r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1456357aecbd23f21ad98da57e0127eb
7074815b39fa8da9013883971d665e4c1b0797ea
f3eba265ee64870b2f822f1511b36c747d763c382557789cdad8be1d3b52d1f5
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F3EBA265EE64870B2F822F1511B36C747D763C382557789CDAD8BE1D3B52D1F5"
Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13564
Expires: Thu, 24 Nov 2022 00:13:46 GMT
Date: Wed, 23 Nov 2022 20:27:42 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash 770d09773b5f304acf141fd66a4862b4
5ddc46ab75de26c858a9a6f6d1beaaec9bb181f5
c7bcc6928fa1c0bb225ce8a2f6badd6cb1bd6ea002fb808ed34e8dafbd7b3b26
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5516
Cache-Control: max-age=142530
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 20:27:42 GMT
Etag: "637df674-1d7"
Expires: Fri, 25 Nov 2022 12:03:12 GMT
Last-Modified: Wed, 23 Nov 2022 10:31:16 GMT
Server: ECS (ska/F6FE)
X-Cache: HIT
Content-Length: 471
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash d130218d0e2841f39c99610fe1a2ab90
29fbe1e177ee55c7a61ae0a206afff271cf5f945
6b6d74dccf10c2bc98a91c3388280d7ba1d9596bf8cadd7db0e2f63720b3d152
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Alert, Content-Type, Retry-After, Content-Length
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Wed, 23 Nov 2022 20:17:10 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 632
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 054ff0d1a0a43f7cb1d78dbd34e27f99
3caf54f3de1d6a8c6f6454083f8b8e7dec77db54
fcdcef8306ae31f20c366489e1f88aa40b08f154d25d45f4055c4f8cdef47634
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FCDCEF8306AE31F20C366489E1F88AA40B08F154D25D45F4055C4F8CDEF47634"
Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7108
Expires: Wed, 23 Nov 2022 22:26:10 GMT
Date: Wed, 23 Nov 2022 20:27:42 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: hYFRdI3lyDx592i0av6NL9DVYLKiMF6XeTVG+FGlrbk07RXBvgj8ck2NvNET/FUf8WWEP0gbkTg=
x-amz-request-id: M5FJPVBC2305B86H
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Wed, 23 Nov 2022 19:43:06 GMT
age: 2676
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 23 Nov 2022 20:27:42 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
shreesaiprojects.com/
200 OK 79 kB IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type ASCII text, with very long lines (65230), with CRLF line terminators
Hash 77bf807cdbedcaeab3137cc65338908b
527edcb6cfde0edee39b8755a149ca112ce649be
aadb972a1ca0a5bbeba30dc418e213a57dec57dd327dc3460f1eee66730d09a6
Analyzer Verdict Alert fortinet Phishing
GET / HTTP/1.1
Host: shreesaiprojects.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Wed, 23 Nov 2022 20:27:42 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=5, max=75
Transfer-Encoding: chunked
Content-Type: text/html; charset=utf-8
shreesaiprojects.com/favicon.ico
200 OK 79 kB URL HTTP/1.1 shreesaiprojects.com/favicon.ico
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type ASCII text, with very long lines (65230), with CRLF line terminators
Hash 77bf807cdbedcaeab3137cc65338908b
527edcb6cfde0edee39b8755a149ca112ce649be
aadb972a1ca0a5bbeba30dc418e213a57dec57dd327dc3460f1eee66730d09a6
GET /favicon.ico HTTP/1.1
Host: shreesaiprojects.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://shreesaiprojects.com/
HTTP/1.1 200 OK
Date: Wed, 23 Nov 2022 20:27:42 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=5, max=75
Transfer-Encoding: chunked
Content-Type: text/html; charset=utf-8
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: ETag, Content-Type, Content-Length, Last-Modified, Alert, Backoff, Pragma, Expires, Retry-After, Cache-Control
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Wed, 23 Nov 2022 20:08:53 GMT
cache-control: public,max-age=3600
age: 1130
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash eb52164d651f5f45416e873aec29eb04
405b29bb7e7cd4367cf82988f8603e53db65f139
ed885e05db822ff30fe951e10b6d4f21e574d053939afca792992a1549a15301
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3796
Cache-Control: max-age=135746
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 20:27:43 GMT
Etag: "637de2ad-1d7"
Expires: Fri, 25 Nov 2022 10:10:09 GMT
Last-Modified: Wed, 23 Nov 2022 09:06:53 GMT
Server: ECS (ska/F6FE)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: np7NLim4bmR8PtBZghXOZg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: HRBkaX8CiydOKKpy2HZ4RnFbMN4=
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 611d1eca860866489908506a26bd6a2a
5e8c401f098357cd12889a6e507baf7c8a87772a
e3216e5edd547bc8f6a43780da5a118842b96de96d5cf668af68d8706ceb32e4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E3216E5EDD547BC8F6A43780DA5A118842B96DE96D5CF668AF68D8706CEB32E4"
Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3137
Expires: Wed, 23 Nov 2022 21:20:02 GMT
Date: Wed, 23 Nov 2022 20:27:45 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 611d1eca860866489908506a26bd6a2a
5e8c401f098357cd12889a6e507baf7c8a87772a
e3216e5edd547bc8f6a43780da5a118842b96de96d5cf668af68d8706ceb32e4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E3216E5EDD547BC8F6A43780DA5A118842B96DE96D5CF668AF68D8706CEB32E4"
Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3137
Expires: Wed, 23 Nov 2022 21:20:02 GMT
Date: Wed, 23 Nov 2022 20:27:45 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 611d1eca860866489908506a26bd6a2a
5e8c401f098357cd12889a6e507baf7c8a87772a
e3216e5edd547bc8f6a43780da5a118842b96de96d5cf668af68d8706ceb32e4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E3216E5EDD547BC8F6A43780DA5A118842B96DE96D5CF668AF68D8706CEB32E4"
Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3137
Expires: Wed, 23 Nov 2022 21:20:02 GMT
Date: Wed, 23 Nov 2022 20:27:45 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 611d1eca860866489908506a26bd6a2a
5e8c401f098357cd12889a6e507baf7c8a87772a
e3216e5edd547bc8f6a43780da5a118842b96de96d5cf668af68d8706ceb32e4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E3216E5EDD547BC8F6A43780DA5A118842B96DE96D5CF668AF68D8706CEB32E4"
Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3137
Expires: Wed, 23 Nov 2022 21:20:02 GMT
Date: Wed, 23 Nov 2022 20:27:45 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 611d1eca860866489908506a26bd6a2a
5e8c401f098357cd12889a6e507baf7c8a87772a
e3216e5edd547bc8f6a43780da5a118842b96de96d5cf668af68d8706ceb32e4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E3216E5EDD547BC8F6A43780DA5A118842B96DE96D5CF668AF68D8706CEB32E4"
Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3137
Expires: Wed, 23 Nov 2022 21:20:02 GMT
Date: Wed, 23 Nov 2022 20:27:45 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F45ca81c5-d11a-4d86-a922-dbdce0f6b46c.jpeg
200 OK 5.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F45ca81c5-d11a-4d86-a922-dbdce0f6b46c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 0cc111ba6ae699fca7fbff3490640960
18084197b48ea3b4a143636250396e8791d0285f
34fbba92e665ad371ea2bd1a871251cf0c5b7832d6f4661b21b2cfbd7f786923
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F45ca81c5-d11a-4d86-a922-dbdce0f6b46c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4977
x-amzn-requestid: 3e56de91-7ed1-4b1e-b230-5f19b2cc6601
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bxQKBHzdIAMFpUw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6376c70c-41c572d27999534d3c198372;Sampled=0
x-amzn-remapped-date: Thu, 17 Nov 2022 23:43:08 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Or1B6k7o4cYqVXfndjJsKLOV-aYKX8bfHCQIUqNzvofjQSnIf8f04A==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 5565a51537c689d1d16f6b4d41f40082.cloudfront.net (CloudFront), 1.1 google
date: Tue, 22 Nov 2022 21:52:42 GMT
age: 81303
etag: "18084197b48ea3b4a143636250396e8791d0285f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Feb8f06b6-da2d-4cb1-8494-f82414961039.jpeg
200 OK 7.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Feb8f06b6-da2d-4cb1-8494-f82414961039.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3e742dbb7da82cf64e6c22ff14c13667
996283008bc67ba4d7e2c7624b149047a8303ada
9ce9d0271c57a1b7a1ebca41a8829a4d64bfff0581e0bd37d62154c0243e036c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Feb8f06b6-da2d-4cb1-8494-f82414961039.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7352
x-amzn-requestid: 44a7ba72-f86a-4eb7-a85d-b551e72ddd81
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b7UGJEFToAMFqxQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637acd5a-3d2f91e3085731a3387a4d68;Sampled=0
x-amzn-remapped-date: Mon, 21 Nov 2022 00:59:06 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Miss from cloudfront
x-amz-cf-id: 7BLmsnZrGU-G5IDwPnDDJhXDInTZTk1Hdo7lKQbhuvSD3Uk8vGffxQ==
via: 1.1 9b311162717b41c968f6f00426d88aaa.cloudfront.net (CloudFront), 1.1 b2d3922a177f6cecf9222a78a0a1ad32.cloudfront.net (CloudFront), 1.1 google
date: Wed, 23 Nov 2022 07:33:49 GMT
age: 46436
etag: "996283008bc67ba4d7e2c7624b149047a8303ada"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb0ea68cc-d723-41ae-8bc2-16e2e422e2aa.jpeg
200 OK 5.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb0ea68cc-d723-41ae-8bc2-16e2e422e2aa.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c6380f73d47906bd63b9c48137e4df61
94e053461d2db89e9d08321f26a2555ebcd7e0b9
84144e3c3e7acc7339fd1da9b373f18582734b6f4d235b2aef8c90616ed1c8a7
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb0ea68cc-d723-41ae-8bc2-16e2e422e2aa.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5914
x-amzn-requestid: 175363fa-bb7a-4c95-8aa4-ebb3f16f3745
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b1lI3HaqIAMFmTA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63788238-1bb736b52bbae37c5e19486f;Sampled=0
x-amzn-remapped-date: Sat, 19 Nov 2022 07:14:00 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 39Lmple6qq9vrKeKJ4lcditVdK5XfRFtv3Cs0_R8B7pVDYPiRAGFtg==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 591683988172c7980c4ebb318cbf18a8.cloudfront.net (CloudFront), 1.1 google
date: Tue, 22 Nov 2022 22:13:08 GMT
age: 80077
etag: "94e053461d2db89e9d08321f26a2555ebcd7e0b9"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4cb92473-220a-4ebb-b8d8-6c17618bc006.jpeg
200 OK 4.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4cb92473-220a-4ebb-b8d8-6c17618bc006.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash bd62f641e9d58eee10e41db0fa00b5f2
4210e5f150a49d6f6ee26cbb11ded8173ab8cf74
5858451bf7cac97b8881dde7e3197110fa8639c1d94b51934859669c51221e1a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4cb92473-220a-4ebb-b8d8-6c17618bc006.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4308
x-amzn-requestid: 7db10594-4acc-448d-b724-1c4bc8ec42ca
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b-IrVFtRoAMFTzg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637bee48-0a466f6b0bd48f3532216bca;Sampled=0
x-amzn-remapped-date: Mon, 21 Nov 2022 21:31:52 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 1jsMEd95BMQEVGjykWxCP06JnMA6O5RJ-Fe6kEyuYpBIkdVUjeidxw==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 760139201585481b26f947c5f776103a.cloudfront.net (CloudFront), 1.1 google
date: Tue, 22 Nov 2022 21:46:31 GMT
age: 81674
etag: "4210e5f150a49d6f6ee26cbb11ded8173ab8cf74"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4d582ed2-f829-4647-9113-832d4500a207.jpeg
200 OK 9.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4d582ed2-f829-4647-9113-832d4500a207.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6d2c986e076309d51d199332caebb07a
343a5bfba0f8fec28f9345f276b44f44c6eaf6a6
64e6fba6a45c70c1db6040a2273472774c00257bef373cc45b6ca00cb819681a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4d582ed2-f829-4647-9113-832d4500a207.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9138
x-amzn-requestid: 524e565e-a9fb-45f9-b786-d64cf26a3cdf
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cBcAAHG8IAMFhwQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637d4066-3689e70e6212e9e77dc134f4;Sampled=0
x-amzn-remapped-date: Tue, 22 Nov 2022 21:34:30 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: cwu__NPGaU0zyAG0H1yZhmjGsFzvNmzsGv6Zt9hrF5gwSysEio2MjA==
via: 1.1 5a1753718d8b33365e5f693dd338c510.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Tue, 22 Nov 2022 21:45:52 GMT
age: 81713
etag: "343a5bfba0f8fec28f9345f276b44f44c6eaf6a6"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F20f7461d-18d1-4343-9ecb-d68d44ce1ee4.jpeg
200 OK 7.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F20f7461d-18d1-4343-9ecb-d68d44ce1ee4.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 06c6e720bc9900b38e88cd72f739603e
22884cbc78622d6f78c1c3397c9b440946144a99
8675d08e6d8ae5bdedbc7c7ce647f8c6e72cc457917b4ed1856c50b11c2fe88b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F20f7461d-18d1-4343-9ecb-d68d44ce1ee4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7589
x-amzn-requestid: 533d7650-cb21-4090-a50a-e205adad316d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: brr5zH4qoAMF79Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63748d0b-017f7bf4390eb124097af648;Sampled=0
x-amzn-remapped-date: Wed, 16 Nov 2022 07:11:07 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: ZtjzvMh_vqVaOqm8xPfZ2EWGGl0X7Iv8GK40Z32EbKM4wk6tGPnlYA==
via: 1.1 95b0ac620fa3a80ee590ecf1cda1c698.cloudfront.net (CloudFront), 1.1 707e733794d52100fde0ab21bf0b1462.cloudfront.net (CloudFront), 1.1 google
date: Tue, 22 Nov 2022 22:27:21 GMT
age: 79224
etag: "22884cbc78622d6f78c1c3397c9b440946144a99"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
freshtools.to/
301 Moved Permanently 231 B IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 803a960e452ca90d256956b9893e4d43
6a8e5e33d210c2629b71a6891cc68cc319f6a489
db957d3c71b60cce40fedfb2d3a28b00f93957eaaae11f92c615c0f3ebef0291
GET / HTTP/1.1
Host: freshtools.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 301 Moved Permanently
Date: Wed, 23 Nov 2022 20:27:43 GMT
Server: Apache
X-XSS-Protection: 1; mode=block
X-Permitted-Cross-Domain-Policies: none
Location: https://freshtools.net/
Content-Length: 231
Keep-Alive: timeout=5, max=500
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
ocsp.pki.goog/s/gts1p5/ecBi_As-X0A
200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1p5/ecBi_As-X0A
IP
Hash e0334a3ccef39fb2de086d1f5ebcb1a8
d1be7c58a35be69efecedb473ba5fea16528f013
6ad3d5e3f339e4d758b62b832ee1419768faeee23ef740705b357ae38b6df17c
POST /s/gts1p5/ecBi_As-X0A HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 20:27:46 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
freshtools.net/cdn-cgi/images/trace/jsch/js/transparent.gif?ray=76eca5bfeca4fac8
200 OK 42 B URL HTTP/2 freshtools.net/cdn-cgi/images/trace/jsch/js/transparent.gif?ray=76eca5bfeca4fac8
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /cdn-cgi/images/trace/jsch/js/transparent.gif?ray=76eca5bfeca4fac8 HTTP/1.1
Host: freshtools.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://freshtools.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 23 Nov 2022 20:27:46 GMT
content-type: image/gif
content-length: 42
last-modified: Tue, 22 Nov 2022 13:34:50 GMT
etag: "637ccffa-2a"
server: cloudflare
cf-ray: 76eca5c08d64fac8-OSL
x-frame-options: DENY
x-content-type-options: nosniff
vary: Accept-Encoding
expires: Wed, 23 Nov 2022 22:27:46 GMT
cache-control: max-age=7200, public
accept-ranges: bytes
X-Firefox-Spdy: h2
freshtools.net/favicon.ico
200 OK 0 B URL HTTP/2 freshtools.net/favicon.ico
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: freshtools.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://freshtools.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 23 Nov 2022 20:27:46 GMT
content-type: image/x-icon
content-length: 0
last-modified: Mon, 18 Oct 2021 20:32:36 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 6928
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jyC%2BBe5OAnZg79f0Wo40qIto6lNhtHrG%2BxCHBiMG1bYXKpYM0hPrKwi4lFL7blYlJ0pYb0Gpe4TNk%2BZc%2F%2BmKvC5AFocuMJZRzQhLzqcsbq22KxYeJdwWG5ec%2Bq7fMEFj"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76eca5c06d4cfac8-OSL
X-Firefox-Spdy: h2
freshtools.net/cdn-cgi/challenge-platform/h/b/flow/ov1/0.8302946248956624:1669230547:RQInvHlThYtq3LSyIRySW3-oS3i7WGup9pZCfmTnn04/76eca5bfeca4fac8/9298b95a1c470b8
200 OK 2.5 kB URL HTTP/2 freshtools.net/cdn-cgi/challenge-platform/h/b/flow/ov1/0.8302946248956624:1669230547:RQInvHlThYtq3LSyIRySW3-oS3i7WGup9pZCfmTnn04/76eca5bfeca4fac8/9298b95a1c470b8
IP
File type ASCII text, with very long lines (2240), with no line terminators
Hash 4c17fe8b286342a9ad24feb3dcacfd46
64d5887461d882aafab5138395c8640701452a6c
686cd5765b42700df2a8a31be1b536a5626f9c962249a92df3d193f4b3503a65
POST /cdn-cgi/challenge-platform/h/b/flow/ov1/0.8302946248956624:1669230547:RQInvHlThYtq3LSyIRySW3-oS3i7WGup9pZCfmTnn04/76eca5bfeca4fac8/9298b95a1c470b8 HTTP/1.1
Host: freshtools.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://freshtools.net/
Content-type: application/x-www-form-urlencoded
CF-Challenge: 9298b95a1c470b8
Content-Length: 15607
Origin: https://freshtools.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 23 Nov 2022 20:27:47 GMT
content-type: text/html; charset=UTF-8
set-cookie: cf_chl_rc_ni=;Expires=Tue, 22 Nov 2022 20:27:47 GMT;SameSite=Strict
cf_chl_out: 3ih3m61LpeGz1uyn+3EQ58Vu/8/B3vjemRGJ1MU3Y9/j1x7W8hKBICS8iDGXaEP9oxlcrVoQtjA+6Nw9YgbJiQ==$fHnUKy/matymJYYPEKuSlw==
cf_chl_out_s: 3HSTEkcJ7M5m2KM0HbEjF9JuVKt4eSJG4Vr5VdNafJtK19PSbBPy0+pWZPo7jAoplbOAmPFGcZJKaPe/0DqblIVzrvsKfVd45stjzaSJFI39nsQ0B9kS83hL8tP6TDHjl+IHSPCOEWAPaDQwCMGWgw==$vqtCXz9lBdL/uZJm69Vcrg==
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=UB4Dg4NB7niDXVsc4abyEOZdQyPbr%2BPZHoPqLSW4VNwKmukuqC%2BsNRoCE61%2Fs6o0h1CYLT81NJ2mT3CcbhiJPyDWHsJdph2xVV8mj6SfIlirK9RLzL1swy9hPCi4raHr"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76eca5c73c0efac8-OSL
content-encoding: br
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 280 B IP
Hash 0c3a4518075cf3f1008254e4828f9071
e2886dd03926259a0d0365b30cb3811d2b6cdadc
b4d54a4ec7e1cdd194f53a9a1737191e9bc66e2afc14ce87734f5380ef35697d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 923
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 20:27:48 GMT
Last-Modified: Wed, 23 Nov 2022 20:12:27 GMT
Server: ECS (ska/F6FE)
X-Cache: HIT
Content-Length: 280
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 8069f5e67c25fc0b7388ba5d4decd8c9
64a85ba44c80ea206f4382f573c3d61e4f607ccf
7587cd04333ddf1cff15ae219cb8fca0618786a9fe4cee989975f4d50889e72a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 20:27:48 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash ae7674294f5a17ef8761b33ac4dad848
30a771e623dd1e3cb8694bb5f71393aaa9e87b6a
cac85ed50ce25c45d5093aaaa231a0d1cd9667f47bd2312947070ba202c5d96b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 20:27:48 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 065495ec7a963a205abd9c8dbc75cb5d
ea416d0df4f6706150bda5da2077174f5cdd986b
1b2a2afee887651b23a849f14ace89b330329f6bf61c331545a3f6d12037aee5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 20:27:48 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/recaptcha/api.js?render=explicit&onload=onloadCallback
200 OK 578 B URL HTTP/2 www.google.com/recaptcha/api.js?render=explicit&onload=onloadCallback
IP
File type ASCII text, with very long lines (909), with no line terminators
Hash ec941e5d30fc3bb1d1aaa543ae406681
2c61a6ebfa4f2e36b59c773ef8f3d35378b6959b
6e32c0dc483787dcfab84cdc891c1865104738de265e3f2ae1331a7c8d6013bf
GET /recaptcha/api.js?render=explicit&onload=onloadCallback HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freshtools.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
expires: Wed, 23 Nov 2022 20:27:48 GMT
date: Wed, 23 Nov 2022 20:27:48 GMT
cache-control: private, max-age=300
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 578
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
freshtools.net/uploads/New-Project-(7)-90-(1)-93.png
200 OK 77 kB URL HTTP/2 freshtools.net/uploads/New-Project-(7)-90-(1)-93.png
IP
File type PNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced\012- data
Hash 8cd01f4e6a06f44bfe3adfb7258eeadb
20cb50ef762633682d67d0a12c129e8b58d05ff8
e5b379c755c7f8bcf5aff3c5447f0a47e34332f79732729acb39b3c918601a5f
GET /uploads/New-Project-(7)-90-(1)-93.png HTTP/1.1
Host: freshtools.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freshtools.net/login
Cookie: cf_clearance=x.WWYKsMlThz9IuY5cGPa6C9tNUBDbRJobKxlup6scg-1669235267-0-150; XSRF-TOKEN=eyJpdiI6InlWM3QwcS9wRDZJQ0ZUTmh3Yi8wYVE9PSIsInZhbHVlIjoic2xkTUltMUtFWGNLNldldVZNZzJyZlkxVk1SWW1tNmpjc1JEeUMzbVg5aTBQU20wdmlnKzdremNIWjg2TldlaUtqbXlhckFoZHZyQkpjZ3NsQ2k3TkxLckJsYTVmUXVkTSsrS2NEbHlWdTg4STlwSWdiRGhGN01YWkcyejdJODMiLCJtYWMiOiJjOTA5NzM4MjAwY2YyYzkyMDA0NGFjYzkwYzhlM2U4ODNhZDM4NzY0ZGY1NGU0YmQ3MWY5OWI4ZDkxZDVhZTUyIiwidGFnIjoiIn0%3D; freshtools_session=eyJpdiI6IkUyRDVtaTcxNFdnMUdWMnZzdDdTT0E9PSIsInZhbHVlIjoiVUpwZU1xRlB0M1BDa3dZdlk1LzFEUkY1QjhxM1RYQUQveUdKR0Q1VGplSm9kK0s5Vk5CS0RuY05xYzcwVlUzc2JtZy9MNysrbjV0RmZHVi85TUE3UWkyb1JnNFFFUGMrZHBFakMzNmNNNzNYUllscndNM1o2UStnL0psYmlGS3oiLCJtYWMiOiIxM2M3M2Y4ZTUwNWJkNWUxNDg3YWE3MmY1MmZkYTkzMDRkOWQ0YWYwNzdmZmI1MzRiYzViMTEwYTYxODE3YTgzIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 23 Nov 2022 20:27:48 GMT
content-type: image/png
content-length: 77118
last-modified: Thu, 14 Jul 2022 08:37:52 GMT
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zXRoP2%2Bw5DNHqBgdBSO1ulK0IP1qlKQZ9GwV%2B%2FCtNZ2vAyUjzbMhu34eYqJiIokNyHEWX4XXo%2B8wwE27i2xRR8GUVN63SjfkBWa2CPysRdbDDynXdr9qiXav4BQRGezL"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76eca5cb3f8ffac8-OSL
X-Firefox-Spdy: h2
freshtools.net/css/loginStyle.css?id=7abd190e74023b3175577bbf86ba8bf6
200 OK 2.3 kB URL HTTP/2 freshtools.net/css/loginStyle.css?id=7abd190e74023b3175577bbf86ba8bf6
IP
File type ASCII text, with very long lines (5424)
Hash eda82618b2ecf90a6de7682203664490
12a7c40f5126cd87f9f8827fea27726774728f15
759de98b9659814bd3f886b974fcf6975ac236b68bdbb86ebc9e5cabad4c2751
GET /css/loginStyle.css?id=7abd190e74023b3175577bbf86ba8bf6 HTTP/1.1
Host: freshtools.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freshtools.net/login
Cookie: cf_clearance=x.WWYKsMlThz9IuY5cGPa6C9tNUBDbRJobKxlup6scg-1669235267-0-150; XSRF-TOKEN=eyJpdiI6InlWM3QwcS9wRDZJQ0ZUTmh3Yi8wYVE9PSIsInZhbHVlIjoic2xkTUltMUtFWGNLNldldVZNZzJyZlkxVk1SWW1tNmpjc1JEeUMzbVg5aTBQU20wdmlnKzdremNIWjg2TldlaUtqbXlhckFoZHZyQkpjZ3NsQ2k3TkxLckJsYTVmUXVkTSsrS2NEbHlWdTg4STlwSWdiRGhGN01YWkcyejdJODMiLCJtYWMiOiJjOTA5NzM4MjAwY2YyYzkyMDA0NGFjYzkwYzhlM2U4ODNhZDM4NzY0ZGY1NGU0YmQ3MWY5OWI4ZDkxZDVhZTUyIiwidGFnIjoiIn0%3D; freshtools_session=eyJpdiI6IkUyRDVtaTcxNFdnMUdWMnZzdDdTT0E9PSIsInZhbHVlIjoiVUpwZU1xRlB0M1BDa3dZdlk1LzFEUkY1QjhxM1RYQUQveUdKR0Q1VGplSm9kK0s5Vk5CS0RuY05xYzcwVlUzc2JtZy9MNysrbjV0RmZHVi85TUE3UWkyb1JnNFFFUGMrZHBFakMzNmNNNzNYUllscndNM1o2UStnL0psYmlGS3oiLCJtYWMiOiIxM2M3M2Y4ZTUwNWJkNWUxNDg3YWE3MmY1MmZkYTkzMDRkOWQ0YWYwNzdmZmI1MzRiYzViMTEwYTYxODE3YTgzIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 23 Nov 2022 20:27:48 GMT
content-type: text/css
last-modified: Wed, 05 Oct 2022 03:32:30 GMT
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gZILevNNjyFo7pa%2BEyvGEaCrcQ1IJnRLeFq2Xnz0%2B%2BhuYsdQiiNO1uttIr%2F7DvtTKP66EElsK8wBd1xoXcLI3JdJR%2F0LGlesqRqa17dTglcVgZXWYSmASQvsp3LjePz1"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76eca5cb3f8cfac8-OSL
content-encoding: br
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 065495ec7a963a205abd9c8dbc75cb5d
ea416d0df4f6706150bda5da2077174f5cdd986b
1b2a2afee887651b23a849f14ace89b330329f6bf61c331545a3f6d12037aee5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 20:27:48 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
freshtools.net/cdn-cgi/challenge-platform/h/b/orchestrate/jsch/v1?ray=76eca5bfeca4fac8
200 OK 81 kB URL HTTP/2 freshtools.net/cdn-cgi/challenge-platform/h/b/orchestrate/jsch/v1?ray=76eca5bfeca4fac8
IP
File type HTML document, ASCII text, with very long lines (55562), with no line terminators
Hash d33413da55e7aa8602685b12e4acf47a
e96845b0bb3bebe10b14ba7609afe0162541ed70
c707984c41a4313a62a011e04adc430069bc7dc54249a08463b2aa5b32c6e708
GET /cdn-cgi/challenge-platform/h/b/orchestrate/jsch/v1?ray=76eca5bfeca4fac8 HTTP/1.1
Host: freshtools.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://freshtools.net/?__cf_chl_rt_tk=EQegcrXmH.K0KMmo0_dqaQibqyxFmsSiynZ0lI9L0JU-1669235266-0-gaNycGzNCCU
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 23 Nov 2022 20:27:46 GMT
content-type: application/javascript; charset=UTF-8
cache-control: max-age=0, must-revalidate
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ayRBs3dGIX9XakmLTQF2VuU%2BHjl23b78ZL5QCxdjNA2lfbEdSl5egITg9JgWxI%2BVci2ipdLmKVs12m%2FMwYNHqAvDH550X01t1uBs68oP3FXbpT7ma5ZliUTp0vqMnmpL"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76eca5c09d78fac8-OSL
content-encoding: br
X-Firefox-Spdy: h2
freshtools.net/js/login.js?id=05e6aef094e9312e2954b725dd73026c
200 OK 100 kB URL HTTP/2 freshtools.net/js/login.js?id=05e6aef094e9312e2954b725dd73026c
IP
File type ASCII text, with very long lines (954)
Hash 1af348ecd3861837def017f69e8c2dfa
0f7c9bba7f7765a2304b82242f213fbf4bb75ee0
f5c6191ca8239f6b5032c7bbf7d8009557fbd3e36a43f377ba956dad21717e85
GET /js/login.js?id=05e6aef094e9312e2954b725dd73026c HTTP/1.1
Host: freshtools.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freshtools.net/login
Cookie: cf_clearance=x.WWYKsMlThz9IuY5cGPa6C9tNUBDbRJobKxlup6scg-1669235267-0-150; XSRF-TOKEN=eyJpdiI6InlWM3QwcS9wRDZJQ0ZUTmh3Yi8wYVE9PSIsInZhbHVlIjoic2xkTUltMUtFWGNLNldldVZNZzJyZlkxVk1SWW1tNmpjc1JEeUMzbVg5aTBQU20wdmlnKzdremNIWjg2TldlaUtqbXlhckFoZHZyQkpjZ3NsQ2k3TkxLckJsYTVmUXVkTSsrS2NEbHlWdTg4STlwSWdiRGhGN01YWkcyejdJODMiLCJtYWMiOiJjOTA5NzM4MjAwY2YyYzkyMDA0NGFjYzkwYzhlM2U4ODNhZDM4NzY0ZGY1NGU0YmQ3MWY5OWI4ZDkxZDVhZTUyIiwidGFnIjoiIn0%3D; freshtools_session=eyJpdiI6IkUyRDVtaTcxNFdnMUdWMnZzdDdTT0E9PSIsInZhbHVlIjoiVUpwZU1xRlB0M1BDa3dZdlk1LzFEUkY1QjhxM1RYQUQveUdKR0Q1VGplSm9kK0s5Vk5CS0RuY05xYzcwVlUzc2JtZy9MNysrbjV0RmZHVi85TUE3UWkyb1JnNFFFUGMrZHBFakMzNmNNNzNYUllscndNM1o2UStnL0psYmlGS3oiLCJtYWMiOiIxM2M3M2Y4ZTUwNWJkNWUxNDg3YWE3MmY1MmZkYTkzMDRkOWQ0YWYwNzdmZmI1MzRiYzViMTEwYTYxODE3YTgzIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 23 Nov 2022 20:27:48 GMT
content-type: application/javascript
last-modified: Wed, 28 Sep 2022 23:13:38 GMT
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hLNUNhysvTAKKwHfPqOeEogQIBeDPfh%2Bso8MPl6nAq7Y306IYfiUKWCCoszD2qfxk9n22FvPUlUtms0lvjn%2FYemZMzORrpQKrw%2B3wSrdz5aRtiN6nvCc%2BJOgR5djN2Gj"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76eca5cb4f98fac8-OSL
content-encoding: br
X-Firefox-Spdy: h2
freshtools.net/vendor/tilt/tilt.jquery.min.js
200 OK 4.6 kB URL HTTP/2 freshtools.net/vendor/tilt/tilt.jquery.min.js
IP
File type ASCII text, with very long lines (5640), with no line terminators
Hash e646506195d66339b3de4df1235ec981
fe4193d8b6784f3642c6f3ff3df8fbd2a728b2eb
6704cc8914a533500ec06cd28aafbadffc39e413c9ae84f6c1e5038dc3d513c7
GET /vendor/tilt/tilt.jquery.min.js HTTP/1.1
Host: freshtools.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freshtools.net/login
Cookie: cf_clearance=x.WWYKsMlThz9IuY5cGPa6C9tNUBDbRJobKxlup6scg-1669235267-0-150; XSRF-TOKEN=eyJpdiI6InlWM3QwcS9wRDZJQ0ZUTmh3Yi8wYVE9PSIsInZhbHVlIjoic2xkTUltMUtFWGNLNldldVZNZzJyZlkxVk1SWW1tNmpjc1JEeUMzbVg5aTBQU20wdmlnKzdremNIWjg2TldlaUtqbXlhckFoZHZyQkpjZ3NsQ2k3TkxLckJsYTVmUXVkTSsrS2NEbHlWdTg4STlwSWdiRGhGN01YWkcyejdJODMiLCJtYWMiOiJjOTA5NzM4MjAwY2YyYzkyMDA0NGFjYzkwYzhlM2U4ODNhZDM4NzY0ZGY1NGU0YmQ3MWY5OWI4ZDkxZDVhZTUyIiwidGFnIjoiIn0%3D; freshtools_session=eyJpdiI6IkUyRDVtaTcxNFdnMUdWMnZzdDdTT0E9PSIsInZhbHVlIjoiVUpwZU1xRlB0M1BDa3dZdlk1LzFEUkY1QjhxM1RYQUQveUdKR0Q1VGplSm9kK0s5Vk5CS0RuY05xYzcwVlUzc2JtZy9MNysrbjV0RmZHVi85TUE3UWkyb1JnNFFFUGMrZHBFakMzNmNNNzNYUllscndNM1o2UStnL0psYmlGS3oiLCJtYWMiOiIxM2M3M2Y4ZTUwNWJkNWUxNDg3YWE3MmY1MmZkYTkzMDRkOWQ0YWYwNzdmZmI1MzRiYzViMTEwYTYxODE3YTgzIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 23 Nov 2022 20:27:48 GMT
content-type: application/javascript
last-modified: Mon, 18 Oct 2021 20:32:36 GMT
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wtsfmFV58d4gZ4%2F%2B4mtrOOErVd%2BIsmRohqLpaxr2lnOqJJqOLrVT1c6R5el2m6mwn8uEw6aGr04JA6CjUVyHInCkGX74lMdXnsrvHhD5Av7TrA8GprdZ6eIRU7Hz4o%2BF"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76eca5cb4f96fac8-OSL
content-encoding: br
X-Firefox-Spdy: h2
www.youtube.com/s/player/4eb6b35d/player_ias.vflset/en_US/base.js
200 OK 592 kB URL HTTP/2 www.youtube.com/s/player/4eb6b35d/player_ias.vflset/en_US/base.js
IP
File type ASCII text, with very long lines (517)
Size 592 kB (592489 bytes)
Hash c740b1903f51ecd2b32decf2a4b39ce1
50dc029c1d7cca728c9313ebe98e0d700ad6a36e
283d481df642787ffb565d6a7554d44b9b0cba77d21b59d9d85defe06e9c9399
GET /s/player/4eb6b35d/player_ias.vflset/en_US/base.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/embed/2dDbaVsWxsY
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
vary: Accept-Encoding, Origin
content-encoding: br
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 592489
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 21 Nov 2022 15:55:44 GMT
expires: Tue, 21 Nov 2023 15:55:44 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 21 Nov 2022 01:17:16 GMT
content-type: text/javascript
age: 189124
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
freshtools.net/fonts/font-awesome-4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0
200 OK 77 kB URL HTTP/2 freshtools.net/fonts/font-awesome-4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0
IP
File type Web Open Font Format (Version 2), TrueType, length 77160, version 4.459\012- data
Hash af7ae505a9eed503f8b8e6982036873e
d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c
2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe
GET /fonts/font-awesome-4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1
Host: freshtools.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://freshtools.net/fonts/font-awesome-4.7.0/css/font-awesome.min.css
Cookie: cf_clearance=x.WWYKsMlThz9IuY5cGPa6C9tNUBDbRJobKxlup6scg-1669235267-0-150; XSRF-TOKEN=eyJpdiI6InlWM3QwcS9wRDZJQ0ZUTmh3Yi8wYVE9PSIsInZhbHVlIjoic2xkTUltMUtFWGNLNldldVZNZzJyZlkxVk1SWW1tNmpjc1JEeUMzbVg5aTBQU20wdmlnKzdremNIWjg2TldlaUtqbXlhckFoZHZyQkpjZ3NsQ2k3TkxLckJsYTVmUXVkTSsrS2NEbHlWdTg4STlwSWdiRGhGN01YWkcyejdJODMiLCJtYWMiOiJjOTA5NzM4MjAwY2YyYzkyMDA0NGFjYzkwYzhlM2U4ODNhZDM4NzY0ZGY1NGU0YmQ3MWY5OWI4ZDkxZDVhZTUyIiwidGFnIjoiIn0%3D; freshtools_session=eyJpdiI6IkUyRDVtaTcxNFdnMUdWMnZzdDdTT0E9PSIsInZhbHVlIjoiVUpwZU1xRlB0M1BDa3dZdlk1LzFEUkY1QjhxM1RYQUQveUdKR0Q1VGplSm9kK0s5Vk5CS0RuY05xYzcwVlUzc2JtZy9MNysrbjV0RmZHVi85TUE3UWkyb1JnNFFFUGMrZHBFakMzNmNNNzNYUllscndNM1o2UStnL0psYmlGS3oiLCJtYWMiOiIxM2M3M2Y4ZTUwNWJkNWUxNDg3YWE3MmY1MmZkYTkzMDRkOWQ0YWYwNzdmZmI1MzRiYzViMTEwYTYxODE3YTgzIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 23 Nov 2022 20:27:49 GMT
content-type: font/woff2
content-length: 77160
last-modified: Mon, 18 Oct 2021 20:32:36 GMT
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wIbZP%2Fp1L21p27Ga%2BIILoDa55D9RK1u5OcqcgKa70z4ue9GTJAKOcQ2YHcgfGP4lg%2B%2BftV%2F837V7p1xhEHI7pekvDSFQFnugraOcISEhO2HFyxnnu16HrZm2ifgyap7R"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76eca5d25dfffac8-OSL
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 4f22437494cab8f3b1de6d48c3677f43
42461557365b59e300ae356c37b95f652e10dacd
420bc8cc7c6624d9201c6e12fb6478f4a9cf77e90aad033b4d12687968003ccf
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 20:27:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
freshtools.net/vendor/css-hamburgers/hamburgers.min.css
200 OK 2.6 kB URL HTTP/2 freshtools.net/vendor/css-hamburgers/hamburgers.min.css
IP
File type ASCII text, with very long lines (19499), with CRLF line terminators
Hash 6eab9ddc2819c57b6f78b05af3dd6c6f
1f18da65936e2b460429917adf1b4c4a0d1a1e14
4de51062fce0742351e4f74b69babeff050eb4122beeb2f5d8cc1de35808f76b
GET /vendor/css-hamburgers/hamburgers.min.css HTTP/1.1
Host: freshtools.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freshtools.net/login
Cookie: cf_clearance=x.WWYKsMlThz9IuY5cGPa6C9tNUBDbRJobKxlup6scg-1669235267-0-150; XSRF-TOKEN=eyJpdiI6InlWM3QwcS9wRDZJQ0ZUTmh3Yi8wYVE9PSIsInZhbHVlIjoic2xkTUltMUtFWGNLNldldVZNZzJyZlkxVk1SWW1tNmpjc1JEeUMzbVg5aTBQU20wdmlnKzdremNIWjg2TldlaUtqbXlhckFoZHZyQkpjZ3NsQ2k3TkxLckJsYTVmUXVkTSsrS2NEbHlWdTg4STlwSWdiRGhGN01YWkcyejdJODMiLCJtYWMiOiJjOTA5NzM4MjAwY2YyYzkyMDA0NGFjYzkwYzhlM2U4ODNhZDM4NzY0ZGY1NGU0YmQ3MWY5OWI4ZDkxZDVhZTUyIiwidGFnIjoiIn0%3D; freshtools_session=eyJpdiI6IkUyRDVtaTcxNFdnMUdWMnZzdDdTT0E9PSIsInZhbHVlIjoiVUpwZU1xRlB0M1BDa3dZdlk1LzFEUkY1QjhxM1RYQUQveUdKR0Q1VGplSm9kK0s5Vk5CS0RuY05xYzcwVlUzc2JtZy9MNysrbjV0RmZHVi85TUE3UWkyb1JnNFFFUGMrZHBFakMzNmNNNzNYUllscndNM1o2UStnL0psYmlGS3oiLCJtYWMiOiIxM2M3M2Y4ZTUwNWJkNWUxNDg3YWE3MmY1MmZkYTkzMDRkOWQ0YWYwNzdmZmI1MzRiYzViMTEwYTYxODE3YTgzIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 23 Nov 2022 20:27:48 GMT
content-type: text/css
last-modified: Mon, 18 Oct 2021 20:32:36 GMT
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=mMbPeq8Fs8i1dFD0lHYL%2Fkcpz8m4bMX9hOcC6ImX6Jf0gsmnwpeE5AEVfwmMXeOeFWEEg%2BWnmnAx9pWftdzlia8L3EobT1ToN3EkjnVp2JxqkrW9ajWrs5aDAa8hM7fL"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76eca5cb3f7ffac8-OSL
content-encoding: br
X-Firefox-Spdy: h2
freshtools.net/vendor/animate/animate.css
200 OK 3.6 kB URL HTTP/2 freshtools.net/vendor/animate/animate.css
IP
File type ASCII text, with CRLF line terminators
Hash ccc0d3254e530f0e11ffccf6764150c5
b69471aa94dcf4e9c93bc34a80bbfe20072cf6ee
ec3f6141d33686092cc9f8489b323d3a190f945f080f54f335a97f501fe47fc3
GET /vendor/animate/animate.css HTTP/1.1
Host: freshtools.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freshtools.net/login
Cookie: cf_clearance=x.WWYKsMlThz9IuY5cGPa6C9tNUBDbRJobKxlup6scg-1669235267-0-150; XSRF-TOKEN=eyJpdiI6InlWM3QwcS9wRDZJQ0ZUTmh3Yi8wYVE9PSIsInZhbHVlIjoic2xkTUltMUtFWGNLNldldVZNZzJyZlkxVk1SWW1tNmpjc1JEeUMzbVg5aTBQU20wdmlnKzdremNIWjg2TldlaUtqbXlhckFoZHZyQkpjZ3NsQ2k3TkxLckJsYTVmUXVkTSsrS2NEbHlWdTg4STlwSWdiRGhGN01YWkcyejdJODMiLCJtYWMiOiJjOTA5NzM4MjAwY2YyYzkyMDA0NGFjYzkwYzhlM2U4ODNhZDM4NzY0ZGY1NGU0YmQ3MWY5OWI4ZDkxZDVhZTUyIiwidGFnIjoiIn0%3D; freshtools_session=eyJpdiI6IkUyRDVtaTcxNFdnMUdWMnZzdDdTT0E9PSIsInZhbHVlIjoiVUpwZU1xRlB0M1BDa3dZdlk1LzFEUkY1QjhxM1RYQUQveUdKR0Q1VGplSm9kK0s5Vk5CS0RuY05xYzcwVlUzc2JtZy9MNysrbjV0RmZHVi85TUE3UWkyb1JnNFFFUGMrZHBFakMzNmNNNzNYUllscndNM1o2UStnL0psYmlGS3oiLCJtYWMiOiIxM2M3M2Y4ZTUwNWJkNWUxNDg3YWE3MmY1MmZkYTkzMDRkOWQ0YWYwNzdmZmI1MzRiYzViMTEwYTYxODE3YTgzIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 23 Nov 2022 20:27:49 GMT
content-type: text/css
last-modified: Mon, 18 Oct 2021 20:32:36 GMT
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=MNx6%2F3pm9wZYOIymO2QB0NTR3FfUbpBeYAw%2FSNCS2Othbo17d5N2OyD1Qu5YR6J83krvjt9%2F%2FiZ9D5xhVt2hisx6nur1ssRPs14REoyvos%2FadjMVyKDkppyMrX0rhtN3"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76eca5cb3f7efac8-OSL
content-encoding: br
X-Firefox-Spdy: h2
www.gstatic.com/recaptcha/releases/Km9gKuG06He-isPsP6saG8cn/recaptcha__en.js
200 OK 163 kB URL HTTP/2 www.gstatic.com/recaptcha/releases/Km9gKuG06He-isPsP6saG8cn/recaptcha__en.js
IP
File type ASCII text, with very long lines (730)
Size 163 kB (162976 bytes)
Hash 79d18cf4265108d7cecca1bf4ada6109
e51d0285a545381d4c39e9e0292a650ffeeecbb9
59ce7253f371df0833c3f72d4748ef812002b90a49413c56d0ca7c40bb5a0ab6
GET /recaptcha/releases/Km9gKuG06He-isPsP6saG8cn/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://freshtools.net
Connection: keep-alive
Referer: https://freshtools.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 162976
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 23 Nov 2022 14:58:48 GMT
expires: Thu, 23 Nov 2023 14:58:48 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 14 Nov 2022 03:01:59 GMT
content-type: text/javascript
age: 19741
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15552, version 1.0\012- data
Hash 285467176f7fe6bb6a9c6873b3dad2cc
ea04e4ff5142ddd69307c183def721a160e0a64e
5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 17 Nov 2022 21:46:16 GMT
expires: Fri, 17 Nov 2023 21:46:16 GMT
cache-control: public, max-age=31536000
age: 513693
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 4f22437494cab8f3b1de6d48c3677f43
42461557365b59e300ae356c37b95f652e10dacd
420bc8cc7c6624d9201c6e12fb6478f4a9cf77e90aad033b4d12687968003ccf
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 20:27:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 4f22437494cab8f3b1de6d48c3677f43
42461557365b59e300ae356c37b95f652e10dacd
420bc8cc7c6624d9201c6e12fb6478f4a9cf77e90aad033b4d12687968003ccf
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 20:27:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash b2b92f1110c82662bfa1addc9bab3130
d6f86300cbfd5b21b3d505c08ffd6edef34b654a
6914944644172d563d0d7c2a5084690fce86ead13949ff29f42842d4bb6e0734
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 20:27:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 0cad81444995839dd0adaf518298011a
97d2d4b41484082ff580dd136d4f3e4dc790846d
409e8883208535817ae29e119508475b362fe773214542a9a562923558c767e5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 20:27:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
freshtools.net/css/bootstrap.css
200 OK 24 kB URL HTTP/2 freshtools.net/css/bootstrap.css
IP
File type ASCII text, with very long lines (65260), with CRLF, LF line terminators
Hash e2c89b6b4aef664e25061882d50f5c06
3a1e8a6959a28f7d8e3e2360201d6c8903394511
12a8ee2c82c367c3442afa284fa877b13c71003f9f28939235600962ba781988
GET /css/bootstrap.css HTTP/1.1
Host: freshtools.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freshtools.net/login
Cookie: cf_clearance=x.WWYKsMlThz9IuY5cGPa6C9tNUBDbRJobKxlup6scg-1669235267-0-150; XSRF-TOKEN=eyJpdiI6InlWM3QwcS9wRDZJQ0ZUTmh3Yi8wYVE9PSIsInZhbHVlIjoic2xkTUltMUtFWGNLNldldVZNZzJyZlkxVk1SWW1tNmpjc1JEeUMzbVg5aTBQU20wdmlnKzdremNIWjg2TldlaUtqbXlhckFoZHZyQkpjZ3NsQ2k3TkxLckJsYTVmUXVkTSsrS2NEbHlWdTg4STlwSWdiRGhGN01YWkcyejdJODMiLCJtYWMiOiJjOTA5NzM4MjAwY2YyYzkyMDA0NGFjYzkwYzhlM2U4ODNhZDM4NzY0ZGY1NGU0YmQ3MWY5OWI4ZDkxZDVhZTUyIiwidGFnIjoiIn0%3D; freshtools_session=eyJpdiI6IkUyRDVtaTcxNFdnMUdWMnZzdDdTT0E9PSIsInZhbHVlIjoiVUpwZU1xRlB0M1BDa3dZdlk1LzFEUkY1QjhxM1RYQUQveUdKR0Q1VGplSm9kK0s5Vk5CS0RuY05xYzcwVlUzc2JtZy9MNysrbjV0RmZHVi85TUE3UWkyb1JnNFFFUGMrZHBFakMzNmNNNzNYUllscndNM1o2UStnL0psYmlGS3oiLCJtYWMiOiIxM2M3M2Y4ZTUwNWJkNWUxNDg3YWE3MmY1MmZkYTkzMDRkOWQ0YWYwNzdmZmI1MzRiYzViMTEwYTYxODE3YTgzIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 23 Nov 2022 20:27:49 GMT
content-type: text/css
last-modified: Wed, 28 Sep 2022 23:13:38 GMT
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ufF8VlT7ag3fFPJYDKSrFtnLREjzSa6vOlVzM2TjjT0M%2BCzKc6%2FhUf3BsDAqm4WSxdisi2GYS1eNskd9Ceht%2FuCKuBlRXREhXwJBnLC7MGQxZ%2FviqrPhne1mxQtmWpcI"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76eca5cb3f7dfac8-OSL
content-encoding: br
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/id
302 Found 0 B URL HTTP/2 googleads.g.doubleclick.net/pagead/id
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pagead/id HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
location: https://googleads.g.doubleclick.net/pagead/id?slf_rd=1
access-control-allow-credentials: true
access-control-allow-origin: https://www.youtube.com
date: Wed, 23 Nov 2022 20:27:49 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
server: cafe
content-length: 0
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
200 OK 0 B URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-goog-api-key,x-user-agent
Referer: https://www.youtube.com/
Origin: https://www.youtube.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://www.youtube.com
vary: origin, referer, x-origin
access-control-allow-credentials: true
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
access-control-allow-headers: content-type,x-goog-api-key,x-user-agent
access-control-max-age: 3600
date: Wed, 23 Nov 2022 20:27:49 GMT
content-type: text/html
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 0cad81444995839dd0adaf518298011a
97d2d4b41484082ff580dd136d4f3e4dc790846d
409e8883208535817ae29e119508475b362fe773214542a9a562923558c767e5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 20:27:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash b2b92f1110c82662bfa1addc9bab3130
d6f86300cbfd5b21b3d505c08ffd6edef34b654a
6914944644172d563d0d7c2a5084690fce86ead13949ff29f42842d4bb6e0734
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 20:27:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
200 OK 31 kB URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
IP
File type JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Hash 89e51889f2ebf5a18c8a001d3ce5a4ee
92b929eec62774392edb25dde3184a350beca254
532e96673bd3a16675ecd51803018a3d135334824a8c9dc6743712b70b61de5c
POST /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 24
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Wed, 23 Nov 2022 20:27:49 GMT
server: ESF
cache-control: private
content-length: 30842
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash adb3448eb71178c9660330148424469f
c299752f6b8a89362cbc5b2254aef1a64181d963
f38213cdc59fe1619d4c4f4a7a4c1d364d1a28552144475e742e76335ec3dd4f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 20:27:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
i.ytimg.com/vi/2dDbaVsWxsY/maxresdefault.jpg?sqp=-oaymwEmCIAKENAF8quKqQMa8AEB-AH-CYAC0AWKAgwIABABGGUgXCg_MA8=&rs=AOn4CLAfjTTVYX8Xc3z3YUVx3Hqym2IhCg
200 OK 80 kB URL HTTP/2 i.ytimg.com/vi/2dDbaVsWxsY/maxresdefault.jpg?sqp=-oaymwEmCIAKENAF8quKqQMa8AEB-AH-CYAC0AWKAgwIABABGGUgXCg_MA8=&rs=AOn4CLAfjTTVYX8Xc3z3YUVx3Hqym2IhCg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1280x720, components 3\012- data
Hash 8894bdaf38bc7c1b8d9f0e78f07292f3
ece7b1914563f0c18fbde0c23cb4750442cb4787
57a254469af00ba74e93b1569c1eca763a44e338bd365910feb7c132dc161ebe
GET /vi/2dDbaVsWxsY/maxresdefault.jpg?sqp=-oaymwEmCIAKENAF8quKqQMa8AEB-AH-CYAC0AWKAgwIABABGGUgXCg_MA8=&rs=AOn4CLAfjTTVYX8Xc3z3YUVx3Hqym2IhCg HTTP/1.1
Host: i.ytimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Origin
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
timing-allow-origin: *
content-length: 79956
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 23 Nov 2022 18:58:51 GMT
expires: Wed, 23 Nov 2022 20:58:51 GMT
cache-control: public, max-age=7200
age: 5339
etag: "1658014483"
content-type: image/jpeg
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 68ab5865b415e2e421a4eaa3a206ce0e
fa492d5a66e9d07ffdc14b3d8e11f0cdc27aed87
10298e9120db56a4aeaf950d2fa25af662172358e534aa5fa6d4af8ab53ce146
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 20:27:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash adb3448eb71178c9660330148424469f
c299752f6b8a89362cbc5b2254aef1a64181d963
f38213cdc59fe1619d4c4f4a7a4c1d364d1a28552144475e742e76335ec3dd4f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 20:27:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
yt3.ggpht.com/fnWfZN7v3RRVLHSu3pxGZ5InE2dC48XKAIJPr6VJf-BABs1N4JNoz6HMGgwNBlhVZgdkMF_6=s68-c-k-c0x00ffffff-no-rj
200 OK 3.0 kB URL HTTP/2 yt3.ggpht.com/fnWfZN7v3RRVLHSu3pxGZ5InE2dC48XKAIJPr6VJf-BABs1N4JNoz6HMGgwNBlhVZgdkMF_6=s68-c-k-c0x00ffffff-no-rj
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 68x68, components 3\012- data
Hash 7ac6ddd07e8f029c714d87895213d59f
263b8d9db37535840418f7e536ab23b31fd969e1
299b632acdd2cc708fffe4989c21d3b3a2879e45f371f0c630e6dff4d152145f
GET /fnWfZN7v3RRVLHSu3pxGZ5InE2dC48XKAIJPr6VJf-BABs1N4JNoz6HMGgwNBlhVZgdkMF_6=s68-c-k-c0x00ffffff-no-rj HTTP/1.1
Host: yt3.ggpht.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="channels4_profile.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 2966
x-xss-protection: 0
date: Wed, 23 Nov 2022 16:47:38 GMT
expires: Thu, 24 Nov 2022 02:35:57 GMT
cache-control: public, max-age=86400, no-transform
age: 13212
etag: "v1"
content-type: image/jpeg
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 68ab5865b415e2e421a4eaa3a206ce0e
fa492d5a66e9d07ffdc14b3d8e11f0cdc27aed87
10298e9120db56a4aeaf950d2fa25af662172358e534aa5fa6d4af8ab53ce146
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 20:27:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
freshtools.net/cdn-cgi/rum?
204 No Content 0 B URL HTTP/2 freshtools.net/cdn-cgi/rum?
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cdn-cgi/rum? HTTP/1.1
Host: freshtools.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
content-type: application/json
Content-Length: 5851
Origin: https://freshtools.net
Connection: keep-alive
Referer: https://freshtools.net/login
Cookie: cf_clearance=x.WWYKsMlThz9IuY5cGPa6C9tNUBDbRJobKxlup6scg-1669235267-0-150; XSRF-TOKEN=eyJpdiI6InlWM3QwcS9wRDZJQ0ZUTmh3Yi8wYVE9PSIsInZhbHVlIjoic2xkTUltMUtFWGNLNldldVZNZzJyZlkxVk1SWW1tNmpjc1JEeUMzbVg5aTBQU20wdmlnKzdremNIWjg2TldlaUtqbXlhckFoZHZyQkpjZ3NsQ2k3TkxLckJsYTVmUXVkTSsrS2NEbHlWdTg4STlwSWdiRGhGN01YWkcyejdJODMiLCJtYWMiOiJjOTA5NzM4MjAwY2YyYzkyMDA0NGFjYzkwYzhlM2U4ODNhZDM4NzY0ZGY1NGU0YmQ3MWY5OWI4ZDkxZDVhZTUyIiwidGFnIjoiIn0%3D; freshtools_session=eyJpdiI6IkUyRDVtaTcxNFdnMUdWMnZzdDdTT0E9PSIsInZhbHVlIjoiVUpwZU1xRlB0M1BDa3dZdlk1LzFEUkY1QjhxM1RYQUQveUdKR0Q1VGplSm9kK0s5Vk5CS0RuY05xYzcwVlUzc2JtZy9MNysrbjV0RmZHVi85TUE3UWkyb1JnNFFFUGMrZHBFakMzNmNNNzNYUllscndNM1o2UStnL0psYmlGS3oiLCJtYWMiOiIxM2M3M2Y4ZTUwNWJkNWUxNDg3YWE3MmY1MmZkYTkzMDRkOWQ0YWYwNzdmZmI1MzRiYzViMTEwYTYxODE3YTgzIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 204 No Content
date: Wed, 23 Nov 2022 20:27:50 GMT
access-control-allow-origin: https://freshtools.net
access-control-allow-methods: POST,OPTIONS
access-control-max-age: 86400
vary: Origin
access-control-allow-credentials: true
server: cloudflare
cf-ray: 76eca5d6f9e7fac8-OSL
x-frame-options: DENY
x-content-type-options: nosniff
X-Firefox-Spdy: h2
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
200 OK 0 B URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-goog-api-key,x-user-agent
Referer: https://www.youtube.com/
Origin: https://www.youtube.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://www.youtube.com
vary: origin, referer, x-origin
access-control-allow-credentials: true
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
access-control-allow-headers: content-type,x-goog-api-key,x-user-agent
access-control-max-age: 3600
date: Wed, 23 Nov 2022 20:27:50 GMT
content-type: text/html
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
200 OK 110 B URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash f8779991c25755a510d3895533a844ce
b24fe458102ec7b7c3d9685c7092e7ca2c155ef3
f48ca12aecab70a5a2c962a7654d1001d1cef7a639f72cdd2cde966cc56ca702
POST /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 1066
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Wed, 23 Nov 2022 20:27:50 GMT
server: ESF
cache-control: private
content-length: 110
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
freshtools.net/cdn-cgi/rum?
204 No Content 0 B URL HTTP/2 freshtools.net/cdn-cgi/rum?
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cdn-cgi/rum? HTTP/1.1
Host: freshtools.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 587
Origin: https://freshtools.net
Connection: keep-alive
Referer: https://freshtools.net/login
Cookie: cf_clearance=x.WWYKsMlThz9IuY5cGPa6C9tNUBDbRJobKxlup6scg-1669235267-0-150; XSRF-TOKEN=eyJpdiI6InlWM3QwcS9wRDZJQ0ZUTmh3Yi8wYVE9PSIsInZhbHVlIjoic2xkTUltMUtFWGNLNldldVZNZzJyZlkxVk1SWW1tNmpjc1JEeUMzbVg5aTBQU20wdmlnKzdremNIWjg2TldlaUtqbXlhckFoZHZyQkpjZ3NsQ2k3TkxLckJsYTVmUXVkTSsrS2NEbHlWdTg4STlwSWdiRGhGN01YWkcyejdJODMiLCJtYWMiOiJjOTA5NzM4MjAwY2YyYzkyMDA0NGFjYzkwYzhlM2U4ODNhZDM4NzY0ZGY1NGU0YmQ3MWY5OWI4ZDkxZDVhZTUyIiwidGFnIjoiIn0%3D; freshtools_session=eyJpdiI6IkUyRDVtaTcxNFdnMUdWMnZzdDdTT0E9PSIsInZhbHVlIjoiVUpwZU1xRlB0M1BDa3dZdlk1LzFEUkY1QjhxM1RYQUQveUdKR0Q1VGplSm9kK0s5Vk5CS0RuY05xYzcwVlUzc2JtZy9MNysrbjV0RmZHVi85TUE3UWkyb1JnNFFFUGMrZHBFakMzNmNNNzNYUllscndNM1o2UStnL0psYmlGS3oiLCJtYWMiOiIxM2M3M2Y4ZTUwNWJkNWUxNDg3YWE3MmY1MmZkYTkzMDRkOWQ0YWYwNzdmZmI1MzRiYzViMTEwYTYxODE3YTgzIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 204 No Content
date: Wed, 23 Nov 2022 20:27:51 GMT
access-control-allow-origin: https://freshtools.net
access-control-allow-methods: POST,OPTIONS
access-control-max-age: 86400
vary: Origin
access-control-allow-credentials: true
server: cloudflare
cf-ray: 76eca5ddc87cfac8-OSL
x-frame-options: DENY
x-content-type-options: nosniff
X-Firefox-Spdy: h2
freshtools.net/cdn-cgi/styles/challenges.css
200 OK 0 B URL HTTP/2 freshtools.net/cdn-cgi/styles/challenges.css
IP
GET /cdn-cgi/styles/challenges.css HTTP/1.1
Host: freshtools.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://freshtools.net/
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 23 Nov 2022 20:27:46 GMT
content-type: text/css
last-modified: Tue, 22 Nov 2022 13:34:50 GMT
etag: W/"637ccffa-1896"
server: cloudflare
cf-ray: 76eca5c06d4bfac8-OSL
x-frame-options: DENY
x-content-type-options: nosniff
vary: Accept-Encoding
expires: Wed, 23 Nov 2022 22:27:46 GMT
cache-control: max-age=7200, public
content-encoding: gzip
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 0 B URL HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 19 Nov 2022 12:31:58 GMT
expires: Sun, 19 Nov 2023 12:31:58 GMT
cache-control: public, max-age=31536000
age: 374151
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
freshtools.net/vendor/select2/select2.min.js
200 OK 0 B URL HTTP/2 freshtools.net/vendor/select2/select2.min.js
IP
GET /vendor/select2/select2.min.js HTTP/1.1
Host: freshtools.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freshtools.net/login
Cookie: cf_clearance=x.WWYKsMlThz9IuY5cGPa6C9tNUBDbRJobKxlup6scg-1669235267-0-150; XSRF-TOKEN=eyJpdiI6InlWM3QwcS9wRDZJQ0ZUTmh3Yi8wYVE9PSIsInZhbHVlIjoic2xkTUltMUtFWGNLNldldVZNZzJyZlkxVk1SWW1tNmpjc1JEeUMzbVg5aTBQU20wdmlnKzdremNIWjg2TldlaUtqbXlhckFoZHZyQkpjZ3NsQ2k3TkxLckJsYTVmUXVkTSsrS2NEbHlWdTg4STlwSWdiRGhGN01YWkcyejdJODMiLCJtYWMiOiJjOTA5NzM4MjAwY2YyYzkyMDA0NGFjYzkwYzhlM2U4ODNhZDM4NzY0ZGY1NGU0YmQ3MWY5OWI4ZDkxZDVhZTUyIiwidGFnIjoiIn0%3D; freshtools_session=eyJpdiI6IkUyRDVtaTcxNFdnMUdWMnZzdDdTT0E9PSIsInZhbHVlIjoiVUpwZU1xRlB0M1BDa3dZdlk1LzFEUkY1QjhxM1RYQUQveUdKR0Q1VGplSm9kK0s5Vk5CS0RuY05xYzcwVlUzc2JtZy9MNysrbjV0RmZHVi85TUE3UWkyb1JnNFFFUGMrZHBFakMzNmNNNzNYUllscndNM1o2UStnL0psYmlGS3oiLCJtYWMiOiIxM2M3M2Y4ZTUwNWJkNWUxNDg3YWE3MmY1MmZkYTkzMDRkOWQ0YWYwNzdmZmI1MzRiYzViMTEwYTYxODE3YTgzIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 23 Nov 2022 20:27:48 GMT
content-type: application/javascript
last-modified: Mon, 18 Oct 2021 20:32:36 GMT
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=LuGOwqUPEFiUASvxBJkKlsbNa4cX6wsrTLqq6kmGGO%2Bv4sP%2FRANoy%2FIJ7xa9ym9%2BcmmiRVWv1z1CcyWSIlaL5COjRVFlPtD3GufAfsCKwWyOye2k6MujWlqpV7HLmFV5"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76eca5cb4f95fac8-OSL
content-encoding: br
X-Firefox-Spdy: h2
static.cloudflareinsights.com/beacon.min.js/vaafb692b2aea4879b33c060e79fe94621666317369993
200 OK 0 B URL HTTP/2 static.cloudflareinsights.com/beacon.min.js/vaafb692b2aea4879b33c060e79fe94621666317369993
IP
GET /beacon.min.js/vaafb692b2aea4879b33c060e79fe94621666317369993 HTTP/1.1
Host: static.cloudflareinsights.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://freshtools.net
Connection: keep-alive
Referer: https://freshtools.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 23 Nov 2022 20:27:48 GMT
content-type: text/javascript;charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=86400
etag: W/2022.10.1
last-modified: Fri, 21 Oct 2022 01:56:09 GMT
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
server: cloudflare
cf-ray: 76eca5cb7e4bb512-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
freshtools.net/
503 Service Unavailable 0 B IP
GET / HTTP/1.1
Host: freshtools.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 503 Service Unavailable
date: Wed, 23 Nov 2022 20:27:46 GMT
content-type: text/html; charset=UTF-8
x-frame-options: SAMEORIGIN
cross-origin-embedder-policy: require-corp
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: same-origin
referrer-policy: same-origin
permissions-policy: accelerometer=(),autoplay=(),camera=(),clipboard-read=(),clipboard-write=(),fullscreen=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QgbvIgPBrkV%2BIQOWb4bzDe1OhE%2BosjrF5wqSMq0TIBhBUVfHMhQvH3JJ2V0bdQIBPS%2BwCBLPtdpWmn365WIU%2B8ZSH0uqQ3BEFjSjBFIaKAaokVW1mzhAj7Gs0nxv%2F95%2F"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76eca5bfeca4fac8-OSL
X-Firefox-Spdy: h2
freshtools.net/js/app.js
200 OK 0 B IP
GET /js/app.js HTTP/1.1
Host: freshtools.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freshtools.net/login
Cookie: cf_clearance=x.WWYKsMlThz9IuY5cGPa6C9tNUBDbRJobKxlup6scg-1669235267-0-150; XSRF-TOKEN=eyJpdiI6InlWM3QwcS9wRDZJQ0ZUTmh3Yi8wYVE9PSIsInZhbHVlIjoic2xkTUltMUtFWGNLNldldVZNZzJyZlkxVk1SWW1tNmpjc1JEeUMzbVg5aTBQU20wdmlnKzdremNIWjg2TldlaUtqbXlhckFoZHZyQkpjZ3NsQ2k3TkxLckJsYTVmUXVkTSsrS2NEbHlWdTg4STlwSWdiRGhGN01YWkcyejdJODMiLCJtYWMiOiJjOTA5NzM4MjAwY2YyYzkyMDA0NGFjYzkwYzhlM2U4ODNhZDM4NzY0ZGY1NGU0YmQ3MWY5OWI4ZDkxZDVhZTUyIiwidGFnIjoiIn0%3D; freshtools_session=eyJpdiI6IkUyRDVtaTcxNFdnMUdWMnZzdDdTT0E9PSIsInZhbHVlIjoiVUpwZU1xRlB0M1BDa3dZdlk1LzFEUkY1QjhxM1RYQUQveUdKR0Q1VGplSm9kK0s5Vk5CS0RuY05xYzcwVlUzc2JtZy9MNysrbjV0RmZHVi85TUE3UWkyb1JnNFFFUGMrZHBFakMzNmNNNzNYUllscndNM1o2UStnL0psYmlGS3oiLCJtYWMiOiIxM2M3M2Y4ZTUwNWJkNWUxNDg3YWE3MmY1MmZkYTkzMDRkOWQ0YWYwNzdmZmI1MzRiYzViMTEwYTYxODE3YTgzIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 23 Nov 2022 20:27:48 GMT
content-type: application/javascript
last-modified: Tue, 04 Oct 2022 06:19:56 GMT
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=k1C8Re%2BT55dKW1Hn3YgFQ2RyPVTiAG1Hfbjaj7l4pLX2j2qsH8mbuDlYpbaTL33U6cBO3jvx%2B%2BYNvHxoe8MXqYhDET96w1JFRsDmTaSFVQ6gG3zJcc80Odw3XxmWTwCI"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76eca5cb3f93fac8-OSL
content-encoding: br
X-Firefox-Spdy: h2
freshtools.net/login
200 OK 0 B IP
GET /login HTTP/1.1
Host: freshtools.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: cf_clearance=x.WWYKsMlThz9IuY5cGPa6C9tNUBDbRJobKxlup6scg-1669235267-0-150; XSRF-TOKEN=eyJpdiI6InM4YVRHQityMU1aam5UR0FsNEw3dkE9PSIsInZhbHVlIjoiVlFZVk0xN2RHMUk4NVhOblVzTStPTzBlMDlLdHB3TEl3VGpwQ09RMnBuRHpVQThxY0g0cTlXak05Sk5CWUszN2pIWXBKWDBaWmhWcEkrczNEY0pYSnltMVIrTlRGUHhGcm16ZFRtT3FOYkRMSTBVRG9CWlozOE43VDNUTGtNa08iLCJtYWMiOiI4MGJhNDZhY2JmYjhlYTA3Mjg4MWNkNGY2NzQzMTQ0NTcxYjM3NDRjYWUxZGNhY2QwY2VhYmY3NmUyMjNjZDdlIiwidGFnIjoiIn0%3D; freshtools_session=eyJpdiI6InRtOGFXcWFJdzhMMkx1QUl1SXk5YkE9PSIsInZhbHVlIjoicHAxVjd5bkhnQXpOMkhuZlAwWlJOUlJuMGxLa2g3Q2JBQ0RaVG54dG82UFFzSHBSUGdPbFNjcTMxSFJmVEM2RGFBUmtwVG00YzRseXBGaE1XaVFuaFZzZzlXN3JQUk1Ca3FoVlBRQXVVMml4K0EycktHdDFwVlJOcVd4VFVoTFgiLCJtYWMiOiJmODc0MTdhMzkxYTE4ODAyNGQzM2U5YTdlMjc5OWEwYTc4NjdkM2ZhMTQzYjNhMzczNWQwYTIyZGNjMTI0ZjEzIiwidGFnIjoiIn0%3D
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 23 Nov 2022 20:27:48 GMT
content-type: text/html; charset=UTF-8
cache-control: no-cache, private
set-cookie: XSRF-TOKEN=eyJpdiI6InlWM3QwcS9wRDZJQ0ZUTmh3Yi8wYVE9PSIsInZhbHVlIjoic2xkTUltMUtFWGNLNldldVZNZzJyZlkxVk1SWW1tNmpjc1JEeUMzbVg5aTBQU20wdmlnKzdremNIWjg2TldlaUtqbXlhckFoZHZyQkpjZ3NsQ2k3TkxLckJsYTVmUXVkTSsrS2NEbHlWdTg4STlwSWdiRGhGN01YWkcyejdJODMiLCJtYWMiOiJjOTA5NzM4MjAwY2YyYzkyMDA0NGFjYzkwYzhlM2U4ODNhZDM4NzY0ZGY1NGU0YmQ3MWY5OWI4ZDkxZDVhZTUyIiwidGFnIjoiIn0%3D; expires=Fri, 06-Feb-2252 10:59:48 GMT; Max-Age=7232941920; path=/; samesite=lax
freshtools_session=eyJpdiI6IkUyRDVtaTcxNFdnMUdWMnZzdDdTT0E9PSIsInZhbHVlIjoiVUpwZU1xRlB0M1BDa3dZdlk1LzFEUkY1QjhxM1RYQUQveUdKR0Q1VGplSm9kK0s5Vk5CS0RuY05xYzcwVlUzc2JtZy9MNysrbjV0RmZHVi85TUE3UWkyb1JnNFFFUGMrZHBFakMzNmNNNzNYUllscndNM1o2UStnL0psYmlGS3oiLCJtYWMiOiIxM2M3M2Y4ZTUwNWJkNWUxNDg3YWE3MmY1MmZkYTkzMDRkOWQ0YWYwNzdmZmI1MzRiYzViMTEwYTYxODE3YTgzIiwidGFnIjoiIn0%3D; expires=Fri, 06-Feb-2252 10:59:48 GMT; Max-Age=7232941920; path=/; httponly; samesite=lax
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0cTO9YKuC%2FhHcQ3dRtJizwtzc%2FlXdBbTIVVJMPIotCSW9KYP3DSjVvfqStUMplTBNE91i2FsUbNGlnwpq6J%2BkGxlwwq8p5d43djECSRcYHjQE2PUl6IiVs%2BSzH2k9KAz"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76eca5c95dedfac8-OSL
content-encoding: br
X-Firefox-Spdy: h2
freshtools.net/css/util.css
200 OK 0 B URL HTTP/2 freshtools.net/css/util.css
IP
GET /css/util.css HTTP/1.1
Host: freshtools.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freshtools.net/login
Cookie: cf_clearance=x.WWYKsMlThz9IuY5cGPa6C9tNUBDbRJobKxlup6scg-1669235267-0-150; XSRF-TOKEN=eyJpdiI6InlWM3QwcS9wRDZJQ0ZUTmh3Yi8wYVE9PSIsInZhbHVlIjoic2xkTUltMUtFWGNLNldldVZNZzJyZlkxVk1SWW1tNmpjc1JEeUMzbVg5aTBQU20wdmlnKzdremNIWjg2TldlaUtqbXlhckFoZHZyQkpjZ3NsQ2k3TkxLckJsYTVmUXVkTSsrS2NEbHlWdTg4STlwSWdiRGhGN01YWkcyejdJODMiLCJtYWMiOiJjOTA5NzM4MjAwY2YyYzkyMDA0NGFjYzkwYzhlM2U4ODNhZDM4NzY0ZGY1NGU0YmQ3MWY5OWI4ZDkxZDVhZTUyIiwidGFnIjoiIn0%3D; freshtools_session=eyJpdiI6IkUyRDVtaTcxNFdnMUdWMnZzdDdTT0E9PSIsInZhbHVlIjoiVUpwZU1xRlB0M1BDa3dZdlk1LzFEUkY1QjhxM1RYQUQveUdKR0Q1VGplSm9kK0s5Vk5CS0RuY05xYzcwVlUzc2JtZy9MNysrbjV0RmZHVi85TUE3UWkyb1JnNFFFUGMrZHBFakMzNmNNNzNYUllscndNM1o2UStnL0psYmlGS3oiLCJtYWMiOiIxM2M3M2Y4ZTUwNWJkNWUxNDg3YWE3MmY1MmZkYTkzMDRkOWQ0YWYwNzdmZmI1MzRiYzViMTEwYTYxODE3YTgzIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 23 Nov 2022 20:27:48 GMT
content-type: text/css
last-modified: Wed, 28 Sep 2022 23:13:38 GMT
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1vkj4JwuluxJ2xnbayoKDP5bIrvEK3dRF6RATtNe8VeG7Jt%2B%2B48pSsRp2aAzne%2BAYiuOqlowQuo8CUkV%2BULpA8w4ezT8TMJA15Vu06aJZ3T5lXLQ9XpYiW5GF22PgN9x"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76eca5cb3f84fac8-OSL
content-encoding: br
X-Firefox-Spdy: h2
freshtools.net/fonts/Poppins-Regular.ttf?731a28a413d642522667a2de8681ff35
200 OK 0 B URL HTTP/2 freshtools.net/fonts/Poppins-Regular.ttf?731a28a413d642522667a2de8681ff35
IP
GET /fonts/Poppins-Regular.ttf?731a28a413d642522667a2de8681ff35 HTTP/1.1
Host: freshtools.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freshtools.net/css/loginStyle.css?id=7abd190e74023b3175577bbf86ba8bf6
Cookie: cf_clearance=x.WWYKsMlThz9IuY5cGPa6C9tNUBDbRJobKxlup6scg-1669235267-0-150; XSRF-TOKEN=eyJpdiI6InlWM3QwcS9wRDZJQ0ZUTmh3Yi8wYVE9PSIsInZhbHVlIjoic2xkTUltMUtFWGNLNldldVZNZzJyZlkxVk1SWW1tNmpjc1JEeUMzbVg5aTBQU20wdmlnKzdremNIWjg2TldlaUtqbXlhckFoZHZyQkpjZ3NsQ2k3TkxLckJsYTVmUXVkTSsrS2NEbHlWdTg4STlwSWdiRGhGN01YWkcyejdJODMiLCJtYWMiOiJjOTA5NzM4MjAwY2YyYzkyMDA0NGFjYzkwYzhlM2U4ODNhZDM4NzY0ZGY1NGU0YmQ3MWY5OWI4ZDkxZDVhZTUyIiwidGFnIjoiIn0%3D; freshtools_session=eyJpdiI6IkUyRDVtaTcxNFdnMUdWMnZzdDdTT0E9PSIsInZhbHVlIjoiVUpwZU1xRlB0M1BDa3dZdlk1LzFEUkY1QjhxM1RYQUQveUdKR0Q1VGplSm9kK0s5Vk5CS0RuY05xYzcwVlUzc2JtZy9MNysrbjV0RmZHVi85TUE3UWkyb1JnNFFFUGMrZHBFakMzNmNNNzNYUllscndNM1o2UStnL0psYmlGS3oiLCJtYWMiOiIxM2M3M2Y4ZTUwNWJkNWUxNDg3YWE3MmY1MmZkYTkzMDRkOWQ0YWYwNzdmZmI1MzRiYzViMTEwYTYxODE3YTgzIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 23 Nov 2022 20:27:49 GMT
content-type: font/ttf
last-modified: Mon, 18 Oct 2021 20:32:36 GMT
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=54ObbmEeF9otV28Sy2MwHPtwIN3iqlcY8sjW5AJxv1sBIB9piR2hilioducKUDgujmRvxGTlN5I0Rqg%2FSMT2TcY1lOowrgFDL0qxe09U6SfnDuoVkq7JYxw5ma0DreaH"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76eca5d24df3fac8-OSL
content-encoding: br
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Nunito
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Nunito
IP
GET /css?family=Nunito HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freshtools.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 23 Nov 2022 20:27:48 GMT
date: Wed, 23 Nov 2022 20:27:48 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
freshtools.net/cdn-cgi/challenge-platform/h/b/flow/ov1/0.8302946248956624:1669230547:RQInvHlThYtq3LSyIRySW3-oS3i7WGup9pZCfmTnn04/76eca5bfeca4fac8/9298b95a1c470b8
200 OK 0 B URL HTTP/2 freshtools.net/cdn-cgi/challenge-platform/h/b/flow/ov1/0.8302946248956624:1669230547:RQInvHlThYtq3LSyIRySW3-oS3i7WGup9pZCfmTnn04/76eca5bfeca4fac8/9298b95a1c470b8
IP
POST /cdn-cgi/challenge-platform/h/b/flow/ov1/0.8302946248956624:1669230547:RQInvHlThYtq3LSyIRySW3-oS3i7WGup9pZCfmTnn04/76eca5bfeca4fac8/9298b95a1c470b8 HTTP/1.1
Host: freshtools.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://freshtools.net/
Content-type: application/x-www-form-urlencoded
CF-Challenge: 9298b95a1c470b8
Content-Length: 1601
Origin: https://freshtools.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 23 Nov 2022 20:27:46 GMT
content-type: text/plain; charset=UTF-8
cf_chl_gen: A90oUejH1VY6orbgnv5A0W5ajesaK1h2KsP3NboSg+UPakxbmNtiftDTIENjMFjh5FuzD3LTXcegGr+HHGc7ugx9cGVvnhZjTLUlMI4OaHq1MD/8hpZWuRc8NzlxfayZVzz9KEp1A+N2imigI0G1wkPmzc+1dwLYrG/K5Nljwl5aILz92yhtP35qqBEZ9Q/OYXx4WvYBHn1AZnLMU8UBZwYI+2MJhs/oZYnC3XOJhvVpTDTsJ2KNCY2ZwClYoUsUXxgJm9zQ8A9Mz9IyF6FABVVtbAA84MV4/TdNcc8S2/A=$TOLQTWTx2Nc5vD0U+fw2Ng==
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ZLGybgh1rrVtEkREk7v9Z%2FVUthpeyHUcOYnrKq3JyHHtJPNodIrJl%2FG%2BC3HZs2jZlPYp2BF7TPu0h723xdU5jgyIE28uHRLAsVk3EbrWBbhCXCcsjZduh36Igx7oEaeR"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76eca5c1becffac8-OSL
content-encoding: br
X-Firefox-Spdy: h2
freshtools.net/cdn-cgi/challenge-platform/h/b/img/76eca5bfeca4fac8/1669235266851/pJ3hN77lj2RxzWL
200 OK 0 B URL HTTP/2 freshtools.net/cdn-cgi/challenge-platform/h/b/img/76eca5bfeca4fac8/1669235266851/pJ3hN77lj2RxzWL
IP
GET /cdn-cgi/challenge-platform/h/b/img/76eca5bfeca4fac8/1669235266851/pJ3hN77lj2RxzWL HTTP/1.1
Host: freshtools.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://freshtools.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 23 Nov 2022 20:27:47 GMT
content-type: image/png
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ME%2BZkGB3oVSu73tsvJK9i1nStxysq33pWVWAzXT%2B5gf5sHMGjsMEBxd1TRk5cKGU1gRsEOB63gEjDAG6dxgGU2ok4NfssSfWeISSajMl%2B5zngGgzi0AWmWAdmWFihqDz"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76eca5c2e803fac8-OSL
X-Firefox-Spdy: h2
freshtools.net/vendor/select2/select2.min.css
200 OK 0 B URL HTTP/2 freshtools.net/vendor/select2/select2.min.css
IP
GET /vendor/select2/select2.min.css HTTP/1.1
Host: freshtools.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freshtools.net/login
Cookie: cf_clearance=x.WWYKsMlThz9IuY5cGPa6C9tNUBDbRJobKxlup6scg-1669235267-0-150; XSRF-TOKEN=eyJpdiI6InlWM3QwcS9wRDZJQ0ZUTmh3Yi8wYVE9PSIsInZhbHVlIjoic2xkTUltMUtFWGNLNldldVZNZzJyZlkxVk1SWW1tNmpjc1JEeUMzbVg5aTBQU20wdmlnKzdremNIWjg2TldlaUtqbXlhckFoZHZyQkpjZ3NsQ2k3TkxLckJsYTVmUXVkTSsrS2NEbHlWdTg4STlwSWdiRGhGN01YWkcyejdJODMiLCJtYWMiOiJjOTA5NzM4MjAwY2YyYzkyMDA0NGFjYzkwYzhlM2U4ODNhZDM4NzY0ZGY1NGU0YmQ3MWY5OWI4ZDkxZDVhZTUyIiwidGFnIjoiIn0%3D; freshtools_session=eyJpdiI6IkUyRDVtaTcxNFdnMUdWMnZzdDdTT0E9PSIsInZhbHVlIjoiVUpwZU1xRlB0M1BDa3dZdlk1LzFEUkY1QjhxM1RYQUQveUdKR0Q1VGplSm9kK0s5Vk5CS0RuY05xYzcwVlUzc2JtZy9MNysrbjV0RmZHVi85TUE3UWkyb1JnNFFFUGMrZHBFakMzNmNNNzNYUllscndNM1o2UStnL0psYmlGS3oiLCJtYWMiOiIxM2M3M2Y4ZTUwNWJkNWUxNDg3YWE3MmY1MmZkYTkzMDRkOWQ0YWYwNzdmZmI1MzRiYzViMTEwYTYxODE3YTgzIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 23 Nov 2022 20:27:48 GMT
content-type: text/css
last-modified: Mon, 18 Oct 2021 20:32:36 GMT
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8TWL30J6JyT%2BD6EU6gjsK0xvk5PDeRbhypzBiCy%2Brq6N%2BIiWEbsM7j0Ij2AB6nvOlDUe5Q%2BFRNQaooDhtrnyARSTtTVOw0ITyBqb0w7VDkUbNTkUKayocJflJfg2J4mZ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76eca5cb3f81fac8-OSL
content-encoding: br
X-Firefox-Spdy: h2
119.18.54.20
34.160.144.191
158.85.120.178
104.16.56.101
23.36.76.226
93.184.220.29