r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 565c1bbc5c1c40be1988b3bf6fd9dc1a
cfdba5bc597130461dd67bf6cda53183be592493
60ceb36a8329c92fc49a3caf50daf511a38e01eac21a07d7a0a838166bea058d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "60CEB36A8329C92FC49A3CAF50DAF511A38E01EAC21A07D7A0A838166BEA058D"
Last-Modified: Mon, 06 Feb 2023 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3957
Expires: Wed, 08 Feb 2023 06:04:24 GMT
Date: Wed, 08 Feb 2023 04:58:27 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 507011ccb9124dcd57e84a90a0965cc4
1a6575d0ac979c7184490cc9836ac4812ad2afd1
01626c18e1e68507aa33ef7448dbc3311901ab6f29adc2f51d449409b0680dce
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "01626C18E1E68507AA33EF7448DBC3311901AB6F29ADC2F51D449409B0680DCE"
Last-Modified: Sun, 05 Feb 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2624
Expires: Wed, 08 Feb 2023 05:42:11 GMT
Date: Wed, 08 Feb 2023 04:58:27 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash ff250d3ef3fa45322bf05039a0122a9f
b3e7a2c383bce1bab807dbe1a03c375258b51f1d
d07f109a96e0ae6ec7b1d46ce8761b3f06fe845769ce65d69e053dd40aa561ba
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Content-Length, Content-Type, Alert, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Wed, 08 Feb 2023 04:36:35 GMT
content-type: application/json
age: 1312
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash cc14b0d2f7c451f6431dc87ba54d1d60
bab8bfda6fa3e2f17125353f5147211787dc25d0
b58fe18a5cc8fe5aaf49ba7eadd0ef34692892e68e9c52eb5bb56ea27e1300ad
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B58FE18A5CC8FE5AAF49BA7EADD0EF34692892E68E9C52EB5BB56EA27E1300AD"
Last-Modified: Mon, 06 Feb 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17853
Expires: Wed, 08 Feb 2023 09:56:00 GMT
Date: Wed, 08 Feb 2023 04:58:27 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-03-20-18-44-46.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-03-20-18-44-46.chain
IP
File type PEM certificate\012- , ASCII text
Hash e76071a28ee566dababb3834f46d68ed
aebb4e68c1ba2de0f90025283e8ed8470944fde0
78b6df2627172e5b35476bc31020f02898cdc412aaf4337af2c3b049a60912b6
GET /chains/remote-settings.content-signature.mozilla.org-2023-03-20-18-44-46.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: 6ZCgb2rosA8zhCJxariscIFbMTlpXRfNYahxDqr4s5scaxx/L+NsHrdHLOWVJ9LgHy3aI2wGCsg=
x-amz-request-id: AKN8R7B5YQSJDYMP
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Wed, 08 Feb 2023 04:45:50 GMT
age: 757
last-modified: Sun, 29 Jan 2023 18:44:47 GMT
etag: "e76071a28ee566dababb3834f46d68ed"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 08 Feb 2023 04:58:27 GMT
content-type: application/json
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Expires, Retry-After, Content-Length, Content-Type, ETag, Cache-Control, Alert, Pragma, Backoff, Last-Modified
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Wed, 08 Feb 2023 04:14:52 GMT
age: 2616
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
id.moneyforward.com/oauth/authorize?auth_ui=ex&client_id=HewQ4jmfZyO5doFQRiV9nDpBD7tt8OhyWt8YKm1xpjY&nonce=49812b5ce23fb8490444907bb74ef533&prompt=select_account&redirect_uri=https://expense.moneyforward.com/auth/mfid/callback&response_type=code&scope=openid%20email&state=ac2818ef0ecb2790125910cd436ad0f4
301 Moved Permanently 134 B URL HTTP/1.1 id.moneyforward.com/oauth/authorize?auth_ui=ex&client_id=HewQ4jmfZyO5doFQRiV9nDpBD7tt8OhyWt8YKm1xpjY&nonce=49812b5ce23fb8490444907bb74ef533&prompt=select_account&redirect_uri=https://expense.moneyforward.com/auth/mfid/callback&response_type=code&scope=openid%20email&state=ac2818ef0ecb2790125910cd436ad0f4
IP
ASN #7506 GMO Internet,Inc
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4aa7a432bb447f094408f1bd6229c605
1965c4952cc8c082a6307ed67061a57aab6632fa
34ccdc351dc93dbf30a8630521968421091e3ed19c31a16e32c2eabb55c6a73a
GET /oauth/authorize?auth_ui=ex&client_id=HewQ4jmfZyO5doFQRiV9nDpBD7tt8OhyWt8YKm1xpjY&nonce=49812b5ce23fb8490444907bb74ef533&prompt=select_account&redirect_uri=https://expense.moneyforward.com/auth/mfid/callback&response_type=code&scope=openid%20email&state=ac2818ef0ecb2790125910cd436ad0f4 HTTP/1.1
Host: id.moneyforward.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Wed, 08 Feb 2023 04:58:27 GMT
Content-Type: text/html
Content-Length: 134
Connection: keep-alive
Location: https://id.moneyforward.com:443/oauth/authorize?auth_ui=ex&client_id=HewQ4jmfZyO5doFQRiV9nDpBD7tt8OhyWt8YKm1xpjY&nonce=49812b5ce23fb8490444907bb74ef533&prompt=select_account&redirect_uri=https://expense.moneyforward.com/auth/mfid/callback&response_type=code&scope=openid%20email&state=ac2818ef0ecb2790125910cd436ad0f4
Server: Scutum
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 9b88bae61bca33aba8aa99f6128db8d9
a07b61fb2458917699613fcae68710941b595416
54915c2f79822732e06a592d027da421ad1e7a6458c545f98333db25612b3dea
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "54915C2F79822732E06A592D027DA421AD1E7A6458C545F98333DB25612B3DEA"
Last-Modified: Mon, 06 Feb 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7178
Expires: Wed, 08 Feb 2023 06:58:06 GMT
Date: Wed, 08 Feb 2023 04:58:28 GMT
Connection: keep-alive
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: HsqM+reXCNrL57SpIZ+n3A==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: DEUgU6haDBIGzXl0k+oCwsKxZTs=
ocsp.sectigo.com/
200 OK 472 B IP
Hash 1513e1d27de53e47ce8d749e352a965d
e93f16232b8aaa5f96322895ac70dfc0fde22bc5
aa4d333939c87c16dae19e7317bec3aed526f7b319584dd54910f7ee60a37349
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 08 Feb 2023 04:58:29 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Tue, 07 Feb 2023 01:35:37 GMT
Expires: Tue, 14 Feb 2023 01:35:36 GMT
Etag: "e93f16232b8aaa5f96322895ac70dfc0fde22bc5"
Cache-Control: max-age=505626,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7961ca5c7b1e1c02-OSL
ocsp.sectigo.com/
200 OK 472 B IP
Hash 1513e1d27de53e47ce8d749e352a965d
e93f16232b8aaa5f96322895ac70dfc0fde22bc5
aa4d333939c87c16dae19e7317bec3aed526f7b319584dd54910f7ee60a37349
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 08 Feb 2023 04:58:29 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Tue, 07 Feb 2023 01:35:37 GMT
Expires: Tue, 14 Feb 2023 01:35:36 GMT
Etag: "e93f16232b8aaa5f96322895ac70dfc0fde22bc5"
Cache-Control: max-age=505626,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7961ca5e0bb5b4f1-OSL
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 68273225f74fbf7493f395610d7a73fc
5a8779ef5656aeeba23b365aad60b7901c5dd7fc
c83f285a1f3df0f7ac758a68ee95cc3d2671f80264c2e143cc0561cc574e3f19
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C83F285A1F3DF0F7AC758A68EE95CC3D2671F80264C2E143CC0561CC574E3F19"
Last-Modified: Mon, 06 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2327
Expires: Wed, 08 Feb 2023 05:37:16 GMT
Date: Wed, 08 Feb 2023 04:58:29 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 68273225f74fbf7493f395610d7a73fc
5a8779ef5656aeeba23b365aad60b7901c5dd7fc
c83f285a1f3df0f7ac758a68ee95cc3d2671f80264c2e143cc0561cc574e3f19
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C83F285A1F3DF0F7AC758A68EE95CC3D2671F80264C2E143CC0561CC574E3F19"
Last-Modified: Mon, 06 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2327
Expires: Wed, 08 Feb 2023 05:37:16 GMT
Date: Wed, 08 Feb 2023 04:58:29 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe4252883-1cf4-4e4a-98fa-fee2d1bd1a6c.jpeg
200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe4252883-1cf4-4e4a-98fa-fee2d1bd1a6c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 298eca3ae092fd28108db52acaa59545
ee865a4919befec21c73f7a1cf0c2405c34743b7
d490b601b1dc9e89392b902b7b7376815c81019ef53ab06aa27ed563600bb1a3
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe4252883-1cf4-4e4a-98fa-fee2d1bd1a6c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13371
x-amzn-requestid: 2fd56339-7b32-4058-8eea-8565cae3037c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f2opoHjGoAMFsMw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63df54a3-5b0bd42e1e21d7d65ac7c7f1;Sampled=0
x-amzn-remapped-date: Sun, 05 Feb 2023 07:02:59 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: LrFMYSIZl786S-W1OGIiKDvgTNyEb7c5rlXsQIBMbAwah5JaBzJkCg==
via: 1.1 4dde8ec6d6c12741888c2d3a059d4a2e.cloudfront.net (CloudFront), 1.1 e66162aafd55b64ba1478ff7105150fa.cloudfront.net (CloudFront), 1.1 google
date: Tue, 07 Feb 2023 10:47:01 GMT
age: 65488
etag: "ee865a4919befec21c73f7a1cf0c2405c34743b7"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbcb27041-48b2-474f-b9d5-f88e9e662723.jpeg
200 OK 6.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbcb27041-48b2-474f-b9d5-f88e9e662723.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d8a3fa4f1ec82d501942f9db3de2cb7d
b91c2aea7f2fb26131c8929b254c5596a1bb25ff
9d246eeab8ba04c775a03fd960c8859934a0accb737e845e89aba40bc573fdaa
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbcb27041-48b2-474f-b9d5-f88e9e662723.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6342
x-amzn-requestid: b2b61a71-5326-4fc6-baba-7baad29cf7c5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f_OkbHfDIAMF5AQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e2c482-5cc4028d01d05305637af317;Sampled=0
x-amzn-remapped-date: Tue, 07 Feb 2023 21:37:06 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: iIQAy6CQSvnvQ79UJ6ifJbs-0kEqUYe8OyCqPb2HSKxoDoLykOyaLg==
via: 1.1 8dbfaf7df256a75768461d934659b6b2.cloudfront.net (CloudFront), 1.1 82ea95080f526df99896343fb7269b06.cloudfront.net (CloudFront), 1.1 google
date: Tue, 07 Feb 2023 21:52:28 GMT
age: 25561
etag: "b91c2aea7f2fb26131c8929b254c5596a1bb25ff"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdcf61053-67f6-4767-ad44-fa802c5ef5b4.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdcf61053-67f6-4767-ad44-fa802c5ef5b4.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a9c2a9eee923b84d4e06438a8b2acaff
520b122e3ce52220af153fee26bb7067283f9075
9ff4236fdcd05210a9c8bb48ea68179e142b1b05c8b19dd66282590dff69fa22
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdcf61053-67f6-4767-ad44-fa802c5ef5b4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10058
x-amzn-requestid: 94374454-1e89-4c43-895b-0a90f39b851d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f_O5vEgcoAMFctg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e2c50a-0bf11cad4b0818c36188ba91;Sampled=0
x-amzn-remapped-date: Tue, 07 Feb 2023 21:39:22 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: qYXu_I4vL00EOopA1nQcxCTMKf4nObKFk9XQozhw6FezKsfTDem3Mw==
via: 1.1 9b311162717b41c968f6f00426d88aaa.cloudfront.net (CloudFront), 1.1 e66162aafd55b64ba1478ff7105150fa.cloudfront.net (CloudFront), 1.1 google
date: Tue, 07 Feb 2023 22:06:35 GMT
etag: "520b122e3ce52220af153fee26bb7067283f9075"
content-type: image/jpeg
age: 24714
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbee0b552-d236-4fa2-b702-1571b09d3fd6.jpeg
200 OK 6.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbee0b552-d236-4fa2-b702-1571b09d3fd6.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash db6e81972b8835dc48a0dae751ffde5f
826e2195cc52905cfed0bc4f01646290261113b6
720e6105b2ccc9cbc8fd005d53873ced5467a852c7a5041ce2ef96785c0d92f7
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbee0b552-d236-4fa2-b702-1571b09d3fd6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6060
x-amzn-requestid: 80cbc454-e1b4-4e53-a3b6-3a5ac11920c7
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f_PPQEPNIAMFkqA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e2c594-4539ebb17f27d88a47100a82;Sampled=0
x-amzn-remapped-date: Tue, 07 Feb 2023 21:41:40 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: WvujLqUMXZ4VAF2OePAIOdk96p6-GwwVcWEGORS2NKZ3XxgGIZHAww==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 caf6806821bc479b28a6f1ce3043b8a6.cloudfront.net (CloudFront), 1.1 google
date: Tue, 07 Feb 2023 21:55:15 GMT
age: 25394
etag: "826e2195cc52905cfed0bc4f01646290261113b6"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8122ba3b-f49a-49fa-acfb-88990087de42.jpeg
200 OK 6.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8122ba3b-f49a-49fa-acfb-88990087de42.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 25fb37d8b072e47aae74933481fb9418
b073d213a6a7939efed7ee5ef62a5548e00082bc
59a9c61013b3a4faab6f1c578f45bb87397d2f9e7975ae58e53e2c4e4a791da2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8122ba3b-f49a-49fa-acfb-88990087de42.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6177
x-amzn-requestid: 729ae67c-5468-42a6-ba16-2a6a55db001d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f-tUbE7EoAMFuOw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e28f4f-7f1fa6e162899c495e44e643;Sampled=0
x-amzn-remapped-date: Tue, 07 Feb 2023 17:50:07 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: xTJKf69wk7qWWhBYf-qO61jOY2jXIC4FNdt4Mxt2dLDmLm5U9OocVQ==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google
date: Tue, 07 Feb 2023 18:24:36 GMT
etag: "b073d213a6a7939efed7ee5ef62a5548e00082bc"
content-type: image/jpeg
age: 38033
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc3ed9aa0-a88e-4b92-a2bb-567735d813b6.jpeg
200 OK 8.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc3ed9aa0-a88e-4b92-a2bb-567735d813b6.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash fbe359ce6fb136add75c8f3d3cc06330
e6584afcf39b6fad21eccbcce95c6645b8e1b3b8
29478bf1b8168dc457bb7d298448a78e1040bd3aa80cbf11cfa37475568590d8
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc3ed9aa0-a88e-4b92-a2bb-567735d813b6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8170
x-amzn-requestid: d1ddb47f-3472-4015-8d55-72f435671f03
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f5aSPHiroAMFpSg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e070da-114975440d70915472cdba2f;Sampled=0
x-amzn-remapped-date: Mon, 06 Feb 2023 03:15:38 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 0w6JgtsKSRHLPJ3LyY6YUI8N7PS-gVlLuivQUq9jdyeYYm3STiJJIQ==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google
date: Wed, 08 Feb 2023 04:34:33 GMT
age: 1436
etag: "e6584afcf39b6fad21eccbcce95c6645b8e1b3b8"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
id.moneyforward.com/oauth/authorize?auth_ui=ex&client_id=HewQ4jmfZyO5doFQRiV9nDpBD7tt8OhyWt8YKm1xpjY&nonce=49812b5ce23fb8490444907bb74ef533&prompt=select_account&redirect_uri=https://expense.moneyforward.com/auth/mfid/callback&response_type=code&scope=openid%20email&state=ac2818ef0ecb2790125910cd436ad0f4
302 Found 392 B URL HTTP/1.1 id.moneyforward.com/oauth/authorize?auth_ui=ex&client_id=HewQ4jmfZyO5doFQRiV9nDpBD7tt8OhyWt8YKm1xpjY&nonce=49812b5ce23fb8490444907bb74ef533&prompt=select_account&redirect_uri=https://expense.moneyforward.com/auth/mfid/callback&response_type=code&scope=openid%20email&state=ac2818ef0ecb2790125910cd436ad0f4
IP
ASN #7506 GMO Internet,Inc
File type HTML document text\012- HTML document, ASCII text, with very long lines (392), with no line terminators
Hash dbf5b4c59d882ab69091ced89bcd5747
54b44182e7116a74ce5ce041fb3ca9adccb90029
88ec47d5847b5f27dfaafd784dcda3949535d5f7cf74291b4a85de5cc8da3683
GET /oauth/authorize?auth_ui=ex&client_id=HewQ4jmfZyO5doFQRiV9nDpBD7tt8OhyWt8YKm1xpjY&nonce=49812b5ce23fb8490444907bb74ef533&prompt=select_account&redirect_uri=https://expense.moneyforward.com/auth/mfid/callback&response_type=code&scope=openid%20email&state=ac2818ef0ecb2790125910cd436ad0f4 HTTP/1.1
Host: id.moneyforward.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 302 Found
Date: Wed, 08 Feb 2023 04:58:30 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 0
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Permitted-Cross-Domain-Policies: none
Referrer-Policy: strict-origin-when-cross-origin
Cache-Control: no-store
Pragma: no-cache
Location: https://id.moneyforward.com/account_selector?auth_ui=ex&client_id=HewQ4jmfZyO5doFQRiV9nDpBD7tt8OhyWt8YKm1xpjY&nonce=49812b5ce23fb8490444907bb74ef533&redirect_uri=https%3A%2F%2Fexpense.moneyforward.com%2Fauth%2Fmfid%2Fcallback&response_type=code&scope=openid+email&state=ac2818ef0ecb2790125910cd436ad0f4
Content-Language: en
X-Request-Id: a6fae103-5b43-4dad-b289-fbc5717a5df7
X-Runtime: 0.050780
Server: Scutum
id.moneyforward.com/account_selector?auth_ui=ex&client_id=HewQ4jmfZyO5doFQRiV9nDpBD7tt8OhyWt8YKm1xpjY&nonce=49812b5ce23fb8490444907bb74ef533&redirect_uri=https%3A%2F%2Fexpense.moneyforward.com%2Fauth%2Fmfid%2Fcallback&response_type=code&scope=openid+email&state=ac2818ef0ecb2790125910cd436ad0f4
302 Found 383 B URL HTTP/1.1 id.moneyforward.com/account_selector?auth_ui=ex&client_id=HewQ4jmfZyO5doFQRiV9nDpBD7tt8OhyWt8YKm1xpjY&nonce=49812b5ce23fb8490444907bb74ef533&redirect_uri=https%3A%2F%2Fexpense.moneyforward.com%2Fauth%2Fmfid%2Fcallback&response_type=code&scope=openid+email&state=ac2818ef0ecb2790125910cd436ad0f4
IP
ASN #7506 GMO Internet,Inc
File type HTML document text\012- HTML document, ASCII text, with very long lines (383), with no line terminators
Hash 8c3d4ba3d3a47d0860e5309ca471bb22
0aa148abb1d479cb5cb617fd879972c048a9a7b1
d518cef4c54510cc587b7638e508257ed5469f02d07e6d1fdae56a3c451b64e0
GET /account_selector?auth_ui=ex&client_id=HewQ4jmfZyO5doFQRiV9nDpBD7tt8OhyWt8YKm1xpjY&nonce=49812b5ce23fb8490444907bb74ef533&redirect_uri=https%3A%2F%2Fexpense.moneyforward.com%2Fauth%2Fmfid%2Fcallback&response_type=code&scope=openid+email&state=ac2818ef0ecb2790125910cd436ad0f4 HTTP/1.1
Host: id.moneyforward.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 302 Found
Date: Wed, 08 Feb 2023 04:58:30 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 0
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Permitted-Cross-Domain-Policies: none
Referrer-Policy: strict-origin-when-cross-origin
Cache-Control: no-store
Pragma: no-cache
Location: https://id.moneyforward.com/sign_in?auth_ui=ex&client_id=HewQ4jmfZyO5doFQRiV9nDpBD7tt8OhyWt8YKm1xpjY&nonce=49812b5ce23fb8490444907bb74ef533&redirect_uri=https%3A%2F%2Fexpense.moneyforward.com%2Fauth%2Fmfid%2Fcallback&response_type=code&scope=openid+email&state=ac2818ef0ecb2790125910cd436ad0f4
Content-Language: en
X-Request-Id: f424033e-ad85-4012-a78a-6dc98c807dea
X-Runtime: 0.049047
Server: Scutum
id.moneyforward.com/sign_in?auth_ui=ex&client_id=HewQ4jmfZyO5doFQRiV9nDpBD7tt8OhyWt8YKm1xpjY&nonce=49812b5ce23fb8490444907bb74ef533&redirect_uri=https%3A%2F%2Fexpense.moneyforward.com%2Fauth%2Fmfid%2Fcallback&response_type=code&scope=openid+email&state=ac2818ef0ecb2790125910cd436ad0f4
302 Found 387 B URL HTTP/1.1 id.moneyforward.com/sign_in?auth_ui=ex&client_id=HewQ4jmfZyO5doFQRiV9nDpBD7tt8OhyWt8YKm1xpjY&nonce=49812b5ce23fb8490444907bb74ef533&redirect_uri=https%3A%2F%2Fexpense.moneyforward.com%2Fauth%2Fmfid%2Fcallback&response_type=code&scope=openid+email&state=ac2818ef0ecb2790125910cd436ad0f4
IP
ASN #7506 GMO Internet,Inc
File type HTML document text\012- HTML document, ASCII text, with very long lines (387), with no line terminators
Hash 7af9156411ece3446a844c3eb5975563
1f1d28bf08228b7bbbc0bc9bb2d4a15ed2e97aac
93aaebd2d87d68f854da07fd503870525456d0408a4eb72a1f28263421cb6388
GET /sign_in?auth_ui=ex&client_id=HewQ4jmfZyO5doFQRiV9nDpBD7tt8OhyWt8YKm1xpjY&nonce=49812b5ce23fb8490444907bb74ef533&redirect_uri=https%3A%2F%2Fexpense.moneyforward.com%2Fauth%2Fmfid%2Fcallback&response_type=code&scope=openid+email&state=ac2818ef0ecb2790125910cd436ad0f4 HTTP/1.1
Host: id.moneyforward.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 302 Found
Date: Wed, 08 Feb 2023 04:58:31 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 0
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Permitted-Cross-Domain-Policies: none
Referrer-Policy: strict-origin-when-cross-origin
Cache-Control: no-store
Pragma: no-cache
Location: https://id.moneyforward.com/sign_in/new?auth_ui=ex&client_id=HewQ4jmfZyO5doFQRiV9nDpBD7tt8OhyWt8YKm1xpjY&nonce=49812b5ce23fb8490444907bb74ef533&redirect_uri=https%3A%2F%2Fexpense.moneyforward.com%2Fauth%2Fmfid%2Fcallback&response_type=code&scope=openid+email&state=ac2818ef0ecb2790125910cd436ad0f4
Content-Language: en
Set-Cookie: last_used_application=L1%2BT%2BBZQjyRI%2FbGnDgY8ar%2BrdsYA28C8W0K5XLIWwrj00GMo9ei13ppvEcOOBlZgeyvw5vbWwXueXfjozyL314f4LAtjHJniVrEgasNGTctnB4H8fS%2Ba4mWX1t6nJ1EpHyhCxMccd0G%2BtA%2FBUMUgIDjY5VWfKD5lI2AHrejBJ2KRYL855Q%3D%3D--1CGQCp6nbqrhP%2FfD--F6tnjkIlMtCeKpXZzW3pwA%3D%3D; path=/; secure; HttpOnly; SameSite=None
X-Request-Id: a4afb3ed-5d72-4437-95ea-311bc6e67d00
X-Runtime: 0.048544
Server: Scutum
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 8d5417d247d259e3c0186136b83d9f75
49fbcf99a352669aee2559579ef73fa60f46d38d
3c013921158ec27e44d5e80a5108557de80a27f38089ac3a52c6c1cf5636f585
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 04:58:32 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtm.js?id=GTM-57WJC4V
200 OK 40 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-57WJC4V
IP
File type ASCII text, with very long lines (2535)
Hash a2047d8d8432519874837737406bc43a
c1261fc29544ab28a1a8d9a4acb733a3e9cab989
11367460eb75095bd87cc776c743a3e225092fdbce5a88e365325b669b63c2ab
GET /gtm.js?id=GTM-57WJC4V HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://id.moneyforward.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 08 Feb 2023 04:58:32 GMT
expires: Wed, 08 Feb 2023 04:58:32 GMT
cache-control: private, max-age=900
last-modified: Wed, 08 Feb 2023 03:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 39597
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 1ea53175655d36454e857a4e73cf9418
ba0036bb23e7cc4d877783ba60658107481a993b
7670bdc439388550c396d69330252c056f8a6c716e144a648abbaa9728880def
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=169010
Date: Wed, 08 Feb 2023 04:58:32 GMT
Etag: "63e31d2a-1d7"
Expires: Fri, 10 Feb 2023 03:55:22 GMT
Last-Modified: Wed, 08 Feb 2023 03:55:22 GMT
Server: nginx
X-Cache: Miss from cloudfront
Via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: pOeotWDVAQRYsr4lPdzPBEInVrbfA3LXdKPey1YVXTmzx_h7ys2t-w==
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 8d5417d247d259e3c0186136b83d9f75
49fbcf99a352669aee2559579ef73fa60f46d38d
3c013921158ec27e44d5e80a5108557de80a27f38089ac3a52c6c1cf5636f585
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 04:58:32 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 1ea53175655d36454e857a4e73cf9418
ba0036bb23e7cc4d877783ba60658107481a993b
7670bdc439388550c396d69330252c056f8a6c716e144a648abbaa9728880def
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Cache-Control: 'max-age=158059'
Date: Wed, 08 Feb 2023 04:58:32 GMT
Server: ECS (dcb/7FA5)
X-Cache: Miss from cloudfront
Via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 70qKcKV7kF68tRLGmnfZUpWzmWkKcHz9RHKoAHPwv_FWQWMNHnOD0g==
id.moneyforward.com/sign_in/new?auth_ui=ex&client_id=HewQ4jmfZyO5doFQRiV9nDpBD7tt8OhyWt8YKm1xpjY&nonce=49812b5ce23fb8490444907bb74ef533&redirect_uri=https%3A%2F%2Fexpense.moneyforward.com%2Fauth%2Fmfid%2Fcallback&response_type=code&scope=openid+email&state=ac2818ef0ecb2790125910cd436ad0f4
200 OK 8.0 kB URL HTTP/1.1 id.moneyforward.com/sign_in/new?auth_ui=ex&client_id=HewQ4jmfZyO5doFQRiV9nDpBD7tt8OhyWt8YKm1xpjY&nonce=49812b5ce23fb8490444907bb74ef533&redirect_uri=https%3A%2F%2Fexpense.moneyforward.com%2Fauth%2Fmfid%2Fcallback&response_type=code&scope=openid+email&state=ac2818ef0ecb2790125910cd436ad0f4
IP
ASN #7506 GMO Internet,Inc
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (4083)
Hash b6f1d5be4573510a8ae29a476e2ed21d
f4aa9d492ab6f0bb39087a006dfc609afb002c83
a7318a93f88ae09ad0aba894f4c38a19e6f4cc12ea152993ca3757bbf84d807a
GET /sign_in/new?auth_ui=ex&client_id=HewQ4jmfZyO5doFQRiV9nDpBD7tt8OhyWt8YKm1xpjY&nonce=49812b5ce23fb8490444907bb74ef533&redirect_uri=https%3A%2F%2Fexpense.moneyforward.com%2Fauth%2Fmfid%2Fcallback&response_type=code&scope=openid+email&state=ac2818ef0ecb2790125910cd436ad0f4 HTTP/1.1
Host: id.moneyforward.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: last_used_application=L1%2BT%2BBZQjyRI%2FbGnDgY8ar%2BrdsYA28C8W0K5XLIWwrj00GMo9ei13ppvEcOOBlZgeyvw5vbWwXueXfjozyL314f4LAtjHJniVrEgasNGTctnB4H8fS%2Ba4mWX1t6nJ1EpHyhCxMccd0G%2BtA%2FBUMUgIDjY5VWfKD5lI2AHrejBJ2KRYL855Q%3D%3D--1CGQCp6nbqrhP%2FfD--F6tnjkIlMtCeKpXZzW3pwA%3D%3D
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 200 OK
Date: Wed, 08 Feb 2023 04:58:31 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 0
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Permitted-Cross-Domain-Policies: none
Referrer-Policy: strict-origin-when-cross-origin
Cache-Control: no-store
Pragma: no-cache
Link: <https://assets-id.moneyforward.com/assets/front/reset-1fb3ad89816f968db13c4a285909405b83a625b1f71b9f212a6f4f4baac92877.css>; rel=preload; as=style; nopush,<https://assets-id.moneyforward.com/assets/front/common-ae6c5e59664b91f56225b3858862d6651d10f2c34cc710a65037a9e3a7b0d772.css>; rel=preload; as=style; nopush,<https://assets-id.moneyforward.com/bundled/pc.fe99dd70.css>; rel=preload; as=style; nopush,<https://assets-id.moneyforward.com/bundled/pc.8eedc3e0.js>; rel=preload; as=script; nopush
Content-Language: en
ETag: W/"a7318a93f88ae09ad0aba894f4c38a19"
Set-Cookie: _mfid_session=b58a8156ca6daf48324aa2cd0f679155; path=/; expires=Fri, 10 Mar 2023 04:58:31 GMT; secure; HttpOnly; SameSite=None
X-Request-Id: e32ccc37-a794-4e46-9060-11b53dcf0198
X-Runtime: 0.105187
Server: Scutum
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 1ea53175655d36454e857a4e73cf9418
ba0036bb23e7cc4d877783ba60658107481a993b
7670bdc439388550c396d69330252c056f8a6c716e144a648abbaa9728880def
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Cache-Control: 'max-age=158059'
Date: Wed, 08 Feb 2023 04:58:32 GMT
Server: ECS (dcb/7EC9)
X-Cache: Miss from cloudfront
Via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: xYXt9ihQ6PFlaPeUC7_-RjrANdk9_u51o5iL2pNYk4g4yAjasAx8bg==
assets-id.moneyforward.com/assets/front/common-ae6c5e59664b91f56225b3858862d6651d10f2c34cc710a65037a9e3a7b0d772.css
200 OK 711 B URL HTTP/2 assets-id.moneyforward.com/assets/front/common-ae6c5e59664b91f56225b3858862d6651d10f2c34cc710a65037a9e3a7b0d772.css
IP
Hash e5fa5f325bf9534654bc3164987b95d9
ad904a4ca071c34ad6e983df970eca6f3509851c
0a635c08a97c2dbef254ee20b7601b9a72babd672a1908aa8a44a2c311c53757
GET /assets/front/common-ae6c5e59664b91f56225b3858862d6651d10f2c34cc710a65037a9e3a7b0d772.css HTTP/1.1
Host: assets-id.moneyforward.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://id.moneyforward.com/
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
content-type: text/css
content-length: 711
last-modified: Mon, 06 Feb 2023 08:06:44 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Wed, 08 Feb 2023 04:58:32 GMT
etag: "e5fa5f325bf9534654bc3164987b95d9"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: mkgdVgK5PvBdcZ8fy-dsFnmaypv6yF1NHQTzkPSM7gcO_aaLhTcRDQ==
age: 2006
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 1ea53175655d36454e857a4e73cf9418
ba0036bb23e7cc4d877783ba60658107481a993b
7670bdc439388550c396d69330252c056f8a6c716e144a648abbaa9728880def
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Cache-Control: 'max-age=158059'
Date: Wed, 08 Feb 2023 04:58:32 GMT
Server: ECS (dcb/7EA3)
X-Cache: Miss from cloudfront
Via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: beiax-KZxKQZZxcApVNQUKIXSK9vB07rAqIx36210I6ZGCH80OAbsQ==
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1490)
Hash ca7fbbfd120e3e329633044190bbf134
d17f81e03dd827554ddd207ea081fb46b3415445
847004cefb32f85a9cc16b0b1eb77529ff5753680c145bfcb23f651d214737db
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://id.moneyforward.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20085
date: Wed, 08 Feb 2023 03:45:20 GMT
expires: Wed, 08 Feb 2023 05:45:20 GMT
cache-control: public, max-age=7200
age: 4392
last-modified: Tue, 10 Jan 2023 21:29:14 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.globalsign.com/gsrsaovsslca2018
200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsrsaovsslca2018
IP
Hash 782284cb30d18bac377c75a51ce73ae1
8f744f854beeb64946175501c4cc4375996b2097
504431db061bab1acbb26adbbdecdeaeb780f39886df9425d295a6c154436e96
POST /gsrsaovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 1432
Server: nginx
Content-Type: application/ocsp-response
Expires: Sun, 12 Feb 2023 02:53:47 GMT
ETag: "8f744f854beeb64946175501c4cc4375996b2097"
Last-Modified: Wed, 08 Feb 2023 02:53:48 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Wed, 08 Feb 2023 04:58:33 GMT
Age: 243
X-Served-By: cache-qpg1257-QPG, cache-bma1626-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 27, 1
X-Timer: S1675832313.966878,VS0,VE370
cd.ladsp.com/script/pixel2.js
200 OK 1.4 kB URL HTTP/2 cd.ladsp.com/script/pixel2.js
IP
File type ASCII text, with very long lines (521)
Hash 824fadaff9332d23a01ebbab4d680731
46734a8a4a778f7580a5335c12c469ef0d8169d8
5f46605b1768feafb83fe22c5fdd59e06e0ed8817f0fde690538ca3425f9bc40
GET /script/pixel2.js HTTP/1.1
Host: cd.ladsp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://id.moneyforward.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript
content-length: 1403
date: Mon, 09 Jan 2023 20:50:30 GMT
last-modified: Mon, 07 Mar 2022 05:15:46 GMT
etag: "824fadaff9332d23a01ebbab4d680731"
x-amz-meta-s3cmd-attrs: atime:1646630144/ctime:1646630144/gid:0/gname:root/md5:824fadaff9332d23a01ebbab4d680731/mode:33188/mtime:1646630144/uid:0/uname:root
cache-control: public, max-age=864000, immutable
content-encoding: gzip
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 04c4f064943f75498361739eb063cb7a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: wIHRutjaxj8T8cVa5m74YQnIHy1VfOlRRW_IJPHWPi4GOoM1EjR4Rg==
age: 2534884
X-Firefox-Spdy: h2
assets-id.moneyforward.com/assets/front/reset-1fb3ad89816f968db13c4a285909405b83a625b1f71b9f212a6f4f4baac92877.css
200 OK 34 kB URL HTTP/2 assets-id.moneyforward.com/assets/front/reset-1fb3ad89816f968db13c4a285909405b83a625b1f71b9f212a6f4f4baac92877.css
IP
Hash 5bd9d630cb529c45411c85065fb23f42
3dfa9dd8ed20e2b9d3711e3d5173b781b0cbf09d
42033d1331f004f53c5493e5660ab6933395a6e7fc3b00bae5a16d094741aab8
GET /assets/front/reset-1fb3ad89816f968db13c4a285909405b83a625b1f71b9f212a6f4f4baac92877.css HTTP/1.1
Host: assets-id.moneyforward.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://id.moneyforward.com/
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
content-type: text/css
last-modified: Tue, 07 Feb 2023 06:30:31 GMT
x-amz-server-side-encryption: AES256
server: AmazonS3
content-encoding: gzip
date: Wed, 08 Feb 2023 04:58:32 GMT
etag: W/"0d001da2c3c9aba7511e241ea91cbac9"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: rkEksT0Dl4eSB7Hz1CHZb0pgZSNjrNfDB3KoFx5fZCHDN5mZodJljQ==
age: 2006
X-Firefox-Spdy: h2
region1.google-analytics.com/g/collect?v=2&tid=G-DJMKLB8CPL>m=45je3260&_p=642642235&cid=1606014725.1675832366&ul=en-us&sr=1280x1024&uaW=1&_s=1&sid=1675832365&sct=1&seg=0&dl=https%3A%2F%2Fid.moneyforward.com%2Fsign_in%2Fnew%3Fauth_ui%3Dex%26client_id%3DHewQ4jmfZyO5doFQRiV9nDpBD7tt8OhyWt8YKm1xpjY%26nonce%3D49812b5ce23fb8490444907bb74ef533%26redirect_uri%3Dhttps%253A%252F%252Fexpense.moneyforward.com%252Fauth%252Fmfid%252Fcallback%26response_type%3Dcode%26scope%3Dopenid%2Bemail%26state%3Dac2818ef0ecb2790125910cd436ad0f4&dt=Money%20Forward%20ID&en=page_view&_fv=1&_ss=1
204 No Content 0 B URL HTTP/2 region1.google-analytics.com/g/collect?v=2&tid=G-DJMKLB8CPL>m=45je3260&_p=642642235&cid=1606014725.1675832366&ul=en-us&sr=1280x1024&uaW=1&_s=1&sid=1675832365&sct=1&seg=0&dl=https%3A%2F%2Fid.moneyforward.com%2Fsign_in%2Fnew%3Fauth_ui%3Dex%26client_id%3DHewQ4jmfZyO5doFQRiV9nDpBD7tt8OhyWt8YKm1xpjY%26nonce%3D49812b5ce23fb8490444907bb74ef533%26redirect_uri%3Dhttps%253A%252F%252Fexpense.moneyforward.com%252Fauth%252Fmfid%252Fcallback%26response_type%3Dcode%26scope%3Dopenid%2Bemail%26state%3Dac2818ef0ecb2790125910cd436ad0f4&dt=Money%20Forward%20ID&en=page_view&_fv=1&_ss=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-DJMKLB8CPL>m=45je3260&_p=642642235&cid=1606014725.1675832366&ul=en-us&sr=1280x1024&uaW=1&_s=1&sid=1675832365&sct=1&seg=0&dl=https%3A%2F%2Fid.moneyforward.com%2Fsign_in%2Fnew%3Fauth_ui%3Dex%26client_id%3DHewQ4jmfZyO5doFQRiV9nDpBD7tt8OhyWt8YKm1xpjY%26nonce%3D49812b5ce23fb8490444907bb74ef533%26redirect_uri%3Dhttps%253A%252F%252Fexpense.moneyforward.com%252Fauth%252Fmfid%252Fcallback%26response_type%3Dcode%26scope%3Dopenid%2Bemail%26state%3Dac2818ef0ecb2790125910cd436ad0f4&dt=Money%20Forward%20ID&en=page_view&_fv=1&_ss=1 HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://id.moneyforward.com/
Origin: https://id.moneyforward.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://id.moneyforward.com
date: Wed, 08 Feb 2023 04:58:33 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
region1.google-analytics.com/g/collect?v=2&tid=G-ZXLJGFPPZD>m=45je3260&_p=642642235&cid=1606014725.1675832366&ul=en-us&sr=1280x1024&uaW=1&_s=1&sid=1675832365&sct=1&seg=0&dl=https%3A%2F%2Fid.moneyforward.com%2Fsign_in%2Fnew%3Fauth_ui%3Dex%26client_id%3DHewQ4jmfZyO5doFQRiV9nDpBD7tt8OhyWt8YKm1xpjY%26nonce%3D49812b5ce23fb8490444907bb74ef533%26redirect_uri%3Dhttps%253A%252F%252Fexpense.moneyforward.com%252Fauth%252Fmfid%252Fcallback%26response_type%3Dcode%26scope%3Dopenid%2Bemail%26state%3Dac2818ef0ecb2790125910cd436ad0f4&dt=Money%20Forward%20ID&en=page_view&_fv=1&_ss=1
204 No Content 0 B URL HTTP/2 region1.google-analytics.com/g/collect?v=2&tid=G-ZXLJGFPPZD>m=45je3260&_p=642642235&cid=1606014725.1675832366&ul=en-us&sr=1280x1024&uaW=1&_s=1&sid=1675832365&sct=1&seg=0&dl=https%3A%2F%2Fid.moneyforward.com%2Fsign_in%2Fnew%3Fauth_ui%3Dex%26client_id%3DHewQ4jmfZyO5doFQRiV9nDpBD7tt8OhyWt8YKm1xpjY%26nonce%3D49812b5ce23fb8490444907bb74ef533%26redirect_uri%3Dhttps%253A%252F%252Fexpense.moneyforward.com%252Fauth%252Fmfid%252Fcallback%26response_type%3Dcode%26scope%3Dopenid%2Bemail%26state%3Dac2818ef0ecb2790125910cd436ad0f4&dt=Money%20Forward%20ID&en=page_view&_fv=1&_ss=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-ZXLJGFPPZD>m=45je3260&_p=642642235&cid=1606014725.1675832366&ul=en-us&sr=1280x1024&uaW=1&_s=1&sid=1675832365&sct=1&seg=0&dl=https%3A%2F%2Fid.moneyforward.com%2Fsign_in%2Fnew%3Fauth_ui%3Dex%26client_id%3DHewQ4jmfZyO5doFQRiV9nDpBD7tt8OhyWt8YKm1xpjY%26nonce%3D49812b5ce23fb8490444907bb74ef533%26redirect_uri%3Dhttps%253A%252F%252Fexpense.moneyforward.com%252Fauth%252Fmfid%252Fcallback%26response_type%3Dcode%26scope%3Dopenid%2Bemail%26state%3Dac2818ef0ecb2790125910cd436ad0f4&dt=Money%20Forward%20ID&en=page_view&_fv=1&_ss=1 HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://id.moneyforward.com/
Origin: https://id.moneyforward.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 204 No Content
access-control-allow-origin: https://id.moneyforward.com
date: Wed, 08 Feb 2023 04:58:33 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
assets-id.moneyforward.com/bundled/images/yahoo.3e6d0223.png
200 OK 2.9 kB URL HTTP/2 assets-id.moneyforward.com/bundled/images/yahoo.3e6d0223.png
IP
File type PNG image data, 96 x 84, 8-bit/color RGBA, non-interlaced\012- data
Hash 20aaf26c78328a713373f8e5486320c3
58ca4b7429c6ea37c8cb0875901bccad031df501
dd22953835fc3b3fbaeaf71e7ea06d4a2aa89fef9f2cc390273ba26ed1316e64
GET /bundled/images/yahoo.3e6d0223.png HTTP/1.1
Host: assets-id.moneyforward.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://id.moneyforward.com/
Connection: keep-alive
Cookie: _ga=GA1.1.1606014725.1675832366; _gid=GA1.2.323325601.1675832366; _ga_DJMKLB8CPL=GS1.1.1675832365.1.0.1675832365.0.0.0; _ga_ZXLJGFPPZD=GS1.1.1675832365.1.0.1675832365.0.0.0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 2899
last-modified: Mon, 06 Feb 2023 01:24:31 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Wed, 08 Feb 2023 04:58:33 GMT
etag: "20aaf26c78328a713373f8e5486320c3"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 0xTqkrzMovLF8UbzQnTV2TLuaf2egdrShpWloHcn8IJ0b1Idc3Vkzw==
age: 692
X-Firefox-Spdy: h2
assets-id.moneyforward.com/bundled/images/fb.040d133b.png
200 OK 2.5 kB URL HTTP/2 assets-id.moneyforward.com/bundled/images/fb.040d133b.png
IP
File type PNG image data, 96 x 84, 8-bit/color RGBA, non-interlaced\012- data
Hash 7ba114a6fa0e6efd421bebdcbb61d890
a14342ddc8041a492baa1443eef69e0eb9ae9af9
8a8fa8fa7536519edb75aa42eb1f0b0c4bdd41eab935a61cba96e512697bb42d
GET /bundled/images/fb.040d133b.png HTTP/1.1
Host: assets-id.moneyforward.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://id.moneyforward.com/
Connection: keep-alive
Cookie: _ga=GA1.1.1606014725.1675832366; _gid=GA1.2.323325601.1675832366; _ga_DJMKLB8CPL=GS1.1.1675832365.1.0.1675832365.0.0.0; _ga_ZXLJGFPPZD=GS1.1.1675832365.1.0.1675832365.0.0.0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 2472
last-modified: Mon, 06 Feb 2023 08:06:48 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Wed, 08 Feb 2023 04:58:33 GMT
etag: "7ba114a6fa0e6efd421bebdcbb61d890"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: jXGJtz8pPVAPSfYUsTuIjiy2-bdVmN1BZ6HTTB5HKi1TflMy47f8wQ==
age: 692
X-Firefox-Spdy: h2
assets-id.moneyforward.com/bundled/images/mail.e4cd63d8.png
200 OK 1.3 kB URL HTTP/2 assets-id.moneyforward.com/bundled/images/mail.e4cd63d8.png
IP
File type PNG image data, 96 x 84, 8-bit/color RGBA, non-interlaced\012- data
Hash 56dd899cae185f5e4fd320f3d92dbed8
85e1834109f6f89bb72c7421c0ed9fd4d3a99f5a
43fce101ff109a44d2e53c82ad4d4414daccb637aac02d1e3bb79684ead61962
GET /bundled/images/mail.e4cd63d8.png HTTP/1.1
Host: assets-id.moneyforward.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://id.moneyforward.com/
Connection: keep-alive
Cookie: _ga=GA1.1.1606014725.1675832366; _gid=GA1.2.323325601.1675832366; _ga_DJMKLB8CPL=GS1.1.1675832365.1.0.1675832365.0.0.0; _ga_ZXLJGFPPZD=GS1.1.1675832365.1.0.1675832365.0.0.0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 1332
last-modified: Mon, 06 Feb 2023 08:06:48 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Wed, 08 Feb 2023 04:58:33 GMT
etag: "56dd899cae185f5e4fd320f3d92dbed8"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: v_j_A54Q7ZYmnSNGtikdrQ1nk4O1Zwu-cvHsKRP2AAGbcp1QOmpbfQ==
age: 692
X-Firefox-Spdy: h2
assets-id.moneyforward.com/bundled/232.9145c4dd.js
200 OK 4.8 kB URL HTTP/2 assets-id.moneyforward.com/bundled/232.9145c4dd.js
IP
Hash a1f012413784367f61b7816016bbdfef
c34cc815b170af4452bbc9161c034009aa97b25c
7cb9258a8f3837b9a38589804f714a7d6624968fa239fbd933f4568f9ed66c61
GET /bundled/232.9145c4dd.js HTTP/1.1
Host: assets-id.moneyforward.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://id.moneyforward.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: text/javascript
last-modified: Tue, 07 Feb 2023 06:30:33 GMT
x-amz-server-side-encryption: AES256
server: AmazonS3
content-encoding: gzip
date: Wed, 08 Feb 2023 04:58:34 GMT
etag: W/"8e5a492bfec465d4ee55cbf60187648b"
vary: Accept-Encoding
x-cache: RefreshHit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: wqNEbGBdN6CfgI8BZVhE128-VlPTFOed2FYq71SYWTEHAOHZ19NhJw==
X-Firefox-Spdy: h2
assets-id.moneyforward.com/bundled/pc.8eedc3e0.js
200 OK 325 kB URL HTTP/2 assets-id.moneyforward.com/bundled/pc.8eedc3e0.js
IP
File type Unicode text, UTF-8 text, with very long lines (56052), with LF, NEL line terminators
Size 325 kB (324918 bytes)
Hash 355b2a91294eb081caf6dc02b1d3afbc
e68c5c3a38ae1d509257b983462eba0cb02fa0f6
2fc98b0b25573d185c30a978ea4d57bce6c73d61b62b1df07bfc4285fa247137
GET /bundled/pc.8eedc3e0.js HTTP/1.1
Host: assets-id.moneyforward.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://id.moneyforward.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
content-type: text/javascript
last-modified: Wed, 08 Feb 2023 03:13:21 GMT
x-amz-server-side-encryption: AES256
server: AmazonS3
content-encoding: gzip
date: Wed, 08 Feb 2023 04:26:56 GMT
etag: W/"c8248cbf7a0c4193de54c5a389738998"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: f0LlY80mqs2XCr4LiLW9tVAJudsrit7QgqFaaBPnz9sH1y6SQBJhwg==
age: 1897
X-Firefox-Spdy: h2
assets-id.moneyforward.com/bundled/images/apple.6bab38ef.png
200 OK 1.4 kB URL HTTP/2 assets-id.moneyforward.com/bundled/images/apple.6bab38ef.png
IP
File type PNG image data, 96 x 84, 8-bit/color RGBA, non-interlaced\012- data
Hash c61628bea188fc1b56c78491a4c2f0f7
a01c7491267ae12324ea8ca40304ecff26d0e92f
f6bfcd29a6d9cb5e898f4cefb2b9008f0ac67e1c3f05ba8d03f16a7eea4bdbdc
GET /bundled/images/apple.6bab38ef.png HTTP/1.1
Host: assets-id.moneyforward.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://id.moneyforward.com/
Connection: keep-alive
Cookie: _ga=GA1.1.1606014725.1675832366; _gid=GA1.2.323325601.1675832366; _ga_DJMKLB8CPL=GS1.1.1675832365.1.0.1675832365.0.0.0; _ga_ZXLJGFPPZD=GS1.1.1675832365.1.0.1675832365.0.0.0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 1433
last-modified: Mon, 06 Feb 2023 01:24:30 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Wed, 08 Feb 2023 04:58:33 GMT
etag: "c61628bea188fc1b56c78491a4c2f0f7"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: l1_-zI7D401MvRJTB-JICdSHZqHEag8S-yBcnKR5fUemGk_YJg2kjA==
age: 692
X-Firefox-Spdy: h2
assets-id.moneyforward.com/bundled/images/mfid_footer_gray.0964197a.png
200 OK 12 kB URL HTTP/2 assets-id.moneyforward.com/bundled/images/mfid_footer_gray.0964197a.png
IP
File type PNG image data, 480 x 60, 8-bit/color RGBA, non-interlaced\012- data
Hash 5634a03b33f508944a7c60d38ce1cd7a
4ed55c4a9169146794e30e1919e3485df49c869b
7f8d893ac983739d49b94471aeddea80c80d50966c1498a6aec75e8017b53b1f
GET /bundled/images/mfid_footer_gray.0964197a.png HTTP/1.1
Host: assets-id.moneyforward.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://id.moneyforward.com/
Connection: keep-alive
Cookie: _ga=GA1.1.1606014725.1675832366; _gid=GA1.2.323325601.1675832366; _ga_DJMKLB8CPL=GS1.1.1675832365.1.0.1675832365.0.0.0; _ga_ZXLJGFPPZD=GS1.1.1675832365.1.0.1675832365.0.0.0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 12001
last-modified: Mon, 06 Feb 2023 08:06:48 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Wed, 08 Feb 2023 04:58:33 GMT
etag: "5634a03b33f508944a7c60d38ce1cd7a"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: lY4zzgnpaJIuBN3xwKqwjwF0Zz5hHqJAwYyaBO03yarg7OnFYWBJow==
age: 2005
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash dee99a1195cb660d42f04ccd86492d04
37e290f332818063befbcb634ec456d6a44dfa8a
17da8f98d3b2c97c04682ea181fdffa02ca9b9c2137128b202927479664c9e6b
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=136973
Date: Wed, 08 Feb 2023 04:58:33 GMT
Etag: "63e2a006-1d7"
Expires: Thu, 09 Feb 2023 19:01:26 GMT
Last-Modified: Tue, 07 Feb 2023 19:01:26 GMT
Server: nginx
X-Cache: Miss from cloudfront
Via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: A5kEQ0VX_hKZ2Q8VwPhCDOFYcv3zhktSxHtq44790EzBKv1n077ofw==
am.yahoo.co.jp/rt/?p=E7LRA9U43V&label=&ref=https%3A%2F%2Fid.moneyforward.com%2Fsign_in%2Fnew%3Fauth_ui%3Dex%26client_id%3DHewQ4jmfZyO5doFQRiV9nDpBD7tt8OhyWt8YKm1xpjY%26nonce%3D49812b5ce23fb8490444907bb74ef533%26redirect_uri%3Dhttps%253A%252F%252Fexpense.moneyforward.com%252Fauth%252Fmfid%252Fcallback%26response_type%3Dcode%26scope%3Dopenid%2Bemail%26state%3Dac2818ef0ecb2790125910cd436ad0f4&rref=&pt=&item=&cat=&price=&quantity=&r=1675832366.1186516&pvid=gwtid84b5zlldv7blw2&_impl=ytag
403 Forbidden 14 kB URL HTTP/2 am.yahoo.co.jp/rt/?p=E7LRA9U43V&label=&ref=https%3A%2F%2Fid.moneyforward.com%2Fsign_in%2Fnew%3Fauth_ui%3Dex%26client_id%3DHewQ4jmfZyO5doFQRiV9nDpBD7tt8OhyWt8YKm1xpjY%26nonce%3D49812b5ce23fb8490444907bb74ef533%26redirect_uri%3Dhttps%253A%252F%252Fexpense.moneyforward.com%252Fauth%252Fmfid%252Fcallback%26response_type%3Dcode%26scope%3Dopenid%2Bemail%26state%3Dac2818ef0ecb2790125910cd436ad0f4&rref=&pt=&item=&cat=&price=&quantity=&r=1675832366.1186516&pvid=gwtid84b5zlldv7blw2&_impl=ytag
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (486)
Hash e986e7a04549f3bef16fe1bb24e61acd
b3ec35460824fae12cf6342ae42d27597ec94fb7
e8b72fe96bc96ffcfef2cdf8ebb503ac854e5c2997ae389b96d04bf78f478edd
GET /rt/?p=E7LRA9U43V&label=&ref=https%3A%2F%2Fid.moneyforward.com%2Fsign_in%2Fnew%3Fauth_ui%3Dex%26client_id%3DHewQ4jmfZyO5doFQRiV9nDpBD7tt8OhyWt8YKm1xpjY%26nonce%3D49812b5ce23fb8490444907bb74ef533%26redirect_uri%3Dhttps%253A%252F%252Fexpense.moneyforward.com%252Fauth%252Fmfid%252Fcallback%26response_type%3Dcode%26scope%3Dopenid%2Bemail%26state%3Dac2818ef0ecb2790125910cd436ad0f4&rref=&pt=&item=&cat=&price=&quantity=&r=1675832366.1186516&pvid=gwtid84b5zlldv7blw2&_impl=ytag HTTP/1.1
Host: am.yahoo.co.jp
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://id.moneyforward.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 403 Forbidden
date: Wed, 08 Feb 2023 04:58:34 GMT
server: ATS
x-z-chihaya: r=1
x-frame-options: SAMEORIGIN
content-length: 14275
content-type: text/html
X-Firefox-Spdy: h2
px.ladsp.com/pixel?advertiser_id=00012785&su=2&site_url=https%3A%2F%2Fid.moneyforward.com%2Fsign_in%2Fnew%3Fauth_ui%3Dex%26client_id%3DHewQ4jmfZyO5doFQRiV9nDpBD7tt8OhyWt8YKm1xpjY%26nonce%3D49812b5ce23fb8490444907bb74ef533%26redirect_uri%3Dhttps%253A%252F%252Fexpense.moneyforward.com%252Fauth%252Fmfid%252Fcallback%26response_type%3Dcode%26scope%3Dopenid%2Bemail%26state%3Dac2818ef0ecb2790125910cd436ad0f4
302 Found 0 B URL HTTP/2 px.ladsp.com/pixel?advertiser_id=00012785&su=2&site_url=https%3A%2F%2Fid.moneyforward.com%2Fsign_in%2Fnew%3Fauth_ui%3Dex%26client_id%3DHewQ4jmfZyO5doFQRiV9nDpBD7tt8OhyWt8YKm1xpjY%26nonce%3D49812b5ce23fb8490444907bb74ef533%26redirect_uri%3Dhttps%253A%252F%252Fexpense.moneyforward.com%252Fauth%252Fmfid%252Fcallback%26response_type%3Dcode%26scope%3Dopenid%2Bemail%26state%3Dac2818ef0ecb2790125910cd436ad0f4
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pixel?advertiser_id=00012785&su=2&site_url=https%3A%2F%2Fid.moneyforward.com%2Fsign_in%2Fnew%3Fauth_ui%3Dex%26client_id%3DHewQ4jmfZyO5doFQRiV9nDpBD7tt8OhyWt8YKm1xpjY%26nonce%3D49812b5ce23fb8490444907bb74ef533%26redirect_uri%3Dhttps%253A%252F%252Fexpense.moneyforward.com%252Fauth%252Fmfid%252Fcallback%26response_type%3Dcode%26scope%3Dopenid%2Bemail%26state%3Dac2818ef0ecb2790125910cd436ad0f4 HTTP/1.1
Host: px.ladsp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://id.moneyforward.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Wed, 08 Feb 2023 04:58:34 GMT
content-type: text/html;charset=utf-8
content-length: 0
location: https://px.ladsp.com/pixel?cr=true&advertiser_id=00012785&su=2&site_url=https%3A%2F%2Fid.moneyforward.com%2Fsign_in%2Fnew%3Fauth_ui%3Dex%26client_id%3DHewQ4jmfZyO5doFQRiV9nDpBD7tt8OhyWt8YKm1xpjY%26nonce%3D49812b5ce23fb8490444907bb74ef533%26redirect_uri%3Dhttps%253A%252F%252Fexpense.moneyforward.com%252Fauth%252Fmfid%252Fcallback%26response_type%3Dcode%26scope%3Dopenid%2Bemail%26state%3Dac2818ef0ecb2790125910cd436ad0f4
expires: -1
cache-control: private, no-store, no-cache, must-revalidate
pragma: no-cache
p3p: CP="NOI DEVo TAIo PSAo PSDo OUR IND UNI NAV", policyref="http://cd.ladsp.com/xml/w3c/p3p.xml"
set-cookie: cr=1; Domain=.ladsp.com; Expires=Wed, 08-Feb-2023 05:58:34 GMT; Path=/; SameSite=None; Secure
server: Logicad
X-Firefox-Spdy: h2
assets-id.moneyforward.com/bundled/images/microsoft.a4135274.png
200 OK 585 B URL HTTP/2 assets-id.moneyforward.com/bundled/images/microsoft.a4135274.png
IP
File type PNG image data, 96 x 84, 8-bit/color RGBA, non-interlaced\012- data
Hash 0f6de436b8182f92f2bdf4e01c68e18e
a7e80859db1b60c78e8359240f50f6a9ba7c9d49
c5663d95868a6c5b87257e7867e00d12449b4d32b192628ce1e9c68c1d7bd8b0
GET /bundled/images/microsoft.a4135274.png HTTP/1.1
Host: assets-id.moneyforward.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://id.moneyforward.com/
Connection: keep-alive
Cookie: _ga=GA1.1.1606014725.1675832366; _gid=GA1.2.323325601.1675832366; _ga_DJMKLB8CPL=GS1.1.1675832365.1.0.1675832365.0.0.0; _ga_ZXLJGFPPZD=GS1.1.1675832365.1.0.1675832365.0.0.0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 585
last-modified: Tue, 07 Feb 2023 08:47:18 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Wed, 08 Feb 2023 04:58:35 GMT
etag: "0f6de436b8182f92f2bdf4e01c68e18e"
vary: Accept-Encoding
x-cache: RefreshHit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: BR_YZV4pvOwB8Dy6hdso8VqvcBzcag_pGs3enW_QdYliWJv_qtK96w==
X-Firefox-Spdy: h2
assets-id.moneyforward.com/bundled/pc.fe99dd70.css
200 OK 88 kB URL HTTP/2 assets-id.moneyforward.com/bundled/pc.fe99dd70.css
IP
Hash 869281cf9941e3fdaaa8c9f87402827c
15e32fb2689119bf4b7d7e38dd589263b964e608
a05ade059af94e4fdde7729a4fdbbda698844f5cc396986785bd24b7445f0aad
GET /bundled/pc.fe99dd70.css HTTP/1.1
Host: assets-id.moneyforward.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://id.moneyforward.com/
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
content-type: text/css
last-modified: Tue, 07 Feb 2023 08:47:19 GMT
x-amz-server-side-encryption: AES256
server: AmazonS3
content-encoding: gzip
date: Wed, 08 Feb 2023 04:26:56 GMT
etag: W/"9899ba59c10cc9ae9c4c600c69608652"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: cZaAR4GF503SSQzXFndIgFEkrb9Vpd-8iEzRyP92PKsJ6VZduW-URQ==
age: 1897
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash ddbcc8409304b59c7d2faa53ed360fb5
98746db490891a3e5aa21f3dff58438d0c7795d5
b0ffc1ea39f25451920b84f09d650c564bd412bca0e2db72d99e736e385a176d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 04:58:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 471 B IP
Hash c0251492cae08969a77cc1f8b4fa25e5
110161e230f81ac3a954dc1d5114c7401c1ecd93
6483e465b117e6af3950e659d8692acc4bb38f60c7dc312ec8c6824ac5f000ba
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5539
Cache-Control: max-age=125894
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 04:58:34 GMT
Etag: "63e25f1d-1d7"
Expires: Thu, 09 Feb 2023 15:56:48 GMT
Last-Modified: Tue, 07 Feb 2023 14:24:29 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 471
googleads.g.doubleclick.net/pagead/viewthroughconversion/658009491/?random=1675832365646&cv=11&fst=1675832365646&bg=ffffff&guid=ON&async=1>m=45He3260&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fid.moneyforward.com%2Fsign_in%2Fnew%3Fauth_ui%3Dex%26client_id%3DHewQ4jmfZyO5doFQRiV9nDpBD7tt8OhyWt8YKm1xpjY%26nonce%3D49812b5ce23fb8490444907bb74ef533%26redirect_uri%3Dhttps%253A%252F%252Fexpense.moneyforward.com%252Fauth%252Fmfid%252Fcallback%26response_type%3Dcode%26scope%3Dopenid%2Bemail%26state%3Dac2818ef0ecb2790125910cd436ad0f4&tiba=Money%20Forward%20ID&rfmt=3&fmt=4
200 OK 1.1 kB URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/658009491/?random=1675832365646&cv=11&fst=1675832365646&bg=ffffff&guid=ON&async=1>m=45He3260&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fid.moneyforward.com%2Fsign_in%2Fnew%3Fauth_ui%3Dex%26client_id%3DHewQ4jmfZyO5doFQRiV9nDpBD7tt8OhyWt8YKm1xpjY%26nonce%3D49812b5ce23fb8490444907bb74ef533%26redirect_uri%3Dhttps%253A%252F%252Fexpense.moneyforward.com%252Fauth%252Fmfid%252Fcallback%26response_type%3Dcode%26scope%3Dopenid%2Bemail%26state%3Dac2818ef0ecb2790125910cd436ad0f4&tiba=Money%20Forward%20ID&rfmt=3&fmt=4
IP
File type ASCII text, with very long lines (2415), with no line terminators
Hash a8f8450530d731b646f4ad65303f209a
e71cb13e3aaea10a14c4b896b8dc079865ddfc28
c2e12a2787312258af60868cecd0f5b036888d3c5556e6b0d66d93788b2d6973
GET /pagead/viewthroughconversion/658009491/?random=1675832365646&cv=11&fst=1675832365646&bg=ffffff&guid=ON&async=1>m=45He3260&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fid.moneyforward.com%2Fsign_in%2Fnew%3Fauth_ui%3Dex%26client_id%3DHewQ4jmfZyO5doFQRiV9nDpBD7tt8OhyWt8YKm1xpjY%26nonce%3D49812b5ce23fb8490444907bb74ef533%26redirect_uri%3Dhttps%253A%252F%252Fexpense.moneyforward.com%252Fauth%252Fmfid%252Fcallback%26response_type%3Dcode%26scope%3Dopenid%2Bemail%26state%3Dac2818ef0ecb2790125910cd436ad0f4&tiba=Money%20Forward%20ID&rfmt=3&fmt=4 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://id.moneyforward.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 08 Feb 2023 04:58:34 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 1053
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Wed, 08-Feb-2023 05:13:34 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash ddbcc8409304b59c7d2faa53ed360fb5
98746db490891a3e5aa21f3dff58438d0c7795d5
b0ffc1ea39f25451920b84f09d650c564bd412bca0e2db72d99e736e385a176d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 04:58:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
connect.facebook.net/en_US/fbevents.js
200 OK 28 kB URL HTTP/2 connect.facebook.net/en_US/fbevents.js
IP
File type ASCII text, with very long lines (64348)
Hash dd1f85cc598419df61e254e53f9ec1ef
f86c0ee563f5b7a01e1d40b566f2bc184a32380f
c06f52b233c835b03292f39cb847507a03bb971066bf91341b58a580244398c0
GET /en_US/fbevents.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://id.moneyforward.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: application/x-javascript; charset=utf-8
report-to: {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/?minimize=0"}],"group":"coep_report"}
content-security-policy: default-src facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com data: blob: 'self';script-src *.fbcdn.net *.facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com;connect-src *.fbcdn.net *.facebook.net wss://*.fbcdn.net attachment.fbsbx.com blob: 'self';block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy-report-only: require-corp;report-to="coep_report"
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: CvH1KsGzOyFk56bVwFSy/YShHIdcg7BRq0pVdn42wjzSSu4nA6Ovw/j1McKwdxh6KcC4b8FBOEtFjdQbsbBsMg==
priority: u=3,i
content-length: 27843
x-fb-trip-id: 1679558926
date: Wed, 08 Feb 2023 04:58:34 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash c0251492cae08969a77cc1f8b4fa25e5
110161e230f81ac3a954dc1d5114c7401c1ecd93
6483e465b117e6af3950e659d8692acc4bb38f60c7dc312ec8c6824ac5f000ba
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5540
Cache-Control: max-age=125894
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 04:58:35 GMT
Etag: "63e25f1d-1d7"
Expires: Thu, 09 Feb 2023 15:56:49 GMT
Last-Modified: Tue, 07 Feb 2023 14:24:29 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 471
cdn.taboola.com/libtrc/unip/1294131/tfa.js
200 OK 18 kB URL HTTP/2 cdn.taboola.com/libtrc/unip/1294131/tfa.js
IP
File type ASCII text, with very long lines (59750)
Hash de1c695a14e9a1788caef62b465b851a
0bf13540b9d5c55bee64bade1b0183a8bfc98629
8c9d77658933ba0dc1b6c90d13172e1e2b0674db8e0e370d1a84d7847f7773af
GET /libtrc/unip/1294131/tfa.js HTTP/1.1
Host: cdn.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://id.moneyforward.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: 5SPUP5yW9HwXI/CXJ00JLkcTJTJ3js6sdJSlSfBBk9nEjSJHxkgOzH0gRa8Cn0AhVVJsZ0xHO+Y=
x-amz-request-id: BJE0Q8KFQAA4TD7B
x-amz-replication-status: COMPLETED
last-modified: Sun, 05 Feb 2023 11:41:34 GMT
etag: "12cac569d10e1339e3a641a43badf631"
x-amz-version-id: wAi9y0EpqSOWpvIGj_d8brx9KhhJSuVK
content-type: application/javascript; charset=utf-8
server: AmazonS3
content-encoding: gzip
accept-ranges: bytes
date: Wed, 08 Feb 2023 04:58:35 GMT
via: 1.1 varnish
age: 0
x-served-by: cache-bma1669-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1675832315.895651,VS0,VE201
cache-control: private,max-age=14401
vary: Accept-Encoding
abp: 2
content-length: 18375
X-Firefox-Spdy: h2
ssocsp.cybertrust.ne.jp/OcspServer
200 OK 1.5 kB URL HTTP/1.1 ssocsp.cybertrust.ne.jp/OcspServer
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash 072f18628b7f487ede7bc154b0516509
db8958b8449739ac813e3521f139a197d45dd405
ae77b32ea3c1b782503adae634aa8edc28de792613a772c3f1aefa506100ab4e
POST /OcspServer HTTP/1.1
Host: ssocsp.cybertrust.ne.jp
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 87
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 08 Feb 2023 04:58:54 GMT
Content-Type: application/ocsp-response
Content-Length: 1477
Connection: keep-alive
Keep-Alive: timeout=2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 2ccbef7dcf1b1d32956833f5127c1ad5
af220576c82f064130ee7bfa3ea966d033e51707
f6eceec81f5b6deb7005fa9f3855ecb54e4bd6b3159c705decf0921e3a49067d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 04:58:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 5bcb9125c18e4ed3562ceb950dc6eaad
a6c6944804b772de3a487723e3e866c0219de230
94947430d745a6648a2e87f163bf474b4fd4513519360bf4bfecfabc141e5ff1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 04:58:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.no/pagead/1p-user-list/658009491/?random=1675832365646&cv=11&fst=1675828800000&bg=ffffff&guid=ON&async=1>m=45He3260&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fid.moneyforward.com%2Fsign_in%2Fnew%3Fauth_ui%3Dex%26client_id%3DHewQ4jmfZyO5doFQRiV9nDpBD7tt8OhyWt8YKm1xpjY%26nonce%3D49812b5ce23fb8490444907bb74ef533%26redirect_uri%3Dhttps%253A%252F%252Fexpense.moneyforward.com%252Fauth%252Fmfid%252Fcallback%26response_type%3Dcode%26scope%3Dopenid%2Bemail%26state%3Dac2818ef0ecb2790125910cd436ad0f4&tiba=Money%20Forward%20ID&fmt=3&is_vtc=1&random=2222191394&rmt_tld=1&ipr=y
200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-user-list/658009491/?random=1675832365646&cv=11&fst=1675828800000&bg=ffffff&guid=ON&async=1>m=45He3260&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fid.moneyforward.com%2Fsign_in%2Fnew%3Fauth_ui%3Dex%26client_id%3DHewQ4jmfZyO5doFQRiV9nDpBD7tt8OhyWt8YKm1xpjY%26nonce%3D49812b5ce23fb8490444907bb74ef533%26redirect_uri%3Dhttps%253A%252F%252Fexpense.moneyforward.com%252Fauth%252Fmfid%252Fcallback%26response_type%3Dcode%26scope%3Dopenid%2Bemail%26state%3Dac2818ef0ecb2790125910cd436ad0f4&tiba=Money%20Forward%20ID&fmt=3&is_vtc=1&random=2222191394&rmt_tld=1&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/658009491/?random=1675832365646&cv=11&fst=1675828800000&bg=ffffff&guid=ON&async=1>m=45He3260&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fid.moneyforward.com%2Fsign_in%2Fnew%3Fauth_ui%3Dex%26client_id%3DHewQ4jmfZyO5doFQRiV9nDpBD7tt8OhyWt8YKm1xpjY%26nonce%3D49812b5ce23fb8490444907bb74ef533%26redirect_uri%3Dhttps%253A%252F%252Fexpense.moneyforward.com%252Fauth%252Fmfid%252Fcallback%26response_type%3Dcode%26scope%3Dopenid%2Bemail%26state%3Dac2818ef0ecb2790125910cd436ad0f4&tiba=Money%20Forward%20ID&fmt=3&is_vtc=1&random=2222191394&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://id.moneyforward.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 08 Feb 2023 04:58:35 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
assets-id.moneyforward.com/bundled/232.51f00d83.css
200 OK 3.2 kB URL HTTP/2 assets-id.moneyforward.com/bundled/232.51f00d83.css
IP
Hash 60e71054965bec227d362521fc75e0e1
1bbe65a7ca1312c00e00090c86f3db6e9d06369a
517cb684b9622b4ec373d56be027b7b2ac3e1e184ed362786b2cf632dc7f6d09
GET /bundled/232.51f00d83.css HTTP/1.1
Host: assets-id.moneyforward.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://id.moneyforward.com/
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: text/css
last-modified: Tue, 07 Feb 2023 06:30:33 GMT
x-amz-server-side-encryption: AES256
server: AmazonS3
content-encoding: gzip
date: Wed, 08 Feb 2023 04:58:34 GMT
etag: W/"35c909470716b7d4e5820577d9a745d8"
vary: Accept-Encoding
x-cache: RefreshHit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: c__w485scRp-MnAzJzNw8FIUSI4Y4oK9Hd3ohrcLhrhBJf0pdRyfyw==
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 2ccbef7dcf1b1d32956833f5127c1ad5
af220576c82f064130ee7bfa3ea966d033e51707
f6eceec81f5b6deb7005fa9f3855ecb54e4bd6b3159c705decf0921e3a49067d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 04:58:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash ed3f32fef9b843f5511bb882c0a38358
a1a60921f7cb6ab14b645c77bb7d77c20b8201ef
9a4b9e269aa66258c1d9b10fb1af899a3e669de3e244dcfd843a0bce87646f8e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 04:58:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ssocsp.cybertrust.ne.jp/OcspServer
200 OK 1.5 kB URL HTTP/1.1 ssocsp.cybertrust.ne.jp/OcspServer
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash 072f18628b7f487ede7bc154b0516509
db8958b8449739ac813e3521f139a197d45dd405
ae77b32ea3c1b782503adae634aa8edc28de792613a772c3f1aefa506100ab4e
POST /OcspServer HTTP/1.1
Host: ssocsp.cybertrust.ne.jp
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 87
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 08 Feb 2023 04:58:54 GMT
Content-Type: application/ocsp-response
Content-Length: 1477
Connection: keep-alive
Keep-Alive: timeout=2
www.facebook.com/tr/?id=616473498936556&ev=PageView&dl=https%3A%2F%2Fid.moneyforward.com%2Fsign_in%2Fnew%3Fauth_ui%3Dex%26client_id%3DHewQ4jmfZyO5doFQRiV9nDpBD7tt8OhyWt8YKm1xpjY%26nonce%3D49812b5ce23fb8490444907bb74ef533%26redirect_uri%3Dhttps%253A%252F%252Fexpense.moneyforward.com%252Fauth%252Fmfid%252Fcallback%26response_type%3Dcode%26scope%3Dopenid%2Bemail%26state%3Dac2818ef0ecb2790125910cd436ad0f4&rl=&if=false&ts=1675832368172&sw=1280&sh=1024&v=2.9.95&r=stable&ec=0&o=30&cs_est=true&fbp=fb.1.1675832368171.944493571&it=1675832367871&coo=false&rqm=GET
200 OK 0 B URL HTTP/2 www.facebook.com/tr/?id=616473498936556&ev=PageView&dl=https%3A%2F%2Fid.moneyforward.com%2Fsign_in%2Fnew%3Fauth_ui%3Dex%26client_id%3DHewQ4jmfZyO5doFQRiV9nDpBD7tt8OhyWt8YKm1xpjY%26nonce%3D49812b5ce23fb8490444907bb74ef533%26redirect_uri%3Dhttps%253A%252F%252Fexpense.moneyforward.com%252Fauth%252Fmfid%252Fcallback%26response_type%3Dcode%26scope%3Dopenid%2Bemail%26state%3Dac2818ef0ecb2790125910cd436ad0f4&rl=&if=false&ts=1675832368172&sw=1280&sh=1024&v=2.9.95&r=stable&ec=0&o=30&cs_est=true&fbp=fb.1.1675832368171.944493571&it=1675832367871&coo=false&rqm=GET
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=616473498936556&ev=PageView&dl=https%3A%2F%2Fid.moneyforward.com%2Fsign_in%2Fnew%3Fauth_ui%3Dex%26client_id%3DHewQ4jmfZyO5doFQRiV9nDpBD7tt8OhyWt8YKm1xpjY%26nonce%3D49812b5ce23fb8490444907bb74ef533%26redirect_uri%3Dhttps%253A%252F%252Fexpense.moneyforward.com%252Fauth%252Fmfid%252Fcallback%26response_type%3Dcode%26scope%3Dopenid%2Bemail%26state%3Dac2818ef0ecb2790125910cd436ad0f4&rl=&if=false&ts=1675832368172&sw=1280&sh=1024&v=2.9.95&r=stable&ec=0&o=30&cs_est=true&fbp=fb.1.1675832368171.944493571&it=1675832367871&coo=false&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://id.moneyforward.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Wed, 08 Feb 2023 04:58:35 GMT
X-Firefox-Spdy: h2
b97.yahoo.co.jp/pagead/conversion_async.js
403 Forbidden 14 kB URL HTTP/1.1 b97.yahoo.co.jp/pagead/conversion_async.js
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (486)
Hash e986e7a04549f3bef16fe1bb24e61acd
b3ec35460824fae12cf6342ae42d27597ec94fb7
e8b72fe96bc96ffcfef2cdf8ebb503ac854e5c2997ae389b96d04bf78f478edd
GET /pagead/conversion_async.js HTTP/1.1
Host: b97.yahoo.co.jp
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://id.moneyforward.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 403 Forbidden
Date: Wed, 08 Feb 2023 04:58:35 GMT
Connection: close
Server: ATS
X-Z-Chihaya: r=1
X-Frame-Options: SAMEORIGIN
Content-Length: 14275
Content-Type: text/html
as.amanad.adtdp.com/v1/sync?dsp_id=29&uid=ASib5MClxtaJks8AD0xIw1nYSc8AAAGGL2POEQ
200 OK 42 B URL HTTP/2 as.amanad.adtdp.com/v1/sync?dsp_id=29&uid=ASib5MClxtaJks8AD0xIw1nYSc8AAAGGL2POEQ
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /v1/sync?dsp_id=29&uid=ASib5MClxtaJks8AD0xIw1nYSc8AAAGGL2POEQ HTTP/1.1
Host: as.amanad.adtdp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://um.ladsp.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/gif
content-length: 42
access-control-allow-credentials: true
access-control-allow-origin: *
cache-control: no-cache, no-store, must-revalidate
cross-origin-resource-policy: cross-origin
date: Wed, 08 Feb 2023 04:58:35 GMT
expires: Thu, 01 Jan 1970 09:00:00 GMT
pragma: no-cache
set-cookie: uid=675ce86e-6cb6-4549-baec-d8bb47009f36; Path=/; Domain=adtdp.com; Expires=Sat, 08 Feb 2025 04:58:35 GMT; HttpOnly; Secure; SameSite=None
pr=aja; Path=/; Domain=adtdp.com; Expires=Sat, 08 Feb 2025 04:58:35 GMT; HttpOnly; Secure; SameSite=None
uid_legacy=675ce86e-6cb6-4549-baec-d8bb47009f36; Path=/; Domain=adtdp.com; Max-Age=0; HttpOnly
pr_legacy=aja; Path=/; Domain=adtdp.com; Max-Age=0; HttpOnly
x-content-type-options: nosniff
x-xss-protection: 0
x-cache: Miss from cloudfront
via: 1.1 c26999728b9b80253ea8308df470deba.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN56-P2
x-amz-cf-id: 4AclFIfhLmVFeaQxADnShOLj3V1HOZjG3Xo1P13QdfS31QPaIKlNpA==
X-Firefox-Spdy: h2
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash ac56e752b72401f2abbcbf81ae1cb15d
6f85c34a7c5bfa4ce8e5d59b6c92338aafb56967
74bc1db2b5776eb7da313558a86ffdb9f39a89c9a95bdca3cbe3c3bc1fbcac2a
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Wed, 08 Feb 2023 04:58:35 GMT
Content-Type: application/ocsp-response
Content-Length: 1778
Connection: keep-alive
X-Sucuri-ID: 19023
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Tue, 07 Feb 2023 22:25:34 GMT
Expires: Wed, 08 Feb 2023 22:25:34 GMT
ETag: "6f85c34a7c5bfa4ce8e5d59b6c92338aafb56967"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
cm.g.doubleclick.net/pixel?google_nid=sonet&google_cm&google_hm=AZOUwwQc9k0Vks8AD0xIw1nYScA&logicad_uid=AZOUwwQc9k0Vks8AD0xIw1nYScA&svid=02
302 Found 376 B URL HTTP/2 cm.g.doubleclick.net/pixel?google_nid=sonet&google_cm&google_hm=AZOUwwQc9k0Vks8AD0xIw1nYScA&logicad_uid=AZOUwwQc9k0Vks8AD0xIw1nYScA&svid=02
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Hash eb4f7ba5718e4c43bf1f46c31d17f7e3
80cc9c747789bab8634bd438027df34987faf806
601d3e2a5ff788f3cd129ec8c40c13c234c07e3b2a5176c3c428987531e18316
GET /pixel?google_nid=sonet&google_cm&google_hm=AZOUwwQc9k0Vks8AD0xIw1nYScA&logicad_uid=AZOUwwQc9k0Vks8AD0xIw1nYScA&svid=02 HTTP/1.1
Host: cm.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://um.ladsp.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
location: https://cm.g.doubleclick.net/pixel?google_nid=sonet&google_cm=&google_hm=AZOUwwQc9k0Vks8AD0xIw1nYScA&logicad_uid=AZOUwwQc9k0Vks8AD0xIw1nYScA&svid=02&google_tc=
date: Wed, 08 Feb 2023 04:58:36 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
server: HTTP server (unknown)
content-length: 376
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Wed, 08-Feb-2023 05:13:36 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 9ce0c9bc2a6db0953de294199054df32
349a4f1fa3240e2b9d0a2254453ecaa4d78113e5
992aaf5ee320fb9291ced258e2b6fa49170bf1b5d54ee6b74955cf32719ebd93
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1065
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 04:58:36 GMT
Last-Modified: Wed, 08 Feb 2023 04:40:51 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 471
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 2d87e4874ed54faf8169ad70856335bf
b680d731619014d73a6c71b8951a8db52723d3da
352bc053569b76287609f9dc854da2de5fbf09e00262bd5594da0f7536a12ffc
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=114399
Date: Wed, 08 Feb 2023 04:58:36 GMT
Etag: "63e23d7c-1d7"
Expires: Thu, 09 Feb 2023 12:45:15 GMT
Last-Modified: Tue, 07 Feb 2023 12:01:00 GMT
Server: ECS (dcb/7EA3)
X-Cache: Miss from cloudfront
Via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: vN5ySlivXNm93QyOPoNmYdr7vJAoPP3jKRu-P_4a2G6oNaCnR2zWfg==
Age: 2656
cm.g.doubleclick.net/pixel?google_nid=sonet&google_cm=&google_hm=AZOUwwQc9k0Vks8AD0xIw1nYScA&logicad_uid=AZOUwwQc9k0Vks8AD0xIw1nYScA&svid=02&google_tc=
302 Found 301 B URL HTTP/2 cm.g.doubleclick.net/pixel?google_nid=sonet&google_cm=&google_hm=AZOUwwQc9k0Vks8AD0xIw1nYScA&logicad_uid=AZOUwwQc9k0Vks8AD0xIw1nYScA&svid=02&google_tc=
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Hash 0254c087688c3d27e318beede2566214
ef8aa174a3da28ac7d97dde3fc34ce1ce07f2c9f
b86cbd4994ae28f3ff90b00516425404b11d0f88cfbf346f138502166e7a609b
GET /pixel?google_nid=sonet&google_cm=&google_hm=AZOUwwQc9k0Vks8AD0xIw1nYScA&logicad_uid=AZOUwwQc9k0Vks8AD0xIw1nYScA&svid=02&google_tc= HTTP/1.1
Host: cm.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://um.ladsp.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
location: https://px.ladsp.com/match/google?logicad_uid=AZOUwwQc9k0Vks8AD0xIw1nYScA&svid=02&google_error=3
date: Wed, 08 Feb 2023 04:58:36 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
server: HTTP server (unknown)
content-length: 301
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash edcf6ad0e76e5714874137817e53054d
9e9c3040327a0e3908ab3db7c0092f53444fd81b
1c6ac0c4e8633103fc3f76771cb5b7b93a8f847b3dcc167db93460ef5be0915f
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6411
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 04:58:36 GMT
Last-Modified: Wed, 08 Feb 2023 03:11:45 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 471
ib.adnxs.com/setuid?entity=276&code=AXeOanIRYGDbks8AD0xIw1nYSc8AAAGGL2PN5g
307 Redirection 0 B URL HTTP/1.1 ib.adnxs.com/setuid?entity=276&code=AXeOanIRYGDbks8AD0xIw1nYSc8AAAGGL2PN5g
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /setuid?entity=276&code=AXeOanIRYGDbks8AD0xIw1nYSc8AAAGGL2PN5g HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://um.ladsp.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Redirection
Server: nginx/1.21.3
Date: Wed, 08 Feb 2023 04:58:36 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness
Location: https://ib.adnxs.com/bounce?%2Fsetuid%3Fentity%3D276%26code%3DAXeOanIRYGDbks8AD0xIw1nYSc8AAAGGL2PN5g
AN-X-Request-Uuid: 677e9b25-1f27-4c59-8c17-256f911446dd
Set-Cookie: uuid2=844189798539675041; SameSite=None; Path=/; Max-Age=7776000; Expires=Tue, 09-May-2023 04:58:36 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 942.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
pixel.rubiconproject.com/tap.php?v=143202&nid=4016&expires=30&put=AZOUwwQc9k0Vks8AD0xIw1nYSRA
204 No Content 0 B URL HTTP/1.1 pixel.rubiconproject.com/tap.php?v=143202&nid=4016&expires=30&put=AZOUwwQc9k0Vks8AD0xIw1nYSRA
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tap.php?v=143202&nid=4016&expires=30&put=AZOUwwQc9k0Vks8AD0xIw1nYSRA HTTP/1.1
Host: pixel.rubiconproject.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://um.ladsp.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
Pragma: no-cache
Cache-Control: no-cache,no-store,must-revalidate
Expires: 0
X-RPHost: 19600bc21eacf9565125744d917cac10
Content-Type: image/gif
ocsp.sectigo.com/
200 OK 471 B IP
Hash 5eecee8746b80be9e0c125cd1a6fbe62
6bb07051e8d9ef26d47f7df9846f589178d77cbb
adc26481b4eb6697f772d1d79de38769c179963e7e9df9b093d368f031472345
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 08 Feb 2023 04:58:36 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Tue, 07 Feb 2023 13:56:50 GMT
Expires: Tue, 14 Feb 2023 13:56:49 GMT
Etag: "6bb07051e8d9ef26d47f7df9846f589178d77cbb"
Cache-Control: max-age=550092,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7961ca89bc331c02-OSL
status.geotrust.com/
200 OK 471 B IP
Hash 7e3e18b9a87441324f946360b140e69b
83fa06e39de172d50768d1a6c00575f6d8f9e000
d99e773e363bbd17045ea0b6c7ba5d36a3c9c037f28c6bf78fbae42580e4a367
POST / HTTP/1.1
Host: status.geotrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2709
Cache-Control: max-age=124880
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 04:58:36 GMT
Etag: "63e26637-1d7"
Expires: Thu, 09 Feb 2023 15:39:56 GMT
Last-Modified: Tue, 07 Feb 2023 14:54:47 GMT
Server: ECS (ska/F712)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 471 B IP
Hash 1e024eadf6fa90326aab6acb62819de1
a36a6ebf0b84c00ed6d7805da18fae1572f956ab
51b90cf53d7dec5c2a13441497a6ceac73da6d17f42f75b7ef7340f93f1b046f
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4363
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 04:58:36 GMT
Last-Modified: Wed, 08 Feb 2023 03:45:53 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 471
simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwMzEmdGw9MTI5NjAw&piggybackCookie=AXeOanIRYGDbks8AD0xIw1nYSc8AAAGGL2PN5g
200 OK 42 B URL HTTP/2 simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwMzEmdGw9MTI5NjAw&piggybackCookie=AXeOanIRYGDbks8AD0xIw1nYSc8AAAGGL2PN5g
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwMzEmdGw9MTI5NjAw&piggybackCookie=AXeOanIRYGDbks8AD0xIw1nYSc8AAAGGL2PN5g HTTP/1.1
Host: simage2.pubmatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://um.ladsp.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 08 Feb 2023 04:58:35 GMT
content-type: image/gif; charset=utf-8
content-length: 42
set-cookie: KRTBCOOKIE_629=11487-AXeOanIRYGDbks8AD0xIw1nYSc8AAAGGL2PN5g; domain=pubmatic.com; secure; expires=Fri, 10-Mar-2023 04:58:35 GMT; path=/
PugT=1675832315; domain=pubmatic.com; secure; expires=Fri, 10-Mar-2023 04:58:35 GMT; path=/
p3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC"
cache-control: no-store, no-cache, private
X-Firefox-Spdy: h2
x.bidswitch.net/sync?dsp_id=102&expires=365&user_id=AXeOanIRYGDbks8AD0xIw1nYSc8AAAGGL2PN5w
302 Found 0 B URL HTTP/2 x.bidswitch.net/sync?dsp_id=102&expires=365&user_id=AXeOanIRYGDbks8AD0xIw1nYSc8AAAGGL2PN5w
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sync?dsp_id=102&expires=365&user_id=AXeOanIRYGDbks8AD0xIw1nYSc8AAAGGL2PN5w HTTP/1.1
Host: x.bidswitch.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://um.ladsp.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Wed, 08 Feb 2023 04:58:36 GMT
content-length: 0
location: https://x.bidswitch.net/ul_cb/sync?dsp_id=102&expires=365&user_id=AXeOanIRYGDbks8AD0xIw1nYSc8AAAGGL2PN5w
cache-control: no-cache, no-store, must-revalidate
set-cookie: tuuid=a9a7eb80-ca61-4e25-aee8-776a8ab9e20e; path=/; expires=Thu, 08-Feb-2024 04:58:36 GMT; domain=.bidswitch.net; samesite=none; secure
c=1675832316; path=/; expires=Thu, 08-Feb-2024 04:58:36 GMT; domain=.bidswitch.net; samesite=none; secure
tuuid_lu=1675832316; path=/; expires=Thu, 08-Feb-2024 04:58:36 GMT; domain=.bidswitch.net; samesite=none; secure
c=1675832316; path=/; expires=Thu, 08-Feb-2024 04:58:36 GMT; domain=.bidswitch.net; samesite=none; secure
X-Firefox-Spdy: h2
jp-u.openx.net/w/1.0/sd?id=537072451&val=AXeOanIRYGDbks8AD0xIw1nYSc8AAAGGL2PN5g
200 OK 43 B URL HTTP/2 jp-u.openx.net/w/1.0/sd?id=537072451&val=AXeOanIRYGDbks8AD0xIw1nYSc8AAAGGL2PN5g
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash b4491705564909da7f9eaf749dbbfbb1
279315d507855c6a4351e1e2c2f39dd9cd2fccd8
4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
GET /w/1.0/sd?id=537072451&val=AXeOanIRYGDbks8AD0xIw1nYSc8AAAGGL2PN5g HTTP/1.1
Host: jp-u.openx.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://um.ladsp.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept
server: OXGW/0.0.0
pragma: no-cache
p3p: CP="CUR ADM OUR NOR STA NID"
expires: Mon, 26 Jul 1997 05:00:00 GMT
date: Wed, 08 Feb 2023 04:58:36 GMT
content-type: image/gif
content-length: 43
cache-control: private, max-age=0, no-cache
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ups.analytics.yahoo.com/ups/55978/sync?_origin=1&gdpr=0&gdpr_consent=&uid=AXeOanIRYGDbks8AD0xIw1nYSc8AAAGGL2PN-g
302 Found 0 B URL HTTP/2 ups.analytics.yahoo.com/ups/55978/sync?_origin=1&gdpr=0&gdpr_consent=&uid=AXeOanIRYGDbks8AD0xIw1nYSc8AAAGGL2PN-g
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ups/55978/sync?_origin=1&gdpr=0&gdpr_consent=&uid=AXeOanIRYGDbks8AD0xIw1nYSc8AAAGGL2PN-g HTTP/1.1
Host: ups.analytics.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://um.ladsp.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Wed, 08 Feb 2023 04:58:36 GMT
content-length: 0
strict-transport-security: max-age=31536000
p3p: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV
location: https://ups.analytics.yahoo.com/ups/55978/sync?_origin=1&gdpr=0&gdpr_consent=&uid=AXeOanIRYGDbks8AD0xIw1nYSc8AAAGGL2PN-g&verify=true
age: 0
server: ATS/9.1.10.25
set-cookie: A3=d=AQABBPwr42MCELy8njyzV8PGs25UjlSSrv4FEgEBAQF95GPtYwAAAAAA_eMAAA&S=AQAAAiVdYXwHfoOm0FF4W2JmKIs; Expires=Thu, 8 Feb 2024 10:58:36 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
X-Firefox-Spdy: h2
ib.adnxs.com/bounce?%2Fsetuid%3Fentity%3D276%26code%3DAXeOanIRYGDbks8AD0xIw1nYSc8AAAGGL2PN5g
200 OK 43 B URL HTTP/1.1 ib.adnxs.com/bounce?%2Fsetuid%3Fentity%3D276%26code%3DAXeOanIRYGDbks8AD0xIw1nYSc8AAAGGL2PN5g
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 592ebefc7104d681d57852665e9ad514
15cdf8df32aa251dd6dd590a60bf9cf74474e7c5
4b5b6b15c6255109e06720cce42a06d3aead8b7874423d9c52cb0303212c25ef
GET /bounce?%2Fsetuid%3Fentity%3D276%26code%3DAXeOanIRYGDbks8AD0xIw1nYSc8AAAGGL2PN5g HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://um.ladsp.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Wed, 08 Feb 2023 04:58:36 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness
AN-X-Request-Uuid: 0aad63b5-d25e-4566-bdf3-5c6ee2e92f15
Set-Cookie: anj=dTM7k!M4.FF7/.XF']wIg2Il`wUO`T!]tbPl@/]n#hNXKUcZHT[ijOPF5KH==5bw@OvoTqOpMw+CAa$aOvpI@bA]/%NAlTjcs=uYtD^F.!_6-zQEVk`!-jp2_R)y-; SameSite=None; Path=/; Max-Age=7776000; Expires=Tue, 09-May-2023 04:58:36 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 942.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
status.geotrust.com/
200 OK 471 B IP
Hash b22bcf32296c96ca3e2d05f65172b93a
48cce177798256ddc43fb32186c1fdb16a8c2ef4
00fb81fa1dc3c5d84704d0bb0626bcc7c094f5bfd17bddc59ef46c7ee5f28ea9
POST / HTTP/1.1
Host: status.geotrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3279
Cache-Control: max-age=158945
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 04:58:36 GMT
Etag: "63e2e90e-1d7"
Expires: Fri, 10 Feb 2023 01:07:41 GMT
Last-Modified: Wed, 08 Feb 2023 00:13:02 GMT
Server: ECS (ska/F712)
X-Cache: HIT
Content-Length: 471
x.bidswitch.net/ul_cb/sync?dsp_id=102&expires=365&user_id=AXeOanIRYGDbks8AD0xIw1nYSc8AAAGGL2PN5w
200 OK 43 B URL HTTP/2 x.bidswitch.net/ul_cb/sync?dsp_id=102&expires=365&user_id=AXeOanIRYGDbks8AD0xIw1nYSc8AAAGGL2PN5w
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /ul_cb/sync?dsp_id=102&expires=365&user_id=AXeOanIRYGDbks8AD0xIw1nYSc8AAAGGL2PN5w HTTP/1.1
Host: x.bidswitch.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://um.ladsp.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 08 Feb 2023 04:58:36 GMT
content-type: image/gif
content-length: 43
cache-control: no-cache, no-store, must-revalidate
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1d4/lV9qKmPFD8I
200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/lV9qKmPFD8I
IP
Hash 24a13396d4f48d8a429df2200c11b441
e1330942ae345a76f9ee09a66643681772932e60
7d395abf98f8976fe56ca5f58c56fd729006832061667f5513ffa6e64052a165
POST /s/gts1d4/lV9qKmPFD8I HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 04:58:36 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
status.geotrust.com/
200 OK 471 B IP
Hash 7e3e18b9a87441324f946360b140e69b
83fa06e39de172d50768d1a6c00575f6d8f9e000
d99e773e363bbd17045ea0b6c7ba5d36a3c9c037f28c6bf78fbae42580e4a367
POST / HTTP/1.1
Host: status.geotrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2709
Cache-Control: max-age=124880
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 04:58:36 GMT
Etag: "63e26637-1d7"
Expires: Thu, 09 Feb 2023 15:39:56 GMT
Last-Modified: Tue, 07 Feb 2023 14:54:47 GMT
Server: ECS (ska/F712)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.cn/
200 OK 471 B IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Hash e6ce7d3524ddbddee8537aca42d912a6
1991345a9932bc3c6ee251d71a6452c9e19c570d
b39e7ed961ba71a86c51043e449e85b756480b527c21ad44af91d63c8bb43f17
POST / HTTP/1.1
Host: ocsp.digicert.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Tengine
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Date: Wed, 08 Feb 2023 04:58:36 GMT
Last-Modified: Tue, 07 Feb 2023 23:37:15 GMT
ETag: "63e2e0ab-1d7"
Expires: Thu, 09 Feb 2023 23:37:15 GMT
Cache-Control: max-age=153519
Accept-Ranges: bytes
Ali-Swift-Global-Savetime: 1675832316
Via: cache21.l2de2[4,3,200-0,M], cache21.l2de2[5,0], cache2.se1[27,26,200-0,M], cache2.se1[28,0]
X-Cache: MISS TCP_MISS dirn:-2:-2
X-Swift-SaveTime: Wed, 08 Feb 2023 04:58:36 GMT
X-Swift-CacheTime: 0
Timing-Allow-Origin: *
EagleId: 2ff62c9616758323165004521e
ups.analytics.yahoo.com/ups/55978/sync?_origin=1&gdpr=0&gdpr_consent=&uid=AXeOanIRYGDbks8AD0xIw1nYSc8AAAGGL2PN-g&verify=true
204 No Content 0 B URL HTTP/2 ups.analytics.yahoo.com/ups/55978/sync?_origin=1&gdpr=0&gdpr_consent=&uid=AXeOanIRYGDbks8AD0xIw1nYSc8AAAGGL2PN-g&verify=true
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ups/55978/sync?_origin=1&gdpr=0&gdpr_consent=&uid=AXeOanIRYGDbks8AD0xIw1nYSc8AAAGGL2PN-g&verify=true HTTP/1.1
Host: ups.analytics.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://um.ladsp.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Wed, 08 Feb 2023 04:58:36 GMT
p3p: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV
strict-transport-security: max-age=31536000
age: 0
server: ATS/9.1.10.25
set-cookie: A3=d=AQABBPwr42MCEH0VUAzHax8QGhyMbbGxQcwFEgEBAQF95GPtYwAAAAAA_eMAAA&S=AQAAAqLrKv1uIwlLWKfT9wCDp5I; Expires=Thu, 8 Feb 2024 10:58:36 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
X-Firefox-Spdy: h2
sync.search.spotxchange.com/partner?adv_id=8750&img=1&uid=ASib5MClxtaJks8AD0xIw1nYSc8AAAGGL2POCg
302 Found 0 B URL HTTP/1.1 sync.search.spotxchange.com/partner?adv_id=8750&img=1&uid=ASib5MClxtaJks8AD0xIw1nYSc8AAAGGL2POCg
IP
ASN #35220 SpotXchange, INC
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /partner?adv_id=8750&img=1&uid=ASib5MClxtaJks8AD0xIw1nYSc8AAAGGL2POCg HTTP/1.1
Host: sync.search.spotxchange.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://um.ladsp.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx
Date: Wed, 08 Feb 2023 04:58:36 GMT
Content-Type: text/plain
Content-Length: 0
Connection: keep-alive
Set-Cookie: audience=3ed532b1-a76d-11ed-bf5f-1131174c0506; expires=Wed, 08-Mar-2023 04:58:36 GMT; path=/; domain=.spotxchange.com; SameSite=none
Location: /partner?adv_id=8750&img=1&uid=ASib5MClxtaJks8AD0xIw1nYSc8AAAGGL2POCg&__user_check__=1&sync_id=3ed532ff-a76d-11ed-bf5f-1131174c0506
X-fe: 86
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
ocsp.digicert.cn/
200 OK 471 B IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Hash e6ce7d3524ddbddee8537aca42d912a6
1991345a9932bc3c6ee251d71a6452c9e19c570d
b39e7ed961ba71a86c51043e449e85b756480b527c21ad44af91d63c8bb43f17
POST / HTTP/1.1
Host: ocsp.digicert.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Tengine
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Date: Wed, 08 Feb 2023 04:58:36 GMT
Last-Modified: Tue, 07 Feb 2023 23:37:15 GMT
ETag: "63e2e0ab-1d7"
Expires: Thu, 09 Feb 2023 23:37:15 GMT
Cache-Control: max-age=153519
Accept-Ranges: bytes
Ali-Swift-Global-Savetime: 1675832316
Via: cache9.l2de2[188,187,200-0,M], cache9.l2de2[189,0], cache1.se1[211,210,200-0,M], cache1.se1[214,0]
X-Cache: MISS TCP_MISS dirn:-2:-2
X-Swift-SaveTime: Wed, 08 Feb 2023 04:58:36 GMT
X-Swift-CacheTime: 0
Timing-Allow-Origin: *
EagleId: 2ff62c9516758323163577146e
sync.search.spotxchange.com/partner?adv_id=8750&img=1&uid=ASib5MClxtaJks8AD0xIw1nYSc8AAAGGL2POCg&__user_check__=1&sync_id=3ed532ff-a76d-11ed-bf5f-1131174c0506
200 OK 43 B URL HTTP/1.1 sync.search.spotxchange.com/partner?adv_id=8750&img=1&uid=ASib5MClxtaJks8AD0xIw1nYSc8AAAGGL2POCg&__user_check__=1&sync_id=3ed532ff-a76d-11ed-bf5f-1131174c0506
IP
ASN #35220 SpotXchange, INC
File type GIF image data, version 89a, 1 x 1\012- data
Hash 55fade2068e7503eae8d7ddf5eb6bd09
317496a096d6c86486a71d4521994bcd171a6bb3
e586a84d8523747f42e510d78e141015b6424cf67d612854e892a7bcedc8ec9e
GET /partner?adv_id=8750&img=1&uid=ASib5MClxtaJks8AD0xIw1nYSc8AAAGGL2POCg&__user_check__=1&sync_id=3ed532ff-a76d-11ed-bf5f-1131174c0506 HTTP/1.1
Host: sync.search.spotxchange.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://um.ladsp.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 08 Feb 2023 04:58:36 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Set-Cookie: audience=3edb7741-a76d-11ed-9cca-19bfd3920406; expires=Wed, 08-Mar-2023 04:58:36 GMT; path=/; domain=.spotxchange.com
x-spotx-halt-type: Audience DSP sync endpoint was unable to cookie the audience.
X-fe: 52
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
ssl.socdm.com/rtb/sync?proto=adgen&dspid=12
200 OK 43 B URL HTTP/1.1 ssl.socdm.com/rtb/sync?proto=adgen&dspid=12
IP
ASN #4694 IDC Frontier Inc.
File type GIF image data, version 89a, 1 x 1\012- data
Hash 6d22e4f2d2057c6e8d6fab098e76e80f
b80b11203d97fe01c5597ca3be70406ea48f5709
afe0dcfca292a0fae8bce08a48c14d3e59c9d82c6052ab6d48a22ecc6c48f277
GET /rtb/sync?proto=adgen&dspid=12 HTTP/1.1
Host: ssl.socdm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://um.ladsp.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 08 Feb 2023 04:58:36 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Cache-Control: private
P3P: CP="See also http://www.scaleout.jp/privacy/"
X-SO-Ads-Time: 1
X-SO-HostName: m-ad1012.dc4p.scaleout.jp
X-SO-LB-Hostname: a-tgng40006.dc2p.scaleout.jp
X-SO-LB-Data: {"ban":false,"clean_query":"\/rtb\/sync?dspid=12&proto=adgen","cluster_id":0,"gdpr":true,"ipv4":"0.0.0.0","key":"Y.Mr-MCo5soAANihpQ4AAAAA","privacy_sensitive":true,"uid":"","upstream_id":"m-ad1012"}
X-SO-Key: Y.Mr-MCo5soAANihpQ4AAAAA
X-SO-IP: 91.90.42.154
X-SO-Cluster-ID: 0
X-SO-Upstream-ID: m-ad1012
px.ladsp.com/match/google?logicad_uid=AZOUwwQc9k0Vks8AD0xIw1nYScA&svid=02&google_error=3
200 OK 43 B URL HTTP/2 px.ladsp.com/match/google?logicad_uid=AZOUwwQc9k0Vks8AD0xIw1nYScA&svid=02&google_error=3
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /match/google?logicad_uid=AZOUwwQc9k0Vks8AD0xIw1nYScA&svid=02&google_error=3 HTTP/1.1
Host: px.ladsp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://um.ladsp.com/
Connection: keep-alive
Cookie: cr=1; smn_uid=E7u9JQHjispvssHzq8m7Gg9MSMNZ2Ek; lum=COabj_viMBIGCID6ARAYEgUIARCQARIFCBkQwAESBAgNEHgSAggOEgIIKhIFCAMQ8AESAggLEgIIDxICCBASAggREgIIExICCBQSAggbEgIIHBICCB4SAgggEgIIIhICCCMSBQgKEJAN
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 08 Feb 2023 04:58:36 GMT
content-type: image/gif
content-length: 43
expires: -1
cache-control: private, no-store, no-cache, must-revalidate
pragma: no-cache
p3p: CP="NOI DEVo TAIo PSAo PSDo OUR IND UNI NAV", policyref="http://cd.ladsp.com/xml/w3c/p3p.xml"
set-cookie: smn_uid=E7u9JQHjispvssHzq8m7Gg9MSMNZ2Ek; Domain=.ladsp.com; Expires=Fri, 07-Feb-2025 04:58:36 GMT; Path=/; SameSite=None; Secure
server: Logicad
X-Firefox-Spdy: h2
trc-events.taboola.com/1294131/log/3/unip?en=pre_d_eng_tb&tos=1576&scd=0&ssd=1&est=1675832367979&ver=36&isls=true&src=i&invt=1500&msa=238&rv=1&tim=1675832369555&vi=1675832367973&ri=efc33a86fc0b4304c6eb82ffa96763dc&ref=null&cv=20230205-12-RELEASE&item-url=https%3A%2F%2Fid.moneyforward.com%2Fsign_in%2Fnew%3Fauth_ui%3Dex%26client_id%3DHewQ4jmfZyO5doFQRiV9nDpBD7tt8OhyWt8YKm1xpjY%26nonce%3D49812b5ce23fb8490444907bb74ef533%26redirect_uri%3Dhttps%253A%252F%252Fexpense.moneyforward.com%252Fauth%252Fmfid%252Fcallback%26response_type%3Dcode%26scope%3Dopenid%2Bemail%26state%3Dac2818ef0ecb2790125910cd436ad0f4
204 No Content 0 B URL HTTP/2 trc-events.taboola.com/1294131/log/3/unip?en=pre_d_eng_tb&tos=1576&scd=0&ssd=1&est=1675832367979&ver=36&isls=true&src=i&invt=1500&msa=238&rv=1&tim=1675832369555&vi=1675832367973&ri=efc33a86fc0b4304c6eb82ffa96763dc&ref=null&cv=20230205-12-RELEASE&item-url=https%3A%2F%2Fid.moneyforward.com%2Fsign_in%2Fnew%3Fauth_ui%3Dex%26client_id%3DHewQ4jmfZyO5doFQRiV9nDpBD7tt8OhyWt8YKm1xpjY%26nonce%3D49812b5ce23fb8490444907bb74ef533%26redirect_uri%3Dhttps%253A%252F%252Fexpense.moneyforward.com%252Fauth%252Fmfid%252Fcallback%26response_type%3Dcode%26scope%3Dopenid%2Bemail%26state%3Dac2818ef0ecb2790125910cd436ad0f4
IP
ASN #200478 Taboola.com ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /1294131/log/3/unip?en=pre_d_eng_tb&tos=1576&scd=0&ssd=1&est=1675832367979&ver=36&isls=true&src=i&invt=1500&msa=238&rv=1&tim=1675832369555&vi=1675832367973&ri=efc33a86fc0b4304c6eb82ffa96763dc&ref=null&cv=20230205-12-RELEASE&item-url=https%3A%2F%2Fid.moneyforward.com%2Fsign_in%2Fnew%3Fauth_ui%3Dex%26client_id%3DHewQ4jmfZyO5doFQRiV9nDpBD7tt8OhyWt8YKm1xpjY%26nonce%3D49812b5ce23fb8490444907bb74ef533%26redirect_uri%3Dhttps%253A%252F%252Fexpense.moneyforward.com%252Fauth%252Fmfid%252Fcallback%26response_type%3Dcode%26scope%3Dopenid%2Bemail%26state%3Dac2818ef0ecb2790125910cd436ad0f4 HTTP/1.1
Host: trc-events.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://id.moneyforward.com/
Origin: https://id.moneyforward.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Wed, 08 Feb 2023 04:58:36 GMT
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: https://id.moneyforward.com
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
X-Firefox-Spdy: h2
sp.gmossp-sp.jp/ads/sync.ad?dsp=logicad&dspuid=ASib5MClxtaJks8AD0xIw1nYSc8AAAGGL2POBw
403 Forbidden 199 B URL HTTP/2 sp.gmossp-sp.jp/ads/sync.ad?dsp=logicad&dspuid=ASib5MClxtaJks8AD0xIw1nYSc8AAAGGL2POBw
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash bb8f534fbff5ee61a95af9c4740ae043
832e403d42aac1fec93e4f602338544d3fd2e4f1
5b13fb5957b84ef7bb9d0b6cd509c947ff6a37d67efdac2b896ddd3b908aad10
GET /ads/sync.ad?dsp=logicad&dspuid=ASib5MClxtaJks8AD0xIw1nYSc8AAAGGL2POBw HTTP/1.1
Host: sp.gmossp-sp.jp
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://um.ladsp.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 403 Forbidden
content-type: text/html; charset=iso-8859-1
x-cloud-trace-context: b0af5dd4fbe8ae718533b10935aea9ef
date: Wed, 08 Feb 2023 04:58:36 GMT
server: Google Frontend
content-length: 199
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
px.ladsp.com/pixel?cr=true&advertiser_id=00012785&su=2&site_url=https%3A%2F%2Fid.moneyforward.com%2Fsign_in%2Fnew%3Fauth_ui%3Dex%26client_id%3DHewQ4jmfZyO5doFQRiV9nDpBD7tt8OhyWt8YKm1xpjY%26nonce%3D49812b5ce23fb8490444907bb74ef533%26redirect_uri%3Dhttps%253A%252F%252Fexpense.moneyforward.com%252Fauth%252Fmfid%252Fcallback%26response_type%3Dcode%26scope%3Dopenid%2Bemail%26state%3Dac2818ef0ecb2790125910cd436ad0f4
200 OK 0 B URL HTTP/2 px.ladsp.com/pixel?cr=true&advertiser_id=00012785&su=2&site_url=https%3A%2F%2Fid.moneyforward.com%2Fsign_in%2Fnew%3Fauth_ui%3Dex%26client_id%3DHewQ4jmfZyO5doFQRiV9nDpBD7tt8OhyWt8YKm1xpjY%26nonce%3D49812b5ce23fb8490444907bb74ef533%26redirect_uri%3Dhttps%253A%252F%252Fexpense.moneyforward.com%252Fauth%252Fmfid%252Fcallback%26response_type%3Dcode%26scope%3Dopenid%2Bemail%26state%3Dac2818ef0ecb2790125910cd436ad0f4
IP
GET /pixel?cr=true&advertiser_id=00012785&su=2&site_url=https%3A%2F%2Fid.moneyforward.com%2Fsign_in%2Fnew%3Fauth_ui%3Dex%26client_id%3DHewQ4jmfZyO5doFQRiV9nDpBD7tt8OhyWt8YKm1xpjY%26nonce%3D49812b5ce23fb8490444907bb74ef533%26redirect_uri%3Dhttps%253A%252F%252Fexpense.moneyforward.com%252Fauth%252Fmfid%252Fcallback%26response_type%3Dcode%26scope%3Dopenid%2Bemail%26state%3Dac2818ef0ecb2790125910cd436ad0f4 HTTP/1.1
Host: px.ladsp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://id.moneyforward.com/
Connection: keep-alive
Cookie: cr=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 08 Feb 2023 04:58:34 GMT
content-type: text/javascript;charset=utf-8
expires: -1
cache-control: private, no-store, no-cache, must-revalidate
pragma: no-cache
p3p: CP="NOI DEVo TAIo PSAo PSDo OUR IND UNI NAV", policyref="http://cd.ladsp.com/xml/w3c/p3p.xml"
set-cookie: smn_uid=E7u9JQHjispvssHzq8m7Gg9MSMNZ2Ek; Domain=.ladsp.com; Expires=Fri, 07-Feb-2025 04:58:34 GMT; Path=/; SameSite=None; Secure
server: Logicad
X-Firefox-Spdy: h2
trc.taboola.com/1294131/trc/3/json?tim=1675832367982&data=%7B%22id%22%3A885%2C%22ii%22%3A%22%2Fsign_in%2Fnew%22%2C%22it%22%3A%22video%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22vi%22%3A1675832367973%2C%22cv%22%3A%2220230205-12-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fid.moneyforward.com%2Fsign_in%2Fnew%3Fauth_ui%3Dex%26client_id%3DHewQ4jmfZyO5doFQRiV9nDpBD7tt8OhyWt8YKm1xpjY%26nonce%3D49812b5ce23fb8490444907bb74ef533%26redirect_uri%3Dhttps%253A%252F%252Fexpense.moneyforward.com%252Fauth%252Fmfid%252Fcallback%26response_type%3Dcode%26scope%3Dopenid%2Bemail%26state%3Dac2818ef0ecb2790125910cd436ad0f4%22%2C%22e%22%3Anull%2C%22cb%22%3A%22TFASC.trkCallback%22%2C%22qs%22%3A%22%3Fauth_ui%3Dex%26client_id%3DHewQ4jmfZyO5doFQRiV9nDpBD7tt8OhyWt8YKm1xpjY%26nonce%3D49812b5ce23fb8490444907bb74ef533%26redirect_uri%3Dhttps%253A%252F%252Fexpense.moneyforward.com%252Fauth%252Fmfid%252Fcallback%26response_type%3Dcode%26scope%3Dopenid%2Bemail%26state%3Dac2818ef0ecb2790125910cd436ad0f4%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Dmoneyforward-sc%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1675832367982%2C%22ref%22%3Anull%2C%22item-url%22%3A%22https%3A%2F%2Fid.moneyforward.com%2Fsign_in%2Fnew%3Fauth_ui%3Dex%26client_id%3DHewQ4jmfZyO5doFQRiV9nDpBD7tt8OhyWt8YKm1xpjY%26nonce%3D49812b5ce23fb8490444907bb74ef533%26redirect_uri%3Dhttps%253A%252F%252Fexpense.moneyforward.com%252Fauth%252Fmfid%252Fcallback%26response_type%3Dcode%26scope%3Dopenid%2Bemail%26state%3Dac2818ef0ecb2790125910cd436ad0f4%22%2C%22tos%22%3A3%2C%22ssd%22%3A1%2C%22scd%22%3A0%2C%22supv%22%3Atrue%7D%7D&pubit=i
200 OK 0 B URL HTTP/2 trc.taboola.com/1294131/trc/3/json?tim=1675832367982&data=%7B%22id%22%3A885%2C%22ii%22%3A%22%2Fsign_in%2Fnew%22%2C%22it%22%3A%22video%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22vi%22%3A1675832367973%2C%22cv%22%3A%2220230205-12-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fid.moneyforward.com%2Fsign_in%2Fnew%3Fauth_ui%3Dex%26client_id%3DHewQ4jmfZyO5doFQRiV9nDpBD7tt8OhyWt8YKm1xpjY%26nonce%3D49812b5ce23fb8490444907bb74ef533%26redirect_uri%3Dhttps%253A%252F%252Fexpense.moneyforward.com%252Fauth%252Fmfid%252Fcallback%26response_type%3Dcode%26scope%3Dopenid%2Bemail%26state%3Dac2818ef0ecb2790125910cd436ad0f4%22%2C%22e%22%3Anull%2C%22cb%22%3A%22TFASC.trkCallback%22%2C%22qs%22%3A%22%3Fauth_ui%3Dex%26client_id%3DHewQ4jmfZyO5doFQRiV9nDpBD7tt8OhyWt8YKm1xpjY%26nonce%3D49812b5ce23fb8490444907bb74ef533%26redirect_uri%3Dhttps%253A%252F%252Fexpense.moneyforward.com%252Fauth%252Fmfid%252Fcallback%26response_type%3Dcode%26scope%3Dopenid%2Bemail%26state%3Dac2818ef0ecb2790125910cd436ad0f4%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Dmoneyforward-sc%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1675832367982%2C%22ref%22%3Anull%2C%22item-url%22%3A%22https%3A%2F%2Fid.moneyforward.com%2Fsign_in%2Fnew%3Fauth_ui%3Dex%26client_id%3DHewQ4jmfZyO5doFQRiV9nDpBD7tt8OhyWt8YKm1xpjY%26nonce%3D49812b5ce23fb8490444907bb74ef533%26redirect_uri%3Dhttps%253A%252F%252Fexpense.moneyforward.com%252Fauth%252Fmfid%252Fcallback%26response_type%3Dcode%26scope%3Dopenid%2Bemail%26state%3Dac2818ef0ecb2790125910cd436ad0f4%22%2C%22tos%22%3A3%2C%22ssd%22%3A1%2C%22scd%22%3A0%2C%22supv%22%3Atrue%7D%7D&pubit=i
IP
GET /1294131/trc/3/json?tim=1675832367982&data=%7B%22id%22%3A885%2C%22ii%22%3A%22%2Fsign_in%2Fnew%22%2C%22it%22%3A%22video%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22vi%22%3A1675832367973%2C%22cv%22%3A%2220230205-12-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fid.moneyforward.com%2Fsign_in%2Fnew%3Fauth_ui%3Dex%26client_id%3DHewQ4jmfZyO5doFQRiV9nDpBD7tt8OhyWt8YKm1xpjY%26nonce%3D49812b5ce23fb8490444907bb74ef533%26redirect_uri%3Dhttps%253A%252F%252Fexpense.moneyforward.com%252Fauth%252Fmfid%252Fcallback%26response_type%3Dcode%26scope%3Dopenid%2Bemail%26state%3Dac2818ef0ecb2790125910cd436ad0f4%22%2C%22e%22%3Anull%2C%22cb%22%3A%22TFASC.trkCallback%22%2C%22qs%22%3A%22%3Fauth_ui%3Dex%26client_id%3DHewQ4jmfZyO5doFQRiV9nDpBD7tt8OhyWt8YKm1xpjY%26nonce%3D49812b5ce23fb8490444907bb74ef533%26redirect_uri%3Dhttps%253A%252F%252Fexpense.moneyforward.com%252Fauth%252Fmfid%252Fcallback%26response_type%3Dcode%26scope%3Dopenid%2Bemail%26state%3Dac2818ef0ecb2790125910cd436ad0f4%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Dmoneyforward-sc%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1675832367982%2C%22ref%22%3Anull%2C%22item-url%22%3A%22https%3A%2F%2Fid.moneyforward.com%2Fsign_in%2Fnew%3Fauth_ui%3Dex%26client_id%3DHewQ4jmfZyO5doFQRiV9nDpBD7tt8OhyWt8YKm1xpjY%26nonce%3D49812b5ce23fb8490444907bb74ef533%26redirect_uri%3Dhttps%253A%252F%252Fexpense.moneyforward.com%252Fauth%252Fmfid%252Fcallback%26response_type%3Dcode%26scope%3Dopenid%2Bemail%26state%3Dac2818ef0ecb2790125910cd436ad0f4%22%2C%22tos%22%3A3%2C%22ssd%22%3A1%2C%22scd%22%3A0%2C%22supv%22%3Atrue%7D%7D&pubit=i HTTP/1.1
Host: trc.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://id.moneyforward.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: *
access-control-allow-credentials: true
content-encoding: gzip
accept-ranges: bytes
date: Wed, 08 Feb 2023 04:58:35 GMT
via: 1.1 varnish
x-served-by: cache-bma1669-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1675832315.232985,VS0,VE116
vary: Accept-Encoding
x-vcl-time-ms: 116
X-Firefox-Spdy: h2
sync.taboola.com/sg/sonet-mediartb-network/1/rtb-h/?taboola_hm=ASib5MClxtaJks8AD0xIw1nYSc8AAAGGL2POAA
200 OK 0 B URL HTTP/2 sync.taboola.com/sg/sonet-mediartb-network/1/rtb-h/?taboola_hm=ASib5MClxtaJks8AD0xIw1nYSc8AAAGGL2POAA
IP
ASN #200478 Taboola.com ltd
GET /sg/sonet-mediartb-network/1/rtb-h/?taboola_hm=ASib5MClxtaJks8AD0xIw1nYSc8AAAGGL2POAA HTTP/1.1
Host: sync.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://um.ladsp.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 08 Feb 2023 04:58:36 GMT
x-fastly-to-nlb-rtt: 22785
access-control-allow-credentials: true
X-Firefox-Spdy: h2
um.ladsp.com/match/iframe?pids=1_3_10_11_13_14_15_16_17_19_20_25_27_28_30_32_34_35_32000_42&ts=1675832314607&svid=49&stu=ko1vsWIeDKi3dBPn1KTowswhvYpge3SOF8lRnZIXcYKjbUxBAXH7c3rGp4fs38KmC4e7gfzgcC6pOQCEs2PZ1SNNIFmqoYjaFF8F5lMLert0DmjO2pMhbofQZh4KfB1qqr-uYtmyl49ryGIQu1FSgMp_nb25RgxomUBYfL_Z5Mu8IsDF9YquMowyTCCjLmTAi5NfpMswixzNCfC3Y2gYBzGArD9RbyIkha7poONIOJr0XgExOlwwE-_A3cgblAAbu2zfuIFiuoAP0ogtWlVTYBm2xgtHNgEMQls7s5EBiNZm9wWPzhbChFXcxxX0OcceKxHD0VV2vd-MVEPHbLZgQbcUtX4H0M_XpW28eCZR9i27NsRetxdT0frG5BaUwrmkXXFf4qG24qhk3uNSHZ3iKg
200 OK 0 B URL HTTP/2 um.ladsp.com/match/iframe?pids=1_3_10_11_13_14_15_16_17_19_20_25_27_28_30_32_34_35_32000_42&ts=1675832314607&svid=49&stu=ko1vsWIeDKi3dBPn1KTowswhvYpge3SOF8lRnZIXcYKjbUxBAXH7c3rGp4fs38KmC4e7gfzgcC6pOQCEs2PZ1SNNIFmqoYjaFF8F5lMLert0DmjO2pMhbofQZh4KfB1qqr-uYtmyl49ryGIQu1FSgMp_nb25RgxomUBYfL_Z5Mu8IsDF9YquMowyTCCjLmTAi5NfpMswixzNCfC3Y2gYBzGArD9RbyIkha7poONIOJr0XgExOlwwE-_A3cgblAAbu2zfuIFiuoAP0ogtWlVTYBm2xgtHNgEMQls7s5EBiNZm9wWPzhbChFXcxxX0OcceKxHD0VV2vd-MVEPHbLZgQbcUtX4H0M_XpW28eCZR9i27NsRetxdT0frG5BaUwrmkXXFf4qG24qhk3uNSHZ3iKg
IP
GET /match/iframe?pids=1_3_10_11_13_14_15_16_17_19_20_25_27_28_30_32_34_35_32000_42&ts=1675832314607&svid=49&stu=ko1vsWIeDKi3dBPn1KTowswhvYpge3SOF8lRnZIXcYKjbUxBAXH7c3rGp4fs38KmC4e7gfzgcC6pOQCEs2PZ1SNNIFmqoYjaFF8F5lMLert0DmjO2pMhbofQZh4KfB1qqr-uYtmyl49ryGIQu1FSgMp_nb25RgxomUBYfL_Z5Mu8IsDF9YquMowyTCCjLmTAi5NfpMswixzNCfC3Y2gYBzGArD9RbyIkha7poONIOJr0XgExOlwwE-_A3cgblAAbu2zfuIFiuoAP0ogtWlVTYBm2xgtHNgEMQls7s5EBiNZm9wWPzhbChFXcxxX0OcceKxHD0VV2vd-MVEPHbLZgQbcUtX4H0M_XpW28eCZR9i27NsRetxdT0frG5BaUwrmkXXFf4qG24qhk3uNSHZ3iKg HTTP/1.1
Host: um.ladsp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://id.moneyforward.com/
Connection: keep-alive
Cookie: cr=1; smn_uid=E7u9JQHjispvssHzq8m7Gg9MSMNZ2Ek
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html;charset=utf-8
date: Wed, 08 Feb 2023 04:58:35 GMT
expires: -1
cache-control: private, no-store, no-cache, must-revalidate
pragma: no-cache
p3p: CP="NOI DEVo TAIo PSAo PSDo OUR IND UNI NAV", policyref="http://cd.ladsp.com/xml/w3c/p3p.xml"
set-cookie: lum=COabj_viMBIGCID6ARAYEgUIARCQARIFCBkQwAESBAgNEHgSAggOEgIIKhIFCAMQ8AESAggLEgIIDxICCBASAggREgIIExICCBQSAggbEgIIHBICCB4SAgggEgIIIhICCCMSBQgKEJAN; Domain=.ladsp.com; Expires=Fri, 07-Feb-2025 04:58:35 GMT; Path=/; SameSite=None; Secure
server: Logicad
x-cache: Miss from cloudfront
via: 1.1 8ac66e1d6983a0f44cf391b1ec3b1cce.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: GYJh7FVNcil9xtJLsHxj9x16r6FvXlYLj61pNSR86fSdAwvHnoOk1Q==
X-Firefox-Spdy: h2
157.7.110.154
23.36.76.226
172.64.155.188
213.19.162.80
141.226.228.48
47.246.44.205
185.89.210.212
0.0.0.0