www.rindegastos.com/document/expenseReport?e=3780990&k=159571-16182-63dc11e4d9091
301 Moved Permanently 167 B URL HTTP/1.1 www.rindegastos.com/document/expenseReport?e=3780990&k=159571-16182-63dc11e4d9091
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f5d40b7259645010f9a248858ad14178
b3051d17a6ec8c9e166bf09a62b48261ab86957b
7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
GET /document/expenseReport?e=3780990&k=159571-16182-63dc11e4d9091 HTTP/1.1
Host: www.rindegastos.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Wed, 22 Feb 2023 20:57:59 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://www.rindegastos.com/document/expenseReport?e=3780990&k=159571-16182-63dc11e4d9091
X-Cache: Redirect from cloudfront
Via: 1.1 fc5e625db631bc657fc73f189d53fa14.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: Szh9vgFndA8c8wyKdlvIp8VG_pP1OJUKunY-Q0gu1oxpVFcwp5b7yg==
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 378d97dfed95fd35bca9d8699e56151a
46f96f400be9e5208ccbad84540a7855c9994bef
b86917bafe1d5d6f762dbbe5af0b906ce61e505539b5fe2a1e49b09d500a90c6
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B86917BAFE1D5D6F762DBBE5AF0B906CE61E505539B5FE2A1E49B09D500A90C6"
Last-Modified: Mon, 20 Feb 2023 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5091
Expires: Wed, 22 Feb 2023 22:22:50 GMT
Date: Wed, 22 Feb 2023 20:57:59 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6eb0a77aa4a20639a06d9621742007c2
d2d03beeb111049117b70d5f3dff3698a671ef8a
62c2da0800bf8efb6bb985b2eb046fa863e0b394681fb2ab187a9c4836fbd320
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "62C2DA0800BF8EFB6BB985B2EB046FA863E0B394681FB2AB187A9C4836FBD320"
Last-Modified: Wed, 22 Feb 2023 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15950
Expires: Thu, 23 Feb 2023 01:23:49 GMT
Date: Wed, 22 Feb 2023 20:57:59 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash ff250d3ef3fa45322bf05039a0122a9f
b3e7a2c383bce1bab807dbe1a03c375258b51f1d
d07f109a96e0ae6ec7b1d46ce8761b3f06fe845769ce65d69e053dd40aa561ba
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Backoff, Content-Type, Retry-After
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Wed, 22 Feb 2023 20:53:51 GMT
content-type: application/json
age: 248
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7fb59e5d3cdf08b94e5f41fdeb9aec6c
ff644039db3b9f74d7e2fab10f93581bea10614a
861573a00d75364e15783c5e448c4f8b4da48b38d9beba3ebd33a87f993489a5
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "861573A00D75364E15783C5E448C4F8B4DA48B38D9BEBA3EBD33A87F993489A5"
Last-Modified: Wed, 22 Feb 2023 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13386
Expires: Thu, 23 Feb 2023 00:41:05 GMT
Date: Wed, 22 Feb 2023 20:57:59 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-09-20-28-26.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-09-20-28-26.chain
IP
File type PEM certificate\012- , ASCII text
Hash b5ba6334e73496995e3e3a9ecd0eb323
ad80d3b7718c28364e8c2004fb38a13a1747e462
aa5abb52515c6383c014aadb63a86c9f798ad64de53c0218616c1fc6d424d2e2
GET /chains/remote-settings.content-signature.mozilla.org-2023-04-09-20-28-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: H3gmwHQo4PmdYPILOp27qqebSMb398vWLaCTDgSGu8aAqX7/79UyYBLFrYKd2d7GP9TjANdzuh8=
x-amz-request-id: G5QQ7QXPF9GTG1KA
x-amz-server-side-encryption: AES256
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Wed, 22 Feb 2023 20:48:46 GMT
age: 553
last-modified: Sat, 18 Feb 2023 20:28:27 GMT
etag: "b5ba6334e73496995e3e3a9ecd0eb323"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 22 Feb 2023 20:57:59 GMT
content-type: application/json
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.r2m02.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.r2m02.amazontrust.com/
IP
Hash 6677ca95c9540f70cbe7dc8fb423fde7
cb11a9876170673a9be0c25d8b31825b29109ae0
8f7772b87bd4e78aebbdacdc0fe93521feb97379e6009725682b26c4451c22a3
POST / HTTP/1.1
Host: ocsp.r2m02.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=106144
Date: Wed, 22 Feb 2023 20:57:59 GMT
Etag: "63f57d77-1d7"
Expires: Fri, 24 Feb 2023 02:27:03 GMT
Last-Modified: Wed, 22 Feb 2023 02:27:03 GMT
Server: nginx
X-Cache: Miss from cloudfront
Via: 1.1 0e39dca74306d7aab723ed3d73dbfbb4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: PgKXypV43BAuR5pTeFvV2qeDtusEqZFyvZflL0_KZja17OToETbN_g==
www.rindegastos.com/runtime.1b7bd44580709779.js
200 OK 2.1 kB URL HTTP/2 www.rindegastos.com/runtime.1b7bd44580709779.js
IP
Hash a9ff3d8282fd98e9a4f273e02202b818
1a237ccc2feec3ee30c47be1457e84be141d2b8f
f65318d429caac9a47ee1450564891db740cd01a98ba3b687822b94f3d66f910
GET /runtime.1b7bd44580709779.js HTTP/1.1
Host: www.rindegastos.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rindegastos.com/document/expenseReport?e=3780990&k=159571-16182-63dc11e4d9091
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Wed, 22 Feb 2023 20:57:53 GMT
last-modified: Wed, 15 Feb 2023 17:46:28 GMT
etag: W/"82d01ad6869ed1f00c07aba352063736"
x-amz-server-side-encryption: AES256
server: AmazonS3
cache-control: public, max-age=0, s-maxage=600
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: _fb8F44dlri1otaK5MFSpeScgPqqWV9yVcbxkv6OR9BNpeWccsb0fQ==
age: 7
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash be0ff97444ab9ff002dc0c3a855b6867
6b835c9cfa35b65f809ab3e8c150425048749e02
ed2c6e805d226e16f32c4a08bbe9f7171bf271fabd4d66a67efe197db6fe5407
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 22 Feb 2023 20:58:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/nunito/v25/XRXV3I6Li01BKofINeaBTMnFcQ.woff2
200 OK 36 kB URL HTTP/2 fonts.gstatic.com/s/nunito/v25/XRXV3I6Li01BKofINeaBTMnFcQ.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 35848, version 1.0\012- data
Hash 12bb96876fc38b93380a6cc76267bd0b
8a71285da71a177d92bb605fb89825f199a81b5b
7da5e32922590d2ca6057bd7f2882269bdbcce1f53d3b622cfa1b7fcb95cca5b
GET /s/nunito/v25/XRXV3I6Li01BKofINeaBTMnFcQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.rindegastos.com
Connection: keep-alive
Referer: https://www.rindegastos.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 35848
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 17 Feb 2023 09:38:57 GMT
expires: Sat, 17 Feb 2024 09:38:57 GMT
cache-control: public, max-age=31536000
age: 472743
last-modified: Mon, 18 Jul 2022 19:34:50 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Last-Modified, Alert, Backoff, Content-Type, Pragma, Expires, Cache-Control, Retry-After, ETag
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Wed, 22 Feb 2023 20:20:35 GMT
age: 2245
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash be0ff97444ab9ff002dc0c3a855b6867
6b835c9cfa35b65f809ab3e8c150425048749e02
ed2c6e805d226e16f32c4a08bbe9f7171bf271fabd4d66a67efe197db6fe5407
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 22 Feb 2023 20:58:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 278 B IP
Hash c921765718381a3a44e0bf55cd0aa5a9
a78c6eebd8ad927cec5da7dfe16b4d66ef0f870d
e329eab4d49816041f9f754aa7d527bf1189b278b22c412c0a87bf1d2cd1f95a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5884
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 22 Feb 2023 20:58:00 GMT
Last-Modified: Wed, 22 Feb 2023 19:19:56 GMT
Server: ECS (ska/F71B)
X-Cache: HIT
Content-Length: 278
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash aea9630f88377d01e5cebab9de9c3b89
18c6603c6e63b79d45031e960dddd31b227f0de5
853e5bb59efe99054d86bbacf7c2f1f2483ad9c05d35cc9d8ea5dd9909cb38fb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "853E5BB59EFE99054D86BBACF7C2F1F2483AD9C05D35CC9D8EA5DD9909CB38FB"
Last-Modified: Mon, 20 Feb 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6299
Expires: Wed, 22 Feb 2023 22:42:59 GMT
Date: Wed, 22 Feb 2023 20:58:00 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 279 B IP
Hash 3abd344944cff12153e028bcff2cf75e
0b9bf00f4d25d3d96780f055c00699adcab75b71
20cdbb87bc4df2ec7739792915629dc43c5335c7cb037ec66e61ab227ccbbd67
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2342
Cache-Control: max-age=109825
Content-Type: application/ocsp-response
Date: Wed, 22 Feb 2023 20:58:00 GMT
Etag: "63f582b3-117"
Expires: Fri, 24 Feb 2023 03:28:25 GMT
Last-Modified: Wed, 22 Feb 2023 02:49:23 GMT
Server: ECS (ska/F71B)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
200 OK 280 B IP
Hash e2808540bdf68ad7b81d46eed1d296e5
593bce1e8a0c7502b78bbc2a887d39766eec1f63
805541eedd67a050ca6a6a21fac1f67526ae5e0c73122e8255cb928241f7624d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4892
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 22 Feb 2023 20:58:00 GMT
Last-Modified: Wed, 22 Feb 2023 19:36:28 GMT
Server: ECS (ska/F71B)
X-Cache: HIT
Content-Length: 280
ocsp.digicert.com/
200 OK 278 B IP
Hash 3df44cbe4f6f60454d0ce987c3b72dfc
5663eccb6f093a1ffc34b8f689b0606d510d59c0
4f2fd6292d2db2160e6f5f42240162e539629b462c52540306d09edc9293da6b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3077
Cache-Control: max-age=166665
Content-Type: application/ocsp-response
Date: Wed, 22 Feb 2023 20:58:00 GMT
Etag: "63f65ddc-116"
Expires: Fri, 24 Feb 2023 19:15:45 GMT
Last-Modified: Wed, 22 Feb 2023 18:24:28 GMT
Server: ECS (ska/F71B)
X-Cache: HIT
Content-Length: 278
ocsp.digicert.com/
200 OK 279 B IP
Hash c4e2969d6b4b21d55d983df811fc89d5
25e8a8da8c03ce13e065a29afe887660ef336e4e
ec46f2827a498f3125861df70ee6eedaac2341846fee0925c5f9ba1be265774a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4951
Cache-Control: max-age=98037
Content-Type: application/ocsp-response
Date: Wed, 22 Feb 2023 20:58:00 GMT
Etag: "63f54a76-117"
Expires: Fri, 24 Feb 2023 00:11:57 GMT
Last-Modified: Tue, 21 Feb 2023 22:49:26 GMT
Server: ECS (ska/F71B)
X-Cache: HIT
Content-Length: 279
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: mkyTBOEpgrkpFCyOHgwDYg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: oANrNNYGQKF7WOOFrhHXk2gwBKc=
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 67d0353e59411ba1f85c492efa548d94
2bb48dd2638abb14217de43ca03d2485a31eb7e7
c50c81dc979238b0bfea29f69cc5b4e6277e06c407025412430c190acf1e8d29
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 22 Feb 2023 20:58:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
js.hscollectedforms.net/collectedforms.js
200 OK 128 kB URL HTTP/2 js.hscollectedforms.net/collectedforms.js
IP
File type Unicode text, UTF-8 text, with very long lines (65392), with no line terminators
Size 128 kB (127713 bytes)
Hash ee265cf794187059ec4f31dd7fbbcfc2
91bb7c6e1320caf6608915a3b8aa5e533dcc9cbf
7dd052c917a8e0604cd2b4c36c9e7afe1c533fc2ceeebcb5ecfa275d52114634
GET /collectedforms.js HTTP/1.1
Host: js.hscollectedforms.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.rindegastos.com
Connection: keep-alive
Referer: https://www.rindegastos.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 22 Feb 2023 20:58:00 GMT
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
x-amz-replication-status: COMPLETED
last-modified: Tue, 07 Feb 2023 01:17:58 UTC
x-amz-server-side-encryption: AES256
x-amz-version-id: SRrb.93sqm.lmAPDUKFHizePSATAJlo.
etag: W/"257b82c9f242c143eb09b6862e336a56"
vary: Accept-Encoding,Origin,Access-Control-Request-Headers,Access-Control-Request-Method
x-cache: Hit from cloudfront
via: 1.1 3203c4b5504fa019a752072f0419ef6a.cloudfront.net (CloudFront)
x-amz-cf-pop: IAD12-P3
x-amz-cf-id: vCJu5syAszOPyNofIp-D3qEPSZdOc4Qj9DzB_4SrAbfgzYHM7nkC7g==
cache-control: s-maxage=600, max-age=300
content-security-policy-report-only: frame-ancestors 'self'; report-uri https://exceptions.hubspot.com/csp/report?resource=collected-forms-embed-js/static-1.315/bundles/project.js&cfRay=79daa2f9cf4f0b51-ARN
x-hs-target-asset: collected-forms-embed-js/static-1.315/bundles/project.js
x-hs-cache-status: MISS
cache-tag: staticjsapp-collected-forms-embed-js-web-prod,staticjsapp-prod
cf-cache-status: HIT
age: 7
server: cloudflare
cf-ray: 79daa327c8a9b4fd-OSL
content-encoding: br
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 278 B IP
Hash c310fc1bca7781b4f0814dfdee66d15f
0da3950c3ac0bfe6c1d9d0e60dd4da832ecbb74a
1cce9905f53470708952a5d7207343baeb9b057897d36317bd987203d44064b2
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1154
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 22 Feb 2023 20:58:00 GMT
Last-Modified: Wed, 22 Feb 2023 20:38:46 GMT
Server: ECS (ska/F71B)
X-Cache: HIT
Content-Length: 278
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 67d0353e59411ba1f85c492efa548d94
2bb48dd2638abb14217de43ca03d2485a31eb7e7
c50c81dc979238b0bfea29f69cc5b4e6277e06c407025412430c190acf1e8d29
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 22 Feb 2023 20:58:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 57b0dd65a12b230cfc49796141386132
c0a94632c45075119e779880826e90ee4ad758db
c3ad4357466d47b0156deb9b17c0d123014d9bc2f2a21cfc6bf7dee95e033679
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=151359
Date: Wed, 22 Feb 2023 20:58:00 GMT
Etag: "63f61d56-1d7"
Expires: Fri, 24 Feb 2023 15:00:39 GMT
Last-Modified: Wed, 22 Feb 2023 13:49:10 GMT
Server: ECS (bsa/EB20)
X-Cache: Miss from cloudfront
Via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 4Cef1lfJ_QNTQNb0bbNJHvDlWm5LLNo1ZkHFjd7MgZPivIR9MiQe6A==
Age: 4289
api.hubspot.com/livechat-public/v1/message/public?portalId=3276114&conversations-embed=static-1.12188&mobile=false&messagesUtk=14bda6f432a2449ea3beb4cacda267ad&traceId=14bda6f432a2449ea3beb4cacda267ad
200 OK 18 B URL HTTP/2 api.hubspot.com/livechat-public/v1/message/public?portalId=3276114&conversations-embed=static-1.12188&mobile=false&messagesUtk=14bda6f432a2449ea3beb4cacda267ad&traceId=14bda6f432a2449ea3beb4cacda267ad
IP
File type ASCII text, with no line terminators
Hash cc7fd95a87ea3721ce1853bf3c4dd75e
7f687f7881adf0fc407378d375a61b8f198c0912
0f06a4c8d34690d4e42c81f232a5bdfe9fcbde8a54b5ccd0609a313e90da0879
OPTIONS /livechat-public/v1/message/public?portalId=3276114&conversations-embed=static-1.12188&mobile=false&messagesUtk=14bda6f432a2449ea3beb4cacda267ad&traceId=14bda6f432a2449ea3beb4cacda267ad HTTP/1.1
Host: api.hubspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: x-hubspot-messages-uri
Referer: https://www.rindegastos.com/
Origin: https://www.rindegastos.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 22 Feb 2023 20:58:00 GMT
content-type: text/plain; charset=utf-8
content-length: 18
cf-ray: 79daa32aac94b512-OSL
access-control-allow-origin: https://www.rindegastos.com
allow: HEAD,GET,OPTIONS
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: origin, Accept-Encoding
cf-cache-status: DYNAMIC
access-control-allow-credentials: false
access-control-allow-headers: Accept, Accept-Charset, Accept-Encoding, Accept-Language, Content-Type, Host, Origin, Referer, User-Agent, X-HubSpot-Messages-Uri
access-control-allow-methods: GET, OPTIONS, PUT, POST, DELETE, PATCH, HEAD
x-hubspot-correlation-id: 8f4d7aa5-1f2b-4e41-b4d7-bd2c0929a88b
x-trace: 2BDB4D13F61A9684AC1FD59CA61FE5AF2397BCE75F000000000000000000
set-cookie: __cf_bm=3f8Zly8J1PwZEtbWnqhwruflY.IwQjCmBgWYNdrs66Q-1677099480-0-AU3Kqmp7ceuivOMFLf8t9ZANIgg09DAfkTSlOvustJaGg9INGsOxMg8AGKHtAEEOjf1+4GDmlAObGDqKi5I3jb8=; path=/; expires=Wed, 22-Feb-23 21:28:00 GMT; domain=.hubspot.com; HttpOnly; Secure; SameSite=None
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3gyogw4yQjZfcMoAwvsrlfpmxfT0Uvj%2FKBXyYcZCCQYXVyGIoS8EGQNzNYIVjI0ANtGIwLARBcGotdj96scn8gQCDb6eiQL4V9aaQ9k6okf4yyhEavkgd%2FkKFfjJC85Usw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
server: cloudflare
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 278 B IP
Hash c310fc1bca7781b4f0814dfdee66d15f
0da3950c3ac0bfe6c1d9d0e60dd4da832ecbb74a
1cce9905f53470708952a5d7207343baeb9b057897d36317bd987203d44064b2
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1154
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 22 Feb 2023 20:58:00 GMT
Last-Modified: Wed, 22 Feb 2023 20:38:46 GMT
Server: ECS (ska/F71B)
X-Cache: HIT
Content-Length: 278
ocsp.digicert.com/
200 OK 280 B IP
Hash 0f34ef027edb5db5a96336cbd29f6590
b52e7cf09f0e711c3e34cb99e3d76921bf1b90f2
4115904767f04542050b30b36a1ceca81770133bbd69a941e8178b41be9a5b3f
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6051
Cache-Control: max-age=164959
Content-Type: application/ocsp-response
Date: Wed, 22 Feb 2023 20:58:00 GMT
Etag: "63f64b94-118"
Expires: Fri, 24 Feb 2023 18:47:19 GMT
Last-Modified: Wed, 22 Feb 2023 17:06:28 GMT
Server: ECS (ska/F71B)
X-Cache: HIT
Content-Length: 280
ppstatic.s3.amazonaws.com/expenses/images/favicon2.ico
200 OK 1.2 kB URL HTTP/1.1 ppstatic.s3.amazonaws.com/expenses/images/favicon2.ico
IP
File type MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Hash ab1b5d3ea1643adbed14b554fd131466
e3b69849873f35a32c98b1fea73df9bb8aaed225
ddb06601aec50dc72f2770116d568ede3292901ef3370f8616f1a8bb4724a4d3
GET /expenses/images/favicon2.ico HTTP/1.1
Host: ppstatic.s3.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rindegastos.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: /et+iACYDGnhW//kyFVyALajOkXd8a8o0vtIxrnZbz2me3cw5W7PHRzlcMgMuk2zfb11u9CrTWN87MFThYTyNg==
x-amz-request-id: 6R3FKX9XNEE43NMR
Date: Wed, 22 Feb 2023 20:58:01 GMT
Last-Modified: Wed, 13 Dec 2017 14:12:22 GMT
ETag: "ab1b5d3ea1643adbed14b554fd131466"
Cache-Control: no-cache
x-amz-version-id: hYFIoSr0PhyTkwLVbxMVAttv52IimHjq
Accept-Ranges: bytes
Content-Type: image/x-icon
Server: AmazonS3
Content-Length: 1150
ocsp.sectigo.com/
200 OK 472 B IP
Hash 859245119895510eebee8e752956876d
5c78386c89119ad713473283fd1bb00cd8217c0a
8c40ff1475410882ab1fc0db8d09d0b8905afd26073e1b9f7843ef7115b93cfa
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 22 Feb 2023 20:58:01 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Sun, 19 Feb 2023 09:46:11 GMT
Expires: Sun, 26 Feb 2023 09:46:10 GMT
Etag: "5c78386c89119ad713473283fd1bb00cd8217c0a"
Cache-Control: max-age=304689,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 79daa32b0e0e0b69-OSL
api.hubspot.com/livechat-public/v1/message/public?portalId=3276114&conversations-embed=static-1.12188&mobile=false&messagesUtk=14bda6f432a2449ea3beb4cacda267ad&traceId=14bda6f432a2449ea3beb4cacda267ad
200 OK 1.4 kB URL HTTP/2 api.hubspot.com/livechat-public/v1/message/public?portalId=3276114&conversations-embed=static-1.12188&mobile=false&messagesUtk=14bda6f432a2449ea3beb4cacda267ad&traceId=14bda6f432a2449ea3beb4cacda267ad
IP
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (2817), with no line terminators
Hash 6bef5968643911cc23a1fa29b8597d35
94665643572ca98370f3345932e3e0104573025e
da1f6b45ed3aeffb2246ae0c181067669104241344d6f043bba231096705b54e
GET /livechat-public/v1/message/public?portalId=3276114&conversations-embed=static-1.12188&mobile=false&messagesUtk=14bda6f432a2449ea3beb4cacda267ad&traceId=14bda6f432a2449ea3beb4cacda267ad HTTP/1.1
Host: api.hubspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-HubSpot-Messages-Uri: https://www.rindegastos.com/redirect
Origin: https://www.rindegastos.com
Connection: keep-alive
Referer: https://www.rindegastos.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 22 Feb 2023 20:58:01 GMT
content-type: application/json;charset=utf-8
content-length: 1403
cf-ray: 79daa32b8df8b512-OSL
access-control-allow-origin: https://www.rindegastos.com
cache-control: no-cache, no-store, no-transform, must-revalidate, max-age=0
content-encoding: gzip
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: origin, Accept-Encoding
cf-cache-status: DYNAMIC
access-control-allow-credentials: false
access-control-allow-headers: Accept, Accept-Charset, Accept-Encoding, Accept-Language, Content-Type, Host, Origin, Referer, User-Agent, X-HubSpot-Messages-Uri
access-control-allow-methods: GET, OPTIONS, PUT, POST, DELETE, PATCH, HEAD
x-hubspot-correlation-id: f9dc47a5-63b0-44a7-890a-3974dd53c3cb
x-trace: 2B7F863574D412FDD0537597241CBBAD29D4298BD1000000000000000000
set-cookie: __cf_bm=2rrZioQWqz3XK0Va9f6_QBA223DwUHq0ilHi8aaHF.E-1677099481-0-AeuaYO0RM164gdC0/jd/AorzbdgSUDeR5fhKEbjJ7nLepLXf61i4YjZXuVLcdWh+XCLxidMeFMo3NAYgM2OQu6A=; path=/; expires=Wed, 22-Feb-23 21:28:01 GMT; domain=.hubspot.com; HttpOnly; Secure; SameSite=None
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tZvoIna1Y62MGOkd0g7cjs0tF5rTNFMbYX%2F9WV0opoH1oFGM6q4p80v98QhDRd%2By3SHw5dQlAkxTLjcRsyTtA3Pv7GnhHKy2p%2FoU%2B1%2FYvZkJ%2F5UgAx3eTNU2AdVee95wHw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
server: cloudflare
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
js.hs-banner.com/v2/3276114/banner.js
200 OK 63 kB URL HTTP/2 js.hs-banner.com/v2/3276114/banner.js
IP
File type ASCII text, with very long lines (65040)
Hash 3dbf351ae328ad8db5bffe139c81f339
832f911aac4783a55ad36040fdf3cff8ddedd1f5
a7b52a1c91bd341c6f4a9ed743b8039f5f400a3ef4483aa7daa5c0fccde47622
GET /v2/3276114/banner.js HTTP/1.1
Host: js.hs-banner.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rindegastos.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 22 Feb 2023 20:58:00 GMT
content-type: text/javascript; charset=UTF-8
x-amz-id-2: cmJJUsONLtrQFoMDNOCl2g/u/OivZO7BwolREDgwbOaKPU49k+Z9EXdBuPrf6I1Cfwof7lY8eqg=
x-amz-request-id: FPNSZTFVZSFWADJV
last-modified: Fri, 03 Feb 2023 19:48:55 GMT
etag: W/"d57eafe84674944fa7a2c5d79397954b"
x-amz-server-side-encryption: AES256
cache-control: max-age=300, public
x-amz-version-id: ncTV9EehlYQY_xQ3GKb0.vyuHDuYm6FU
access-control-allow-origin: https://www.rindegastos.com
access-control-allow-methods: GET, OPTIONS, PUT, POST, DELETE, PATCH, HEAD
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Accept-Charset, Accept-Encoding, X-Override-Internal-Permissions, X-Properties-Source, X-Properties-SourceId, X-Properties-Flag, X-Hubspot-User-Id, X-Hubspot-Trace, X-Hubspot-Callee, X-Hubspot-Offset, X-Hubspot-No-Trace, X-HubSpot-Static-App-Info, X-HubSpot-Messages-Uri, X-HubSpot-Request-Source, X-HubSpot-Request-Reason, Subscription-Billing-Auth-Token, X-App-CSRF, X-Tools-CSRF, Online-Payment-Signing-UUID, X-Source, X-SourceId, X-Origin-UserId, X-Biden-Request-Source, X-HubSpot-CSRF-hubspotapi, X-Force-Cookie-Refresh, X-Force-Cookie-Refresh-No-Cache, X-HS-User-Request, X-Application-Id, X-HS-Referer, X-HubSpot-Correlation-Id
access-control-expose-headers: x-last-modified-timestamp, X-HubSpot-NotFound, X-HS-User-Request, Link, Server-Timing
access-control-allow-credentials: true
access-control-max-age: 604800
timing-allow-origin: *
vary: origin, Accept-Encoding
expires: Wed, 22 Feb 2023 21:02:52 GMT
cf-cache-status: HIT
age: 8
server: cloudflare
cf-ray: 79daa32799d5b506-OSL
content-encoding: br
X-Firefox-Spdy: h2
snap.licdn.com/li.lms-analytics/insight.min.js
200 OK 4.8 kB URL HTTP/2 snap.licdn.com/li.lms-analytics/insight.min.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (13351)
Hash 74f72658f6efd10c4c286ab07cd5e452
9fa4dfc644b6e818914f2f2c4fe4bdf791fd6d39
6681619d5962f95b3fccfa34a7f035664edb66522d237ea0c28a05851f9d295c
GET /li.lms-analytics/insight.min.js HTTP/1.1
Host: snap.licdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rindegastos.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Tue, 10 Jan 2023 17:22:56 GMT
accept-ranges: bytes
content-type: application/x-javascript;charset=utf-8
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=57751
date: Wed, 22 Feb 2023 20:58:01 GMT
content-length: 4777
x-content-type-options: nosniff
x-cdn: AKAM
X-Firefox-Spdy: h2
api.hubapi.com/hs-script-loader-public/v1/config/pixels-and-events/json?portalId=3276114
200 OK 579 B URL HTTP/2 api.hubapi.com/hs-script-loader-public/v1/config/pixels-and-events/json?portalId=3276114
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash a89f1a2bb1cd7daa1151451e34e2b93c
90acbb76a7243a65ef3f65e98ac4ecd742440424
fbb2f2d8a12b952f8deb028936215a34b55c61f8a4aaa0564f55d265bbd5584d
GET /hs-script-loader-public/v1/config/pixels-and-events/json?portalId=3276114 HTTP/1.1
Host: api.hubapi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.rindegastos.com
Connection: keep-alive
Referer: https://www.rindegastos.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 22 Feb 2023 20:58:00 GMT
content-type: application/json;charset=utf-8
cf-ray: 79daa32aca11b4f3-OSL
access-control-allow-origin: https://www.rindegastos.com
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: origin, Accept-Encoding
cf-cache-status: DYNAMIC
access-control-allow-credentials: false
access-control-allow-headers: *
access-control-allow-methods: GET, OPTIONS, PUT, POST, DELETE, PATCH, HEAD
access-control-max-age: 180
x-hubspot-correlation-id: b7329e6c-b452-4833-9743-422d2fd89efd
x-trace: 2B8BBDA2E119B83DB8198985FFB2B9203E96A3B072000000000000000000
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=J8%2F7YZ7%2FFLyUEJbZBWjk%2Bj%2F7BXM300OtdfEKqw2udo2aSMeRTopzdBZm5hzVkOS0TRyY%2BIhshShI61DccRGQJ7QFx6D11Z27w9asH4EwjxaRU4tZHtj83LuWJHFRfufB"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash cab5e000357eb640109d7b9a6531daaf
e9190667dd8bd5a9cb2f682500d4e2b1dad70f37
37668e3983dea0dcf89f8a86666520d1e21bced386d173101f089ab76a9b9b6d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 22 Feb 2023 20:58:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1490)
Hash ca7fbbfd120e3e329633044190bbf134
d17f81e03dd827554ddd207ea081fb46b3415445
847004cefb32f85a9cc16b0b1eb77529ff5753680c145bfcb23f651d214737db
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rindegastos.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20085
date: Wed, 22 Feb 2023 19:45:20 GMT
expires: Wed, 22 Feb 2023 21:45:20 GMT
cache-control: public, max-age=7200
age: 4361
last-modified: Tue, 10 Jan 2023 21:29:14 GMT
content-type: text/javascript
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6b6c64cc308dd9197f8f1f4d5553cc7d
c11fd1f764ce3b8198a581cc04cf54f571463d67
d7e6cb4dd8aa2d536c05444fb1a8810b5caa599b6853319dc8379f2d32c72d14
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D7E6CB4DD8AA2D536C05444FB1A8810B5CAA599B6853319DC8379F2D32C72D14"
Last-Modified: Wed, 22 Feb 2023 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18626
Expires: Thu, 23 Feb 2023 02:08:27 GMT
Date: Wed, 22 Feb 2023 20:58:01 GMT
Connection: keep-alive
connect.facebook.net/en_US/fbevents.js
200 OK 28 kB URL HTTP/2 connect.facebook.net/en_US/fbevents.js
IP
File type ASCII text, with very long lines (64348)
Hash be5a1814429d0a129322abda3791987f
9e0eeee65e17a9c6df149ed1f01d3d7194833fd8
75afa897dd6f4b97b0697589569c7c4f87e32b79addf981febc78a4ff741210e
GET /en_US/fbevents.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rindegastos.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: application/x-javascript; charset=utf-8
report-to: {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/?minimize=0"}],"group":"coep_report"}
content-security-policy: default-src facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com data: blob: 'self';script-src *.fbcdn.net *.facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com;connect-src *.fbcdn.net *.facebook.net wss://*.fbcdn.net attachment.fbsbx.com blob: 'self';block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy-report-only: require-corp;report-to="coep_report"
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: quygsCpdbIVS1QwarHG2CxavExRJnU0cfGjR8NoYXUJj2+Vmq2mENO/MRG8VmT24N9SpBYQr48qHm9gNQyog8A==
priority: u=3,i
content-length: 27843
x-fb-trip-id: 1904183273
date: Wed, 22 Feb 2023 20:58:01 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 00fc3b5f1c0bf75bad8c142109720834
050f2d14da16248ead53d3996d88aacd18e5041a
b5f65aaa770693ab60c9c5342fa5aff03408055071e73a7c08c89fb5faf143c7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 22 Feb 2023 20:58:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
googleads.g.doubleclick.net/pagead/viewthroughconversion/950321305/?random=1677099483479&cv=11&fst=1677099483479&bg=ffffff&guid=ON&async=1>m=45He32f0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fwww.rindegastos.com%2Fredirect&tiba=RindeGastos%20-%20La%20soluci%C3%B3n%20para%20tus%20rendiciones%20de%20gastos&auid=1298539138.1677099483&rfmt=3&fmt=4
200 OK 902 B URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/950321305/?random=1677099483479&cv=11&fst=1677099483479&bg=ffffff&guid=ON&async=1>m=45He32f0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fwww.rindegastos.com%2Fredirect&tiba=RindeGastos%20-%20La%20soluci%C3%B3n%20para%20tus%20rendiciones%20de%20gastos&auid=1298539138.1677099483&rfmt=3&fmt=4
IP
File type ASCII text, with very long lines (1919), with no line terminators
Hash a1cef6f2f0b365b3ce09c34b45c1acb3
165f7e9165c5f8e541bdfff4b4909a1966364e33
fd4b00e76338c1514382f6411ddcd60e4c00f8580075942fdd047c56e8c2eb90
GET /pagead/viewthroughconversion/950321305/?random=1677099483479&cv=11&fst=1677099483479&bg=ffffff&guid=ON&async=1>m=45He32f0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fwww.rindegastos.com%2Fredirect&tiba=RindeGastos%20-%20La%20soluci%C3%B3n%20para%20tus%20rendiciones%20de%20gastos&auid=1298539138.1677099483&rfmt=3&fmt=4 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rindegastos.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 22 Feb 2023 20:58:01 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 902
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Wed, 22-Feb-2023 21:13:01 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.google-analytics.com/j/collect?v=1&_v=j99&a=1567798886&t=pageview&_s=1&dl=https%3A%2F%2Fwww.rindegastos.com%2Fredirect&ul=en-us&de=UTF-8&dt=RindeGastos%20-%20La%20soluci%C3%B3n%20para%20tus%20rendiciones%20de%20gastos&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&_u=YADAAEABAAAAACAAI~&jid=1943366315&gjid=145948136&cid=1655290827.1677099484&tid=UA-61358101-1&_gid=397725176.1677099484&_r=1&_slc=1>m=45He32f0n81NNLNX98&z=1309425137
200 OK 4 B URL HTTP/2 www.google-analytics.com/j/collect?v=1&_v=j99&a=1567798886&t=pageview&_s=1&dl=https%3A%2F%2Fwww.rindegastos.com%2Fredirect&ul=en-us&de=UTF-8&dt=RindeGastos%20-%20La%20soluci%C3%B3n%20para%20tus%20rendiciones%20de%20gastos&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&_u=YADAAEABAAAAACAAI~&jid=1943366315&gjid=145948136&cid=1655290827.1677099484&tid=UA-61358101-1&_gid=397725176.1677099484&_r=1&_slc=1>m=45He32f0n81NNLNX98&z=1309425137
IP
File type ASCII text, with no line terminators
Hash 9e92e190700c1af4539b40c2171320a9
209bcdb79e6067b51091ce8586d4b977f25b67d8
aec60bc104db041b1512185839f18f52986df7e569e5445f740dd60f763fbca8
POST /j/collect?v=1&_v=j99&a=1567798886&t=pageview&_s=1&dl=https%3A%2F%2Fwww.rindegastos.com%2Fredirect&ul=en-us&de=UTF-8&dt=RindeGastos%20-%20La%20soluci%C3%B3n%20para%20tus%20rendiciones%20de%20gastos&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&_u=YADAAEABAAAAACAAI~&jid=1943366315&gjid=145948136&cid=1655290827.1677099484&tid=UA-61358101-1&_gid=397725176.1677099484&_r=1&_slc=1>m=45He32f0n81NNLNX98&z=1309425137 HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://www.rindegastos.com
Connection: keep-alive
Referer: https://www.rindegastos.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://www.rindegastos.com
date: Wed, 22 Feb 2023 20:58:01 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash f00d82305e7457aae50b3ba04a844360
87fbf7ea49140d6b3f999f89efd6943f8859b9a1
bd779d3c39a774fdd54d9f52e587bdda0aeff9d004df8db206739cba83080bc2
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4069
Cache-Control: max-age=131671
Content-Type: application/ocsp-response
Date: Wed, 22 Feb 2023 20:58:01 GMT
Etag: "63f5d14d-1d7"
Expires: Fri, 24 Feb 2023 09:32:32 GMT
Last-Modified: Wed, 22 Feb 2023 08:24:45 GMT
Server: ECS (ska/F71B)
X-Cache: HIT
Content-Length: 471
www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-0CNWYJZDVN&cid=1655290827.1677099484>m=45je32f0&aip=1&z=1326731322
200 OK 42 B URL HTTP/2 www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-0CNWYJZDVN&cid=1655290827.1677099484>m=45je32f0&aip=1&z=1326731322
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-0CNWYJZDVN&cid=1655290827.1677099484>m=45je32f0&aip=1&z=1326731322 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rindegastos.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 22 Feb 2023 20:58:01 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash cab5e000357eb640109d7b9a6531daaf
e9190667dd8bd5a9cb2f682500d4e2b1dad70f37
37668e3983dea0dcf89f8a86666520d1e21bced386d173101f089ab76a9b9b6d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 22 Feb 2023 20:58:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 279 B IP
Hash 49fe93a6be8bd6c50467fb3d3c701f08
bc9eaa0130b329e19ef601bff5bf02ab460cef7b
dc8a61db3859d2b7a16911f8dc83e1d9781bba01d5d9470db0bae038e55727b9
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2978
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 22 Feb 2023 20:58:01 GMT
Last-Modified: Wed, 22 Feb 2023 20:08:23 GMT
Server: ECS (ska/F719)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
200 OK 279 B IP
Hash 49fe93a6be8bd6c50467fb3d3c701f08
bc9eaa0130b329e19ef601bff5bf02ab460cef7b
dc8a61db3859d2b7a16911f8dc83e1d9781bba01d5d9470db0bae038e55727b9
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4536
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 22 Feb 2023 20:58:01 GMT
Last-Modified: Wed, 22 Feb 2023 19:42:25 GMT
Server: ECS (ska/F71B)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
200 OK 279 B IP
Hash 49fe93a6be8bd6c50467fb3d3c701f08
bc9eaa0130b329e19ef601bff5bf02ab460cef7b
dc8a61db3859d2b7a16911f8dc83e1d9781bba01d5d9470db0bae038e55727b9
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2978
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 22 Feb 2023 20:58:01 GMT
Last-Modified: Wed, 22 Feb 2023 20:08:23 GMT
Server: ECS (ska/F719)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
200 OK 279 B IP
Hash 49fe93a6be8bd6c50467fb3d3c701f08
bc9eaa0130b329e19ef601bff5bf02ab460cef7b
dc8a61db3859d2b7a16911f8dc83e1d9781bba01d5d9470db0bae038e55727b9
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2978
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 22 Feb 2023 20:58:01 GMT
Last-Modified: Wed, 22 Feb 2023 20:08:23 GMT
Server: ECS (ska/F719)
X-Cache: HIT
Content-Length: 279
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 00fc3b5f1c0bf75bad8c142109720834
050f2d14da16248ead53d3996d88aacd18e5041a
b5f65aaa770693ab60c9c5342fa5aff03408055071e73a7c08c89fb5faf143c7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 22 Feb 2023 20:58:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6b6c64cc308dd9197f8f1f4d5553cc7d
c11fd1f764ce3b8198a581cc04cf54f571463d67
d7e6cb4dd8aa2d536c05444fb1a8810b5caa599b6853319dc8379f2d32c72d14
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D7E6CB4DD8AA2D536C05444FB1A8810B5CAA599B6853319DC8379F2D32C72D14"
Last-Modified: Wed, 22 Feb 2023 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18626
Expires: Thu, 23 Feb 2023 02:08:27 GMT
Date: Wed, 22 Feb 2023 20:58:01 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 279 B IP
Hash 49fe93a6be8bd6c50467fb3d3c701f08
bc9eaa0130b329e19ef601bff5bf02ab460cef7b
dc8a61db3859d2b7a16911f8dc83e1d9781bba01d5d9470db0bae038e55727b9
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4536
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 22 Feb 2023 20:58:01 GMT
Last-Modified: Wed, 22 Feb 2023 19:42:25 GMT
Server: ECS (ska/F71B)
X-Cache: HIT
Content-Length: 279
static.hsappstatic.net/head-dlb/static-1.261/bundle.production.js
200 OK 16 kB URL HTTP/2 static.hsappstatic.net/head-dlb/static-1.261/bundle.production.js
IP
File type Unicode text, UTF-8 text, with very long lines (749)
Hash 317aa9a59cf1598a619f02d8ccc0b116
52e0c9bdc693e92877b9c38fbe9529f42fcd58d3
c5dc2132d06f5c3d1036c8ac6602b49995287be8b6a79e3aa138856d31462cb6
GET /head-dlb/static-1.261/bundle.production.js HTTP/1.1
Host: static.hsappstatic.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://app.hubspot.com
Connection: keep-alive
Referer: https://app.hubspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 22 Feb 2023 20:58:01 GMT
content-type: application/javascript
access-control-allow-origin: https://app.hubspot.com
access-control-allow-methods: GET
access-control-max-age: 3000
access-control-allow-credentials: true
x-amz-replication-status: COMPLETED
last-modified: Fri, 10 Feb 2023 15:15:11 GMT
etag: W/"c4604d0d0704572eba2d941c26300fcf"
x-amz-server-side-encryption: AES256
x-amz-version-id: kbko2gWCnmOy.RSPHi9a.GgtW8kBa5z1
vary: Origin,Accept-Encoding,Access-Control-Request-Headers,Access-Control-Request-Method
x-cache: Hit from cloudfront
via: 1.1 0e39dca74306d7aab723ed3d73dbfbb4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: UXudmie1pwvEx7AgPFfEGZgj5_cP7l37JeJkjdJzIN9pz-OR3GGoRg==
cf-cache-status: HIT
age: 1048616
expires: Thu, 22 Feb 2024 20:58:01 GMT
cache-control: public, max-age=31536000
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zapPIVAE9C37r5whK430JZvCuNPkZOlijO8B3jxKmhQHy%2FAIq1vpYTlL6s6ObuYg4ieQpQ53BhCUd51UkFAk%2FObITMM6Bm6t8TRHLO%2BUscgfrq8WkpbIAbdlFqFF8pCofhFN2SH2IlI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 79daa32ec8d2b4f3-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-61358101-1&cid=1655290827.1677099484&jid=1943366315&gjid=145948136&_gid=397725176.1677099484&_u=YADAAEAAAAAAACAAI~&z=1270304060
200 OK 4 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-61358101-1&cid=1655290827.1677099484&jid=1943366315&gjid=145948136&_gid=397725176.1677099484&_u=YADAAEAAAAAAACAAI~&z=1270304060
IP
File type ASCII text, with no line terminators
Hash 48c0473b7821185d937e685216e2168b
3743e47f8a429a5e87b86cb582d78940733d9d2e
570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-61358101-1&cid=1655290827.1677099484&jid=1943366315&gjid=145948136&_gid=397725176.1677099484&_u=YADAAEAAAAAAACAAI~&z=1270304060 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://www.rindegastos.com
Connection: keep-alive
Referer: https://www.rindegastos.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://www.rindegastos.com
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Wed, 22 Feb 2023 20:58:01 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ipinfo.io/91.90.42.154?token=2037724775731b
200 OK 111 kB URL HTTP/2 ipinfo.io/91.90.42.154?token=2037724775731b
IP
File type JSON data\012- , ASCII text, with very long lines (64236)
Size 111 kB (110648 bytes)
Hash 934edade5ecd4f3d46c1363e99e8f886
7eb9ae1c57b67fc9f6a9988efe517437f1b1fac7
e2a34ef63374269a02b9e0e2292e2f22c59e1fde0e22330055883f3dee401ed1
GET /91.90.42.154?token=2037724775731b HTTP/1.1
Host: ipinfo.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.rindegastos.com
Connection: keep-alive
Referer: https://www.rindegastos.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
content-type: application/json; charset=utf-8
date: Wed, 22 Feb 2023 20:58:01 GMT
x-envoy-upstream-service-time: 2
strict-transport-security: max-age=2592000; includeSubDomains
vary: Accept-Encoding
content-encoding: gzip
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 440beb93bc2481c500bed2c2719a96ab
8231c07a8cf345bf3b1e5ca5d7b4e8af60d72ae5
14182dbb3daa77650d97e07e0c567f73648720a4b06633200dd1846da8c5b0bb
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 22 Feb 2023 20:58:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash d96711a885ffe502d29d01252aecffd3
fef3506b0e593ca716adebe50ec1fa1635c8c87c
8a79c1a7921b452ca033f26c88b9d06fe3b6b6b0211c11829f6145c56eeca487
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 22 Feb 2023 20:58:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/pagead/1p-user-list/950321305/?random=1677099483479&cv=11&fst=1677096000000&bg=ffffff&guid=ON&async=1>m=45He32f0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fwww.rindegastos.com%2Fredirect&tiba=RindeGastos%20-%20La%20soluci%C3%B3n%20para%20tus%20rendiciones%20de%20gastos&fmt=3&is_vtc=1&random=2665781528&rmt_tld=0&ipr=y
200 OK 42 B URL HTTP/2 www.google.com/pagead/1p-user-list/950321305/?random=1677099483479&cv=11&fst=1677096000000&bg=ffffff&guid=ON&async=1>m=45He32f0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fwww.rindegastos.com%2Fredirect&tiba=RindeGastos%20-%20La%20soluci%C3%B3n%20para%20tus%20rendiciones%20de%20gastos&fmt=3&is_vtc=1&random=2665781528&rmt_tld=0&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/950321305/?random=1677099483479&cv=11&fst=1677096000000&bg=ffffff&guid=ON&async=1>m=45He32f0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fwww.rindegastos.com%2Fredirect&tiba=RindeGastos%20-%20La%20soluci%C3%B3n%20para%20tus%20rendiciones%20de%20gastos&fmt=3&is_vtc=1&random=2665781528&rmt_tld=0&ipr=y HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rindegastos.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 22 Feb 2023 20:58:01 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 5a9e54f54243639a31020050bfc7fb55
c49766d67bea2ce07bd3c925d42897ab992f94e2
26b96bbdd02ca9498d5c7a4b970ebbec31039db95a2ce6e5a6ff665c73023a8d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 22 Feb 2023 20:58:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
static.hsappstatic.net/conversations-visitor-ui/static-1.14640/bundles/visitor.js
200 OK 182 kB URL HTTP/2 static.hsappstatic.net/conversations-visitor-ui/static-1.14640/bundles/visitor.js
IP
File type Unicode text, UTF-8 text, with very long lines (65461), with no line terminators
Size 182 kB (181836 bytes)
Hash ae766df8f5260aa31c22d6336c5ff358
1481a901785e7cd858559aaa736812a50558f0db
9c1a78ccc8a817ed998b8c10a9bad76d326861f35aae5853ddba1eee2e2cfd65
GET /conversations-visitor-ui/static-1.14640/bundles/visitor.js HTTP/1.1
Host: static.hsappstatic.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://app.hubspot.com
Connection: keep-alive
Referer: https://app.hubspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 22 Feb 2023 20:58:01 GMT
content-type: application/javascript
access-control-allow-origin: https://app.hubspot.com
access-control-allow-methods: GET
access-control-max-age: 3000
access-control-allow-credentials: true
x-amz-replication-status: COMPLETED
last-modified: Tue, 14 Feb 2023 18:08:36 GMT
etag: W/"217ca4f7bd8da69d7e32f35525a0ace0"
x-amz-server-side-encryption: AES256
x-amz-version-id: TVm.0mSakMQ0gV.a7hm6lld73WXrGtIv
vary: Origin,Accept-Encoding,Access-Control-Request-Headers,Access-Control-Request-Method
x-cache: Hit from cloudfront
via: 1.1 3130c9b603e4215bb05d32cd39e3843c.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN56-P2
x-amz-cf-id: 9HdZH8juDEWsz0OSneecR3DB0SrunkbWjT2rD4ShUcp1CEOi-uxrTQ==
cf-cache-status: HIT
age: 700963
expires: Thu, 22 Feb 2024 20:58:01 GMT
cache-control: public, max-age=31536000
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vbKgNlqUnFIMqBSwhY07Kyw81aaki%2Brgsio96npj8zOWZXRjuRSjHeMAzvMWlU98q2p9HSvIw1Sna%2FZqN3CmGNE17ojgBQcy3bd9U3bDaKqjKxGAsmHXFRi43rL6QIndRuGcR%2BKrHWQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 79daa32ec8d9b4f3-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash cd04d923e6b3cbd7cac3c56d18ca9016
7d3205fb454124635afcbfcf2265ce504c778ef1
fc857fad800eb3c6f2a3f28007b1b81f2a95e4968d376f47238a681f9c958475
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FC857FAD800EB3C6F2A3F28007B1B81F2A95E4968D376F47238A681F9C958475"
Last-Modified: Wed, 22 Feb 2023 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11324
Expires: Thu, 23 Feb 2023 00:06:45 GMT
Date: Wed, 22 Feb 2023 20:58:01 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash cd04d923e6b3cbd7cac3c56d18ca9016
7d3205fb454124635afcbfcf2265ce504c778ef1
fc857fad800eb3c6f2a3f28007b1b81f2a95e4968d376f47238a681f9c958475
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FC857FAD800EB3C6F2A3F28007B1B81F2A95E4968D376F47238A681F9C958475"
Last-Modified: Wed, 22 Feb 2023 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11324
Expires: Thu, 23 Feb 2023 00:06:45 GMT
Date: Wed, 22 Feb 2023 20:58:01 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash cd04d923e6b3cbd7cac3c56d18ca9016
7d3205fb454124635afcbfcf2265ce504c778ef1
fc857fad800eb3c6f2a3f28007b1b81f2a95e4968d376f47238a681f9c958475
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FC857FAD800EB3C6F2A3F28007B1B81F2A95E4968D376F47238A681F9C958475"
Last-Modified: Wed, 22 Feb 2023 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11324
Expires: Thu, 23 Feb 2023 00:06:45 GMT
Date: Wed, 22 Feb 2023 20:58:01 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F553b0a8d-06cc-4780-9968-7b736bee389a.jpeg
200 OK 6.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F553b0a8d-06cc-4780-9968-7b736bee389a.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ee922cb933c0bc613eeaa2848bbd98cb
4f887e701f08a13865d95e7adda6907b3b27ce61
9f3bde9200e4462408a2d43f521a3b36a7323e05d025a8726cbf11adac16a8a2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F553b0a8d-06cc-4780-9968-7b736bee389a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6568
x-amzn-requestid: 9be53abd-7500-4d29-a749-2793cc50cbec
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: AtW1cHlnoAMFnNQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63f53822-005cdc347b9d25bd00164dc2;Sampled=0
x-amzn-remapped-date: Tue, 21 Feb 2023 21:31:14 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: fXMfEgMFJU4Yttki0RDMXNI1ruMmZRKD21n7vbJZA4RUsxDGDmD-DA==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 6a9b42e38e76b7d4a4044ebe0e0eca08.cloudfront.net (CloudFront), 1.1 google
date: Tue, 21 Feb 2023 21:53:04 GMT
age: 83097
etag: "4f887e701f08a13865d95e7adda6907b3b27ce61"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F644e40db-f353-42c8-b8f3-a3d61b067916.jpeg
200 OK 7.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F644e40db-f353-42c8-b8f3-a3d61b067916.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 81c0d076a45e9141fd7bbca61d5c0cee
989a1ed5045736130244544586ec5ae24b4e77dc
d3d4ecc39dc8ed3086d6d79f17fe4e01b4ba21a3a221f9d0efe31de04a0cb08e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F644e40db-f353-42c8-b8f3-a3d61b067916.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7733
x-amzn-requestid: 33d1af39-36ea-4fb8-b451-67dd5a1a6e56
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: AtW0oEz-IAMFv7Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63f5381d-3bb7c95c1dafdad70dfd9add;Sampled=0
x-amzn-remapped-date: Tue, 21 Feb 2023 21:31:09 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: Fzp81AOtsIUFWOtE_MBMzENTUBtGtXq9-ZBpsCrtQgliMielnuHJEw==
via: 1.1 7f5e0d3b9ea85d0d75063a66c0ebc840.cloudfront.net (CloudFront), 1.1 32c16f33c8f5601364fa8229b0d74dc2.cloudfront.net (CloudFront), 1.1 google
date: Tue, 21 Feb 2023 21:53:44 GMT
etag: "989a1ed5045736130244544586ec5ae24b4e77dc"
content-type: image/jpeg
age: 83057
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5f9477dd-9700-4cbd-8d0e-37bd76c53a93.jpeg
200 OK 7.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5f9477dd-9700-4cbd-8d0e-37bd76c53a93.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e7cd1e9feb9abc7f7d7f0d5fc7b181f0
cf3ce1808c48e1a86910e16731a044f6cb26275d
426c90298d5a0807b7820d803ce2907268df1195e15d5582eb0ff2f3deeb318c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5f9477dd-9700-4cbd-8d0e-37bd76c53a93.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7734
x-amzn-requestid: fe4dc342-33b6-45f6-984c-2c71dfa0ec13
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: AtX-lGiJoAMFW3A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63f539f6-489049413f3cb63c537f20d0;Sampled=0
x-amzn-remapped-date: Tue, 21 Feb 2023 21:39:02 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: KyUqB4zqsHWgCv7C3-PymFep4oVmPy4ZHFf75lYOfWbb4qgvVRqoLg==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 476c2ba6d9f6cd69dbcedbd65688cbc0.cloudfront.net (CloudFront), 1.1 google
date: Tue, 21 Feb 2023 21:42:20 GMT
age: 83741
etag: "cf3ce1808c48e1a86910e16731a044f6cb26275d"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7dacef7f-d2f8-4689-8e99-f6264cd88f75.jpeg
200 OK 8.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7dacef7f-d2f8-4689-8e99-f6264cd88f75.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash bb6757305388dc32866ee6c551938c4c
4eab046e0d4f23d91db4a56b8d6d8cde782e2e47
dc0a93e777b2aaf3f3881539de1de15015bcedc2445b8f5558d04a822399bae4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7dacef7f-d2f8-4689-8e99-f6264cd88f75.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8863
x-amzn-requestid: 8983434d-4704-4792-a9b6-625c7d6160f3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: AtXYfGJAIAMF3Rg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63f53902-21e200522022d8bf513f1b19;Sampled=0
x-amzn-remapped-date: Tue, 21 Feb 2023 21:34:58 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: eKMh8liE2cyCm1LzXIvkcdGa_XRq8Bt1rrmSNvUdT4vZ7vSborqHkw==
via: 1.1 2afae0d44e2540f472c0635ab62c232a.cloudfront.net (CloudFront), 1.1 f9d716a351f14a0ac1fac2449734849a.cloudfront.net (CloudFront), 1.1 google
date: Tue, 21 Feb 2023 21:53:12 GMT
age: 83089
etag: "4eab046e0d4f23d91db4a56b8d6d8cde782e2e47"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffbb06cb3-8d47-41fd-9ae0-2255f41945ae.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffbb06cb3-8d47-41fd-9ae0-2255f41945ae.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ca681b00aa436514987423d22b468eb6
c1b8a3e0db433f5a97109f7990600ac5a5b93928
19c66e4af0264cc18866db864876cbe240b42688f2fecf1fd7443c3ea71acbc3
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffbb06cb3-8d47-41fd-9ae0-2255f41945ae.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9976
x-amzn-requestid: b8b727c9-56e4-49a3-a06d-d45f44b51b0e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: AtXZlHkLIAMF8lQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63f53909-4633fb2f02e5221e35ca510a;Sampled=0
x-amzn-remapped-date: Tue, 21 Feb 2023 21:35:05 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: GxlyxTqmjW9JDGROudsH6TpMNjRYRcsvLgQCPohaSAA2I4DC68xydg==
via: 1.1 86b676273517904f44af31586adb06ae.cloudfront.net (CloudFront), 1.1 be082a2326b7d49643607b097f1e7180.cloudfront.net (CloudFront), 1.1 google
date: Tue, 21 Feb 2023 21:53:44 GMT
age: 83057
etag: "c1b8a3e0db433f5a97109f7990600ac5a5b93928"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F481e8486-3f6e-4401-a61f-82307f1eab6d.jpeg
200 OK 6.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F481e8486-3f6e-4401-a61f-82307f1eab6d.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e4cd28cac5124a753970c48f3be03e23
f2f5231684295a81db59aa2a14e9d729c92c071f
b0acc1dd0696f1810c997f843d5c6f12a1963118bd59176c849f4e35135b613a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F481e8486-3f6e-4401-a61f-82307f1eab6d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6129
x-amzn-requestid: 101c8095-2ae9-45f5-b7cb-13be313654f4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: AtX-bFKHIAMFveg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63f539f5-6ade4eb449dea4fb2f13b651;Sampled=0
x-amzn-remapped-date: Tue, 21 Feb 2023 21:39:01 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: FXPBQSnCNq9YuNoEvrNyc7cpA97JxH1AAploVRF2qcU1cs285WQvxQ==
via: 1.1 010c0731b9775a983eceaec0f5fa6a2e.cloudfront.net (CloudFront), 1.1 64f86ae1c24221f3a2e4d653d6dbc416.cloudfront.net (CloudFront), 1.1 google
date: Tue, 21 Feb 2023 22:44:59 GMT
age: 79982
etag: "f2f5231684295a81db59aa2a14e9d729c92c071f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.linkedin.com/px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D66325%26time%3D1677099483833%26url%3Dhttps%253A%252F%252Fwww.rindegastos.com%252Fredirect%26tm%3Dgtmv2%26liSync%3Dtrue
302 Found 0 B URL HTTP/2 www.linkedin.com/px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D66325%26time%3D1677099483833%26url%3Dhttps%253A%252F%252Fwww.rindegastos.com%252Fredirect%26tm%3Dgtmv2%26liSync%3Dtrue
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D66325%26time%3D1677099483833%26url%3Dhttps%253A%252F%252Fwww.rindegastos.com%252Fredirect%26tm%3Dgtmv2%26liSync%3Dtrue HTTP/1.1
Host: www.linkedin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.rindegastos.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
cache-control: no-cache, no-store
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
location: https://px.ads.linkedin.com/collect?v=2&fmt=js&pid=66325&time=1677099483833&url=https%3A%2F%2Fwww.rindegastos.com%2Fredirect&tm=gtmv2&liSync=true
set-cookie: bcookie="v=2&f5810002-fe73-44ef-885f-842b9193ce18"; Domain=.linkedin.com; Expires=Thu, 22-Feb-2024 20:58:01 GMT; Path=/; Secure; SameSite=None
bscookie="v=1&20230222205801c44244e8-b259-4a02-807f-6476c4d2b13cAQGd_BwOgL8d3PXix5YGSjOfh1_L5PUa"; Domain=.www.linkedin.com; Expires=Thu, 22-Feb-2024 20:58:01 GMT; Path=/; HttpOnly; Secure; SameSite=None
li_gc=MTswOzE2NzcwOTk0ODE7MjswMjFeHWwrVbRV5XOBrKXacUriYRvwA1wgTUwWtTAZKdWmEw==; Domain=.linkedin.com; Expires=Mon, 21 Aug 2023 20:58:01 GMT; Path=/; Secure; SameSite=None
lidc="b=OGST09:s=O:r=O:a=O:p=O:g=2442:u=1:x=1:i=1677099481:t=1677185881:v=2:sig=AQF7tIQx-BboDW9YHRro3hbTpDuDJPBt"; Expires=Thu, 23 Feb 2023 20:58:01 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
content-security-policy: default-src *; connect-src 'self' *.licdn.com *.linkedin.com wss://*.linkedin.com dpm.demdex.net/id lnkd.demdex.net blob: accounts.google.com/gsi/ linkedin.sc.omtrdc.net/b/ss/ *.qualtrics.com *.adyen.com *.microsoft.com; img-src data: blob: *; font-src data: *; style-src 'unsafe-inline' 'self' static-src.linkedin.com *.licdn.com; script-src 'unsafe-inline' 'unsafe-eval' 'self' spdy.linkedin.com static-src.linkedin.com *.ads.linkedin.com *.licdn.com static.chartbeat.com bcvipva02.rightnowtech.com www.bizographics.com sjs.bizographics.com js.bizographics.com d.la4-c1-was.salesforceliveagent.com platform.linkedin.com platform-akam.linkedin.com platform-ecst.linkedin.com platform-azur.linkedin.com; object-src 'none'; media-src blob: *; worker-src blob: 'self'; frame-src blob: lnkd-communities: voyager: *; frame-ancestors 'self' *.linkedin.com teams.microsoft.com client.learningapp.microsoft.com; report-uri /security/csp?e=p&f=t
x-frame-options: sameorigin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
expect-ct: max-age=86400, report-uri="https://www.linkedin.com/platform-telemetry/ct"
x-li-fabric: prod-lor1
x-li-pop: afd-prod-lor1-x
x-li-proto: http/2
x-li-uuid: AAX1UCbfJr/R8Elp82zW0w==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 33BD1FFDF11B46D89FDB5D862A8342ED Ref B: OSL30EDGE0507 Ref C: 2023-02-22T20:58:01Z
date: Wed, 22 Feb 2023 20:58:01 GMT
content-length: 0
X-Firefox-Spdy: h2
www.facebook.com/tr/?id=137915846834106&ev=PageView&dl=https%3A%2F%2Fwww.rindegastos.com%2Fredirect&rl=&if=false&ts=1677099484516&sw=1280&sh=1024&v=2.9.96&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=30&cs_est=true&fbp=fb.1.1677099484515.992814210&it=1677099483919&coo=false&tm=1&rqm=GET
200 OK 0 B URL HTTP/2 www.facebook.com/tr/?id=137915846834106&ev=PageView&dl=https%3A%2F%2Fwww.rindegastos.com%2Fredirect&rl=&if=false&ts=1677099484516&sw=1280&sh=1024&v=2.9.96&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=30&cs_est=true&fbp=fb.1.1677099484515.992814210&it=1677099483919&coo=false&tm=1&rqm=GET
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=137915846834106&ev=PageView&dl=https%3A%2F%2Fwww.rindegastos.com%2Fredirect&rl=&if=false&ts=1677099484516&sw=1280&sh=1024&v=2.9.96&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=30&cs_est=true&fbp=fb.1.1677099484515.992814210&it=1677099483919&coo=false&tm=1&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rindegastos.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Wed, 22 Feb 2023 20:58:02 GMT
X-Firefox-Spdy: h2
static.hsappstatic.net/conversations-visitor-ui/static-1.14602/i18n-data-data-locales-en-us.js
200 OK 423 B URL HTTP/2 static.hsappstatic.net/conversations-visitor-ui/static-1.14602/i18n-data-data-locales-en-us.js
IP
File type ASCII text, with very long lines (719)
Hash e487d18e4d84c36ecab1d4751ba334af
700b07bf1dcb9e2594484e73d33c0f70ed395d95
83941b6b301c512ef3a52cdf3aa0930fa3810a02a93c690de10114796f9249f4
GET /conversations-visitor-ui/static-1.14602/i18n-data-data-locales-en-us.js HTTP/1.1
Host: static.hsappstatic.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://app.hubspot.com
Connection: keep-alive
Referer: https://app.hubspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 22 Feb 2023 20:58:02 GMT
content-type: application/javascript
access-control-allow-origin: https://app.hubspot.com
access-control-allow-methods: GET
access-control-max-age: 3000
access-control-allow-credentials: true
x-amz-replication-status: COMPLETED
last-modified: Fri, 10 Feb 2023 16:20:39 GMT
etag: W/"3801c6ecbf979caf71a46cea9d9962c6"
x-amz-server-side-encryption: AES256
x-amz-version-id: Gjc1mqdGhnc1u9vzrDKRHsudItDKsByw
vary: Origin,Accept-Encoding,Access-Control-Request-Headers,Access-Control-Request-Method
x-cache: Hit from cloudfront
via: 1.1 4bdc4e02725e6de1af31e5bb25800f68.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN54-C1
x-amz-cf-id: WI-rU1U8INsCkZKODq3cHuZpbO1FKGPGJOP96hMTIBt8oOGZxI5S4Q==
cf-cache-status: HIT
age: 1046686
expires: Thu, 22 Feb 2024 20:58:02 GMT
cache-control: public, max-age=31536000
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nMRJnMaNF3AXpedT%2BL%2FXUEzC32%2FfGoNQZnCBxezrqwJd0nagNwofr4yehcvEOxBWuKZcp%2BCHrOjpLMbEy1AMf1bRpK4FTdFqKk7U4esaUfwn4E%2F8kSkTqk4t7qcur3orjoHXgP%2FPGF0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 79daa332af46b4f3-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash a7ab0dc50672dcd12f8bedc512d9b69e
b2abd2ea276a5756d16feb85a7a411d4b0051290
b682b616cc1064147b12ecb16c4f30d5e69593e1d782f92235090155f1092136
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Wed, 22 Feb 2023 20:58:02 GMT
Last-Modified: Wed, 22 Feb 2023 19:22:31 GMT
Server: ECS (dcb/7EEA)
X-Cache: Miss from cloudfront
Via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: irTBWdlcN0bAr4MgqKHy9EXACdFKTWHC2OTOnnGpKzNYt56HN3cKXA==
Age: 5731
web.rindegastos.com/document/expenseReport?e=3780990&k=159571-16182-63dc11e4d9091
200 OK 4.4 kB URL HTTP/1.1 web.rindegastos.com/document/expenseReport?e=3780990&k=159571-16182-63dc11e4d9091
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (2474)
Hash 359b812cdb94c96600fdc81fd12b4605
7e60cc53a319d8cb5a18c1629f9e79880f58ac13
71efd175848daedcd3fe9f6f77aaf8d09a2921fdfa30847103d813ab4ee5dc9c
GET /document/expenseReport?e=3780990&k=159571-16182-63dc11e4d9091 HTTP/1.1
Host: web.rindegastos.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rindegastos.com/
Cookie: _gcl_au=1.1.1298539138.1677099483; _ga_0CNWYJZDVN=GS1.1.1677099483.1.0.1677099483.60.0.0; _ga=GA1.2.1655290827.1677099484; _gid=GA1.2.397725176.1677099484; _gat_UA-61358101-1=1; _fbp=fb.1.1677099484515.992814210
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Date: Wed, 22 Feb 2023 20:58:02 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 4435
Connection: keep-alive
Set-Cookie: AWSALB=hXYjSNfXqe1cKLQ8jDZJxMEIUVBrD2jxJxFKj519pECvIWVNTLX6y/0ALKJRetI0dnxj16cbvL6Xe4ukhpnlW4OsO0FoAfUnxaQyyvIx/XaUGlgkgkn06gPEqXQG; Expires=Wed, 01 Mar 2023 20:58:02 GMT; Path=/
AWSALBCORS=hXYjSNfXqe1cKLQ8jDZJxMEIUVBrD2jxJxFKj519pECvIWVNTLX6y/0ALKJRetI0dnxj16cbvL6Xe4ukhpnlW4OsO0FoAfUnxaQyyvIx/XaUGlgkgkn06gPEqXQG; Expires=Wed, 01 Mar 2023 20:58:02 GMT; Path=/; SameSite=None; Secure
YUR5aYTheba=v2qmu1r3cj5c0jbu8u77b0sfo5; expires=Tue, 14-Mar-2023 20:58:02 GMT; Max-Age=1728000; path=/
Server: Apache
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=63072000
Vary: Accept-Encoding
Content-Encoding: gzip
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash a8530fcefb585de4930c998e366124cc
290ef080fe5bddca89a1a92e505268f9c38a308c
e2369003249fb3ebcc2f3ced2f2cd685376be22d7201cdc52b73751834c5c7fc
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 22 Feb 2023 20:58:02 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash a8530fcefb585de4930c998e366124cc
290ef080fe5bddca89a1a92e505268f9c38a308c
e2369003249fb3ebcc2f3ced2f2cd685376be22d7201cdc52b73751834c5c7fc
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 22 Feb 2023 20:58:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ppstatic.s3.amazonaws.com/expenses/css/datePicker.css
200 OK 3.2 kB URL HTTP/1.1 ppstatic.s3.amazonaws.com/expenses/css/datePicker.css
IP
File type ASCII text, with CRLF line terminators
Hash caccb9800bbdc8c1e2729cb538c4cd6d
7e575859f7337b92d4207b6579b94c054afc4cdb
b06b74b85a1c8b44125433ea02b536d5a190cd0406a510f4650e24df3690880b
GET /expenses/css/datePicker.css HTTP/1.1
Host: ppstatic.s3.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://web.rindegastos.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: 5bAGA+j+AlEHsMfFCc0dC/tOt89M6UwVTUBNcQUg2AQQXUBvQ8QyldwowpizGZRtWY7Ys5oCV52mmXy5TnQkVw==
x-amz-request-id: TY3CSHRWQNV0MBRK
Date: Wed, 22 Feb 2023 20:58:04 GMT
Last-Modified: Wed, 05 Apr 2017 18:28:06 GMT
ETag: "caccb9800bbdc8c1e2729cb538c4cd6d"
x-amz-version-id: 1jmC3lPCO39gT4Q.VzAFHjQk6MXHBJUN
Accept-Ranges: bytes
Content-Type: text/css
Server: AmazonS3
Content-Length: 3180
ppstatic.s3.amazonaws.com/expenses/css/main54.css?v=20220224
200 OK 77 kB URL HTTP/1.1 ppstatic.s3.amazonaws.com/expenses/css/main54.css?v=20220224
IP
File type ASCII text, with very long lines (573), with CRLF line terminators
Hash 50104cb9e1edd52d0e13922c8ad67ab0
d96250df8268bd261fe8e04e214234aab2db09ae
f9c3afd49814b03a5ab682e5838794e9167a70746e5ee3e449599c2998459709
GET /expenses/css/main54.css?v=20220224 HTTP/1.1
Host: ppstatic.s3.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://web.rindegastos.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: U/f1Xbh2U6DFptWL0/HZjKAJz7wGFKEHRaMWUDmC18tKJHyioZzabiUcO9gJio6gAFK2W24e3H8GztCxmPgJuw==
x-amz-request-id: FDPT72G9QRJJ7DJE
Date: Wed, 22 Feb 2023 20:58:03 GMT
x-amz-replication-status: COMPLETED
Last-Modified: Thu, 24 Feb 2022 14:13:35 GMT
ETag: "50104cb9e1edd52d0e13922c8ad67ab0"
x-amz-version-id: ET_beOaJd46CSp8w9tqpsY3etnErtYCi
Accept-Ranges: bytes
Content-Type: text/css
Server: AmazonS3
Content-Length: 76682
ppstatic.s3.amazonaws.com/expenses/css/tooltipster.bundle.min.css
200 OK 6.5 kB URL HTTP/1.1 ppstatic.s3.amazonaws.com/expenses/css/tooltipster.bundle.min.css
IP
File type ASCII text, with very long lines (6495), with no line terminators
Hash b15ef24270546e5fe896d3ea387ea134
63910103e8cc5e4bdeb2c289cfbf41f89966ea5b
41ce2509fa9959868717986010e16b6334885fd46bc64d0d3c745a73ed3c41e4
GET /expenses/css/tooltipster.bundle.min.css HTTP/1.1
Host: ppstatic.s3.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://web.rindegastos.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: NpkLwzBg5VtDY3uK4ZaVhHAu208xqHXeLjCbXbAANbM7inEUOCyUOI2yom+ZtlcXZnIKJjclyjvGHA73cG+Ozw==
x-amz-request-id: TY364K94VCKBBSQJ
Date: Wed, 22 Feb 2023 20:58:04 GMT
Last-Modified: Wed, 05 Apr 2017 18:28:05 GMT
ETag: "b15ef24270546e5fe896d3ea387ea134"
x-amz-version-id: Ue0uZuGQcSHE1GxhyUC9_LvTvFo5Ze3q
Accept-Ranges: bytes
Content-Type: text/css
Server: AmazonS3
Content-Length: 6495
ppstatic.s3.amazonaws.com/expenses/css/tooltipster-sideTip-light.min.css
200 OK 1.8 kB URL HTTP/1.1 ppstatic.s3.amazonaws.com/expenses/css/tooltipster-sideTip-light.min.css
IP
File type ASCII text, with very long lines (1799), with no line terminators
Hash 69a5477b4beb94b3accb2f5d95e1a42a
b66fa6a4df5d7da4b6bc9fc66d6001cef748e3c5
37a741f36d0ce77a5c3b191d2c4151630fd5643f18fae8acfb2b68699aa49b3f
GET /expenses/css/tooltipster-sideTip-light.min.css HTTP/1.1
Host: ppstatic.s3.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://web.rindegastos.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: mJMc0kjYBW9w00IHO1lg54VkMFxaJiueOryNEajbYzfsu/oNQ45jYn5MaJ0VO+eOXBc3wIJG2uCbCA6uTF0c6A==
x-amz-request-id: TY334VMQ0NQ0JDTY
Date: Wed, 22 Feb 2023 20:58:04 GMT
Last-Modified: Wed, 05 Apr 2017 18:28:04 GMT
ETag: "69a5477b4beb94b3accb2f5d95e1a42a"
x-amz-version-id: CToi1nIQnjkQG43CSdIRPudk2XhwsiWQ
Accept-Ranges: bytes
Content-Type: text/css
Server: AmazonS3
Content-Length: 1799
ppstatic.s3.amazonaws.com/expenses/js/date.js
200 OK 12 kB URL HTTP/1.1 ppstatic.s3.amazonaws.com/expenses/js/date.js
IP
Hash 374ce79d1b314709ed0c44a76ff7aba6
0d5ebdb756cb488ee6dfec452fc1cd8803a4ef8b
5f44b926675e71ca114904c21159edabb035f508976986931f9f9762b483a564
GET /expenses/js/date.js HTTP/1.1
Host: ppstatic.s3.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://web.rindegastos.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: xkuhebjaI/Wi7IL5xLnxLbJ/8H7bgDlUXdqcwV8I7LH15Ssw7MZKdplgf5GYmpN3brsuHxNU0Fntr/bo5MxvoQ==
x-amz-request-id: TY38MBDQ3RH042ZQ
Date: Wed, 22 Feb 2023 20:58:04 GMT
Last-Modified: Tue, 11 Aug 2015 14:45:22 GMT
ETag: "374ce79d1b314709ed0c44a76ff7aba6"
x-amz-version-id: null
Accept-Ranges: bytes
Content-Type: application/x-javascript
Server: AmazonS3
Content-Length: 12278
ppstatic.s3.amazonaws.com/expenses/js/formato30.js?v=20220224
200 OK 13 kB URL HTTP/1.1 ppstatic.s3.amazonaws.com/expenses/js/formato30.js?v=20220224
IP
File type Algol 68 source text\012- Pascal source, ASCII text
Hash eb46238c034d15ea34b6e7e098d8a9e4
16d8653b54fbe7b0f3c897857902bcde19a4a308
926acb7dade2a5192733f5c2ec32e7871c3591f364b436ace4181bd01b8b65ba
GET /expenses/js/formato30.js?v=20220224 HTTP/1.1
Host: ppstatic.s3.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://web.rindegastos.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: hW/PeFYOU/FuO+snLFnDizdXVANTt/2TgCmwkh7ceBOMd6aP2SHStKwVxubKQGnvdDSV5EGbfZ1YxxGCfwKG/Q==
x-amz-request-id: TY3ATD71J77X3QBR
Date: Wed, 22 Feb 2023 20:58:04 GMT
x-amz-replication-status: COMPLETED
Last-Modified: Fri, 29 Jun 2018 16:17:57 GMT
ETag: "eb46238c034d15ea34b6e7e098d8a9e4"
x-amz-version-id: IR4f9O.zU.P1OSLzYzkcP4.Ai6BV3VhJ
Accept-Ranges: bytes
Content-Type: application/javascript
Server: AmazonS3
Content-Length: 13255
ppstatic.s3.amazonaws.com/expenses/js/jquery.datePicker.js
200 OK 44 kB URL HTTP/1.1 ppstatic.s3.amazonaws.com/expenses/js/jquery.datePicker.js
IP
File type assembler source, Unicode text, UTF-8 text, with very long lines (477), with CRLF line terminators
Hash b0c26cee7599d645540dc356b421d9f7
96fb8befcf172da3c53e56b986296b6a1dba1443
bee659daf21c4ce2125626060f7a8defd277622284628db71686b9b41b929cc4
GET /expenses/js/jquery.datePicker.js HTTP/1.1
Host: ppstatic.s3.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://web.rindegastos.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: vz3S/IXh/BsEX1u63RD7xa/KazUE648/gEjUtGMN4AoqU5hGbHr0PvxJ9Z9cguMPRzidU/q/fe1oU9B8q1oEKw==
x-amz-request-id: TY36YYC5WC4NEDS3
Date: Wed, 22 Feb 2023 20:58:04 GMT
Last-Modified: Tue, 11 Aug 2015 14:45:43 GMT
ETag: "b0c26cee7599d645540dc356b421d9f7"
x-amz-version-id: null
Accept-Ranges: bytes
Content-Type: application/x-javascript
Server: AmazonS3
Content-Length: 43739
ppstatic.s3.amazonaws.com/expenses/js/validaciones1.js?v=20220224
200 OK 12 kB URL HTTP/1.1 ppstatic.s3.amazonaws.com/expenses/js/validaciones1.js?v=20220224
IP
File type Unicode text, UTF-8 text, with very long lines (959)
Hash 9615bf8ab37b1bc3e48054d612090dd0
8028055ebc7894f70c423be64f2b920015ea58f7
0244489e3c9dc4bb2ad94802ea990d00ae1ccb9b386c3a9acbf86653ea8b80ed
GET /expenses/js/validaciones1.js?v=20220224 HTTP/1.1
Host: ppstatic.s3.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://web.rindegastos.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: RkbEmeTyEdkJThsYjoSlQeV+DwBivR6FbiFm29/stYBFVQSOqTJVJDNIFdZijKXmpzL+ZfwOwsm4zTRblB+KOA==
x-amz-request-id: TY3FAPS8RGT1RKFR
Date: Wed, 22 Feb 2023 20:58:04 GMT
x-amz-replication-status: COMPLETED
Last-Modified: Fri, 29 Jun 2018 16:17:58 GMT
ETag: "9615bf8ab37b1bc3e48054d612090dd0"
x-amz-version-id: 8_lnZFQiJDQwMqbpZzaxKfUb7KUsv5PV
Accept-Ranges: bytes
Content-Type: application/javascript
Server: AmazonS3
Content-Length: 12361
ppstatic.s3.amazonaws.com/expenses/js/jquery.min.js
200 OK 86 kB URL HTTP/1.1 ppstatic.s3.amazonaws.com/expenses/js/jquery.min.js
IP
File type ASCII text, with very long lines (32065)
Hash bb5f9cf31421aebe289fb129d5866718
478d7ded83fbceef05b37553f778aaa4a22ee6a7
3b75fa79f5a776709c5b41245dab02a48830f3d50e317e9bcd1108b05cb8d59b
GET /expenses/js/jquery.min.js HTTP/1.1
Host: ppstatic.s3.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://web.rindegastos.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: pxWeTiZ5dqH7o7v105YKtJN6Fm4/tyZzNpZKu+JjO7mdctQhNWGQZ+ppwEdsCna2BscpHIyx/JMBLViHisRdQA==
x-amz-request-id: TY3D85PQ23KSCS90
Date: Wed, 22 Feb 2023 20:58:04 GMT
x-amz-replication-status: COMPLETED
Last-Modified: Thu, 17 May 2018 21:44:56 GMT
ETag: "bb5f9cf31421aebe289fb129d5866718"
Cache-Control: no-cache
x-amz-version-id: 6t4W9Yo4jMSIjMFraoETOfUlA9Mvw54r
Accept-Ranges: bytes
Content-Type: application/javascript
Server: AmazonS3
Content-Length: 85558
ppstatic.s3.amazonaws.com/expenses/js/gestor-archivos6.js?v=20220224
200 OK 10 kB URL HTTP/1.1 ppstatic.s3.amazonaws.com/expenses/js/gestor-archivos6.js?v=20220224
IP
Hash 9a9ce396838a593113305df6433d8cc2
96706158e4309297ecc54b66ce9e0fc81617604c
1b33bfc8c2369ae0e2403aebb1a91bd727ff3494561602072c23b96b5de05325
GET /expenses/js/gestor-archivos6.js?v=20220224 HTTP/1.1
Host: ppstatic.s3.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://web.rindegastos.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: 93meRcTTfvQD8eXQtosKFN0BCM1ZGq+nIDZONZZoLXdraoZ+Wti6rk1TrFzRDlQ5pbkc6h79kWowgvtg5eNOcQ==
x-amz-request-id: TY3A23R2B0XBEKWD
Date: Wed, 22 Feb 2023 20:58:04 GMT
x-amz-replication-status: COMPLETED
Last-Modified: Fri, 29 Jun 2018 16:17:58 GMT
ETag: "9a9ce396838a593113305df6433d8cc2"
x-amz-version-id: MmO4iOfFWDjE7VsntMqWXOAaC.R32HKT
Accept-Ranges: bytes
Content-Type: application/javascript
Server: AmazonS3
Content-Length: 10223
ppstatic.s3.amazonaws.com/expenses/js/tooltipster.bundle.min.js
200 OK 39 kB URL HTTP/1.1 ppstatic.s3.amazonaws.com/expenses/js/tooltipster.bundle.min.js
IP
File type ASCII text, with very long lines (32111)
Hash 62adf085c6b904a8425c58015cf476d3
d6027daae195119fd76ca4e53a4576fec3501880
736c0c08baa411f097cdb53c270b645f636cc74d9f3c0d9f31c2413dba8e5f99
GET /expenses/js/tooltipster.bundle.min.js HTTP/1.1
Host: ppstatic.s3.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://web.rindegastos.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: vScViRHbQib2/5C8zVtM12vh8PTk4d90zs/7rgPx+Mu1PYHRv7odMZqmEep16STWOMQ8GG/QI0hObyrvHKqVGw==
x-amz-request-id: TY3CV40VVQJMG1QS
Date: Wed, 22 Feb 2023 20:58:04 GMT
Last-Modified: Wed, 05 Apr 2017 18:29:22 GMT
ETag: "62adf085c6b904a8425c58015cf476d3"
x-amz-version-id: ALb3CfmUDqru3ydrMPJw9usP2XFCpSA4
Accept-Ranges: bytes
Content-Type: application/javascript
Server: AmazonS3
Content-Length: 39392
ppstatic.s3.amazonaws.com/expenses/css/jquery-ui2.css
200 OK 35 kB URL HTTP/1.1 ppstatic.s3.amazonaws.com/expenses/css/jquery-ui2.css
IP
File type ASCII text, with very long lines (2363)
Hash f6f0d76ca650be09e00268384d00dc4a
07c6fa02eec3c15e9dbae4646144afeb1b108283
34b0e967524aca9599338d8065c22f7c0b45f7981a0946b6a558de4a7ed75fb1
GET /expenses/css/jquery-ui2.css HTTP/1.1
Host: ppstatic.s3.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://web.rindegastos.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: j8vB9nAaBvmzKjeMqwzrW83xe8ww2mcy1xpfv9wwWEiax9qjs/RGvN0lXIyRZi66VjkLmRmA5Mi2Cx1oJpY9Bg==
x-amz-request-id: TY3DC3D4X1M118WN
Date: Wed, 22 Feb 2023 20:58:04 GMT
Last-Modified: Wed, 05 Apr 2017 18:28:09 GMT
ETag: "f6f0d76ca650be09e00268384d00dc4a"
x-amz-version-id: myqnckGcx6jeIh8tJhfP99A3LsiA3BpO
Accept-Ranges: bytes
Content-Type: text/css
Server: AmazonS3
Content-Length: 35388
ppstatic.s3.amazonaws.com/expenses/js/dropzonejs.js
200 OK 63 kB URL HTTP/1.1 ppstatic.s3.amazonaws.com/expenses/js/dropzonejs.js
IP
File type ASCII text, with very long lines (3291)
Hash 9904a99cba14bd9ac0f5b173ced7d0bf
b560fa3e373038a393898d53b9da3ab674e3623a
d808a4d57206818dd5cb6bc788fc77515fd830f5b20aacb6173356ba895eb4d1
GET /expenses/js/dropzonejs.js HTTP/1.1
Host: ppstatic.s3.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://web.rindegastos.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: L3DD9+8kpraz0G8EWhMTjvMDdbFUdYFagjjfHvIunqCHm5n2hLtww0Mkp9gjTIBL3p9TElCc8/VPFVMSooPTtA==
x-amz-request-id: TY308XBM3HMR1VAQ
Date: Wed, 22 Feb 2023 20:58:04 GMT
Last-Modified: Tue, 11 Aug 2015 14:45:26 GMT
ETag: "9904a99cba14bd9ac0f5b173ced7d0bf"
x-amz-version-id: null
Accept-Ranges: bytes
Content-Type: application/x-javascript
Server: AmazonS3
Content-Length: 62986
ppstatic.s3.amazonaws.com/expenses/js/account50.js?v=20220224
200 OK 50 kB URL HTTP/1.1 ppstatic.s3.amazonaws.com/expenses/js/account50.js?v=20220224
IP
File type Unicode text, UTF-8 text, with CRLF line terminators
Hash 344017a9838b5e78b6f3144d92eaff06
ead0e3d4f3692fbe51ae5f56e7663366d84dc95d
be089c8b39c6a09495ce979e76be499e1f5769066318844c28bc3d75a5360b9e
GET /expenses/js/account50.js?v=20220224 HTTP/1.1
Host: ppstatic.s3.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://web.rindegastos.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: U/EM/F84q8rR9P64/5uJ3bMBZDEDZXzXQb2dpqCVbKTjHl08wOrHzR0+6pZKidweaSBrl7XSDsBe/Yr8RarX0Q==
x-amz-request-id: TY34XF1G3PPST24N
Date: Wed, 22 Feb 2023 20:58:04 GMT
x-amz-replication-status: COMPLETED
Last-Modified: Thu, 24 Feb 2022 14:14:17 GMT
ETag: "344017a9838b5e78b6f3144d92eaff06"
x-amz-version-id: k5Q9boB7PWEj2aoy369KbtKn9T5v0jEK
Accept-Ranges: bytes
Content-Type: application/javascript
Server: AmazonS3
Content-Length: 50096
ppstatic.s3.amazonaws.com/expenses/js/ajaxupload.js
200 OK 14 kB URL HTTP/1.1 ppstatic.s3.amazonaws.com/expenses/js/ajaxupload.js
IP
File type Algol 68 source text\012- Pascal source, ASCII text
Hash 6e1afbb205e505fe40f5644aa608d278
4417c0ae2e753594924f7a332f4f2ade8070330b
1099979aebc07d7ba8c7b02da95afd733083d266cf672329a284cbf7087ebb10
GET /expenses/js/ajaxupload.js HTTP/1.1
Host: ppstatic.s3.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://web.rindegastos.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: oFbSc6FXCf2N5W7oFxt+Z2AWIQb1GAnEjeUXH4OoHYuQZpDKAvbU75R+XM0RhtxvsREoaCQfYIUYsY2V9ExThg==
x-amz-request-id: TY33S0NETF3803QZ
Date: Wed, 22 Feb 2023 20:58:04 GMT
x-amz-replication-status: COMPLETED
Last-Modified: Thu, 17 May 2018 21:44:53 GMT
ETag: "6e1afbb205e505fe40f5644aa608d278"
Cache-Control: no-cache
x-amz-version-id: qCo0lWot.1MaQ.7bupKELNTNhk56.Nn1
Accept-Ranges: bytes
Content-Type: application/javascript
Server: AmazonS3
Content-Length: 13965
ppstatic.s3.amazonaws.com/expenses/js/highcharts/highcharts.js
200 OK 154 kB URL HTTP/1.1 ppstatic.s3.amazonaws.com/expenses/js/highcharts/highcharts.js
IP
File type Unicode text, UTF-8 text, with very long lines (596)
Size 154 kB (153909 bytes)
Hash bdd06f45e34c33dfaaac249f3eb50040
9305510952cfeb4ed26cc43965d070afadc1e021
af5e4f327b79424352a42bf43df71e6a2f52d6f8948b82d6a42b4c2e97f7bfea
GET /expenses/js/highcharts/highcharts.js HTTP/1.1
Host: ppstatic.s3.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://web.rindegastos.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: YXBXwnWGvqQYln2+w2ZspxIsoD8GRy1G7H1YirkY4n77IY37l5x+uLp4SthupxS75rcs/uIZhLezvtGHbDg+nQ==
x-amz-request-id: TY37FTXYJH2N8BGJ
Date: Wed, 22 Feb 2023 20:58:04 GMT
Last-Modified: Thu, 16 Oct 2014 03:29:55 GMT
ETag: "bdd06f45e34c33dfaaac249f3eb50040"
x-amz-version-id: null
Accept-Ranges: bytes
Content-Type: application/x-javascript
Server: AmazonS3
Content-Length: 153909
ppstatic.s3.amazonaws.com/expenses/js/jquery.gdocsviewer2.min.js
200 OK 748 B URL HTTP/1.1 ppstatic.s3.amazonaws.com/expenses/js/jquery.gdocsviewer2.min.js
IP
File type ASCII text, with very long lines (575)
Hash 3a328a49ed19de5159e05427341cc6d3
9fdc928c44ce000307dd751e42c08ebd599fac79
038cf89078c60faed0eff6d37c3572524693655ec766c14872c66ab5b8ee1e40
GET /expenses/js/jquery.gdocsviewer2.min.js HTTP/1.1
Host: ppstatic.s3.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://web.rindegastos.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: N5Tt/7n4dGza+x7qgRPr1IM7JPHuVLa88/MGO9+qRKNzskpuvRnOjD6EBiC9D9a810ltrKGvsyfTANUGhYh/MA==
x-amz-request-id: TY3ET4E8V3GN3ZG5
Date: Wed, 22 Feb 2023 20:58:04 GMT
Last-Modified: Fri, 05 Feb 2016 12:53:56 GMT
ETag: "3a328a49ed19de5159e05427341cc6d3"
x-amz-version-id: null
Accept-Ranges: bytes
Content-Type: application/x-javascript
Server: AmazonS3
Content-Length: 748
ppstatic.s3.amazonaws.com/expenses/js/jquery.panzoom.js
200 OK 12 kB URL HTTP/1.1 ppstatic.s3.amazonaws.com/expenses/js/jquery.panzoom.js
IP
File type ASCII text, with very long lines (12131)
Hash 9dd3f95de028e069807a46e929345e48
134e3c3b98b0e5139dfaf2644f1c3a28e176ea8c
96e074a0f68fba607a772b6d2dda7598e3d5e75378b185465862b59a07c65f76
GET /expenses/js/jquery.panzoom.js HTTP/1.1
Host: ppstatic.s3.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://web.rindegastos.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: r8+JiKMDdUj8RQckZHVRPS6fbb3G5RnRjzdAQRNKgFHZY2N02qGcfzTWHdA72/64ZddZgBG6X8My0+iuyuKzYg==
x-amz-request-id: TY39Q16XHNKPJH9Y
Date: Wed, 22 Feb 2023 20:58:04 GMT
Last-Modified: Tue, 11 Aug 2015 14:45:53 GMT
ETag: "9dd3f95de028e069807a46e929345e48"
x-amz-version-id: null
Accept-Ranges: bytes
Content-Type: application/x-javascript
Server: AmazonS3
Content-Length: 12398
ppstatic.s3.amazonaws.com/expenses/js/font-awesome/css/font-awesome.min.css
200 OK 29 kB URL HTTP/1.1 ppstatic.s3.amazonaws.com/expenses/js/font-awesome/css/font-awesome.min.css
IP
File type ASCII text, with very long lines (28900)
Hash 4083f5d376eb849a458cc790b53ba080
fb5b49426dee7f1508500e698d1b3c6b04c8fcce
008a1d103902f15fdb1c191fcb1ce8954330e7b8de43d09abb08555ba609f420
GET /expenses/js/font-awesome/css/font-awesome.min.css HTTP/1.1
Host: ppstatic.s3.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://web.rindegastos.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: j3Kwuc4Fk0ma4L41/tzQRTLqAhr8unqzRoTwfQBpUmHJi+Z3HgPPrs7GsazkH7zNPcywWO2u+HsWdo87aeMtUQ==
x-amz-request-id: TY3EDZ0JS54501H9
Date: Wed, 22 Feb 2023 20:58:04 GMT
Last-Modified: Wed, 05 Oct 2016 16:10:59 GMT
ETag: "4083f5d376eb849a458cc790b53ba080"
x-amz-version-id: 5_kOOOaG7DJerDKp8FxPHwxzBf3Fivtm
Accept-Ranges: bytes
Content-Type: text/css
Server: AmazonS3
Content-Length: 29063
ppstatic.s3.amazonaws.com/expenses/js/jquery-ui2.js
200 OK 471 kB URL HTTP/1.1 ppstatic.s3.amazonaws.com/expenses/js/jquery-ui2.js
IP
File type ASCII text, with very long lines (547)
Size 471 kB (470596 bytes)
Hash 04a4db2983450a2970c459ba87b4210a
3efaf11e60ea8c541b6dc26f0ef09f195732587a
0c8e8d7408611519ceda4e759ae9987834a17addc8f0028241ffed7fb0113612
GET /expenses/js/jquery-ui2.js HTTP/1.1
Host: ppstatic.s3.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://web.rindegastos.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: +pTIuvXHuHr/oda97gMRf4k7ccpnzY4wTwuSeRNh7iAzJfNjGZslHyqZX4rx0+ulg8F1W1lZkOoq96P3TpdGYA==
x-amz-request-id: TY30XD5WYP0WBJRH
Date: Wed, 22 Feb 2023 20:58:04 GMT
Last-Modified: Wed, 30 Sep 2015 21:05:47 GMT
ETag: "04a4db2983450a2970c459ba87b4210a"
x-amz-version-id: null
Accept-Ranges: bytes
Content-Type: application/x-javascript
Server: AmazonS3
Content-Length: 470596
ppstatic.s3.amazonaws.com/expenses/js/html2canvas.min.js
200 OK 167 kB URL HTTP/1.1 ppstatic.s3.amazonaws.com/expenses/js/html2canvas.min.js
IP
Size 167 kB (166615 bytes)
Hash a774ff8bf77302a3cd5436608e1b3515
190a641cb725e6ce90532af50121083f65dedf42
d8cbb07977d1c1c7d160052b78a503d589c39a823136cb3eb5acd87342ebdcbb
GET /expenses/js/html2canvas.min.js HTTP/1.1
Host: ppstatic.s3.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://web.rindegastos.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: GNXEK4jrHyIu2CUXy9zoZQYpHbWwMs/GwamYWJ+KnVj+SEAV94DX0SBZbgaSTKTFRAwfylt1VmYGyuXdfq9+5Q==
x-amz-request-id: TY30DNWHKCAQY6CH
Date: Wed, 22 Feb 2023 20:58:04 GMT
x-amz-replication-status: COMPLETED
Last-Modified: Wed, 02 Jan 2019 13:12:52 GMT
ETag: "0e52edb30e4a8b8d654d5db2a09203a1"
x-amz-version-id: Mmr7detyCxze9vMZZBuh0XwqmcjvuoER
Accept-Ranges: bytes
Content-Type: application/javascript
Server: AmazonS3
Content-Length: 166241
ppstatic.s3.amazonaws.com/expenses/images/new-home/logo_rindegastos_hdr.png
200 OK 17 kB URL HTTP/1.1 ppstatic.s3.amazonaws.com/expenses/images/new-home/logo_rindegastos_hdr.png
IP
File type PNG image data, 510 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 60b6932c25162cb574edbc934c7ce50d
69bae3f5aabb36115e4e09cf20cf984dc887a196
18c63b4dae26e479dc4c4d41458bc6339d59e768964f44054741142a4812e6e8
GET /expenses/images/new-home/logo_rindegastos_hdr.png HTTP/1.1
Host: ppstatic.s3.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://web.rindegastos.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: 1SGOtOeFSx7hQ+HKQWRbcfuGXrhwz7wSQ8EpHYeF8L8rBjIcKeJ0AAM28nXV3jicuofQ80eKjA/8nKfw2DNzCQ==
x-amz-request-id: TY3A563A6T90FXFJ
Date: Wed, 22 Feb 2023 20:58:04 GMT
Last-Modified: Wed, 13 Dec 2017 13:33:34 GMT
ETag: "60b6932c25162cb574edbc934c7ce50d"
Cache-Control: no-cache
x-amz-version-id: nM2d9I4Iq4zkUR48ncMyuIHX2hQG_6Zw
Accept-Ranges: bytes
Content-Type: image/png
Server: AmazonS3
Content-Length: 16620
ppstatic.s3.amazonaws.com/expenses/images/icon-expenses-ios-152x152.png
200 OK 3.8 kB URL HTTP/1.1 ppstatic.s3.amazonaws.com/expenses/images/icon-expenses-ios-152x152.png
IP
File type PNG image data, 152 x 152, 8-bit/color RGB, non-interlaced\012- data
Hash 63df7eed418e312e68ff89f8b4481439
42b16982196af6551599ada2057000a9a00722a2
3b747819b66f74855363f0302566954d462bb457920fdef69c1d9a8a38eb09d7
GET /expenses/images/icon-expenses-ios-152x152.png HTTP/1.1
Host: ppstatic.s3.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://web.rindegastos.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: tbzZp62/TQC97zlhwj9Z9eBqP04MQxfNZ1nfvzL/QIYyWOE43OLBaAPMoo1xR9nRkwsCLeiSaG/ilq3lZR10MQ==
x-amz-request-id: 8NHQ2PNG3WSSC4FN
Date: Wed, 22 Feb 2023 20:58:05 GMT
Last-Modified: Thu, 04 Sep 2014 21:53:59 GMT
ETag: "63df7eed418e312e68ff89f8b4481439"
x-amz-version-id: null
Accept-Ranges: bytes
Content-Type: image/png
Server: AmazonS3
Content-Length: 3753
ppstatic.s3.amazonaws.com/expenses/js/font-awesome/fonts/fontawesome-webfont.woff2?v=4.6.3
200 OK 72 kB URL HTTP/1.1 ppstatic.s3.amazonaws.com/expenses/js/font-awesome/fonts/fontawesome-webfont.woff2?v=4.6.3
IP
File type Web Open Font Format (Version 2), TrueType, length 71896, version 4.393\012- data
Hash e6cf7c6ec7c2d6f670ae9d762604cb0b
97e438cc545714309882fbceadbf344fcaddcec5
7dacf83f51179de8d7980a513e67ab3a08f2c6272bb5946df8fd77c0d1763b73
GET /expenses/js/font-awesome/fonts/fontawesome-webfont.woff2?v=4.6.3 HTTP/1.1
Host: ppstatic.s3.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://web.rindegastos.com
Connection: keep-alive
Referer: https://ppstatic.s3.amazonaws.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: LK6z3amp8uv+VOKgW+FCL5ZrzbkGjvc2ifh+l6U5qhKLbNkogPboiSKhRZxOfuX8wDBx7oWI3yhz9SIXFk76oA==
x-amz-request-id: 8NHRJ38XCS4V1APX
Date: Wed, 22 Feb 2023 20:58:05 GMT
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET
Access-Control-Max-Age: 3000
Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method
Last-Modified: Wed, 05 Oct 2016 16:13:05 GMT
ETag: "e6cf7c6ec7c2d6f670ae9d762604cb0b"
x-amz-version-id: OHwM4jbC4BbBa0APuMeeOZ58pwuzjSm_
Accept-Ranges: bytes
Content-Type: application/octet-stream
Server: AmazonS3
Content-Length: 71896
px.ads.linkedin.com/collect?v=2&fmt=js&pid=66325&time=1677099486977&url=https%3A%2F%2Fweb.rindegastos.com%2Fdocument%2FexpenseReport%3Fe%3D3780990%26k%3D159571-16182-63dc11e4d9091&tm=gtmv2
302 Found 0 B URL HTTP/2 px.ads.linkedin.com/collect?v=2&fmt=js&pid=66325&time=1677099486977&url=https%3A%2F%2Fweb.rindegastos.com%2Fdocument%2FexpenseReport%3Fe%3D3780990%26k%3D159571-16182-63dc11e4d9091&tm=gtmv2
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /collect?v=2&fmt=js&pid=66325&time=1677099486977&url=https%3A%2F%2Fweb.rindegastos.com%2Fdocument%2FexpenseReport%3Fe%3D3780990%26k%3D159571-16182-63dc11e4d9091&tm=gtmv2 HTTP/1.1
Host: px.ads.linkedin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://web.rindegastos.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
location: https://www.linkedin.com/px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D66325%26time%3D1677099486977%26url%3Dhttps%253A%252F%252Fweb.rindegastos.com%252Fdocument%252FexpenseReport%253Fe%253D3780990%2526k%253D159571-16182-63dc11e4d9091%26tm%3Dgtmv2%26liSync%3Dtrue
set-cookie: UserMatchHistory=AQIT96BnLmaLKQAAAYZ660Wd2HzGHblGTocroCasKzlk0F5sdCbxA7F9tXkJj-6LQgsLjxejvMzPvw; Max-Age=2592000; Expires=Fri, 24 Mar 2023 20:58:04 GMT; SameSite=None; Path=/; Domain=.linkedin.com; Secure
AnalyticsSyncHistory=AQIi_9e5PlXqxwAAAYZ660WdzyF7K2I1SnZfwjkxc9P8pNoEJhLK0RKwUi5kEM3U9n8YIXtNzjyuxThIcTFePQ; Max-Age=2592000; Expires=Fri, 24 Mar 2023 20:58:04 GMT; SameSite=None; Path=/; Domain=.linkedin.com; Secure
bcookie="v=2&5dda0ea4-cf8a-4762-8245-df201e33c52c"; domain=.linkedin.com; Path=/; Secure; Expires=Thu, 22-Feb-2024 20:58:04 GMT; SameSite=None
lidc="b=TGST09:s=T:r=T:a=T:p=T:g=2469:u=1:x=1:i=1677099484:t=1677185884:v=2:sig=AQExJ9_h4-NAhiDtExTYlERXKDv8wkhD"; Expires=Thu, 23 Feb 2023 20:58:04 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
x-li-fabric: prod-ltx1
x-li-pop: afd-prod-ltx1-x
x-li-proto: http/2
x-li-uuid: AAX1UCcH2+q8TKe7oPHhvw==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 2B50D10E50664B2A95ED7FBAE2A8CE71 Ref B: OSL30EDGE0507 Ref C: 2023-02-22T20:58:04Z
date: Wed, 22 Feb 2023 20:58:03 GMT
content-length: 0
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 280 B IP
Hash 573099d29dc3c62ebb64160e006f2c0a
be952ba2a5fed93b5794f968b32e8c1bdf6c23d3
46d5899eee66f135072a1db71cc8761a23f814390069b371e79b4824c9a2c1d1
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 22 Feb 2023 20:58:04 GMT
Server: ECS (amb/6B88)
Content-Length: 280
www.linkedin.com/px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D66325%26time%3D1677099486977%26url%3Dhttps%253A%252F%252Fweb.rindegastos.com%252Fdocument%252FexpenseReport%253Fe%253D3780990%2526k%253D159571-16182-63dc11e4d9091%26tm%3Dgtmv2%26liSync%3Dtrue
302 Found 0 B URL HTTP/2 www.linkedin.com/px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D66325%26time%3D1677099486977%26url%3Dhttps%253A%252F%252Fweb.rindegastos.com%252Fdocument%252FexpenseReport%253Fe%253D3780990%2526k%253D159571-16182-63dc11e4d9091%26tm%3Dgtmv2%26liSync%3Dtrue
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D66325%26time%3D1677099486977%26url%3Dhttps%253A%252F%252Fweb.rindegastos.com%252Fdocument%252FexpenseReport%253Fe%253D3780990%2526k%253D159571-16182-63dc11e4d9091%26tm%3Dgtmv2%26liSync%3Dtrue HTTP/1.1
Host: www.linkedin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://web.rindegastos.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
cache-control: no-cache, no-store
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
location: https://px.ads.linkedin.com/collect?v=2&fmt=js&pid=66325&time=1677099486977&url=https%3A%2F%2Fweb.rindegastos.com%2Fdocument%2FexpenseReport%3Fe%3D3780990%26k%3D159571-16182-63dc11e4d9091&tm=gtmv2&liSync=true
set-cookie: bcookie="v=2&baa5aafd-4bec-418b-88b9-bdc7ddb9fc0a"; Domain=.linkedin.com; Expires=Thu, 22-Feb-2024 20:58:04 GMT; Path=/; Secure; SameSite=None
bscookie="v=1&202302222058045a92493a-3836-4411-8a0e-60b7700ff42bAQGtUpLYwT0q4mnHsg5vAqdf54pdnsYD"; Domain=.www.linkedin.com; Expires=Thu, 22-Feb-2024 20:58:04 GMT; Path=/; HttpOnly; Secure; SameSite=None
li_gc=MTswOzE2NzcwOTk0ODQ7MjswMjGqNhxKmLkwTW4LxOiuJr4plyzGOhrZH51+NSyXrjbgWQ==; Domain=.linkedin.com; Expires=Mon, 21 Aug 2023 20:58:04 GMT; Path=/; Secure; SameSite=None
lidc="b=TGST09:s=T:r=T:a=T:p=T:g=2469:u=1:x=1:i=1677099484:t=1677185884:v=2:sig=AQExJ9_h4-NAhiDtExTYlERXKDv8wkhD"; Expires=Thu, 23 Feb 2023 20:58:04 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
content-security-policy: default-src *; connect-src 'self' *.licdn.com *.linkedin.com wss://*.linkedin.com dpm.demdex.net/id lnkd.demdex.net blob: accounts.google.com/gsi/ linkedin.sc.omtrdc.net/b/ss/ *.qualtrics.com *.adyen.com *.microsoft.com; img-src data: blob: *; font-src data: *; style-src 'unsafe-inline' 'self' static-src.linkedin.com *.licdn.com; script-src 'unsafe-inline' 'unsafe-eval' 'self' spdy.linkedin.com static-src.linkedin.com *.ads.linkedin.com *.licdn.com static.chartbeat.com bcvipva02.rightnowtech.com www.bizographics.com sjs.bizographics.com js.bizographics.com d.la4-c1-was.salesforceliveagent.com platform.linkedin.com platform-akam.linkedin.com platform-ecst.linkedin.com platform-azur.linkedin.com; object-src 'none'; media-src blob: *; worker-src blob: 'self'; frame-src blob: lnkd-communities: voyager: *; frame-ancestors 'self' *.linkedin.com teams.microsoft.com client.learningapp.microsoft.com
x-frame-options: sameorigin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
expect-ct: max-age=86400, report-uri="https://www.linkedin.com/platform-telemetry/ct"
x-li-fabric: prod-ltx1
x-li-pop: afd-prod-ltx1-x
x-li-proto: http/2
x-li-uuid: AAX1UCcKesGuXCrJRmZ2bw==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 2138A7918E7545C39B1703075ED3C32D Ref B: OSL30EDGE0507 Ref C: 2023-02-22T20:58:04Z
date: Wed, 22 Feb 2023 20:58:04 GMT
content-length: 0
X-Firefox-Spdy: h2
px.ads.linkedin.com/collect?v=2&fmt=js&pid=66325&time=1677099486977&url=https%3A%2F%2Fweb.rindegastos.com%2Fdocument%2FexpenseReport%3Fe%3D3780990%26k%3D159571-16182-63dc11e4d9091&tm=gtmv2&liSync=true
200 OK 0 B URL HTTP/2 px.ads.linkedin.com/collect?v=2&fmt=js&pid=66325&time=1677099486977&url=https%3A%2F%2Fweb.rindegastos.com%2Fdocument%2FexpenseReport%3Fe%3D3780990%26k%3D159571-16182-63dc11e4d9091&tm=gtmv2&liSync=true
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /collect?v=2&fmt=js&pid=66325&time=1677099486977&url=https%3A%2F%2Fweb.rindegastos.com%2Fdocument%2FexpenseReport%3Fe%3D3780990%26k%3D159571-16182-63dc11e4d9091&tm=gtmv2&liSync=true HTTP/1.1
Host: px.ads.linkedin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://web.rindegastos.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
set-cookie: bcookie="v=2&d2826be3-2c73-41b8-8283-b3cd06a42918"; domain=.linkedin.com; Path=/; Secure; Expires=Thu, 22-Feb-2024 20:58:04 GMT; SameSite=None
lidc="b=TGST09:s=T:r=T:a=T:p=T:g=2469:u=1:x=1:i=1677099484:t=1677185884:v=2:sig=AQExJ9_h4-NAhiDtExTYlERXKDv8wkhD"; Expires=Thu, 23 Feb 2023 20:58:04 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
x-li-fabric: prod-ltx1
x-li-pop: afd-prod-ltx1-x
x-li-proto: http/2
x-li-uuid: AAX1UCcNDpB04OP3m721rg==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 122C87FC36344C8D9BAC1123821196EA Ref B: OSL30EDGE0507 Ref C: 2023-02-22T20:58:04Z
date: Wed, 22 Feb 2023 20:58:04 GMT
content-length: 0
X-Firefox-Spdy: h2
static.zdassets.com/web_widget/latest/messenger/web-widget-messenger-3b16afe.js
200 OK 182 kB URL HTTP/2 static.zdassets.com/web_widget/latest/messenger/web-widget-messenger-3b16afe.js
IP
File type ASCII text, with very long lines (13861), with no line terminators
Size 182 kB (181917 bytes)
Hash 70cdb5002216dfab642feee5c176c3cf
f3c98f180463a360e4dd825fec191260d0d182e9
000da0a0a31ccfef27c8ae2f4e54a05c10f76faea9133682de21bf91f327a82a
GET /web_widget/latest/messenger/web-widget-messenger-3b16afe.js HTTP/1.1
Host: static.zdassets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 22 Feb 2023 20:58:04 GMT
content-type: application/javascript; charset=utf-8
x-amz-id-2: rdthU7eMdDixNcfsK469k8d3MtB7U1ShvoFF9s9DiAb1PjC11gXdvDZbU9+jL8hbi542vQ1Lxig=
x-amz-request-id: GSCQE20F7D97H6H1
x-amz-replication-status: COMPLETED
last-modified: Tue, 21 Feb 2023 00:27:19 GMT
etag: W/"52c1052f71279ae3121cda6862f4e346"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=31536000
expires: Wed, 21 Feb 2024 00:27:17 GMT
x-amz-version-id: ROxEcgheIM0wWum9e6A0WiOO37yfNxY4
cf-cache-status: HIT
age: 57577
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VsNsdirgbZK6KG9D7YfpAYjxGCC3oOYTyoSKVEyTw3rfRVxQMrRsearn44kwYzxEgwA71vjBcxJ9UuKkSqC7frQl%2FOEKRbYkMHdE5TTVLoCjPkdAtyMxt%2FYY764MIL%2FOvtSgnL8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0
server: cloudflare
cf-ray: 79daa3439e97b511-OSL
content-encoding: br
X-Firefox-Spdy: h2
forms.hubspot.com/collected-forms/v1/config/json?portalId=3276114&utk=
200 OK 0 B URL HTTP/2 forms.hubspot.com/collected-forms/v1/config/json?portalId=3276114&utk=
IP
GET /collected-forms/v1/config/json?portalId=3276114&utk= HTTP/1.1
Host: forms.hubspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.rindegastos.com
Connection: keep-alive
Referer: https://www.rindegastos.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 22 Feb 2023 20:58:00 GMT
content-type: application/json;charset=utf-8
vary: origin
x-hubspot-correlation-id: f33ae8bb-d129-42d2-91ec-fe51e56af216
access-control-allow-credentials: false
access-control-allow-origin: https://www.rindegastos.com
access-control-allow-methods: GET, OPTIONS, PUT, POST, DELETE, PATCH, HEAD
access-control-allow-headers: *
access-control-max-age: 180
x-robots-tag: none
cf-cache-status: DYNAMIC
set-cookie: __cf_bm=yLAmKX5H_J7jDmsbtXnd7JxhJUhqV9_YmqcaUeBiHOg-1677099480-0-AezYZUNsQHlq2a2F6m5HmJAHdUeMmSd1c2cF+kQ+5ZliZe+vaTVUX26q2lzN2Bd24kWykaniRs2mMvsYOAJpDbI=; path=/; expires=Wed, 22-Feb-23 21:28:00 GMT; domain=.hubspot.com; HttpOnly; Secure; SameSite=None
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vhaGu0JcPlpODIozYCmai5n5%2BN8%2BlCOzblGmOIw4IIxoKTrIlcM9by2myolt0j3nu5qVGKFsQrBpDqo0E4XozoyFxj7H7N80iIBNC5venBb%2F1lcC5KGgcDIg9egz6Qr79pB0"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 79daa32aaca0b512-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
static.zdassets.com/web_widget/latest/web-widget-framework-03b545657e4c10661391.js
200 OK 0 B URL HTTP/2 static.zdassets.com/web_widget/latest/web-widget-framework-03b545657e4c10661391.js
IP
GET /web_widget/latest/web-widget-framework-03b545657e4c10661391.js HTTP/1.1
Host: static.zdassets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 22 Feb 2023 20:58:04 GMT
content-type: application/javascript; charset=utf-8
x-amz-id-2: jjT+e2KWedB6F7mYa217oOeBGrlUu/L7+hdGXcZQG5fEkYn6SlAWkDDq69J0pklqVe6YjYo/DNc=
x-amz-request-id: 5RZ5ERN3T7MZ4VAR
x-amz-replication-status: COMPLETED
last-modified: Tue, 21 Feb 2023 00:20:59 GMT
etag: W/"9c50d89494681e279aeaac51d2701d39"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=31536000
expires: Wed, 21 Feb 2024 00:20:58 GMT
x-amz-version-id: 9h2FQYITt5Am1tJtDcobJAehnhGzVF0L
cf-cache-status: HIT
age: 57580
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=HvFASMo3QHEfOi%2BcoJrh9NYTupA6fspQlzt%2BInynhI3Vlf52uMeuB%2FRMRmWPTgjcZ7NM%2BsqNW2MHpcaRIhWN4%2FDVMaUM%2F8DCwHMRocV15NbMGiZ7Wih5wtNQslY15R06XK5Qdw0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0
server: cloudflare
cf-ray: 79daa3414b40b511-OSL
content-encoding: br
X-Firefox-Spdy: h2
static.zdassets.com/web_widget/latest/messenger/web-widget-3017-3b16afe.js
200 OK 0 B URL HTTP/2 static.zdassets.com/web_widget/latest/messenger/web-widget-3017-3b16afe.js
IP
GET /web_widget/latest/messenger/web-widget-3017-3b16afe.js HTTP/1.1
Host: static.zdassets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 22 Feb 2023 20:58:05 GMT
content-type: application/javascript; charset=utf-8
x-amz-id-2: SzI6iP665QfWZwWOVnDGrbLDhEMHMKkqABdbodEcfOOJVQ7dR4o23EtFxkeMF2kq7n0eSx1HwdM=
x-amz-request-id: F14XHRQ8STFRQSWW
x-amz-replication-status: COMPLETED
last-modified: Tue, 21 Feb 2023 00:27:19 GMT
etag: W/"40d0e2b632d1b990738af3991e0aecb1"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=31536000
expires: Wed, 21 Feb 2024 00:27:18 GMT
x-amz-version-id: _qaExmkq18frTk2JkSY5aha5XjEcZ5Cq
cf-cache-status: HIT
age: 57577
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ROP8G5c1D0f3GJp1LSQzDPMZVyIA5UhEuddmmWItSkiRvmAIAkOzVxRkZjm6C52i8Pyy8WrTH%2FxybmPXtScJd9nL063NukRq9KQcd2L5un5uiZB8OEc6TI1ehNPYxTy0vwVPe9w%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0
server: cloudflare
cf-ray: 79daa345591db511-OSL
content-encoding: br
X-Firefox-Spdy: h2
static.zdassets.com/web_widget/latest/messenger/web-widget-3487-3b16afe.js
200 OK 0 B URL HTTP/2 static.zdassets.com/web_widget/latest/messenger/web-widget-3487-3b16afe.js
IP
GET /web_widget/latest/messenger/web-widget-3487-3b16afe.js HTTP/1.1
Host: static.zdassets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 22 Feb 2023 20:58:05 GMT
content-type: application/javascript; charset=utf-8
x-amz-id-2: lPTOA9jxc0fjh3PH3ETVpy32NJLdqqfuSfzvGiSxri0bkuLw73sZJ0J2aGqmp75Zmjm4Pl8LDwE=
x-amz-request-id: F14MX5408T4KWR5S
x-amz-replication-status: COMPLETED
last-modified: Tue, 21 Feb 2023 00:27:19 GMT
etag: W/"e13cb194c094696221c50555170f09ef"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=31536000
expires: Wed, 21 Feb 2024 00:27:18 GMT
x-amz-version-id: RsGn6XZiCvRkfeI1l.xuWvYNOq4EMEqQ
cf-cache-status: HIT
age: 57577
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=bml9jnrbxiTqtLwNFViBB8rZ9Ir0YFH70J%2B2Oz72VqjONgVqNz9sjuHLtWqNLA2%2B6F7J7Y%2FTEE5ddvpeM%2FSEHAu8h%2FpbC8pzFFHRFfGzk7v3DUY8v6GMu4QG7EqBBmV1KyTfWqs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0
server: cloudflare
cf-ray: 79daa3455920b511-OSL
content-encoding: br
X-Firefox-Spdy: h2
www.rindegastos.com/polyfills.778d7d2ca68c77f4.js
200 OK 0 B URL HTTP/2 www.rindegastos.com/polyfills.778d7d2ca68c77f4.js
IP
GET /polyfills.778d7d2ca68c77f4.js HTTP/1.1
Host: www.rindegastos.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rindegastos.com/document/expenseReport?e=3780990&k=159571-16182-63dc11e4d9091
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Wed, 22 Feb 2023 20:57:53 GMT
last-modified: Wed, 15 Feb 2023 17:46:29 GMT
etag: W/"222b0f4ec57bcb8cbd0707a57e799e86"
x-amz-server-side-encryption: AES256
server: AmazonS3
cache-control: public, max-age=0, s-maxage=600
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: gKrdfz6U7X-HNhy2ZkYII-eGZ1MvpeEdrTobslphQvfMghKirc1jTw==
age: 7
X-Firefox-Spdy: h2
ekr.zdassets.com/compose/4f349ffb-427f-4fb0-934a-55bdcc3319d2
200 OK 0 B URL HTTP/2 ekr.zdassets.com/compose/4f349ffb-427f-4fb0-934a-55bdcc3319d2
IP
GET /compose/4f349ffb-427f-4fb0-934a-55bdcc3319d2 HTTP/1.1
Host: ekr.zdassets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://web.rindegastos.com
Connection: keep-alive
Referer: https://web.rindegastos.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 22 Feb 2023 20:58:04 GMT
content-type: application/json; charset=utf-8
status: 200 OK
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-expose-headers:
access-control-max-age: 7200
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-download-options: noopen
x-permitted-cross-domain-policies: none
referrer-policy: strict-origin-when-cross-origin
cdn-cache-control: max-age=60
cache-control: max-age=600, public, stale-while-revalidate=600, stale-if-error=21600
etag: W/"f6dde8dd4c131d6babf162c2dd674247"
x-request-id: 79d8952a9f2d2d80-SEA, 79d8952a9f2d2d80-SEA
x-runtime: 0.002763
vary: Origin, Accept-Encoding
x-zendesk-zorg: yes
cf-cache-status: HIT
age: 7
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2B2wgxMXTvMjtcJ1C%2F9R1s0TDlxk6oBruwVRiION3pbul188mk5yROATE2KjQOtsXADB5wv4wJ%2B6io868YI5GwaID57S7Pre5sz1%2F3J%2F5QIMhwwAf5Y%2F4GymOB25KoZ55FU0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=0
server: cloudflare
cf-ray: 79daa3405ccb0b45-OSL
content-encoding: br
X-Firefox-Spdy: h2
www.rindegastos.com/styles.09e6da6db4c483e2.css
200 OK 0 B URL HTTP/2 www.rindegastos.com/styles.09e6da6db4c483e2.css
IP
GET /styles.09e6da6db4c483e2.css HTTP/1.1
Host: www.rindegastos.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rindegastos.com/document/expenseReport?e=3780990&k=159571-16182-63dc11e4d9091
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/css
date: Wed, 22 Feb 2023 20:57:53 GMT
last-modified: Wed, 15 Feb 2023 17:46:29 GMT
etag: W/"10f79e952f35213fc962e8405a9a58c0"
x-amz-server-side-encryption: AES256
server: AmazonS3
cache-control: public, max-age=0, s-maxage=600
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 1qyorCTSz5LIsAB8ujZr6LuDoMYN36QipjB-rIyk3IZgrntDcO5oCg==
age: 7
X-Firefox-Spdy: h2
cdn.linkedin.oribi.io/partner/66325/domain/rindegastos.com/token
200 OK 0 B URL HTTP/2 cdn.linkedin.oribi.io/partner/66325/domain/rindegastos.com/token
IP
GET /partner/66325/domain/rindegastos.com/token HTTP/1.1
Host: cdn.linkedin.oribi.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: *
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.rindegastos.com
Connection: keep-alive
Referer: https://www.rindegastos.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/json
date: Wed, 22 Feb 2023 20:12:53 GMT
access-control-allow-origin: *
cache-control: public, max-age=3600
content-encoding: gzip
vary: accept-encoding
x-cache: Hit from cloudfront
via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Hi-EkllONura3Sc0VKnKXwoLo-7fnXz4d5FH0G70Sau3hW0vFn9qnA==
age: 2708
X-Firefox-Spdy: h2
cdn.linkedin.oribi.io/partner/66325/domain/web.rindegastos.com/token
200 OK 0 B URL HTTP/2 cdn.linkedin.oribi.io/partner/66325/domain/web.rindegastos.com/token
IP
GET /partner/66325/domain/web.rindegastos.com/token HTTP/1.1
Host: cdn.linkedin.oribi.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: *
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://web.rindegastos.com
Connection: keep-alive
Referer: https://web.rindegastos.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json
date: Wed, 22 Feb 2023 20:55:37 GMT
access-control-allow-origin: *
cache-control: public, max-age=3600
content-encoding: gzip
vary: accept-encoding
x-cache: Hit from cloudfront
via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: MnUUsLXqM1JssMQ0E3e065rOn3ijgOd0IS9ef_-3NwyPFeJ_1I1V9A==
age: 147
X-Firefox-Spdy: h2
www.rindegastos.com/document/expenseReport?e=3780990&k=159571-16182-63dc11e4d9091
200 OK 0 B URL HTTP/2 www.rindegastos.com/document/expenseReport?e=3780990&k=159571-16182-63dc11e4d9091
IP
GET /document/expenseReport?e=3780990&k=159571-16182-63dc11e4d9091 HTTP/1.1
Host: www.rindegastos.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
content-type: text/html
date: Wed, 22 Feb 2023 20:58:00 GMT
last-modified: Wed, 15 Feb 2023 17:46:28 GMT
etag: W/"62b4f6093fef0c43f80cb067163ebee4"
x-amz-server-side-encryption: AES256
server: AmazonS3
cache-control: public, max-age=0, s-maxage=600
content-encoding: gzip
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: _Z0xLLFO9rM8nANQmnKeXpWI6upCY5Cy1_QjQqEtUVP-T5N8bQDNdQ==
X-Firefox-Spdy: h2
www.rindegastos.com/main.ca8d4f386a5fd77a.js
200 OK 0 B URL HTTP/2 www.rindegastos.com/main.ca8d4f386a5fd77a.js
IP
GET /main.ca8d4f386a5fd77a.js HTTP/1.1
Host: www.rindegastos.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rindegastos.com/document/expenseReport?e=3780990&k=159571-16182-63dc11e4d9091
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Wed, 22 Feb 2023 20:57:53 GMT
last-modified: Wed, 15 Feb 2023 17:46:29 GMT
etag: W/"370055c7b31e7e2aba768d1864161ee4"
x-amz-server-side-encryption: AES256
server: AmazonS3
cache-control: public, max-age=0, s-maxage=600
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: VqgrMYx6IcVd8XE3P9DPrwIKeTMMUDJYTjx-g8ivRofGZO3bIXf6FQ==
age: 7
X-Firefox-Spdy: h2
static.hsappstatic.net/conversations-visitor-ui/static-1.14289/sass/visitor.css
200 OK 0 B URL HTTP/2 static.hsappstatic.net/conversations-visitor-ui/static-1.14289/sass/visitor.css
IP
GET /conversations-visitor-ui/static-1.14289/sass/visitor.css HTTP/1.1
Host: static.hsappstatic.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app.hubspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 22 Feb 2023 20:58:01 GMT
content-type: text/css
x-amz-replication-status: COMPLETED
last-modified: Thu, 19 Jan 2023 19:32:55 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: 8cTUQYaMqbf6Yv8IIYst6y8hd.mcxuTh
etag: W/"3192955eca3e03437d10c02e718e1960"
vary: Origin,Accept-Encoding,Access-Control-Request-Headers,Access-Control-Request-Method
x-cache: Hit from cloudfront
via: 1.1 83a23d85c009b0c0e3626072e9f997fe.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: FkO28Fa9v5LSI2tyL3B1VlSlvl_05wXbgeudlFXVTx33gYJ9jY58GQ==
cf-cache-status: HIT
age: 456239
expires: Thu, 22 Feb 2024 20:58:01 GMT
cache-control: public, max-age=31536000
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=c8JXdqtRz%2FRXWpYUsViqm%2B%2FuuHHLXw07TL57thhyVHmI2OBtKR0xR3kh1oJrWlv3DLSJiro%2FLtm%2F2lSTqw4lcml5Y22MFrQ0i0K1orxk%2FSYQs4yhxKyOq3hS%2FJX%2BKwAvr5IiBWrKV7Q%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 79daa32edac10b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
static.zdassets.com/ekr/snippet.js?key=4f349ffb-427f-4fb0-934a-55bdcc3319d2
200 OK 0 B URL HTTP/2 static.zdassets.com/ekr/snippet.js?key=4f349ffb-427f-4fb0-934a-55bdcc3319d2
IP
GET /ekr/snippet.js?key=4f349ffb-427f-4fb0-934a-55bdcc3319d2 HTTP/1.1
Host: static.zdassets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://web.rindegastos.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 22 Feb 2023 20:58:02 GMT
content-type: application/javascript
x-amz-id-2: 5z7bD7a2QjVU1p1mrZWml9YWeVjzwcenMkrZT2XFwGEbivWxhQHKv8YIyg15kSn8VKXTH+0WNVI=
x-amz-request-id: 482HGH4TBZ853WM8
x-amz-replication-status: COMPLETED
last-modified: Thu, 28 Jul 2022 23:44:02 GMT
etag: W/"5cae6ce528dce0c327b2bcbaad459fdb"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=3600, s-maxage=60
x-amz-version-id: TCAqq4sghBBBAAXd3MLZ8Fy8XIds..vO
cf-cache-status: HIT
age: 4
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xxI%2B3qyeFwf8aA9sqVwhxe18xzizTTAHk3GwWP%2BZPlJujpQL%2Ft8cv9BushB2b7bmFXKcDoJbbbkgWJXFF30ssTy01xJMR6P1Q%2FC0%2BiFH8%2FBw%2F9dcWNl9Gx1ReJInboBT2Qznx44%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0
server: cloudflare
cf-ray: 79daa3377b8eb511-OSL
content-encoding: br
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Arimo:400,700
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Arimo:400,700
IP
GET /css?family=Arimo:400,700 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://web.rindegastos.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 22 Feb 2023 20:58:02 GMT
date: Wed, 22 Feb 2023 20:58:02 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.linkedin.oribi.io/partner/66325/domain/web.rindegastos.com/token
200 OK 0 B URL HTTP/2 cdn.linkedin.oribi.io/partner/66325/domain/web.rindegastos.com/token
IP
GET /partner/66325/domain/web.rindegastos.com/token HTTP/1.1
Host: cdn.linkedin.oribi.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: *
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://web.rindegastos.com
Connection: keep-alive
Referer: https://web.rindegastos.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json
date: Wed, 22 Feb 2023 20:55:37 GMT
access-control-allow-origin: *
cache-control: public, max-age=3600
content-encoding: gzip
vary: accept-encoding
x-cache: Hit from cloudfront
via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: gQdBpyswCVhBEfH5M7wSSvV_kjVr-9ZN60iELO-qcO8YqpR_pFMk1w==
age: 147
X-Firefox-Spdy: h2
js.hsadspixel.net/fb.js
200 OK 0 B IP
GET /fb.js HTTP/1.1
Host: js.hsadspixel.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rindegastos.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 22 Feb 2023 20:58:00 GMT
content-type: application/javascript; charset=utf-8
x-amz-replication-status: COMPLETED
last-modified: Tue, 21 Feb 2023 03:24:48 UTC
x-amz-server-side-encryption: AES256
x-amz-version-id: 1ZaYK3sC7unZOzTPEqwB36un4rYvqT1Y
etag: W/"c5fb4d0d970e121f5c6f72a277677133"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 66b6cd04ec22251498906e833eb08668.cloudfront.net (CloudFront)
x-amz-cf-pop: IAD12-P3
x-amz-cf-id: C2rO9jpNTNqUHJi2VMmjSSTGB_iPmL1qUKTOsOi0G3d7xjyQOiXfTw==
cache-control: max-age=600
content-security-policy-report-only: frame-ancestors 'self'; report-uri https://exceptions.hubspot.com/csp/report?resource=adsscriptloaderstatic/static-1.327/bundles/pixels-release.js&cfRay=79d08c7bbf42b50c-IAD
x-hs-target-asset: adsscriptloaderstatic/static-1.327/bundles/pixels-release.js
x-hs-cache-status: HIT
cache-tag: staticjsapp-AdsScriptLoaderCloudflare-web-prod,staticjsapp-prod
cf-cache-status: HIT
age: 7
server: cloudflare
cf-ray: 79daa327dae2b517-OSL
content-encoding: br
X-Firefox-Spdy: h2
js.hsleadflows.net/leadflows.js
200 OK 0 B URL HTTP/2 js.hsleadflows.net/leadflows.js
IP
GET /leadflows.js HTTP/1.1
Host: js.hsleadflows.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.rindegastos.com
Connection: keep-alive
Referer: https://www.rindegastos.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 22 Feb 2023 20:58:00 GMT
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
x-amz-replication-status: COMPLETED
last-modified: Wed, 22 Feb 2023 03:38:55 UTC
etag: W/"89d08b8b507e76a2cabe72075102a8cb"
x-amz-server-side-encryption: AES256
x-amz-version-id: SRJBdRCVnO2Eke6An7gEtfPYcNAkUClC
vary: Accept-Encoding,Origin,Access-Control-Request-Headers,Access-Control-Request-Method
x-cache: Miss from cloudfront
via: 1.1 68a3b1d5c75429221abc685a453afb60.cloudfront.net (CloudFront)
x-amz-cf-pop: IAD12-P3
x-amz-cf-id: j-ha-gBZbx0X6WzekEAtqYWgCJBTEGd1q44keuRed9BBpkT7IL0RsA==
cache-control: s-maxage=86400, max-age=0
content-security-policy-report-only: frame-ancestors 'self'; report-uri https://exceptions.hubspot.com/csp/report?resource=lead-flows-js/static-1.1152/bundle/main/lead-flows-release.js&cfRay=79daa2f9cf59b4fd-ARN
x-hs-target-asset: lead-flows-js/static-1.1152/bundle/main/lead-flows-release.js
x-hs-cache-status: MISS
cache-tag: staticjsapp-lead-flows-cloudflare-web-prod,staticjsapp-prod
cf-cache-status: HIT
age: 7
server: cloudflare
cf-ray: 79daa327ea670afa-OSL
content-encoding: br
X-Firefox-Spdy: h2
static.hsappstatic.net/hubspot-dlb/static-1.354/bundle.production.js
200 OK 0 B URL HTTP/2 static.hsappstatic.net/hubspot-dlb/static-1.354/bundle.production.js
IP
GET /hubspot-dlb/static-1.354/bundle.production.js HTTP/1.1
Host: static.hsappstatic.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://app.hubspot.com
Connection: keep-alive
Referer: https://app.hubspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 22 Feb 2023 20:58:01 GMT
content-type: application/javascript
access-control-allow-origin: https://app.hubspot.com
access-control-allow-methods: GET
access-control-max-age: 3000
access-control-allow-credentials: true
x-amz-replication-status: COMPLETED
last-modified: Wed, 01 Feb 2023 23:38:38 GMT
etag: W/"e18613eeedf95727a868236b293e5f98"
x-amz-server-side-encryption: AES256
x-amz-version-id: Aj74JH9zHucnM4eKyPxhPDYcnw_QEp7F
vary: Origin,Accept-Encoding,Access-Control-Request-Headers,Access-Control-Request-Method
x-cache: Hit from cloudfront
via: 1.1 6e524269fea3a56b0e037fecde237b36.cloudfront.net (CloudFront)
x-amz-cf-pop: HEL50-C1
x-amz-cf-id: TbXQTHwHFXzSwCv50UM3LVy5QWrLFhk402ZP3xEW-XM_SlvmQ63K4w==
cf-cache-status: HIT
age: 1392718
expires: Thu, 22 Feb 2024 20:58:01 GMT
cache-control: public, max-age=31536000
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Gw00DsazZ12tAKCAu0st6fln850zr99R0qzR1zCcZAEscv1Qx341WUiC3LakXOvW%2Fp3ijtrgY4PdNW1T5s9q9F1zAz3F9tocIjHTkL3ZQb3gVvTShzu%2BABqBwAYyf1HUVo9woA2iO6I%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 79daa32ec8d7b4f3-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ppstatic.s3.amazonaws.com/expenses/js/moment.js
200 OK 0 B URL HTTP/1.1 ppstatic.s3.amazonaws.com/expenses/js/moment.js
IP
GET /expenses/js/moment.js HTTP/1.1
Host: ppstatic.s3.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://web.rindegastos.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: SBHniU6xJA/uJ51e3kiK0X5hfRmbBL0sq/HAHoiTlY69wIV/a3HGX/GTKu2oaqv5Om6i/WUM0d25ll0XtLFagA==
x-amz-request-id: TY39GKV9PTZ4N2R4
Date: Wed, 22 Feb 2023 20:58:04 GMT
Last-Modified: Wed, 26 Aug 2015 13:26:05 GMT
ETag: "cd9f0b2d1b3e08b28f14cbb6d75217ee"
x-amz-version-id: null
Accept-Ranges: bytes
Content-Type: application/x-javascript
Server: AmazonS3
Content-Length: 104409
js-na1.hs-scripts.com/3276114.js
200 OK 0 B URL HTTP/2 js-na1.hs-scripts.com/3276114.js
IP
GET /3276114.js HTTP/1.1
Host: js-na1.hs-scripts.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rindegastos.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 22 Feb 2023 20:58:00 GMT
content-type: application/javascript;charset=utf-8
access-control-allow-credentials: true
access-control-allow-origin: https://www.rindegastos.com
access-control-max-age: 3600
cache-control: public, max-age=30
cf-bgj: minify
cf-polished: origSize=2985
last-modified: Wed, 22 Feb 2023 20:52:35 GMT
vary: origin, Accept-Encoding
x-hubspot-correlation-id: 6c718423-60ac-48cd-bd32-f174b8925434
x-trace: 2B6AA1858D5D63BB0C09499B7C4FCBDD4A81961C19000000000000000000
cf-cache-status: HIT
age: 8
server: cloudflare
cf-ray: 79daa326bc87b503-OSL
content-encoding: br
X-Firefox-Spdy: h2
js.usemessages.com/conversations-embed.js
200 OK 0 B URL HTTP/2 js.usemessages.com/conversations-embed.js
IP
GET /conversations-embed.js HTTP/1.1
Host: js.usemessages.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rindegastos.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 22 Feb 2023 20:58:00 GMT
content-type: application/javascript; charset=utf-8
x-amz-replication-status: COMPLETED
last-modified: Fri, 17 Feb 2023 07:21:12 UTC
x-amz-server-side-encryption: AES256
x-amz-version-id: F2pbz1jLwmV8BqgmK.WhUYX_7w9rU5gp
etag: W/"b32546950561a7f0bb2e5bf2e14225a5"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 b77313059f3d50280ced20238b151620.cloudfront.net (CloudFront)
x-amz-cf-pop: IAD12-P3
x-amz-cf-id: O2X_AN_1EOGoY8bm2CkD08KE9mu40SjOWJ30y-zr5e9hmfWJBCwjIw==
age: 189
cache-control: max-age=600
content-security-policy-report-only: frame-ancestors 'self'; report-uri https://exceptions.hubspot.com/csp/report?resource=conversations-embed/static-1.12188/bundles/project.js&cfRay=79c3dca9aeffb523-IAD
x-hs-target-asset: conversations-embed/static-1.12188/bundles/project.js
x-hs-cache-status: HIT
cache-tag: staticjsapp-conversations-embed-web-prod,staticjsapp-prod
cf-cache-status: HIT
server: cloudflare
cf-ray: 79daa327db12b4ee-OSL
content-encoding: br
X-Firefox-Spdy: h2
54.230.111.121
104.17.127.171
93.184.220.29
23.36.76.210
157.240.200.35
31.13.72.12