8EB4CB; visid_incap_177663=MxaFur+FQ8GhyjTFRc4x/YyznWIAAAAAQUIPAAAAAABVL+8k2JhsBDutIV1lPhIY; _mkto_trk=id:309-RHV-619&token:_mch-proofpoint.com-1654502444683-74591; _gcl_au=1.1.841328466.1654502445; incap_ses_7233_177663=pMGhSYNNdTcbeUX6ocdgZA1CDmMAAAAAhccdFe2NZup03RC0p0Y97g==; ___utmvmZZVuLalI=LHucsmTcdtx; ___utmvbZZVuLalI=wZk XyAOzaly: ctc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Etag: "d52142c8"
Last-Modified: Sat, 07 Mar 2020 01:07:56 GMT
Content-Type: image/svg+xml
Content-Length: 767
Content-Encoding: gzip
X-Content-Type-Options: nosniff
Cache-Control: max-age=529277, public
Expires: Mon, 05 Sep 2022 20:01:14 GMT
Date: Tue, 30 Aug 2022 16:59:57 GMT
Set-Cookie: visid_incap_177663=MxaFur+FQ8GhyjTFRc4x/YyznWIAAAAAQUIPAAAAAABVL+8k2JhsBDutIV1lPhIY; expires=Tue, 29 Aug 2023 22:27:31 GMT; HttpOnly; path=/; Domain=.proofpoint.com; Secure; SameSite=None
incap_ses_7233_177663=pMGhSYNNdTcbeUX6ocdgZA1CDmMAAAAAhccdFe2NZup03RC0p0Y97g==; path=/; Domain=.proofpoint.com; Secure; SameSite=None
___utmvbZZVuLalI=a; Max-Age=0; path=/; expires=Sat, 20 Aug 2022 22:20:53 GMT
___utmvmZZVuLalI=a; Max-Age=0; path=/; expires=Sat, 20 Aug 2022 22:20:53 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-CDN: Imperva
X-Iinfo: 13-43845410-0 0CNN RT(1661878797378 470) q(0 -1 -1 -1) r(0 -1)
www.proofpoint.com/sites/default/files/lightbulb.svg
200 OK 787 B URL HTTP/1.1 www.proofpoint.com/sites/default/files/lightbulb.svg
IP
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 320b0d977da094f71b0e9a3260245a3c
cbfd220c4e403188d51f1c71f54322ebc9f66a9a
497c272b8d7a948fff0220facfb5492571d576c8eec068fc4c83932bc742b8f9
GET /sites/default/files/lightbulb.svg HTTP/1.1
Host: www.proofpoint.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.proofpoint.com/us/wombat-security-is-now-proofpoint
Connection: keep-alive
Cookie: ppri=9B60587D-31C1-40F4-8837-D697DA8EB4CB; visid_incap_177663=MxaFur+FQ8GhyjTFRc4x/YyznWIAAAAAQUIPAAAAAABVL+8k2JhsBDutIV1lPhIY; _mkto_trk=id:309-RHV-619&token:_mch-proofpoint.com-1654502444683-74591; _gcl_au=1.1.841328466.1654502445; incap_ses_7233_177663=pMGhSYNNdTcbeUX6ocdgZA1CDmMAAAAAhccdFe2NZup03RC0p0Y97g==; ___utmvmZZVuLalI=LHucsmTcdtx; ___utmvbZZVuLalI=wZk XyAOzaly: ctc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Etag: "e3880a8a"
Last-Modified: Sat, 07 Mar 2020 01:07:57 GMT
Content-Type: image/svg+xml
Content-Length: 787
Content-Encoding: gzip
X-Content-Type-Options: nosniff
Cache-Control: max-age=529277, public
Expires: Mon, 05 Sep 2022 20:01:14 GMT
Date: Tue, 30 Aug 2022 16:59:57 GMT
Set-Cookie: visid_incap_177663=MxaFur+FQ8GhyjTFRc4x/YyznWIAAAAAQUIPAAAAAABVL+8k2JhsBDutIV1lPhIY; expires=Tue, 29 Aug 2023 22:27:31 GMT; HttpOnly; path=/; Domain=.proofpoint.com; Secure; SameSite=None
incap_ses_7233_177663=pMGhSYNNdTcbeUX6ocdgZA1CDmMAAAAAhccdFe2NZup03RC0p0Y97g==; path=/; Domain=.proofpoint.com; Secure; SameSite=None
___utmvbZZVuLalI=a; Max-Age=0; path=/; expires=Sat, 20 Aug 2022 22:20:53 GMT
___utmvmZZVuLalI=a; Max-Age=0; path=/; expires=Sat, 20 Aug 2022 22:20:53 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-CDN: Imperva
X-Iinfo: 13-43845412-0 0CNN RT(1661878797380 475) q(0 -1 -1 -1) r(0 -1)
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 6a310ffd228695926d686df060437f9b
2ebe10b3f16788251778346e56535d9a957fd573
3742d6514f0c44b7664a651175308ac7e3c7d4ceb1518b90762510f55b167b41
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 30 Aug 2022 16:59:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.proofpoint.com/sites/default/files/nav-promo-images/ransomware-nav-promo.png
200 OK 622 kB URL HTTP/1.1 www.proofpoint.com/sites/default/files/nav-promo-images/ransomware-nav-promo.png
IP
File type PNG image data, 696 x 708, 8-bit/color RGB, non-interlaced\012- data
Size 622 kB (621607 bytes)
Hash 27b0d68be693f778515ed791b33dc61c
9a8b1b9c0aaab098492d2faa589c335cb474a35f
9732077979c7e132e29da395c2788f43f6dd4ab3020b0c0c539744be21339507
GET /sites/default/files/nav-promo-images/ransomware-nav-promo.png HTTP/1.1
Host: www.proofpoint.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.proofpoint.com/us/wombat-security-is-now-proofpoint
Connection: keep-alive
Cookie: ppri=9B60587D-31C1-40F4-8837-D697DA8EB4CB; visid_incap_177663=MxaFur+FQ8GhyjTFRc4x/YyznWIAAAAAQUIPAAAAAABVL+8k2JhsBDutIV1lPhIY; _mkto_trk=id:309-RHV-619&token:_mch-proofpoint.com-1654502444683-74591; _gcl_au=1.1.841328466.1654502445; incap_ses_7233_177663=pMGhSYNNdTcbeUX6ocdgZA1CDmMAAAAAhccdFe2NZup03RC0p0Y97g==; ___utmvmZZVuLalI=LHucsmTcdtx; ___utmvbZZVuLalI=wZk XyAOzaly: ctc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Etag: "7124de60"
Last-Modified: Sat, 22 Jan 2022 06:01:51 GMT
Content-Type: image/png
Content-Length: 621607
X-Content-Type-Options: nosniff
Cache-Control: max-age=176627, public
Expires: Thu, 01 Sep 2022 18:03:44 GMT
Date: Tue, 30 Aug 2022 16:59:57 GMT
Set-Cookie: visid_incap_177663=MxaFur+FQ8GhyjTFRc4x/YyznWIAAAAAQUIPAAAAAABVL+8k2JhsBDutIV1lPhIY; expires=Tue, 29 Aug 2023 22:27:34 GMT; HttpOnly; path=/; Domain=.proofpoint.com; Secure; SameSite=None
incap_ses_7233_177663=pMGhSYNNdTcbeUX6ocdgZA1CDmMAAAAAhccdFe2NZup03RC0p0Y97g==; path=/; Domain=.proofpoint.com; Secure; SameSite=None
___utmvbZZVuLalI=a; Max-Age=0; path=/; expires=Sat, 20 Aug 2022 22:20:53 GMT
___utmvmZZVuLalI=a; Max-Age=0; path=/; expires=Sat, 20 Aug 2022 22:20:53 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-CDN: Imperva
X-Iinfo: 11-15961145-0 0CNN RT(1661878797380 475) q(0 -1 -1 -1) r(0 -1)
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash fe244465a99d48f257a3dda7ab28c6b8
69c89374520ca54adda7fd15ccb069def5fb3663
8f9938ffef09d02563d617ac9ff1ce97b05c5bf52b64f6724b9f19a5e90965f9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 30 Aug 2022 16:59:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 471 B IP
Hash f67e41cdd7e5f2aa8f93d031979c9109
5f4c0093f9bf8f8e48e0d7f56ed31aba0c6f43f6
608e2b7d208977f18da12165c9eb1539656d7754dc49f3f687736151a4810e06
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 284
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 30 Aug 2022 16:59:58 GMT
Last-Modified: Tue, 30 Aug 2022 16:55:14 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 471
www.proofpoint.com/sites/default/files/nav-promo-images/ransomware-bg-img.png
200 OK 14 kB URL HTTP/1.1 www.proofpoint.com/sites/default/files/nav-promo-images/ransomware-bg-img.png
IP
File type PNG image data, 696 x 1228, 8-bit/color RGB, non-interlaced\012- data
Hash 0c5cf205423f449e0d7a6d839ce02b8a
ce29670cde9e82b4110ee61b16fc1171956a0133
6907f421de451fd5e7f962c48d39191bd7d86390df35df8b416d3ca0eb558436
GET /sites/default/files/nav-promo-images/ransomware-bg-img.png HTTP/1.1
Host: www.proofpoint.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.proofpoint.com/us/wombat-security-is-now-proofpoint
Connection: keep-alive
Cookie: ppri=9B60587D-31C1-40F4-8837-D697DA8EB4CB; visid_incap_177663=MxaFur+FQ8GhyjTFRc4x/YyznWIAAAAAQUIPAAAAAABVL+8k2JhsBDutIV1lPhIY; _mkto_trk=id:309-RHV-619&token:_mch-proofpoint.com-1654502444683-74591; _gcl_au=1.1.841328466.1654502445; incap_ses_7233_177663=pMGhSYNNdTcbeUX6ocdgZA1CDmMAAAAAhccdFe2NZup03RC0p0Y97g==
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Etag: "ebf7b974"
Last-Modified: Sat, 22 Jan 2022 06:00:50 GMT
Content-Type: image/png
Content-Length: 13846
X-Content-Type-Options: nosniff
Cache-Control: max-age=176626, public
Expires: Thu, 01 Sep 2022 18:03:44 GMT
Date: Tue, 30 Aug 2022 16:59:58 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-CDN: Imperva
X-Iinfo: 13-43845412-0 0CNN RT(1661878797380 695) q(0 -1 -1 -1) r(0 -1)
www.proofpoint.com/themes/custom/proofpoint/dist/app-drupal/assets/threat_report.svg?f42f90bf12c969d4d28b5357ebe01c29=
200 OK 3.8 kB URL HTTP/1.1 www.proofpoint.com/themes/custom/proofpoint/dist/app-drupal/assets/threat_report.svg?f42f90bf12c969d4d28b5357ebe01c29=
IP
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document, ASCII text, with very long lines (3806)
Hash 489803db8611faa6d327669f14d8d971
4ffb6d12fa9cd9e2ae691c43ecf9e0e6d541dea2
f5e013d0719fc633e3f5fa23f5387021e5396020db65f7da5c916d8e2bbcdd72
GET /themes/custom/proofpoint/dist/app-drupal/assets/threat_report.svg?f42f90bf12c969d4d28b5357ebe01c29= HTTP/1.1
Host: www.proofpoint.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.proofpoint.com/sites/default/files/css/css_QZhXQTKCC3TeU0xhJTVTRhS8n_QjhEZPfy19JtBC7es.css
Cookie: ppri=9B60587D-31C1-40F4-8837-D697DA8EB4CB; visid_incap_177663=MxaFur+FQ8GhyjTFRc4x/YyznWIAAAAAQUIPAAAAAABVL+8k2JhsBDutIV1lPhIY; _mkto_trk=id:309-RHV-619&token:_mch-proofpoint.com-1654502444683-74591; _gcl_au=1.1.841328466.1654502445; incap_ses_7233_177663=pMGhSYNNdTcbeUX6ocdgZA1CDmMAAAAAhccdFe2NZup03RC0p0Y97g==
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Last-Modified: Fri, 10 Dec 2021 00:09:04 GMT
Content-Type: image/svg+xml
Content-Length: 3768
Content-Encoding: gzip
X-Content-Type-Options: nosniff
Cache-Control: max-age=224175, public
Expires: Fri, 02 Sep 2022 07:16:13 GMT
Date: Tue, 30 Aug 2022 16:59:58 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-CDN: Imperva
X-Iinfo: 13-43845411-0 0CNN RT(1661878797378 712) q(0 -1 -1 -1) r(0 -1)
www.proofpoint.com/sites/default/files/solution-hero.jpg
200 OK 292 kB URL HTTP/1.1 www.proofpoint.com/sites/default/files/solution-hero.jpg
IP
File type JPEG image data, baseline, precision 8, 2400x1060, components 3\012- data
Size 292 kB (291796 bytes)
Hash 8eb36c584c19a0dcee192f8b15826762
c22a05ea292a4460aab6103f8181fa3ff8bc43e8
04eb74fa22b88e267b639f3baeb04e945106736b6a31ab3e7b49b2710c72624d
GET /sites/default/files/solution-hero.jpg HTTP/1.1
Host: www.proofpoint.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.proofpoint.com/us/wombat-security-is-now-proofpoint
Connection: keep-alive
Cookie: ppri=9B60587D-31C1-40F4-8837-D697DA8EB4CB; visid_incap_177663=MxaFur+FQ8GhyjTFRc4x/YyznWIAAAAAQUIPAAAAAABVL+8k2JhsBDutIV1lPhIY; _mkto_trk=id:309-RHV-619&token:_mch-proofpoint.com-1654502444683-74591; _gcl_au=1.1.841328466.1654502445; incap_ses_7233_177663=pMGhSYNNdTcbeUX6ocdgZA1CDmMAAAAAhccdFe2NZup03RC0p0Y97g==
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Etag: "e9bad4df"
Last-Modified: Sat, 07 Mar 2020 01:03:14 GMT
Content-Type: image/jpeg
Content-Length: 291796
X-Content-Type-Options: nosniff
Cache-Control: max-age=197347, public
Expires: Thu, 01 Sep 2022 23:49:05 GMT
Date: Tue, 30 Aug 2022 16:59:58 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-CDN: Imperva
X-Iinfo: 11-15961145-0 0CNN RT(1661878797380 710) q(0 -1 -1 -1) r(0 -1)
www.proofpoint.com/themes/custom/proofpoint/dist/app-drupal/assets/awareness_material.svg?f73d28580404264dc3de47a50f217562=
200 OK 3.0 kB URL HTTP/1.1 www.proofpoint.com/themes/custom/proofpoint/dist/app-drupal/assets/awareness_material.svg?f73d28580404264dc3de47a50f217562=
IP
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document, ASCII text, with very long lines (3160)
Hash a919175763330fc8b3664815e57ea6d3
29ecb66f09ab0a7af04e0f2a5567ab4810bd4773
97b991399ad1b95c0649f0d4e63b2d071ffbad69408a6f8b72e16cd8b624fd80
GET /themes/custom/proofpoint/dist/app-drupal/assets/awareness_material.svg?f73d28580404264dc3de47a50f217562= HTTP/1.1
Host: www.proofpoint.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.proofpoint.com/sites/default/files/css/css_QZhXQTKCC3TeU0xhJTVTRhS8n_QjhEZPfy19JtBC7es.css
Cookie: ppri=9B60587D-31C1-40F4-8837-D697DA8EB4CB; visid_incap_177663=MxaFur+FQ8GhyjTFRc4x/YyznWIAAAAAQUIPAAAAAABVL+8k2JhsBDutIV1lPhIY; _mkto_trk=id:309-RHV-619&token:_mch-proofpoint.com-1654502444683-74591; _gcl_au=1.1.841328466.1654502445; incap_ses_7233_177663=pMGhSYNNdTcbeUX6ocdgZA1CDmMAAAAAhccdFe2NZup03RC0p0Y97g==
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Last-Modified: Fri, 10 Dec 2021 00:08:44 GMT
Content-Type: image/svg+xml
Content-Length: 2963
Content-Encoding: gzip
X-Content-Type-Options: nosniff
Cache-Control: max-age=529276, public
Expires: Mon, 05 Sep 2022 20:01:14 GMT
Date: Tue, 30 Aug 2022 16:59:58 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-CDN: Imperva
X-Iinfo: 11-15961146-0 0CNN RT(1661878797380 721) q(0 -1 -1 -1) r(0 -1)
www.googletagmanager.com/gtm.js?id=GTM-MGR7P8X
200 OK 100 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-MGR7P8X
IP
File type Unicode text, UTF-8 text, with very long lines (57783)
Size 100 kB (100448 bytes)
Hash 7c16a60466b658051dce5b662dbd56dd
b5b50e19b31f81f9ea054722db0da2a81268bf6d
13dbcc93e44ab99e0a64afe1cbe9e153b386e09f947d51160ea400e8b18d0a91
GET /gtm.js?id=GTM-MGR7P8X HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.proofpoint.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 30 Aug 2022 16:59:58 GMT
expires: Tue, 30 Aug 2022 16:59:58 GMT
cache-control: private, max-age=900
last-modified: Tue, 30 Aug 2022 16:17:44 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 100448
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.proofpoint.com/themes/custom/proofpoint/dist/app-drupal/assets/fonts/RobotoCondensed-Regular-webfont.eot
200 OK 35 kB URL HTTP/1.1 www.proofpoint.com/themes/custom/proofpoint/dist/app-drupal/assets/fonts/RobotoCondensed-Regular-webfont.eot
IP
File type Embedded OpenType (EOT), Roboto Condensed family\012- data
Hash 49089efb9b056f7ab0fab851975c6793
f843e6e5e1e955b815caa52dea544cd0c0ba5783
5d3e87be47632dab824ce6fbca3c443bcd0b917fbd6dfebb455422abf8804cf7
GET /themes/custom/proofpoint/dist/app-drupal/assets/fonts/RobotoCondensed-Regular-webfont.eot HTTP/1.1
Host: www.proofpoint.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.proofpoint.com/sites/default/files/css/css_QZhXQTKCC3TeU0xhJTVTRhS8n_QjhEZPfy19JtBC7es.css
Cookie: ppri=9B60587D-31C1-40F4-8837-D697DA8EB4CB; visid_incap_177663=MxaFur+FQ8GhyjTFRc4x/YyznWIAAAAAQUIPAAAAAABVL+8k2JhsBDutIV1lPhIY; _mkto_trk=id:309-RHV-619&token:_mch-proofpoint.com-1654502444683-74591; _gcl_au=1.1.841328466.1654502445; incap_ses_7233_177663=pMGhSYNNdTcbeUX6ocdgZA1CDmMAAAAAhccdFe2NZup03RC0p0Y97g==
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Etag: "9af5adb1"
Last-Modified: Sat, 02 Jan 2021 09:53:20 GMT
Content-Length: 34854
X-Content-Type-Options: nosniff
Cache-Control: max-age=196157, public
Expires: Thu, 01 Sep 2022 23:29:15 GMT
Date: Tue, 30 Aug 2022 16:59:58 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-CDN: Imperva
X-Iinfo: 13-43845411-0 0CNN RT(1661878797378 764) q(0 -1 -1 -1) r(0 -1)
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: OlC41utV344qdhEKYfZpyg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: H08AR/2RHjJ9vMIbfQ5iWzy7/gQ=
munchkin.marketo.net/162/munchkin.js
200 OK 4.7 kB URL HTTP/1.1 munchkin.marketo.net/162/munchkin.js
IP
File type ASCII text, with very long lines (606)
Hash 3e9baed982956735f6e0a0e756d97ed9
9223be6a494a10959101a7942419df7b05b84d73
930a508ed0ea6b4861d19c0738360182514010913c4ebfe9352064ae5006f8a1
GET /162/munchkin.js HTTP/1.1
Host: munchkin.marketo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.proofpoint.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Type: application/x-javascript
ETag: "75daf56f6191efe42577301908659c29:1656637152.894482"
Last-Modified: Fri, 01 Jul 2022 00:59:12 GMT
Server: AkamaiNetStorage
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=8640000
Expires: Thu, 08 Dec 2022 16:59:58 GMT
Date: Tue, 30 Aug 2022 16:59:58 GMT
Content-Length: 4677
Connection: keep-alive
P3P: policyref="http://www.marketo.com/w3c/p3p.xml", CP="NOI DSP COR NID CURi OUR NOR"
www.proofpoint.com/themes/custom/proofpoint/apps/drupal/images/favicons/favicon-16x16.png
200 OK 560 B URL HTTP/1.1 www.proofpoint.com/themes/custom/proofpoint/apps/drupal/images/favicons/favicon-16x16.png
IP
File type PNG image data, 16 x 16, 8-bit/color RGB, non-interlaced\012- data
Hash bb9f4bbd38875f7ee9ba74d9c9c71805
1e206f3682c7e1f61614637cbd0ccf572001eaed
a9d614d4cb845775b845518a17dea1ec597d5c3007e688f807bb82cc1fedf95d
GET /themes/custom/proofpoint/apps/drupal/images/favicons/favicon-16x16.png HTTP/1.1
Host: www.proofpoint.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.proofpoint.com/us/wombat-security-is-now-proofpoint
Connection: keep-alive
Cookie: ppri=9B60587D-31C1-40F4-8837-D697DA8EB4CB; visid_incap_177663=MxaFur+FQ8GhyjTFRc4x/YyznWIAAAAAQUIPAAAAAABVL+8k2JhsBDutIV1lPhIY; _mkto_trk=id:309-RHV-619&token:_mch-proofpoint.com-1654502444683-74591; _gcl_au=1.1.841328466.1654502445; incap_ses_7233_177663=pMGhSYNNdTcbeUX6ocdgZA1CDmMAAAAAhccdFe2NZup03RC0p0Y97g==
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Etag: "940bbd69"
Last-Modified: Thu, 17 Mar 2022 23:08:04 GMT
Content-Type: image/png
Content-Length: 560
X-Content-Type-Options: nosniff
Cache-Control: max-age=180267, public
Expires: Thu, 01 Sep 2022 19:04:25 GMT
Date: Tue, 30 Aug 2022 16:59:58 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-CDN: Imperva
X-Iinfo: 11-15961145-0 0CNN RT(1661878797380 994) q(0 -1 -1 -1) r(0 -1)
www.proofpoint.com/themes/custom/proofpoint/apps/drupal/images/favicons/favicon-192x192.png
200 OK 5.4 kB URL HTTP/1.1 www.proofpoint.com/themes/custom/proofpoint/apps/drupal/images/favicons/favicon-192x192.png
IP
File type PNG image data, 192 x 192, 8-bit/color RGB, non-interlaced\012- data
Hash c28f39d3df9cf685bcabbaa9c071d0b1
e5da68de25dbca57eb0429e6f96109235ac637e3
ba2270e15baa0eea5623196f619a5abab175e21bc2c118cb4c560d2f5107e432
GET /themes/custom/proofpoint/apps/drupal/images/favicons/favicon-192x192.png HTTP/1.1
Host: www.proofpoint.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.proofpoint.com/us/wombat-security-is-now-proofpoint
Connection: keep-alive
Cookie: ppri=9B60587D-31C1-40F4-8837-D697DA8EB4CB; visid_incap_177663=MxaFur+FQ8GhyjTFRc4x/YyznWIAAAAAQUIPAAAAAABVL+8k2JhsBDutIV1lPhIY; _mkto_trk=id:309-RHV-619&token:_mch-proofpoint.com-1654502444683-74591; _gcl_au=1.1.841328466.1654502445; incap_ses_7233_177663=pMGhSYNNdTcbeUX6ocdgZA1CDmMAAAAAhccdFe2NZup03RC0p0Y97g==
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Etag: "8c65d5f6"
Last-Modified: Thu, 17 Mar 2022 23:08:29 GMT
Content-Type: image/png
Content-Length: 5370
X-Content-Type-Options: nosniff
Cache-Control: max-age=214392, public
Expires: Fri, 02 Sep 2022 04:33:10 GMT
Date: Tue, 30 Aug 2022 16:59:58 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-CDN: Imperva
X-Iinfo: 13-43845412-0 0CNN RT(1661878797380 993) q(0 -1 -1 -1) r(0 -1)
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash ef80a390dc7608c27e29fe3516eb0565
5062143217d04ed6de8fa77555d9a83938391c87
373c43367776cfcbb9f69a45443f59dfb774eab11241928134a25bcb7d75e83b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 30 Aug 2022 16:59:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
geoip-js.com/geoip/v2.1/country/me?referrer=https%3A%2F%2Fwww.proofpoint.com
200 OK 683 B URL HTTP/2 geoip-js.com/geoip/v2.1/country/me?referrer=https%3A%2F%2Fwww.proofpoint.com
IP
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (609), with no line terminators
Hash d7812803b6553dfa8ad11c9ae7da0c08
8b748717fe0a550c78d27c351586baa626d08a61
e8aa82b16a1cc5ae741f1ce7a79ffd2875dd9b0a6e264777504700f0d5f6a129
GET /geoip/v2.1/country/me?referrer=https%3A%2F%2Fwww.proofpoint.com HTTP/1.1
Host: geoip-js.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.proofpoint.com
Connection: keep-alive
Referer: https://www.proofpoint.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 30 Aug 2022 16:59:58 GMT
content-type: application/vnd.maxmind.com-country+json; charset=UTF-8; version=2.1
content-length: 683
access-control-allow-origin: *
cf-cache-status: DYNAMIC
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 742f147d2e450b69-OSL
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/viewthroughconversion/950296937/?random=1661878798773&cv=9&fst=1661878798773&num=1&guid=ON&resp=GooglemKTybQhCsO&eid=375603261&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&ig=1&frm=0&url=https%3A%2F%2Fwww.proofpoint.com%2Fus%2Fwombat-security-is-now-proofpoint&tiba=Wombat%20Security%20Is%20Now%20Proofpoint%20%7C%20Proofpoint&hn=www.googleadservices.com&rfmt=3&fmt=4
200 OK 1.0 kB URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/950296937/?random=1661878798773&cv=9&fst=1661878798773&num=1&guid=ON&resp=GooglemKTybQhCsO&eid=375603261&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&ig=1&frm=0&url=https%3A%2F%2Fwww.proofpoint.com%2Fus%2Fwombat-security-is-now-proofpoint&tiba=Wombat%20Security%20Is%20Now%20Proofpoint%20%7C%20Proofpoint&hn=www.googleadservices.com&rfmt=3&fmt=4
IP
File type ASCII text, with very long lines (2282), with no line terminators
Hash 502880caffb6dfd47fd47756e73e2eb3
e532178f2f0d8e0b50ef50c78be7025ade994d5c
f18b554dabe215f689455b20ee5c58d89fc16245f110a6f383fe83247aeda32b
GET /pagead/viewthroughconversion/950296937/?random=1661878798773&cv=9&fst=1661878798773&num=1&guid=ON&resp=GooglemKTybQhCsO&eid=375603261&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&ig=1&frm=0&url=https%3A%2F%2Fwww.proofpoint.com%2Fus%2Fwombat-security-is-now-proofpoint&tiba=Wombat%20Security%20Is%20Now%20Proofpoint%20%7C%20Proofpoint&hn=www.googleadservices.com&rfmt=3&fmt=4 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.proofpoint.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 30 Aug 2022 16:59:58 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 1038
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Tue, 30-Aug-2022 17:14:58 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash ef80a390dc7608c27e29fe3516eb0565
5062143217d04ed6de8fa77555d9a83938391c87
373c43367776cfcbb9f69a45443f59dfb774eab11241928134a25bcb7d75e83b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 30 Aug 2022 16:59:59 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash cb57f70cc3dfd408affeddac5e51ce2c
85fe4cd5f546cdf2c2834ac5665becb84de93b6a
d377d0292cd789fa483c883b04aeee09c0ac26a1e8834fdce23f7fdfbffe3028
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 30 Aug 2022 16:59:59 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash a3174f909a7792a326742671bb6d3dde
fa4703fd1dc5829d61209aaf18407b4498f8a478
bc171d0c715235ad2ba48dbbb594a35ea1af13107fe7b54e988a63a61fa9fb22
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 30 Aug 2022 16:59:59 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.no/pagead/1p-user-list/950296937/?random=1661878798773&cv=9&fst=1661875200000&num=1&guid=ON&eid=375603261&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&frm=0&url=https%3A%2F%2Fwww.proofpoint.com%2Fus%2Fwombat-security-is-now-proofpoint&tiba=Wombat%20Security%20Is%20Now%20Proofpoint%20%7C%20Proofpoint&fmt=3&is_vtc=1&random=4194904884&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y
200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-user-list/950296937/?random=1661878798773&cv=9&fst=1661875200000&num=1&guid=ON&eid=375603261&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&frm=0&url=https%3A%2F%2Fwww.proofpoint.com%2Fus%2Fwombat-security-is-now-proofpoint&tiba=Wombat%20Security%20Is%20Now%20Proofpoint%20%7C%20Proofpoint&fmt=3&is_vtc=1&random=4194904884&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/950296937/?random=1661878798773&cv=9&fst=1661875200000&num=1&guid=ON&eid=375603261&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&frm=0&url=https%3A%2F%2Fwww.proofpoint.com%2Fus%2Fwombat-security-is-now-proofpoint&tiba=Wombat%20Security%20Is%20Now%20Proofpoint%20%7C%20Proofpoint&fmt=3&is_vtc=1&random=4194904884&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.proofpoint.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 30 Aug 2022 16:59:59 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.com/pagead/1p-user-list/950296937/?random=1661878798773&cv=9&fst=1661875200000&num=1&guid=ON&eid=375603261&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&frm=0&url=https%3A%2F%2Fwww.proofpoint.com%2Fus%2Fwombat-security-is-now-proofpoint&tiba=Wombat%20Security%20Is%20Now%20Proofpoint%20%7C%20Proofpoint&fmt=3&is_vtc=1&random=4194904884&resp=GooglemKTybQhCsO&rmt_tld=0&ipr=y
200 OK 42 B URL HTTP/2 www.google.com/pagead/1p-user-list/950296937/?random=1661878798773&cv=9&fst=1661875200000&num=1&guid=ON&eid=375603261&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&frm=0&url=https%3A%2F%2Fwww.proofpoint.com%2Fus%2Fwombat-security-is-now-proofpoint&tiba=Wombat%20Security%20Is%20Now%20Proofpoint%20%7C%20Proofpoint&fmt=3&is_vtc=1&random=4194904884&resp=GooglemKTybQhCsO&rmt_tld=0&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/950296937/?random=1661878798773&cv=9&fst=1661875200000&num=1&guid=ON&eid=375603261&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&frm=0&url=https%3A%2F%2Fwww.proofpoint.com%2Fus%2Fwombat-security-is-now-proofpoint&tiba=Wombat%20Security%20Is%20Now%20Proofpoint%20%7C%20Proofpoint&fmt=3&is_vtc=1&random=4194904884&resp=GooglemKTybQhCsO&rmt_tld=0&ipr=y HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.proofpoint.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 30 Aug 2022 16:59:59 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash cb57f70cc3dfd408affeddac5e51ce2c
85fe4cd5f546cdf2c2834ac5665becb84de93b6a
d377d0292cd789fa483c883b04aeee09c0ac26a1e8834fdce23f7fdfbffe3028
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 30 Aug 2022 16:59:59 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.sectigo.com/
200 OK 282 B IP
Hash 78d1d5c4d3982ac65be97fd1ca0613df
e9b2a9a938edc3c5660bec1fa3155c784ea390b3
2a059ec927b713b2218c8c58812eaf9d734fc5b1a0b8ffa298bee417018762f5
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 30 Aug 2022 16:59:59 GMT
Content-Type: application/ocsp-response
Content-Length: 282
Connection: keep-alive
Last-Modified: Tue, 30 Aug 2022 06:45:15 GMT
Expires: Tue, 06 Sep 2022 06:45:14 GMT
Etag: "e9b2a9a938edc3c5660bec1fa3155c784ea390b3"
Cache-Control: max-age=567314,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 742f147f0d36b4f3-OSL
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash d540bb36b9dd961eb542506943f01784
fc85b89327b75d3d6643766a70f343f6ea0b7a30
1bcfead20bfe1a9677f25dbcec756dbb3244f6e53069b2a830529fd991baabce
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 30 Aug 2022 16:59:59 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash ea8f135d0d9646f85d5f17dee7000297
4450bda2c50f8de9366bb33b372ce4d8cbbc5f28
577489ce192278f40054e285aaa614d3502f1507911c8098eabb68eead763395
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 30 Aug 2022 16:59:59 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ccfdd360cc4807b3dff710c438d8dda4
764c9f8e134c76bc14e38b0243ca72c431d9f787
7abdb81abf690eda60b8c91bb7dc2577c3d2117046a91df8a2943c82972f2a8c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7ABDB81ABF690EDA60B8C91BB7DC2577C3D2117046A91DF8A2943C82972F2A8C"
Last-Modified: Tue, 30 Aug 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10305
Expires: Tue, 30 Aug 2022 19:51:44 GMT
Date: Tue, 30 Aug 2022 16:59:59 GMT
Connection: keep-alive
j.6sc.co/6si.min.js
200 OK 9.6 kB IP
File type ASCII text, with very long lines (30830), with no line terminators
Hash cebcbc7a648ed5ed0bb18e36f2e4ef0c
176cdac65d9c13b982daac90c68a539592f578d8
0de815477d22a4607e70bf3a8f1df753639782253a41ca49be7dbdb40b5005e9
GET /6si.min.js HTTP/1.1
Host: j.6sc.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.proofpoint.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/javascript
etag: "630402a0-786e"
last-modified: Mon, 22 Aug 2022 22:26:40 GMT
pragma: no-cache
server: nginx/1.14.0 (Ubuntu)
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
content-length: 9594
cache-control: private, no-cache, proxy-revalidate
expires: Tue, 30 Aug 2022 16:59:59 GMT
date: Tue, 30 Aug 2022 16:59:59 GMT
X-Firefox-Spdy: h2
4788165.fls.doubleclick.net/activityi;src=4788165;type=sitew0;cat=proof0;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;ord=6104118958363.95?
200 OK 355 B URL HTTP/2 4788165.fls.doubleclick.net/activityi;src=4788165;type=sitew0;cat=proof0;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;ord=6104118958363.95?
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (466), with no line terminators
Hash c5778f0bf5ee3c5e5ad4e58fdbdd127f
757d9e57ede4bf0be8991a7a378d90ea575d7bfa
33cb89f58ee91bf7440767f57743cf567fad3ac594d4c885709cb6491698878d
GET /activityi;src=4788165;type=sitew0;cat=proof0;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;ord=6104118958363.95? HTTP/1.1
Host: 4788165.fls.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.proofpoint.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 30 Aug 2022 16:59:59 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
strict-transport-security: max-age=21600
content-type: text/html; charset=UTF-8
pragma: no-cache
x-content-type-options: nosniff
content-encoding: gzip
server: cafe
content-length: 355
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Tue, 30-Aug-2022 17:14:59 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
10487471.fls.doubleclick.net/activityi;src=10487471;type=retar0;cat=retar0;ord=4573188797558;gtm=2wg8t0;auiddc=841328466.1654502445;~oref=https%3A%2F%2Fwww.proofpoint.com%2Fus%2Fwombat-security-is-now-proofpoint?
200 OK 372 B URL HTTP/2 10487471.fls.doubleclick.net/activityi;src=10487471;type=retar0;cat=retar0;ord=4573188797558;gtm=2wg8t0;auiddc=841328466.1654502445;~oref=https%3A%2F%2Fwww.proofpoint.com%2Fus%2Fwombat-security-is-now-proofpoint?
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (487), with no line terminators
Hash 59b83dab235907cfc2588abd6e7e23bf
48d6e7f0a0ec4b3a98093f56442b5c228b8b20c1
b86278c4d5828ae7a11243eb94a733db54ae5ac62ca948d08526ed98e1dacd52
GET /activityi;src=10487471;type=retar0;cat=retar0;ord=4573188797558;gtm=2wg8t0;auiddc=841328466.1654502445;~oref=https%3A%2F%2Fwww.proofpoint.com%2Fus%2Fwombat-security-is-now-proofpoint? HTTP/1.1
Host: 10487471.fls.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.proofpoint.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 30 Aug 2022 16:59:59 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
strict-transport-security: max-age=21600
content-type: text/html; charset=UTF-8
pragma: no-cache
x-content-type-options: nosniff
content-encoding: gzip
server: cafe
content-length: 372
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Tue, 30-Aug-2022 17:14:59 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ads.avocet.io/s?add=5aba5f53ab79f7f51390a95a&ty=j
307 Temporary Redirect 106 B URL HTTP/2 ads.avocet.io/s?add=5aba5f53ab79f7f51390a95a&ty=j
IP
File type HTML document, ASCII text
Hash c8762410dd9010e4e1d739bb53d4c2e3
b5cb15b18260c02ff24777b84f444c9ed6465a72
e738ece332f4e5c1bf2c40969166ef47e16abf334d6e63be95a1b6b66f407574
GET /s?add=5aba5f53ab79f7f51390a95a&ty=j HTTP/1.1
Host: ads.avocet.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.proofpoint.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 307 Temporary Redirect
content-type: text/html; charset=utf-8
location: https://ads.avct.cloud/s?r=1&add=5aba5f53ab79f7f51390a95a&ty=j
date: Tue, 30 Aug 2022 16:59:59 GMT
content-length: 106
X-Firefox-Spdy: h2
secure.chip2gift.com/js/206034.js
200 OK 16 B URL HTTP/1.1 secure.chip2gift.com/js/206034.js
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type ASCII text, with no line terminators
Hash 33d696a7233a8ad07ea9a012989a0c0f
c3dcfcc70939a3d356ab4433c73751bd2edaf71c
e9b3c1ef5622bc620a5c1d364aa9fbec2c9d6230bb5f6ab825825db09dd71f6a
GET /js/206034.js HTTP/1.1
Host: secure.chip2gift.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.proofpoint.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Tue, 30 Aug 2022 16:59:59 GMT
Content-Type: text/javascript
Content-Length: 16
Connection: keep-alive
Server: Kestrel
Cache-Control: no-store, must-revalidate
Pragma: no-cache
Expires: 0
Request-Context: appId=cid-v1:abe8a76f-f1a2-4b2e-9017-0ea36ffb5c20
c.6sc.co/
200 OK 7 B IP
File type ASCII text, with no line terminators
Hash d97623d172f087d9640da9acd38830ff
515bd358bb7d990930f0e2b3de399db1787a2567
fe04a9dc88d3f3be8d4f6bc63a9a80f45a4c6d8460e7551dab849457c091920a
GET / HTTP/1.1
Host: c.6sc.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.proofpoint.com
Connection: keep-alive
Referer: https://www.proofpoint.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
content-length: 7
date: Tue, 30 Aug 2022 16:59:59 GMT
access-control-allow-origin: https://www.proofpoint.com
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: GET,POST
X-Firefox-Spdy: h2
ads.avocet.io/s?add=5d1dcad3b00320110090d553&ty=j
307 Temporary Redirect 106 B URL HTTP/2 ads.avocet.io/s?add=5d1dcad3b00320110090d553&ty=j
IP
File type HTML document, ASCII text
Hash 55b83b0928a3f574953337baa1c1eae3
4c6938b3496a9bfbcd5461c648b364f8a080b81f
dfab525f4eb77e2bc6a12e30ae3d9e724db2a35ca2b00d6546f8ac9f9294afd9
GET /s?add=5d1dcad3b00320110090d553&ty=j HTTP/1.1
Host: ads.avocet.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.proofpoint.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 307 Temporary Redirect
content-type: text/html; charset=utf-8
location: https://ads.avct.cloud/s?r=1&add=5d1dcad3b00320110090d553&ty=j
date: Tue, 30 Aug 2022 16:59:59 GMT
content-length: 106
X-Firefox-Spdy: h2
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash 7071c825433f36c1157e1b47882d7aba
b1420bb474f33cf1a10879cab1094e8073c50eb8
11411f7d65e38a0b08c8ba5f7d4cde4bbe8d6dc74ac182e90adff9490e3512d7
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Tue, 30 Aug 2022 16:59:59 GMT
Content-Type: application/ocsp-response
Content-Length: 1778
Connection: keep-alive
X-Sucuri-ID: 19022
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Tue, 30 Aug 2022 00:23:04 GMT
Expires: Wed, 31 Aug 2022 00:23:04 GMT
ETag: "b1420bb474f33cf1a10879cab1094e8073c50eb8"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
status.geotrust.com/
200 OK 471 B IP
Hash c203b2f3f4236f5b91f2165c62c1a7e1
be9fe458a20aa2c5554e91124af8719d2eb6ffef
abeaa798e9cbf9d3835720e7921d7b00a870e6fb291863ad9f44b137c2a22991
POST / HTTP/1.1
Host: status.geotrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3964
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 30 Aug 2022 16:59:59 GMT
Last-Modified: Tue, 30 Aug 2022 15:53:55 GMT
Server: ECS (amb/6B73)
X-Cache: HIT
Content-Length: 471
ocsp.sectigo.com/
200 OK 282 B IP
Hash 78d1d5c4d3982ac65be97fd1ca0613df
e9b2a9a938edc3c5660bec1fa3155c784ea390b3
2a059ec927b713b2218c8c58812eaf9d734fc5b1a0b8ffa298bee417018762f5
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 30 Aug 2022 16:59:59 GMT
Content-Type: application/ocsp-response
Content-Length: 282
Connection: keep-alive
Last-Modified: Tue, 30 Aug 2022 06:45:15 GMT
Expires: Tue, 06 Sep 2022 06:45:14 GMT
Etag: "e9b2a9a938edc3c5660bec1fa3155c784ea390b3"
Cache-Control: max-age=567314,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 742f147f1fe1b506-OSL
ocsp.digicert.com/
200 OK 471 B IP
Hash 134ca54486ac4e70ef8b4cad93029bd2
091c54f69879deaf3430a3052b748487a98a08db
27e98923dd45b5e2bbc4c45e31a19d9060b85da85cfa08eeac72137b20d6297b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1592
Cache-Control: max-age=115769
Content-Type: application/ocsp-response
Date: Tue, 30 Aug 2022 16:59:59 GMT
Etag: "630d5d10-1d7"
Expires: Thu, 01 Sep 2022 01:09:28 GMT
Last-Modified: Tue, 30 Aug 2022 00:42:56 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 471
ocsp.sectigo.com/
200 OK 282 B IP
Hash 78d1d5c4d3982ac65be97fd1ca0613df
e9b2a9a938edc3c5660bec1fa3155c784ea390b3
2a059ec927b713b2218c8c58812eaf9d734fc5b1a0b8ffa298bee417018762f5
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 30 Aug 2022 16:59:59 GMT
Content-Type: application/ocsp-response
Content-Length: 282
Connection: keep-alive
Last-Modified: Tue, 30 Aug 2022 06:45:15 GMT
Expires: Tue, 06 Sep 2022 06:45:14 GMT
Etag: "e9b2a9a938edc3c5660bec1fa3155c784ea390b3"
Cache-Control: max-age=567314,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 742f147f2e35b50b-OSL
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash ea8f135d0d9646f85d5f17dee7000297
4450bda2c50f8de9366bb33b372ce4d8cbbc5f28
577489ce192278f40054e285aaa614d3502f1507911c8098eabb68eead763395
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 30 Aug 2022 16:59:59 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.sectigo.com/
200 OK 282 B IP
Hash 78d1d5c4d3982ac65be97fd1ca0613df
e9b2a9a938edc3c5660bec1fa3155c784ea390b3
2a059ec927b713b2218c8c58812eaf9d734fc5b1a0b8ffa298bee417018762f5
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 30 Aug 2022 16:59:59 GMT
Content-Type: application/ocsp-response
Content-Length: 282
Connection: keep-alive
Last-Modified: Tue, 30 Aug 2022 06:45:15 GMT
Expires: Tue, 06 Sep 2022 06:45:14 GMT
Etag: "e9b2a9a938edc3c5660bec1fa3155c784ea390b3"
Cache-Control: max-age=567314,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 742f147f3ad20b3d-OSL
visitor.reactful.com/dist/main.rtfl.js
200 OK 108 kB URL HTTP/2 visitor.reactful.com/dist/main.rtfl.js
IP
File type Unicode text, UTF-8 text, with very long lines (32002)
Size 108 kB (107826 bytes)
Hash 648d98ecbe7fbef8af9248674905cf74
053b7e52b0306bd63c9d7b5e1b8eb9f701844b48
79632289c3ad894bf09f27ac18e83356e67ad3c26986cde8ed017478c1bf0763
GET /dist/main.rtfl.js HTTP/1.1
Host: visitor.reactful.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.proofpoint.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-cloud-trace-context: 8d715fa4197cda3061613632376e366c
content-encoding: gzip
server: Google Frontend
date: Fri, 26 Aug 2022 12:29:01 GMT
expires: Wed, 31 Aug 2022 12:29:01 GMT
cache-control: public,public, max-age=432000
etag: "T5buNg"
content-type: application/javascript; charset=UTF-8
content-length: 107826
age: 361858
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash ea8f135d0d9646f85d5f17dee7000297
4450bda2c50f8de9366bb33b372ce4d8cbbc5f28
577489ce192278f40054e285aaa614d3502f1507911c8098eabb68eead763395
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 30 Aug 2022 16:59:59 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ads.avct.cloud/s?r=1&add=5aba5f53ab79f7f51390a95a&ty=j
307 Temporary Redirect 100 B URL HTTP/2 ads.avct.cloud/s?r=1&add=5aba5f53ab79f7f51390a95a&ty=j
IP
File type HTML document, ASCII text
Hash d075d40cd4c240036f80ba34f1c88b53
0520a1f4f4025ef85e05dbe7416ac968319b8251
87d0ef0ea24068f3ea212f167ad1942db21b00481bd02fd6608be9f8fef37d5b
GET /s?r=1&add=5aba5f53ab79f7f51390a95a&ty=j HTTP/1.1
Host: ads.avct.cloud
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.proofpoint.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 307 Temporary Redirect
content-type: text/html; charset=utf-8
location: /s?bounce=true&r=1&add=5aba5f53ab79f7f51390a95a&ty=j
p3p: policyref="http://cdn.avocet.io/w3c/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
set-cookie: uuid=be4d88da-5c57-480f-ad53-84bbb516380e; Path=/; Expires=Wed, 30 Aug 2023 16:59:59 GMT; Max-Age=31536000; HttpOnly
date: Tue, 30 Aug 2022 16:59:59 GMT
content-length: 100
X-Firefox-Spdy: h2
track.accountinsight.cloud/track/122
200 OK 2 B URL HTTP/1.1 track.accountinsight.cloud/track/122
IP
File type ASCII text, with no line terminators
Hash 9d4568c009d203ab10e33ea9953a0264
dd29ecf524b030a65261e3059c48ab9e1ecb2585
12ae32cb1ec02d01eda3581b127c1fee3b0dc53572ed6baf239721a03d82e126
GET /track/122 HTTP/1.1
Host: track.accountinsight.cloud
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.proofpoint.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: no-cache
Pragma: no-cache
Content-Type: application/json; charset=utf-8
Expires: -1
Server: Microsoft-IIS/7.5
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Date: Tue, 30 Aug 2022 16:59:59 GMT
Content-Length: 2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash d540bb36b9dd961eb542506943f01784
fc85b89327b75d3d6643766a70f343f6ea0b7a30
1bcfead20bfe1a9677f25dbcec756dbb3244f6e53069b2a830529fd991baabce
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 30 Aug 2022 16:59:59 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
s.ml-attr.com/getuid?https%3a%2f%2fattr.ml-api.io%2f%3fdomain%3dproofpoint.com%26pId%3d%24UID
302 Moved Temporarily 145 B URL HTTP/1.1 s.ml-attr.com/getuid?https%3a%2f%2fattr.ml-api.io%2f%3fdomain%3dproofpoint.com%26pId%3d%24UID
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash aade1473d7f8858a24dcca062a0dbd94
8aeb9a7264176bb0ef56ec85f575f4d0b3356403
c6e7b48b0953f99cfe41fea8a58a91f80c563f8db3bf38f8bb1ee6e9ad338ab9
GET /getuid?https%3a%2f%2fattr.ml-api.io%2f%3fdomain%3dproofpoint.com%26pId%3d%24UID HTTP/1.1
Host: s.ml-attr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.proofpoint.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Moved Temporarily
Server: nginx/1.21.3
Date: Tue, 30 Aug 2022 16:59:59 GMT
Content-Type: text/html
Content-Length: 145
Connection: keep-alive
Location: https://secure.adnxs.com/getuid?https%3a%2f%2fattr.ml-api.io%2f%3fdomain%3dproofpoint.com%26pId%3d%24UID
adservice.google.com/ddm/fls/i/src=4788165;type=sitew0;cat=proof0;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;ord=6104118958363.95;~oref=https://www.proofpoint.com/
200 OK 355 B URL HTTP/2 adservice.google.com/ddm/fls/i/src=4788165;type=sitew0;cat=proof0;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;ord=6104118958363.95;~oref=https://www.proofpoint.com/
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (465), with no line terminators
Hash 6fa521ea3d7b88cd0a18699fcfa41c3d
40d40a685bfcb0be2549619573a5a058a446d066
f32134d814b6f81fde972efae8c0eebf973c8b4074bed991a31ad782822b52ed
GET /ddm/fls/i/src=4788165;type=sitew0;cat=proof0;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;ord=6104118958363.95;~oref=https://www.proofpoint.com/ HTTP/1.1
Host: adservice.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4788165.fls.doubleclick.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 30 Aug 2022 16:59:59 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/html; charset=UTF-8
pragma: no-cache
x-content-type-options: nosniff
content-encoding: gzip
server: cafe
content-length: 355
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
adservice.google.com/ddm/fls/i/src=10487471;type=retar0;cat=retar0;ord=4573188797558;gtm=2wg8t0;auiddc=841328466.1654502445;~oref=https%3A%2F%2Fwww.proofpoint.com%2Fus%2Fwombat-security-is-now-proofpoint
200 OK 372 B URL HTTP/2 adservice.google.com/ddm/fls/i/src=10487471;type=retar0;cat=retar0;ord=4573188797558;gtm=2wg8t0;auiddc=841328466.1654502445;~oref=https%3A%2F%2Fwww.proofpoint.com%2Fus%2Fwombat-security-is-now-proofpoint
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (486), with no line terminators
Hash e52dda9db326f159668a9e911296fd53
cd268091b7e0e2193f99f3f86a44539483238820
575bda247f611a4bb6d331474eb19130811c493b94328fb3d3685c7ab4a58349
GET /ddm/fls/i/src=10487471;type=retar0;cat=retar0;ord=4573188797558;gtm=2wg8t0;auiddc=841328466.1654502445;~oref=https%3A%2F%2Fwww.proofpoint.com%2Fus%2Fwombat-security-is-now-proofpoint HTTP/1.1
Host: adservice.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://10487471.fls.doubleclick.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 30 Aug 2022 16:59:59 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/html; charset=UTF-8
pragma: no-cache
x-content-type-options: nosniff
content-encoding: gzip
server: cafe
content-length: 372
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
secure.adnxs.com/getuidj
200 OK 11 B IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 096dc398f48c9a61584478fea3ee50a1
7d0a5f87833db711b2eb52c73638c5e14538a969
31b45c462302ac175bfa43f9e5591491db780ca094f6ecdd2907f25ad578448d
GET /getuidj HTTP/1.1
Host: secure.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.proofpoint.com
Connection: keep-alive
Referer: https://www.proofpoint.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Tue, 30 Aug 2022 16:59:59 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 11
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://www.proofpoint.com
AN-X-Request-Uuid: a1422d9b-2a3e-443c-a248-264804aeab52
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 950.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
ads.avct.cloud/s?bounce=true&r=1&add=5aba5f53ab79f7f51390a95a&ty=j
200 OK 0 B URL HTTP/2 ads.avct.cloud/s?bounce=true&r=1&add=5aba5f53ab79f7f51390a95a&ty=j
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /s?bounce=true&r=1&add=5aba5f53ab79f7f51390a95a&ty=j HTTP/1.1
Host: ads.avct.cloud
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.proofpoint.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
p3p: policyref="http://cdn.avocet.io/w3c/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
date: Tue, 30 Aug 2022 16:59:59 GMT
content-length: 0
X-Firefox-Spdy: h2
ads.avct.cloud/s?bounce=true&r=1&add=5d1dcad3b00320110090d553&ty=j
200 OK 0 B URL HTTP/2 ads.avct.cloud/s?bounce=true&r=1&add=5d1dcad3b00320110090d553&ty=j
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /s?bounce=true&r=1&add=5d1dcad3b00320110090d553&ty=j HTTP/1.1
Host: ads.avct.cloud
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.proofpoint.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
p3p: policyref="http://cdn.avocet.io/w3c/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
date: Tue, 30 Aug 2022 16:59:59 GMT
content-length: 0
X-Firefox-Spdy: h2
309-rhv-619.mktoresp.com/webevents/visitWebPage?_mchNc=1661878799068&_mchCn=&_mchId=309-RHV-619&_mchTk=_mch-proofpoint.com-1654502444683-74591&_mchHo=www.proofpoint.com&_mchPo=&_mchRu=%2Fus%2Fwombat-security-is-now-proofpoint&_mchPc=https%3A&_mchVr=162&_mchEcid=&_mchHa=&_mchRe=&_mchQp=
200 OK 28 B URL HTTP/1.1 309-rhv-619.mktoresp.com/webevents/visitWebPage?_mchNc=1661878799068&_mchCn=&_mchId=309-RHV-619&_mchTk=_mch-proofpoint.com-1654502444683-74591&_mchHo=www.proofpoint.com&_mchPo=&_mchRu=%2Fus%2Fwombat-security-is-now-proofpoint&_mchPc=https%3A&_mchVr=162&_mchEcid=&_mchHa=&_mchRe=&_mchQp=
IP
File type ASCII text, with no line terminators
Hash 9dafc521bd59955b4986f0fc3777f77a
5a572b4730d4a2bce2fa35597a0993c649f26c74
e4e90a7b8bacdfe395361149a9fd42f9192b68bdf1497e4454d0ab4c4917f746
POST /webevents/visitWebPage?_mchNc=1661878799068&_mchCn=&_mchId=309-RHV-619&_mchTk=_mch-proofpoint.com-1654502444683-74591&_mchHo=www.proofpoint.com&_mchPo=&_mchRu=%2Fus%2Fwombat-security-is-now-proofpoint&_mchPc=https%3A&_mchVr=162&_mchEcid=&_mchHa=&_mchRe=&_mchQp= HTTP/1.1
Host: 309-rhv-619.mktoresp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.proofpoint.com
Connection: keep-alive
Referer: https://www.proofpoint.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Tue, 30 Aug 2022 16:59:59 GMT
Content-Type: text/plain; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Request-Id: 2c6f4f71-cca4-4186-b17c-6ff5bc7ce8d8
Content-Encoding: gzip
Access-Control-Allow-Origin: *
ocsp.sectigo.com/
200 OK 472 B IP
Hash 36606c94b1eeee9054d984edeb9da3c9
422cddae6cecda22067fc324b842702c1b79c849
d68b39b0b84d3efc33f1ad79362c7b6a6d6a0b2d4dd5ad42577a3c62af3438d5
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 30 Aug 2022 16:59:59 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Sat, 27 Aug 2022 19:37:15 GMT
Expires: Sat, 03 Sep 2022 19:37:14 GMT
Etag: "422cddae6cecda22067fc324b842702c1b79c849"
Cache-Control: max-age=354434,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 742f14813979b4f3-OSL
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 238b016a1d4d1d33f4c7a78dfcaed2bd
1b18b6bc031530c12592b0e9ac1b2ae7bebea920
6c9c5f48f9bed5c72e50d701f8dfbe981cccf7563717c240bee6445ff7860bb3
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Tue, 30 Aug 2022 16:59:59 GMT
Last-Modified: Tue, 30 Aug 2022 16:02:38 GMT
Server: ECS (nyb/1D2C)
X-Cache: Miss from cloudfront
Via: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 1XXLDHHBp97ath1K_ww1HXpw5Fxpax78Q1vfq5U2-azL5dNIIuxeVA==
Age: 3441
adservice.google.no/ddm/fls/i/src=4788165;type=sitew0;cat=proof0;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;ord=6104118958363.95;~oref=https://www.proofpoint.com/
302 Found 0 B URL HTTP/2 adservice.google.no/ddm/fls/i/src=4788165;type=sitew0;cat=proof0;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;ord=6104118958363.95;~oref=https://www.proofpoint.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ddm/fls/i/src=4788165;type=sitew0;cat=proof0;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;ord=6104118958363.95;~oref=https://www.proofpoint.com/ HTTP/1.1
Host: adservice.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://adservice.google.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 30 Aug 2022 16:59:59 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
location: https://4788165.fls.doubleclick.net/ddm/fls/r/src=4788165;type=sitew0;cat=proof0;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;ord=6104118958363.95;~oref=https://www.proofpoint.com/
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
server: cafe
content-length: 0
x-xss-protection: 0
alt-svc: h3="googleads.g.doubleclick.net:443"; ma=2592000,h3=":443"; ma=2592000,h3-29="googleads.g.doubleclick.net:443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,43",quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
adservice.google.no/ddm/fls/i/src=10487471;type=retar0;cat=retar0;ord=4573188797558;gtm=2wg8t0;auiddc=841328466.1654502445;~oref=https%3A%2F%2Fwww.proofpoint.com%2Fus%2Fwombat-security-is-now-proofpoint
302 Found 0 B URL HTTP/2 adservice.google.no/ddm/fls/i/src=10487471;type=retar0;cat=retar0;ord=4573188797558;gtm=2wg8t0;auiddc=841328466.1654502445;~oref=https%3A%2F%2Fwww.proofpoint.com%2Fus%2Fwombat-security-is-now-proofpoint
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ddm/fls/i/src=10487471;type=retar0;cat=retar0;ord=4573188797558;gtm=2wg8t0;auiddc=841328466.1654502445;~oref=https%3A%2F%2Fwww.proofpoint.com%2Fus%2Fwombat-security-is-now-proofpoint HTTP/1.1
Host: adservice.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://adservice.google.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 30 Aug 2022 16:59:59 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
location: https://10487471.fls.doubleclick.net/ddm/fls/r/src=10487471;type=retar0;cat=retar0;ord=4573188797558;gtm=2wg8t0;auiddc=841328466.1654502445;~oref=https%3A%2F%2Fwww.proofpoint.com%2Fus%2Fwombat-security-is-now-proofpoint
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
server: cafe
content-length: 0
x-xss-protection: 0
alt-svc: h3="googleads.g.doubleclick.net:443"; ma=2592000,h3=":443"; ma=2592000,h3-29="googleads.g.doubleclick.net:443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,43",quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 53107706f5f5b61cde1a69d2c1bb8a24
965c3b0408d040b9c97db24101f5e9cf929a8571
c1d79bd6a1541a676e24e825da35ec0a3a78ccc31accd8ed4e5fe67e62e737ae
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Tue, 30 Aug 2022 16:59:59 GMT
Last-Modified: Tue, 30 Aug 2022 15:12:34 GMT
Server: ECS (nyb/1D24)
X-Cache: Miss from cloudfront
Via: 1.1 04c4f064943f75498361739eb063cb7a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 2rA3IvRwr2qdHqorzVQn0Fv7PacnfOL1X6wdGfJYUTpV6Y0WfGIwwA==
Age: 6446
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 53107706f5f5b61cde1a69d2c1bb8a24
965c3b0408d040b9c97db24101f5e9cf929a8571
c1d79bd6a1541a676e24e825da35ec0a3a78ccc31accd8ed4e5fe67e62e737ae
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Tue, 30 Aug 2022 16:59:59 GMT
Last-Modified: Tue, 30 Aug 2022 16:01:20 GMT
Server: ECS (nyb/1D29)
X-Cache: Miss from cloudfront
Via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: qVsnW2zhtZoa3a1zqWXoTOL9t8BghYmPUAyGGbNIRbYfNYOX5mFsjg==
Age: 3519
apt.techtarget.com/activity/activity.gif?activityTypeId=31&cid=1268939&version=2.1.1&ref=https%3A%2F%2Fwww.proofpoint.com%2Fus%2Fwombat-security-is-now-proofpoint&r=1661878799410
200 OK 43 B URL HTTP/1.1 apt.techtarget.com/activity/activity.gif?activityTypeId=31&cid=1268939&version=2.1.1&ref=https%3A%2F%2Fwww.proofpoint.com%2Fus%2Fwombat-security-is-now-proofpoint&r=1661878799410
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash fc94fb0c3ed8a8f909dbc7630a0987ff
56d45f8a17f5078a20af9962c992ca4678450765
2dfe28cbdb83f01c940de6a88ab86200154fd772d568035ac568664e52068363
GET /activity/activity.gif?activityTypeId=31&cid=1268939&version=2.1.1&ref=https%3A%2F%2Fwww.proofpoint.com%2Fus%2Fwombat-security-is-now-proofpoint&r=1661878799410 HTTP/1.1
Host: apt.techtarget.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.proofpoint.com/
Cookie: __cf_bm=ZSe0wptF.MiFtGAvqlMP0LnhgYAqsVK7.D_vwEJm5O4-1661878799-0-AQDQenZSfJdplRJ854qQtEQCPNFKGue/K7x8oJ5G5AbJeJ1i01A7ppIzi2eFeMimben/U59l7cnCZ+rzzl/d0kw=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Tue, 30 Aug 2022 16:59:59 GMT
Server: Apache/2.4.6 (CentOS)
Last-Modified: Tue, 26 Mar 2019 18:30:29 GMT
ETag: "2b-5850384023492"
Accept-Ranges: bytes
Content-Length: 43
Keep-Alive: timeout=5, max=3
Connection: Keep-Alive
Content-Type: image/gif
data.adxcel-ec2.com/pixel/?ad_log=referer&action=content&content_id=%2Fus%2Fwombat-security-is-now-proofpoint&pixid=93500acd-fb24-4d4c-b771-2b769752ab62
200 OK 43 B URL HTTP/1.1 data.adxcel-ec2.com/pixel/?ad_log=referer&action=content&content_id=%2Fus%2Fwombat-security-is-now-proofpoint&pixid=93500acd-fb24-4d4c-b771-2b769752ab62
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash a5098c60b3b0c879a2c7af6c68b7b53f
939f40be7f1aaf623f62886de4aaba3886df9b65
693d949d8c3fdc7fd4ace7c340b5f177a9f0c5be7bafee8bc93a7d88b7523d75
GET /pixel/?ad_log=referer&action=content&content_id=%2Fus%2Fwombat-security-is-now-proofpoint&pixid=93500acd-fb24-4d4c-b771-2b769752ab62 HTTP/1.1
Host: data.adxcel-ec2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.proofpoint.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
epsilon.6sense.com/v3/company/details
200 OK 249 B URL HTTP/2 epsilon.6sense.com/v3/company/details
IP
File type JSON data\012- , ASCII text, with very long lines (445), with no line terminators
Hash e6e7168d829a1f16a67b08942690076d
099be4afd94f948c32bf8e696a613d67d59f8245
e7538057a0b1e5b73b8ed35bef05a7fe8e9b03dfa0d295ada080fa280638e5e9
GET /v3/company/details HTTP/1.1
Host: epsilon.6sense.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Authorization: Token cf897ce61a58c53c1861f742ebebc2622f6b0fcf
Origin: https://www.proofpoint.com
Connection: keep-alive
Referer: https://www.proofpoint.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 30 Aug 2022 16:59:59 GMT
content-type: application/json
content-length: 249
server: nginx
access-control-allow-origin: https://www.proofpoint.com
access-control-allow-credentials: true
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash 4f752e725a4dda0c3fcf610aac004aa6
6146e79fba7c973ca99213fa1ea1885c4c996f67
4307f06f52c72253559223676e828c2634663b94e281d92c1d14ed65a95b39e6
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 30 Aug 2022 16:59:59 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Tue, 30 Aug 2022 10:37:00 GMT
Expires: Tue, 06 Sep 2022 10:36:59 GMT
Etag: "6146e79fba7c973ca99213fa1ea1885c4c996f67"
Cache-Control: max-age=581219,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 742f14815ae8b506-OSL
snap.licdn.com/li.lms-analytics/insight.min.js
200 OK 3.1 kB URL HTTP/2 snap.licdn.com/li.lms-analytics/insight.min.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (7751)
Hash 57efbbeb3e1d23c82b677511c67c8b0e
f927ba115ef4be362694c22850ddbdd1c1b054d1
873b38d80c8ff1ffcac23ecdb7fb2d17413ae3c217236d8e1e24574b1c4707c6
GET /li.lms-analytics/insight.min.js HTTP/1.1
Host: snap.licdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://10487471.fls.doubleclick.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Fri, 12 Aug 2022 20:23:36 GMT
accept-ranges: bytes
content-type: application/x-javascript;charset=utf-8
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=21400
date: Tue, 30 Aug 2022 16:59:59 GMT
content-length: 3063
x-cdn: AKAM
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 35278831708b29bbfe2e8243eebdefa9
f012a24e4c6a8d41454cd133b4cfe7f8cc8db5c1
2d2cd570252fec27587ce4117941cc0d029c0054520dc9cf33ff4fd44e189dc6
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2016
Cache-Control: max-age=129126
Content-Type: application/ocsp-response
Date: Tue, 30 Aug 2022 16:59:59 GMT
Etag: "630d8f95-1d7"
Expires: Thu, 01 Sep 2022 04:52:05 GMT
Last-Modified: Tue, 30 Aug 2022 04:18:29 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 471
b.6sc.co/v1/beacon/img.gif?token=76d4adecd2340b300ba5d4296ecef89d&svisitor=null&visitor=11c3ab59-3e13-40e0-8e72-d961450788f5&session=93287037-a89e-400e-8d11-8b135fcca991&event=a_pageload&q=%7B%22pageLoadTime%22%3A%22Tue%2C%2030%20Aug%202022%2016%3A59%3A59%20GMT%22%7D&isIframe=false&m=%7B%22description%22%3A%22Wombat%20Security%20is%20now%20Proofpoint%20Security%20Awareness%20Training.%20Learn%20about%20the%20integration%20and%20benefits%20you%20get%20with%20Proofpoint.%22%2C%22keywords%22%3A%22%22%2C%22title%22%3A%22Wombat%20Security%20Is%20Now%20Proofpoint%20%7C%20Proofpoint%22%7D&cb=&r=&thirdParty=%7B%7D&v2=1&pageURL=https%3A%2F%2Fwww.proofpoint.com%2Fus%2Fwombat-security-is-now-proofpoint&pageViewId=f06092c0-2238-4783-8182-9dda3ff078ea
200 OK 43 B URL HTTP/2 b.6sc.co/v1/beacon/img.gif?token=76d4adecd2340b300ba5d4296ecef89d&svisitor=null&visitor=11c3ab59-3e13-40e0-8e72-d961450788f5&session=93287037-a89e-400e-8d11-8b135fcca991&event=a_pageload&q=%7B%22pageLoadTime%22%3A%22Tue%2C%2030%20Aug%202022%2016%3A59%3A59%20GMT%22%7D&isIframe=false&m=%7B%22description%22%3A%22Wombat%20Security%20is%20now%20Proofpoint%20Security%20Awareness%20Training.%20Learn%20about%20the%20integration%20and%20benefits%20you%20get%20with%20Proofpoint.%22%2C%22keywords%22%3A%22%22%2C%22title%22%3A%22Wombat%20Security%20Is%20Now%20Proofpoint%20%7C%20Proofpoint%22%7D&cb=&r=&thirdParty=%7B%7D&v2=1&pageURL=https%3A%2F%2Fwww.proofpoint.com%2Fus%2Fwombat-security-is-now-proofpoint&pageViewId=f06092c0-2238-4783-8182-9dda3ff078ea
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash f837aa60b6fe83458f790db60d529fc9
14af87ccec7f81bb28d53c84da2fd5a9d5925cda
dcecab1355b5c2b9ecef281322bf265ac5840b4688748586e9632b473a5fe56b
GET /v1/beacon/img.gif?token=76d4adecd2340b300ba5d4296ecef89d&svisitor=null&visitor=11c3ab59-3e13-40e0-8e72-d961450788f5&session=93287037-a89e-400e-8d11-8b135fcca991&event=a_pageload&q=%7B%22pageLoadTime%22%3A%22Tue%2C%2030%20Aug%202022%2016%3A59%3A59%20GMT%22%7D&isIframe=false&m=%7B%22description%22%3A%22Wombat%20Security%20is%20now%20Proofpoint%20Security%20Awareness%20Training.%20Learn%20about%20the%20integration%20and%20benefits%20you%20get%20with%20Proofpoint.%22%2C%22keywords%22%3A%22%22%2C%22title%22%3A%22Wombat%20Security%20Is%20Now%20Proofpoint%20%7C%20Proofpoint%22%7D&cb=&r=&thirdParty=%7B%7D&v2=1&pageURL=https%3A%2F%2Fwww.proofpoint.com%2Fus%2Fwombat-security-is-now-proofpoint&pageViewId=f06092c0-2238-4783-8182-9dda3ff078ea HTTP/1.1
Host: b.6sc.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.proofpoint.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
cache-control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate
content-type: image/gif
etag: "60bb2e15-2b"
expires: Wed, 19 Apr 2000 11:43:00 GMT
last-modified: Sat, 05 Jun 2021 07:56:05 GMT
pragma: no-cache
server: nginx/1.14.0 (Ubuntu)
x-content-type-options: nosniff
content-length: 43
date: Tue, 30 Aug 2022 16:59:59 GMT
set-cookie: 6suuid=261f1602672900000f420e636a030000ae080300; expires=Thu, 29-Aug-2024 16:59:59 GMT; path=/; domain=.6sc.co; SameSite=None; secure
access-control-allow-origin:
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: GET,POST
X-Firefox-Spdy: h2
pixel.sitescout.com/up/d7557a63ab8c88be?url=retargeting&cntr_revenue=&cntr_transactionId=4573188797558&u1=&u2=&u3=&u4=&u5=&cntr_url=https%3A%2F%2Fwww.proofpoint.com%2Fus%2Fwombat-security-is-now-proofpoint
302 Found 0 B URL HTTP/2 pixel.sitescout.com/up/d7557a63ab8c88be?url=retargeting&cntr_revenue=&cntr_transactionId=4573188797558&u1=&u2=&u3=&u4=&u5=&cntr_url=https%3A%2F%2Fwww.proofpoint.com%2Fus%2Fwombat-security-is-now-proofpoint
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /up/d7557a63ab8c88be?url=retargeting&cntr_revenue=&cntr_transactionId=4573188797558&u1=&u2=&u3=&u4=&u5=&cntr_url=https%3A%2F%2Fwww.proofpoint.com%2Fus%2Fwombat-security-is-now-proofpoint HTTP/1.1
Host: pixel.sitescout.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://10487471.fls.doubleclick.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
set-cookie: ssi=b460236d-34a0-448e-a871-43bffc132e71#1661878799870; Domain=.sitescout.com; Expires=Wed, 30-Aug-2023 16:59:59 GMT; Path=/; Secure; SameSite=None
location: https://pixel.sitescout.com/up/d7557a63ab8c88be?cookieQ=1&url=retargeting&cntr_revenue=&cntr_transactionId=4573188797558&u1=&u2=&u3=&u4=&u5=&cntr_url=https%3A%2F%2Fwww.proofpoint.com%2Fus%2Fwombat-security-is-now-proofpoint
content-length: 0
date: Tue, 30 Aug 2022 16:59:59 GMT
server: AC1.1
X-Firefox-Spdy: h2
pixel.mathtag.com/event/img?mt_id=1442966&mt_adid=226348&mt_exem=&mt_excl=&v1=&v2=&v3=&s1=&s2=&s3=&ord=13232442
200 OK 43 B URL HTTP/1.1 pixel.mathtag.com/event/img?mt_id=1442966&mt_adid=226348&mt_exem=&mt_excl=&v1=&v2=&v3=&s1=&s2=&s3=&ord=13232442
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 325472601571f31e1bf00674c368d335
2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
GET /event/img?mt_id=1442966&mt_adid=226348&mt_exem=&mt_excl=&v1=&v2=&v3=&s1=&s2=&s3=&ord=13232442 HTTP/1.1
Host: pixel.mathtag.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4788165.fls.doubleclick.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/gif
Content-Length: 43
Access-Control-Allow-Origin: *
Server: MT3 4505 5b23575 master iad-pixel-x31 config:1.0.0
Cache-Control: no-cache
P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
Expires: Tue, 30 Aug 2022 16:59:58 GMT
Date: Tue, 30 Aug 2022 16:59:59 GMT
Connection: keep-alive
Set-Cookie: uuid=6a6b630e-420f-4000-bdcd-7ba9e2a43f73; domain=.mathtag.com; path=/; expires=Wed, 27-Sep-2023 16:59:59 GMT; SameSite=None; Secure
visitor.reactful.com/config/879986/?page=%2Fus%2Fwombat-security-is-now-proofpoint&hash=&referer=&user_id=&hshkgid=2e1db51e-18b7-4667-9eac-924c762f5f38&cb_rtfl=_rtfl_jsonp_0
200 OK 0 B URL HTTP/2 visitor.reactful.com/config/879986/?page=%2Fus%2Fwombat-security-is-now-proofpoint&hash=&referer=&user_id=&hshkgid=2e1db51e-18b7-4667-9eac-924c762f5f38&cb_rtfl=_rtfl_jsonp_0
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /config/879986/?page=%2Fus%2Fwombat-security-is-now-proofpoint&hash=&referer=&user_id=&hshkgid=2e1db51e-18b7-4667-9eac-924c762f5f38&cb_rtfl=_rtfl_jsonp_0 HTTP/1.1
Host: visitor.reactful.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: url-params-data
Referer: https://www.proofpoint.com/
Origin: https://www.proofpoint.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: no-cache
access-control-allow-credentials: true
access-control-allow-origin: https://www.proofpoint.com
access-control-allow-methods: GET
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Six-Sense-Data, Custom-Vars-Data, Url-Params-Data
content-type: text/javascript
set-cookie: unique_visitor_session=eyJfc2lkIjoiVjdqWGhSd0ppanR6N0ZPOXllNHA1NCJ9|1661878799|de179bfa71123075e25f083d375fa36ae801803b; Max-Age=315359999; Path=/; expires=Fri, 27-Aug-2032 16:59:59 GMT
p3p: CP="NOI ADM DEV PSAi COM NAV OUR OTR STP IND DEM"
x-cloud-trace-context: 47919708b7709d984825d3fd51f6bf5e
date: Tue, 30 Aug 2022 16:59:59 GMT
server: Google Frontend
content-length: 0
expires: Tue, 30 Aug 2022 16:59:59 GMT
X-Firefox-Spdy: h2
region1.google-analytics.com/g/collect?v=2&tid=G-B1V8SZE3GL>m=2oe8t0&_p=465006274&cid=883930930.1661878799&ul=en-us&sr=1280x1024&_z=ccd.v9B&_s=1&sid=1661878799&sct=1&seg=0&dl=https%3A%2F%2Fwww.proofpoint.com%2Fus%2Fwombat-security-is-now-proofpoint&dt=Wombat%20Security%20Is%20Now%20Proofpoint%20%7C%20Proofpoint&en=page_view&_fv=1&_nsi=1&_ss=1
204 No Content 0 B URL HTTP/2 region1.google-analytics.com/g/collect?v=2&tid=G-B1V8SZE3GL>m=2oe8t0&_p=465006274&cid=883930930.1661878799&ul=en-us&sr=1280x1024&_z=ccd.v9B&_s=1&sid=1661878799&sct=1&seg=0&dl=https%3A%2F%2Fwww.proofpoint.com%2Fus%2Fwombat-security-is-now-proofpoint&dt=Wombat%20Security%20Is%20Now%20Proofpoint%20%7C%20Proofpoint&en=page_view&_fv=1&_nsi=1&_ss=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-B1V8SZE3GL>m=2oe8t0&_p=465006274&cid=883930930.1661878799&ul=en-us&sr=1280x1024&_z=ccd.v9B&_s=1&sid=1661878799&sct=1&seg=0&dl=https%3A%2F%2Fwww.proofpoint.com%2Fus%2Fwombat-security-is-now-proofpoint&dt=Wombat%20Security%20Is%20Now%20Proofpoint%20%7C%20Proofpoint&en=page_view&_fv=1&_nsi=1&_ss=1 HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.proofpoint.com
Connection: keep-alive
Referer: https://www.proofpoint.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://www.proofpoint.com
date: Tue, 30 Aug 2022 16:59:59 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
gwmtracking.com/p/v/1/5b7320b8f870815f7f59492b/format/img?gtmcb=1006082432
302 0 B URL HTTP/1.1 gwmtracking.com/p/v/1/5b7320b8f870815f7f59492b/format/img?gtmcb=1006082432
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /p/v/1/5b7320b8f870815f7f59492b/format/img?gtmcb=1006082432 HTTP/1.1
Host: gwmtracking.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.proofpoint.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302
Set-Cookie: kwsu=630e420ffc13a06445a4e7de; Max-Age=2147483647; Expires=Sun 17 Sep 2090 13:14:06 GMT; Path=/; Secure; SameSite=None
Location: https://ad.doubleclick.net/ddm/activity/src=8909468;type=invmedia;cat=1l6xh4ap;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;ord=1?
Content-Type: image/png
Content-Length: 0
Date: Tue, 30 Aug 2022 16:59:58 GMT
px.ads.linkedin.com/collect?v=2&fmt=js&pid=2782676&time=1661878799897&url=https%3A%2F%2Fadservice.google.com%2F
302 Found 0 B URL HTTP/2 px.ads.linkedin.com/collect?v=2&fmt=js&pid=2782676&time=1661878799897&url=https%3A%2F%2Fadservice.google.com%2F
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /collect?v=2&fmt=js&pid=2782676&time=1661878799897&url=https%3A%2F%2Fadservice.google.com%2F HTTP/1.1
Host: px.ads.linkedin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://10487471.fls.doubleclick.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
location: https://www.linkedin.com/px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D2782676%26time%3D1661878799897%26url%3Dhttps%253A%252F%252Fadservice.google.com%252F%26liSync%3Dtrue
set-cookie: UserMatchHistory=AQI_ofTFXuOIcAAAAYLvsg5AVX0OHwXD8SByDQYeYtasTv9ut5tXDHapMsxmSWO8Z7l42hN5FF-0CQ; Max-Age=2592000; Expires=Thu, 29 Sep 2022 16:59:59 GMT; SameSite=None; Path=/; Domain=.linkedin.com; Secure
AnalyticsSyncHistory=AQLTXtr2RMDM3QAAAYLvsg5A1e3PkLhnXAep-5EDH4EaOga5w98mYEe2Y0ECmUfdbEDIBkcWmVp1mlMMztYdcg; Max-Age=2592000; Expires=Thu, 29 Sep 2022 16:59:59 GMT; SameSite=None; Path=/; Domain=.linkedin.com; Secure
lang=v=2&lang=en-us; SameSite=None; Path=/; Domain=ads.linkedin.com; Secure
bcookie="v=2&d3603d42-8bcb-445b-84b9-806e1322836e"; domain=.linkedin.com; Path=/; Secure; Expires=Wed, 30-Aug-2023 16:59:59 GMT; SameSite=None
lidc="b=TGST09:s=T:r=T:a=T:p=T:g=2373:u=1:x=1:i=1661878799:t=1661965199:v=2:sig=AQEnW5xAafVwel-bS_ny73MlDjGu7ZSc"; Expires=Wed, 31 Aug 2022 16:59:59 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
x-li-fabric: prod-ltx1
x-li-pop: afd-prod-ltx1-x
x-li-proto: http/2
x-li-uuid: AAXneE+HhfEGujMMWpczpg==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 44503A65990D476ABB9775EBAA645FCD Ref B: OSL30EDGE0110 Ref C: 2022-08-30T16:59:59Z
date: Tue, 30 Aug 2022 16:59:59 GMT
content-length: 0
X-Firefox-Spdy: h2
tracking.g2crowd.com/attribution_tracking/conversions/1645.js?p=https://www.proofpoint.com/us/wombat-security-is-now-proofpoint&e=
200 OK 16 kB URL HTTP/2 tracking.g2crowd.com/attribution_tracking/conversions/1645.js?p=https://www.proofpoint.com/us/wombat-security-is-now-proofpoint&e=
IP
File type ASCII text, with no line terminators
Hash b4582f7758e1a8f27f437b3590f8033b
64b8e4d6d715ced7af79604e7c5da1b37be633ae
cbf36e940ed4abf5f77361ad52b7bc4574ca6a9e1cc66518b8be712501520300
GET /attribution_tracking/conversions/1645.js?p=https://www.proofpoint.com/us/wombat-security-is-now-proofpoint&e= HTTP/1.1
Host: tracking.g2crowd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.proofpoint.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 30 Aug 2022 16:59:59 GMT
content-type: text/javascript; charset=utf-8
cache-control: max-age=600, public
etag: W/"3dae93a05edd9dcfc1864b87178a31e0"
x-request-id: 97cc0a3f-ae47-43a3-9e05-d7e7750455f3
x-runtime: 0.003699
strict-transport-security: max-age=604800
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-download-options: noopen
x-permitted-cross-domain-policies: none
referrer-policy: strict-origin-when-cross-origin
content-security-policy: default-src 'self' *.g2crowd.com *.g2.com; connect-src 'self' *.g2crowd.com *.g2.com; font-src 'self' *.g2crowd.com *.g2.com; form-action 'self' *.g2crowd.com *.g2.com; frame-src 'self' *.g2crowd.com *.g2.com; img-src 'self' *.g2crowd.com *.g2.com; manifest-src 'self' *.g2crowd.com *.g2.com; media-src 'self' *.g2crowd.com *.g2.com; object-src 'self' *.g2crowd.com *.g2.com; script-src 'self' *.g2crowd.com *.g2.com; style-src 'self' *.g2crowd.com *.g2.com; worker-src 'self' *.g2crowd.com *.g2.com
cf-cache-status: DYNAMIC
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
set-cookie: _session_id=4f636a3982095f426b0faee04f703253; path=/; expires=Tue, 13 Sep 2022 16:59:59 GMT; HttpOnly; secure; SameSite=None
__cf_bm=gOK7pQx5Te9O.JFoP6AerRLV9PFY6vECNauYu7HZDMc-1661878799-0-AXUSN7hq5bY85GyOxPndSShfkQqrPc6SP2u83kOmc9WOpAHYASn+NfX8o+EZ+qKknrtNiwp1TkJ+B5xPwDa1WBc=; path=/; expires=Tue, 30-Aug-22 17:29:59 GMT; domain=.g2crowd.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 742f1480bcdcb51e-OSL
content-encoding: br
X-Firefox-Spdy: h2
visitor.reactful.com/config/879986/?page=%2Fus%2Fwombat-security-is-now-proofpoint&hash=&referer=&user_id=&hshkgid=2e1db51e-18b7-4667-9eac-924c762f5f38&cb_rtfl=_rtfl_jsonp_0
200 OK 0 B URL HTTP/2 visitor.reactful.com/config/879986/?page=%2Fus%2Fwombat-security-is-now-proofpoint&hash=&referer=&user_id=&hshkgid=2e1db51e-18b7-4667-9eac-924c762f5f38&cb_rtfl=_rtfl_jsonp_0
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /config/879986/?page=%2Fus%2Fwombat-security-is-now-proofpoint&hash=&referer=&user_id=&hshkgid=2e1db51e-18b7-4667-9eac-924c762f5f38&cb_rtfl=_rtfl_jsonp_0 HTTP/1.1
Host: visitor.reactful.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Url-Params-Data: e30=
Origin: https://www.proofpoint.com
Connection: keep-alive
Referer: https://www.proofpoint.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: no-cache
access-control-allow-credentials: true
access-control-allow-origin: https://www.proofpoint.com
access-control-allow-methods: GET, OPTIONS
access-control-allow-headers: Six-Sense-Data,Custom-Vars-Data,Url-Params-Data
content-type: text/javascript
x-cloud-trace-context: 587e6c941d969c274327769855c31dde
date: Tue, 30 Aug 2022 17:00:00 GMT
server: Google Frontend
content-length: 0
X-Firefox-Spdy: h2
tracking.g2crowd.com/attribution_tracking/conversions/1594.js?p=https://www.proofpoint.com/us/wombat-security-is-now-proofpoint&e=
200 OK 20 B URL HTTP/2 tracking.g2crowd.com/attribution_tracking/conversions/1594.js?p=https://www.proofpoint.com/us/wombat-security-is-now-proofpoint&e=
IP
File type ASCII text, with no line terminators
Hash 5b920c7eefbc73bd9199e5c12ff35531
7ad858a5251bad62a254a19b0983676c8ca50898
d879481b68705d682b81dd34850bae06ffc7fbf464b16da9a9ef54ecf2e421b3
GET /attribution_tracking/conversions/1594.js?p=https://www.proofpoint.com/us/wombat-security-is-now-proofpoint&e= HTTP/1.1
Host: tracking.g2crowd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.proofpoint.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 30 Aug 2022 16:59:59 GMT
content-type: text/javascript; charset=utf-8
cache-control: max-age=600, public
etag: W/"3dae93a05edd9dcfc1864b87178a31e0"
x-request-id: b5fb1601-770d-45f1-a832-9d135a2a97f4
x-runtime: 0.003389
strict-transport-security: max-age=604800
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-download-options: noopen
x-permitted-cross-domain-policies: none
referrer-policy: strict-origin-when-cross-origin
content-security-policy: default-src 'self' *.g2crowd.com *.g2.com; connect-src 'self' *.g2crowd.com *.g2.com; font-src 'self' *.g2crowd.com *.g2.com; form-action 'self' *.g2crowd.com *.g2.com; frame-src 'self' *.g2crowd.com *.g2.com; img-src 'self' *.g2crowd.com *.g2.com; manifest-src 'self' *.g2crowd.com *.g2.com; media-src 'self' *.g2crowd.com *.g2.com; object-src 'self' *.g2crowd.com *.g2.com; script-src 'self' *.g2crowd.com *.g2.com; style-src 'self' *.g2crowd.com *.g2.com; worker-src 'self' *.g2crowd.com *.g2.com
cf-cache-status: DYNAMIC
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
set-cookie: _session_id=57431a8e7b0f532f2a107f4a635c8d7f; path=/; expires=Tue, 13 Sep 2022 16:59:59 GMT; HttpOnly; secure; SameSite=None
__cf_bm=_dG2.Vxj98QQ8P2YIAC5kbFfhhTaju_If4KWptiGOfU-1661878799-0-AY/HwRr+t11tZJfsWcgP+jb5T7pRnlcCwMFnETwwVTWXAQ5N7T1LtEHqLKkkf2VGKHGpSoebbiHIUE1lrQtl/vc=; path=/; expires=Tue, 30-Aug-22 17:29:59 GMT; domain=.g2crowd.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 742f14807c85b51e-OSL
content-encoding: br
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 26918a542b9365b6f37166478b97350c
eb07defb2a83bc7f7ec9daf5677a8fb30648fcc6
2d798ea9020987b456a2e6fffc78fbadc5a31244d99fd3eb375911564daf3171
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6447
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 30 Aug 2022 17:00:00 GMT
Last-Modified: Tue, 30 Aug 2022 15:12:35 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 471
tracking.g2crowd.com/attribution_tracking/conversions/1646.js?p=https://www.proofpoint.com/us/wombat-security-is-now-proofpoint&e=
200 OK 15 kB URL HTTP/2 tracking.g2crowd.com/attribution_tracking/conversions/1646.js?p=https://www.proofpoint.com/us/wombat-security-is-now-proofpoint&e=
IP
File type ASCII text, with no line terminators
Hash 305c266d9d4fd307ca573fc6629af1ce
4165d0e824707c6e738c4ac2f1fe935f37cc9010
3a740422b35ba9f77d9717587a409cbae05f7207b262e5466970916904f519cb
GET /attribution_tracking/conversions/1646.js?p=https://www.proofpoint.com/us/wombat-security-is-now-proofpoint&e= HTTP/1.1
Host: tracking.g2crowd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.proofpoint.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 30 Aug 2022 16:59:59 GMT
content-type: text/javascript; charset=utf-8
cache-control: max-age=600, public
etag: W/"3dae93a05edd9dcfc1864b87178a31e0"
x-request-id: e1d003b7-aedd-40cf-83b8-b647661e8b45
x-runtime: 0.002745
strict-transport-security: max-age=604800
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-download-options: noopen
x-permitted-cross-domain-policies: none
referrer-policy: strict-origin-when-cross-origin
content-security-policy: default-src 'self' *.g2crowd.com *.g2.com; connect-src 'self' *.g2crowd.com *.g2.com; font-src 'self' *.g2crowd.com *.g2.com; form-action 'self' *.g2crowd.com *.g2.com; frame-src 'self' *.g2crowd.com *.g2.com; img-src 'self' *.g2crowd.com *.g2.com; manifest-src 'self' *.g2crowd.com *.g2.com; media-src 'self' *.g2crowd.com *.g2.com; object-src 'self' *.g2crowd.com *.g2.com; script-src 'self' *.g2crowd.com *.g2.com; style-src 'self' *.g2crowd.com *.g2.com; worker-src 'self' *.g2crowd.com *.g2.com
cf-cache-status: DYNAMIC
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
set-cookie: _session_id=44d7314b8c11afb03c9a9d8018f25231; path=/; expires=Tue, 13 Sep 2022 16:59:59 GMT; HttpOnly; secure; SameSite=None
__cf_bm=dzAuL.SUhiQQpW1jUoV49orbyomcojtIRkhQd22JDYg-1661878799-0-AcCEosAzcn7xFhhO+bRRv1y6tbmjyn5IPmBZ2q9OlwCvckAKp3TI/cnCYdaBp4UXu/cWNxqnQROQzHg6G/qcM6s=; path=/; expires=Tue, 30-Aug-22 17:29:59 GMT; domain=.g2crowd.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 742f147f6b39b51e-OSL
content-encoding: br
X-Firefox-Spdy: h2
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1325)
Hash 56f5d7f608e25d64207135f045f988cb
901eb59372ae330ae85e1384da93479b21ae1082
1910daea79e5a9d04829a91e432dfa56f45a80a3e14a8cf667fec73af9fd3d29
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.proofpoint.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20006
date: Tue, 30 Aug 2022 16:41:12 GMT
expires: Tue, 30 Aug 2022 18:41:12 GMT
cache-control: public, max-age=7200
age: 1128
last-modified: Wed, 13 Apr 2022 21:02:38 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
trk.techtarget.com/tracking.js
200 OK 18 kB URL HTTP/2 trk.techtarget.com/tracking.js
IP
File type ASCII text, with very long lines (2510), with no line terminators
Hash c2c3fe3c365cdb20a61e600d457a8883
18bd29706d7f3a8abaeeb732f2d9706b2faf5781
e94321b1b91ea72ff34622d8e6faf8d4123093e36500b3ae87a547d4971546f1
GET /tracking.js HTTP/1.1
Host: trk.techtarget.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.proofpoint.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 30 Aug 2022 16:59:59 GMT
content-type: text/javascript
cache-control: max-age=1200
cf-bgj: minify
expires: Tue, 30 Aug 2022 17:04:24 GMT
last-modified: Fri, 15 Oct 2021 14:31:37 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 87
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
set-cookie: __cf_bm=ZSe0wptF.MiFtGAvqlMP0LnhgYAqsVK7.D_vwEJm5O4-1661878799-0-AQDQenZSfJdplRJ854qQtEQCPNFKGue/K7x8oJ5G5AbJeJ1i01A7ppIzi2eFeMimben/U59l7cnCZ+rzzl/d0kw=; path=/; expires=Tue, 30-Aug-22 17:29:59 GMT; domain=.techtarget.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 742f147f9e35b4f3-OSL
content-encoding: br
X-Firefox-Spdy: h2
www.linkedin.com/px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D2782676%26time%3D1661878799897%26url%3Dhttps%253A%252F%252Fadservice.google.com%252F%26liSync%3Dtrue
302 Found 0 B URL HTTP/2 www.linkedin.com/px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D2782676%26time%3D1661878799897%26url%3Dhttps%253A%252F%252Fadservice.google.com%252F%26liSync%3Dtrue
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D2782676%26time%3D1661878799897%26url%3Dhttps%253A%252F%252Fadservice.google.com%252F%26liSync%3Dtrue HTTP/1.1
Host: www.linkedin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://10487471.fls.doubleclick.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
cache-control: no-cache, no-store
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
location: https://px.ads.linkedin.com/collect?v=2&fmt=js&pid=2782676&time=1661878799897&url=https%3A%2F%2Fadservice.google.com%2F&liSync=true
set-cookie: lang=v=2&lang=en-us; Domain=linkedin.com; Path=/; Secure; SameSite=None
bcookie="v=2&a29816de-c0d7-4157-8feb-1b69cf54f1c3"; Domain=.linkedin.com; Expires=Wed, 30-Aug-2023 17:00:00 GMT; Path=/; Secure; SameSite=None
bscookie="v=1&202208301700003ce5b175-19c0-45ff-8b06-e230ec15d130AQGjM-yk-db_Fz6mwl3gwt6mElpwfPAT"; Domain=.www.linkedin.com; Expires=Wed, 30-Aug-2023 17:00:00 GMT; Path=/; HttpOnly; Secure; SameSite=None
li_gc=MTswOzE2NjE4Nzg4MDA7MjswMjEFeb7eXjxnjDjJxwziNkoBb0B5AXEZ8S0wUJwaqIvDUQ==; Domain=.linkedin.com; Expires=Sun, 26 Feb 2023 17:00:00 GMT; Path=/; Secure; SameSite=None
lidc="b=TGST09:s=T:r=T:a=T:p=T:g=2373:u=1:x=1:i=1661878800:t=1661965200:v=2:sig=AQGSdI_GtjNLSRLxAraxafklgw83EJ5e"; Expires=Wed, 31 Aug 2022 17:00:00 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
content-security-policy: default-src *; connect-src 'self' https://media-src.linkedin.com/media/ www.linkedin.com s.c.lnkd.licdn.com m.c.lnkd.licdn.com wss://*.linkedin.com dms.licdn.com https://dpm.demdex.net/id lnkd.demdex.net blob: https://accounts.google.com/gsi/status https://linkedin.sc.omtrdc.net/b/ss/ www.google-analytics.com https://*.qualtrics.com static.licdn.com static-exp1.licdn.com static-exp2.licdn.com static-exp3.licdn.com media.licdn.com media-exp1.licdn.com media-exp2.licdn.com media-exp3.licdn.com; img-src data: blob: *; font-src data: *; style-src 'unsafe-inline' 'self' static-src.linkedin.com *.licdn.com; script-src 'report-sample' 'unsafe-inline' 'unsafe-eval' 'self' spdy.linkedin.com static-src.linkedin.com *.ads.linkedin.com *.licdn.com static.chartbeat.com www.google-analytics.com ssl.google-analytics.com bcvipva02.rightnowtech.com www.bizographics.com sjs.bizographics.com js.bizographics.com d.la4-c1-was.salesforceliveagent.com https://snap.licdn.com/li.lms-analytics/ platform.linkedin.com platform-akam.linkedin.com platform-ecst.linkedin.com platform-azur.linkedin.com; object-src 'none'; media-src blob: *; child-src blob: lnkd-communities: voyager: *; frame-ancestors 'self'
x-frame-options: sameorigin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
expect-ct: max-age=86400, report-uri="https://www.linkedin.com/platform-telemetry/ct"
x-li-fabric: prod-ltx1
report-to: {"group":"network-errors","max_age":2592000,"endpoints":[{"url":"https://www.linkedin.com/li/rep"}],"include_subdomains":true}
nel: {"report_to":"network-errors","max_age":1296000,"success_fraction":0.00066,"failure_fraction":1,"include_subdomains":true}
x-li-pop: afd-prod-ltx1-x
x-li-proto: http/2
x-li-uuid: AAXneE+KHvBoBWsOYvjt2Q==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 27409E867DCE4D5B9BF939CFAC75C4B3 Ref B: OSL30EDGE0110 Ref C: 2022-08-30T17:00:00Z
date: Tue, 30 Aug 2022 16:59:59 GMT
content-length: 0
X-Firefox-Spdy: h2
bat.bing.com/bat.js
200 OK 11 kB IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type Unicode text, UTF-8 text, with very long lines (38826), with no line terminators
Hash 293ae3e0fc8b0d5c143fdf9d8490228d
3976c659b908e70818a3a1ac71860b497fe2d1a9
04a840d967ae836e14179bde574cabf14a1fc871182ca0f8193e7a0b06c727ab
GET /bat.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.proofpoint.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: private,max-age=1800
content-length: 11367
content-type: application/javascript
content-encoding: gzip
last-modified: Thu, 28 Jul 2022 17:32:37 GMT
accept-ranges: bytes
etag: "80a8697a8a2d81:0"
vary: Accept-Encoding
set-cookie: MUID=297F97C2335265E309E885D232A7647D; domain=.bing.com; expires=Sun, 24-Sep-2023 17:00:00 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: D0C684F696304CBDB15286F77A1E3B69 Ref B: OSL30EDGE0522 Ref C: 2022-08-30T17:00:00Z
date: Tue, 30 Aug 2022 16:59:59 GMT
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8483eb99dbd130593ed0072e2fbaccf9
fcb83f0b4a448f0b94b0bf9db431cc802413dacd
5e07e7bbf5dd7a48f9330dbc0248b7a1aa69dff7a9a913f493a384d2ec332f74
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5E07E7BBF5DD7A48F9330DBC0248B7A1AA69DFF7A9A913F493A384D2EC332F74"
Last-Modified: Sun, 28 Aug 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4000
Expires: Tue, 30 Aug 2022 18:06:40 GMT
Date: Tue, 30 Aug 2022 17:00:00 GMT
Connection: keep-alive
connect.facebook.net/en_US/fbevents.js
200 OK 27 kB URL HTTP/2 connect.facebook.net/en_US/fbevents.js
IP
File type ASCII text, with very long lines (64348)
Hash b918752fafb5a6d1c6661f21a60dbf53
3d8b5f010fc029235fa154688094390af73a8e15
2b5128c593aa5c6cd3b9517c3ca2f9b67e02b8e387827e9f07f07ba51a66260c
GET /en_US/fbevents.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.proofpoint.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: application/x-javascript; charset=utf-8
content-security-policy: default-src facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com data: blob: 'self';script-src *.fbcdn.net *.facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com;connect-src *.fbcdn.net *.facebook.net wss://*.fbcdn.net attachment.fbsbx.com blob: 'self';block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: 5lgkbHYRlrfLoGWLxJ8GwduEXC+2DlO0ahdeyiz18GJtVAmbduHGNNiq5WRLErJu40OrAQhXdm95CE2kautAaQ==
priority: u=3,i
content-length: 26668
x-fb-trip-id: 1904183273
date: Tue, 30 Aug 2022 17:00:00 GMT
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8483eb99dbd130593ed0072e2fbaccf9
fcb83f0b4a448f0b94b0bf9db431cc802413dacd
5e07e7bbf5dd7a48f9330dbc0248b7a1aa69dff7a9a913f493a384d2ec332f74
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5E07E7BBF5DD7A48F9330DBC0248B7A1AA69DFF7A9A913F493A384D2EC332F74"
Last-Modified: Sun, 28 Aug 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4000
Expires: Tue, 30 Aug 2022 18:06:40 GMT
Date: Tue, 30 Aug 2022 17:00:00 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8483eb99dbd130593ed0072e2fbaccf9
fcb83f0b4a448f0b94b0bf9db431cc802413dacd
5e07e7bbf5dd7a48f9330dbc0248b7a1aa69dff7a9a913f493a384d2ec332f74
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5E07E7BBF5DD7A48F9330DBC0248B7A1AA69DFF7A9A913F493A384D2EC332F74"
Last-Modified: Sun, 28 Aug 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4000
Expires: Tue, 30 Aug 2022 18:06:40 GMT
Date: Tue, 30 Aug 2022 17:00:00 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8483eb99dbd130593ed0072e2fbaccf9
fcb83f0b4a448f0b94b0bf9db431cc802413dacd
5e07e7bbf5dd7a48f9330dbc0248b7a1aa69dff7a9a913f493a384d2ec332f74
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5E07E7BBF5DD7A48F9330DBC0248B7A1AA69DFF7A9A913F493A384D2EC332F74"
Last-Modified: Sun, 28 Aug 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4000
Expires: Tue, 30 Aug 2022 18:06:40 GMT
Date: Tue, 30 Aug 2022 17:00:00 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fac715f17-8b9a-495f-bc62-6136925908ac.jpeg
200 OK 6.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fac715f17-8b9a-495f-bc62-6136925908ac.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 7bfe221c6ea8b215ff7f30b28f7cd389
84b01ce7d173848c449e4332eb1fa1abe8ac307d
6c53f4d30d7f0f735c793f46ab25feb5767373718b6f92c7f13eeec8306b8ab5
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fac715f17-8b9a-495f-bc62-6136925908ac.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6405
x-amzn-requestid: 1c49054a-8058-48cc-8660-46e06070b23b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: XYcDvEJ4oAMFkyw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-630673b1-19d3c0a020e8efca51a1bb05;Sampled=0
x-amzn-remapped-date: Wed, 24 Aug 2022 18:53:37 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: SqsgdB7nD_msORiQkay5KD55fD1lW5wRyDFO4qCM0zR0W4HIy8UI6w==
via: 1.1 5a1753718d8b33365e5f693dd338c510.cloudfront.net (CloudFront), 1.1 68fadeb91f97256bb67b03bfca74d830.cloudfront.net (CloudFront), 1.1 google
date: Mon, 29 Aug 2022 22:48:13 GMT
age: 65507
etag: "84b01ce7d173848c449e4332eb1fa1abe8ac307d"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F67641144-189e-4213-b00d-7d27d45f0e9b.jpeg
200 OK 8.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F67641144-189e-4213-b00d-7d27d45f0e9b.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4aa2a22c2851d082acd55c1c9782cee9
20b6a116eb4d8a7c1321e09c7ad4d8aa1269603e
d0d6a3cc781786f5377191e2b1f3495ac76f4f8af7c56291f761a49a167b8726
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F67641144-189e-4213-b00d-7d27d45f0e9b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8684
x-amzn-requestid: e02c26f6-e28d-4b3f-971a-f42cbbf67845
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: XpTWIGH0oAMFpEg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-630d328d-3183e76132b622350a75a86b;Sampled=0
x-amzn-remapped-date: Mon, 29 Aug 2022 21:41:33 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: T1FGC5fMnwea3ltKnLgvqI1AueU8xp5ukWXnRptxDQoAH0DUbXPOEA==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 b36bf2c460ac693ce304817aed073112.cloudfront.net (CloudFront), 1.1 google
date: Mon, 29 Aug 2022 21:59:22 GMT
age: 68438
etag: "20b6a116eb4d8a7c1321e09c7ad4d8aa1269603e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd073058d-a781-4fa3-abd4-05363877c306.jpeg
200 OK 8.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd073058d-a781-4fa3-abd4-05363877c306.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 87425d52d274ccbc12298aa7a47395f2
b2866f84f93b73d97e9aecfa2293ff47131b6d67
2284c74b04493c7a67907b2477bac252832f3550c6a7e57c221abefc45a12549
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd073058d-a781-4fa3-abd4-05363877c306.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8478
x-amzn-requestid: 8ae5ce3f-0d58-412b-84f1-579c5cf21fd8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: XpTWIH5JoAMFh9g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-630d328d-7bb707102a3acb0320585b52;Sampled=0
x-amzn-remapped-date: Mon, 29 Aug 2022 21:41:33 GMT
x-amz-cf-pop: SEA73-P2, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: G0y5MCu_U2IUMTrWxPmyUefwSkF5tcEWpPh7sZ-Bn_1lXZv12tlpgQ==
via: 1.1 b47618c03bd47cf085f27b1e215f76cc.cloudfront.net (CloudFront), 1.1 cd858042f70b416ca05e042acf3908a4.cloudfront.net (CloudFront), 1.1 google
date: Mon, 29 Aug 2022 21:58:58 GMT
age: 68462
etag: "b2866f84f93b73d97e9aecfa2293ff47131b6d67"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa91a5094-5af6-430d-993d-243427b324ba.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa91a5094-5af6-430d-993d-243427b324ba.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 82bc1c69018845280d29653d6b2d6f8d
0c122f15422cab7ee3461e8fa657183ae54adcc5
e221638eff281c27ef4656f76e64963718186285c57e50a8958bd3065e662674
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa91a5094-5af6-430d-993d-243427b324ba.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9980
x-amzn-requestid: b9f6b930-9c47-41b9-879d-ce239e39f033
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: XpTMGHlNoAMFuoA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-630d324d-72ea52c010dff34438bbca28;Sampled=0
x-amzn-remapped-date: Mon, 29 Aug 2022 21:40:29 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: orq6ucCez7UBzTSPTyJR8u8ZYf1VOV_zPOLsJFvGD2jfiW0YJmxVSg==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 cd64decb1403270c914848213601a674.cloudfront.net (CloudFront), 1.1 google
date: Mon, 29 Aug 2022 21:45:02 GMT
age: 69298
etag: "0c122f15422cab7ee3461e8fa657183ae54adcc5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Feac04243-b8b9-46aa-ad1f-285d333e6c88.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Feac04243-b8b9-46aa-ad1f-285d333e6c88.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 9f9132960db725a095b0db1773dc6f69
bf1d4347e1641da5aebe6ae438c0431232ae6242
0e0b84df674d48517a04819604deb555c904518f093784691de4914b6ddb9e9d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Feac04243-b8b9-46aa-ad1f-285d333e6c88.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10672
x-amzn-requestid: 9044b578-ffc7-4890-a16f-bf6d5e242f46
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: XnTWcEUnoAMF_UA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-630c65c2-4397932f1417f6ab2463c4b0;Sampled=0
x-amzn-remapped-date: Mon, 29 Aug 2022 07:07:46 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: uc8twk9uXve3wFxTvsZa_sg-aduiVBxXjTvOdqBc_BZmgw4BldMyHQ==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 9c675215120a4ade8754c4357ef2f3ea.cloudfront.net (CloudFront), 1.1 google
date: Tue, 30 Aug 2022 07:15:20 GMT
age: 35080
etag: "bf1d4347e1641da5aebe6ae438c0431232ae6242"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
px.ads.linkedin.com/collect?v=2&fmt=js&pid=169250%2C3955937%2C3976212&time=1661878800170&url=https%3A%2F%2Fwww.proofpoint.com%2Fus%2Fwombat-security-is-now-proofpoint
302 Found 0 B URL HTTP/2 px.ads.linkedin.com/collect?v=2&fmt=js&pid=169250%2C3955937%2C3976212&time=1661878800170&url=https%3A%2F%2Fwww.proofpoint.com%2Fus%2Fwombat-security-is-now-proofpoint
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /collect?v=2&fmt=js&pid=169250%2C3955937%2C3976212&time=1661878800170&url=https%3A%2F%2Fwww.proofpoint.com%2Fus%2Fwombat-security-is-now-proofpoint HTTP/1.1
Host: px.ads.linkedin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.proofpoint.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
location: https://www.linkedin.com/px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D169250%252C3955937%252C3976212%26time%3D1661878800170%26url%3Dhttps%253A%252F%252Fwww.proofpoint.com%252Fus%252Fwombat-security-is-now-proofpoint%26liSync%3Dtrue
set-cookie: UserMatchHistory=AQL7xmrJqM_c8QAAAYLvsg9LNfdhb0eGdkWA99rfD53aEsJf4B8CjLTTPEZFRfbgrECypO70EutwCg; Max-Age=2592000; Expires=Thu, 29 Sep 2022 17:00:00 GMT; SameSite=None; Path=/; Domain=.linkedin.com; Secure
AnalyticsSyncHistory=AQI42-WMPd8DswAAAYLvsg9Lpc5uBybH0XOkQplYStvCb_3op9jUqNlpSdFqFFCkot2dN51EeXlG1qUOjqrEUA; Max-Age=2592000; Expires=Thu, 29 Sep 2022 17:00:00 GMT; SameSite=None; Path=/; Domain=.linkedin.com; Secure
lang=v=2&lang=en-us; SameSite=None; Path=/; Domain=ads.linkedin.com; Secure
bcookie="v=2&8b69c7c3-d077-45fe-886f-8079b14ac717"; domain=.linkedin.com; Path=/; Secure; Expires=Wed, 30-Aug-2023 17:00:00 GMT; SameSite=None
lidc="b=TGST09:s=T:r=T:a=T:p=T:g=2373:u=1:x=1:i=1661878800:t=1661965200:v=2:sig=AQGSdI_GtjNLSRLxAraxafklgw83EJ5e"; Expires=Wed, 31 Aug 2022 17:00:00 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
x-li-fabric: prod-ltx1
x-li-pop: afd-prod-ltx1-x
x-li-proto: http/2
x-li-uuid: AAXneE+LlePvW8dwWfepzA==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 3866CFFFAE1F4509BB0C19AEBF36B008 Ref B: OSL30EDGE0110 Ref C: 2022-08-30T17:00:00Z
date: Tue, 30 Aug 2022 16:59:59 GMT
content-length: 0
X-Firefox-Spdy: h2
secure.adnxs.com/bounce?%2Fgetuid%3Fhttps%253a%252f%252fattr.ml-api.io%252f%253fdomain%253dproofpoint.com%2526pId%253d%2524UID
302 Found 0 B URL HTTP/1.1 secure.adnxs.com/bounce?%2Fgetuid%3Fhttps%253a%252f%252fattr.ml-api.io%252f%253fdomain%253dproofpoint.com%2526pId%253d%2524UID
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /bounce?%2Fgetuid%3Fhttps%253a%252f%252fattr.ml-api.io%252f%253fdomain%253dproofpoint.com%2526pId%253d%2524UID HTTP/1.1
Host: secure.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.proofpoint.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx/1.21.3
Date: Tue, 30 Aug 2022 17:00:00 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Location: https://attr.ml-api.io/?domain=proofpoint.com&pId=0
AN-X-Request-Uuid: 2837dfbc-8c44-4a53-b552-635891e21f5d
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 950.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe2ed547f-030a-462d-a7c7-12a7748cf9c8.jpeg
200 OK 5.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe2ed547f-030a-462d-a7c7-12a7748cf9c8.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 91310bc1fb5ae0efa502a9bafe046399
ec2a4baf0a21c1738a541d89756cccd6f3bef5fd
5fe0511116c6bd2d6e668c69764905c3a5c93fa23a4dc207b0f4b1604783ceb6
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe2ed547f-030a-462d-a7c7-12a7748cf9c8.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5925
x-amzn-requestid: fa7479ef-c5db-45ce-a973-a8831df14931
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: XpS-ZFH1IAMFsFg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-630d31f5-1a9b0a43065d731b4cc61ed3;Sampled=0
x-amzn-remapped-date: Mon, 29 Aug 2022 21:39:01 GMT
x-amz-cf-pop: SEA19-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: DBxGjmVUCTjHUrOzLWp37FwLUUo_5CykjgxAeCAaw1TlodWSmbnCrA==
via: 1.1 174acb08636ac7d9e9a778bbf1bcbc52.cloudfront.net (CloudFront), 1.1 0d4ebcaa87ba94709def0eaac9371e5a.cloudfront.net (CloudFront), 1.1 google
date: Mon, 29 Aug 2022 21:45:06 GMT
age: 69294
etag: "ec2a4baf0a21c1738a541d89756cccd6f3bef5fd"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 26918a542b9365b6f37166478b97350c
eb07defb2a83bc7f7ec9daf5677a8fb30648fcc6
2d798ea9020987b456a2e6fffc78fbadc5a31244d99fd3eb375911564daf3171
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6447
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 30 Aug 2022 17:00:00 GMT
Last-Modified: Tue, 30 Aug 2022 15:12:35 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 471
ocsp.starfieldtech.com/
200 OK 1.8 kB IP
Hash 576f28ae5a5498362d8df60df92fa494
4c671cd0618b3db55e03ab2f9bf6782c75ec3ada
a480b4a500a76468b643856ea0664958062382fb51911c3815be6161a392d150
POST / HTTP/1.1
Host: ocsp.starfieldtech.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Tue, 30 Aug 2022 17:00:00 GMT
Content-Type: application/ocsp-response
Content-Length: 1845
Connection: keep-alive
X-Sucuri-ID: 19022
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Tue, 30 Aug 2022 14:50:55 GMT
Expires: Wed, 31 Aug 2022 14:50:55 GMT
ETag: "4c671cd0618b3db55e03ab2f9bf6782c75ec3ada"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
ocsp.digicert.com/
200 OK 313 B IP
Hash 1d809ca8d59b9bbf8dc3f36c204880e1
cd1a454bb1e886ab909052deb55146ebcdca67d3
b16b866d754f05a9ddd7a6779a7a236efab1d692470eebc1e2a28860da4ffaec
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 382
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 30 Aug 2022 17:00:00 GMT
Last-Modified: Tue, 30 Aug 2022 16:53:39 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 313
ocsp.digicert.com/
200 OK 313 B IP
Hash 1d809ca8d59b9bbf8dc3f36c204880e1
cd1a454bb1e886ab909052deb55146ebcdca67d3
b16b866d754f05a9ddd7a6779a7a236efab1d692470eebc1e2a28860da4ffaec
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 382
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 30 Aug 2022 17:00:00 GMT
Last-Modified: Tue, 30 Aug 2022 16:53:39 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 313
vars.hotjar.com/box-1ada912494ba7fc7aca15fcef1c2a7ae.html
200 OK 1.0 kB URL HTTP/2 vars.hotjar.com/box-1ada912494ba7fc7aca15fcef1c2a7ae.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2431), with no line terminators
Hash 0b3d3f4206ab84d8861a8cc4b2ddbe66
4561b7c0419b65db5c1314be2143bd1734e88d89
ec42652b198c82469afbe5e6e69312a25425c1fd38d379cf3761b328ecd48e4a
GET /box-1ada912494ba7fc7aca15fcef1c2a7ae.html HTTP/1.1
Host: vars.hotjar.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.proofpoint.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html
content-length: 1044
date: Wed, 13 Jul 2022 08:33:06 GMT
accept-ranges: bytes
cache-control: max-age=31536000
content-encoding: br
cross-origin-embedder-policy: require-corp
cross-origin-resource-policy: cross-origin
etag: "0b3d3f4206ab84d8861a8cc4b2ddbe66"
last-modified: Wed, 13 Jul 2022 08:32:20 GMT
strict-transport-security: max-age=86400; includeSubDomains
x-robots-tag: none
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 277d0e3af1ffdcb1ee40b7dc9f040146.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 46OVD9DOS8uWnduOA6pnoWaaWZ7fWM1o68LvEeEkoHH_Dq0qxNue9g==
age: 4177614
X-Firefox-Spdy: h2
ocsp.starfieldtech.com/
200 OK 1.8 kB IP
Hash 576f28ae5a5498362d8df60df92fa494
4c671cd0618b3db55e03ab2f9bf6782c75ec3ada
a480b4a500a76468b643856ea0664958062382fb51911c3815be6161a392d150
POST / HTTP/1.1
Host: ocsp.starfieldtech.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Tue, 30 Aug 2022 17:00:00 GMT
Content-Type: application/ocsp-response
Content-Length: 1845
Connection: keep-alive
X-Sucuri-ID: 19022
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Tue, 30 Aug 2022 14:50:55 GMT
Expires: Wed, 31 Aug 2022 14:50:55 GMT
ETag: "4c671cd0618b3db55e03ab2f9bf6782c75ec3ada"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
pixel.sitescout.com/up/d7557a63ab8c88be?cookieQ=1&url=retargeting&cntr_revenue=&cntr_transactionId=4573188797558&u1=&u2=&u3=&u4=&u5=&cntr_url=https%3A%2F%2Fwww.proofpoint.com%2Fus%2Fwombat-security-is-now-proofpoint
200 OK 43 B URL HTTP/2 pixel.sitescout.com/up/d7557a63ab8c88be?cookieQ=1&url=retargeting&cntr_revenue=&cntr_transactionId=4573188797558&u1=&u2=&u3=&u4=&u5=&cntr_url=https%3A%2F%2Fwww.proofpoint.com%2Fus%2Fwombat-security-is-now-proofpoint
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 07fff40b5dd495aca2ac4e1c3fbc60aa
e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
GET /up/d7557a63ab8c88be?cookieQ=1&url=retargeting&cntr_revenue=&cntr_transactionId=4573188797558&u1=&u2=&u3=&u4=&u5=&cntr_url=https%3A%2F%2Fwww.proofpoint.com%2Fus%2Fwombat-security-is-now-proofpoint HTTP/1.1
Host: pixel.sitescout.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://10487471.fls.doubleclick.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: max-age=0,no-cache,no-store
pragma: no-cache
expires: Tue, 11 Oct 1977 12:34:56 GMT
p3p: CP="NON DEVa PSAa PSDa OUR NOR NAV",policyref="/w3c/p3p.xml"
content-type: image/gif
content-length: 43
date: Tue, 30 Aug 2022 16:59:59 GMT
server: AC1.1
X-Firefox-Spdy: h2
t.co/i/adsct?bci=3&eci=2&event_id=5da25acb-6317-4279-8f4d-64b1adb02503&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&p_id=Twitter&p_user_id=0&pl_id=83be9f6b-e578-4c05-a443-413530f55b2b&tw_document_href=https%3A%2F%2Fwww.proofpoint.com%2Fus%2Fwombat-security-is-now-proofpoint&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nyk4d&type=javascript&version=2.3.26
200 OK 43 B URL HTTP/2 t.co/i/adsct?bci=3&eci=2&event_id=5da25acb-6317-4279-8f4d-64b1adb02503&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&p_id=Twitter&p_user_id=0&pl_id=83be9f6b-e578-4c05-a443-413530f55b2b&tw_document_href=https%3A%2F%2Fwww.proofpoint.com%2Fus%2Fwombat-security-is-now-proofpoint&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nyk4d&type=javascript&version=2.3.26
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 377d257f2d2e294916143c069141c1c5
b7cae69682cf31dd670b65088db8395acda6ed3e
ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957
GET /i/adsct?bci=3&eci=2&event_id=5da25acb-6317-4279-8f4d-64b1adb02503&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&p_id=Twitter&p_user_id=0&pl_id=83be9f6b-e578-4c05-a443-413530f55b2b&tw_document_href=https%3A%2F%2Fwww.proofpoint.com%2Fus%2Fwombat-security-is-now-proofpoint&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nyk4d&type=javascript&version=2.3.26 HTTP/1.1
Host: t.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.proofpoint.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 30 Aug 2022 17:00:00 GMT
server: tsa_o
set-cookie: muc_ads=ea36ba33-2f51-46b4-9bd8-3e415b74a829; Max-Age=63072000; Expires=Thu, 29 Aug 2024 17:00:00 GMT; Path=/; Domain=t.co; Secure; SameSite=None
content-type: image/gif;charset=utf-8
cache-control: no-cache, no-store, max-age=0
content-length: 43
strict-transport-security: max-age=0
x-response-time: 105
x-connection-hash: 2b07ec50792e4e384e36f01434bbea4de54f6f362bb6c81240477d205116ecc1
X-Firefox-Spdy: h2
px.ads.linkedin.com/collect?v=2&fmt=js&pid=2782676&time=1661878799897&url=https%3A%2F%2Fadservice.google.com%2F&liSync=true
200 OK 0 B URL HTTP/2 px.ads.linkedin.com/collect?v=2&fmt=js&pid=2782676&time=1661878799897&url=https%3A%2F%2Fadservice.google.com%2F&liSync=true
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /collect?v=2&fmt=js&pid=2782676&time=1661878799897&url=https%3A%2F%2Fadservice.google.com%2F&liSync=true HTTP/1.1
Host: px.ads.linkedin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://10487471.fls.doubleclick.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
set-cookie: lang=v=2&lang=en-us; SameSite=None; Path=/; Domain=ads.linkedin.com; Secure
bcookie="v=2&0a099f1a-2b46-49ca-849e-bd3d43acc457"; domain=.linkedin.com; Path=/; Secure; Expires=Wed, 30-Aug-2023 17:00:00 GMT; SameSite=None
lidc="b=OGST09:s=O:r=O:a=O:p=O:g=2332:u=1:x=1:i=1661878800:t=1661965200:v=2:sig=AQGz4QKl3cH5p9JNSadaOgZASgCnr7rk"; Expires=Wed, 31 Aug 2022 17:00:00 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
x-li-fabric: prod-lor1
x-li-pop: afd-prod-lor1-x
x-li-proto: http/2
x-li-uuid: AAXneE+O/tEheIb+IFN0BA==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: D47EAE7F86BF46AEB9461AA86A156D00 Ref B: OSL30EDGE0110 Ref C: 2022-08-30T17:00:00Z
date: Tue, 30 Aug 2022 16:59:59 GMT
content-length: 0
X-Firefox-Spdy: h2
t.co/i/adsct?bci=3&eci=2&event_id=e99e877a-15f2-4dee-bffd-9c6498b3b32d&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&p_id=Twitter&p_user_id=0&pl_id=83be9f6b-e578-4c05-a443-413530f55b2b&tw_document_href=https%3A%2F%2Fwww.proofpoint.com%2Fus%2Fwombat-security-is-now-proofpoint&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o73l9&type=javascript&version=2.3.26
200 OK 43 B URL HTTP/2 t.co/i/adsct?bci=3&eci=2&event_id=e99e877a-15f2-4dee-bffd-9c6498b3b32d&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&p_id=Twitter&p_user_id=0&pl_id=83be9f6b-e578-4c05-a443-413530f55b2b&tw_document_href=https%3A%2F%2Fwww.proofpoint.com%2Fus%2Fwombat-security-is-now-proofpoint&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o73l9&type=javascript&version=2.3.26
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 377d257f2d2e294916143c069141c1c5
b7cae69682cf31dd670b65088db8395acda6ed3e
ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957
GET /i/adsct?bci=3&eci=2&event_id=e99e877a-15f2-4dee-bffd-9c6498b3b32d&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&p_id=Twitter&p_user_id=0&pl_id=83be9f6b-e578-4c05-a443-413530f55b2b&tw_document_href=https%3A%2F%2Fwww.proofpoint.com%2Fus%2Fwombat-security-is-now-proofpoint&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o73l9&type=javascript&version=2.3.26 HTTP/1.1
Host: t.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.proofpoint.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 30 Aug 2022 17:00:00 GMT
server: tsa_o
set-cookie: muc_ads=d71147fe-e17f-4a4b-a270-7eec8e0da847; Max-Age=63072000; Expires=Thu, 29 Aug 2024 17:00:00 GMT; Path=/; Domain=t.co; Secure; SameSite=None
content-type: image/gif;charset=utf-8
cache-control: no-cache, no-store, max-age=0
content-length: 43
strict-transport-security: max-age=0
x-response-time: 108
x-connection-hash: 2b07ec50792e4e384e36f01434bbea4de54f6f362bb6c81240477d205116ecc1
X-Firefox-Spdy: h2
b.6sc.co/v1/beacon/img.gif?token=76d4adecd2340b300ba5d4296ecef89d&svisitor=null&visitor=11c3ab59-3e13-40e0-8e72-d961450788f5&session=93287037-a89e-400e-8d11-8b135fcca991&event=active_time_track&q=%7B%22currentTime%22%3A%22Tue%2C%2030%20Aug%202022%2017%3A00%3A00%20GMT%22%2C%22lastTrackTime%22%3A%22Tue%2C%2030%20Aug%202022%2016%3A59%3A59%20GMT%22%2C%22timeSpent%22%3A%221011%22%2C%22totalTimeSpent%22%3A%221011%22%7D&isIframe=false&m=%7B%22description%22%3A%22Wombat%20Security%20is%20now%20Proofpoint%20Security%20Awareness%20Training.%20Learn%20about%20the%20integration%20and%20benefits%20you%20get%20with%20Proofpoint.%22%2C%22keywords%22%3A%22%22%2C%22title%22%3A%22Wombat%20Security%20Is%20Now%20Proofpoint%20%7C%20Proofpoint%22%7D&cb=&r=&thirdParty=%7B%7D&v2=1&pageURL=https%3A%2F%2Fwww.proofpoint.com%2Fus%2Fwombat-security-is-now-proofpoint&pageViewId=f06092c0-2238-4783-8182-9dda3ff078ea&an_uid=0
200 OK 43 B URL HTTP/2 b.6sc.co/v1/beacon/img.gif?token=76d4adecd2340b300ba5d4296ecef89d&svisitor=null&visitor=11c3ab59-3e13-40e0-8e72-d961450788f5&session=93287037-a89e-400e-8d11-8b135fcca991&event=active_time_track&q=%7B%22currentTime%22%3A%22Tue%2C%2030%20Aug%202022%2017%3A00%3A00%20GMT%22%2C%22lastTrackTime%22%3A%22Tue%2C%2030%20Aug%202022%2016%3A59%3A59%20GMT%22%2C%22timeSpent%22%3A%221011%22%2C%22totalTimeSpent%22%3A%221011%22%7D&isIframe=false&m=%7B%22description%22%3A%22Wombat%20Security%20is%20now%20Proofpoint%20Security%20Awareness%20Training.%20Learn%20about%20the%20integration%20and%20benefits%20you%20get%20with%20Proofpoint.%22%2C%22keywords%22%3A%22%22%2C%22title%22%3A%22Wombat%20Security%20Is%20Now%20Proofpoint%20%7C%20Proofpoint%22%7D&cb=&r=&thirdParty=%7B%7D&v2=1&pageURL=https%3A%2F%2Fwww.proofpoint.com%2Fus%2Fwombat-security-is-now-proofpoint&pageViewId=f06092c0-2238-4783-8182-9dda3ff078ea&an_uid=0
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash f837aa60b6fe83458f790db60d529fc9
14af87ccec7f81bb28d53c84da2fd5a9d5925cda
dcecab1355b5c2b9ecef281322bf265ac5840b4688748586e9632b473a5fe56b
GET /v1/beacon/img.gif?token=76d4adecd2340b300ba5d4296ecef89d&svisitor=null&visitor=11c3ab59-3e13-40e0-8e72-d961450788f5&session=93287037-a89e-400e-8d11-8b135fcca991&event=active_time_track&q=%7B%22currentTime%22%3A%22Tue%2C%2030%20Aug%202022%2017%3A00%3A00%20GMT%22%2C%22lastTrackTime%22%3A%22Tue%2C%2030%20Aug%202022%2016%3A59%3A59%20GMT%22%2C%22timeSpent%22%3A%221011%22%2C%22totalTimeSpent%22%3A%221011%22%7D&isIframe=false&m=%7B%22description%22%3A%22Wombat%20Security%20is%20now%20Proofpoint%20Security%20Awareness%20Training.%20Learn%20about%20the%20integration%20and%20benefits%20you%20get%20with%20Proofpoint.%22%2C%22keywords%22%3A%22%22%2C%22title%22%3A%22Wombat%20Security%20Is%20Now%20Proofpoint%20%7C%20Proofpoint%22%7D&cb=&r=&thirdParty=%7B%7D&v2=1&pageURL=https%3A%2F%2Fwww.proofpoint.com%2Fus%2Fwombat-security-is-now-proofpoint&pageViewId=f06092c0-2238-4783-8182-9dda3ff078ea&an_uid=0 HTTP/1.1
Host: b.6sc.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.proofpoint.com/
Cookie: 6suuid=261f1602672900000f420e636a030000ae080300
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
cache-control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate
content-type: image/gif
etag: "60bb2e15-2b"
expires: Wed, 19 Apr 2000 11:43:00 GMT
last-modified: Sat, 05 Jun 2021 07:56:05 GMT
pragma: no-cache
server: nginx/1.14.0 (Ubuntu)
x-content-type-options: nosniff
content-length: 43
date: Tue, 30 Aug 2022 17:00:00 GMT
set-cookie: 6suuid=261f1602672900000f420e636a030000ae080300; expires=Thu, 29-Aug-2024 17:00:00 GMT; path=/; domain=.6sc.co; SameSite=None; secure
access-control-allow-origin:
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: GET,POST
X-Firefox-Spdy: h2
s.adroll.com/j/exp/7YJ7XZCLMRHSVCXIHB5HIT/index.js
302 Moved Temporarily 0 B URL HTTP/1.1 s.adroll.com/j/exp/7YJ7XZCLMRHSVCXIHB5HIT/index.js
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /j/exp/7YJ7XZCLMRHSVCXIHB5HIT/index.js HTTP/1.1
Host: s.adroll.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.proofpoint.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Moved Temporarily
Content-Type: application/xml
Content-Length: 0
Connection: keep-alive
Date: Mon, 29 Aug 2022 17:13:30 GMT
Server: AmazonS3
Location: https://s.adroll.com/j/exp/index.js
Via: 1.1 8e6dce34fd223e0c9d89fd938d1784a2.cloudfront.net (CloudFront)
Age: 85589
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET
Access-Control-Allow-Headers: *
X-Cache: Hit from cloudfront
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: qk6ruNleC34ieqy9xQ-TNVCpfUdedmpv7saTxoNpI68svt1mg491GQ==
s.adroll.com/j/pre/7YJ7XZCLMRHSVCXIHB5HIT/YV5KYXXEJZATZCT37YRTMK/fpconsent.js
302 Moved Temporarily 0 B URL HTTP/1.1 s.adroll.com/j/pre/7YJ7XZCLMRHSVCXIHB5HIT/YV5KYXXEJZATZCT37YRTMK/fpconsent.js
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /j/pre/7YJ7XZCLMRHSVCXIHB5HIT/YV5KYXXEJZATZCT37YRTMK/fpconsent.js HTTP/1.1
Host: s.adroll.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.proofpoint.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Moved Temporarily
Content-Type: application/xml
Content-Length: 0
Connection: keep-alive
Date: Tue, 30 Aug 2022 03:22:03 GMT
Server: AmazonS3
Location: https://s.adroll.com/j/pre/index.js
Via: 1.1 8e6dce34fd223e0c9d89fd938d1784a2.cloudfront.net (CloudFront)
Age: 49077
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET
Access-Control-Allow-Headers: *
X-Cache: Hit from cloudfront
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: yomqXth17SBiYQe74anWL0Pl2k_k6g6EGbETyhSSQE1FMD47cjs-Qw==
s.adroll.com/j/pre/7YJ7XZCLMRHSVCXIHB5HIT/YV5KYXXEJZATZCT37YRTMK/index.js
200 OK 0 B URL HTTP/1.1 s.adroll.com/j/pre/7YJ7XZCLMRHSVCXIHB5HIT/YV5KYXXEJZATZCT37YRTMK/index.js
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /j/pre/7YJ7XZCLMRHSVCXIHB5HIT/YV5KYXXEJZATZCT37YRTMK/index.js HTTP/1.1
Host: s.adroll.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.proofpoint.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=utf-8
Content-Length: 0
Connection: keep-alive
Last-Modified: Thu, 25 Aug 2022 01:57:04 GMT
X-Amz-Server-Side-Encryption: AES256
X-Amz-Version-Id: agWFgH1APgtunEd6SpK3b9r5ll4_hzFX
Accept-Ranges: bytes
Server: AmazonS3
Date: Tue, 30 Aug 2022 16:32:44 GMT
Cache-Control: max-age=3600, must-revalidate
Etag: "d41d8cd98f00b204e9800998ecf8427e"
Vary: Accept-Encoding
Via: 1.1 8e6dce34fd223e0c9d89fd938d1784a2.cloudfront.net (CloudFront)
Age: 1637
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET
Access-Control-Allow-Headers: *
X-Cache: Hit from cloudfront
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: Bxu_zg-rhAEfAOs8Q76_LW1y10BPngLk-p9eEGrS1nJKHJghAO3a3w==
s.adroll.com/j/exp/index.js
200 OK 28 B URL HTTP/1.1 s.adroll.com/j/exp/index.js
IP
File type ASCII text, with no line terminators
Hash 5816cced8568d223aa09d889f300692b
95cab5e474d7391762c3da5c7dc50fcf05df529f
f59e5f34a941183aacaed25322ac0856628493c2cfd936ded3fddc0a49510e52
GET /j/exp/index.js HTTP/1.1
Host: s.adroll.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.proofpoint.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Length: 28
Connection: keep-alive
Last-Modified: Thu, 04 Aug 2022 20:10:45 GMT
X-Amz-Server-Side-Encryption: AES256
X-Amz-Version-Id: 54CR.I9BC9Znk_eUBi_4NwuScKvxGyTv
Accept-Ranges: bytes
Server: AmazonS3
Date: Mon, 29 Aug 2022 18:46:33 GMT
Etag: "5816cced8568d223aa09d889f300692b"
Vary: Accept-Encoding
Via: 1.1 8e6dce34fd223e0c9d89fd938d1784a2.cloudfront.net (CloudFront)
Age: 80038
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET
Access-Control-Allow-Headers: *
X-Cache: Hit from cloudfront
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: VYLtARyq0cHWcrjxSedfpdYuERNeFBBClv8Hof11oKchb9mYH543QQ==
s.adroll.com/j/pre/index.js
200 OK 0 B URL HTTP/1.1 s.adroll.com/j/pre/index.js
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /j/pre/index.js HTTP/1.1
Host: s.adroll.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.proofpoint.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Length: 0
Connection: keep-alive
Last-Modified: Wed, 15 Jan 2020 23:54:18 GMT
X-Amz-Server-Side-Encryption: AES256
X-Amz-Version-Id: nQEe8wQ7h0ROt7P4GJfDfstto6x684Hy
Accept-Ranges: bytes
Server: AmazonS3
Date: Tue, 30 Aug 2022 04:47:26 GMT
Etag: "d41d8cd98f00b204e9800998ecf8427e"
Vary: Accept-Encoding
Via: 1.1 8e6dce34fd223e0c9d89fd938d1784a2.cloudfront.net (CloudFront)
Age: 44139
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET
Access-Control-Allow-Headers: *
X-Cache: Hit from cloudfront
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 3V-ExTnnPgKPNS0ZHyzy9QFcRMNvQ3Dd_CnIsP07a1Qw6m4UuC9Byg==
adservice.google.no/ddm/fls/p/src=8909468;type=invmedia;cat=1l6xh4ap;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;ord=1;~oref=https://www.proofpoint.com/
200 OK 42 B URL HTTP/2 adservice.google.no/ddm/fls/p/src=8909468;type=invmedia;cat=1l6xh4ap;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;ord=1;~oref=https://www.proofpoint.com/
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ddm/fls/p/src=8909468;type=invmedia;cat=1l6xh4ap;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;ord=1;~oref=https://www.proofpoint.com/ HTTP/1.1
Host: adservice.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.proofpoint.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 30 Aug 2022 17:00:00 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3="googleads.g.doubleclick.net:443"; ma=2592000,h3=":443"; ma=2592000,h3-29="googleads.g.doubleclick.net:443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,43",quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
bat.bing.com/action/0?ti=17087961&tm=gtm002&Ver=2&mid=97cd1177-3c2e-4e88-a8a0-76841eb89a01&sid=2f14c0c0288511ed89c97d0a8e8b7236&vid=2f14f890288511ed8e73b1d0722679c0&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=Wombat%20Security%20Is%20Now%20Proofpoint%20%7C%20Proofpoint&p=https%3A%2F%2Fwww.proofpoint.com%2Fus%2Fwombat-security-is-now-proofpoint&r=<=1761&evt=pageLoad&sv=1&rn=595587
204 No Content 0 B URL HTTP/2 bat.bing.com/action/0?ti=17087961&tm=gtm002&Ver=2&mid=97cd1177-3c2e-4e88-a8a0-76841eb89a01&sid=2f14c0c0288511ed89c97d0a8e8b7236&vid=2f14f890288511ed8e73b1d0722679c0&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=Wombat%20Security%20Is%20Now%20Proofpoint%20%7C%20Proofpoint&p=https%3A%2F%2Fwww.proofpoint.com%2Fus%2Fwombat-security-is-now-proofpoint&r=<=1761&evt=pageLoad&sv=1&rn=595587
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /action/0?ti=17087961&tm=gtm002&Ver=2&mid=97cd1177-3c2e-4e88-a8a0-76841eb89a01&sid=2f14c0c0288511ed89c97d0a8e8b7236&vid=2f14f890288511ed8e73b1d0722679c0&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=Wombat%20Security%20Is%20Now%20Proofpoint%20%7C%20Proofpoint&p=https%3A%2F%2Fwww.proofpoint.com%2Fus%2Fwombat-security-is-now-proofpoint&r=<=1761&evt=pageLoad&sv=1&rn=595587 HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.proofpoint.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
cache-control: no-cache, must-revalidate
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
set-cookie: MUID=31963208564B6CA30EBA201857BE6D96; domain=.bing.com; expires=Sun, 24-Sep-2023 17:00:00 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 731DAB2B7BA248E4A2698E9FDCF70685 Ref B: OSL30EDGE0522 Ref C: 2022-08-30T17:00:00Z
date: Tue, 30 Aug 2022 17:00:00 GMT
X-Firefox-Spdy: h2
script.hotjar.com/modules.07ac9b8d187d510db456.js
200 OK 65 kB URL HTTP/2 script.hotjar.com/modules.07ac9b8d187d510db456.js
IP
File type Unicode text, UTF-8 text, with very long lines (48715)
Hash fff5770f0de5c66c4269264cf792ec05
39fdb897caaa4b3d6baaee51c84f6d4ffda5e055
5a4eb0540987c1ad47a0f9080596d4476cb659f503c0b9ab0e5dddd54221deeb
GET /modules.07ac9b8d187d510db456.js HTTP/1.1
Host: script.hotjar.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.proofpoint.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
content-length: 65413
date: Tue, 30 Aug 2022 12:30:07 GMT
accept-ranges: bytes
access-control-allow-origin: *
cache-control: max-age=31536000
content-encoding: br
cross-origin-resource-policy: cross-origin
etag: "fff5770f0de5c66c4269264cf792ec05"
last-modified: Tue, 30 Aug 2022 12:29:33 GMT
strict-transport-security: max-age=86400; includeSubDomains
x-content-type-options: nosniff
x-robots-tag: none
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 475d4ecb64796af058573c6f1048e898.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: U52oUsWrm8oc_G9hYJVP2EqatDXcWV9b_GUUWI-ObeMTJeWjVWta-w==
age: 16193
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 314 B IP
Hash 5e6d209bbb0dedefe1d3da497f6484f2
a1ed897be58257c66c8b5b54e0323c5f3a16c2fe
0314f56d20cdb8c44bdae5c27ce7b6c54689c59acd3ffe2adee9bfe1707d4b47
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2038
Cache-Control: max-age=107546
Content-Type: application/ocsp-response
Date: Tue, 30 Aug 2022 17:00:00 GMT
Etag: "630d3b34-13a"
Expires: Wed, 31 Aug 2022 22:52:26 GMT
Last-Modified: Mon, 29 Aug 2022 22:18:28 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 314
www.linkedin.com/px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D169250%252C3955937%252C3976212%26time%3D1661878800170%26url%3Dhttps%253A%252F%252Fwww.proofpoint.com%252Fus%252Fwombat-security-is-now-proofpoint%26liSync%3Dtrue
302 Found 0 B URL HTTP/2 www.linkedin.com/px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D169250%252C3955937%252C3976212%26time%3D1661878800170%26url%3Dhttps%253A%252F%252Fwww.proofpoint.com%252Fus%252Fwombat-security-is-now-proofpoint%26liSync%3Dtrue
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D169250%252C3955937%252C3976212%26time%3D1661878800170%26url%3Dhttps%253A%252F%252Fwww.proofpoint.com%252Fus%252Fwombat-security-is-now-proofpoint%26liSync%3Dtrue HTTP/1.1
Host: www.linkedin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.proofpoint.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
cache-control: no-cache, no-store
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
location: https://px.ads.linkedin.com/collect?v=2&fmt=js&pid=169250%2C3955937%2C3976212&time=1661878800170&url=https%3A%2F%2Fwww.proofpoint.com%2Fus%2Fwombat-security-is-now-proofpoint&liSync=true
set-cookie: lang=v=2&lang=en-us; Domain=linkedin.com; Path=/; Secure; SameSite=None
bcookie="v=2&2e627557-e8bd-4989-8dcf-b271dc2100fd"; Domain=.linkedin.com; Expires=Wed, 30-Aug-2023 17:00:00 GMT; Path=/; Secure; SameSite=None
bscookie="v=1&20220830170000d589ce49-9973-4607-87c2-5cb3bf8ae8d4AQG9fLV8YK4Q1uSu6OuF2u2RtdjRJUaY"; Domain=.www.linkedin.com; Expires=Wed, 30-Aug-2023 17:00:00 GMT; Path=/; HttpOnly; Secure; SameSite=None
li_gc=MTswOzE2NjE4Nzg4MDA7MjswMjGVxYZUPooK5osdV/nPib+MxmBEKIisGS41RBH0pwrFBg==; Domain=.linkedin.com; Expires=Sun, 26 Feb 2023 17:00:00 GMT; Path=/; Secure; SameSite=None
lidc="b=VGST09:s=V:r=V:a=V:p=V:g=2368:u=1:x=1:i=1661878800:t=1661965200:v=2:sig=AQG9NMWDnU5kvXH34uyHkW-Og3NtqCQH"; Expires=Wed, 31 Aug 2022 17:00:00 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
content-security-policy: default-src *; connect-src 'self' https://media-src.linkedin.com/media/ www.linkedin.com s.c.lnkd.licdn.com m.c.lnkd.licdn.com wss://*.linkedin.com dms.licdn.com https://dpm.demdex.net/id lnkd.demdex.net blob: https://accounts.google.com/gsi/status https://linkedin.sc.omtrdc.net/b/ss/ www.google-analytics.com https://*.qualtrics.com static.licdn.com static-exp1.licdn.com static-exp2.licdn.com static-exp3.licdn.com media.licdn.com media-exp1.licdn.com media-exp2.licdn.com media-exp3.licdn.com; img-src data: blob: *; font-src data: *; style-src 'unsafe-inline' 'self' static-src.linkedin.com *.licdn.com; script-src 'report-sample' 'unsafe-inline' 'unsafe-eval' 'self' spdy.linkedin.com static-src.linkedin.com *.ads.linkedin.com *.licdn.com static.chartbeat.com www.google-analytics.com ssl.google-analytics.com bcvipva02.rightnowtech.com www.bizographics.com sjs.bizographics.com js.bizographics.com d.la4-c1-was.salesforceliveagent.com https://snap.licdn.com/li.lms-analytics/ platform.linkedin.com platform-akam.linkedin.com platform-ecst.linkedin.com platform-azur.linkedin.com; object-src 'none'; media-src blob: *; child-src blob: lnkd-communities: voyager: *; frame-ancestors 'self'
x-frame-options: sameorigin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
expect-ct: max-age=86400, report-uri="https://www.linkedin.com/platform-telemetry/ct"
x-li-fabric: prod-lva1
report-to: {"group":"network-errors","max_age":2592000,"endpoints":[{"url":"https://www.linkedin.com/li/rep"}],"include_subdomains":true}
nel: {"report_to":"network-errors","max_age":1296000,"success_fraction":0.00066,"failure_fraction":1,"include_subdomains":true}
x-li-pop: afd-prod-lva1-x
x-li-proto: http/2
x-li-uuid: AAXneE+TdPCV1coXAeVh2w==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 06A3B004B63843F99C2F841A5DA39905 Ref B: OSL30EDGE0110 Ref C: 2022-08-30T17:00:00Z
date: Tue, 30 Aug 2022 17:00:00 GMT
content-length: 0
X-Firefox-Spdy: h2
bat.bing.com/p/action/17087961.js
200 OK 667 B URL HTTP/2 bat.bing.com/p/action/17087961.js
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type ASCII text, with CRLF line terminators
Hash 908e9ef37780c2622ab0223892b1b4cf
8654eda644df2eee8df24940adfc4b9ae06d8aca
e7b5220235bf20ffe11a4de4dc10e289910c79d46185f3a8a9b614d7810d7cf9
GET /p/action/17087961.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.proofpoint.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: private,max-age=60
content-length: 667
content-type: application/javascript; charset=utf-8
content-encoding: gzip
vary: Accept-Encoding
set-cookie: MUID=321E7248CBB066712A6D6058CA456771; domain=.bing.com; expires=Sun, 24-Sep-2023 17:00:00 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-powered-by: ARR/3.0
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: F1EE200DDB664847AD56C373352ECD6E Ref B: OSL30EDGE0522 Ref C: 2022-08-30T17:00:00Z
date: Tue, 30 Aug 2022 17:00:00 GMT
X-Firefox-Spdy: h2
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j96&tid=UA-2257074-1&cid=883930930.1661878799&jid=251759069&gjid=182820757&_gid=547113449.1661878800&_u=YADAAEAAAAAAAC~&z=216203260
200 OK 4 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j96&tid=UA-2257074-1&cid=883930930.1661878799&jid=251759069&gjid=182820757&_gid=547113449.1661878800&_u=YADAAEAAAAAAAC~&z=216203260
IP
File type ASCII text, with no line terminators
Hash 48c0473b7821185d937e685216e2168b
3743e47f8a429a5e87b86cb582d78940733d9d2e
570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j96&tid=UA-2257074-1&cid=883930930.1661878799&jid=251759069&gjid=182820757&_gid=547113449.1661878800&_u=YADAAEAAAAAAAC~&z=216203260 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://www.proofpoint.com
Connection: keep-alive
Referer: https://www.proofpoint.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://www.proofpoint.com
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Tue, 30 Aug 2022 17:00:00 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash f6da1b607ffb57f5946283e0beac1391
f6e8ff0b8f2bcdd47c87f1f5ad86ad248dcfcebc
6ca5f75a1b3595c6fc1b86e6961ed488de734a25b1778badfa9aa43eb6822fbf
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Tue, 30 Aug 2022 17:00:00 GMT
Last-Modified: Tue, 30 Aug 2022 15:47:25 GMT
Server: ECS (nyb/1D04)
X-Cache: Miss from cloudfront
Via: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: XMtqUhn7xGrpw2cMDrSrrGfX0w1sZjgjepbjNb3_EaB4wXX3w14i2A==
Age: 4355
d.adroll.com/consent/check/7YJ7XZCLMRHSVCXIHB5HIT?arrfrr=https%3A%2F%2Fwww.proofpoint.com%2Fus%2Fwombat-security-is-now-proofpoint&_s=56e97ca9a5c28ded120ac8671663e9f1&_b=2
200 OK 446 B URL HTTP/2 d.adroll.com/consent/check/7YJ7XZCLMRHSVCXIHB5HIT?arrfrr=https%3A%2F%2Fwww.proofpoint.com%2Fus%2Fwombat-security-is-now-proofpoint&_s=56e97ca9a5c28ded120ac8671663e9f1&_b=2
IP
File type ASCII text, with very long lines (446), with no line terminators
Hash 2e09ace4a6a0bf2f750c7104dfd5afbb
d4ed0fc341d26f4afa0f10622df84c39b47920ef
2b713e656e125f5467db7c2b125f1873a899be85403e5229238c2ff43b6778a0
GET /consent/check/7YJ7XZCLMRHSVCXIHB5HIT?arrfrr=https%3A%2F%2Fwww.proofpoint.com%2Fus%2Fwombat-security-is-now-proofpoint&_s=56e97ca9a5c28ded120ac8671663e9f1&_b=2 HTTP/1.1
Host: d.adroll.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.proofpoint.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 30 Aug 2022 17:00:00 GMT
content-type: application/javascript
content-length: 446
server: nginx/1.20.0
cache-control: no-store, no-cache, must-revalidate
p3p: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA"
pragma: no-cache
set-cookie: __adroll=e7475b933d59bafbd3fde38db735de79-a_1661878800; Version=1; Expires=Fri, 29-Sep-2023 17:00:00 GMT; Max-Age=34128000; Path=/; HttpOnly; SameSite=None; Secure
__adroll_shared=e7475b933d59bafbd3fde38db735de79-a_1661878800; Version=1; Expires=Fri, 29-Sep-2023 17:00:00 GMT; Max-Age=34128000; Path=/; HttpOnly; SameSite=None; Secure; Domain=adroll.com
X-Firefox-Spdy: h2
analytics.twitter.com/i/adsct?bci=3&eci=2&event_id=5da25acb-6317-4279-8f4d-64b1adb02503&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&p_id=Twitter&p_user_id=0&pl_id=83be9f6b-e578-4c05-a443-413530f55b2b&tw_document_href=https%3A%2F%2Fwww.proofpoint.com%2Fus%2Fwombat-security-is-now-proofpoint&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nyk4d&type=javascript&version=2.3.26
200 OK 43 B URL HTTP/2 analytics.twitter.com/i/adsct?bci=3&eci=2&event_id=5da25acb-6317-4279-8f4d-64b1adb02503&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&p_id=Twitter&p_user_id=0&pl_id=83be9f6b-e578-4c05-a443-413530f55b2b&tw_document_href=https%3A%2F%2Fwww.proofpoint.com%2Fus%2Fwombat-security-is-now-proofpoint&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nyk4d&type=javascript&version=2.3.26
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 377d257f2d2e294916143c069141c1c5
b7cae69682cf31dd670b65088db8395acda6ed3e
ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957
GET /i/adsct?bci=3&eci=2&event_id=5da25acb-6317-4279-8f4d-64b1adb02503&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&p_id=Twitter&p_user_id=0&pl_id=83be9f6b-e578-4c05-a443-413530f55b2b&tw_document_href=https%3A%2F%2Fwww.proofpoint.com%2Fus%2Fwombat-security-is-now-proofpoint&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nyk4d&type=javascript&version=2.3.26 HTTP/1.1
Host: analytics.twitter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.proofpoint.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 30 Aug 2022 17:00:00 GMT
server: tsa_o
set-cookie: personalization_id="v1_1XgLqbrPumGc3Xu2eylvog=="; Max-Age=63072000; Expires=Thu, 29 Aug 2024 17:00:00 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=None
content-type: image/gif;charset=utf-8
cache-control: no-cache, no-store, max-age=0
content-length: 43
strict-transport-security: max-age=631138519
x-response-time: 110
x-connection-hash: de047d9ab407a6266516870d2077c76388987e145f8e9cdcac0621eecda8307c
X-Firefox-Spdy: h2
analytics.twitter.com/i/adsct?bci=3&eci=2&event_id=e99e877a-15f2-4dee-bffd-9c6498b3b32d&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&p_id=Twitter&p_user_id=0&pl_id=83be9f6b-e578-4c05-a443-413530f55b2b&tw_document_href=https%3A%2F%2Fwww.proofpoint.com%2Fus%2Fwombat-security-is-now-proofpoint&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o73l9&type=javascript&version=2.3.26
200 OK 43 B URL HTTP/2 analytics.twitter.com/i/adsct?bci=3&eci=2&event_id=e99e877a-15f2-4dee-bffd-9c6498b3b32d&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&p_id=Twitter&p_user_id=0&pl_id=83be9f6b-e578-4c05-a443-413530f55b2b&tw_document_href=https%3A%2F%2Fwww.proofpoint.com%2Fus%2Fwombat-security-is-now-proofpoint&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o73l9&type=javascript&version=2.3.26
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 377d257f2d2e294916143c069141c1c5
b7cae69682cf31dd670b65088db8395acda6ed3e
ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957
GET /i/adsct?bci=3&eci=2&event_id=e99e877a-15f2-4dee-bffd-9c6498b3b32d&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&p_id=Twitter&p_user_id=0&pl_id=83be9f6b-e578-4c05-a443-413530f55b2b&tw_document_href=https%3A%2F%2Fwww.proofpoint.com%2Fus%2Fwombat-security-is-now-proofpoint&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o73l9&type=javascript&version=2.3.26 HTTP/1.1
Host: analytics.twitter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.proofpoint.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 30 Aug 2022 17:00:00 GMT
server: tsa_o
set-cookie: personalization_id="v1_qnj9QYLTrKE78SP7bM2ZuA=="; Max-Age=63072000; Expires=Thu, 29 Aug 2024 17:00:00 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=None
content-type: image/gif;charset=utf-8
cache-control: no-cache, no-store, max-age=0
content-length: 43
strict-transport-security: max-age=631138519
x-response-time: 112
x-connection-hash: de047d9ab407a6266516870d2077c76388987e145f8e9cdcac0621eecda8307c
X-Firefox-Spdy: h2
www.facebook.com/tr/?id=143852102935619&ev=PageView&dl=https%3A%2F%2Fwww.proofpoint.com%2Fus%2Fwombat-security-is-now-proofpoint&rl=&if=false&ts=1661878800963&sw=1280&sh=1024&v=2.9.78&r=stable&ec=0&o=30&fbp=fb.1.1661878800962.1885013298&it=1661878800376&coo=false&rqm=GET
200 OK 44 B URL HTTP/2 www.facebook.com/tr/?id=143852102935619&ev=PageView&dl=https%3A%2F%2Fwww.proofpoint.com%2Fus%2Fwombat-security-is-now-proofpoint&rl=&if=false&ts=1661878800963&sw=1280&sh=1024&v=2.9.78&r=stable&ec=0&o=30&fbp=fb.1.1661878800962.1885013298&it=1661878800376&coo=false&rqm=GET
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash b798f4ce7359fd815df4bdf76503b295
f8cc6addf1707ad236ad9970b0a48f9733d07da5
10d8d42d73a02ddb877101e72fbfa15a0ec820224d97cedee4cf92d571be5caa
GET /tr/?id=143852102935619&ev=PageView&dl=https%3A%2F%2Fwww.proofpoint.com%2Fus%2Fwombat-security-is-now-proofpoint&rl=&if=false&ts=1661878800963&sw=1280&sh=1024&v=2.9.78&r=stable&ec=0&o=30&fbp=fb.1.1661878800962.1885013298&it=1661878800376&coo=false&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.proofpoint.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/gif
date: Tue, 30 Aug 2022 17:00:00 GMT
expires: Tue, 30 Aug 2022 17:00:00 GMT
last-modified: Fri, 21 Dec 2012 00:00:01 GMT
cache-control: no-cache, must-revalidate, max-age=0
set-cookie:
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 44
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
d.adroll.com/pixel/7YJ7XZCLMRHSVCXIHB5HIT/YV5KYXXEJZATZCT37YRTMK?adroll_fpc=d8d50ae3e85828d3eac0dedf44647a23-1661878800988&arrfrr=https%3A%2F%2Fwww.proofpoint.com%2Fus%2Fwombat-security-is-now-proofpoint&pv=49254570667.72606&cookie=&adroll_s_ref=&keyw=
302 Found 0 B URL HTTP/2 d.adroll.com/pixel/7YJ7XZCLMRHSVCXIHB5HIT/YV5KYXXEJZATZCT37YRTMK?adroll_fpc=d8d50ae3e85828d3eac0dedf44647a23-1661878800988&arrfrr=https%3A%2F%2Fwww.proofpoint.com%2Fus%2Fwombat-security-is-now-proofpoint&pv=49254570667.72606&cookie=&adroll_s_ref=&keyw=
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pixel/7YJ7XZCLMRHSVCXIHB5HIT/YV5KYXXEJZATZCT37YRTMK?adroll_fpc=d8d50ae3e85828d3eac0dedf44647a23-1661878800988&arrfrr=https%3A%2F%2Fwww.proofpoint.com%2Fus%2Fwombat-security-is-now-proofpoint&pv=49254570667.72606&cookie=&adroll_s_ref=&keyw= HTTP/1.1
Host: d.adroll.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.proofpoint.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
date: Tue, 30 Aug 2022 17:00:00 GMT
content-length: 0
location: https://s.adroll.com/pixel/7YJ7XZCLMRHSVCXIHB5HIT/YV5KYXXEJZATZCT37YRTMK/T47Y2VPPABDUBJXFROMZZM.js
server: nginx/1.20.0
cache-control: no-store, no-cache, must-revalidate
p3p: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA"
pragma: no-cache
set-cookie: __adroll=542d0015c7c8a99f89acc1a9070d6087-a_1661878800; Version=1; Expires=Fri, 29-Sep-2023 17:00:00 GMT; Max-Age=34128000; Path=/; HttpOnly; SameSite=None; Secure
__adroll_shared=542d0015c7c8a99f89acc1a9070d6087-a_1661878800; Version=1; Expires=Fri, 29-Sep-2023 17:00:00 GMT; Max-Age=34128000; Path=/; HttpOnly; SameSite=None; Secure; Domain=adroll.com
x-advertisable-eid: 7YJ7XZCLMRHSVCXIHB5HIT
x-conversion-currency:
x-conversion-value: 0.00
x-pixel-eid: YV5KYXXEJZATZCT37YRTMK
x-rule: *
x-rule-type: p
x-segment-display-name: Visitors to Unsegmented Pages
x-segment-eid: T47Y2VPPABDUBJXFROMZZM
x-segment-name: *
X-Firefox-Spdy: h2
s.adroll.com/pixel/7YJ7XZCLMRHSVCXIHB5HIT/YV5KYXXEJZATZCT37YRTMK/T47Y2VPPABDUBJXFROMZZM.js
200 OK 1.7 kB URL HTTP/1.1 s.adroll.com/pixel/7YJ7XZCLMRHSVCXIHB5HIT/YV5KYXXEJZATZCT37YRTMK/T47Y2VPPABDUBJXFROMZZM.js
IP
File type ASCII text, with very long lines (417)
Hash 51402ee06a89be6a83efcdcc3b12ab16
d698ce107db132d682059522c21d75f38df305b7
9f1a046b94daa512b0194af3e500d3435a8775d62d8a4b3d8e70c2acd3e4e9c6
GET /pixel/7YJ7XZCLMRHSVCXIHB5HIT/YV5KYXXEJZATZCT37YRTMK/T47Y2VPPABDUBJXFROMZZM.js HTTP/1.1
Host: s.adroll.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.proofpoint.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 17 Aug 2022 20:05:39 GMT
X-Amz-Server-Side-Encryption: AES256
X-Amz-Version-Id: DrsyUh530SeWCiQ3w6gDwFqgFGqn04DB
Server: AmazonS3
Content-Encoding: gzip
Date: Tue, 30 Aug 2022 16:14:35 GMT
Cache-Control: max-age=3600, must-revalidate
Etag: W/"df8e794b3d56d53dedb6542344bcc624"
Vary: Accept-Encoding
Via: 1.1 8e6dce34fd223e0c9d89fd938d1784a2.cloudfront.net (CloudFront)
Age: 2726
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET
Access-Control-Allow-Headers: *
X-Cache: Hit from cloudfront
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: tEXJfAo987PW92NRB-aLRG_32ebGscOrgzmGHwrvltIa2tL6FEDloA==
px.ads.linkedin.com/collect?v=2&fmt=js&pid=169250%2C3955937%2C3976212&time=1661878800170&url=https%3A%2F%2Fwww.proofpoint.com%2Fus%2Fwombat-security-is-now-proofpoint&liSync=true
200 OK 0 B URL HTTP/2 px.ads.linkedin.com/collect?v=2&fmt=js&pid=169250%2C3955937%2C3976212&time=1661878800170&url=https%3A%2F%2Fwww.proofpoint.com%2Fus%2Fwombat-security-is-now-proofpoint&liSync=true
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /collect?v=2&fmt=js&pid=169250%2C3955937%2C3976212&time=1661878800170&url=https%3A%2F%2Fwww.proofpoint.com%2Fus%2Fwombat-security-is-now-proofpoint&liSync=true HTTP/1.1
Host: px.ads.linkedin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.proofpoint.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
set-cookie: lang=v=2&lang=en-us; SameSite=None; Path=/; Domain=ads.linkedin.com; Secure
bcookie="v=2&ca4edee8-4a31-4674-860a-32fb21500779"; domain=.linkedin.com; Path=/; Secure; Expires=Wed, 30-Aug-2023 17:00:00 GMT; SameSite=None
lidc="b=OGST09:s=O:r=O:a=O:p=O:g=2332:u=1:x=1:i=1661878800:t=1661965200:v=2:sig=AQGz4QKl3cH5p9JNSadaOgZASgCnr7rk"; Expires=Wed, 31 Aug 2022 17:00:00 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
x-li-fabric: prod-lor1
x-li-pop: afd-prod-lor1-x
x-li-proto: http/2
x-li-uuid: AAXneE+WTpgoKdoj16bgMQ==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 47A7B220EFB2472F922924A9A181BAAC Ref B: OSL30EDGE0110 Ref C: 2022-08-30T17:00:00Z
date: Tue, 30 Aug 2022 17:00:00 GMT
content-length: 0
X-Firefox-Spdy: h2
attr.ml-api.io/?domain=proofpoint.com&pId=0
200 OK 0 B URL HTTP/2 attr.ml-api.io/?domain=proofpoint.com&pId=0
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?domain=proofpoint.com&pId=0 HTTP/1.1
Host: attr.ml-api.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.proofpoint.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/json
content-length: 0
date: Tue, 30 Aug 2022 17:00:00 GMT
apigw-requestid: Xr9CrhhyoAMEJOQ=
x-cache: Miss from cloudfront
via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 5YcdHFASC8N7wpXb7NdzKl9ieeo_c35JjjEGglQqJz4X0IMF5efrdg==
X-Firefox-Spdy: h2
s.adroll.com/j/sendrolling.js
200 OK 2.0 kB URL HTTP/1.1 s.adroll.com/j/sendrolling.js
IP
File type ASCII text, with very long lines (3703)
Hash 6699de37162fc816863fbfe0c57b1d5a
132ea0a6ff9e528a5c2c25d351d11263ce668e01
f52fc8f4de599b319ae4b4b6e72a59c13557ff78581e4880a75dea77a69e705b
GET /j/sendrolling.js HTTP/1.1
Host: s.adroll.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.proofpoint.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 30 Jun 2022 21:48:50 GMT
X-Amz-Server-Side-Encryption: AES256
X-Amz-Version-Id: wG3UJevK_dyyBSOJeVU2_V1xC3jx_aLw
Server: AmazonS3
Content-Encoding: gzip
Date: Tue, 30 Aug 2022 08:10:59 GMT
Etag: W/"9f2aa6ae991d93164d9512029d813cad"
Vary: Accept-Encoding
Via: 1.1 8e6dce34fd223e0c9d89fd938d1784a2.cloudfront.net (CloudFront)
Age: 31792
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET
Access-Control-Allow-Headers: *
X-Cache: Hit from cloudfront
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: NHIxxksYknUBZl2O1iJWpYK_FWuJIXszFG78ljVxGdZrJIGcO_aegQ==
www.clarity.ms/tag/uet/17087961
200 OK 1.7 kB URL HTTP/2 www.clarity.ms/tag/uet/17087961
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type ASCII text, with very long lines (1734), with no line terminators
Hash faed16bb17926b62bb7e786e87204ec2
4e6a42a4d19e4fec3e76e4dba7f7cee0edeff72e
121f4dde9424c00aa18f5dff47076df70da1c33a805cffc1ae131001c71abbeb
GET /tag/uet/17087961 HTTP/1.1
Host: www.clarity.ms
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.proofpoint.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: no-cache, no-store
content-length: 1734
content-type: application/x-javascript
expires: -1
set-cookie: CLID=c411ef2d006a40c087a24ed10905a9f4.20220830.20230830; expires=Wed, 30 Aug 2023 17:00:00 GMT; path=/; secure; samesite=none; httponly
request-context: appId=cid-v1:b1d896b3-bec7-448b-b764-240152e813e8
x-powered-by: ASP.NET
x-cache: CONFIG_NOCACHE
x-azure-ref: 0EEIOYwAAAABa315MFMJgQqFB0rTlKqJITFRTRURHRTEzMTMANmNmYmVlZTAtNTAyNy00ODRiLTg5NjctNGEyOWFmNzdmMWUx
date: Tue, 30 Aug 2022 17:00:00 GMT
X-Firefox-Spdy: h2
d.adroll.com/cm/g/out?adroll_fpc=d8d50ae3e85828d3eac0dedf44647a23-1661878800988&arrfrr=https%3A%2F%2Fwww.proofpoint.com%2Fus%2Fwombat-security-is-now-proofpoint&advertisable=7YJ7XZCLMRHSVCXIHB5HIT&google_nid=adroll5
302 Found 100 B URL HTTP/2 d.adroll.com/cm/g/out?adroll_fpc=d8d50ae3e85828d3eac0dedf44647a23-1661878800988&arrfrr=https%3A%2F%2Fwww.proofpoint.com%2Fus%2Fwombat-security-is-now-proofpoint&advertisable=7YJ7XZCLMRHSVCXIHB5HIT&google_nid=adroll5
IP
File type ASCII text, with no line terminators
Hash bfa212d42fde7ba8c837ff8b012178bf
e8fa4a47908fc02c0dd43e0aeda17622b75dea99
44f7ef0228849a6fc3c0e20e74eb2ccaf248b58b7a812b12cea6e0b4ecddf737
GET /cm/g/out?adroll_fpc=d8d50ae3e85828d3eac0dedf44647a23-1661878800988&arrfrr=https%3A%2F%2Fwww.proofpoint.com%2Fus%2Fwombat-security-is-now-proofpoint&advertisable=7YJ7XZCLMRHSVCXIHB5HIT&google_nid=adroll5 HTTP/1.1
Host: d.adroll.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.proofpoint.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
date: Tue, 30 Aug 2022 17:00:01 GMT
content-length: 100
location: https://cm.g.doubleclick.net/pixel?google_sc&google_nid=artb&google_hm=ZtjVCuPoWCjT6sDe30RkeiM
server: nginx/1.20.0
cache-control: no-store, no-cache, must-revalidate
p3p: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA"
pragma: no-cache
set-cookie: __adroll=e83a7e13a3ecb981ac86c507b40783a6-a_1661878801; Version=1; Expires=Fri, 29-Sep-2023 17:00:00 GMT; Max-Age=34128000; Path=/; HttpOnly; SameSite=None; Secure
__adroll_shared=e83a7e13a3ecb981ac86c507b40783a6-a_1661878801; Version=1; Expires=Fri, 29-Sep-2023 17:00:00 GMT; Max-Age=34128000; Path=/; HttpOnly; SameSite=None; Secure; Domain=adroll.com
X-Firefox-Spdy: h2
d.adroll.com/cm/index/out?adroll_fpc=d8d50ae3e85828d3eac0dedf44647a23-1661878800988&arrfrr=https%3A%2F%2Fwww.proofpoint.com%2Fus%2Fwombat-security-is-now-proofpoint&advertisable=7YJ7XZCLMRHSVCXIHB5HIT
302 Found 140 B URL HTTP/2 d.adroll.com/cm/index/out?adroll_fpc=d8d50ae3e85828d3eac0dedf44647a23-1661878800988&arrfrr=https%3A%2F%2Fwww.proofpoint.com%2Fus%2Fwombat-security-is-now-proofpoint&advertisable=7YJ7XZCLMRHSVCXIHB5HIT
IP
File type ASCII text, with no line terminators
Hash c212986918f2bdad332de88eb14f2bf5
d23c6bc9ad9811fa92bf07f838afb3bf7adfb404
17575054a3e143a27ba9d46fa799157db295e5f56c9376db3ebcffa961679e8b
GET /cm/index/out?adroll_fpc=d8d50ae3e85828d3eac0dedf44647a23-1661878800988&arrfrr=https%3A%2F%2Fwww.proofpoint.com%2Fus%2Fwombat-security-is-now-proofpoint&advertisable=7YJ7XZCLMRHSVCXIHB5HIT HTTP/1.1
Host: d.adroll.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.proofpoint.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
date: Tue, 30 Aug 2022 17:00:01 GMT
content-length: 140
location: https://dsum-sec.casalemedia.com/rum?cm_dsp_id=105&external_user_id=ZmQ4ZDUwYWUzZTg1ODI4ZDNlYWMwZGVkZjQ0NjQ3YTIz&expiration=1693414801
server: nginx/1.20.0
cache-control: no-store, no-cache, must-revalidate
p3p: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA"
pragma: no-cache
set-cookie: __adroll=3677d31b26a1461116731c4d62018e44-a_1661878801; Version=1; Expires=Fri, 29-Sep-2023 17:00:00 GMT; Max-Age=34128000; Path=/; HttpOnly; SameSite=None; Secure
__adroll_shared=3677d31b26a1461116731c4d62018e44-a_1661878801; Version=1; Expires=Fri, 29-Sep-2023 17:00:00 GMT; Max-Age=34128000; Path=/; HttpOnly; SameSite=None; Secure; Domain=adroll.com
X-Firefox-Spdy: h2
d.adroll.com/cm/n/out?adroll_fpc=d8d50ae3e85828d3eac0dedf44647a23-1661878800988&arrfrr=https%3A%2F%2Fwww.proofpoint.com%2Fus%2Fwombat-security-is-now-proofpoint&advertisable=7YJ7XZCLMRHSVCXIHB5HIT
302 Found 125 B URL HTTP/2 d.adroll.com/cm/n/out?adroll_fpc=d8d50ae3e85828d3eac0dedf44647a23-1661878800988&arrfrr=https%3A%2F%2Fwww.proofpoint.com%2Fus%2Fwombat-security-is-now-proofpoint&advertisable=7YJ7XZCLMRHSVCXIHB5HIT
IP
File type ASCII text, with no line terminators
Hash 81ae7e701073f8db9596dd8611681db2
38c348604f7b716603f1fc01901f4612744b9403
1f318e34e7f2bef042780ebd8e7361c5c400f9dbd10475dd48c52b9c907fbb90
GET /cm/n/out?adroll_fpc=d8d50ae3e85828d3eac0dedf44647a23-1661878800988&arrfrr=https%3A%2F%2Fwww.proofpoint.com%2Fus%2Fwombat-security-is-now-proofpoint&advertisable=7YJ7XZCLMRHSVCXIHB5HIT HTTP/1.1
Host: d.adroll.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.proofpoint.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
date: Tue, 30 Aug 2022 17:00:01 GMT
content-length: 125
location: https://pixel.rubiconproject.com/tap.php?v=194538&nid=3644&put=ZmQ4ZDUwYWUzZTg1ODI4ZDNlYWMwZGVkZjQ0NjQ3YTIz&expires=365
server: nginx/1.20.0
cache-control: no-store, no-cache, must-revalidate
p3p: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA"
pragma: no-cache
set-cookie: __adroll=ff6b37f6d494210cf5f8006ed36e10d8-a_1661878801; Version=1; Expires=Fri, 29-Sep-2023 17:00:00 GMT; Max-Age=34128000; Path=/; HttpOnly; SameSite=None; Secure
__adroll_shared=ff6b37f6d494210cf5f8006ed36e10d8-a_1661878801; Version=1; Expires=Fri, 29-Sep-2023 17:00:00 GMT; Max-Age=34128000; Path=/; HttpOnly; SameSite=None; Secure; Domain=adroll.com
X-Firefox-Spdy: h2
d.adroll.com/cm/outbrain/out?adroll_fpc=d8d50ae3e85828d3eac0dedf44647a23-1661878800988&arrfrr=https%3A%2F%2Fwww.proofpoint.com%2Fus%2Fwombat-security-is-now-proofpoint&advertisable=7YJ7XZCLMRHSVCXIHB5HIT
302 Found 101 B URL HTTP/2 d.adroll.com/cm/outbrain/out?adroll_fpc=d8d50ae3e85828d3eac0dedf44647a23-1661878800988&arrfrr=https%3A%2F%2Fwww.proofpoint.com%2Fus%2Fwombat-security-is-now-proofpoint&advertisable=7YJ7XZCLMRHSVCXIHB5HIT
IP
File type ASCII text, with no line terminators
Hash ec7c90df485c8d71afbe41bdb970e8da
1bf4e9b05afbc8271bf2fa73ad2aa1a6f02c9319
7e662ecb76590384371b667d9d181d29890ef3692232d2c6ae323b491c7819f9
GET /cm/outbrain/out?adroll_fpc=d8d50ae3e85828d3eac0dedf44647a23-1661878800988&arrfrr=https%3A%2F%2Fwww.proofpoint.com%2Fus%2Fwombat-security-is-now-proofpoint&advertisable=7YJ7XZCLMRHSVCXIHB5HIT HTTP/1.1
Host: d.adroll.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.proofpoint.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
date: Tue, 30 Aug 2022 17:00:01 GMT
content-length: 101
location: https://sync.outbrain.com/cookie-sync?p=adroll&uid=ZmQ4ZDUwYWUzZTg1ODI4ZDNlYWMwZGVkZjQ0NjQ3YTIz
server: nginx/1.20.0
cache-control: no-store, no-cache, must-revalidate
p3p: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA"
pragma: no-cache
set-cookie: __adroll=d390969c95ea460482555af4e1ed68df-a_1661878801; Version=1; Expires=Fri, 29-Sep-2023 17:00:00 GMT; Max-Age=34128000; Path=/; HttpOnly; SameSite=None; Secure
__adroll_shared=d390969c95ea460482555af4e1ed68df-a_1661878801; Version=1; Expires=Fri, 29-Sep-2023 17:00:00 GMT; Max-Age=34128000; Path=/; HttpOnly; SameSite=None; Secure; Domain=adroll.com
X-Firefox-Spdy: h2
d.adroll.com/cm/r/out?adroll_fpc=d8d50ae3e85828d3eac0dedf44647a23-1661878800988&arrfrr=https%3A%2F%2Fwww.proofpoint.com%2Fus%2Fwombat-security-is-now-proofpoint&advertisable=7YJ7XZCLMRHSVCXIHB5HIT
302 Found 170 B URL HTTP/2 d.adroll.com/cm/r/out?adroll_fpc=d8d50ae3e85828d3eac0dedf44647a23-1661878800988&arrfrr=https%3A%2F%2Fwww.proofpoint.com%2Fus%2Fwombat-security-is-now-proofpoint&advertisable=7YJ7XZCLMRHSVCXIHB5HIT
IP
File type ASCII text, with no line terminators
Hash 6de67efc7d641cd22acb0fedf65765e2
8c7587d52802ea15fe1de7b2ff47cf880099e984
4bdc1dc2720ea0a9fd2cca88603b757b70bb7313afda44c06e7fab3732c3fe2f
GET /cm/r/out?adroll_fpc=d8d50ae3e85828d3eac0dedf44647a23-1661878800988&arrfrr=https%3A%2F%2Fwww.proofpoint.com%2Fus%2Fwombat-security-is-now-proofpoint&advertisable=7YJ7XZCLMRHSVCXIHB5HIT HTTP/1.1
Host: d.adroll.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.proofpoint.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
date: Tue, 30 Aug 2022 17:00:01 GMT
content-length: 170
location: https://ups.analytics.yahoo.com/ups/55980/sync?_origin=1&uid=ZmQ4ZDUwYWUzZTg1ODI4ZDNlYWMwZGVkZjQ0NjQ3YTIz&gdpr=1&gdpr_consent=BOOla_OOOla_OA2ABBENAkwAAAAXyACAAyAIIA
server: nginx/1.20.0
cache-control: no-store, no-cache, must-revalidate
p3p: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA"
pragma: no-cache
set-cookie: __adroll=358c36750a5159b1b576848e304beff5-a_1661878801; Version=1; Expires=Fri, 29-Sep-2023 17:00:00 GMT; Max-Age=34128000; Path=/; HttpOnly; SameSite=None; Secure
__adroll_shared=358c36750a5159b1b576848e304beff5-a_1661878801; Version=1; Expires=Fri, 29-Sep-2023 17:00:00 GMT; Max-Age=34128000; Path=/; HttpOnly; SameSite=None; Secure; Domain=adroll.com
X-Firefox-Spdy: h2
d.adroll.com/cm/pubmatic/out?adroll_fpc=d8d50ae3e85828d3eac0dedf44647a23-1661878800988&arrfrr=https%3A%2F%2Fwww.proofpoint.com%2Fus%2Fwombat-security-is-now-proofpoint&advertisable=7YJ7XZCLMRHSVCXIHB5HIT
302 Found 213 B URL HTTP/2 d.adroll.com/cm/pubmatic/out?adroll_fpc=d8d50ae3e85828d3eac0dedf44647a23-1661878800988&arrfrr=https%3A%2F%2Fwww.proofpoint.com%2Fus%2Fwombat-security-is-now-proofpoint&advertisable=7YJ7XZCLMRHSVCXIHB5HIT
IP
File type ASCII text, with no line terminators
Hash 0d7b3c83dd0b7f44207e6992174c8bbc
33c8057519819930020e8030c8c62dad3202f312
399c0ff5feaf023c7d8153e29dfc21760bd81a44af0dd72207daf543c08de4d9
GET /cm/pubmatic/out?adroll_fpc=d8d50ae3e85828d3eac0dedf44647a23-1661878800988&arrfrr=https%3A%2F%2Fwww.proofpoint.com%2Fus%2Fwombat-security-is-now-proofpoint&advertisable=7YJ7XZCLMRHSVCXIHB5HIT HTTP/1.1
Host: d.adroll.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.proofpoint.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
date: Tue, 30 Aug 2022 17:00:01 GMT
content-length: 213
location: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMzMDYmdGw9MTI5NjAw&piggybackCookie=ZmQ4ZDUwYWUzZTg1ODI4ZDNlYWMwZGVkZjQ0NjQ3YTIz&gdpr=1&gdpr_consent=BOOoKswOOoKswA2ABBENAkwAAAAXyACACYAIIA
server: nginx/1.20.0
cache-control: no-store, no-cache, must-revalidate
p3p: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA"
pragma: no-cache
set-cookie: __adroll=08f62ea70bb7a640464379063e600a21-a_1661878801; Version=1; Expires=Fri, 29-Sep-2023 17:00:00 GMT; Max-Age=34128000; Path=/; HttpOnly; SameSite=None; Secure
__adroll_shared=08f62ea70bb7a640464379063e600a21-a_1661878801; Version=1; Expires=Fri, 29-Sep-2023 17:00:00 GMT; Max-Age=34128000; Path=/; HttpOnly; SameSite=None; Secure; Domain=adroll.com
X-Firefox-Spdy: h2
d.adroll.com/cm/taboola/out?adroll_fpc=d8d50ae3e85828d3eac0dedf44647a23-1661878800988&arrfrr=https%3A%2F%2Fwww.proofpoint.com%2Fus%2Fwombat-security-is-now-proofpoint&advertisable=7YJ7XZCLMRHSVCXIHB5HIT
302 Found 112 B URL HTTP/2 d.adroll.com/cm/taboola/out?adroll_fpc=d8d50ae3e85828d3eac0dedf44647a23-1661878800988&arrfrr=https%3A%2F%2Fwww.proofpoint.com%2Fus%2Fwombat-security-is-now-proofpoint&advertisable=7YJ7XZCLMRHSVCXIHB5HIT
IP
File type ASCII text, with no line terminators
Hash d4890f96dac67d3aad41d75123650eed
6dfefe032eb1c114777febffdd924f1cdaf78e75
e04bf1846adf3f97838185866f7e2edc54cacf8b1e3ff27417e0d7d46ac93b52
GET /cm/taboola/out?adroll_fpc=d8d50ae3e85828d3eac0dedf44647a23-1661878800988&arrfrr=https%3A%2F%2Fwww.proofpoint.com%2Fus%2Fwombat-security-is-now-proofpoint&advertisable=7YJ7XZCLMRHSVCXIHB5HIT HTTP/1.1
Host: d.adroll.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.proofpoint.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
date: Tue, 30 Aug 2022 17:00:01 GMT
content-length: 112
location: https://sync.taboola.com/sg/adroll-network/1/rtb-h?taboola_hm=ZmQ4ZDUwYWUzZTg1ODI4ZDNlYWMwZGVkZjQ0NjQ3YTIz
server: nginx/1.20.0
cache-control: no-store, no-cache, must-revalidate
p3p: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA"
pragma: no-cache
set-cookie: __adroll=1df22e0aabd6806f8616e131ffe6535d-a_1661878801; Version=1; Expires=Fri, 29-Sep-2023 17:00:00 GMT; Max-Age=34128000; Path=/; HttpOnly; SameSite=None; Secure
__adroll_shared=1df22e0aabd6806f8616e131ffe6535d-a_1661878801; Version=1; Expires=Fri, 29-Sep-2023 17:00:00 GMT; Max-Age=34128000; Path=/; HttpOnly; SameSite=None; Secure; Domain=adroll.com
X-Firefox-Spdy: h2
d.adroll.com/cm/triplelift/out?adroll_fpc=d8d50ae3e85828d3eac0dedf44647a23-1661878800988&arrfrr=https%3A%2F%2Fwww.proofpoint.com%2Fus%2Fwombat-security-is-now-proofpoint&advertisable=7YJ7XZCLMRHSVCXIHB5HIT
302 Found 103 B URL HTTP/2 d.adroll.com/cm/triplelift/out?adroll_fpc=d8d50ae3e85828d3eac0dedf44647a23-1661878800988&arrfrr=https%3A%2F%2Fwww.proofpoint.com%2Fus%2Fwombat-security-is-now-proofpoint&advertisable=7YJ7XZCLMRHSVCXIHB5HIT
IP
File type ASCII text, with no line terminators
Hash 75a1fa20b1cd85f655d45270219632ea
4af40449212a1c7d5e38e4f6b8578e5939abc56d
90fcc7babcbbce859f318dbd7ec0d4df653bee2e8ab02cdd32e0524b501ded8b
GET /cm/triplelift/out?adroll_fpc=d8d50ae3e85828d3eac0dedf44647a23-1661878800988&arrfrr=https%3A%2F%2Fwww.proofpoint.com%2Fus%2Fwombat-security-is-now-proofpoint&advertisable=7YJ7XZCLMRHSVCXIHB5HIT HTTP/1.1
Host: d.adroll.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.proofpoint.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
date: Tue, 30 Aug 2022 17:00:01 GMT
content-length: 103
location: https://eb2.3lift.com/xuid?mid=4714&xuid=ZmQ4ZDUwYWUzZTg1ODI4ZDNlYWMwZGVkZjQ0NjQ3YTIz&dongle=c85e
server: nginx/1.20.0
cache-control: no-store, no-cache, must-revalidate
p3p: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA"
pragma: no-cache
set-cookie: __adroll=36c95cca7f269b2e7ac07d4c4c02296a-a_1661878801; Version=1; Expires=Fri, 29-Sep-2023 17:00:00 GMT; Max-Age=34128000; Path=/; HttpOnly; SameSite=None; Secure
__adroll_shared=36c95cca7f269b2e7ac07d4c4c02296a-a_1661878801; Version=1; Expires=Fri, 29-Sep-2023 17:00:00 GMT; Max-Age=34128000; Path=/; HttpOnly; SameSite=None; Secure; Domain=adroll.com
X-Firefox-Spdy: h2
d.adroll.com/cm/b/out?adroll_fpc=d8d50ae3e85828d3eac0dedf44647a23-1661878800988&arrfrr=https%3A%2F%2Fwww.proofpoint.com%2Fus%2Fwombat-security-is-now-proofpoint&advertisable=7YJ7XZCLMRHSVCXIHB5HIT
302 Found 97 B URL HTTP/2 d.adroll.com/cm/b/out?adroll_fpc=d8d50ae3e85828d3eac0dedf44647a23-1661878800988&arrfrr=https%3A%2F%2Fwww.proofpoint.com%2Fus%2Fwombat-security-is-now-proofpoint&advertisable=7YJ7XZCLMRHSVCXIHB5HIT
IP
File type ASCII text, with no line terminators
Hash 96bb53c93a6eeeffb25ddbfa42bbde84
a1fb9b7e5ac52525fd2f18818b8f08ce6df3e027
52278fb48412a47b7e239446885951de3f5005f9fdc803339bb7634fe508823e
GET /cm/b/out?adroll_fpc=d8d50ae3e85828d3eac0dedf44647a23-1661878800988&arrfrr=https%3A%2F%2Fwww.proofpoint.com%2Fus%2Fwombat-security-is-now-proofpoint&advertisable=7YJ7XZCLMRHSVCXIHB5HIT HTTP/1.1
Host: d.adroll.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.proofpoint.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
date: Tue, 30 Aug 2022 17:00:01 GMT
content-length: 97
location: https://x.bidswitch.net/sync?dsp_id=44&user_id=ZmQ4ZDUwYWUzZTg1ODI4ZDNlYWMwZGVkZjQ0NjQ3YTIz
server: nginx/1.20.0
cache-control: no-store, no-cache, must-revalidate
p3p: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA"
pragma: no-cache
set-cookie: __adroll=ec3f1290ecd2dbadcd6dff508331e683-a_1661878801; Version=1; Expires=Fri, 29-Sep-2023 17:00:00 GMT; Max-Age=34128000; Path=/; HttpOnly; SameSite=None; Secure
__adroll_shared=ec3f1290ecd2dbadcd6dff508331e683-a_1661878801; Version=1; Expires=Fri, 29-Sep-2023 17:00:00 GMT; Max-Age=34128000; Path=/; HttpOnly; SameSite=None; Secure; Domain=adroll.com
X-Firefox-Spdy: h2
d.adroll.com/cm/x/out?adroll_fpc=d8d50ae3e85828d3eac0dedf44647a23-1661878800988&arrfrr=https%3A%2F%2Fwww.proofpoint.com%2Fus%2Fwombat-security-is-now-proofpoint&advertisable=7YJ7XZCLMRHSVCXIHB5HIT
302 Found 94 B URL HTTP/2 d.adroll.com/cm/x/out?adroll_fpc=d8d50ae3e85828d3eac0dedf44647a23-1661878800988&arrfrr=https%3A%2F%2Fwww.proofpoint.com%2Fus%2Fwombat-security-is-now-proofpoint&advertisable=7YJ7XZCLMRHSVCXIHB5HIT
IP
File type ASCII text, with no line terminators
Hash 03b21ee9267e2a59a9b5065a01cb97a0
bb340814f1c3ac3212b1d31d54010bead531396c
59d7a5136be753205650fedf41a1d892335df587189e3e4b9aa5dfcac57550ac
GET /cm/x/out?adroll_fpc=d8d50ae3e85828d3eac0dedf44647a23-1661878800988&arrfrr=https%3A%2F%2Fwww.proofpoint.com%2Fus%2Fwombat-security-is-now-proofpoint&advertisable=7YJ7XZCLMRHSVCXIHB5HIT HTTP/1.1
Host: d.adroll.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.proofpoint.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
date: Tue, 30 Aug 2022 17:00:01 GMT
content-length: 94
location: https://ib.adnxs.com/setuid?entity=172&code=ZmQ4ZDUwYWUzZTg1ODI4ZDNlYWMwZGVkZjQ0NjQ3YTIz
server: nginx/1.20.0
cache-control: no-store, no-cache, must-revalidate
p3p: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA"
pragma: no-cache
set-cookie: __adroll=00228a68f297c18ca71ac20243d842d0-a_1661878801; Version=1; Expires=Fri, 29-Sep-2023 17:00:00 GMT; Max-Age=34128000; Path=/; HttpOnly; SameSite=None; Secure
__adroll_shared=00228a68f297c18ca71ac20243d842d0-a_1661878801; Version=1; Expires=Fri, 29-Sep-2023 17:00:00 GMT; Max-Age=34128000; Path=/; HttpOnly; SameSite=None; Secure; Domain=adroll.com
X-Firefox-Spdy: h2
d.adroll.com/cm/l/out?adroll_fpc=d8d50ae3e85828d3eac0dedf44647a23-1661878800988&arrfrr=https%3A%2F%2Fwww.proofpoint.com%2Fus%2Fwombat-security-is-now-proofpoint&advertisable=7YJ7XZCLMRHSVCXIHB5HIT
200 OK 42 B URL HTTP/2 d.adroll.com/cm/l/out?adroll_fpc=d8d50ae3e85828d3eac0dedf44647a23-1661878800988&arrfrr=https%3A%2F%2Fwww.proofpoint.com%2Fus%2Fwombat-security-is-now-proofpoint&advertisable=7YJ7XZCLMRHSVCXIHB5HIT
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /cm/l/out?adroll_fpc=d8d50ae3e85828d3eac0dedf44647a23-1661878800988&arrfrr=https%3A%2F%2Fwww.proofpoint.com%2Fus%2Fwombat-security-is-now-proofpoint&advertisable=7YJ7XZCLMRHSVCXIHB5HIT HTTP/1.1
Host: d.adroll.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.proofpoint.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 30 Aug 2022 17:00:01 GMT
content-type: image/gif
content-length: 42
server: nginx/1.20.0
cache-control: no-transform,public,max-age=300,s-maxage=900
vary: Cookie
X-Firefox-Spdy: h2
d.adroll.com/cm/o/out?adroll_fpc=d8d50ae3e85828d3eac0dedf44647a23-1661878800988&arrfrr=https%3A%2F%2Fwww.proofpoint.com%2Fus%2Fwombat-security-is-now-proofpoint&advertisable=7YJ7XZCLMRHSVCXIHB5HIT
302 Found 109 B URL HTTP/2 d.adroll.com/cm/o/out?adroll_fpc=d8d50ae3e85828d3eac0dedf44647a23-1661878800988&arrfrr=https%3A%2F%2Fwww.proofpoint.com%2Fus%2Fwombat-security-is-now-proofpoint&advertisable=7YJ7XZCLMRHSVCXIHB5HIT
IP
File type ASCII text, with no line terminators
Hash f3b8681a74d6e87a5cc85627046dea5f
660dc35ea90a368dda64d9954500dd294e73ec62
d07095be2d79a211cd6860885612bfac57863f147747b3b1465e812c8b05d827
GET /cm/o/out?adroll_fpc=d8d50ae3e85828d3eac0dedf44647a23-1661878800988&arrfrr=https%3A%2F%2Fwww.proofpoint.com%2Fus%2Fwombat-security-is-now-proofpoint&advertisable=7YJ7XZCLMRHSVCXIHB5HIT HTTP/1.1
Host: d.adroll.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.proofpoint.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
date: Tue, 30 Aug 2022 17:00:01 GMT
content-length: 109
location: https://us-u.openx.net/w/1.0/sd?id=537103138&val=fd8d50ae3e85828d3eac0dedf44647a23&gdpr=1&gdpr_consent=
server: nginx/1.20.0
cache-control: no-store, no-cache, must-revalidate
p3p: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA"
pragma: no-cache
set-cookie: __adroll=be70e02003357f08edc48c67eaf36363-a_1661878801; Version=1; Expires=Fri, 29-Sep-2023 17:00:00 GMT; Max-Age=34128000; Path=/; HttpOnly; SameSite=None; Secure
__adroll_shared=be70e02003357f08edc48c67eaf36363-a_1661878801; Version=1; Expires=Fri, 29-Sep-2023 17:00:00 GMT; Max-Age=34128000; Path=/; HttpOnly; SameSite=None; Secure; Domain=adroll.com
X-Firefox-Spdy: h2
dsum-sec.casalemedia.com/rum?cm_dsp_id=105&external_user_id=ZmQ4ZDUwYWUzZTg1ODI4ZDNlYWMwZGVkZjQ0NjQ3YTIz&expiration=1693414801
302 Found 0 B URL HTTP/2 dsum-sec.casalemedia.com/rum?cm_dsp_id=105&external_user_id=ZmQ4ZDUwYWUzZTg1ODI4ZDNlYWMwZGVkZjQ0NjQ3YTIz&expiration=1693414801
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /rum?cm_dsp_id=105&external_user_id=ZmQ4ZDUwYWUzZTg1ODI4ZDNlYWMwZGVkZjQ0NjQ3YTIz&expiration=1693414801 HTTP/1.1
Host: dsum-sec.casalemedia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.proofpoint.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Tue, 30 Aug 2022 17:00:01 GMT
content-length: 0
location: /rum?cm_dsp_id=105&external_user_id=ZmQ4ZDUwYWUzZTg1ODI4ZDNlYWMwZGVkZjQ0NjQ3YTIz&expiration=1693414801&C=1
cf-ray: 742f148b0983b4f3-OSL
cache-control: no-cache
expires: 0
cf-cache-status: DYNAMIC
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
p3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI"
pragma: no-cache
set-cookie: CMID=Yw5CEf9UerXMAGmwNRHZYAAA; Path=/; Domain=casalemedia.com; Expires=Wed, 30 Aug 2023 17:00:01 GMT; Max-Age=31536000; Secure; SameSite=None
CMPS=4358; Path=/; Domain=casalemedia.com; Expires=Mon, 28 Nov 2022 17:00:01 GMT; Max-Age=7776000; Secure; SameSite=None
CMPRO=4358; Path=/; Domain=casalemedia.com; Expires=Mon, 28 Nov 2022 17:00:01 GMT; Max-Age=7776000; Secure; SameSite=None
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XyPJMVXCKWwlv%2B6t9xewc70W9bkNoVHQHp%2FOFgLDEtbqCvE%2FbAUyf%2F6E45MkgZUIK1zpe9gZYo9ReChhuFr%2FxUeE6A9RCtV9kaonCllhgeplWvUPB%2BYRuNVfDGniP5jafn%2BTVGJFzrssUw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash ad5f72f7485f3eda7f332bcad8fe5f09
d6f0bba8a4471d11aec30bd10f2946e98f4a2bc2
d47eeb353ae03464040856a5a59bf5ef678eedda4cc0786f664c914cc554ff11
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2015
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 30 Aug 2022 17:00:01 GMT
Last-Modified: Tue, 30 Aug 2022 16:26:26 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 471
cm.g.doubleclick.net/pixel?google_sc&google_nid=artb&google_hm=ZtjVCuPoWCjT6sDe30RkeiM
302 Found 315 B URL HTTP/2 cm.g.doubleclick.net/pixel?google_sc&google_nid=artb&google_hm=ZtjVCuPoWCjT6sDe30RkeiM
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Hash 024fac0ece3e36246e5c43b2d445fc49
a702712997c05ef0925fcdb540c79268c8bce03f
86c1d3f66e2e1ec8a73b2ea1303602ffed8a73cd8bdc8bcd8e452adb39885fc1
GET /pixel?google_sc&google_nid=artb&google_hm=ZtjVCuPoWCjT6sDe30RkeiM HTTP/1.1
Host: cm.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.proofpoint.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
location: https://cm.g.doubleclick.net/pixel?google_sc=&google_nid=artb&google_hm=ZtjVCuPoWCjT6sDe30RkeiM&google_tc=
date: Tue, 30 Aug 2022 17:00:01 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
server: HTTP server (unknown)
content-length: 315
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Tue, 30-Aug-2022 17:15:01 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
dsum-sec.casalemedia.com/rum?cm_dsp_id=105&external_user_id=ZmQ4ZDUwYWUzZTg1ODI4ZDNlYWMwZGVkZjQ0NjQ3YTIz&expiration=1693414801&C=1
200 OK 43 B URL HTTP/2 dsum-sec.casalemedia.com/rum?cm_dsp_id=105&external_user_id=ZmQ4ZDUwYWUzZTg1ODI4ZDNlYWMwZGVkZjQ0NjQ3YTIz&expiration=1693414801&C=1
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 325472601571f31e1bf00674c368d335
2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
GET /rum?cm_dsp_id=105&external_user_id=ZmQ4ZDUwYWUzZTg1ODI4ZDNlYWMwZGVkZjQ0NjQ3YTIz&expiration=1693414801&C=1 HTTP/1.1
Host: dsum-sec.casalemedia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.proofpoint.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 30 Aug 2022 17:00:01 GMT
content-type: image/gif
content-length: 43
cf-ray: 742f148b6a19b4f3-OSL
cache-control: no-cache
expires: 0
cf-cache-status: DYNAMIC
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
pragma: no-cache
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vh9SDTIek%2Biuztjae7oYF%2BPODupbTQNV3F01hqZHi3hagHIKPGXOvVlF%2ByhNUm8jtdPvuT4iU2Q7UY7te7oIEd9zDjyOfo4te33wyfCfSojtycJUYqfntgHf9n3e1NXNRr3xswt1uAtgeA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 82e84bb69aea1f31c027350c65b6495e
1261c329ecb15004f2356b75b21893b1d3f213c6
df59d50f16c0e9abb5d4b9a499fb05b1d51820417781506c38c2c02ef8ec0ea1
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4096
Cache-Control: max-age=116101
Content-Type: application/ocsp-response
Date: Tue, 30 Aug 2022 17:00:01 GMT
Etag: "630d5496-1d7"
Expires: Thu, 01 Sep 2022 01:15:02 GMT
Last-Modified: Tue, 30 Aug 2022 00:06:46 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 471 B IP
Hash 28c14b7201af20b5a9427786c31b71ca
e8a42e4fbd4410a11e8da90d7d57c89c637f57ea
8ca53bbebac808e559d17250f51b9393e1c79a70323ababb378033f2edd1b6b1
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3515
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 30 Aug 2022 17:00:01 GMT
Last-Modified: Tue, 30 Aug 2022 16:01:26 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 471
www.clarity.ms/eus2/s/0.6.39/clarity.js
200 OK 24 kB URL HTTP/2 www.clarity.ms/eus2/s/0.6.39/clarity.js
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type Unicode text, UTF-8 text, with very long lines (54346)
Hash 3a0696e9fdbc758ff0c41fc7da6e358d
3299556c2bb00c2856587aa0b292415f9708464f
873e500130d365fe1bc825bd7ab8a79179f6c8220fa0d6d52f6902918832219d
GET /eus2/s/0.6.39/clarity.js HTTP/1.1
Host: www.clarity.ms
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.proofpoint.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public,max-age=86400
content-type: application/javascript;charset=utf-8
content-encoding: br
last-modified: Wed, 01 Jun 2022 12:22:22 GMT
accept-ranges: bytes
etag: "1d8baf6c78cf4a1"
vary: Accept-Encoding
request-context: appId=cid-v1:2f7711a9-b21e-4abe-a9d6-5b0ce5d18b64
x-powered-by: ASP.NET
x-cache: CONFIG_NOCACHE
x-azure-ref: 0EUIOYwAAAADuVBDX21d8So8aPx5GtjETTFRTRURHRTEzMTMANmNmYmVlZTAtNTAyNy00ODRiLTg5NjctNGEyOWFmNzdmMWUx
date: Tue, 30 Aug 2022 17:00:00 GMT
X-Firefox-Spdy: h2
ups.analytics.yahoo.com/ups/55980/sync?_origin=1&uid=ZmQ4ZDUwYWUzZTg1ODI4ZDNlYWMwZGVkZjQ0NjQ3YTIz&gdpr=1&gdpr_consent=BOOla_OOOla_OA2ABBENAkwAAAAXyACAAyAIIA
204 No Content 0 B URL HTTP/2 ups.analytics.yahoo.com/ups/55980/sync?_origin=1&uid=ZmQ4ZDUwYWUzZTg1ODI4ZDNlYWMwZGVkZjQ0NjQ3YTIz&gdpr=1&gdpr_consent=BOOla_OOOla_OA2ABBENAkwAAAAXyACAAyAIIA
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ups/55980/sync?_origin=1&uid=ZmQ4ZDUwYWUzZTg1ODI4ZDNlYWMwZGVkZjQ0NjQ3YTIz&gdpr=1&gdpr_consent=BOOla_OOOla_OA2ABBENAkwAAAAXyACAAyAIIA HTTP/1.1
Host: ups.analytics.yahoo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.proofpoint.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Tue, 30 Aug 2022 17:00:01 GMT
strict-transport-security: max-age=31536000
p3p: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV
age: 0
server: ATS/9.1.10.25
X-Firefox-Spdy: h2
cm.g.doubleclick.net/pixel?google_sc=&google_nid=artb&google_hm=ZtjVCuPoWCjT6sDe30RkeiM&google_tc=
302 Found 240 B URL HTTP/2 cm.g.doubleclick.net/pixel?google_sc=&google_nid=artb&google_hm=ZtjVCuPoWCjT6sDe30RkeiM&google_tc=
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Hash 2be25722d8bfbf2ff282a822200bbcaf
009892faf3863a0fdb4c26050234e07f1f9aecda
19a8a04a0850ef48a932fe33850d3348fee724df52900bef04be1521902db024
GET /pixel?google_sc=&google_nid=artb&google_hm=ZtjVCuPoWCjT6sDe30RkeiM&google_tc= HTTP/1.1
Host: cm.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.proofpoint.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
location: https://d.adroll.com/cm/g/in?google_error=3
date: Tue, 30 Aug 2022 17:00:01 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
server: HTTP server (unknown)
content-length: 240
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
sync.taboola.com/sg/adroll-network/1/rtb-h?taboola_hm=ZmQ4ZDUwYWUzZTg1ODI4ZDNlYWMwZGVkZjQ0NjQ3YTIz
204 No Content 0 B URL HTTP/2 sync.taboola.com/sg/adroll-network/1/rtb-h?taboola_hm=ZmQ4ZDUwYWUzZTg1ODI4ZDNlYWMwZGVkZjQ0NjQ3YTIz
IP
ASN #200478 Taboola.com ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sg/adroll-network/1/rtb-h?taboola_hm=ZmQ4ZDUwYWUzZTg1ODI4ZDNlYWMwZGVkZjQ0NjQ3YTIz HTTP/1.1
Host: sync.taboola.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.proofpoint.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: nginx
date: Tue, 30 Aug 2022 17:00:01 GMT
x-fastly-to-nlb-rtt: 22902
access-control-allow-credentials: true
X-Firefox-Spdy: h2
ib.adnxs.com/setuid?entity=172&code=ZmQ4ZDUwYWUzZTg1ODI4ZDNlYWMwZGVkZjQ0NjQ3YTIz
307 Redirection 0 B URL HTTP/1.1 ib.adnxs.com/setuid?entity=172&code=ZmQ4ZDUwYWUzZTg1ODI4ZDNlYWMwZGVkZjQ0NjQ3YTIz
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /setuid?entity=172&code=ZmQ4ZDUwYWUzZTg1ODI4ZDNlYWMwZGVkZjQ0NjQ3YTIz HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.proofpoint.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Redirection
Server: nginx/1.21.3
Date: Tue, 30 Aug 2022 17:00:01 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Location: https://ib.adnxs.com/bounce?%2Fsetuid%3Fentity%3D172%26code%3DZmQ4ZDUwYWUzZTg1ODI4ZDNlYWMwZGVkZjQ0NjQ3YTIz
AN-X-Request-Uuid: 929c12d2-b02b-4b79-9ecd-f38410cf78fc
Set-Cookie: uuid2=3444145128654971053; SameSite=None; Path=/; Max-Age=7776000; Expires=Mon, 28-Nov-2022 17:00:01 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 961.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
pixel.rubiconproject.com/tap.php?v=194538&nid=3644&put=ZmQ4ZDUwYWUzZTg1ODI4ZDNlYWMwZGVkZjQ0NjQ3YTIz&expires=365
204 No Content 0 B URL HTTP/1.1 pixel.rubiconproject.com/tap.php?v=194538&nid=3644&put=ZmQ4ZDUwYWUzZTg1ODI4ZDNlYWMwZGVkZjQ0NjQ3YTIz&expires=365
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tap.php?v=194538&nid=3644&put=ZmQ4ZDUwYWUzZTg1ODI4ZDNlYWMwZGVkZjQ0NjQ3YTIz&expires=365 HTTP/1.1
Host: pixel.rubiconproject.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.proofpoint.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
Pragma: no-cache
Cache-Control: no-cache,no-store,must-revalidate
Expires: 0
X-RPHost: d0cea2fb47f5ddedaddf61763f0aedb4
Content-Type: image/gif
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash b2205f358130b0aa1ccc159771896db8
ab4808cb24280661fc75f47d28993fa0e2272471
102a82be816481465a05a24e6f6fed75827444e10b16c434a71a715e40901f88
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Tue, 30 Aug 2022 17:00:01 GMT
Last-Modified: Tue, 30 Aug 2022 15:13:30 GMT
Server: ECS (nyb/1D1D)
X-Cache: Miss from cloudfront
Via: 1.1 04c4f064943f75498361739eb063cb7a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: mlIUmo0wTaPyStD-NJtfTGIMWmi6Dw1eEzCoivy6QRjX85chCDTuMQ==
Age: 6391
image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMzMDYmdGw9MTI5NjAw&piggybackCookie=ZmQ4ZDUwYWUzZTg1ODI4ZDNlYWMwZGVkZjQ0NjQ3YTIz&gdpr=1&gdpr_consent=BOOoKswOOoKswA2ABBENAkwAAAAXyACACYAIIA
200 OK 42 B URL HTTP/2 image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMzMDYmdGw9MTI5NjAw&piggybackCookie=ZmQ4ZDUwYWUzZTg1ODI4ZDNlYWMwZGVkZjQ0NjQ3YTIz&gdpr=1&gdpr_consent=BOOoKswOOoKswA2ABBENAkwAAAAXyACACYAIIA
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMzMDYmdGw9MTI5NjAw&piggybackCookie=ZmQ4ZDUwYWUzZTg1ODI4ZDNlYWMwZGVkZjQ0NjQ3YTIz&gdpr=1&gdpr_consent=BOOoKswOOoKswA2ABBENAkwAAAAXyACACYAIIA HTTP/1.1
Host: image2.pubmatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.proofpoint.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 30 Aug 2022 17:00:01 GMT
content-type: image/gif; charset=utf-8
content-length: 42
set-cookie: KRTBCOOKIE_10=22808-ZmQ4ZDUwYWUzZTg1ODI4ZDNlYWMwZGVkZjQ0NjQ3YTIz&KRTB&22883-ZmQ4ZDUwYWUzZTg1ODI4ZDNlYWMwZGVkZjQ0NjQ3YTIz; domain=pubmatic.com; secure; expires=Mon, 28-Nov-2022 17:00:01 GMT; path=/
PugT=1661878801; domain=pubmatic.com; secure; expires=Thu, 29-Sep-2022 17:00:01 GMT; path=/
p3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC"
cache-control: no-store, no-cache, private
X-Firefox-Spdy: h2
ib.adnxs.com/bounce?%2Fsetuid%3Fentity%3D172%26code%3DZmQ4ZDUwYWUzZTg1ODI4ZDNlYWMwZGVkZjQ0NjQ3YTIz
200 OK 43 B URL HTTP/1.1 ib.adnxs.com/bounce?%2Fsetuid%3Fentity%3D172%26code%3DZmQ4ZDUwYWUzZTg1ODI4ZDNlYWMwZGVkZjQ0NjQ3YTIz
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 592ebefc7104d681d57852665e9ad514
15cdf8df32aa251dd6dd590a60bf9cf74474e7c5
4b5b6b15c6255109e06720cce42a06d3aead8b7874423d9c52cb0303212c25ef
GET /bounce?%2Fsetuid%3Fentity%3D172%26code%3DZmQ4ZDUwYWUzZTg1ODI4ZDNlYWMwZGVkZjQ0NjQ3YTIz HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.proofpoint.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Tue, 30 Aug 2022 17:00:01 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
AN-X-Request-Uuid: cd5d6e04-d3c1-4072-a1d8-b867be04c604
Set-Cookie: anj=dTM7k!M4/rEVNsVF']wIg2GUeo6s5V!@wnfH1Yy6O4]7I=1+5Nhr9f`_tl-._rrSRm=g(z)COupQ')/4S+ghWRqmahsF51vR]^L_(y'A[IxE->9RFMZ9T5_m!wwEO+s8pN; SameSite=None; Path=/; Max-Age=7776000; Expires=Mon, 28-Nov-2022 17:00:01 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 961.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
us-u.openx.net/w/1.0/sd?id=537103138&val=fd8d50ae3e85828d3eac0dedf44647a23&gdpr=1&gdpr_consent=
200 OK 86 kB URL HTTP/2 us-u.openx.net/w/1.0/sd?id=537103138&val=fd8d50ae3e85828d3eac0dedf44647a23&gdpr=1&gdpr_consent=
IP
File type gzip compressed data, from Unix\012- data
Hash cfdce18c1d275b93ab76d9807298772a
22588739f653c5172fd285647578176d775b5ffa
438b779e7cd8580e5d3573621f7904eb7de03d736a747e3fb56ce6c93b16eec4
GET /w/1.0/sd?id=537103138&val=fd8d50ae3e85828d3eac0dedf44647a23&gdpr=1&gdpr_consent= HTTP/1.1
Host: us-u.openx.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.proofpoint.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept
server: OXGW/0.0.0
pragma: no-cache
p3p: CP="CUR ADM OUR NOR STA NID"
expires: Mon, 26 Jul 1997 05:00:00 GMT
date: Tue, 30 Aug 2022 17:00:01 GMT
content-type: image/gif
content-length: 43
cache-control: private, max-age=0, no-cache
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
d.adroll.com/cm/g/in?google_error=3
200 OK 42 B URL HTTP/2 d.adroll.com/cm/g/in?google_error=3
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /cm/g/in?google_error=3 HTTP/1.1
Host: d.adroll.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.proofpoint.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 30 Aug 2022 17:00:01 GMT
content-type: image/gif
content-length: 42
server: nginx/1.20.0
cache-control: no-store, no-cache, must-revalidate
p3p: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA"
pragma: no-cache
set-cookie: __adroll=4bd00314283c6908e92c067ec6e9eb52-a_1661878801; Version=1; Expires=Fri, 29-Sep-2023 17:00:01 GMT; Max-Age=34128000; Path=/; HttpOnly; SameSite=None; Secure
__adroll_shared=4bd00314283c6908e92c067ec6e9eb52-a_1661878801; Version=1; Expires=Fri, 29-Sep-2023 17:00:01 GMT; Max-Age=34128000; Path=/; HttpOnly; SameSite=None; Secure; Domain=adroll.com
x-result: g.2.-1.3
X-Firefox-Spdy: h2
eb2.3lift.com/xuid?mid=4714&xuid=ZmQ4ZDUwYWUzZTg1ODI4ZDNlYWMwZGVkZjQ0NjQ3YTIz&dongle=c85e
200 OK 37 B URL HTTP/2 eb2.3lift.com/xuid?mid=4714&xuid=ZmQ4ZDUwYWUzZTg1ODI4ZDNlYWMwZGVkZjQ0NjQ3YTIz&dongle=c85e
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 3eacd0132310ea44cad756b378a3bc07
e2216a7e9b73f5cb0279351c78ce61c33475cea7
bb229a48bee31f5d54ca12dc9bd960c63a671f0d4be86a054c1d324a44499d96
GET /xuid?mid=4714&xuid=ZmQ4ZDUwYWUzZTg1ODI4ZDNlYWMwZGVkZjQ0NjQ3YTIz&dongle=c85e HTTP/1.1
Host: eb2.3lift.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.proofpoint.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 30 Aug 2022 17:00:01 GMT
content-type: image/gif
content-length: 37
cache-control: no-cache, no-store, must-revalidate
X-Firefox-Spdy: h2
status.thawte.com/
200 OK 471 B IP
Hash 3afad29b96314d6069f03b3fa1800249
a8778cf19f6f064b5c3a930945ddafccf54a826f
e4c76a4e94415ce61a493a58a035af460b8df00bb963982b4a886fbf3a019270
POST / HTTP/1.1
Host: status.thawte.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4789
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 30 Aug 2022 17:00:01 GMT
Last-Modified: Tue, 30 Aug 2022 15:40:12 GMT
Server: ECS (ska/F705)
X-Cache: HIT
Content-Length: 471
status.geotrust.com/
200 OK 471 B IP
Hash 72cc9a64d58bb39e4fe1ae3af9de152e
45c6bb0f2feb7735cd9187c59f13ac085292dcee
a7f07b535ae6630ca67a75e76d3fe235b7c6f98ed34a2e83e7eb2e5af9f11395
POST / HTTP/1.1
Host: status.geotrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1163
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 30 Aug 2022 17:00:01 GMT
Last-Modified: Tue, 30 Aug 2022 16:40:38 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 471
sync.outbrain.com/cookie-sync?p=adroll&uid=ZmQ4ZDUwYWUzZTg1ODI4ZDNlYWMwZGVkZjQ0NjQ3YTIz
200 OK 0 B URL HTTP/1.1 sync.outbrain.com/cookie-sync?p=adroll&uid=ZmQ4ZDUwYWUzZTg1ODI4ZDNlYWMwZGVkZjQ0NjQ3YTIz
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cookie-sync?p=adroll&uid=ZmQ4ZDUwYWUzZTg1ODI4ZDNlYWMwZGVkZjQ0NjQ3YTIz HTTP/1.1
Host: sync.outbrain.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.proofpoint.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Tue, 30 Aug 2022 17:00:01 GMT
Content-Length: 0
Cache-Control: no-cache
set-cookie: obuid=47694cb9-fcfb-457a-a481-2484aba88e03; Max-Age=7776000; Expires=Mon, 28 Nov 2022 17:00:01 GMT; Path=/; Domain=.outbrain.com
X-TraceId: 57a04f28c931c7b24198ea3b23c15fa4
b.6sc.co/v1/beacon/img.gif?token=76d4adecd2340b300ba5d4296ecef89d&svisitor=null&visitor=11c3ab59-3e13-40e0-8e72-d961450788f5&session=93287037-a89e-400e-8d11-8b135fcca991&event=active_time_track&q=%7B%22currentTime%22%3A%22Tue%2C%2030%20Aug%202022%2017%3A00%3A01%20GMT%22%2C%22lastTrackTime%22%3A%22Tue%2C%2030%20Aug%202022%2017%3A00%3A00%20GMT%22%2C%22timeSpent%22%3A%221024%22%2C%22totalTimeSpent%22%3A%222035%22%7D&isIframe=false&m=%7B%22description%22%3A%22Wombat%20Security%20is%20now%20Proofpoint%20Security%20Awareness%20Training.%20Learn%20about%20the%20integration%20and%20benefits%20you%20get%20with%20Proofpoint.%22%2C%22keywords%22%3A%22%22%2C%22title%22%3A%22Wombat%20Security%20Is%20Now%20Proofpoint%20%7C%20Proofpoint%22%7D&cb=&r=&thirdParty=%7B%7D&v2=1&pageURL=https%3A%2F%2Fwww.proofpoint.com%2Fus%2Fwombat-security-is-now-proofpoint&pageViewId=f06092c0-2238-4783-8182-9dda3ff078ea&an_uid=0
200 OK 43 B URL HTTP/2 b.6sc.co/v1/beacon/img.gif?token=76d4adecd2340b300ba5d4296ecef89d&svisitor=null&visitor=11c3ab59-3e13-40e0-8e72-d961450788f5&session=93287037-a89e-400e-8d11-8b135fcca991&event=active_time_track&q=%7B%22currentTime%22%3A%22Tue%2C%2030%20Aug%202022%2017%3A00%3A01%20GMT%22%2C%22lastTrackTime%22%3A%22Tue%2C%2030%20Aug%202022%2017%3A00%3A00%20GMT%22%2C%22timeSpent%22%3A%221024%22%2C%22totalTimeSpent%22%3A%222035%22%7D&isIframe=false&m=%7B%22description%22%3A%22Wombat%20Security%20is%20now%20Proofpoint%20Security%20Awareness%20Training.%20Learn%20about%20the%20integration%20and%20benefits%20you%20get%20with%20Proofpoint.%22%2C%22keywords%22%3A%22%22%2C%22title%22%3A%22Wombat%20Security%20Is%20Now%20Proofpoint%20%7C%20Proofpoint%22%7D&cb=&r=&thirdParty=%7B%7D&v2=1&pageURL=https%3A%2F%2Fwww.proofpoint.com%2Fus%2Fwombat-security-is-now-proofpoint&pageViewId=f06092c0-2238-4783-8182-9dda3ff078ea&an_uid=0
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash f837aa60b6fe83458f790db60d529fc9
14af87ccec7f81bb28d53c84da2fd5a9d5925cda
dcecab1355b5c2b9ecef281322bf265ac5840b4688748586e9632b473a5fe56b
GET /v1/beacon/img.gif?token=76d4adecd2340b300ba5d4296ecef89d&svisitor=null&visitor=11c3ab59-3e13-40e0-8e72-d961450788f5&session=93287037-a89e-400e-8d11-8b135fcca991&event=active_time_track&q=%7B%22currentTime%22%3A%22Tue%2C%2030%20Aug%202022%2017%3A00%3A01%20GMT%22%2C%22lastTrackTime%22%3A%22Tue%2C%2030%20Aug%202022%2017%3A00%3A00%20GMT%22%2C%22timeSpent%22%3A%221024%22%2C%22totalTimeSpent%22%3A%222035%22%7D&isIframe=false&m=%7B%22description%22%3A%22Wombat%20Security%20is%20now%20Proofpoint%20Security%20Awareness%20Training.%20Learn%20about%20the%20integration%20and%20benefits%20you%20get%20with%20Proofpoint.%22%2C%22keywords%22%3A%22%22%2C%22title%22%3A%22Wombat%20Security%20Is%20Now%20Proofpoint%20%7C%20Proofpoint%22%7D&cb=&r=&thirdParty=%7B%7D&v2=1&pageURL=https%3A%2F%2Fwww.proofpoint.com%2Fus%2Fwombat-security-is-now-proofpoint&pageViewId=f06092c0-2238-4783-8182-9dda3ff078ea&an_uid=0 HTTP/1.1
Host: b.6sc.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.proofpoint.com/
Cookie: 6suuid=261f1602672900000f420e636a030000ae080300
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
cache-control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate
content-type: image/gif
etag: "615ccf10-2b"
expires: Wed, 19 Apr 2000 11:43:00 GMT
last-modified: Tue, 05 Oct 2021 22:17:52 GMT
pragma: no-cache
server: nginx/1.14.0 (Ubuntu)
x-content-type-options: nosniff
content-length: 43
date: Tue, 30 Aug 2022 17:00:01 GMT
set-cookie: 6suuid=261f1602672900000f420e636a030000ae080300; expires=Thu, 29-Aug-2024 17:00:01 GMT; path=/; domain=.6sc.co; SameSite=None; secure
access-control-allow-origin:
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: GET,POST
X-Firefox-Spdy: h2
b.clarity.ms/collect
204 No Content 0 B IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /collect HTTP/1.1
Host: b.clarity.ms
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 850
Origin: https://www.proofpoint.com
Connection: keep-alive
Referer: https://www.proofpoint.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: Microsoft-IIS/10.0
request-context: appId=cid-v1:2f7711a9-b21e-4abe-a9d6-5b0ce5d18b64
access-control-allow-origin: https://www.proofpoint.com
access-control-allow-credentials: true
x-powered-by: ASP.NET
date: Tue, 30 Aug 2022 17:00:01 GMT
X-Firefox-Spdy: h2
b.clarity.ms/collect
204 No Content 0 B IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /collect HTTP/1.1
Host: b.clarity.ms
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 92926
Origin: https://www.proofpoint.com
Connection: keep-alive
Referer: https://www.proofpoint.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: Microsoft-IIS/10.0
request-context: appId=cid-v1:2f7711a9-b21e-4abe-a9d6-5b0ce5d18b64
access-control-allow-origin: https://www.proofpoint.com
access-control-allow-credentials: true
x-powered-by: ASP.NET
date: Tue, 30 Aug 2022 17:00:01 GMT
X-Firefox-Spdy: h2
x.bidswitch.net/sync?dsp_id=44&user_id=ZmQ4ZDUwYWUzZTg1ODI4ZDNlYWMwZGVkZjQ0NjQ3YTIz
302 Moved Temporarily 0 B URL HTTP/1.1 x.bidswitch.net/sync?dsp_id=44&user_id=ZmQ4ZDUwYWUzZTg1ODI4ZDNlYWMwZGVkZjQ0NjQ3YTIz
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sync?dsp_id=44&user_id=ZmQ4ZDUwYWUzZTg1ODI4ZDNlYWMwZGVkZjQ0NjQ3YTIz HTTP/1.1
Host: x.bidswitch.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.proofpoint.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Moved Temporarily
Cache-Control: no-cache, no-store, must-revalidate
Date: Tue, 30 Aug 2022 17:00:02 GMT
Location: https://x.bidswitch.net/ul_cb/sync?dsp_id=44&user_id=ZmQ4ZDUwYWUzZTg1ODI4ZDNlYWMwZGVkZjQ0NjQ3YTIz
Set-Cookie: tuuid=f33e7ce4-3c58-4d61-bd35-822c4fa62dbc; path=/; expires=Wed, 30-Aug-2023 17:00:02 GMT; domain=.bidswitch.net; samesite=none; secure
c=1661878802; path=/; expires=Wed, 30-Aug-2023 17:00:02 GMT; domain=.bidswitch.net; samesite=none; secure
tuuid_lu=1661878802; path=/; expires=Wed, 30-Aug-2023 17:00:02 GMT; domain=.bidswitch.net; samesite=none; secure
c=1661878802; path=/; expires=Wed, 30-Aug-2023 17:00:02 GMT; domain=.bidswitch.net; samesite=none; secure
Content-Length: 0
Connection: keep-alive
x.bidswitch.net/ul_cb/sync?dsp_id=44&user_id=ZmQ4ZDUwYWUzZTg1ODI4ZDNlYWMwZGVkZjQ0NjQ3YTIz
200 OK 43 B URL HTTP/1.1 x.bidswitch.net/ul_cb/sync?dsp_id=44&user_id=ZmQ4ZDUwYWUzZTg1ODI4ZDNlYWMwZGVkZjQ0NjQ3YTIz
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /ul_cb/sync?dsp_id=44&user_id=ZmQ4ZDUwYWUzZTg1ODI4ZDNlYWMwZGVkZjQ0NjQ3YTIz HTTP/1.1
Host: x.bidswitch.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.proofpoint.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: no-cache, no-store, must-revalidate
Content-Type: image/gif
Date: Tue, 30 Aug 2022 17:00:02 GMT
Content-Length: 43
Connection: keep-alive
js-agent.newrelic.com/nr-1216.min.js
200 OK 14 kB URL HTTP/2 js-agent.newrelic.com/nr-1216.min.js
IP
File type ASCII text, with very long lines (32022)
Hash b7c09cc097b2847f9edc784adba62dcb
5aa648623cf5e3b4b215fe5d068a7904c59f2925
6da450b6a3ba53bdab36f6529e987a245cdfca9a37b77790f06dfd8d5797bdaa
GET /nr-1216.min.js HTTP/1.1
Host: js-agent.newrelic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.proofpoint.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: Vf9xsFZHH0UI6bmTnW+KeBzegICGOxvtMLIWtbljNKoJtdkUEk/MfmbYPFui+bgtiUf/4lC5dk8=
x-amz-request-id: 4AV5AVKCCR961CNG
last-modified: Thu, 14 Apr 2022 16:45:57 GMT
etag: "9f533d8cd24b2c5e3b4dc886ecbd43e8"
x-amz-version-id: mHHzJIqOizHibcYt0xqAszRr0gQRiNYy
content-type: application/javascript
server: AmazonS3
cache-control: public, max-age=7200, stale-if-error=604800
content-encoding: gzip
accept-ranges: bytes
date: Tue, 30 Aug 2022 17:00:02 GMT
via: 1.1 varnish
x-served-by: cache-bma1641-BMA
x-cache: HIT
x-cache-hits: 2883
x-timer: S1661878802.420819,VS0,VE0
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
content-length: 14391
X-Firefox-Spdy: h2
c.clarity.ms/c.gif
302 Found 0 B IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /c.gif HTTP/1.1
Host: c.clarity.ms
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.proofpoint.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
cache-control: private, no-cache, proxy-revalidate, no-store
pragma: no-cache
location: https://c.bing.com/c.gif?CtsSyncId=ADF7CA2495084A0499BC8D1869AA2CBB&RedC=c.clarity.ms&MXFR=357C0DD463E8643536DD1FC467E86A7B
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
set-cookie: SM=T; domain=c.clarity.ms; path=/; SameSite=None; Secure;
MUID=357C0DD463E8643536DD1FC467E86A7B; domain=.clarity.ms; expires=Sun, 24-Sep-2023 17:00:02 GMT; path=/; SameSite=None; Secure; Priority=High;
date: Tue, 30 Aug 2022 17:00:02 GMT
content-length: 0
X-Firefox-Spdy: h2
js.driftt.com/core/assets/css/17.22abfce0.chunk.css
200 OK 24 B URL HTTP/2 js.driftt.com/core/assets/css/17.22abfce0.chunk.css
IP
File type ASCII text, with no line terminators
Hash 0c5dad92482d9a7c7c253510f5082465
534b458f99b4d0bb90c2cf2c4bb3703ef44a52bf
5dbaf0a4ff0f8ac8c1b67550eee84390b089604ffaf71183e417636c7e183ac5
GET /core/assets/css/17.22abfce0.chunk.css HTTP/1.1
Host: js.driftt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://js.driftt.com/core?embedId=5dfsgn7m2kst®ion=US&forceShow=false&skipCampaigns=false&sessionId=87ea9c31-7f3b-487e-941f-82e8a43637e7&sessionStarted=1661878802.41&campaignRefreshToken=f7c14ca4-a947-45fb-92d2-71aae205d325&hideController=false&pageLoadStartTime=1661878797846&mode=CHAT&driftEnableLog=false&secureIframe=false
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/css
content-length: 24
date: Thu, 09 Jun 2022 19:59:49 GMT
server: nginx
last-modified: Thu, 09 Jun 2022 14:58:11 GMT
etag: "0c5dad92482d9a7c7c253510f5082465"
x-amz-server-side-encryption: AES256
x-amz-version-id: ykspFRt4QsihJmMduj_fPY2DMuvVpMeo
accept-ranges: bytes
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
strict-transport-security: max-age=31536000; includeSubDomains
cache-control: max-age=31536000
x-cache: Hit from cloudfront
via: 1.1 b053873243f91b1bb6dc406ce0c67db4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: VAngNT2fmOj12q4xc_63CUN8LqPpgCoJ6xLG7T1869J8kVDufjwK8g==
age: 7074013
X-Firefox-Spdy: h2
b.6sc.co/v1/beacon/img.gif?token=76d4adecd2340b300ba5d4296ecef89d&svisitor=null&visitor=11c3ab59-3e13-40e0-8e72-d961450788f5&session=93287037-a89e-400e-8d11-8b135fcca991&event=active_time_track&q=%7B%22currentTime%22%3A%22Tue%2C%2030%20Aug%202022%2017%3A00%3A02%20GMT%22%2C%22lastTrackTime%22%3A%22Tue%2C%2030%20Aug%202022%2017%3A00%3A01%20GMT%22%2C%22timeSpent%22%3A%221003%22%2C%22totalTimeSpent%22%3A%223038%22%7D&isIframe=false&m=%7B%22description%22%3A%22Wombat%20Security%20is%20now%20Proofpoint%20Security%20Awareness%20Training.%20Learn%20about%20the%20integration%20and%20benefits%20you%20get%20with%20Proofpoint.%22%2C%22keywords%22%3A%22%22%2C%22title%22%3A%22Wombat%20Security%20Is%20Now%20Proofpoint%20%7C%20Proofpoint%22%7D&cb=&r=&thirdParty=%7B%7D&v2=1&pageURL=https%3A%2F%2Fwww.proofpoint.com%2Fus%2Fwombat-security-is-now-proofpoint&pageViewId=f06092c0-2238-4783-8182-9dda3ff078ea&an_uid=0
200 OK 43 B URL HTTP/2 b.6sc.co/v1/beacon/img.gif?token=76d4adecd2340b300ba5d4296ecef89d&svisitor=null&visitor=11c3ab59-3e13-40e0-8e72-d961450788f5&session=93287037-a89e-400e-8d11-8b135fcca991&event=active_time_track&q=%7B%22currentTime%22%3A%22Tue%2C%2030%20Aug%202022%2017%3A00%3A02%20GMT%22%2C%22lastTrackTime%22%3A%22Tue%2C%2030%20Aug%202022%2017%3A00%3A01%20GMT%22%2C%22timeSpent%22%3A%221003%22%2C%22totalTimeSpent%22%3A%223038%22%7D&isIframe=false&m=%7B%22description%22%3A%22Wombat%20Security%20is%20now%20Proofpoint%20Security%20Awareness%20Training.%20Learn%20about%20the%20integration%20and%20benefits%20you%20get%20with%20Proofpoint.%22%2C%22keywords%22%3A%22%22%2C%22title%22%3A%22Wombat%20Security%20Is%20Now%20Proofpoint%20%7C%20Proofpoint%22%7D&cb=&r=&thirdParty=%7B%7D&v2=1&pageURL=https%3A%2F%2Fwww.proofpoint.com%2Fus%2Fwombat-security-is-now-proofpoint&pageViewId=f06092c0-2238-4783-8182-9dda3ff078ea&an_uid=0
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash f837aa60b6fe83458f790db60d529fc9
14af87ccec7f81bb28d53c84da2fd5a9d5925cda
dcecab1355b5c2b9ecef281322bf265ac5840b4688748586e9632b473a5fe56b
GET /v1/beacon/img.gif?token=76d4adecd2340b300ba5d4296ecef89d&svisitor=null&visitor=11c3ab59-3e13-40e0-8e72-d961450788f5&session=93287037-a89e-400e-8d11-8b135fcca991&event=active_time_track&q=%7B%22currentTime%22%3A%22Tue%2C%2030%20Aug%202022%2017%3A00%3A02%20GMT%22%2C%22lastTrackTime%22%3A%22Tue%2C%2030%20Aug%202022%2017%3A00%3A01%20GMT%22%2C%22timeSpent%22%3A%221003%22%2C%22totalTimeSpent%22%3A%223038%22%7D&isIframe=false&m=%7B%22description%22%3A%22Wombat%20Security%20is%20now%20Proofpoint%20Security%20Awareness%20Training.%20Learn%20about%20the%20integration%20and%20benefits%20you%20get%20with%20Proofpoint.%22%2C%22keywords%22%3A%22%22%2C%22title%22%3A%22Wombat%20Security%20Is%20Now%20Proofpoint%20%7C%20Proofpoint%22%7D&cb=&r=&thirdParty=%7B%7D&v2=1&pageURL=https%3A%2F%2Fwww.proofpoint.com%2Fus%2Fwombat-security-is-now-proofpoint&pageViewId=f06092c0-2238-4783-8182-9dda3ff078ea&an_uid=0 HTTP/1.1
Host: b.6sc.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.proofpoint.com/
Cookie: 6suuid=261f1602672900000f420e636a030000ae080300
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
cache-control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate
content-type: image/gif
etag: "615ccf10-2b"
expires: Wed, 19 Apr 2000 11:43:00 GMT
last-modified: Tue, 05 Oct 2021 22:17:52 GMT
pragma: no-cache
server: nginx/1.14.0 (Ubuntu)
x-content-type-options: nosniff
content-length: 43
date: Tue, 30 Aug 2022 17:00:02 GMT
set-cookie: 6suuid=261f1602672900000f420e636a030000ae080300; expires=Thu, 29-Aug-2024 17:00:02 GMT; path=/; domain=.6sc.co; SameSite=None; secure
access-control-allow-origin:
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: GET,POST
X-Firefox-Spdy: h2
js.driftt.com/core/assets/js/20.8c21ea18.chunk.js
200 OK 29 kB URL HTTP/2 js.driftt.com/core/assets/js/20.8c21ea18.chunk.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 82578fd809b69b6b713f15b309e16ff8
a76b1fcc1a579c622446351ebda51c6a40da1bfc
3d1691dee2749dab24746b9c4d8593cca665fb9aaf1907162dc678128f8d1ce2
GET /core/assets/js/20.8c21ea18.chunk.js HTTP/1.1
Host: js.driftt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://js.driftt.com/core?embedId=5dfsgn7m2kst®ion=US&forceShow=false&skipCampaigns=false&sessionId=87ea9c31-7f3b-487e-941f-82e8a43637e7&sessionStarted=1661878802.41&campaignRefreshToken=f7c14ca4-a947-45fb-92d2-71aae205d325&hideController=false&pageLoadStartTime=1661878797846&mode=CHAT&driftEnableLog=false&secureIframe=false
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
date: Thu, 09 Jun 2022 19:59:49 GMT
server: nginx
last-modified: Thu, 09 Jun 2022 14:58:13 GMT
etag: W/"6d77a76055d81227033363af2f18caf8"
x-amz-server-side-encryption: AES256
x-amz-version-id: GCkJ4tZ_JW3xcmjJsO05feXt7md0igxo
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
strict-transport-security: max-age=31536000; includeSubDomains
cache-control: max-age=31536000
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 b053873243f91b1bb6dc406ce0c67db4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ulmZWdY50QQR8CMAnuu7T87j6OHHtUMKVvGtgVtgg8bRK0i2mqcc9g==
age: 7074013
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash cb7a750fa9348267c15cc938996ead6a
992ddfd1fa25e3ed2fbef82f29b5bc7049b27bd0
f95f2c93dd462fb2d17cf40682e7e6aa5138bcd158dcab83c5d66855f50cec79
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 30 Aug 2022 17:00:02 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Tue, 30 Aug 2022 13:56:49 GMT
Expires: Tue, 06 Sep 2022 13:56:48 GMT
Etag: "992ddfd1fa25e3ed2fbef82f29b5bc7049b27bd0"
Cache-Control: max-age=593205,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 742f148bdac9b4f3-OSL
js.driftt.com/core/assets/js/runtime~main.89b82425.js
200 OK 37 kB URL HTTP/2 js.driftt.com/core/assets/js/runtime~main.89b82425.js
IP
Hash 2af398e3184d1c31cf6105eac4a39f28
9aaa60b53ff6e1a47af76c6b1dd26ebd4e2d2753
5f31b268356da7c1623bca76cf5f5f9c0b83cb73ee5b48a46a0350863e992a3c
GET /core/assets/js/runtime~main.89b82425.js HTTP/1.1
Host: js.driftt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://js.driftt.com/core?embedId=5dfsgn7m2kst®ion=US&forceShow=false&skipCampaigns=false&sessionId=87ea9c31-7f3b-487e-941f-82e8a43637e7&sessionStarted=1661878802.41&campaignRefreshToken=f7c14ca4-a947-45fb-92d2-71aae205d325&hideController=false&pageLoadStartTime=1661878797846&mode=CHAT&driftEnableLog=false&secureIframe=false
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
date: Fri, 26 Aug 2022 13:20:22 GMT
server: nginx
last-modified: Thu, 25 Aug 2022 21:13:17 GMT
etag: W/"12a83618e3ddcb2880729bbeff25b5b3"
x-amz-server-side-encryption: AES256
x-amz-version-id: ogwoNKnFCJPdU8EID0VL7fqdCe05MZpW
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
strict-transport-security: max-age=31536000; includeSubDomains
cache-control: max-age=31536000
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 b053873243f91b1bb6dc406ce0c67db4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: tHQRx9NFa6edKBKE5Ai_VI2WrTEodSmgFmVStZSuGdseNJEs7aXs5w==
age: 358780
X-Firefox-Spdy: h2
bam.nr-data.net/1/0ae22ad83e?a=573869349&v=1216.487a282&to=bgQBYERQXBBWVBFbDldOIldCWF0NGEcEVQRmAgJXXlQ%3D&rst=5295&ck=1&ref=https://www.proofpoint.com/us/wombat-security-is-now-proofpoint&ap=44&be=1182&fe=5181&dc=1706&perf=%7B%22timing%22:%7B%22of%22:1661878797254,%22n%22:0,%22f%22:491,%22dn%22:497,%22dne%22:542,%22c%22:542,%22s%22:553,%22ce%22:568,%22rq%22:568,%22rp%22:575,%22rpe%22:592,%22dl%22:609,%22di%22:1681,%22ds%22:1705,%22de%22:1761,%22dc%22:5151,%22l%22:5181,%22le%22:5186%7D,%22navigation%22:%7B%7D%7D&fcp=1393&at=QkMCFgxKTx4%3D&jsonp=NREUM.setToken
200 OK 73 B URL HTTP/1.1 bam.nr-data.net/1/0ae22ad83e?a=573869349&v=1216.487a282&to=bgQBYERQXBBWVBFbDldOIldCWF0NGEcEVQRmAgJXXlQ%3D&rst=5295&ck=1&ref=https://www.proofpoint.com/us/wombat-security-is-now-proofpoint&ap=44&be=1182&fe=5181&dc=1706&perf=%7B%22timing%22:%7B%22of%22:1661878797254,%22n%22:0,%22f%22:491,%22dn%22:497,%22dne%22:542,%22c%22:542,%22s%22:553,%22ce%22:568,%22rq%22:568,%22rp%22:575,%22rpe%22:592,%22dl%22:609,%22di%22:1681,%22ds%22:1705,%22de%22:1761,%22dc%22:5151,%22l%22:5181,%22le%22:5186%7D,%22navigation%22:%7B%7D%7D&fcp=1393&at=QkMCFgxKTx4%3D&jsonp=NREUM.setToken
IP
File type ASCII text, with no line terminators
Hash 516a128bb6000ca8154792678f4333fb
41d0257bea96afd36c6f3e40fcfdc9ca247f8e01
9fa62b52f24b87a40410fe842cb9be494abed114a2eac2eb406c8b4a4d372d10
GET /1/0ae22ad83e?a=573869349&v=1216.487a282&to=bgQBYERQXBBWVBFbDldOIldCWF0NGEcEVQRmAgJXXlQ%3D&rst=5295&ck=1&ref=https://www.proofpoint.com/us/wombat-security-is-now-proofpoint&ap=44&be=1182&fe=5181&dc=1706&perf=%7B%22timing%22:%7B%22of%22:1661878797254,%22n%22:0,%22f%22:491,%22dn%22:497,%22dne%22:542,%22c%22:542,%22s%22:553,%22ce%22:568,%22rq%22:568,%22rp%22:575,%22rpe%22:592,%22dl%22:609,%22di%22:1681,%22ds%22:1705,%22de%22:1761,%22dc%22:5151,%22l%22:5181,%22le%22:5186%7D,%22navigation%22:%7B%7D%7D&fcp=1393&at=QkMCFgxKTx4%3D&jsonp=NREUM.setToken HTTP/1.1
Host: bam.nr-data.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.proofpoint.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Tue, 30 Aug 2022 17:00:03 GMT
Content-Type: text/javascript
Transfer-Encoding: chunked
Connection: keep-alive
CF-Ray: 742f14946800fac8-OSL
Access-Control-Allow-Origin: *
Set-Cookie: JSESSIONID=914f3133acf3edb4; Path=/; Domain=.nr-data.net; Secure; SameSite=None
CF-Cache-Status: DYNAMIC
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS
Cross-Origin-Resource-Policy: cross-origin
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Vary: Accept-Encoding
Server: cloudflare
Content-Encoding: gzip
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 2c95c0bbf88bdfc1e58c132dea1cd032
5221eaf41d1d7013dc0b83c00faab4b08c61f981
26a81f6171a6666ec5fde7b6d626ffc12d3c36129cc8fa60f0840ec644901057
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Tue, 30 Aug 2022 17:00:03 GMT
Last-Modified: Tue, 30 Aug 2022 15:51:33 GMT
Server: ECS (nyb/1D24)
X-Cache: Miss from cloudfront
Via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 4SI58voYl9wYdQ1Vw2hFxs9f1aZbh8eQhdAG2LKxiA-5eVQkLD02dA==
Age: 4110
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 2c95c0bbf88bdfc1e58c132dea1cd032
5221eaf41d1d7013dc0b83c00faab4b08c61f981
26a81f6171a6666ec5fde7b6d626ffc12d3c36129cc8fa60f0840ec644901057
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Tue, 30 Aug 2022 17:00:03 GMT
Last-Modified: Tue, 30 Aug 2022 15:42:55 GMT
Server: ECS (nyb/1D33)
X-Cache: Miss from cloudfront
Via: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: Ut9O0KhyaO3vmzhhjYts6ax4XNd9IEjWil5Y9bGex1OHaU396GKOqA==
Age: 4628
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 2c95c0bbf88bdfc1e58c132dea1cd032
5221eaf41d1d7013dc0b83c00faab4b08c61f981
26a81f6171a6666ec5fde7b6d626ffc12d3c36129cc8fa60f0840ec644901057
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Tue, 30 Aug 2022 17:00:03 GMT
Last-Modified: Tue, 30 Aug 2022 15:11:39 GMT
Server: ECS (nyb/1D07)
X-Cache: Miss from cloudfront
Via: 1.1 04c4f064943f75498361739eb063cb7a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: QdVBDI8RN10-RdtPT8GHW01sw239YV1TNDm3r_KAFFNlp1rMsaHkvg==
Age: 6504
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 2c95c0bbf88bdfc1e58c132dea1cd032
5221eaf41d1d7013dc0b83c00faab4b08c61f981
26a81f6171a6666ec5fde7b6d626ffc12d3c36129cc8fa60f0840ec644901057
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=160875
Date: Tue, 30 Aug 2022 17:00:03 GMT
Etag: "630e0b5d-1d7"
Expires: Thu, 01 Sep 2022 13:41:18 GMT
Last-Modified: Tue, 30 Aug 2022 13:06:37 GMT
Server: ECS (nyb/1D0A)
X-Cache: Miss from cloudfront
Via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: tHrCWUkQDRZCtUTMiMCLkE2cjhULVJWygONeuhFgMLNLRJUzp_Ss9w==
Age: 2081
js.driftt.com/core/assets/js/34.3cbd9261.chunk.js
200 OK 3.2 kB URL HTTP/2 js.driftt.com/core/assets/js/34.3cbd9261.chunk.js
IP
Hash 2f9dd3a0736b427aead13efa210bf701
6609b6e25b9233fe7f49702659c2cf25e3656854
bd04c6c6d7ef86f10cdc54a44acbca7eacd3d1d2ea9d72f3f944e124d20368b3
GET /core/assets/js/34.3cbd9261.chunk.js HTTP/1.1
Host: js.driftt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://js.driftt.com/core/chat?region=US&driftEnableLog=false&pageLoadStartTime=1661878797846
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
date: Fri, 26 Aug 2022 13:20:23 GMT
server: nginx
last-modified: Thu, 25 Aug 2022 21:13:15 GMT
etag: W/"748f87dc8e48bdf52edce2868c5c428c"
x-amz-server-side-encryption: AES256
x-amz-version-id: 9WcUo8FUpPIrUIsoQRc2Y_xjFIjq3R62
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
strict-transport-security: max-age=31536000; includeSubDomains
cache-control: max-age=31536000
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 b053873243f91b1bb6dc406ce0c67db4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: D6M6YNa7zktlTVj2m5DBF_h6fKDhcWuh_5BLRUwTOqlXRZj2hPygEw==
age: 358780
X-Firefox-Spdy: h2
js.driftt.com/core/assets/js/8.611ead2e.chunk.js
200 OK 73 kB URL HTTP/2 js.driftt.com/core/assets/js/8.611ead2e.chunk.js
IP
Hash b7dc321ef6f38e799199f0d30d805a6d
5501c217e05c5857752dd12fdadd44e3b39fe400
9cb4d8e1049f209b6370291b3873dfbf18c23e263fde36420a10301044936282
GET /core/assets/js/8.611ead2e.chunk.js HTTP/1.1
Host: js.driftt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://js.driftt.com/core?embedId=5dfsgn7m2kst®ion=US&forceShow=false&skipCampaigns=false&sessionId=87ea9c31-7f3b-487e-941f-82e8a43637e7&sessionStarted=1661878802.41&campaignRefreshToken=f7c14ca4-a947-45fb-92d2-71aae205d325&hideController=false&pageLoadStartTime=1661878797846&mode=CHAT&driftEnableLog=false&secureIframe=false
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
date: Thu, 09 Jun 2022 19:59:49 GMT
server: nginx
last-modified: Thu, 09 Jun 2022 14:58:14 GMT
etag: W/"6aa29962f34a8e117268142c7cc1cc3d"
x-amz-server-side-encryption: AES256
x-amz-version-id: _RZ1GDjUm5KuW3ooz6jLFMyJffaKXq96
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
strict-transport-security: max-age=31536000; includeSubDomains
cache-control: max-age=31536000
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 b053873243f91b1bb6dc406ce0c67db4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: iJqltFYiiA1GHoFQ1AcEca4Yqy9GJ3-Us_EcmyrUA3CtG0lwr1LqDA==
age: 7074013
X-Firefox-Spdy: h2
js.driftt.com/core/assets/js/26.5517f7a6.chunk.js
200 OK 50 kB URL HTTP/2 js.driftt.com/core/assets/js/26.5517f7a6.chunk.js
IP
Hash 705afbe35fdea19041238adcf6c6c847
700784e8cc08a4833b65e4f5fa85ebaed9d0338c
0ddf55eaaf2f408f6e7f5e2c0ffb52cd0bfc9be85b58bd1ad36ca171e9528d9a
GET /core/assets/js/26.5517f7a6.chunk.js HTTP/1.1
Host: js.driftt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://js.driftt.com/core?embedId=5dfsgn7m2kst®ion=US&forceShow=false&skipCampaigns=false&sessionId=87ea9c31-7f3b-487e-941f-82e8a43637e7&sessionStarted=1661878802.41&campaignRefreshToken=f7c14ca4-a947-45fb-92d2-71aae205d325&hideController=false&pageLoadStartTime=1661878797846&mode=CHAT&driftEnableLog=false&secureIframe=false
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
date: Tue, 23 Aug 2022 17:27:24 GMT
server: nginx
last-modified: Tue, 23 Aug 2022 15:27:01 GMT
etag: W/"7b85a0406eeabf5449cb6bc2c193525c"
x-amz-server-side-encryption: AES256
x-amz-version-id: 1o3KzWMm1za1iD0eF7FaqVN8l4zXae7K
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
strict-transport-security: max-age=31536000; includeSubDomains
cache-control: max-age=31536000
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 b053873243f91b1bb6dc406ce0c67db4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: T-XnJDnNbpmQ65dCVLJnwekDDRWBwoMUHZnbbY_O2V520HFEySCCyg==
age: 603158
X-Firefox-Spdy: h2
js.driftt.com/core/assets/js/17.6ccd0f69.chunk.js
200 OK 20 kB URL HTTP/2 js.driftt.com/core/assets/js/17.6ccd0f69.chunk.js
IP
Hash 1a362100432581ecff902d60b27c1ca8
f970e8707576549e1e6a142122ea8ea31ddb6b7d
e8b3bb6680d59987cd3bfccc92baa321eab8f277e22f1227ac7ba76aab05c40d
GET /core/assets/js/17.6ccd0f69.chunk.js HTTP/1.1
Host: js.driftt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://js.driftt.com/core?embedId=5dfsgn7m2kst®ion=US&forceShow=false&skipCampaigns=false&sessionId=87ea9c31-7f3b-487e-941f-82e8a43637e7&sessionStarted=1661878802.41&campaignRefreshToken=f7c14ca4-a947-45fb-92d2-71aae205d325&hideController=false&pageLoadStartTime=1661878797846&mode=CHAT&driftEnableLog=false&secureIframe=false
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
date: Fri, 26 Aug 2022 13:20:22 GMT
server: nginx
last-modified: Thu, 25 Aug 2022 21:13:15 GMT
etag: W/"a581fbb27874f93f15c3fe3784f2391a"
x-amz-server-side-encryption: AES256
x-amz-version-id: A6__olwCDz1FD.1X9WiQXDg59ZPZqaUK
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
strict-transport-security: max-age=31536000; includeSubDomains
cache-control: max-age=31536000
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 b053873243f91b1bb6dc406ce0c67db4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: TxTOmamqoViID08ifEJth-iQaIQxRScl8xdqVIRPN8LAbHEjaY6DMw==
age: 358780
X-Firefox-Spdy: h2
bootstrap.api.drift.com/widget_bootstrap/ping
200 OK 177 B URL HTTP/2 bootstrap.api.drift.com/widget_bootstrap/ping
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 8573c0df030d754eee1291ec132f5436
3bb566bfaeb9ab271abd307c2735351ec1b65fed
fa8c32e4cf3d3e6a515ed02bcb7c24c87a1371ff8b888ca12332e4da8e4c5e65
POST /widget_bootstrap/ping HTTP/1.1
Host: bootstrap.api.drift.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 102
Origin: https://js.driftt.com
Connection: keep-alive
Referer: https://js.driftt.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 30 Aug 2022 17:00:03 GMT
access-control-allow-origin: *
access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version
access-control-allow-credentials: true
access-control-expose-headers: X-Results-Total-Count,X-Page-Info
access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH
access-control-max-age: 1209600
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/json;charset=utf-8
requestid: 57acf92621f88494
vary: Accept-Encoding
content-length: 177
x-envoy-upstream-service-time: 2
server: istio-envoy
X-Firefox-Spdy: h2
b.clarity.ms/collect
204 No Content 0 B IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /collect HTTP/1.1
Host: b.clarity.ms
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 4677
Origin: https://www.proofpoint.com
Connection: keep-alive
Referer: https://www.proofpoint.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: Microsoft-IIS/10.0
request-context: appId=cid-v1:2f7711a9-b21e-4abe-a9d6-5b0ce5d18b64
access-control-allow-origin: https://www.proofpoint.com
access-control-allow-credentials: true
x-powered-by: ASP.NET
date: Tue, 30 Aug 2022 17:00:03 GMT
X-Firefox-Spdy: h2
b.6sc.co/v1/beacon/img.gif?token=76d4adecd2340b300ba5d4296ecef89d&svisitor=null&visitor=11c3ab59-3e13-40e0-8e72-d961450788f5&session=93287037-a89e-400e-8d11-8b135fcca991&event=active_time_track&q=%7B%22currentTime%22%3A%22Tue%2C%2030%20Aug%202022%2017%3A00%3A04%20GMT%22%2C%22lastTrackTime%22%3A%22Tue%2C%2030%20Aug%202022%2017%3A00%3A03%20GMT%22%2C%22timeSpent%22%3A%221004%22%2C%22totalTimeSpent%22%3A%225044%22%7D&isIframe=false&m=%7B%22description%22%3A%22Wombat%20Security%20is%20now%20Proofpoint%20Security%20Awareness%20Training.%20Learn%20about%20the%20integration%20and%20benefits%20you%20get%20with%20Proofpoint.%22%2C%22keywords%22%3A%22%22%2C%22title%22%3A%22Wombat%20Security%20Is%20Now%20Proofpoint%20%7C%20Proofpoint%22%7D&cb=&r=&thirdParty=%7B%7D&v2=1&pageURL=https%3A%2F%2Fwww.proofpoint.com%2Fus%2Fwombat-security-is-now-proofpoint&pageViewId=f06092c0-2238-4783-8182-9dda3ff078ea&an_uid=0
200 OK 43 B URL HTTP/2 b.6sc.co/v1/beacon/img.gif?token=76d4adecd2340b300ba5d4296ecef89d&svisitor=null&visitor=11c3ab59-3e13-40e0-8e72-d961450788f5&session=93287037-a89e-400e-8d11-8b135fcca991&event=active_time_track&q=%7B%22currentTime%22%3A%22Tue%2C%2030%20Aug%202022%2017%3A00%3A04%20GMT%22%2C%22lastTrackTime%22%3A%22Tue%2C%2030%20Aug%202022%2017%3A00%3A03%20GMT%22%2C%22timeSpent%22%3A%221004%22%2C%22totalTimeSpent%22%3A%225044%22%7D&isIframe=false&m=%7B%22description%22%3A%22Wombat%20Security%20is%20now%20Proofpoint%20Security%20Awareness%20Training.%20Learn%20about%20the%20integration%20and%20benefits%20you%20get%20with%20Proofpoint.%22%2C%22keywords%22%3A%22%22%2C%22title%22%3A%22Wombat%20Security%20Is%20Now%20Proofpoint%20%7C%20Proofpoint%22%7D&cb=&r=&thirdParty=%7B%7D&v2=1&pageURL=https%3A%2F%2Fwww.proofpoint.com%2Fus%2Fwombat-security-is-now-proofpoint&pageViewId=f06092c0-2238-4783-8182-9dda3ff078ea&an_uid=0
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash f837aa60b6fe83458f790db60d529fc9
14af87ccec7f81bb28d53c84da2fd5a9d5925cda
dcecab1355b5c2b9ecef281322bf265ac5840b4688748586e9632b473a5fe56b
GET /v1/beacon/img.gif?token=76d4adecd2340b300ba5d4296ecef89d&svisitor=null&visitor=11c3ab59-3e13-40e0-8e72-d961450788f5&session=93287037-a89e-400e-8d11-8b135fcca991&event=active_time_track&q=%7B%22currentTime%22%3A%22Tue%2C%2030%20Aug%202022%2017%3A00%3A04%20GMT%22%2C%22lastTrackTime%22%3A%22Tue%2C%2030%20Aug%202022%2017%3A00%3A03%20GMT%22%2C%22timeSpent%22%3A%221004%22%2C%22totalTimeSpent%22%3A%225044%22%7D&isIframe=false&m=%7B%22description%22%3A%22Wombat%20Security%20is%20now%20Proofpoint%20Security%20Awareness%20Training.%20Learn%20about%20the%20integration%20and%20benefits%20you%20get%20with%20Proofpoint.%22%2C%22keywords%22%3A%22%22%2C%22title%22%3A%22Wombat%20Security%20Is%20Now%20Proofpoint%20%7C%20Proofpoint%22%7D&cb=&r=&thirdParty=%7B%7D&v2=1&pageURL=https%3A%2F%2Fwww.proofpoint.com%2Fus%2Fwombat-security-is-now-proofpoint&pageViewId=f06092c0-2238-4783-8182-9dda3ff078ea&an_uid=0 HTTP/1.1
Host: b.6sc.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.proofpoint.com/
Cookie: 6suuid=261f1602672900000f420e636a030000ae080300
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
cache-control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate
content-type: image/gif
etag: "60bb2e15-2b"
expires: Wed, 19 Apr 2000 11:43:00 GMT
last-modified: Sat, 05 Jun 2021 07:56:05 GMT
pragma: no-cache
server: nginx/1.14.0 (Ubuntu)
x-content-type-options: nosniff
content-length: 43
date: Tue, 30 Aug 2022 17:00:04 GMT
set-cookie: 6suuid=261f1602672900000f420e636a030000ae080300; expires=Thu, 29-Aug-2024 17:00:04 GMT; path=/; domain=.6sc.co; SameSite=None; secure
access-control-allow-origin:
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: GET,POST
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 32060b00db31fb8d6502058a65b2fc84
e3837c556b7a6fc36307aecd926c3ca58b2554ba
371a609a8b3925d25c24552008f484428ce5bc07b6b5d6ca0ab13b9ac1adcd2e
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Tue, 30 Aug 2022 17:00:04 GMT
Last-Modified: Tue, 30 Aug 2022 16:31:21 GMT
Server: ECS (nyb/1D24)
X-Cache: Miss from cloudfront
Via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: nTK9QYYh0NXaCSnYGC5N13fp1TuSXMWNMgtJ7rEa2tFbTl0Alg8ULg==
Age: 1723
js.driftt.com/core/assets/js/0.0b2ebd4a.chunk.js
200 OK 14 kB URL HTTP/2 js.driftt.com/core/assets/js/0.0b2ebd4a.chunk.js
IP
File type ASCII text, with very long lines (41498), with no line terminators
Hash 8c685f2fb0f296844e37720e49f84831
737a9ff7d7893bdf27228d8dfca9014360223e2c
c32bd78f4e2293eede37d290666b90cafca696c9e6997434e6b8301c15e258c6
GET /core/assets/js/0.0b2ebd4a.chunk.js HTTP/1.1
Host: js.driftt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://js.driftt.com/core?embedId=5dfsgn7m2kst®ion=US&forceShow=false&skipCampaigns=false&sessionId=87ea9c31-7f3b-487e-941f-82e8a43637e7&sessionStarted=1661878802.41&campaignRefreshToken=f7c14ca4-a947-45fb-92d2-71aae205d325&hideController=false&pageLoadStartTime=1661878797846&mode=CHAT&driftEnableLog=false&secureIframe=false
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
date: Wed, 22 Jun 2022 23:25:32 GMT
server: nginx
last-modified: Fri, 17 Jun 2022 14:39:26 GMT
etag: W/"c5efcdc9e465604f32cf24af10fd6c13"
x-amz-server-side-encryption: AES256
x-amz-version-id: FXhpBdntUhclEQbRyN38j73SJPN5DG6s
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
strict-transport-security: max-age=31536000; includeSubDomains
cache-control: max-age=31536000
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 b053873243f91b1bb6dc406ce0c67db4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: EwpJjXE4O5k2JoNwflWsbkf2tLHKQJasyluR08y9xUId5SS6skMbXA==
age: 5938470
X-Firefox-Spdy: h2
event.api.drift.com/track
200 OK 13 B URL HTTP/2 event.api.drift.com/track
IP
File type ASCII text, with no line terminators
Hash 1424eb76249899d757e4d168341a50dc
42101e71440abd46c8112a96d4d5c0dd445120ce
16f1efa415bfdd7abcf8fdd76cc05ae6fa66ffdfdc730368ecea89ecfe5c3a12
OPTIONS /track HTTP/1.1
Host: event.api.drift.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: authorization,content-type
Referer: https://js.driftt.com/
Origin: https://js.driftt.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 30 Aug 2022 17:00:05 GMT
access-control-allow-origin: *
access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version
access-control-allow-credentials: true
access-control-expose-headers: X-Results-Total-Count,X-Page-Info
access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH
access-control-max-age: 1209600
strict-transport-security: max-age=31536000; includeSubDomains
content-type: text/plain
allow: POST,OPTIONS
requestid: drift19a212d4c54822aee110818657b
content-length: 13
x-envoy-upstream-service-time: 1
server: istio-envoy
X-Firefox-Spdy: h2
targeting.api.drift.com/targeting/evaluate_with_log
200 OK 13 B URL HTTP/2 targeting.api.drift.com/targeting/evaluate_with_log
IP
File type ASCII text, with no line terminators
Hash 1424eb76249899d757e4d168341a50dc
42101e71440abd46c8112a96d4d5c0dd445120ce
16f1efa415bfdd7abcf8fdd76cc05ae6fa66ffdfdc730368ecea89ecfe5c3a12
OPTIONS /targeting/evaluate_with_log HTTP/1.1
Host: targeting.api.drift.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: authorization,content-type
Referer: https://js.driftt.com/
Origin: https://js.driftt.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 30 Aug 2022 17:00:05 GMT
access-control-allow-origin: *
access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version
access-control-allow-credentials: true
access-control-expose-headers: X-Results-Total-Count,X-Page-Info
access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH
access-control-max-age: 1209600
strict-transport-security: max-age=31536000; includeSubDomains
content-type: text/plain
allow: POST,OPTIONS
requestid: driftb63c3d440fc960bd75ff5901a2d
content-length: 13
x-envoy-upstream-service-time: 1
server: istio-envoy
X-Firefox-Spdy: h2
event.api.drift.com/track
200 OK 563 B URL HTTP/2 event.api.drift.com/track
IP
File type JSON data\012- , ASCII text, with very long lines (563), with no line terminators
Hash cb94ecf2bb89001cffdc37d120c4a2f8
dc444fc36514132678a4bb4fa87a197ca27f4234
957b6397bbdb3d313f479ec65cc19e556363cfa48628d508e4fab38fa55032e9
POST /track HTTP/1.1
Host: event.api.drift.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Authorization: Bearer eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzUxMiJ9.eyJzdWIiOiIxNTQ1NDI3MjI2MiIsImNsaWVudElkIjoiZjZ6dWl6ZHloeHJtN3IiLCJ1c2VySWRUeXBlIjoiTEVBRCIsInNjb3BlIjoibGVhZCIsImlzcyI6IjEwOTYyNTAiLCJleHAiOjE2OTM0MTQ4MDQsImlhdCI6MTY2MTg3ODgwNH0.n2pp8vLBNNdYSNAPXOAteYb5qmar5O6aT4XXK3GyYdtkJvdmQY9uYBVKcnWsEaVShtIMWkPO1VtSqYJ1QoNS6A
Content-Length: 408
Origin: https://js.driftt.com
Connection: keep-alive
Referer: https://js.driftt.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 30 Aug 2022 17:00:05 GMT
access-control-allow-origin: *
access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version
access-control-allow-credentials: true
access-control-expose-headers: X-Results-Total-Count,X-Page-Info
access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH
access-control-max-age: 1209600
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/json;charset=utf-8
requestid: c1d8514af4851eb1
content-length: 563
x-envoy-upstream-service-time: 2
server: istio-envoy
X-Firefox-Spdy: h2
targeting.api.drift.com/targeting/evaluate_with_log
200 OK 710 B URL HTTP/2 targeting.api.drift.com/targeting/evaluate_with_log
IP
File type JSON data\012- , ASCII text, with very long lines (2046), with no line terminators
Hash a8aa0195203851781f8365d369aceca6
d4dd59b6cb4046d9bf0776241d0769abc4077442
2e930cb341f91004a6bae054bd0491a9d3f2d059f9bb43e423d2ee067d09b3a3
POST /targeting/evaluate_with_log HTTP/1.1
Host: targeting.api.drift.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Authorization: Bearer eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzUxMiJ9.eyJzdWIiOiIxNTQ1NDI3MjI2MiIsImNsaWVudElkIjoiZjZ6dWl6ZHloeHJtN3IiLCJ1c2VySWRUeXBlIjoiTEVBRCIsInNjb3BlIjoibGVhZCIsImlzcyI6IjEwOTYyNTAiLCJleHAiOjE2OTM0MTQ4MDQsImlhdCI6MTY2MTg3ODgwNH0.n2pp8vLBNNdYSNAPXOAteYb5qmar5O6aT4XXK3GyYdtkJvdmQY9uYBVKcnWsEaVShtIMWkPO1VtSqYJ1QoNS6A
Content-Length: 2130
Origin: https://js.driftt.com
Connection: keep-alive
Referer: https://js.driftt.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 30 Aug 2022 17:00:05 GMT
access-control-allow-origin: *
access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version
access-control-allow-credentials: true
access-control-expose-headers: X-Results-Total-Count,X-Page-Info
access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH
access-control-max-age: 1209600
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/json;charset=utf-8
requestid: d0542b94c653a128
vary: Accept-Encoding
content-encoding: gzip
content-length: 710
x-envoy-upstream-service-time: 2
server: istio-envoy
X-Firefox-Spdy: h2
js.driftt.com/core/assets/js/52.b6e19470.chunk.js
200 OK 6.4 kB URL HTTP/2 js.driftt.com/core/assets/js/52.b6e19470.chunk.js
IP
Hash 0d4d64cad8dde1b46da1c32046f2336b
895832d8791573efd882c972436a799437398bec
c5c20b83ffcd0530ea3a82f2d8206a731b9d34e6544cbe0e9bb5534e60159c1a
GET /core/assets/js/52.b6e19470.chunk.js HTTP/1.1
Host: js.driftt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://js.driftt.com/core?embedId=5dfsgn7m2kst®ion=US&forceShow=false&skipCampaigns=false&sessionId=87ea9c31-7f3b-487e-941f-82e8a43637e7&sessionStarted=1661878802.41&campaignRefreshToken=f7c14ca4-a947-45fb-92d2-71aae205d325&hideController=false&pageLoadStartTime=1661878797846&mode=CHAT&driftEnableLog=false&secureIframe=false
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
date: Mon, 15 Aug 2022 14:58:15 GMT
server: nginx
last-modified: Mon, 15 Aug 2022 14:54:41 GMT
etag: W/"bad20cb6447399d927f280df2d62ca0c"
x-amz-server-side-encryption: AES256
x-amz-version-id: RsSkBCjzvBw3GerIVkk_9htbmnC6yc51
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
strict-transport-security: max-age=31536000; includeSubDomains
cache-control: max-age=31536000
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 b053873243f91b1bb6dc406ce0c67db4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 0A0tc7KrIVhz0uHViQ8BWaVl3ooVCbjPchR4rr4DRLxKLZ4_0zKCXQ==
age: 1303310
X-Firefox-Spdy: h2
flow.api.drift.com/flows/render_initial_v3
200 OK 13 B URL HTTP/2 flow.api.drift.com/flows/render_initial_v3
IP
File type ASCII text, with no line terminators
Hash 1424eb76249899d757e4d168341a50dc
42101e71440abd46c8112a96d4d5c0dd445120ce
16f1efa415bfdd7abcf8fdd76cc05ae6fa66ffdfdc730368ecea89ecfe5c3a12
OPTIONS /flows/render_initial_v3 HTTP/1.1
Host: flow.api.drift.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: authorization,content-type
Referer: https://js.driftt.com/
Origin: https://js.driftt.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 30 Aug 2022 17:00:05 GMT
access-control-allow-origin: *
access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version
access-control-allow-credentials: true
access-control-expose-headers: X-Results-Total-Count,X-Page-Info
access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH
access-control-max-age: 1209600
strict-transport-security: max-age=31536000; includeSubDomains
content-type: text/plain
allow: POST,OPTIONS
requestid: drift9a513ac4e1d9ead23fc82280f2c
content-length: 13
x-envoy-upstream-service-time: 1
server: istio-envoy
X-Firefox-Spdy: h2
presence.api.drift.com/ws/websocket?session_token=SFMyNTY.g3QAAAACZAAEZGF0YXQAAAAFZAACaWRtAAAAFTEwOTYyNTAtMTU0NTQyNzIyNjItNGQABm9yZ19pZG0AAAAHMTA5NjI1MGQACXNjb3BlX3NldG0AAAAEbGVhZGQAB3VzZXJfaWRtAAAACzE1NDU0MjcyMjYyZAAJdXNlcl90eXBlZAAEbGVhZGQABnNpZ25lZG4GAO0fsu-CAQ.qfgV1OO2diOksHALo3pGSw6HLeXs1OuTTjISy7HJxDg&remote_ip=18.232.245.220&vsn=2.0.0
101 Switching Protocols 0 B URL HTTP/1.1 presence.api.drift.com/ws/websocket?session_token=SFMyNTY.g3QAAAACZAAEZGF0YXQAAAAFZAACaWRtAAAAFTEwOTYyNTAtMTU0NTQyNzIyNjItNGQABm9yZ19pZG0AAAAHMTA5NjI1MGQACXNjb3BlX3NldG0AAAAEbGVhZGQAB3VzZXJfaWRtAAAACzE1NDU0MjcyMjYyZAAJdXNlcl90eXBlZAAEbGVhZGQABnNpZ25lZG4GAO0fsu-CAQ.qfgV1OO2diOksHALo3pGSw6HLeXs1OuTTjISy7HJxDg&remote_ip=18.232.245.220&vsn=2.0.0
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ws/websocket?session_token=SFMyNTY.g3QAAAACZAAEZGF0YXQAAAAFZAACaWRtAAAAFTEwOTYyNTAtMTU0NTQyNzIyNjItNGQABm9yZ19pZG0AAAAHMTA5NjI1MGQACXNjb3BlX3NldG0AAAAEbGVhZGQAB3VzZXJfaWRtAAAACzE1NDU0MjcyMjYyZAAJdXNlcl90eXBlZAAEbGVhZGQABnNpZ25lZG4GAO0fsu-CAQ.qfgV1OO2diOksHALo3pGSw6HLeXs1OuTTjISy7HJxDg&remote_ip=18.232.245.220&vsn=2.0.0 HTTP/1.1
Host: presence.api.drift.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://js.driftt.com
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: Pry/CHtDF2qqhf6RfXkpwQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
cache-control: max-age=0, private, must-revalidate
connection: Upgrade
date: Tue, 30 Aug 2022 17:00:05 GMT
sec-websocket-accept: S+rhL74OOSIseY1LBZAUJgyEQSs=
server: Cowboy
upgrade: websocket
flow.api.drift.com/flows/render_initial_v3
200 OK 1.9 kB URL HTTP/2 flow.api.drift.com/flows/render_initial_v3
IP
File type JSON data\012- , ASCII text, with very long lines (3585), with no line terminators
Hash 6e54a63af02e54498ece0fe83328df02
b5f422f7a6d8251f58fe87a536165085480576f4
9cb0d640bec28f8790d01e0d97b79956b57497d7c206675b767d208d3b58f8b8
POST /flows/render_initial_v3 HTTP/1.1
Host: flow.api.drift.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Authorization: Bearer eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzUxMiJ9.eyJzdWIiOiIxNTQ1NDI3MjI2MiIsImNsaWVudElkIjoiZjZ6dWl6ZHloeHJtN3IiLCJ1c2VySWRUeXBlIjoiTEVBRCIsInNjb3BlIjoibGVhZCIsImlzcyI6IjEwOTYyNTAiLCJleHAiOjE2OTM0MTQ4MDQsImlhdCI6MTY2MTg3ODgwNH0.n2pp8vLBNNdYSNAPXOAteYb5qmar5O6aT4XXK3GyYdtkJvdmQY9uYBVKcnWsEaVShtIMWkPO1VtSqYJ1QoNS6A
Content-Length: 498
Origin: https://js.driftt.com
Connection: keep-alive
Referer: https://js.driftt.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 30 Aug 2022 17:00:05 GMT
access-control-allow-origin: *
access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version
access-control-allow-credentials: true
access-control-expose-headers: X-Results-Total-Count,X-Page-Info
access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH
access-control-max-age: 1209600
strict-transport-security: max-age=31536000; includeSubDomains
content-type: application/json;charset=utf-8
requestid: 611bcefc22fbe4be
vary: Accept-Encoding
content-encoding: gzip
content-length: 1922
x-envoy-upstream-service-time: 29
server: istio-envoy
X-Firefox-Spdy: h2
driftt.imgix.net/https%3A%2F%2Fdriftt.imgix.net%2Fhttps%253A%252F%252Fs3.amazonaws.com%252Fcustomer-api-avatars-prod%252F1309750%252F8024a95f2351135a5df728c0aff5f8c0mx744ua3gdzn%3Ffit%3Dmax%26fm%3Dpng%26h%3D200%26w%3D200%26s%3Df824a617aeb296a7f27f0a8b4aef7c51?fit=max&fm=png&h=200&w=200&s=653ea3a82cff51402b864d5492dbde2e
200 OK 20 kB URL HTTP/2 driftt.imgix.net/https%3A%2F%2Fdriftt.imgix.net%2Fhttps%253A%252F%252Fs3.amazonaws.com%252Fcustomer-api-avatars-prod%252F1309750%252F8024a95f2351135a5df728c0aff5f8c0mx744ua3gdzn%3Ffit%3Dmax%26fm%3Dpng%26h%3D200%26w%3D200%26s%3Df824a617aeb296a7f27f0a8b4aef7c51?fit=max&fm=png&h=200&w=200&s=653ea3a82cff51402b864d5492dbde2e
IP
File type PNG image data, 170 x 170, 8-bit/color RGBA, non-interlaced\012- data
Hash cb11b7c5360832cfb1c03f45079570dc
1dfad1946ba554b22369a3637700f4be594923f5
7dc24add65dc6662689b4e6643c01957af19c62c0dbc9004fe2319d198fa5208
GET /https%3A%2F%2Fdriftt.imgix.net%2Fhttps%253A%252F%252Fs3.amazonaws.com%252Fcustomer-api-avatars-prod%252F1309750%252F8024a95f2351135a5df728c0aff5f8c0mx744ua3gdzn%3Ffit%3Dmax%26fm%3Dpng%26h%3D200%26w%3D200%26s%3Df824a617aeb296a7f27f0a8b4aef7c51?fit=max&fm=png&h=200&w=200&s=653ea3a82cff51402b864d5492dbde2e HTTP/1.1
Host: driftt.imgix.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://js.driftt.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Wed, 24 Aug 2022 08:40:54 GMT
cache-control: public, max-age=315360000
server: imgix
x-imgix-id: f4d1563ad62583e805c05de5a83a13814f7c5017
x-imgix-render-farm: 01.1
date: Tue, 30 Aug 2022 17:00:05 GMT
age: 548352
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10083-SJC, cache-bma1626-BMA
x-cache: HIT, HIT
content-length: 19866
X-Firefox-Spdy: h2
targeting.api.drift.com/impressions/widget
200 OK 13 B URL HTTP/2 targeting.api.drift.com/impressions/widget
IP
File type ASCII text, with no line terminators
Hash 1424eb76249899d757e4d168341a50dc
42101e71440abd46c8112a96d4d5c0dd445120ce
16f1efa415bfdd7abcf8fdd76cc05ae6fa66ffdfdc730368ecea89ecfe5c3a12
OPTIONS /impressions/widget HTTP/1.1
Host: targeting.api.drift.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: authorization,content-type
Referer: https://js.driftt.com/
Origin: https://js.driftt.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 30 Aug 2022 17:00:05 GMT
access-control-allow-origin: *
access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version
access-control-allow-credentials: true
access-control-expose-headers: X-Results-Total-Count,X-Page-Info
access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH
access-control-max-age: 1209600
strict-transport-security: max-age=31536000; includeSubDomains
content-type: text/plain
allow: POST,OPTIONS
requestid: driftbf0fb594bb2a5b914afd9ab013b
content-length: 13
x-envoy-upstream-service-time: 1
server: istio-envoy
X-Firefox-Spdy: h2
js.driftt.com/core/assets/js/24.6872e542.chunk.js
200 OK 14 kB URL HTTP/2 js.driftt.com/core/assets/js/24.6872e542.chunk.js
IP
Hash 8168cd65b3a2152c4c67e972474ca5af
f7c629a062a8857e85e77bc27efbdfb8a4718aa6
6bf1a107400ff766015a4213ab697e1a6bcb3a1047f55da4735886ec86907b8e
GET /core/assets/js/24.6872e542.chunk.js HTTP/1.1
Host: js.driftt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://js.driftt.com/core?embedId=5dfsgn7m2kst®ion=US&forceShow=false&skipCampaigns=false&sessionId=87ea9c31-7f3b-487e-941f-82e8a43637e7&sessionStarted=1661878802.41&campaignRefreshToken=f7c14ca4-a947-45fb-92d2-71aae205d325&hideController=false&pageLoadStartTime=1661878797846&mode=CHAT&driftEnableLog=false&secureIframe=false
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
date: Fri, 26 Aug 2022 13:20:22 GMT
server: nginx
last-modified: Thu, 25 Aug 2022 21:13:15 GMT
etag: W/"d5fca8bbc4fcf7b492843bcb9a12189b"
x-amz-server-side-encryption: AES256
x-amz-version-id: myoo_FG2jXaPzinerG5A.TSm8zp.AVWF
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
strict-transport-security: max-age=31536000; includeSubDomains
cache-control: max-age=31536000
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 b053873243f91b1bb6dc406ce0c67db4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: _A3NFiTwTNpPhF4wAj1Jh1xFgA3aOWeGQHuJFBi3GdMNDOEufPHHoA==
age: 358780
X-Firefox-Spdy: h2
js.driftt.com/core/assets/css/41.e483d03f.chunk.css
200 OK 900 B URL HTTP/2 js.driftt.com/core/assets/css/41.e483d03f.chunk.css
IP
File type ASCII text, with very long lines (900), with no line terminators
Hash 0bd11a8facc0a9d41713c64ed1ba1289
23d92b5b9138666f5c33517d53451a6e2e8ec30a
12ffe3ad71f763d9057baf43e0f1c1482bb9a0372602020554c4d52f52b37981
GET /core/assets/css/41.e483d03f.chunk.css HTTP/1.1
Host: js.driftt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://js.driftt.com/core/chat?region=US&driftEnableLog=false&pageLoadStartTime=1661878797846
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/css
content-length: 900
date: Thu, 09 Jun 2022 19:59:53 GMT
server: nginx
last-modified: Thu, 09 Jun 2022 14:58:11 GMT
etag: "0bd11a8facc0a9d41713c64ed1ba1289"
x-amz-server-side-encryption: AES256
x-amz-version-id: mwravLhifH3zWz1LqFO8ki0npGazXQGv
accept-ranges: bytes
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
strict-transport-security: max-age=31536000; includeSubDomains
cache-control: max-age=31536000
x-cache: Hit from cloudfront
via: 1.1 b053873243f91b1bb6dc406ce0c67db4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Aw3-hV2YJq9m5uNgf79wwGhpCv6ARBsj03b1ZO0uI_MOb4qbmUCPLQ==
age: 7074013
X-Firefox-Spdy: h2
js.driftt.com/core/assets/js/41.c2d27989.chunk.js
200 OK 303 B URL HTTP/2 js.driftt.com/core/assets/js/41.c2d27989.chunk.js
IP
File type ASCII text, with very long lines (303), with no line terminators
Hash 46fb25b61455826d8b73185de5673b04
d15a3a86f02f00138438a94e617081380cd58ac1
70164ba4c1b7194f4cc46e423aa055d29e3d927b7e9abe6fecd156dd0270da76
GET /core/assets/js/41.c2d27989.chunk.js HTTP/1.1
Host: js.driftt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://js.driftt.com/core/chat?region=US&driftEnableLog=false&pageLoadStartTime=1661878797846
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
content-length: 303
date: Sun, 12 Jun 2022 06:13:20 GMT
server: nginx
last-modified: Fri, 10 Jun 2022 19:03:31 GMT
etag: "46fb25b61455826d8b73185de5673b04"
x-amz-server-side-encryption: AES256
x-amz-version-id: 21f0wwUZtQS7fqJj7nCeaBcMtRG8zF2Z
accept-ranges: bytes
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
strict-transport-security: max-age=31536000; includeSubDomains
cache-control: max-age=31536000
x-cache: Hit from cloudfront
via: 1.1 b053873243f91b1bb6dc406ce0c67db4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: UuvrMrcAeuBR7uNbeBtR_b_81lztG86ikn4ZJPr2wkKHeI6LkRsgTg==
age: 6864406
X-Firefox-Spdy: h2
targeting.api.drift.com/impressions/widget
204 No Content 0 B URL HTTP/2 targeting.api.drift.com/impressions/widget
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /impressions/widget HTTP/1.1
Host: targeting.api.drift.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Authorization: Bearer eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzUxMiJ9.eyJzdWIiOiIxNTQ1NDI3MjI2MiIsImNsaWVudElkIjoiZjZ6dWl6ZHloeHJtN3IiLCJ1c2VySWRUeXBlIjoiTEVBRCIsInNjb3BlIjoibGVhZCIsImlzcyI6IjEwOTYyNTAiLCJleHAiOjE2OTM0MTQ4MDQsImlhdCI6MTY2MTg3ODgwNH0.n2pp8vLBNNdYSNAPXOAteYb5qmar5O6aT4XXK3GyYdtkJvdmQY9uYBVKcnWsEaVShtIMWkPO1VtSqYJ1QoNS6A
Content-Length: 683
Origin: https://js.driftt.com
Connection: keep-alive
Referer: https://js.driftt.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Tue, 30 Aug 2022 17:00:05 GMT
access-control-allow-origin: *
access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version
access-control-allow-credentials: true
access-control-expose-headers: X-Results-Total-Count,X-Page-Info
access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH
access-control-max-age: 1209600
strict-transport-security: max-age=31536000; includeSubDomains
requestid: 47263af8fed75d00
x-envoy-upstream-service-time: 9
server: istio-envoy
X-Firefox-Spdy: h2
js.driftt.com/core/assets/js/28.ed383893.chunk.js
200 OK 0 B URL HTTP/2 js.driftt.com/core/assets/js/28.ed383893.chunk.js
IP
GET /core/assets/js/28.ed383893.chunk.js HTTP/1.1
Host: js.driftt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://js.driftt.com/core?embedId=5dfsgn7m2kst®ion=US&forceShow=false&skipCampaigns=false&sessionId=87ea9c31-7f3b-487e-941f-82e8a43637e7&sessionStarted=1661878802.41&campaignRefreshToken=f7c14ca4-a947-45fb-92d2-71aae205d325&hideController=false&pageLoadStartTime=1661878797846&mode=CHAT&driftEnableLog=false&secureIframe=false
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
date: Tue, 12 Jul 2022 08:05:31 GMT
server: nginx
last-modified: Mon, 11 Jul 2022 14:16:17 GMT
etag: W/"910117b3f0a0501f693606963bfe4daf"
x-amz-server-side-encryption: AES256
x-amz-version-id: AvxSunSgeBTQzaCE.4f6vvhlOyihsj6Q
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
strict-transport-security: max-age=31536000; includeSubDomains
cache-control: max-age=31536000
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 b053873243f91b1bb6dc406ce0c67db4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: aA_DsaNRamNrF5RbkUUYeu8uDt1zNCAXQLgxVPVxKyOK7y0MypBhuQ==
age: 4265671
X-Firefox-Spdy: h2
js.driftt.com/core/assets/js/9.535a3a94.chunk.js
200 OK 0 B URL HTTP/2 js.driftt.com/core/assets/js/9.535a3a94.chunk.js
IP
GET /core/assets/js/9.535a3a94.chunk.js HTTP/1.1
Host: js.driftt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://js.driftt.com/core?embedId=5dfsgn7m2kst®ion=US&forceShow=false&skipCampaigns=false&sessionId=87ea9c31-7f3b-487e-941f-82e8a43637e7&sessionStarted=1661878802.41&campaignRefreshToken=f7c14ca4-a947-45fb-92d2-71aae205d325&hideController=false&pageLoadStartTime=1661878797846&mode=CHAT&driftEnableLog=false&secureIframe=false
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
date: Fri, 26 Aug 2022 13:20:22 GMT
server: nginx
last-modified: Thu, 25 Aug 2022 21:13:17 GMT
etag: W/"073dafbb4b9bd1b881e6475386b712ee"
x-amz-server-side-encryption: AES256
x-amz-version-id: oCovUdRwAlg.GGR_hVxwJrKIYj.O.YqJ
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
strict-transport-security: max-age=31536000; includeSubDomains
cache-control: max-age=31536000
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 b053873243f91b1bb6dc406ce0c67db4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: wb3_Kgia8M2v6Dj6xr-uAd6ySIDPQOFEixPTG6NVZr5lVloRtGIgkQ==
age: 358780
X-Firefox-Spdy: h2
www.proofpoint.com/sites/default/files/cta-banner/cta-bkgd.jpg
200 OK 0 B URL HTTP/1.1 www.proofpoint.com/sites/default/files/cta-banner/cta-bkgd.jpg
IP
GET /sites/default/files/cta-banner/cta-bkgd.jpg HTTP/1.1
Host: www.proofpoint.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.proofpoint.com/us/wombat-security-is-now-proofpoint
Connection: keep-alive
Cookie: ppri=9B60587D-31C1-40F4-8837-D697DA8EB4CB; visid_incap_177663=MxaFur+FQ8GhyjTFRc4x/YyznWIAAAAAQUIPAAAAAABVL+8k2JhsBDutIV1lPhIY; _mkto_trk=id:309-RHV-619&token:_mch-proofpoint.com-1654502444683-74591; _gcl_au=1.1.841328466.1654502445; incap_ses_7233_177663=pMGhSYNNdTcbeUX6ocdgZA1CDmMAAAAAhccdFe2NZup03RC0p0Y97g==
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Etag: "475220c5"
Last-Modified: Sat, 07 Mar 2020 01:03:14 GMT
Content-Type: image/jpeg
Content-Length: 71740
X-Content-Type-Options: nosniff
Cache-Control: max-age=195029, public
Expires: Thu, 01 Sep 2022 23:10:27 GMT
Date: Tue, 30 Aug 2022 16:59:58 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-CDN: Imperva
X-Iinfo: 13-43845412-0 0CNN RT(1661878797380 760) q(0 -1 -1 -1) r(0 -1)
static.hotjar.com/c/hotjar-1456002.js?sv=7
200 OK 0 B URL HTTP/2 static.hotjar.com/c/hotjar-1456002.js?sv=7
IP
GET /c/hotjar-1456002.js?sv=7 HTTP/1.1
Host: static.hotjar.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.proofpoint.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
content-encoding: br
cross-origin-resource-policy: cross-origin
strict-transport-security: max-age=86400; includeSubDomains
x-cache-hit: 1
x-content-type-options: nosniff
date: Tue, 30 Aug 2022 17:00:00 GMT
cache-control: max-age=60
etag: W/4a2beb0c050b9b79cfb0861a6f375e14
vary: Accept-Encoding
x-cache: RefreshHit from cloudfront
via: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: OVrnTB1UQGHrMQ3tm14p6TqHQr5X1DOTCbnjmO4QxU1dluZYwkpOlA==
X-Firefox-Spdy: h2
js.driftt.com/include/1661878800000/5dfsgn7m2kst.js
200 OK 0 B URL HTTP/2 js.driftt.com/include/1661878800000/5dfsgn7m2kst.js
IP
GET /include/1661878800000/5dfsgn7m2kst.js HTTP/1.1
Host: js.driftt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.proofpoint.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
server: nginx
last-modified: Fri, 26 Aug 2022 13:20:31 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: 8xwJsnWB40v8_2DQUhvM_zo2lM6JgjUU
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
strict-transport-security: max-age=31536000; includeSubDomains
content-encoding: gzip
date: Tue, 30 Aug 2022 16:59:59 GMT
cache-control: no-cache
etag: W/"bb55c9807d893c917eefc66d4d44f300"
vary: Accept-Encoding
x-cache: RefreshHit from cloudfront
via: 1.1 b053873243f91b1bb6dc406ce0c67db4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 3c9SgtIJELCm0gVOuag8zamCwXBwxN4xcR4XVQyWR_dqByuxy6YLxw==
X-Firefox-Spdy: h2
epsilon.6sense.com/v3/company/details
200 OK 0 B URL HTTP/2 epsilon.6sense.com/v3/company/details
IP
OPTIONS /v3/company/details HTTP/1.1
Host: epsilon.6sense.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: authorization
Referer: https://www.proofpoint.com/
Origin: https://www.proofpoint.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 30 Aug 2022 16:59:59 GMT
server: nginx
access-control-allow-origin: https://www.proofpoint.com
access-control-allow-credentials: true
access-control-max-age: 1800
access-control-allow-methods: OPTIONS,GET
access-control-allow-headers: authorization
X-Firefox-Spdy: h2
tracking.g2crowd.com/attribution_tracking/conversions/1647.js?p=https://www.proofpoint.com/us/wombat-security-is-now-proofpoint&e=
200 OK 0 B URL HTTP/2 tracking.g2crowd.com/attribution_tracking/conversions/1647.js?p=https://www.proofpoint.com/us/wombat-security-is-now-proofpoint&e=
IP
GET /attribution_tracking/conversions/1647.js?p=https://www.proofpoint.com/us/wombat-security-is-now-proofpoint&e= HTTP/1.1
Host: tracking.g2crowd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.proofpoint.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 30 Aug 2022 16:59:59 GMT
content-type: text/javascript; charset=utf-8
cache-control: max-age=600, public
etag: W/"3dae93a05edd9dcfc1864b87178a31e0"
x-request-id: f5e49877-dfb5-4099-9b4b-4c75df4d041c
x-runtime: 0.002988
strict-transport-security: max-age=604800
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-download-options: noopen
x-permitted-cross-domain-policies: none
referrer-policy: strict-origin-when-cross-origin
content-security-policy: default-src 'self' *.g2crowd.com *.g2.com; connect-src 'self' *.g2crowd.com *.g2.com; font-src 'self' *.g2crowd.com *.g2.com; form-action 'self' *.g2crowd.com *.g2.com; frame-src 'self' *.g2crowd.com *.g2.com; img-src 'self' *.g2crowd.com *.g2.com; manifest-src 'self' *.g2crowd.com *.g2.com; media-src 'self' *.g2crowd.com *.g2.com; object-src 'self' *.g2crowd.com *.g2.com; script-src 'self' *.g2crowd.com *.g2.com; style-src 'self' *.g2crowd.com *.g2.com; worker-src 'self' *.g2crowd.com *.g2.com
cf-cache-status: DYNAMIC
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
set-cookie: _session_id=8a5101ac7bbd0a5884785aa53b524076; path=/; expires=Tue, 13 Sep 2022 16:59:59 GMT; HttpOnly; secure; SameSite=None
__cf_bm=UmDOqdbVxjvz_g8D6bPb3MeQnDicZNoey8VcqMo1JdA-1661878799-0-Ab3ocrLO6n3K0z6mE1FQGxKvzmewPgeBy/FyLU+9iEPC9ZH0CDXDysC/83LK9/RPKXBixUMIEsR0IOkV6d/nhtc=; path=/; expires=Tue, 30-Aug-22 17:29:59 GMT; domain=.g2crowd.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 742f147f8b62b51e-OSL
content-encoding: br
X-Firefox-Spdy: h2
js.driftt.com/core/assets/js/15.bdd7e3eb.chunk.js
200 OK 0 B URL HTTP/2 js.driftt.com/core/assets/js/15.bdd7e3eb.chunk.js
IP
GET /core/assets/js/15.bdd7e3eb.chunk.js HTTP/1.1
Host: js.driftt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://js.driftt.com/core?embedId=5dfsgn7m2kst®ion=US&forceShow=false&skipCampaigns=false&sessionId=87ea9c31-7f3b-487e-941f-82e8a43637e7&sessionStarted=1661878802.41&campaignRefreshToken=f7c14ca4-a947-45fb-92d2-71aae205d325&hideController=false&pageLoadStartTime=1661878797846&mode=CHAT&driftEnableLog=false&secureIframe=false
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
date: Fri, 26 Aug 2022 13:20:22 GMT
server: nginx
last-modified: Thu, 25 Aug 2022 21:13:15 GMT
etag: W/"668309bc2d5d4325685dce2f122848e3"
x-amz-server-side-encryption: AES256
x-amz-version-id: SXpLM8Bk9cPPBniHSs9LCF2qXGI5xX_h
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
strict-transport-security: max-age=31536000; includeSubDomains
cache-control: max-age=31536000
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 b053873243f91b1bb6dc406ce0c67db4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: c5aet39PaUz1rJVrBp5GmWkRbjEM_A7JNAqCZyqCRjiLMt-MaNMPNw==
age: 358780
X-Firefox-Spdy: h2
tracking.g2crowd.com/attribution_tracking/conversions/1644.js?p=https://www.proofpoint.com/us/wombat-security-is-now-proofpoint&e=
200 OK 0 B URL HTTP/2 tracking.g2crowd.com/attribution_tracking/conversions/1644.js?p=https://www.proofpoint.com/us/wombat-security-is-now-proofpoint&e=
IP
GET /attribution_tracking/conversions/1644.js?p=https://www.proofpoint.com/us/wombat-security-is-now-proofpoint&e= HTTP/1.1
Host: tracking.g2crowd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.proofpoint.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 30 Aug 2022 16:59:59 GMT
content-type: text/javascript; charset=utf-8
cache-control: max-age=600, public
etag: W/"3dae93a05edd9dcfc1864b87178a31e0"
x-request-id: 32e951a3-660b-4587-bd1b-c4d91c5facd1
x-runtime: 0.002214
strict-transport-security: max-age=604800
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-download-options: noopen
x-permitted-cross-domain-policies: none
referrer-policy: strict-origin-when-cross-origin
content-security-policy: default-src 'self' *.g2crowd.com *.g2.com; connect-src 'self' *.g2crowd.com *.g2.com; font-src 'self' *.g2crowd.com *.g2.com; form-action 'self' *.g2crowd.com *.g2.com; frame-src 'self' *.g2crowd.com *.g2.com; img-src 'self' *.g2crowd.com *.g2.com; manifest-src 'self' *.g2crowd.com *.g2.com; media-src 'self' *.g2crowd.com *.g2.com; object-src 'self' *.g2crowd.com *.g2.com; script-src 'self' *.g2crowd.com *.g2.com; style-src 'self' *.g2crowd.com *.g2.com; worker-src 'self' *.g2crowd.com *.g2.com
cf-cache-status: DYNAMIC
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
set-cookie: _session_id=612b108a38c465cafd93cc3e53e28d13; path=/; expires=Tue, 13 Sep 2022 16:59:59 GMT; HttpOnly; secure; SameSite=None
__cf_bm=e3S.eAXNAtKmfliVwG6mNVVYZm2oAKOQlV3Ei4KjdyQ-1661878799-0-AYpilnYxp9UBouTFF6/oz15Y2ztPPPQzq32DP7XDfKNE9LgHnt3sHJk19JTkEPPYr1ag7cVacCqTPm6LBJvluOo=; path=/; expires=Tue, 30-Aug-22 17:29:59 GMT; domain=.g2crowd.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 742f1480dd18b51e-OSL
content-encoding: br
X-Firefox-Spdy: h2
js.driftt.com/core/chat?region=US&driftEnableLog=false&pageLoadStartTime=1661878797846
200 OK 0 B URL HTTP/2 js.driftt.com/core/chat?region=US&driftEnableLog=false&pageLoadStartTime=1661878797846
IP
GET /core/chat?region=US&driftEnableLog=false&pageLoadStartTime=1661878797846 HTTP/1.1
Host: js.driftt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.proofpoint.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html; charset=utf-8
server: nginx
last-modified: Fri, 26 Aug 2022 13:20:23 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: LEI3GgEMRDVP8Zj.3pQYpAAkS0afUGE_
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
strict-transport-security: max-age=31536000; includeSubDomains
content-encoding: gzip
date: Tue, 30 Aug 2022 17:00:02 GMT
cache-control: no-cache
etag: W/"19a83ff1c88dfeef3c2617e8a5ba7093"
vary: Accept-Encoding
x-cache: RefreshHit from cloudfront
via: 1.1 b053873243f91b1bb6dc406ce0c67db4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: MuR24xKtiq50hEuQ5vTOWy7BPK9HEJlXVy8w44-q-TbEDS389E0Ggw==
X-Firefox-Spdy: h2
js.driftt.com/core/assets/js/18.c13b3a33.chunk.js
200 OK 0 B URL HTTP/2 js.driftt.com/core/assets/js/18.c13b3a33.chunk.js
IP
GET /core/assets/js/18.c13b3a33.chunk.js HTTP/1.1
Host: js.driftt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://js.driftt.com/core?embedId=5dfsgn7m2kst®ion=US&forceShow=false&skipCampaigns=false&sessionId=87ea9c31-7f3b-487e-941f-82e8a43637e7&sessionStarted=1661878802.41&campaignRefreshToken=f7c14ca4-a947-45fb-92d2-71aae205d325&hideController=false&pageLoadStartTime=1661878797846&mode=CHAT&driftEnableLog=false&secureIframe=false
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
date: Wed, 06 Jul 2022 01:05:58 GMT
server: nginx
last-modified: Fri, 01 Jul 2022 20:20:56 GMT
etag: W/"2e0e21fb7fd3dd146cc688e39d01d42e"
x-amz-server-side-encryption: AES256
x-amz-version-id: pxNOQ93Ry3SgjvjCpTdQZ2Sx3uMbDhCG
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
strict-transport-security: max-age=31536000; includeSubDomains
cache-control: max-age=31536000
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 b053873243f91b1bb6dc406ce0c67db4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 6zehrbfhG-yp1PB7zkStRrh8g4z4-aW6bG3LmsOAldESKguHWlmPUg==
age: 4809244
X-Firefox-Spdy: h2
js.driftt.com/core/assets/css/9.f50eb0b3.chunk.css
200 OK 0 B URL HTTP/2 js.driftt.com/core/assets/css/9.f50eb0b3.chunk.css
IP
GET /core/assets/css/9.f50eb0b3.chunk.css HTTP/1.1
Host: js.driftt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://js.driftt.com/core?embedId=5dfsgn7m2kst®ion=US&forceShow=false&skipCampaigns=false&sessionId=87ea9c31-7f3b-487e-941f-82e8a43637e7&sessionStarted=1661878802.41&campaignRefreshToken=f7c14ca4-a947-45fb-92d2-71aae205d325&hideController=false&pageLoadStartTime=1661878797846&mode=CHAT&driftEnableLog=false&secureIframe=false
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/css
date: Fri, 26 Aug 2022 13:20:22 GMT
server: nginx
last-modified: Thu, 25 Aug 2022 21:13:13 GMT
etag: W/"e6efd75f849f72222df348ff402e8026"
x-amz-server-side-encryption: AES256
x-amz-version-id: cfUNfNdGGDHKWON2NXR5AFmNvq8uIDRB
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
strict-transport-security: max-age=31536000; includeSubDomains
cache-control: max-age=31536000
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 b053873243f91b1bb6dc406ce0c67db4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 3_NXLHCLh56_-CwPY2N6XwX8lMi4la6km_940JewkK_kDjn8U4EDkA==
age: 358780
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Oswald:200,300,400,500,600,700|Open+Sans+Condensed:300
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Oswald:200,300,400,500,600,700|Open+Sans+Condensed:300
IP
GET /css?family=Oswald:200,300,400,500,600,700|Open+Sans+Condensed:300 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.proofpoint.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 30 Aug 2022 16:59:58 GMT
date: Tue, 30 Aug 2022 16:59:58 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
js.driftt.com/core?embedId=5dfsgn7m2kst®ion=US&forceShow=false&skipCampaigns=false&sessionId=87ea9c31-7f3b-487e-941f-82e8a43637e7&sessionStarted=1661878802.41&campaignRefreshToken=f7c14ca4-a947-45fb-92d2-71aae205d325&hideController=false&pageLoadStartTime=1661878797846&mode=CHAT&driftEnableLog=false&secureIframe=false
200 OK 0 B URL HTTP/2 js.driftt.com/core?embedId=5dfsgn7m2kst®ion=US&forceShow=false&skipCampaigns=false&sessionId=87ea9c31-7f3b-487e-941f-82e8a43637e7&sessionStarted=1661878802.41&campaignRefreshToken=f7c14ca4-a947-45fb-92d2-71aae205d325&hideController=false&pageLoadStartTime=1661878797846&mode=CHAT&driftEnableLog=false&secureIframe=false
IP
GET /core?embedId=5dfsgn7m2kst®ion=US&forceShow=false&skipCampaigns=false&sessionId=87ea9c31-7f3b-487e-941f-82e8a43637e7&sessionStarted=1661878802.41&campaignRefreshToken=f7c14ca4-a947-45fb-92d2-71aae205d325&hideController=false&pageLoadStartTime=1661878797846&mode=CHAT&driftEnableLog=false&secureIframe=false HTTP/1.1
Host: js.driftt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.proofpoint.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html; charset=utf-8
server: nginx
last-modified: Fri, 26 Aug 2022 13:20:23 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: LEI3GgEMRDVP8Zj.3pQYpAAkS0afUGE_
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
strict-transport-security: max-age=31536000; includeSubDomains
content-encoding: gzip
date: Tue, 30 Aug 2022 17:00:02 GMT
cache-control: no-cache
etag: W/"19a83ff1c88dfeef3c2617e8a5ba7093"
vary: Accept-Encoding
x-cache: RefreshHit from cloudfront
via: 1.1 b053873243f91b1bb6dc406ce0c67db4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: dH3G_HAJhHO-sIFFNNVYwLxBmVLoxHDWdPD6RonOfZAmVvusATrjFA==
X-Firefox-Spdy: h2
js.driftt.com/core/assets/js/47.f4a0cab7.chunk.js
200 OK 0 B URL HTTP/2 js.driftt.com/core/assets/js/47.f4a0cab7.chunk.js
IP
GET /core/assets/js/47.f4a0cab7.chunk.js HTTP/1.1
Host: js.driftt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://js.driftt.com/core?embedId=5dfsgn7m2kst®ion=US&forceShow=false&skipCampaigns=false&sessionId=87ea9c31-7f3b-487e-941f-82e8a43637e7&sessionStarted=1661878802.41&campaignRefreshToken=f7c14ca4-a947-45fb-92d2-71aae205d325&hideController=false&pageLoadStartTime=1661878797846&mode=CHAT&driftEnableLog=false&secureIframe=false
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
date: Mon, 04 Jul 2022 02:17:00 GMT
server: nginx
last-modified: Fri, 01 Jul 2022 20:20:56 GMT
etag: W/"58eb1e017120f28c6eea4aa3402a2042"
x-amz-server-side-encryption: AES256
x-amz-version-id: jctMzIJIR8pxylIIOPc..ieVIdEvFzh3
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
strict-transport-security: max-age=31536000; includeSubDomains
cache-control: max-age=31536000
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 b053873243f91b1bb6dc406ce0c67db4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: -LggnbQqx2Dc9V8OqWe3TW272sG5RzSxDBrwCVf2aJsVJiHsfSusNw==
age: 4977782
X-Firefox-Spdy: h2
geoip-js.com/js/apis/geoip2/v2.1/geoip2.js
200 OK 0 B URL HTTP/2 geoip-js.com/js/apis/geoip2/v2.1/geoip2.js
IP
GET /js/apis/geoip2/v2.1/geoip2.js HTTP/1.1
Host: geoip-js.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.proofpoint.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 30 Aug 2022 16:59:58 GMT
content-type: application/javascript; charset=utf-8
last-modified: Mon, 29 Aug 2022 18:20:43 GMT
etag: W/"630d037b-da4"
expires: Wed, 31 Aug 2022 04:59:58 GMT
cache-control: public, max-age=43200
cf-cache-status: HIT
age: 1458
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 742f147889871bfa-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
js.driftt.com/core/assets/css/1.9ac936f5.chunk.css
200 OK 0 B URL HTTP/2 js.driftt.com/core/assets/css/1.9ac936f5.chunk.css
IP
GET /core/assets/css/1.9ac936f5.chunk.css HTTP/1.1
Host: js.driftt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://js.driftt.com/core/chat?region=US&driftEnableLog=false&pageLoadStartTime=1661878797846
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/css
date: Fri, 26 Aug 2022 13:20:23 GMT
server: nginx
last-modified: Thu, 25 Aug 2022 21:13:12 GMT
etag: W/"aceba6596ea46648313cf55bd1ddcfc5"
x-amz-server-side-encryption: AES256
x-amz-version-id: g2F7HrSZWtngTjVVBgLaUYEhzo51aYKk
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
strict-transport-security: max-age=31536000; includeSubDomains
cache-control: max-age=31536000
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 b053873243f91b1bb6dc406ce0c67db4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: SFNnSBjNfNJVfju8kVw1iZ37pOf377m9wL6hVzAD7_M9V-EB35ipjA==
age: 358780
X-Firefox-Spdy: h2
js.driftt.com/core/assets/js/main~493df0b3.ac3a9470.chunk.js
200 OK 0 B URL HTTP/2 js.driftt.com/core/assets/js/main~493df0b3.ac3a9470.chunk.js
IP
GET /core/assets/js/main~493df0b3.ac3a9470.chunk.js HTTP/1.1
Host: js.driftt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://js.driftt.com/core?embedId=5dfsgn7m2kst®ion=US&forceShow=false&skipCampaigns=false&sessionId=87ea9c31-7f3b-487e-941f-82e8a43637e7&sessionStarted=1661878802.41&campaignRefreshToken=f7c14ca4-a947-45fb-92d2-71aae205d325&hideController=false&pageLoadStartTime=1661878797846&mode=CHAT&driftEnableLog=false&secureIframe=false
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
date: Sun, 03 Jul 2022 23:15:04 GMT
server: nginx
last-modified: Fri, 01 Jul 2022 20:20:58 GMT
etag: W/"ab6db2ea528099e4b4bcafc90b1f14a6"
x-amz-server-side-encryption: AES256
x-amz-version-id: hiapbHKSV4DShQCB29I8q9ZEQ_orBvh8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
strict-transport-security: max-age=31536000; includeSubDomains
cache-control: max-age=31536000
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 b053873243f91b1bb6dc406ce0c67db4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: WfT1yKk1gdHPSOb7fV52ZUc3Xc46TLpadNlv6kRGYDfga-0AdBh8Sg==
age: 4988698
X-Firefox-Spdy: h2
js.driftt.com/core/assets/js/21.b8c41db9.chunk.js
200 OK 0 B URL HTTP/2 js.driftt.com/core/assets/js/21.b8c41db9.chunk.js
IP
GET /core/assets/js/21.b8c41db9.chunk.js HTTP/1.1
Host: js.driftt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://js.driftt.com/core?embedId=5dfsgn7m2kst®ion=US&forceShow=false&skipCampaigns=false&sessionId=87ea9c31-7f3b-487e-941f-82e8a43637e7&sessionStarted=1661878802.41&campaignRefreshToken=f7c14ca4-a947-45fb-92d2-71aae205d325&hideController=false&pageLoadStartTime=1661878797846&mode=CHAT&driftEnableLog=false&secureIframe=false
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
date: Fri, 22 Jul 2022 00:55:28 GMT
server: nginx
last-modified: Wed, 20 Jul 2022 16:44:35 GMT
etag: W/"65e5c965272e021ae33ff8bc39565ef5"
x-amz-server-side-encryption: AES256
x-amz-version-id: f.0PmvFwFO6wHvpJ0r6JG1gTthOACCRK
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
strict-transport-security: max-age=31536000; includeSubDomains
cache-control: max-age=31536000
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 b053873243f91b1bb6dc406ce0c67db4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: vc1_1XGaRiyye7XeC6txB-gOw4N4h2mmvPcnBnQS8f7Imt7CHsXoRw==
age: 3427474
X-Firefox-Spdy: h2
52.73.248.32
23.61.214.147
158.255.109.19
66.155.71.149
3.126.56.137
52.214.10.150
141.226.228.48
104.18.18.126
23.36.77.32