click.mail.thetrumankc.com/f/a/i-zs6hYc_G76bIltx663Dg~~/AAJOsQA~/RgRnSze0P0UBOIQyAWh0dHBzOi8vYXBwLmhpdmUuY28vZW1haWwvZWx0Lz9oX3NpZD01YmMwYzhlMjI1LTY4NjJiNGIwZmU5NWEwYmI1OTc2MGNkMyZoYXNoPTUwZjM0NTE5NTk3ODI1ZiZuZXh0PWh0dHBzJTNBLy9mYW5saW5rLnRvL3JlYWxlc3RhdGV0cnVtYW4lM0Z1dG1fc291cmNlJTNEaGl2ZSUyNnV0bV9tZWRpdW0lM0RlbWFpbCUyNnV0bV9jYW1wYWlnbiUzRGhpdmVfZW1haWxfaWRfMjQ5NjAyXzExMzAtMy1uZXctc2hvd3MtZ2lmLXN0ZWVsLXBhbnRoZXItc2V0LWl0LW9mZi1yZWFsLWVzdGF0ZS1tYWRkaWUtdGFlLXRvbW9ycm93LWV2ZW50cy1wcm9tb1cDc3BjQgplX7SyaGVrh2GSUg9ocXVpY2tAY2FjdS5jb21YBAAAAAA~
0 B URL click.mail.thetrumankc.com/f/a/i-zs6hYc_G76bIltx663Dg~~/AAJOsQA~/RgRnSze0P0UBOIQyAWh0dHBzOi8vYXBwLmhpdmUuY28vZW1haWwvZWx0Lz9oX3NpZD01YmMwYzhlMjI1LTY4NjJiNGIwZmU5NWEwYmI1OTc2MGNkMyZoYXNoPTUwZjM0NTE5NTk3ODI1ZiZuZXh0PWh0dHBzJTNBLy9mYW5saW5rLnRvL3JlYWxlc3RhdGV0cnVtYW4lM0Z1dG1fc291cmNlJTNEaGl2ZSUyNnV0bV9tZWRpdW0lM0RlbWFpbCUyNnV0bV9jYW1wYWlnbiUzRGhpdmVfZW1haWxfaWRfMjQ5NjAyXzExMzAtMy1uZXctc2hvd3MtZ2lmLXN0ZWVsLXBhbnRoZXItc2V0LWl0LW9mZi1yZWFsLWVzdGF0ZS1tYWRkaWUtdGFlLXRvbW9ycm93LWV2ZW50cy1wcm9tb1cDc3BjQgplX7SyaGVrh2GSUg9ocXVpY2tAY2FjdS5jb21YBAAAAAA~
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /f/a/i-zs6hYc_G76bIltx663Dg~~/AAJOsQA~/RgRnSze0P0UBOIQyAWh0dHBzOi8vYXBwLmhpdmUuY28vZW1haWwvZWx0Lz9oX3NpZD01YmMwYzhlMjI1LTY4NjJiNGIwZmU5NWEwYmI1OTc2MGNkMyZoYXNoPTUwZjM0NTE5NTk3ODI1ZiZuZXh0PWh0dHBzJTNBLy9mYW5saW5rLnRvL3JlYWxlc3RhdGV0cnVtYW4lM0Z1dG1fc291cmNlJTNEaGl2ZSUyNnV0bV9tZWRpdW0lM0RlbWFpbCUyNnV0bV9jYW1wYWlnbiUzRGhpdmVfZW1haWxfaWRfMjQ5NjAyXzExMzAtMy1uZXctc2hvd3MtZ2lmLXN0ZWVsLXBhbnRoZXItc2V0LWl0LW9mZi1yZWFsLWVzdGF0ZS1tYWRkaWUtdGFlLXRvbW9ycm93LWV2ZW50cy1wcm9tb1cDc3BjQgplX7SyaGVrh2GSUg9ocXVpY2tAY2FjdS5jb21YBAAAAAA~ HTTP/1.1
Host: click.mail.thetrumankc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Moved Temporarily
Content-Type: text/plain
Date: Thu, 30 Nov 2023 17:21:37 GMT
Location: https://app.hive.co/email/elt/?h_sid=5bc0c8e225-6862b4b0fe95a0bb59760cd3&hash=50f34519597825f&next=https%3A//fanlink.to/realestatetruman%3Futm_source%3Dhive%26utm_medium%3Demail%26utm_campaign%3Dhive_email_id_249602_1130-3-new-shows-gif-steel-panther-set-it-off-real-estate-maddie-tae-tomorrow-events-promo
Server: msys-http
X-Robots-Tag: noindex
Content-Length: 0
Connection: keep-alive
app.hive.co/email/elt/?h_sid=5bc0c8e225-6862b4b0fe95a0bb59760cd3&hash=50f34519597825f&next=https%3A//fanlink.to/realestatetruman%3Futm_source%3Dhive%26utm_medium%3Demail%26utm_campaign%3Dhive_email_id_249602_1130-3-new-shows-gif-steel-panther-set-it-off-real-estate-maddie-tae-tomorrow-events-promo
0 B URL app.hive.co/email/elt/?h_sid=5bc0c8e225-6862b4b0fe95a0bb59760cd3&hash=50f34519597825f&next=https%3A//fanlink.to/realestatetruman%3Futm_source%3Dhive%26utm_medium%3Demail%26utm_campaign%3Dhive_email_id_249602_1130-3-new-shows-gif-steel-panther-set-it-off-real-estate-maddie-tae-tomorrow-events-promo
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /email/elt/?h_sid=5bc0c8e225-6862b4b0fe95a0bb59760cd3&hash=50f34519597825f&next=https%3A//fanlink.to/realestatetruman%3Futm_source%3Dhive%26utm_medium%3Demail%26utm_campaign%3Dhive_email_id_249602_1130-3-new-shows-gif-steel-panther-set-it-off-real-estate-maddie-tae-tomorrow-events-promo HTTP/1.1
Host: app.hive.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Access-Control-Allow-Origin: *
Content-Type: text/html; charset=utf-8
Date: Thu, 30 Nov 2023 17:21:38 GMT
Location: https://app.hive.co/shortlink/js-redirect?next_url=https%3A%2F%2Ffanlink.to%2Frealestatetruman%3Futm_source%3Dhive%26utm_medium%3Demail%26utm_campaign%3Dhive_email_id_249602_1130-3-new-shows-gif-steel-panther-set-it-off-real-estate-maddie-tae-tomorrow-events-promo%26h_sid%3D5bc0c8e225-6862b4b0fe95a0bb59760cd3%26h_slt%3DeyJoYXNoIjoiMTFmMWU2N2RmMjEyZTk4IiwiaGl2ZV91c2VyX2lkIjo5MzE4NzE0NH0%253D&validation_hash=a4f0893388c6c02
P3P: policyref="https://app.hive.co/w3c/p3p.xml", CP="CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa CONa TELa OUR DEL SAM OTR UNR IND DSP NON COR"
Server: nginx/1.14.0 (Ubuntu)
Set-Cookie: hive_passed_referer=; expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Path=/l; SameSite=none; Secure
cookie_visitor_key=4c9d4973-61a1-5b92-9a8d-bb1c60c6331a; expires=Thu, 07-Dec-2023 17:21:38 GMT; Max-Age=604800; Path=/; SameSite=none; Secure
sessionid=5qembk3l4tgzvavksl6zwv6mwa0t1ze8; expires=Fri, 29-Nov-2024 17:21:38 GMT; httponly; Max-Age=31536000; Path=/; SameSite=none; Secure
cookie_session_key=48ffdc2f-7fd9-556e-9f69-3e3eac3133e8; expires=Thu, 30-Nov-2023 17:51:38 GMT; Max-Age=1800; Path=/; SameSite=none; Secure
csrftoken=P4wkRGfK04Ht3z7Vns5CqjxdGFx2Aaxc98d7Izc3MalsfCiIQzL6zBh09QMFWdjP; expires=Thu, 28-Nov-2024 17:21:38 GMT; Max-Age=31449600; Path=/; SameSite=none; Secure
ip_location_key=True; expires=Fri, 29-Nov-2024 17:21:38 GMT; Max-Age=31536000; Path=/; SameSite=none; Secure
Vary: Cookie
X-Frame-Options: SAMEORIGIN
Content-Length: 0
Connection: keep-alive
app.hive.co/shortlink/js-redirect?next_url=https%3A%2F%2Ffanlink.to%2Frealestatetruman%3Futm_source%3Dhive%26utm_medium%3Demail%26utm_campaign%3Dhive_email_id_249602_1130-3-new-shows-gif-steel-panther-set-it-off-real-estate-maddie-tae-tomorrow-events-promo%26h_sid%3D5bc0c8e225-6862b4b0fe95a0bb59760cd3%26h_slt%3DeyJoYXNoIjoiMTFmMWU2N2RmMjEyZTk4IiwiaGl2ZV91c2VyX2lkIjo5MzE4NzE0NH0%253D&validation_hash=a4f0893388c6c02
20 kB URL app.hive.co/shortlink/js-redirect?next_url=https%3A%2F%2Ffanlink.to%2Frealestatetruman%3Futm_source%3Dhive%26utm_medium%3Demail%26utm_campaign%3Dhive_email_id_249602_1130-3-new-shows-gif-steel-panther-set-it-off-real-estate-maddie-tae-tomorrow-events-promo%26h_sid%3D5bc0c8e225-6862b4b0fe95a0bb59760cd3%26h_slt%3DeyJoYXNoIjoiMTFmMWU2N2RmMjEyZTk4IiwiaGl2ZV91c2VyX2lkIjo5MzE4NzE0NH0%253D&validation_hash=a4f0893388c6c02
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (55117)
Hash ee5f5e783334d063b12267ecd3a9644c
9e1d58b5bd033a89197d8ac31e8699ef756934c0
2bf021b6074251ee21cbf0cb7327f69ef390ba3eee6880ead6cce5b71e59774e
GET /shortlink/js-redirect?next_url=https%3A%2F%2Ffanlink.to%2Frealestatetruman%3Futm_source%3Dhive%26utm_medium%3Demail%26utm_campaign%3Dhive_email_id_249602_1130-3-new-shows-gif-steel-panther-set-it-off-real-estate-maddie-tae-tomorrow-events-promo%26h_sid%3D5bc0c8e225-6862b4b0fe95a0bb59760cd3%26h_slt%3DeyJoYXNoIjoiMTFmMWU2N2RmMjEyZTk4IiwiaGl2ZV91c2VyX2lkIjo5MzE4NzE0NH0%253D&validation_hash=a4f0893388c6c02 HTTP/1.1
Host: app.hive.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: cookie_visitor_key=4c9d4973-61a1-5b92-9a8d-bb1c60c6331a; sessionid=5qembk3l4tgzvavksl6zwv6mwa0t1ze8; cookie_session_key=48ffdc2f-7fd9-556e-9f69-3e3eac3133e8; csrftoken=P4wkRGfK04Ht3z7Vns5CqjxdGFx2Aaxc98d7Izc3MalsfCiIQzL6zBh09QMFWdjP; ip_location_key=True
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Content-Type: text/html; charset=utf-8
Date: Thu, 30 Nov 2023 17:21:38 GMT
P3P: policyref="https://app.hive.co/w3c/p3p.xml", CP="CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa CONa TELa OUR DEL SAM OTR UNR IND DSP NON COR"
Server: nginx/1.14.0 (Ubuntu)
Set-Cookie: hive_passed_referer=; expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Path=/l; SameSite=none; Secure
cookie_session_key=48ffdc2f-7fd9-556e-9f69-3e3eac3133e8; expires=Thu, 30-Nov-2023 17:51:38 GMT; Max-Age=1800; Path=/; SameSite=none; Secure
Vary: Cookie
X-Frame-Options: SAMEORIGIN
transfer-encoding: chunked
Connection: keep-alive
fanlink.to/realestatetruman?utm_source=hive&utm_medium=email&utm_campaign=hive_email_id_249602_1130-3-new-shows-gif-steel-panther-set-it-off-real-estate-maddie-tae-tomorrow-events-promo&h_sid=5bc0c8e225-6862b4b0fe95a0bb59760cd3&h_slt=eyJoYXNoIjoiMTFmMWU2N2RmMjEyZTk4IiwiaGl2ZV91c2VyX2lkIjo5MzE4NzE0NH0%3D
3.5 kB URL fanlink.to/realestatetruman?utm_source=hive&utm_medium=email&utm_campaign=hive_email_id_249602_1130-3-new-shows-gif-steel-panther-set-it-off-real-estate-maddie-tae-tomorrow-events-promo&h_sid=5bc0c8e225-6862b4b0fe95a0bb59760cd3&h_slt=eyJoYXNoIjoiMTFmMWU2N2RmMjEyZTk4IiwiaGl2ZV91c2VyX2lkIjo5MzE4NzE0NH0%3D
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2973)
Hash 29b90b26c2d734c503105cd83830c8ab
86ba5429515a158469a3575aef06e4128af58451
2f13abbaecc9c13fe2ff7d18d36ca3e0e2864f6e9854452fd1c16cb04601f8ed
GET /realestatetruman?utm_source=hive&utm_medium=email&utm_campaign=hive_email_id_249602_1130-3-new-shows-gif-steel-panther-set-it-off-real-estate-maddie-tae-tomorrow-events-promo&h_sid=5bc0c8e225-6862b4b0fe95a0bb59760cd3&h_slt=eyJoYXNoIjoiMTFmMWU2N2RmMjEyZTk4IiwiaGl2ZV91c2VyX2lkIjo5MzE4NzE0NH0%3D HTTP/1.1
Host: fanlink.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://app.hive.co/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
X-Powered-By: Express
X-Nerd-Alert: Like React.js? Flux? Node? We want you! eventbritecareers.com
Strict-Transport-Security: max-age=31536000000; includeSubDomains
Content-Type: text/html; charset=utf-8
Set-Cookie: connect.sid=s%3A%3AjrK9QgBHzXqTIJlCaYH5nyuFmct7_Deb.rUFaf78Osj%2Fn5inXBDqFilly%2FQPQGIG67JyARwi6t68; Domain=.fanlink.to; Path=/; Expires=Thu, 07 Dec 2023 17:21:39 GMT; HttpOnly; Secure; SameSite=None
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Thu, 30 Nov 2023 17:21:39 GMT
Connection: keep-alive
Keep-Alive: timeout=5
Transfer-Encoding: chunked
sd.toneden.io/production/v2/toneden.loader.js
645 B URL sd.toneden.io/production/v2/toneden.loader.js
IP
File type ASCII text, with very long lines (1200), with no line terminators
Hash 6b27f044514924b062dd4823d1e5eb7c
6453269a4d9476be303d67f1190598fc2233cd67
dea8ea11a3aa9c899fc3ed1a48e81009586b3100f0b67bbe6b9e2bfc1cf3d1a9
GET /production/v2/toneden.loader.js HTTP/1.1
Host: sd.toneden.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fanlink.to/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
content-length: 645
last-modified: Mon, 13 Feb 2017 00:32:38 GMT
content-encoding: gzip
accept-ranges: bytes
server: AmazonS3
date: Thu, 30 Nov 2023 16:30:41 GMT
etag: "01cdccc32ce4455a13916531784c396a"
x-cache: Hit from cloudfront
via: 1.1 095562e8748e634f880ee3c4ada2b6d0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 5bZMLNXcfmPis94dZtrSicAt8WNYPUdPINmLOaOxGc3BwyUWowuEqA==
age: 3074
cache-control: max-age=691200
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
st.toneden.io/production/stylesheets/fan-link.css?v=3e5580ce28
70 kB URL st.toneden.io/production/stylesheets/fan-link.css?v=3e5580ce28
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 263f49752a584259c6b4dd360f1d5bfc
87bc5768d60dbe036212a6c312b75c51a14ed5c8
0d6873d6c25a63ba3dfc58721372035d852f5ae37edb24151e9614b6a059a0de
GET /production/stylesheets/fan-link.css?v=3e5580ce28 HTTP/1.1
Host: st.toneden.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fanlink.to/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/css; charset=utf-8
content-length: 70367
last-modified: Wed, 01 Nov 2023 17:19:32 GMT
x-amz-server-side-encryption: AES256
content-encoding: gzip
x-amz-version-id: CJiuYSG8tY4bGBET50QA.dGMYJSIkby6
accept-ranges: bytes
server: AmazonS3
date: Thu, 30 Nov 2023 08:47:41 GMT
etag: "31a80b765f33e7625b738778cb8bff67"
x-cache: Hit from cloudfront
via: 1.1 095562e8748e634f880ee3c4ada2b6d0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: MIfUvdT4LvpMVR_uy4SRJ5Ep-IOy6nBU8vbdUpdzoDF1qjpH4gsBAg==
age: 30906
cache-control: no-store, max-age=0
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
st.toneden.io/production/javascripts/fan-link.js?v=3e5580ce28
2.7 MB URL st.toneden.io/production/javascripts/fan-link.js?v=3e5580ce28
IP
File type ASCII text, with very long lines (65470)
Size 2.7 MB (2747760 bytes)
Hash c1cb4af82a6670ee88d24b70601751db
c4e33b5ae0dbfe984d48616e76b2b635a6354be3
84be2b664b875c7ec54bda29f605c8288425d24bd443cc35fe2a06211675fbae
GET /production/javascripts/fan-link.js?v=3e5580ce28 HTTP/1.1
Host: st.toneden.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://fanlink.to
DNT: 1
Connection: keep-alive
Referer: https://fanlink.to/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
content-length: 2747760
last-modified: Wed, 01 Nov 2023 17:19:31 GMT
x-amz-server-side-encryption: AES256
content-encoding: gzip
x-amz-version-id: clVP10f1dbc9lCS5c9hz7PRwtIs_4ck3
accept-ranges: bytes
server: AmazonS3
date: Wed, 29 Nov 2023 19:17:48 GMT
etag: "7c3d0394d9791e8e8ff03c95c0858eea"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 41dc61beb3fe8e8c2c299a2522d8330c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: JnOhITzFt9x2Hh7rNMY-IA0ucPm0YPEWj_fcc9219c0RKiB1MjLGww==
age: 79490
cache-control: no-store, max-age=0
access-control-allow-origin: *
X-Firefox-Spdy: h2
st.toneden.io/prod-assets/images/favicon.png
2.0 kB URL st.toneden.io/prod-assets/images/favicon.png
IP
File type PNG image data, 32 x 32, 8-bit/color RGBA, interlaced\012- data
Hash 4850bce0ba7f582c01c337f1aea253d7
0e66b53f0e581c3b077fefc43607719ee9ff67c1
6bd7cc4af4d2d9d3ffab4786eafc0b16c149c28e9ec8be9a7901316ba915c8ff
GET /prod-assets/images/favicon.png HTTP/1.1
Host: st.toneden.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fanlink.to/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 1966
last-modified: Wed, 22 Jun 2022 14:55:00 GMT
x-amz-version-id: Bi8BJO.HF_IXB5CTEkgEkmEhodfkLz2l
accept-ranges: bytes
server: AmazonS3
date: Thu, 30 Nov 2023 06:22:13 GMT
etag: "4850bce0ba7f582c01c337f1aea253d7"
x-cache: Hit from cloudfront
via: 1.1 095562e8748e634f880ee3c4ada2b6d0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: Yftm3or01KwTVsSaw-M7ydLKmwDg6mk0fWcC2dGXfp_H8aMjmYpdZA==
age: 39833
cache-control: no-store, max-age=0
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
www.googletagmanager.com/gtm.js?id=GTM-5P8FXJ
128 kB URL www.googletagmanager.com/gtm.js?id=GTM-5P8FXJ
IP
File type ASCII text, with very long lines (58673)
Size 128 kB (128301 bytes)
Hash 14477a270fc7ac42d5cf1fd77a6c4cd2
7003171a9829d0ef23e02878bfc0aee0d2793831
03ce2a9e701f34a06c33abf4ed53b7dd5863cd2edbaaebe437cb14b4c34d6a5d
GET /gtm.js?id=GTM-5P8FXJ HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fanlink.to/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 30 Nov 2023 17:21:41 GMT
expires: Thu, 30 Nov 2023 17:21:41 GMT
cache-control: private, max-age=900
last-modified: Thu, 30 Nov 2023 15:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 128301
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
sd.toneden.io/production/v2/toneden.js
145 kB URL sd.toneden.io/production/v2/toneden.js
IP
File type ASCII text, with very long lines (36425)
Size 145 kB (144884 bytes)
Hash 67b0a12d0eacb6f8a97d907a2914a8af
b4906fa850263a5d4709511b70b33d991b7f27e1
810a381036eaf8362a14241ef8dc40eaf48b25888d6c01b16667785d16f51a4b
GET /production/v2/toneden.js HTTP/1.1
Host: sd.toneden.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://fanlink.to
DNT: 1
Connection: keep-alive
Referer: https://fanlink.to/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
content-length: 144884
last-modified: Mon, 13 Feb 2017 00:32:38 GMT
content-encoding: gzip
accept-ranges: bytes
server: AmazonS3
date: Thu, 30 Nov 2023 16:41:28 GMT
etag: "da4bf68ea0f8cffa6ea439d7608d52cf"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 095562e8748e634f880ee3c4ada2b6d0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: pY9qdiLs5YepC2hMV9YH59IkT28QgEJZ4UDQ5qjd5q8puMKTL1KLKQ==
age: 2456
cache-control: max-age=691200
access-control-allow-origin: *
X-Firefox-Spdy: h2
widget.intercom.io/widget/xlku466w
2.7 kB URL widget.intercom.io/widget/xlku466w
IP
File type ASCII text, with very long lines (6952), with no line terminators
Hash 0db15969f37f3e201e2b2bd737b7dafe
7a2ab7eee773918a18e83aa247702aa5650f46d5
a7f184f3a0f2bd23e61025ffae0b9322b79bef1b6e5e954be4e462ce5f4ca247
GET /widget/xlku466w HTTP/1.1
Host: widget.intercom.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fanlink.to/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
content-length: 2705
last-modified: Thu, 30 Nov 2023 14:41:51 GMT
x-amz-server-side-encryption: AES256
content-encoding: gzip
x-amz-version-id: Inp6vlvxbBNjM2m.PKBv5cWgwlH.srn1
accept-ranges: bytes
server: AmazonS3
date: Thu, 30 Nov 2023 17:20:08 GMT
cache-control: max-age=300, s-maxage=300, public
etag: "a5ff02a279189bf8329ddf0ee507fb61"
x-cache: Error from cloudfront
via: 1.1 a2b4f68a89fc87406bff22c95fc07fba.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: _ytGTT-tbq-6RnZSwZb-zRfCZQCXXJUaEuehMROqdROJzxemNf9k5A==
age: 94
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=AW-974636074&l=dataLayer&cx=c
72 kB URL www.googletagmanager.com/gtag/js?id=AW-974636074&l=dataLayer&cx=c
IP
File type ASCII text, with very long lines (3026)
Hash a87604c3d627a0ff852ebb31a9e498c0
9f2a7f0f80895aad8fba06403250dc93bcdf5e15
de57845dcfac16361c0dfe961bde35416bbf848668f8fdb0b51c6cf3198a20b3
GET /gtag/js?id=AW-974636074&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fanlink.to/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 30 Nov 2023 17:21:41 GMT
expires: Thu, 30 Nov 2023 17:21:41 GMT
cache-control: private, max-age=900
last-modified: Thu, 30 Nov 2023 15:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 72115
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
fanlink.to/record
16 B IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 7363e85fe9edee6f053a4b319588c086
a15e2127145548437173fc17f3e980e3f3dee2d0
c955e57777ec0d73639dca6748560d00aa5eb8e12f13ebb2ed9656add3908f97
POST /record HTTP/1.1
Host: fanlink.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
csrf-token: lSmX3Vlu-BDN8tq7E27eFBTwDqKyiPW9OnfU
Content-Type: application/json
Content-Length: 19
Origin: https://fanlink.to
DNT: 1
Connection: keep-alive
Referer: https://fanlink.to/realestatetruman?utm_source=hive&utm_medium=email&utm_campaign=hive_email_id_249602_1130-3-new-shows-gif-steel-panther-set-it-off-real-estate-maddie-tae-tomorrow-events-promo&h_sid=5bc0c8e225-6862b4b0fe95a0bb59760cd3&h_slt=eyJoYXNoIjoiMTFmMWU2N2RmMjEyZTk4IiwiaGl2ZV91c2VyX2lkIjo5MzE4NzE0NH0%3D
Cookie: connect.sid=s%3A%3AjrK9QgBHzXqTIJlCaYH5nyuFmct7_Deb.rUFaf78Osj%2Fn5inXBDqFilly%2FQPQGIG67JyARwi6t68
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
X-Powered-By: Express
X-Nerd-Alert: Like React.js? Flux? Node? We want you! eventbritecareers.com
Strict-Transport-Security: max-age=31536000000; includeSubDomains
Access-Control-Allow-Origin: https://fanlink.to
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET,POST,PUT,DELETE,OPTIONS
Access-Control-Allow-Headers: X-Requested-With
Content-Type: application/json; charset=utf-8
Content-Length: 16
Set-Cookie: connect.sid=s%3A%3AjrK9QgBHzXqTIJlCaYH5nyuFmct7_Deb.rUFaf78Osj%2Fn5inXBDqFilly%2FQPQGIG67JyARwi6t68; Domain=.fanlink.to; Path=/; Expires=Thu, 07 Dec 2023 17:21:41 GMT; HttpOnly; Secure; SameSite=None
Vary: Accept-Encoding
Date: Thu, 30 Nov 2023 17:21:41 GMT
Connection: keep-alive
Keep-Alive: timeout=5
js.intercomcdn.com/frame.2b5d9ac4.js
189 kB URL js.intercomcdn.com/frame.2b5d9ac4.js
IP
File type ASCII text, with very long lines (65464)
Size 189 kB (189021 bytes)
Hash c0daccc0aed38e79d851db68f173d89a
746e7faa55154e69e4d593408a93b7c43cc6acbc
b73b8b27a25ebd11b2d8ca5572e28998dc77d65b1b9419d2d3ac5ba8d3ac9ec0
GET /frame.2b5d9ac4.js HTTP/1.1
Host: js.intercomcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fanlink.to/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
content-length: 189021
last-modified: Thu, 30 Nov 2023 14:39:36 GMT
x-amz-server-side-encryption: AES256
content-encoding: gzip
x-amz-version-id: KrRQntxHaT88vvu_gWvesr5Z6F75Z1jg
accept-ranges: bytes
server: AmazonS3
date: Thu, 30 Nov 2023 16:41:55 GMT
cache-control: max-age=31536000, s-maxage=7200, public
etag: "8362887929f044651e38ffcaac58f6cf"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: wS-OZumKcWT5QHS0z4Zt_gQc-MBkJFydU_FBPUjSCT5isD5ceYDajA==
age: 2387
strict-transport-security: max-age=31536000; includeSubDomains; preload
cross-origin-resource-policy: cross-origin
X-Firefox-Spdy: h2
cdn.evbstatic.com/s3-build/perm_001/bf1c05/django/js/src/eb/fonts/neueplak.js
410 kB URL cdn.evbstatic.com/s3-build/perm_001/bf1c05/django/js/src/eb/fonts/neueplak.js
IP
File type ASCII text, with very long lines (65214)
Size 410 kB (410312 bytes)
Hash 711534ec5e4bf221cf85df1a8ce32b51
33b56aaecad5bc85ff2917bf9bb1e1c5565e2d78
bcc9e54961143ec8176a0a7eaaf482c52db6de44f9f74b18dcf6f2dcef491c1b
GET /s3-build/perm_001/bf1c05/django/js/src/eb/fonts/neueplak.js HTTP/1.1
Host: cdn.evbstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fanlink.to/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
last-modified: Thu, 21 Mar 2019 00:58:19 GMT
x-amz-version-id: null
server: AmazonS3
content-encoding: gzip
date: Thu, 30 Nov 2023 17:11:12 GMT
cache-control: private, max-age=604800
expires: Tue, 17 Sep 2019 00:54:54 GMT
etag: W/"bf1c0572e601b9755fd9af7a63f0cac2"
x-cache: Hit from cloudfront
via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: rpXAqSmD5j8p52aCj-lW5pAWLz3riC2EuGeHYXILLNzPGw_38UrY2g==
age: 665
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
www.toneden.io/api/v1/analytics/events
0 B URL www.toneden.io/api/v1/analytics/events
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /api/v1/analytics/events HTTP/1.1
Host: www.toneden.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,csrf-token,ui-version
Referer: https://fanlink.to/
Origin: https://fanlink.to
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
X-Powered-By: Express
X-Nerd-Alert: Hacking us? Why not work for us instead? eventbritecareers.com
Strict-Transport-Security: max-age=31536000000; includeSubDomains
Access-Control-Allow-Origin: https://fanlink.to
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET,POST,PUT,DELETE,OPTIONS
access-control-allow-headers: content-type,csrf-token,ui-version
Date: Thu, 30 Nov 2023 17:21:42 GMT
Connection: keep-alive
Keep-Alive: timeout=5
Transfer-Encoding: chunked
www.toneden.io/api/v1/analytics/events
0 B URL www.toneden.io/api/v1/analytics/events
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /api/v1/analytics/events HTTP/1.1
Host: www.toneden.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,csrf-token,ui-version
Referer: https://fanlink.to/
Origin: https://fanlink.to
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
X-Powered-By: Express
X-Nerd-Alert: Like React.js? Flux? Node? We want you! eventbritecareers.com
Strict-Transport-Security: max-age=31536000000; includeSubDomains
Access-Control-Allow-Origin: https://fanlink.to
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET,POST,PUT,DELETE,OPTIONS
access-control-allow-headers: content-type,csrf-token,ui-version
Date: Thu, 30 Nov 2023 17:21:42 GMT
Connection: keep-alive
Keep-Alive: timeout=5
Transfer-Encoding: chunked
www.toneden.io/api/v1/analytics/events
16 B URL www.toneden.io/api/v1/analytics/events
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 7363e85fe9edee6f053a4b319588c086
a15e2127145548437173fc17f3e980e3f3dee2d0
c955e57777ec0d73639dca6748560d00aa5eb8e12f13ebb2ed9656add3908f97
POST /api/v1/analytics/events HTTP/1.1
Host: www.toneden.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
csrf-token: lSmX3Vlu-BDN8tq7E27eFBTwDqKyiPW9OnfU
ui-version: 1.183
Content-Type: application/json
Content-Length: 123
Origin: https://fanlink.to
DNT: 1
Connection: keep-alive
Referer: https://fanlink.to/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
X-Powered-By: Express
X-Nerd-Alert: Hacking us? Why not work for us instead? eventbritecareers.com
Strict-Transport-Security: max-age=31536000000; includeSubDomains
Access-Control-Allow-Origin: https://fanlink.to
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET,POST,PUT,DELETE,OPTIONS
Access-Control-Allow-Headers: X-Requested-With
Content-Type: application/json; charset=utf-8
Content-Length: 16
Vary: Accept-Encoding
Date: Thu, 30 Nov 2023 17:21:42 GMT
Connection: keep-alive
Keep-Alive: timeout=5
www.toneden.io/api/v1/analytics/events
16 B URL www.toneden.io/api/v1/analytics/events
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 7363e85fe9edee6f053a4b319588c086
a15e2127145548437173fc17f3e980e3f3dee2d0
c955e57777ec0d73639dca6748560d00aa5eb8e12f13ebb2ed9656add3908f97
POST /api/v1/analytics/events HTTP/1.1
Host: www.toneden.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
csrf-token: lSmX3Vlu-BDN8tq7E27eFBTwDqKyiPW9OnfU
ui-version: 1.183
Content-Type: application/json
Content-Length: 164
Origin: https://fanlink.to
DNT: 1
Connection: keep-alive
Referer: https://fanlink.to/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
X-Powered-By: Express
X-Nerd-Alert: Like React.js? Flux? Node? We want you! eventbritecareers.com
Strict-Transport-Security: max-age=31536000000; includeSubDomains
Access-Control-Allow-Origin: https://fanlink.to
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET,POST,PUT,DELETE,OPTIONS
Access-Control-Allow-Headers: X-Requested-With
Content-Type: application/json; charset=utf-8
Content-Length: 16
Vary: Accept-Encoding
Date: Thu, 30 Nov 2023 17:21:42 GMT
Connection: keep-alive
Keep-Alive: timeout=5
cdnjs.cloudflare.com/ajax/libs/jquery-cookie/1.4.1/jquery.cookie.min.js
200 OK 591 B URL GET HTTP/2 cdnjs.cloudflare.com/ajax/libs/jquery-cookie/1.4.1/jquery.cookie.min.js
IP
Requested by https://www.axs.com/events/516600/real-estate-tickets/promos/687630?skin=trumankc
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File type ASCII text, with very long lines (1266)
Hash 4412bf8023109ee9eb1f1f226d391329
c273960aa874a87dd022b5e597887142f1b8e34f
d40efcac911d8964f3728eaa767de281306ff55ba9377435a3364d4d1e1613f6
GET /ajax/libs/jquery-cookie/1.4.1/jquery.cookie.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.axs.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Nov 2023 17:21:43 GMT
content-type: application/javascript; charset=utf-8
content-length: 591
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ec1-514"
last-modified: Mon, 04 May 2020 16:11:45 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 296465
expires: Tue, 19 Nov 2024 17:21:43 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Yh%2B4xrIWoNqa%2FnB%2BIpVrBF%2BdzvsbvbtrNm9uNK5PVfyX4QTDNgau1N9wFA28rd6%2B5O%2FpdpUr6aBpemCQhrcCHR7HRkVBF6C7%2BKwzLlnyNQTlZtsZJNOEnjR0Q6qVrf%2FqAE3r3QjB"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 82e4c4b9cf09b511-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.cookielaw.org/consent/8ef2ade6-043b-4e3c-9128-b1e4d573c2f1/otSDKStub.js
200 OK 7.6 kB URL GET HTTP/2 cdn.cookielaw.org/consent/8ef2ade6-043b-4e3c-9128-b1e4d573c2f1/otSDKStub.js
IP
Requested by https://www.axs.com/events/516600/real-estate-tickets/promos/687630?skin=trumankc
Certificate IssuerCloudflare, Inc.
Subjectcookielaw.org
Fingerprint72:BB:48:60:EB:F2:A2:EB:51:29:51:1A:B9:2A:85:30:97:3D:9A:2E
ValiditySat, 01 Apr 2023 00:00:00 GMT - Sun, 31 Mar 2024 23:59:59 GMT
File type ASCII text, with very long lines (556)
Hash 77cd671b6d5304e0d5d06c280507a418
24df99a4e4452af4faa780485f0bc6a7e5358fe6
f156a1a1c6ce7bcd7c0ac72052730af3405dfad2757cd6f8adf55d0478f754df
GET /consent/8ef2ade6-043b-4e3c-9128-b1e4d573c2f1/otSDKStub.js HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.axs.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Nov 2023 17:21:44 GMT
content-type: application/x-javascript
content-length: 7643
cf-ray: 82e4c4ba2c231c0a-OSL
cf-cache-status: HIT
accept-ranges: bytes
access-control-allow-origin: *
age: 47502
cache-control: public, max-age=86400
content-encoding: gzip
etag: 0x8DBB2EB1B242B01
expires: Fri, 01 Dec 2023 17:21:44 GMT
last-modified: Mon, 11 Sep 2023 17:18:24 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
content-md5: CNGONyRSArp/89KrZPnwVA==
x-content-type-options: nosniff
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: 1173b32a-401e-004c-7319-15a9b3000000
x-ms-version: 2009-09-19
server: cloudflare
X-Firefox-Spdy: h2
images.discovery-prod.axs.com/_06-09-13_38_52056cbb82571.png
200 OK 4.0 kB URL GET HTTP/2 images.discovery-prod.axs.com/_06-09-13_38_52056cbb82571.png
IP
Requested by https://www.axs.com/events/516600/real-estate-tickets/promos/687630?skin=trumankc
Certificate IssuerAmazon
Subject*.discovery-prod.axs.com
Fingerprint05:39:17:A4:F5:B5:7A:B1:D6:32:36:3C:AA:1D:B7:4D:CC:E9:93:17
ValiditySat, 15 Jul 2023 00:00:00 GMT - Mon, 12 Aug 2024 23:59:59 GMT
File type PNG image data, 130 x 130, 8-bit/color RGBA, non-interlaced\012- data
Hash ca5c671fc5bf48a8c4753c60c96b334d
febb34954b0ba8ebd967b1047d7c60c11754e494
5f934901ad9427c61b3a00654001a998122e980f24238afe05cf54af65283367
GET /_06-09-13_38_52056cbb82571.png HTTP/1.1
Host: images.discovery-prod.axs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.axs.com/events/516600/real-estate-tickets/promos/687630?skin=trumankc
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=iplkbd0pteu9d5ita6cs5ici65; axs_geo_static_v1=NO%3A%3AOslo%3A%3A%3A59.95500%3A10.85900%3A%3A; axs_geo_v1=US%3ACA%3ALos+Angeles%3A%3A%3A34.05%3A-118.24%3AAmerica%2FLos_Angeles%3A1; preferred_locale=en-US; __cf_bm=2kAvX3QH_Rw3t1r5wFl5._y9Rl0OS5v5Rm6jYVTgROU-1701364903-0-ASw6YOj1XC79VHEljnFMfAiTuuzstwWhL0CTkK7WjHizWm0nLbxtm/kLZMTr10xzY5KLrlLbaR1U/V4FTxFS8vs=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 4021
last-modified: Tue, 20 Oct 2020 10:11:06 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: JgnhL5xiZXot99Np3of8LZbOBaJzgWsE
accept-ranges: bytes
server: AmazonS3
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: img-src * 'self' data: https:; default-src * 'unsafe-inline' 'unsafe-eval';
x-frame-options: sameorigin
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: origin
date: Wed, 29 Nov 2023 18:24:47 GMT
cache-control: max-age=31536000
etag: "ca5c671fc5bf48a8c4753c60c96b334d"
vary: Accept-Encoding,Origin
x-cache: Hit from cloudfront
via: 1.1 a7b25290e9400fd200644534ae04f210.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN56-P2
x-amz-cf-id: qKRDtlZAhcFVyqAKG53IMMHANLiMemcCGDhUuLpSkxlA5CS6PyWIqQ==
age: 82882
X-Firefox-Spdy: h2
images.discovery-prod.axs.com/2023/11/uploadedimage_655d38395716b.jpg
200 OK 97 kB URL GET HTTP/2 images.discovery-prod.axs.com/2023/11/uploadedimage_655d38395716b.jpg
IP
Requested by https://www.axs.com/events/516600/real-estate-tickets/promos/687630?skin=trumankc
Certificate IssuerAmazon
Subject*.discovery-prod.axs.com
Fingerprint05:39:17:A4:F5:B5:7A:B1:D6:32:36:3C:AA:1D:B7:4D:CC:E9:93:17
ValiditySat, 15 Jul 2023 00:00:00 GMT - Mon, 12 Aug 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 678x399, components 3\012- data
Hash d4799b1f8bc29076e1015d3c04a3455b
f51be1c01c1c63fd570ba461a84ab86698eab34e
ea3e3c8e5ddda4104c664f28718173cdaaf4ca250571ba6e1647464d7a511df3
GET /2023/11/uploadedimage_655d38395716b.jpg HTTP/1.1
Host: images.discovery-prod.axs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.axs.com/events/516600/real-estate-tickets/promos/687630?skin=trumankc
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=iplkbd0pteu9d5ita6cs5ici65; axs_geo_static_v1=NO%3A%3AOslo%3A%3A%3A59.95500%3A10.85900%3A%3A; axs_geo_v1=US%3ACA%3ALos+Angeles%3A%3A%3A34.05%3A-118.24%3AAmerica%2FLos_Angeles%3A1; preferred_locale=en-US; __cf_bm=2kAvX3QH_Rw3t1r5wFl5._y9Rl0OS5v5Rm6jYVTgROU-1701364903-0-ASw6YOj1XC79VHEljnFMfAiTuuzstwWhL0CTkK7WjHizWm0nLbxtm/kLZMTr10xzY5KLrlLbaR1U/V4FTxFS8vs=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 97292
last-modified: Tue, 21 Nov 2023 23:07:38 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: BU_3aFfC7mhck0wFzdvTQ8mIdgifUiC8
accept-ranges: bytes
server: AmazonS3
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: img-src * 'self' data: https:; default-src * 'unsafe-inline' 'unsafe-eval';
x-frame-options: sameorigin
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: origin
date: Wed, 29 Nov 2023 18:46:25 GMT
cache-control: max-age=31536000
etag: "d4799b1f8bc29076e1015d3c04a3455b"
vary: Accept-Encoding,Origin
x-cache: Hit from cloudfront
via: 1.1 a7b25290e9400fd200644534ae04f210.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN56-P2
x-amz-cf-id: F_ER-tgjsSutJDptXfa6pK9eS0H7kiJNW-5ad5GYaFOf35b1gOIimQ==
age: 81320
X-Firefox-Spdy: h2
static.discovery-prod.axs.com/axs/bundles/aegaxs/images/icons/check_icon.png?3.0.0.732
200 OK 1.4 kB URL GET HTTP/2 static.discovery-prod.axs.com/axs/bundles/aegaxs/images/icons/check_icon.png?3.0.0.732
IP
Requested by https://www.axs.com/events/516600/real-estate-tickets/promos/687630?skin=trumankc
Certificate IssuerAmazon
Subject*.static.discovery-prod.axs.com
Fingerprint3D:2D:98:A9:4E:93:A7:7D:22:86:11:BF:03:7D:50:D1:6D:4C:00:05
ValidityTue, 26 Sep 2023 00:00:00 GMT - Thu, 24 Oct 2024 23:59:59 GMT
File type PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced\012- data
Hash 1544dc6503c36f7a9f941e0da8cf88a1
bc2c3b8e6de468fa2cb442faa3cab937d427f6f3
a70b0efebd0ffe1e6e7fbc90d76650a010a2f7ddb6c088f1ecd36f024aa18209
GET /axs/bundles/aegaxs/images/icons/check_icon.png?3.0.0.732 HTTP/1.1
Host: static.discovery-prod.axs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.axs.com/events/516600/real-estate-tickets/promos/687630?skin=trumankc
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=iplkbd0pteu9d5ita6cs5ici65; axs_geo_static_v1=NO%3A%3AOslo%3A%3A%3A59.95500%3A10.85900%3A%3A; axs_geo_v1=US%3ACA%3ALos+Angeles%3A%3A%3A34.05%3A-118.24%3AAmerica%2FLos_Angeles%3A1; preferred_locale=en-US; __cf_bm=2kAvX3QH_Rw3t1r5wFl5._y9Rl0OS5v5Rm6jYVTgROU-1701364903-0-ASw6YOj1XC79VHEljnFMfAiTuuzstwWhL0CTkK7WjHizWm0nLbxtm/kLZMTr10xzY5KLrlLbaR1U/V4FTxFS8vs=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 1383
last-modified: Thu, 16 Nov 2023 21:36:38 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: XV9dA9laY86B_y8iWF_ljdiTgZxxqevg
accept-ranges: bytes
server: AmazonS3
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: img-src * 'self' data: https:; default-src * 'unsafe-inline' 'unsafe-eval';
x-frame-options: sameorigin
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: origin
date: Thu, 30 Nov 2023 17:00:02 GMT
etag: "1544dc6503c36f7a9f941e0da8cf88a1"
vary: Accept-Encoding,Origin
x-cache: Hit from cloudfront
via: 1.1 ed87681648230d81cfe4a69364ab730c.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN54-C1
x-amz-cf-id: 8epz1kXmiLd8rlSImejyj-PA39zX3sMTbHQpVS293p0hs3G5AsXRpQ==
age: 1303
X-Firefox-Spdy: h2
static.discovery-prod.axs.com/axs/js/70e17a8.js?3.0.0.732
200 OK 796 B URL GET HTTP/2 static.discovery-prod.axs.com/axs/js/70e17a8.js?3.0.0.732
IP
Requested by https://www.axs.com/events/516600/real-estate-tickets/promos/687630?skin=trumankc
Certificate IssuerAmazon
Subject*.static.discovery-prod.axs.com
Fingerprint3D:2D:98:A9:4E:93:A7:7D:22:86:11:BF:03:7D:50:D1:6D:4C:00:05
ValidityTue, 26 Sep 2023 00:00:00 GMT - Thu, 24 Oct 2024 23:59:59 GMT
File type ASCII text, with very long lines (796), with no line terminators
Hash 4331633648b52d5607545a8442471877
a9e247239f3abff4ad7b900553b272b600807f53
0f45a13525f56805ce25e04ad943915e739d7b2c595a7a2526df1a077ae07e38
GET /axs/js/70e17a8.js?3.0.0.732 HTTP/1.1
Host: static.discovery-prod.axs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.axs.com/events/516600/real-estate-tickets/promos/687630?skin=trumankc
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=iplkbd0pteu9d5ita6cs5ici65; axs_geo_static_v1=NO%3A%3AOslo%3A%3A%3A59.95500%3A10.85900%3A%3A; axs_geo_v1=US%3ACA%3ALos+Angeles%3A%3A%3A34.05%3A-118.24%3AAmerica%2FLos_Angeles%3A1; preferred_locale=en-US; __cf_bm=2kAvX3QH_Rw3t1r5wFl5._y9Rl0OS5v5Rm6jYVTgROU-1701364903-0-ASw6YOj1XC79VHEljnFMfAiTuuzstwWhL0CTkK7WjHizWm0nLbxtm/kLZMTr10xzY5KLrlLbaR1U/V4FTxFS8vs=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
content-length: 796
last-modified: Thu, 16 Nov 2023 21:36:43 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: HJ3Y1wOi36NuCwd7bYfIcmdlfyUnLvRs
accept-ranges: bytes
server: AmazonS3
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: img-src * 'self' data: https:; default-src * 'unsafe-inline' 'unsafe-eval';
x-frame-options: sameorigin
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: origin
date: Thu, 30 Nov 2023 16:48:46 GMT
etag: "4331633648b52d5607545a8442471877"
vary: Accept-Encoding,Origin
x-cache: Hit from cloudfront
via: 1.1 ed87681648230d81cfe4a69364ab730c.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN54-C1
x-amz-cf-id: 7Cl6PHsxUhm-Iyor8PSv4Ae5E8Aq1Kj93jypXmkuAbuOpvYRlG5pmw==
age: 1978
X-Firefox-Spdy: h2
assets.adobedtm.com/f8e955bdde76/4d3654675a9f/launch-e109a62206c5.min.js
200 OK 240 kB URL GET HTTP/2 assets.adobedtm.com/f8e955bdde76/4d3654675a9f/launch-e109a62206c5.min.js
IP
Requested by https://www.axs.com/events/516600/real-estate-tickets/promos/687630?skin=trumankc
Certificate IssuerDigiCert Inc
Subjectassets.adobedtm.com
Fingerprint8E:2F:9F:94:55:93:C2:B5:58:37:E8:D3:02:3C:23:AF:BA:E7:1D:EA
ValidityTue, 11 Jul 2023 00:00:00 GMT - Sat, 10 Aug 2024 23:59:59 GMT
File type ASCII text, with very long lines (32766)
Size 240 kB (240338 bytes)
Hash 830e9c49ec9dd953290d12c3b90d009f
acd4b27874f26f7d13200960ccfc08b44015e1f6
0e9968e076f98fafe46491591648bc441423673854594e8915eff9eb03a0c60f
GET /f8e955bdde76/4d3654675a9f/launch-e109a62206c5.min.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.axs.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "830e9c49ec9dd953290d12c3b90d009f:1701261550.953387"
last-modified: Wed, 29 Nov 2023 12:39:10 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
content-length: 240338
cache-control: max-age=3600
expires: Thu, 30 Nov 2023 18:21:44 GMT
date: Thu, 30 Nov 2023 17:21:44 GMT
access-control-allow-origin: https://www.axs.com
timing-allow-origin: *
X-Firefox-Spdy: h2
cdn.evgnet.com/beacon/aegpresents/prod/scripts/evergage.min.js
200 OK 48 kB URL GET HTTP/2 cdn.evgnet.com/beacon/aegpresents/prod/scripts/evergage.min.js
IP
Requested by https://www.axs.com/events/516600/real-estate-tickets/promos/687630?skin=trumankc
Certificate IssuerDigiCert Inc
Subjectcdn.evergage.com
FingerprintEE:3F:A8:CD:D0:BC:7A:41:2D:D6:AD:84:EE:B6:0A:8B:33:32:49:30
ValidityMon, 06 Mar 2023 00:00:00 GMT - Mon, 04 Mar 2024 23:59:59 GMT
File type ASCII text, with very long lines (584)
Hash f64b848a1574581434d2f7979ee1cab7
fc0ef5b6a276d49424fa3002011e7928c369da43
66f62bb1db2ab6dc189a1877cfb8c27de3e09d8877ecca15247a2556de79e2e3
GET /beacon/aegpresents/prod/scripts/evergage.min.js HTTP/1.1
Host: cdn.evgnet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.axs.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
x-amz-id-2: bLHISJ+rILVKovHRkvkYbkkkND/knVquImU/8F4INQMfohacOBfWym4qm0UnDAhHobG0Xyofi74=
x-amz-request-id: CKH863X66WRHH9W2
x-amz-replication-status: COMPLETED
last-modified: Wed, 25 Oct 2023 20:14:47 GMT
etag: "b6e5bbb9fda737180d0ff97f03612eb6"
x-amz-server-side-encryption: AES256
cache-control: max-age=120
content-encoding: gzip
x-amz-meta-evergage-beacon-ver: 16
x-amz-meta-evergage-sum: fc0ef5b6a276d49424fa3002011e7928c369da43
x-amz-version-id: Q.qjT00Sh2Pb3OWid56RxBA4Bj.UJOnO
content-type: application/javascript; charset=utf-8
server: AmazonS3
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 30 Nov 2023 17:21:44 GMT
age: 49
x-served-by: cache-iad-kiad7000117-IAD, cache-bma1633-BMA
x-cache: HIT, HIT
x-cache-hits: 3093886, 1
x-timer: S1701364904.075112,VS0,VE100
vary: Accept-Encoding
timing-allow-origin: *
content-length: 48539
X-Firefox-Spdy: h2
ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js
200 OK 30 kB URL GET HTTP/2 ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js
IP
Requested by https://www.axs.com/events/516600/real-estate-tickets/promos/687630?skin=trumankc
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type ASCII text, with very long lines (32065)
Hash 2f6b11a7e914718e0290410e85366fe9
69bb69e25ca7d5ef0935317584e6153f3fd9a88c
05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e
GET /ajax/libs/jquery/2.2.4/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.axs.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30028
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 29 Nov 2023 18:39:35 GMT
expires: Thu, 28 Nov 2024 18:39:35 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 81729
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
i.axs.com/partners/amex/amex-logo-new.png
200 OK 2.4 kB URL GET HTTP/2 i.axs.com/partners/amex/amex-logo-new.png
IP
Requested by https://www.axs.com/events/516600/real-estate-tickets/promos/687630?skin=trumankc
Certificate IssuerAmazon
Subject*.axs.com
FingerprintA3:B2:AA:EA:EB:FD:68:3F:3D:3B:49:29:4F:98:BA:DB:D5:B4:14:65
ValidityTue, 04 Jul 2023 00:00:00 GMT - Thu, 01 Aug 2024 23:59:59 GMT
File type PNG image data, 170 x 170, 8-bit/color RGBA, non-interlaced\012- data
Hash 1acbd6e75eed6810f37c3be97fe63ac2
27ef853a8e22521844394035ecce4bb4de24b660
694e8ad3869302181f9e5b77b13ea1eb9e20b461892290860559c916569da9ed
GET /partners/amex/amex-logo-new.png HTTP/1.1
Host: i.axs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.axs.com/events/516600/real-estate-tickets/promos/687630?skin=trumankc
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=iplkbd0pteu9d5ita6cs5ici65; axs_geo_static_v1=NO%3A%3AOslo%3A%3A%3A59.95500%3A10.85900%3A%3A; axs_geo_v1=US%3ACA%3ALos+Angeles%3A%3A%3A34.05%3A-118.24%3AAmerica%2FLos_Angeles%3A1; preferred_locale=en-US; __cf_bm=2kAvX3QH_Rw3t1r5wFl5._y9Rl0OS5v5Rm6jYVTgROU-1701364903-0-ASw6YOj1XC79VHEljnFMfAiTuuzstwWhL0CTkK7WjHizWm0nLbxtm/kLZMTr10xzY5KLrlLbaR1U/V4FTxFS8vs=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/png
content-length: 2351
last-modified: Wed, 14 Mar 2018 18:11:10 GMT
accept-ranges: bytes
server: AmazonS3
date: Thu, 30 Nov 2023 13:06:17 GMT
etag: "1acbd6e75eed6810f37c3be97fe63ac2"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 472198048b2177f6905d44f001875bcc.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN56-P1
x-amz-cf-id: mleAPwI6g6ROKgaNwiTiVFtfbHR0aGKGhY5U9wodGT7G2WdBP9u4bQ==
age: 15332
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=G-D0FS4F37VT
200 OK 87 kB URL GET HTTP/2 www.googletagmanager.com/gtag/js?id=G-D0FS4F37VT
IP
Requested by https://www.axs.com/events/516600/real-estate-tickets/promos/687630?skin=trumankc
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
File type ASCII text, with very long lines (5955)
Hash f9909fe50d56b970a73eb75045ab9bad
2aa69be9305f3c16eed8d62d023515cb9900bb78
b4f0bbbcacf3c0c3bc5d81d9414aea0b7c06b77858aa0c2346d45bef85de7b5b
GET /gtag/js?id=G-D0FS4F37VT HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.axs.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 30 Nov 2023 17:21:44 GMT
expires: Thu, 30 Nov 2023 17:21:44 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 86613
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
images.discovery-prod.axs.com/skins/new/trumankc/logo.png?976
200 OK 7.1 kB URL GET HTTP/2 images.discovery-prod.axs.com/skins/new/trumankc/logo.png?976
IP
Requested by https://www.axs.com/events/516600/real-estate-tickets/promos/687630?skin=trumankc
Certificate IssuerAmazon
Subject*.discovery-prod.axs.com
Fingerprint05:39:17:A4:F5:B5:7A:B1:D6:32:36:3C:AA:1D:B7:4D:CC:E9:93:17
ValiditySat, 15 Jul 2023 00:00:00 GMT - Mon, 12 Aug 2024 23:59:59 GMT
File type PNG image data, 243 x 29, 8-bit/color RGBA, non-interlaced\012- data
Hash 0da28bca1a5357588cfe86b850adfb9a
727905120844ad64a7fe6064e25d5049b24da19f
7d5c50ad02bb508b39486a3b576ad4abe62590cac6519be3aed04f1c9254c4e6
GET /skins/new/trumankc/logo.png?976 HTTP/1.1
Host: images.discovery-prod.axs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://images.discovery-prod.axs.com/
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=iplkbd0pteu9d5ita6cs5ici65; axs_geo_static_v1=NO%3A%3AOslo%3A%3A%3A59.95500%3A10.85900%3A%3A; axs_geo_v1=US%3ACA%3ALos+Angeles%3A%3A%3A34.05%3A-118.24%3AAmerica%2FLos_Angeles%3A1; preferred_locale=en-US; __cf_bm=2kAvX3QH_Rw3t1r5wFl5._y9Rl0OS5v5Rm6jYVTgROU-1701364903-0-ASw6YOj1XC79VHEljnFMfAiTuuzstwWhL0CTkK7WjHizWm0nLbxtm/kLZMTr10xzY5KLrlLbaR1U/V4FTxFS8vs=; _sfid_3e99={%22anonymousId%22:%2224eb6be39babf58b%22}; _evga_82e0={%22uuid%22:%2224eb6be39babf58b%22}
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 7105
last-modified: Tue, 26 Jan 2021 20:15:31 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: 6Ler4UUF95CJcnH_u_sV2LXWf6PwJibG
accept-ranges: bytes
server: AmazonS3
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: img-src * 'self' data: https:; default-src * 'unsafe-inline' 'unsafe-eval';
x-frame-options: sameorigin
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: origin
date: Wed, 29 Nov 2023 22:27:56 GMT
cache-control: max-age=31536000
etag: "0da28bca1a5357588cfe86b850adfb9a"
vary: Accept-Encoding,Origin
x-cache: Hit from cloudfront
via: 1.1 a7b25290e9400fd200644534ae04f210.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN56-P2
x-amz-cf-id: D54wvPct0-yTCA3lTzwVrU0RRqMtykEg4OqEROlbaF7qU2phTNThLQ==
age: 68029
X-Firefox-Spdy: h2
cdn.cookielaw.org/consent/8ef2ade6-043b-4e3c-9128-b1e4d573c2f1/8ef2ade6-043b-4e3c-9128-b1e4d573c2f1.json
200 OK 1.6 kB URL GET HTTP/2 cdn.cookielaw.org/consent/8ef2ade6-043b-4e3c-9128-b1e4d573c2f1/8ef2ade6-043b-4e3c-9128-b1e4d573c2f1.json
IP
Requested by https://www.axs.com/events/516600/real-estate-tickets/promos/687630?skin=trumankc
Certificate IssuerCloudflare, Inc.
Subjectcookielaw.org
Fingerprint72:BB:48:60:EB:F2:A2:EB:51:29:51:1A:B9:2A:85:30:97:3D:9A:2E
ValiditySat, 01 Apr 2023 00:00:00 GMT - Sun, 31 Mar 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with very long lines (4527), with no line terminators
Hash bff0ec156636e081b5fe6b79c406d48f
02a8a83a9e4d518b8642e2a30c68ef0475de792f
f82ef99ef877f53498dac73882e70647377090e8bdc34bbf5b6c7ab9322808e0
GET /consent/8ef2ade6-043b-4e3c-9128-b1e4d573c2f1/8ef2ade6-043b-4e3c-9128-b1e4d573c2f1.json HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.axs.com
DNT: 1
Connection: keep-alive
Referer: https://www.axs.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Nov 2023 17:21:44 GMT
content-type: application/x-javascript
content-length: 1629
cf-ray: 82e4c4be8d4a5689-OSL
cf-cache-status: HIT
accept-ranges: bytes
access-control-allow-origin: *
age: 45750
cache-control: public, max-age=86400
content-encoding: gzip
etag: 0x8DBB2EB194D915E
expires: Fri, 01 Dec 2023 17:21:44 GMT
last-modified: Mon, 11 Sep 2023 17:18:21 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
content-md5: rzKJnLWPmuFmCFmvlVmB4g==
x-content-type-options: nosniff
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: 178ca914-401e-0073-2f0b-156110000000
x-ms-version: 2009-09-19
server: cloudflare
X-Firefox-Spdy: h2
static.discovery-prod.axs.com/axs/bundles/aegaxs/fonts/lato/lato-regular-webfont.woff
200 OK 32 kB URL GET HTTP/2 static.discovery-prod.axs.com/axs/bundles/aegaxs/fonts/lato/lato-regular-webfont.woff
IP
Requested by https://www.axs.com/events/516600/real-estate-tickets/promos/687630?skin=trumankc
Certificate IssuerAmazon
Subject*.static.discovery-prod.axs.com
Fingerprint3D:2D:98:A9:4E:93:A7:7D:22:86:11:BF:03:7D:50:D1:6D:4C:00:05
ValidityTue, 26 Sep 2023 00:00:00 GMT - Thu, 24 Oct 2024 23:59:59 GMT
File type Web Open Font Format, TrueType, length 31808, version 1.0\012- data
Hash 10c928907c6858c11c63e7d90981e7a1
4d91b1176bd448b257355ad9b82fe5341ff2982b
4a2be61909fd4d8be98ae68b5f8a901069c9a74948ce8c63c71d60fa2f1745d0
GET /axs/bundles/aegaxs/fonts/lato/lato-regular-webfont.woff HTTP/1.1
Host: static.discovery-prod.axs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://static.discovery-prod.axs.com/
Origin: https://www.axs.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/font-woff
content-length: 31808
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-expose-headers: ETag
access-control-max-age: 3000
last-modified: Thu, 16 Nov 2023 21:36:33 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: OPL.CREl72M7kAjiOHrmcR0pED8sn4qu
accept-ranges: bytes
server: AmazonS3
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: img-src * 'self' data: https:; default-src * 'unsafe-inline' 'unsafe-eval';
x-frame-options: sameorigin
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: origin
date: Thu, 30 Nov 2023 16:38:47 GMT
etag: "10c928907c6858c11c63e7d90981e7a1"
vary: Accept-Encoding,Origin
x-cache: Hit from cloudfront
via: 1.1 990c1aa70667fe4e8f93d88ac8400fc4.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN54-C1
x-amz-cf-id: tRIg9lAbaQDfKUb7M4rc08aNrLU9lN5VgyR7taWvTrD11StiYtTq9w==
age: 2578
X-Firefox-Spdy: h2
chat.satis.fi/popup/embedder?popupId=7405
200 OK 55 kB URL GET HTTP/2 chat.satis.fi/popup/embedder?popupId=7405
IP
Requested by https://www.axs.com/events/516600/real-estate-tickets/promos/687630?skin=trumankc
Certificate IssuerSectigo Limited
Subject*.satis.fi
FingerprintF1:5D:2E:B7:58:F9:66:43:19:23:41:24:92:A8:2C:65:55:03:40:34
ValidityTue, 17 Oct 2023 00:00:00 GMT - Fri, 25 Oct 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (65534), with no line terminators
Hash 2773e7922e27060bcaaa48913d2800d9
685d6ec151e1222be972822d2e959f40066f24c2
fb716fedf797a1d2d8c46deed804f97881304cfaebc13e905f1848f268cbf49f
GET /popup/embedder?popupId=7405 HTTP/1.1
Host: chat.satis.fi
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.axs.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-length: 55100
content-type: application/javascript
content-encoding: gzip
etag: 4494147E9FBCD45D95644B39D209F69E
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
date: Thu, 30 Nov 2023 17:21:44 GMT
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
static.discovery-prod.axs.com/axs/bundles/aegaxs/fonts/lato/lato-black-webfont.woff
200 OK 31 kB URL GET HTTP/2 static.discovery-prod.axs.com/axs/bundles/aegaxs/fonts/lato/lato-black-webfont.woff
IP
Requested by https://www.axs.com/events/516600/real-estate-tickets/promos/687630?skin=trumankc
Certificate IssuerAmazon
Subject*.static.discovery-prod.axs.com
Fingerprint3D:2D:98:A9:4E:93:A7:7D:22:86:11:BF:03:7D:50:D1:6D:4C:00:05
ValidityTue, 26 Sep 2023 00:00:00 GMT - Thu, 24 Oct 2024 23:59:59 GMT
File type Web Open Font Format, TrueType, length 31240, version 1.0\012- data
Hash 1ba6c940d6ef85e9b946ff2908843d7b
a52f0365c94de483acffc7715ca901c0528f1586
38b6d842b668254ba16a606fe5a6f5581436ae745c706de572e4309da4b5da73
GET /axs/bundles/aegaxs/fonts/lato/lato-black-webfont.woff HTTP/1.1
Host: static.discovery-prod.axs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://static.discovery-prod.axs.com/
Origin: https://www.axs.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/font-woff
content-length: 31240
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-expose-headers: ETag
access-control-max-age: 3000
last-modified: Thu, 16 Nov 2023 21:36:33 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: ChqnNvTBezQRz6z3uUrFSuxF3N5GQ6Xl
accept-ranges: bytes
server: AmazonS3
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: img-src * 'self' data: https:; default-src * 'unsafe-inline' 'unsafe-eval';
x-frame-options: sameorigin
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: origin
date: Thu, 30 Nov 2023 16:38:47 GMT
etag: "1ba6c940d6ef85e9b946ff2908843d7b"
vary: Accept-Encoding,Origin
x-cache: Hit from cloudfront
via: 1.1 990c1aa70667fe4e8f93d88ac8400fc4.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN54-C1
x-amz-cf-id: eVanRXmo3bJ-S2YUhqpp3Lq2XJhoCllTel_d2Pnayh6V7M_FSfs6Zg==
age: 2578
X-Firefox-Spdy: h2
static.discovery-prod.axs.com/axs/bundles/aegaxs/fonts/lato/lato-bold-webfont.woff
200 OK 32 kB URL GET HTTP/2 static.discovery-prod.axs.com/axs/bundles/aegaxs/fonts/lato/lato-bold-webfont.woff
IP
Requested by https://www.axs.com/events/516600/real-estate-tickets/promos/687630?skin=trumankc
Certificate IssuerAmazon
Subject*.static.discovery-prod.axs.com
Fingerprint3D:2D:98:A9:4E:93:A7:7D:22:86:11:BF:03:7D:50:D1:6D:4C:00:05
ValidityTue, 26 Sep 2023 00:00:00 GMT - Thu, 24 Oct 2024 23:59:59 GMT
File type Web Open Font Format, TrueType, length 32396, version 1.0\012- data
Hash ced0e46fdbde42e4d3797976447c73cf
4f29e91bcd44d7d924f6be9f34aceef2271df192
82fbaf43c23d3a6833f730095c5ae9e67062e65c95c03480cc6253c5bedb918d
GET /axs/bundles/aegaxs/fonts/lato/lato-bold-webfont.woff HTTP/1.1
Host: static.discovery-prod.axs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://static.discovery-prod.axs.com/
Origin: https://www.axs.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/font-woff
content-length: 32396
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-expose-headers: ETag
access-control-max-age: 3000
last-modified: Thu, 16 Nov 2023 21:36:33 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: 5YWwq6XJ0dtK2RYC5VKCEmhd1XoiBAb6
accept-ranges: bytes
server: AmazonS3
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: img-src * 'self' data: https:; default-src * 'unsafe-inline' 'unsafe-eval';
x-frame-options: sameorigin
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: origin
date: Thu, 30 Nov 2023 16:38:47 GMT
etag: "ced0e46fdbde42e4d3797976447c73cf"
vary: Accept-Encoding,Origin
x-cache: Hit from cloudfront
via: 1.1 990c1aa70667fe4e8f93d88ac8400fc4.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN54-C1
x-amz-cf-id: z7hmN13fsSWeYjgpVXu9_sW7_6PUzJKJnde0oAz7aFnKwwRKokodcw==
age: 2578
X-Firefox-Spdy: h2
static.discovery-prod.axs.com/axs/bundles/aegaxs/fonts/lato/lato-light-webfont.woff
200 OK 31 kB URL GET HTTP/2 static.discovery-prod.axs.com/axs/bundles/aegaxs/fonts/lato/lato-light-webfont.woff
IP
Requested by https://www.axs.com/events/516600/real-estate-tickets/promos/687630?skin=trumankc
Certificate IssuerAmazon
Subject*.static.discovery-prod.axs.com
Fingerprint3D:2D:98:A9:4E:93:A7:7D:22:86:11:BF:03:7D:50:D1:6D:4C:00:05
ValidityTue, 26 Sep 2023 00:00:00 GMT - Thu, 24 Oct 2024 23:59:59 GMT
File type Web Open Font Format, TrueType, length 31024, version 1.0\012- data
Hash 2bac8497363cb38ce47f5d0a7988658a
68a5f7bcf3f76411eb9faa36a05dc7bd2450ccb7
6dccfa141a3699d7e2d94649015101c70d77a70ee207a1a94f1fe309dd12784f
GET /axs/bundles/aegaxs/fonts/lato/lato-light-webfont.woff HTTP/1.1
Host: static.discovery-prod.axs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://static.discovery-prod.axs.com/
Origin: https://www.axs.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/font-woff
content-length: 31024
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-expose-headers: ETag
access-control-max-age: 3000
last-modified: Thu, 16 Nov 2023 21:36:33 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: .yRrCOdnzIY0TVELlhNFsC4q64xllU4D
accept-ranges: bytes
server: AmazonS3
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: img-src * 'self' data: https:; default-src * 'unsafe-inline' 'unsafe-eval';
x-frame-options: sameorigin
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: origin
date: Thu, 30 Nov 2023 16:38:47 GMT
etag: "2bac8497363cb38ce47f5d0a7988658a"
vary: Accept-Encoding,Origin
x-cache: Hit from cloudfront
via: 1.1 990c1aa70667fe4e8f93d88ac8400fc4.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN54-C1
x-amz-cf-id: oyV3k_NHNGx9Kc3DrrMYGyPPLGmkRj7tztp-erryW1piGlWexF53Gw==
age: 2578
X-Firefox-Spdy: h2
onetag-geo.s-onetag.com/
200 OK 555 B IP
Requested by https://www.axs.com/events/516600/real-estate-tickets/promos/687630?skin=trumankc
Certificate IssuerAmazon
Subject*.s-onetag.com
Fingerprint16:E8:8E:F6:16:D5:F6:4C:D2:F5:A0:A6:70:23:FF:E3:EA:22:DE:E1
ValiditySat, 04 Nov 2023 00:00:00 GMT - Sun, 01 Dec 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with very long lines (452)
Hash 200d5eba90a69db7b4ed019c4a8668e1
cad86d59141bfc421802b55294225dc78033c91f
6448132c9d86748cc71e9e2d5b4f0241a5dd9385a2baadcf99dc6675fd7870bf
GET / HTTP/1.1
Host: onetag-geo.s-onetag.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.axs.com
DNT: 1
Connection: keep-alive
Referer: https://www.axs.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/json
content-length: 555
date: Wed, 29 Nov 2023 19:38:30 GMT
x-amzn-requestid: c279f6a5-7cf0-45ff-a143-ba5f5b748c61
access-control-allow-origin: *
x-amz-apigw-id: PLPwjGHPCYcEVuw=
cache-control: max-age=86400
via: 1.1 8d07edb8bf98788bf512d51f8cc554f6.cloudfront.net (CloudFront), 1.1 185768229530368be94556dcab1c486a.cloudfront.net (CloudFront)
x-cache: Hit from cloudfront
x-amz-cf-pop: FRA56-P6, OSL50-C1
x-amz-cf-id: uKNTAllNpzEhMa4pCKKW43uR_14n-AO6DF3rcEpZ2q6FOTfuuy7UUA==
age: 78194
X-Firefox-Spdy: h2
www.axs.com/js/routing?callback=fos.Router.setData
200 OK 3.8 kB URL GET HTTP/2 www.axs.com/js/routing?callback=fos.Router.setData
IP
Requested by https://www.axs.com/events/516600/real-estate-tickets/promos/687630?skin=trumankc
Certificate IssuerLet's Encrypt
Subjectwww.axs.com
Fingerprint87:68:07:F1:4B:3D:46:14:AF:EA:16:57:5A:AE:C7:C3:76:2C:F5:5F
ValiditySat, 11 Nov 2023 02:56:16 GMT - Fri, 09 Feb 2024 02:56:15 GMT
File type ASCII text, with very long lines (34546), with no line terminators
Hash 198603916490e4ae79038fae2bc5985a
e00a70f2e43f746a87a94a50043f542b035d5e99
85026bc8b3ae6e46c6ff7652f0eb1338d110eb1b40c8bf41606b3156c38425aa
GET /js/routing?callback=fos.Router.setData HTTP/1.1
Host: www.axs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.axs.com/events/516600/real-estate-tickets/promos/687630?skin=trumankc
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=iplkbd0pteu9d5ita6cs5ici65; axs_geo_static_v1=NO%3A%3AOslo%3A%3A%3A59.95500%3A10.85900%3A%3A; axs_geo_v1=US%3ACA%3ALos+Angeles%3A%3A%3A34.05%3A-118.24%3AAmerica%2FLos_Angeles%3A1; preferred_locale=en-US; device_view=full; __cf_bm=2kAvX3QH_Rw3t1r5wFl5._y9Rl0OS5v5Rm6jYVTgROU-1701364903-0-ASw6YOj1XC79VHEljnFMfAiTuuzstwWhL0CTkK7WjHizWm0nLbxtm/kLZMTr10xzY5KLrlLbaR1U/V4FTxFS8vs=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 30 Nov 2023 17:21:43 GMT
content-type: application/javascript
cache-control: public, max-age=3600
strict-transport-security: max-age=15552000
x-frame-options: sameorigin
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-permitted-cross-domain-policies: none
referrer-policy: no-referrer-when-downgrade
last-modified: Thu, 30 Nov 2023 17:15:20 GMT
cf-cache-status: HIT
age: 124
expires: Thu, 30 Nov 2023 18:21:43 GMT
vary: Accept-Encoding
x-powered-by: AXS
x-careers: https://solutions.axs.com/careers/
server: cloudflare
cf-ray: 82e4c4b9a89c56c3-OSL
content-encoding: br
X-Firefox-Spdy: h2
assets.adobedtm.com/extensions/EPbf7b42aa08bc4f10879b1484195e80d1/AppMeasurement.min.js
200 OK 12 kB URL GET HTTP/2 assets.adobedtm.com/extensions/EPbf7b42aa08bc4f10879b1484195e80d1/AppMeasurement.min.js
IP
Requested by https://www.axs.com/events/516600/real-estate-tickets/promos/687630?skin=trumankc
Certificate IssuerDigiCert Inc
Subjectassets.adobedtm.com
Fingerprint8E:2F:9F:94:55:93:C2:B5:58:37:E8:D3:02:3C:23:AF:BA:E7:1D:EA
ValidityTue, 11 Jul 2023 00:00:00 GMT - Sat, 10 Aug 2024 23:59:59 GMT
File type ASCII text, with very long lines (32717)
Hash dfdd9e1f988805f0c2fbb10cd6b8f034
b6cd42821dd2e732919fd053a4665af0e15e0335
d6d01246a30e9d483531c27721f73f266fa4af35effdb21683ac02a620ab8aaf
GET /extensions/EPbf7b42aa08bc4f10879b1484195e80d1/AppMeasurement.min.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.axs.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "dfdd9e1f988805f0c2fbb10cd6b8f034:1663863409.614694"
last-modified: Thu, 22 Sep 2022 16:16:49 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
content-length: 12384
expires: Thu, 30 Nov 2023 18:21:45 GMT
date: Thu, 30 Nov 2023 17:21:45 GMT
cache-control: no-cache
access-control-allow-origin: https://www.axs.com
timing-allow-origin: *
X-Firefox-Spdy: h2
assets.adobedtm.com/extensions/EPbf7b42aa08bc4f10879b1484195e80d1/AppMeasurement_Module_AudienceManagement.min.js
200 OK 8.8 kB URL GET HTTP/2 assets.adobedtm.com/extensions/EPbf7b42aa08bc4f10879b1484195e80d1/AppMeasurement_Module_AudienceManagement.min.js
IP
Requested by https://www.axs.com/events/516600/real-estate-tickets/promos/687630?skin=trumankc
Certificate IssuerDigiCert Inc
Subjectassets.adobedtm.com
Fingerprint8E:2F:9F:94:55:93:C2:B5:58:37:E8:D3:02:3C:23:AF:BA:E7:1D:EA
ValidityTue, 11 Jul 2023 00:00:00 GMT - Sat, 10 Aug 2024 23:59:59 GMT
File type exported SGML document, ASCII text, with very long lines (24999)
Hash d220d501715e0484d0dddeac614f902c
2c97bb2f41fa88ca23907caabc4c46be586c31c1
b01bd01687b15585b2740273c8c3c6674dd9f559cfe52eeffdf43b1f93a12d05
GET /extensions/EPbf7b42aa08bc4f10879b1484195e80d1/AppMeasurement_Module_AudienceManagement.min.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.axs.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "d220d501715e0484d0dddeac614f902c:1663863410.217006"
last-modified: Thu, 22 Sep 2022 16:16:50 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
content-length: 8755
expires: Thu, 30 Nov 2023 18:21:45 GMT
date: Thu, 30 Nov 2023 17:21:45 GMT
cache-control: no-cache
access-control-allow-origin: https://www.axs.com
timing-allow-origin: *
X-Firefox-Spdy: h2
ib.adnxs.com/ut/v3/prebid
200 OK 50 B URL POST HTTP/2 ib.adnxs.com/ut/v3/prebid
IP
Requested by https://www.axs.com/events/516600/real-estate-tickets/promos/687630?skin=trumankc
Certificate IssuerDigiCert Inc
Subject*.adnxs.com
Fingerprint30:E1:57:C8:5A:77:64:AE:54:99:08:F7:2B:B8:C7:F4:28:85:56:08
ValidityMon, 13 Feb 2023 00:00:00 GMT - Fri, 15 Mar 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 7736c7e5103ab75364b02c667809041c
9079a8f6b2c428bdaf1b5dcd598263b2eccbb6fb
b98d68dfcac900dd387f517a3e8e5d84bc1c3b775222660221c780a73d729fb7
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 597
Origin: https://www.axs.com
DNT: 1
Connection: keep-alive
Referer: https://www.axs.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.23.4
date: Thu, 30 Nov 2023 17:21:45 GMT
content-type: application/json; charset=utf-8
content-length: 50
cache-control: no-store, no-cache, private
pragma: no-cache
expires: Sat, 15 Nov 2008 16:00:00 GMT
p3p: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
x-xss-protection: 0
access-control-allow-credentials: true
access-control-allow-origin: https://www.axs.com
accept-ch: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness
an-x-request-uuid: 74c45962-7cfe-46ba-b386-a1a3c1142fe8
x-proxy-origin: 91.90.42.154; 91.90.42.154; 1004.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com
X-Firefox-Spdy: h2
ib.adnxs.com/ut/v3/prebid
200 OK 50 B URL POST HTTP/2 ib.adnxs.com/ut/v3/prebid
IP
Requested by https://www.axs.com/events/516600/real-estate-tickets/promos/687630?skin=trumankc
Certificate IssuerDigiCert Inc
Subject*.adnxs.com
Fingerprint30:E1:57:C8:5A:77:64:AE:54:99:08:F7:2B:B8:C7:F4:28:85:56:08
ValidityMon, 13 Feb 2023 00:00:00 GMT - Fri, 15 Mar 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 7736c7e5103ab75364b02c667809041c
9079a8f6b2c428bdaf1b5dcd598263b2eccbb6fb
b98d68dfcac900dd387f517a3e8e5d84bc1c3b775222660221c780a73d729fb7
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 599
Origin: https://www.axs.com
DNT: 1
Connection: keep-alive
Referer: https://www.axs.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.23.4
date: Thu, 30 Nov 2023 17:21:45 GMT
content-type: application/json; charset=utf-8
content-length: 50
cache-control: no-store, no-cache, private
pragma: no-cache
expires: Sat, 15 Nov 2008 16:00:00 GMT
p3p: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
x-xss-protection: 0
access-control-allow-credentials: true
access-control-allow-origin: https://www.axs.com
accept-ch: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness
an-x-request-uuid: 98fc4f44-fee9-4fab-8194-ae58717d59c5
x-proxy-origin: 91.90.42.154; 91.90.42.154; 1004.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com
X-Firefox-Spdy: h2
chat.satis.fi/popup/GetCSS
200 OK 4.5 kB URL GET HTTP/3 chat.satis.fi/popup/GetCSS
IP
Requested by https://www.axs.com/events/516600/real-estate-tickets/promos/687630?skin=trumankc
Certificate IssuerSectigo Limited
Subject*.satis.fi
FingerprintF1:5D:2E:B7:58:F9:66:43:19:23:41:24:92:A8:2C:65:55:03:40:34
ValidityTue, 17 Oct 2023 00:00:00 GMT - Fri, 25 Oct 2024 23:59:59 GMT
File type ASCII text, with very long lines (57599), with no line terminators
Hash 514a5f9fd4e49ac95d0d07f64cde5c65
a0a86a6e35e986dc3278b8ddff662ff58d34a3cd
4695f3ec487a9955bdcae80ccfd4467a90d71b7f7e54189088acdd23f4c9e393
GET /popup/GetCSS HTTP/1.1
Host: chat.satis.fi
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.axs.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 4532
content-type: text/css
content-encoding: gzip
etag: 4494147E9FBCD45D95644B39D209F69E
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
date: Thu, 30 Nov 2023 17:21:44 GMT
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
onetag-geo.s-onetag.com/
200 OK 555 B IP
Requested by https://www.axs.com/events/516600/real-estate-tickets/promos/687630?skin=trumankc
Certificate IssuerAmazon
Subject*.s-onetag.com
Fingerprint16:E8:8E:F6:16:D5:F6:4C:D2:F5:A0:A6:70:23:FF:E3:EA:22:DE:E1
ValiditySat, 04 Nov 2023 00:00:00 GMT - Sun, 01 Dec 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with very long lines (452)
Hash 200d5eba90a69db7b4ed019c4a8668e1
cad86d59141bfc421802b55294225dc78033c91f
6448132c9d86748cc71e9e2d5b4f0241a5dd9385a2baadcf99dc6675fd7870bf
GET / HTTP/1.1
Host: onetag-geo.s-onetag.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.axs.com
DNT: 1
Connection: keep-alive
Referer: https://www.axs.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/json
content-length: 555
date: Wed, 29 Nov 2023 19:38:30 GMT
x-amzn-requestid: c279f6a5-7cf0-45ff-a143-ba5f5b748c61
access-control-allow-origin: *
x-amz-apigw-id: PLPwjGHPCYcEVuw=
cache-control: max-age=86400
via: 1.1 8d07edb8bf98788bf512d51f8cc554f6.cloudfront.net (CloudFront), 1.1 185768229530368be94556dcab1c486a.cloudfront.net (CloudFront)
x-cache: Hit from cloudfront
x-amz-cf-pop: FRA56-P6, OSL50-C1
x-amz-cf-id: ie5yW1UaQj1TJ6QXIlAA2rbDucILm4skO3yDUbRwjw8nvLuFOTt4qg==
age: 78195
X-Firefox-Spdy: h2
boredcrown.com/abbce030e49c120dbcfdfd57b309dc58c8d8729be7277072fffc908140bd52852e5a8274210d98991b81878852a704de752dad84e44350b006b593b20f2a
200 OK 24 kB URL GET HTTP/2 boredcrown.com/abbce030e49c120dbcfdfd57b309dc58c8d8729be7277072fffc908140bd52852e5a8274210d98991b81878852a704de752dad84e44350b006b593b20f2a
IP
Requested by https://www.axs.com/events/516600/real-estate-tickets/promos/687630?skin=trumankc
Certificate IssuerLet's Encrypt
Subjectboredcrown.com
FingerprintFA:C3:C0:65:1D:46:0D:60:28:AC:46:F5:5F:1E:B6:46:FA:7F:3C:95
ValidityThu, 16 Nov 2023 14:13:19 GMT - Wed, 14 Feb 2024 14:13:18 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash 2b181ab3792592fd9d9693d5db0886be
c7654d35eb514d6c44da9264b2470751a120e9dc
c19a88209238d89cb7e442c1927d6cf9ff78a67ae2649cbbfc4239fafb63a9c7
GET /abbce030e49c120dbcfdfd57b309dc58c8d8729be7277072fffc908140bd52852e5a8274210d98991b81878852a704de752dad84e44350b006b593b20f2a HTTP/1.1
Host: boredcrown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.axs.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: private, must-revalidate, max-age=21600
content-encoding: br
content-type: text/javascript; charset=utf-8
etag: "75b4187746a8bf7eb3851f8b080e0deb173f975b270914b32bb297b62e560a81"
strict-transport-security: max-age=15724800; preload
timing-allow-origin: *
vary: Accept-Encoding, Accept-Language
x-buildname: hoothoot
x-buildnumber: 1072352451
x-datacenter: gce-europe-west1
x-hostname: fen-hoothoot-europe-west1-test-cmwb
date: Thu, 30 Nov 2023 17:21:44 GMT
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
prod-satisfilabs-resources-gcs.satis.fi/ClientAssets/Fonts/Lato-Bold.ttf
200 OK 122 kB URL GET HTTP/2 prod-satisfilabs-resources-gcs.satis.fi/ClientAssets/Fonts/Lato-Bold.ttf
IP
Requested by https://www.axs.com/events/516600/real-estate-tickets/promos/687630?skin=trumankc
Certificate IssuerSectigo Limited
Subject*.satis.fi
FingerprintF1:5D:2E:B7:58:F9:66:43:19:23:41:24:92:A8:2C:65:55:03:40:34
ValidityTue, 17 Oct 2023 00:00:00 GMT - Fri, 25 Oct 2024 23:59:59 GMT
File type TrueType Font data, digitally signed, 18 tables, 1st "DSIG", 30 names, Macintosh, Copyright (c) 2010-2011 by tyPoland Lukasz Dziedzic with Reserved Font Name "Lato". Licensed und\012- data
Size 122 kB (121788 bytes)
Hash 44dfe8cc676882243911a3197a50169e
c330d59f3e64e07a2571c2ba4f4109b20a168f69
14f7de6b616950395062902eb8f70f01c0a901223db5d40f2a05728ac4a830f6
GET /ClientAssets/Fonts/Lato-Bold.ttf HTTP/1.1
Host: prod-satisfilabs-resources-gcs.satis.fi
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.axs.com
DNT: 1
Connection: keep-alive
Referer: https://chat.satis.fi/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
x-guploader-uploadid: ABPtcPrgRUVUo_eMLjGgFTTZ6M9g_WcQGcycVKoYxLcsd0tTgci-xMUiZBzG3ghJqFQBGwTyPyO3qQ5hHBd5HcQD18DE_fkpNJ8k
x-goog-generation: 1651595401165858
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 121788
x-goog-hash: crc32c=3HUIZw==, md5=RN/ozGdogiQ5EaMZelAWng==
x-goog-storage-class: STANDARD
accept-ranges: bytes
content-length: 121788
access-control-allow-origin: *
server: UploadServer
access-control-expose-headers: Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
date: Thu, 30 Nov 2023 17:21:45 GMT
last-modified: Tue, 03 May 2022 16:30:01 GMT
etag: "44dfe8cc676882243911a3197a50169e"
content-type: binary/octet-stream
age: 0
cache-control: public,max-age=0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
static.discovery-prod.axs.com/axs/bundles/aegaxs/images/apple-touch-icon.png?3.0.0.732
200 OK 8.9 kB URL GET HTTP/2 static.discovery-prod.axs.com/axs/bundles/aegaxs/images/apple-touch-icon.png?3.0.0.732
IP
Requested by https://www.axs.com/events/516600/real-estate-tickets/promos/687630?skin=trumankc
Certificate IssuerAmazon
Subject*.static.discovery-prod.axs.com
Fingerprint3D:2D:98:A9:4E:93:A7:7D:22:86:11:BF:03:7D:50:D1:6D:4C:00:05
ValidityTue, 26 Sep 2023 00:00:00 GMT - Thu, 24 Oct 2024 23:59:59 GMT
File type PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced\012- data
Hash 08ac7474d23a2dd6516c6e7698de1e79
c2d377e9b6117c056f1e29051f928f7d9300d224
57ebfa639c2da54642368879b5618a471e15b1f8ce9e5b49ba3737f099be92ae
GET /axs/bundles/aegaxs/images/apple-touch-icon.png?3.0.0.732 HTTP/1.1
Host: static.discovery-prod.axs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.axs.com/events/516600/real-estate-tickets/promos/687630?skin=trumankc
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=iplkbd0pteu9d5ita6cs5ici65; axs_geo_static_v1=NO%3A%3AOslo%3A%3A%3A59.95500%3A10.85900%3A%3A; axs_geo_v1=US%3ACA%3ALos+Angeles%3A%3A%3A34.05%3A-118.24%3AAmerica%2FLos_Angeles%3A1; preferred_locale=en-US; __cf_bm=2kAvX3QH_Rw3t1r5wFl5._y9Rl0OS5v5Rm6jYVTgROU-1701364903-0-ASw6YOj1XC79VHEljnFMfAiTuuzstwWhL0CTkK7WjHizWm0nLbxtm/kLZMTr10xzY5KLrlLbaR1U/V4FTxFS8vs=; _sfid_3e99={%22anonymousId%22:%2224eb6be39babf58b%22}; _evga_82e0={%22uuid%22:%2224eb6be39babf58b%22}; AMCV_B7B972315A1341150A495EFE%40AdobeOrg=179643557%7CMCIDTS%7C19692%7CvVersion%7C5.5.0; mbox=session#c6ee0e80eb9844299dd989aec39e438a#1701366770; at_check=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 8884
last-modified: Thu, 16 Nov 2023 21:36:35 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: yjkZvJIet0KO1lqiCBV5cr9DD0DiSa3T
accept-ranges: bytes
server: AmazonS3
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: img-src * 'self' data: https:; default-src * 'unsafe-inline' 'unsafe-eval';
x-frame-options: sameorigin
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: origin
date: Thu, 30 Nov 2023 17:01:24 GMT
etag: "08ac7474d23a2dd6516c6e7698de1e79"
vary: Accept-Encoding,Origin
x-cache: Hit from cloudfront
via: 1.1 ed87681648230d81cfe4a69364ab730c.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN54-C1
x-amz-cf-id: _g1yvq7qKWbQXiDVrK5I7n6T3aQKCNsZSYss2kUqQvjG2brGdkM5Fg==
age: 1273
X-Firefox-Spdy: h2
static.discovery-prod.axs.com/axs/bundles/aegaxs/images/page/favicon.ico?3.0.0.732
200 OK 5.4 kB URL GET HTTP/2 static.discovery-prod.axs.com/axs/bundles/aegaxs/images/page/favicon.ico?3.0.0.732
IP
Requested by https://www.axs.com/events/516600/real-estate-tickets/promos/687630?skin=trumankc
Certificate IssuerAmazon
Subject*.static.discovery-prod.axs.com
Fingerprint3D:2D:98:A9:4E:93:A7:7D:22:86:11:BF:03:7D:50:D1:6D:4C:00:05
ValidityTue, 26 Sep 2023 00:00:00 GMT - Thu, 24 Oct 2024 23:59:59 GMT
File type MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel\012- data
Hash e8e45fcab29d9a16c46d0b9c352db241
78f5f93c881875afa704f3ec09f48fce102b4496
266049040a6a0ed5adcebeb4adec5bb1ae7d1c538ea8119f6477e7c83bc16b3c
GET /axs/bundles/aegaxs/images/page/favicon.ico?3.0.0.732 HTTP/1.1
Host: static.discovery-prod.axs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.axs.com/events/516600/real-estate-tickets/promos/687630?skin=trumankc
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=iplkbd0pteu9d5ita6cs5ici65; axs_geo_static_v1=NO%3A%3AOslo%3A%3A%3A59.95500%3A10.85900%3A%3A; axs_geo_v1=US%3ACA%3ALos+Angeles%3A%3A%3A34.05%3A-118.24%3AAmerica%2FLos_Angeles%3A1; preferred_locale=en-US; __cf_bm=2kAvX3QH_Rw3t1r5wFl5._y9Rl0OS5v5Rm6jYVTgROU-1701364903-0-ASw6YOj1XC79VHEljnFMfAiTuuzstwWhL0CTkK7WjHizWm0nLbxtm/kLZMTr10xzY5KLrlLbaR1U/V4FTxFS8vs=; _sfid_3e99={%22anonymousId%22:%2224eb6be39babf58b%22}; _evga_82e0={%22uuid%22:%2224eb6be39babf58b%22}; AMCV_B7B972315A1341150A495EFE%40AdobeOrg=179643557%7CMCIDTS%7C19692%7CvVersion%7C5.5.0; mbox=session#c6ee0e80eb9844299dd989aec39e438a#1701366770; at_check=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/vnd.microsoft.icon
content-length: 5430
last-modified: Thu, 16 Nov 2023 21:36:39 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: HFibyxhnjIIuJYJGTRcvwuywzleLhma8
accept-ranges: bytes
server: AmazonS3
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: img-src * 'self' data: https:; default-src * 'unsafe-inline' 'unsafe-eval';
x-frame-options: sameorigin
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: origin
date: Thu, 30 Nov 2023 16:58:43 GMT
etag: "e8e45fcab29d9a16c46d0b9c352db241"
vary: Accept-Encoding,Origin
x-cache: Hit from cloudfront
via: 1.1 ed87681648230d81cfe4a69364ab730c.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN54-C1
x-amz-cf-id: J00Osb7E3QZ5TRZ_nWwQXWvcP068fqBcM7QVYTM7zpXzy-aUX-vrEA==
age: 1390
X-Firefox-Spdy: h2
privacy-policy.truste.com/privacy-seal/seal?rid=9fbb8f70-7ec9-49d0-bc68-85bb7b8fbfea
200 OK 14 kB URL GET HTTP/1.1 privacy-policy.truste.com/privacy-seal/seal?rid=9fbb8f70-7ec9-49d0-bc68-85bb7b8fbfea
IP
Requested by https://www.axs.com/events/516600/real-estate-tickets/promos/687630?skin=trumankc
Certificate IssuerAmazon
Subject*.truste.com
Fingerprint40:B9:0C:E0:91:22:36:71:0A:8E:BD:3C:8C:05:48:E0:29:48:04:8B
ValiditySat, 18 Nov 2023 00:00:00 GMT - Sun, 15 Dec 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- HTML document text\012- HTML document, ASCII text, with very long lines (1090)
Hash 1e941cb82e7a496bfe815c9369512622
6e1118ca7809519a6ec2497170d983fc955a751d
a8ead84fdfd5265baa6f68cb97f55c6070e77527771f9695e3b40d56b4980c51
GET /privacy-seal/seal?rid=9fbb8f70-7ec9-49d0-bc68-85bb7b8fbfea HTTP/1.1
Host: privacy-policy.truste.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.axs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: image/svg+xml
Content-Length: 14370
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, POST, PUT, DELETE, OPTIONS, HEAD
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
Accept-Ranges: bytes
Server: TXS
X-Frame-Options: SAMEORIGIN, SAMEORIGIN, SAMEORIGIN
x-content-type-options: nosniff, nosniff, nosniff
X-Xss-Protection: 1; mode=block, 1; mode=block
Content-Security-Policy: object-src 'none'; frame-ancestors https://*.trustarc.com https://*.truste.com ; upgrade-insecure-requests; block-all-mixed-content;, default-src 'self' 'unsafe-eval' *.trustarc.com *.trustarc-svc.net *.truste.com *.truste-svc.net; font-src 'self' *.trustarc.com *.trustarc-svc.net *.truste.com *.truste-svc.net; style-src 'self' 'unsafe-inline' *.trustarc.com *.trustarc-svc.net *.truste.com *.truste-svc.net; img-src 'self' *.trustarc.com *.trustarc-svc.net *.truste.com *.truste-svc.net https://trustarc.com; frame-src 'self' *.trustarc.com *.trustarc-svc.net *.truste.com *.truste-svc.net; connect-src 'self' *.trustarc.com *.trustarc-svc.net *.truste.com *.truste-svc.net; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.trustarc.com *.trustarc-svc.net *.truste.com *.truste-svc.net; upgrade-insecure-requests; block-all-mixed-content;
Referrer-Policy: strict-origin-when-cross-origin, strict-origin-when-cross-origin
Expect-CT: enforce, max-age=60, enforce, max-age=60
Permissions-Policy: autoplay=(self), document-domain=(self), encrypted-media=(self), autoplay=(self), document-domain=(self), encrypted-media=(self)
Cross-Origin-Resource-Policy: cross-origin, cross-origin
Cross-Origin-Opener-Policy: cross-origin, cross-origin
Cross-Origin-Embedder-Policy: unsafe-none, unsafe-none
Date: Thu, 30 Nov 2023 07:43:11 GMT
Cache-Control: no-cache, must-revalidate, no-cache, no-store
ETag: W/"14370-1594834148000"
X-Cache: Hit from cloudfront
Via: 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: sIEC_-8h3FSJhuVhT5KczoteGGoU7q4zsJHMKvIFLvrcfrDJN1F5-g==
Age: 34714
d2yyd1h5u9mauk.cloudfront.net/integrations/web/v1/library/kRFnbR2QGkAbQJiR/delighted.js
200 OK 28 kB URL GET HTTP/1.1 d2yyd1h5u9mauk.cloudfront.net/integrations/web/v1/library/kRFnbR2QGkAbQJiR/delighted.js
IP
Requested by https://www.axs.com/events/516600/real-estate-tickets/promos/687630?skin=trumankc
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52
ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT
File type ASCII text, with very long lines (32828)
Hash 5f1293d4b3f2b2f3767616cdc7b8a49b
8f53fb18231cb3f849e87769628bf90f14eaf98c
0301679c3ffb4dabb012e188ed34359a27efcc4da25ab1137d88745dafc2486c
GET /integrations/web/v1/library/kRFnbR2QGkAbQJiR/delighted.js HTTP/1.1
Host: d2yyd1h5u9mauk.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.axs.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Date: Thu, 30 Nov 2023 17:21:25 GMT
Status: 200 OK
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Permitted-Cross-Domain-Policies: none
Referrer-Policy: strict-origin-when-cross-origin
X-UA-Compatible: IE=Edge,chrome=1
Cache-Control: max-age=120, public
Content-Security-Policy: default-src 'self'; font-src 'self' data: https://fonts.gstatic.com https://js.intercomcdn.com http://fonts.intercomcdn.com http://*.auryc.com https://dcx14qs33eg2z.cloudfront.net; style-src 'self' 'unsafe-inline' https://accounts.google.com https://cdn.weglot.com https://fonts.googleapis.com https://tagmanager.google.com https://heapanalytics.com https://app-sj30.marketo.com https://cdn.zapier.com https://dcx14qs33eg2z.cloudfront.net; object-src 'none'; media-src 'self' https://beacon-v2.helpscout.net https://js.intercomcdn.com/ https://dcx14qs33eg2z.cloudfront.net; img-src 'self' data: http: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://accounts.google.com https://app.intercom.io https://app.pendo.io https://a.opmnstr.com https://api.omappapi.com https://analytics.twitter.com https://app-sj30.marketo.com https://bat.bing.com https://beacon-v2.helpscout.net https://cdn.heapanalytics.com https://cdn.pendo.io https://cdn.weglot.com https://connect.facebook.net https://ct.capterra.com https://data.pendo.io https://googleads.g.doubleclick.net https://heapanalytics.com https://js.intercomcdn.com https://js.pusher.com https://js.stripe.com https://munchkin.marketo.net https://pendo-io-static.storage.googleapis.com https://pendo-static-5802606298267648.storage.googleapis.com https://platform.twitter.com https://risk.clearbit.com https://rum-static.pingdom.net https://script.crazyegg.com https://snap.licdn.com https://ssl.google-analytics.com https://static.ads-twitter.com https://tagmanager.google.com https://tpc.googlesyndication.com https://widget.intercom.io https://www.google-analytics.com https://www.google.com https://www.googleadservices.com https://www.googletagmanager.com https://zapier.com https://cdn.zapier.com https://*.quora.com https://js.sentry-cdn.com https://browser.sentry-cdn.com https://public.profitwell.com https://static.profitwell.com https://polyfill.io https://d3dy5gmtp8yhk7.cloudfront.net/ https://d2yyd1h5u9mauk.cloudfront.net https://dcx14qs33eg2z.cloudfront.net; frame-src 'self' https://accounts.google.com https://app.pendo.io https://js.stripe.com https://beacon-v2.helpscout.net https://bid.g.doubleclick.net https://tpc.googlesyndication.com https://app-sj30.marketo.com https://qglobalops.co1.qualtrics.com; connect-src 'self' https://delighted.com https://*.delighted.com https://api.delighted.com https://accounts.google.com https://api-iam.intercom.io https://api-ping.intercom.io https://api.intercom.io https://api.zapier.com https://zapier.com https://app.pendo.io https://bat.bing.com https://beaconapi.helpscout.net https://chatapi.helpscout.net https://cdn.weglot.com https://cdn-api-weglot.com https://d3hb14vkzrxvla.cloudfront.net https://data.pendo.io https://heapanalytics.com https://nexus-websocket-a.intercom.io https://nexus-websocket-b.intercom.io https://pendo-static-5802606298267648.storage.googleapis.com https://platform.twitter.com https://risk.clearbit.com https://script.crazyegg.com https://stats.g.doubleclick.net https://tracking.crazyegg.com https://uploads.intercomcdn.com https://uploads.intercomusercontent.com https://www.google-analytics.com https://www.google.com https://www2.profitwell.com https://099-SJL-057.mktorest.com https://*.pusher.com https://js.sentry-cdn.com https://browser.sentry-cdn.com https://*.quora.com https://*.auryc.com wss://nexus-websocket-a.intercom.io wss://nexus-websocket-b.intercom.io wss://ws.pusher.com wss://ws.pusherapp.com https://dcx14qs33eg2z.cloudfront.net; report-uri https://fb4qdnkh2k.execute-api.us-east-1.amazonaws.com/default
X-Request-Id: 64d1ec385a6ea0a8875c8e56e10be2ac
X-Runtime: 0.064104
Strict-Transport-Security: max-age=31536000; includeSubDomains
Content-Encoding: gzip
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 92c4bb210eab82a152000047d3609a02.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 9qdYBRONg8YiyEMWaAGCc8Txuk2QkWTxJzkrJnrwb6tI-mwbcitiWA==
Age: 20
www.axs.com/cdn-cgi/challenge-platform/h/g/jsd/r/82e4c4b1ee9656c3
200 OK 17 kB URL POST HTTP/2 www.axs.com/cdn-cgi/challenge-platform/h/g/jsd/r/82e4c4b1ee9656c3
IP
Requested by https://www.axs.com/events/516600/real-estate-tickets/promos/687630?skin=trumankc
Certificate IssuerLet's Encrypt
Subjectwww.axs.com
Fingerprint87:68:07:F1:4B:3D:46:14:AF:EA:16:57:5A:AE:C7:C3:76:2C:F5:5F
ValiditySat, 11 Nov 2023 02:56:16 GMT - Fri, 09 Feb 2024 02:56:15 GMT
Hash 9d95b77269d45d778c4f2489c63193bb
04aadcc47fc9dfad653fc880727ddedf8d3aea89
7935e28b0666857661dfcbc88055caac7403eb5bd7ca8e87776b8eafcbce5345
POST /cdn-cgi/challenge-platform/h/g/jsd/r/82e4c4b1ee9656c3 HTTP/1.1
Host: www.axs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 12251
Origin: https://www.axs.com
DNT: 1
Connection: keep-alive
Referer: https://www.axs.com/events/516600/real-estate-tickets/promos/687630?skin=trumankc
Cookie: PHPSESSID=iplkbd0pteu9d5ita6cs5ici65; axs_geo_static_v1=NO%3A%3AOslo%3A%3A%3A59.95500%3A10.85900%3A%3A; axs_geo_v1=US%3ACA%3ALos+Angeles%3A%3A%3A34.05%3A-118.24%3AAmerica%2FLos_Angeles%3A1; preferred_locale=en-US; device_view=full; __cf_bm=2kAvX3QH_Rw3t1r5wFl5._y9Rl0OS5v5Rm6jYVTgROU-1701364903-0-ASw6YOj1XC79VHEljnFMfAiTuuzstwWhL0CTkK7WjHizWm0nLbxtm/kLZMTr10xzY5KLrlLbaR1U/V4FTxFS8vs=; _sfid_3e99={%22anonymousId%22:%2224eb6be39babf58b%22}; _evga_82e0={%22uuid%22:%2224eb6be39babf58b%22}; AMCV_B7B972315A1341150A495EFE%40AdobeOrg=179643557%7CMCIDTS%7C19692%7CvVersion%7C5.5.0; mbox=session#c6ee0e80eb9844299dd989aec39e438a#1701366770; at_check=true
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 30 Nov 2023 17:21:45 GMT
content-type: text/plain; charset=UTF-8
set-cookie: cf_clearance=92fGukB_ae0s1hfXZtEeN9TZ6eC7a6iX6S9DFmAJRiM-1701364905-0-1-730ca2d2.ea3afa48.240dfd32-0.2.1701364905; path=/; expires=Fri, 29-Nov-24 17:21:45 GMT; domain=.axs.com; HttpOnly; Secure; SameSite=None
strict-transport-security: max-age=15552000
x-content-type-options: nosniff
x-powered-by: AXS
x-careers: https://solutions.axs.com/careers/
server: cloudflare
cf-ray: 82e4c4c49b4756c3-OSL
content-encoding: br
X-Firefox-Spdy: h2
assets.adobedtm.com/f8e955bdde76/4d3654675a9f/452d647be4f8/RCbf208765d10540d69bc9e64558c4bcfd-source.min.js
200 OK 355 B URL GET HTTP/2 assets.adobedtm.com/f8e955bdde76/4d3654675a9f/452d647be4f8/RCbf208765d10540d69bc9e64558c4bcfd-source.min.js
IP
Requested by https://www.axs.com/events/516600/real-estate-tickets/promos/687630?skin=trumankc
Certificate IssuerDigiCert Inc
Subjectassets.adobedtm.com
Fingerprint8E:2F:9F:94:55:93:C2:B5:58:37:E8:D3:02:3C:23:AF:BA:E7:1D:EA
ValidityTue, 11 Jul 2023 00:00:00 GMT - Sat, 10 Aug 2024 23:59:59 GMT
File type ASCII text, with very long lines (504)
Hash f2ae73d11b200f5dcb11dd5e2e9012f4
75b5c4516553dcbf7da935d62fea5453c078250c
2177ac257a9c104460e45249f168fb9303c13859232ff227d366edf9959f7ffc
GET /f8e955bdde76/4d3654675a9f/452d647be4f8/RCbf208765d10540d69bc9e64558c4bcfd-source.min.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.axs.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "eb21ca635c535e7fb2f610b7a480592e:1701261551.975596"
last-modified: Wed, 29 Nov 2023 12:39:11 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
content-length: 355
cache-control: max-age=3600
expires: Thu, 30 Nov 2023 18:21:45 GMT
date: Thu, 30 Nov 2023 17:21:45 GMT
access-control-allow-origin: https://www.axs.com
timing-allow-origin: *
X-Firefox-Spdy: h2
cdn.cookielaw.org/scripttemplates/202308.1.0/otBannerSdk.js
200 OK 101 kB URL GET HTTP/2 cdn.cookielaw.org/scripttemplates/202308.1.0/otBannerSdk.js
IP
Requested by https://www.axs.com/events/516600/real-estate-tickets/promos/687630?skin=trumankc
Certificate IssuerCloudflare, Inc.
Subjectcookielaw.org
Fingerprint72:BB:48:60:EB:F2:A2:EB:51:29:51:1A:B9:2A:85:30:97:3D:9A:2E
ValiditySat, 01 Apr 2023 00:00:00 GMT - Sun, 31 Mar 2024 23:59:59 GMT
File type ASCII text, with very long lines (65451)
Size 101 kB (101254 bytes)
Hash e299b47727f3fba334ad8bd6109cab04
a5b4e82b461552aa131de3f244d2bcd89f3fef73
27ff6f8b30f633a9e1954d6cc94756127292aa99560255e414bbb75b37416594
GET /scripttemplates/202308.1.0/otBannerSdk.js HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.axs.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 30 Nov 2023 17:21:46 GMT
content-type: application/javascript
content-length: 101254
content-encoding: gzip
content-md5: 2+I2Cj649lHjQKiedh8F2Q==
last-modified: Wed, 25 Oct 2023 03:55:47 GMT
etag: 0x8DBD50E45B16C1C
x-ms-request-id: 95b9f744-001e-005d-6153-143307000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=86400
cf-cache-status: HIT
age: 53645
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 82e4c4c7cd061c0a-OSL
X-Firefox-Spdy: h2
api.axs.com/proxy/v2/users/ipcheck?access_token=4f2be33d835e7197e245c54ff00e5fb4&client_id=18_50d269328df8a48be955f18831d1057e8937cc06213bd4644dcb6768a674c886&client_secret=0b0e17d487d53c3c9bc7ada7b97bc0e9b3afa08fee34c431f9c21f5fa7ffc260
200 OK 22 kB URL GET HTTP/2 api.axs.com/proxy/v2/users/ipcheck?access_token=4f2be33d835e7197e245c54ff00e5fb4&client_id=18_50d269328df8a48be955f18831d1057e8937cc06213bd4644dcb6768a674c886&client_secret=0b0e17d487d53c3c9bc7ada7b97bc0e9b3afa08fee34c431f9c21f5fa7ffc260
IP
Requested by https://www.axs.com/events/516600/real-estate-tickets/promos/687630?skin=trumankc
Certificate IssuerCloudflare, Inc.
Subjectapi.axs.com
Fingerprint10:F3:42:B0:F0:96:A6:31:29:1E:29:40:9B:8F:24:B0:74:CD:A6:07
ValidityMon, 09 Jan 2023 00:00:00 GMT - Tue, 09 Jan 2024 23:59:59 GMT
Hash 92df08ca268a83907722447574d0ca23
7e3e7a9957598b4624fed6e8e5334a01458e7d69
ca0c061cd22f609f0d13b0621a0e5db46468e61d0eca42191abd1518335203b9
OPTIONS /proxy/v2/users/ipcheck?access_token=4f2be33d835e7197e245c54ff00e5fb4&client_id=18_50d269328df8a48be955f18831d1057e8937cc06213bd4644dcb6768a674c886&client_secret=0b0e17d487d53c3c9bc7ada7b97bc0e9b3afa08fee34c431f9c21f5fa7ffc260 HTTP/1.1
Host: api.axs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: content-type
Referer: https://www.axs.com/events/516600/real-estate-tickets/promos/687630?skin=trumankc
Origin: https://www.axs.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Nov 2023 17:21:46 GMT
content-type: text/html; charset=UTF-8
cache-control: no-cache
access-control-allow-credentials: true
access-control-allow-methods: POST, PUT, GET, PATCH, DELETE
access-control-allow-headers: authorization, content-type, ost, osst
access-control-max-age: 3600
access-control-allow-origin: https://www.axs.com
strict-transport-security: max-age=7776000; includeSubDomains
x-frame-options: sameorigin
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-permitted-cross-domain-policies: none
referrer-policy: no-referrer-when-downgrade
cf-cache-status: DYNAMIC
x-powered-by: AXS
set-cookie: __cf_bm=JDqqozVZNcv5ubFY_XCQvItZg_va0qYPZgoI9OGdlNE-1701364906-0-AdDkXaCOCW3NIc04NFyB96Ylde5N7A8YG/oVh0218T05Mgx8HYdSF8YS5igLzJoWj3cDbWbIFMcbTFmKBgatjnU=; path=/; expires=Thu, 30-Nov-23 17:51:46 GMT; domain=.api.axs.com; HttpOnly; Secure; SameSite=None
_cfuvid=pB.OwJM2MVji_qpLP9POTZmT5ZtNHc8uHS2rYGRVI1c-1701364906033-0-604800000; path=/; domain=.api.axs.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 82e4c4c57bbfb521-OSL
content-encoding: br
X-Firefox-Spdy: h2
id.axs.com/bundle.0.8.31.js
200 OK 294 kB URL GET HTTP/2 id.axs.com/bundle.0.8.31.js
IP
Requested by https://www.axs.com/events/516600/real-estate-tickets/promos/687630?skin=trumankc
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintDF:47:80:BF:D4:C4:76:ED:53:A5:42:88:09:E3:0C:5E:36:27:2A:55
ValidityFri, 30 Jun 2023 00:00:00 GMT - Sat, 29 Jun 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (31987)
Size 294 kB (293986 bytes)
Hash f2bae8024a94c65e115897716f469e36
de31a0ba31462a4e0a161d81c47cb87a01bfc9d0
89cbc8d0ea3c2117f2b2eb474f13094b6f7eb99cdb5af47114504bb7f91d2124
GET /bundle.0.8.31.js HTTP/1.1
Host: id.axs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.axs.com/events/516600/real-estate-tickets/promos/687630?skin=trumankc
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=iplkbd0pteu9d5ita6cs5ici65; axs_geo_static_v1=NO%3A%3AOslo%3A%3A%3A59.95500%3A10.85900%3A%3A; axs_geo_v1=US%3ACA%3ALos+Angeles%3A%3A%3A34.05%3A-118.24%3AAmerica%2FLos_Angeles%3A1; preferred_locale=en-US; __cf_bm=2kAvX3QH_Rw3t1r5wFl5._y9Rl0OS5v5Rm6jYVTgROU-1701364903-0-ASw6YOj1XC79VHEljnFMfAiTuuzstwWhL0CTkK7WjHizWm0nLbxtm/kLZMTr10xzY5KLrlLbaR1U/V4FTxFS8vs=; __cf_bm=_UFEMxqgyb5MBNaK1S1iNMXcwrgQ9QvgraDtQEr6HPM-1701364904-0-AcAJRggKViyvPSLHYqzqTfZZ2fefFTrx0JAbsdMKuvyMg77CVSfSq/CjYhFnrWG8K1y2th/0iTnIBet4jOdDtkw=; _sfid_3e99={%22anonymousId%22:%2224eb6be39babf58b%22}; _evga_82e0={%22uuid%22:%2224eb6be39babf58b%22}; AMCV_B7B972315A1341150A495EFE%40AdobeOrg=179643557%7CMCIDTS%7C19692%7CvVersion%7C5.5.0; mbox=session#c6ee0e80eb9844299dd989aec39e438a#1701366770; at_check=true
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 30 Nov 2023 17:21:45 GMT
content-type: application/javascript
last-modified: Wed, 26 Jul 2023 20:35:42 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: 4n8w.YD.xb7CQDYfs6FvaHDIbs5P1yRD
access-control-allow-origin: *
strict-transport-security: max-age=15552000; includeSubDomains; preload
content-security-policy: img-src * 'self' data: https:; default-src * 'unsafe-inline' 'unsafe-eval';
x-frame-options: sameorigin
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: origin
content-encoding: gzip
etag: W/"724bc5e5686a4e6f72903c826b9ac5ac"
vary: Accept-Encoding,Origin
x-cache: Hit from cloudfront
via: 1.1 fc6bcc0c05113295fc38d1c274344ae4.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN1-C1
x-amz-cf-id: HdoNhCjtbS6H_oWj7et89L_Yin_scbsINfB4WKLuANttT5-HB0h5PQ==
cf-cache-status: HIT
age: 5007
expires: Thu, 30 Nov 2023 17:22:15 GMT
cache-control: public, max-age=30
set-cookie: __cf_bm=H0vAbox4.INwCp8iddTX.lh0GQd9G.iLOfVnFF.OlfA-1701364905-0-AXbCkdJ84/3sTXBRkL2CqB9o4OfUX7m+KsMfCdqJGnCc8fJWNjKktVY1AlltgNrk5Wwaz5mSsDvPjtb79lZyqrk=; path=/; expires=Thu, 30-Nov-23 17:51:45 GMT; domain=.id.axs.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 82e4c4c169bd5697-OSL
X-Firefox-Spdy: h2
cdn.cookielaw.org/scripttemplates/202308.1.0/assets/v2/otPcCenter.json
200 OK 12 kB URL GET HTTP/2 cdn.cookielaw.org/scripttemplates/202308.1.0/assets/v2/otPcCenter.json
IP
Requested by https://www.axs.com/events/516600/real-estate-tickets/promos/687630?skin=trumankc
Certificate IssuerCloudflare, Inc.
Subjectcookielaw.org
Fingerprint72:BB:48:60:EB:F2:A2:EB:51:29:51:1A:B9:2A:85:30:97:3D:9A:2E
ValiditySat, 01 Apr 2023 00:00:00 GMT - Sun, 31 Mar 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with very long lines (50440)
Hash 8b73b216ac0a0730279ebb5fc109c29c
4d0a7239ee5f70d143300e772de91b4768a7f4a4
0a0721d78278f9a6c3dd3f639bad1b3105d2df9e97e3d4a74dbec66d6b92c7ec
GET /scripttemplates/202308.1.0/assets/v2/otPcCenter.json HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.axs.com
DNT: 1
Connection: keep-alive
Referer: https://www.axs.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 30 Nov 2023 17:21:46 GMT
content-type: application/json
content-length: 12544
content-encoding: gzip
content-md5: jih879mbIcNSFioYCdj3Tg==
last-modified: Wed, 25 Oct 2023 03:55:39 GMT
etag: 0x8DBD50E40FCFC71
x-ms-request-id: 84aa7bf2-601e-0090-4564-1403ed000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=86400
cf-cache-status: HIT
age: 38406
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 82e4c4c90b745689-OSL
X-Firefox-Spdy: h2
id.axs.com/sdk.js
200 OK 2.3 kB IP
Requested by https://www.axs.com/events/516600/real-estate-tickets/promos/687630?skin=trumankc
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintDF:47:80:BF:D4:C4:76:ED:53:A5:42:88:09:E3:0C:5E:36:27:2A:55
ValidityFri, 30 Jun 2023 00:00:00 GMT - Sat, 29 Jun 2024 23:59:59 GMT
File type gzip compressed data, from Unix\012- data
Hash b568056d2b9b4e48791cdb271bdf92fb
a342f108772ef87666f057b88b286d17d4c78d1f
bbdd82aacaabe809c86b8e7802810f6dad8da2e7ff25ca04399c3c3f0097eb18
GET /sdk.js HTTP/1.1
Host: id.axs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.axs.com/events/516600/real-estate-tickets/promos/687630?skin=trumankc
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=iplkbd0pteu9d5ita6cs5ici65; axs_geo_static_v1=NO%3A%3AOslo%3A%3A%3A59.95500%3A10.85900%3A%3A; axs_geo_v1=US%3ACA%3ALos+Angeles%3A%3A%3A34.05%3A-118.24%3AAmerica%2FLos_Angeles%3A1; preferred_locale=en-US; __cf_bm=2kAvX3QH_Rw3t1r5wFl5._y9Rl0OS5v5Rm6jYVTgROU-1701364903-0-ASw6YOj1XC79VHEljnFMfAiTuuzstwWhL0CTkK7WjHizWm0nLbxtm/kLZMTr10xzY5KLrlLbaR1U/V4FTxFS8vs=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Nov 2023 17:21:44 GMT
content-type: application/javascript
last-modified: Wed, 26 Jul 2023 20:35:43 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: wLfrGDSs4.e1tOyuxZuDRXQ6vkXwcUQP
access-control-allow-origin: *
strict-transport-security: max-age=15552000; includeSubDomains; preload
content-security-policy: img-src * 'self' data: https:; default-src * 'unsafe-inline' 'unsafe-eval';
x-frame-options: sameorigin
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: origin
content-encoding: gzip
etag: W/"28ca89f0d1a3e7ce0abf2f8f0284043b"
vary: Accept-Encoding,Origin
x-cache: Hit from cloudfront
via: 1.1 fb13343f41a549822047f18ba839fd5a.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN1-C1
x-amz-cf-id: AwH2GIm8JMCBeNNDKzFz5MD32PiHl78B1ZbAcafrqXoncLrkIFnFoQ==
cf-cache-status: HIT
age: 1702
expires: Thu, 30 Nov 2023 17:22:14 GMT
cache-control: public, max-age=30
set-cookie: __cf_bm=_UFEMxqgyb5MBNaK1S1iNMXcwrgQ9QvgraDtQEr6HPM-1701364904-0-AcAJRggKViyvPSLHYqzqTfZZ2fefFTrx0JAbsdMKuvyMg77CVSfSq/CjYhFnrWG8K1y2th/0iTnIBet4jOdDtkw=; path=/; expires=Thu, 30-Nov-23 17:51:44 GMT; domain=.id.axs.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 82e4c4babb9d5697-OSL
X-Firefox-Spdy: h2
cdn.cookielaw.org/logos/c7968fb5-dd42-4c76-8f79-3e5198bd1303/d3e7cf29-7e83-4962-a872-95c165199ee4/ea36c0ca-f180-4005-b299-5ed53c1949f1/axs-blue.png
200 OK 2.2 kB URL GET HTTP/2 cdn.cookielaw.org/logos/c7968fb5-dd42-4c76-8f79-3e5198bd1303/d3e7cf29-7e83-4962-a872-95c165199ee4/ea36c0ca-f180-4005-b299-5ed53c1949f1/axs-blue.png
IP
Requested by https://www.axs.com/events/516600/real-estate-tickets/promos/687630?skin=trumankc
Certificate IssuerCloudflare, Inc.
Subjectcookielaw.org
Fingerprint72:BB:48:60:EB:F2:A2:EB:51:29:51:1A:B9:2A:85:30:97:3D:9A:2E
ValiditySat, 01 Apr 2023 00:00:00 GMT - Sun, 31 Mar 2024 23:59:59 GMT
File type PNG image data, 120 x 53, 8-bit/color RGBA, non-interlaced\012- data
Hash 22868eeba51de24a365759571ee8f3b1
6b1100c7d32962601ead284c80606288dc832ae6
c2037564c86090deaf379430c49385fd930ca150f85a9767eecc52176fac911f
GET /logos/c7968fb5-dd42-4c76-8f79-3e5198bd1303/d3e7cf29-7e83-4962-a872-95c165199ee4/ea36c0ca-f180-4005-b299-5ed53c1949f1/axs-blue.png HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.axs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 30 Nov 2023 17:21:46 GMT
content-type: image/png
content-length: 2233
content-md5: IoaO66Ud4ko2V1lXHujzsQ==
last-modified: Wed, 23 Aug 2023 23:41:13 GMT
etag: 0x8DBA4326FDCE67A
x-ms-request-id: 710b02e8-c01e-001f-1fb5-0c8a87000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=86400
cf-cache-status: HIT
age: 53338
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 82e4c4c9ae3a1c0a-OSL
X-Firefox-Spdy: h2
s.axs.com/whatfix/Fan-Account/embed/embed.nocache.js
200 OK 3.6 kB URL GET HTTP/2 s.axs.com/whatfix/Fan-Account/embed/embed.nocache.js
IP
Requested by https://www.axs.com/events/516600/real-estate-tickets/promos/687630?skin=trumankc
Certificate IssuerAmazon
Subject*.axs.com
FingerprintA3:B2:AA:EA:EB:FD:68:3F:3D:3B:49:29:4F:98:BA:DB:D5:B4:14:65
ValidityTue, 04 Jul 2023 00:00:00 GMT - Thu, 01 Aug 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1774)
Hash 4d21bd54048428e82efe709c85898ea8
50ac593de3696629bbc15e28368b6f55ce9a54c9
d3790fce0dce4572d77b8e9674262677a4d9a8a6317e0d71f246a5a1c6207e1a
GET /whatfix/Fan-Account/embed/embed.nocache.js HTTP/1.1
Host: s.axs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.axs.com/events/516600/real-estate-tickets/promos/687630?skin=trumankc
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=iplkbd0pteu9d5ita6cs5ici65; axs_geo_static_v1=NO%3A%3AOslo%3A%3A%3A59.95500%3A10.85900%3A%3A; axs_geo_v1=US%3ACA%3ALos+Angeles%3A%3A%3A34.05%3A-118.24%3AAmerica%2FLos_Angeles%3A1; preferred_locale=en-US; __cf_bm=2kAvX3QH_Rw3t1r5wFl5._y9Rl0OS5v5Rm6jYVTgROU-1701364903-0-ASw6YOj1XC79VHEljnFMfAiTuuzstwWhL0CTkK7WjHizWm0nLbxtm/kLZMTr10xzY5KLrlLbaR1U/V4FTxFS8vs=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/javascript
last-modified: Tue, 23 May 2023 00:22:54 GMT
x-amz-server-side-encryption: AES256
server: AmazonS3
content-encoding: gzip
date: Thu, 30 Nov 2023 01:12:45 GMT
etag: W/"4d21bd54048428e82efe709c85898ea8"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 10ba4f180c8b00c38f956300d7b2f4c8.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN1-C1
x-amz-cf-id: gtuJBoYrsMfHFdtGdd04TLFJClK8UL_4evy987d6NAh24rs76_AGWw==
age: 58477
X-Firefox-Spdy: h2
prod-satisfilabs-resources-gcs.satis.fi/ClientAssets/ThemeFiles/popuptheme-3329.css?v=e0e6afbd-6c07-4bfa-be7a-990e571c977f
200 OK 1.9 kB URL GET HTTP/3 prod-satisfilabs-resources-gcs.satis.fi/ClientAssets/ThemeFiles/popuptheme-3329.css?v=e0e6afbd-6c07-4bfa-be7a-990e571c977f
IP
Requested by https://www.axs.com/events/516600/real-estate-tickets/promos/687630?skin=trumankc
Certificate IssuerSectigo Limited
Subject*.satis.fi
FingerprintF1:5D:2E:B7:58:F9:66:43:19:23:41:24:92:A8:2C:65:55:03:40:34
ValidityTue, 17 Oct 2023 00:00:00 GMT - Fri, 25 Oct 2024 23:59:59 GMT
File type ASCII text, with CRLF line terminators
Hash cd069e64d04a9c82d88dc070f73c671e
6176e5e902987cc84dc501322a1e9fcae3ccf476
c7bb6f9a8a74c6c2e054e1460e5bb1c9c8ff2648487888ef91f9eb9463737f3e
GET /ClientAssets/ThemeFiles/popuptheme-3329.css?v=e0e6afbd-6c07-4bfa-be7a-990e571c977f HTTP/1.1
Host: prod-satisfilabs-resources-gcs.satis.fi
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.axs.com
DNT: 1
Connection: keep-alive
Referer: https://www.axs.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
x-guploader-uploadid: ABPtcPpn6RSILOXbJ2qlqAO9PkzabcrvOo9zoVuF7FbxjqQLlG91TZZFCncVpQnfNowpYxGg6h5eybuOVZ7fb5j5qwTYThsDDt9H
x-goog-generation: 1651595392194828
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 1885
x-goog-hash: crc32c=hWtw8A==, md5=zQaeZNBKnILYjcBw9zxnHg==
x-goog-storage-class: STANDARD
accept-ranges: bytes
content-length: 1885
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Thu, 30 Nov 2023 17:21:46 GMT
last-modified: Tue, 03 May 2022 16:29:52 GMT
etag: "cd069e64d04a9c82d88dc070f73c671e"
content-type: text/css
age: 0
cache-control: public,max-age=0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
static.adsafeprotected.com/skeleton.js?adslot=vmylfp_728x90_
200 OK 17 B URL GET HTTP/2 static.adsafeprotected.com/skeleton.js?adslot=vmylfp_728x90_
IP
Requested by https://www.axs.com/events/516600/real-estate-tickets/promos/687630?skin=trumankc
Certificate IssuerAmazon
Subjectstatic.adsafeprotected.com
Fingerprint86:D6:B2:7D:06:93:06:38:5A:17:93:02:3A:93:02:1C:3D:75:21:5F
ValidityFri, 07 Jul 2023 00:00:00 GMT - Sun, 04 Aug 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 53fab767ecbd3bf07990b10246befbd4
49044085bb137d175d261b5fb9617c6f0f302c49
bdeed1e1c0751610c8f3dc2a5c78c93f841c366b36a7f7a54f5e6752c2656c05
GET /skeleton.js?adslot=vmylfp_728x90_ HTTP/1.1
Host: static.adsafeprotected.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.axs.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
content-length: 17
date: Wed, 27 Sep 2023 03:21:19 GMT
x-amz-replication-status: COMPLETED
last-modified: Mon, 17 Aug 2020 23:54:35 GMT
etag: "53fab767ecbd3bf07990b10246befbd4"
x-amz-server-side-encryption: AES256
cache-control: max-age=315360000
x-amz-version-id: nylqTweorRThFHMBJSrf_fHcWx3KVKN3
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 dbfaae0db03f11cf713bbcbdb25be4a2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: ioiH-5imZiaTzBkByQt_daYkGbG6v-2Ucy2rwT91yuFPbNJm7Ct4Dg==
age: 5580028
X-Firefox-Spdy: h2
www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-D0FS4F37VT&cid=892993240.1701364911>m=45je3b60v9108023832&aip=1&dma=1&dma_cps=sypham&gcd=11l1l1l1l1&z=1027429389
200 OK 42 B URL GET HTTP/2 www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-D0FS4F37VT&cid=892993240.1701364911>m=45je3b60v9108023832&aip=1&dma=1&dma_cps=sypham&gcd=11l1l1l1l1&z=1027429389
IP
Requested by https://www.axs.com/events/516600/real-estate-tickets/promos/687630?skin=trumankc
Certificate IssuerGoogle Trust Services LLC
Subject*.google.no
Fingerprint6E:E4:BC:4A:67:5E:46:6A:B3:E4:CA:61:A7:C0:97:AB:14:F0:34:32
ValidityMon, 23 Oct 2023 11:27:27 GMT - Mon, 15 Jan 2024 11:27:26 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-D0FS4F37VT&cid=892993240.1701364911>m=45je3b60v9108023832&aip=1&dma=1&dma_cps=sypham&gcd=11l1l1l1l1&z=1027429389 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.axs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 30 Nov 2023 17:21:46 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
aegpresents.us-5.evergage.com/pr?.top=605&item=%7B%22type%22%3A%22Product%22%2C%22_id%22%3A%22516600%22%2C%22categories%22%3A%5B%7B%22type%22%3A%22c%22%2C%22_id%22%3A%22MUSIC%7CINDIE-EMO%22%7D%5D%2C%22dimensions%22%3A%7B%22ParentCategory%22%3A%5B%22MUSIC%7CINDIE-EMO%22%5D%2C%22Subcategory%22%3A%5B%22MUSIC%7CINDIE-EMO%22%5D%2C%22ArtistId%22%3A%5B%22111983%22%5D%2C%22VenueId%22%3A%5B%22126367%22%5D%7D%7D&action=View%20EDP&.tt=585&.ttdns=80&.dt=2697&.lt=3319&.btdns=14&.bv=16&_ak=aegpresents&_ds=prod&.scv=59&channel=Web&_r=650432&.anonId=24eb6be39babf58b&_anon=true
204 No Content 0 B URL POST HTTP/2 aegpresents.us-5.evergage.com/pr?.top=605&item=%7B%22type%22%3A%22Product%22%2C%22_id%22%3A%22516600%22%2C%22categories%22%3A%5B%7B%22type%22%3A%22c%22%2C%22_id%22%3A%22MUSIC%7CINDIE-EMO%22%7D%5D%2C%22dimensions%22%3A%7B%22ParentCategory%22%3A%5B%22MUSIC%7CINDIE-EMO%22%5D%2C%22Subcategory%22%3A%5B%22MUSIC%7CINDIE-EMO%22%5D%2C%22ArtistId%22%3A%5B%22111983%22%5D%2C%22VenueId%22%3A%5B%22126367%22%5D%7D%7D&action=View%20EDP&.tt=585&.ttdns=80&.dt=2697&.lt=3319&.btdns=14&.bv=16&_ak=aegpresents&_ds=prod&.scv=59&channel=Web&_r=650432&.anonId=24eb6be39babf58b&_anon=true
IP
Requested by https://www.axs.com/events/516600/real-estate-tickets/promos/687630?skin=trumankc
Certificate IssuerAmazon
Subject*.us-5.evergage.com
Fingerprint9D:F2:ED:06:53:2A:94:7B:0C:76:E6:C0:0A:A2:08:22:94:83:7A:3C
ValiditySat, 20 May 2023 00:00:00 GMT - Mon, 17 Jun 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /pr?.top=605&item=%7B%22type%22%3A%22Product%22%2C%22_id%22%3A%22516600%22%2C%22categories%22%3A%5B%7B%22type%22%3A%22c%22%2C%22_id%22%3A%22MUSIC%7CINDIE-EMO%22%7D%5D%2C%22dimensions%22%3A%7B%22ParentCategory%22%3A%5B%22MUSIC%7CINDIE-EMO%22%5D%2C%22Subcategory%22%3A%5B%22MUSIC%7CINDIE-EMO%22%5D%2C%22ArtistId%22%3A%5B%22111983%22%5D%2C%22VenueId%22%3A%5B%22126367%22%5D%7D%7D&action=View%20EDP&.tt=585&.ttdns=80&.dt=2697&.lt=3319&.btdns=14&.bv=16&_ak=aegpresents&_ds=prod&.scv=59&channel=Web&_r=650432&.anonId=24eb6be39babf58b&_anon=true HTTP/1.1
Host: aegpresents.us-5.evergage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 0
Origin: https://www.axs.com
DNT: 1
Connection: keep-alive
Referer: https://www.axs.com/
Cookie: AWSALBTGCORS=qHFX/8op8AlXVcaPdWkkt6YyM2PBju7hExeEhJAlnfnyOtLGhRtVTZn9oOdAZXKXwJ18t83+Jd6SlzKsxIL+c4SGTa56kCKSzMszUOuQXzVuyRjPn6C0C50cYFePdoT+HRJ7PW0saZuGlBlinxQ4s66MFYehOzPjZPl9WUwdTxmIMLPdPec=
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Thu, 30 Nov 2023 17:21:46 GMT
set-cookie: AWSALBTG=1gn+68ekKxkArSDOR1P14afkR+BeOi+hpsniqQrLLQwB7S2emTB2UFRaHLwlzTqcuS9gNX9dWgqvzeXTG0MbXbnUGjJYasVnpp65cW9a1E2b/ZWwmcTCqtLlvNlNw3wTHAxuOkK9lqlVfhB7zk/kJDsYGYSnw7QjVRApvCHNbHsNdOZG9fA=; Expires=Thu, 07 Dec 2023 17:21:46 GMT; Path=/
AWSALBTGCORS=1gn+68ekKxkArSDOR1P14afkR+BeOi+hpsniqQrLLQwB7S2emTB2UFRaHLwlzTqcuS9gNX9dWgqvzeXTG0MbXbnUGjJYasVnpp65cW9a1E2b/ZWwmcTCqtLlvNlNw3wTHAxuOkK9lqlVfhB7zk/kJDsYGYSnw7QjVRApvCHNbHsNdOZG9fA=; Expires=Thu, 07 Dec 2023 17:21:46 GMT; Path=/; SameSite=None; Secure
access-control-allow-origin: https://www.axs.com
timing-allow-origin: *
x-content-type-options: nosniff
X-Firefox-Spdy: h2
merequartz.com/aadetect/px.gif?ch=2&rn=13158
200 OK 42 B URL GET HTTP/2 merequartz.com/aadetect/px.gif?ch=2&rn=13158
IP
Requested by https://www.axs.com/events/516600/real-estate-tickets/promos/687630?skin=trumankc
Certificate IssuerLet's Encrypt
Subjectmerequartz.com
FingerprintE6:C3:24:0C:0A:13:8B:89:4B:54:2C:8D:8C:F2:73:A3:2C:29:5A:89
ValidityThu, 21 Sep 2023 20:06:45 GMT - Wed, 20 Dec 2023 20:06:44 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /aadetect/px.gif?ch=2&rn=13158 HTTP/1.1
Host: merequartz.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.axs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-length: 42
content-type: image/gif
last-modified: Wed, 15 Nov 2023 17:59:13 GMT
strict-transport-security: max-age=15724800; preload
timing-allow-origin: *
vary: Accept-Encoding
x-buildname: hoothoot
x-buildnumber: 1072352451
x-datacenter: gce-europe-west1
x-hostname: fen-hoothoot-europe-west1-test-cmwb
date: Thu, 30 Nov 2023 17:21:47 GMT
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
prod-satisfilabs-resources-gcs.satis.fi/ClientAssets/Fonts/Roboto-Regular.ttf
200 OK 163 kB URL GET HTTP/3 prod-satisfilabs-resources-gcs.satis.fi/ClientAssets/Fonts/Roboto-Regular.ttf
IP
Requested by https://www.axs.com/events/516600/real-estate-tickets/promos/687630?skin=trumankc
Certificate IssuerSectigo Limited
Subject*.satis.fi
FingerprintF1:5D:2E:B7:58:F9:66:43:19:23:41:24:92:A8:2C:65:55:03:40:34
ValidityTue, 17 Oct 2023 00:00:00 GMT - Fri, 25 Oct 2024 23:59:59 GMT
File type TrueType Font data, 18 tables, 1st "GDEF", 13 names, Microsoft, language 0x409, Copyright 2011 Google Inc. All Rights Reserved.RobotoRegularVersion 2.001101; 2014Roboto-Regular\012- data
Size 163 kB (162876 bytes)
Hash ac3f799d5bbaf5196fab15ab8de8431c
cb0cb91a31f43293bd7042ddab945ce161c29d3d
f0e5a21bf5c95e4c1bce2be98a3656ebcc6d42a21f41c4e3ebf69dd815702e54
GET /ClientAssets/Fonts/Roboto-Regular.ttf HTTP/1.1
Host: prod-satisfilabs-resources-gcs.satis.fi
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.axs.com
DNT: 1
Connection: keep-alive
Referer: https://chat.satis.fi/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
x-guploader-uploadid: ABPtcPoZSdtHAmvBE30sVEWNf4J1P7oYZLW8IGpPnj0Yz24TqBjFOrXYrQt18_2pEv0vZCSmwCAZwPssABzZGCt-gPtqPgQZ5JKy
x-goog-generation: 1651595400294574
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 162876
x-goog-hash: crc32c=tGTglg==, md5=rD95nVu69RlvqxWrjehDHA==
x-goog-storage-class: STANDARD
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Thu, 30 Nov 2023 17:21:47 GMT
last-modified: Tue, 03 May 2022 16:30:00 GMT
etag: "ac3f799d5bbaf5196fab15ab8de8431c"
content-type: binary/octet-stream
content-length: 162876
age: 0
cache-control: public,max-age=0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
whatfix.com/service/event/collect/v2/960e7e50-acae-11e9-9e6e-04013d24cd02
200 OK 0 B URL POST HTTP/2 whatfix.com/service/event/collect/v2/960e7e50-acae-11e9-9e6e-04013d24cd02
IP
Requested by https://www.axs.com/events/516600/real-estate-tickets/promos/687630?skin=trumankc
Certificate IssuerGoDaddy.com, Inc.
Subject*.whatfix.com
FingerprintC4:34:4B:FD:14:9C:CA:FD:75:CF:AC:9D:2C:45:B2:5E:7C:75:2C:42
ValidityMon, 30 Oct 2023 09:39:32 GMT - Sat, 16 Nov 2024 14:29:03 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /service/event/collect/v2/960e7e50-acae-11e9-9e6e-04013d24cd02 HTTP/1.1
Host: whatfix.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://www.axs.com/
Origin: https://www.axs.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Nov 2023 17:21:47 GMT
content-length: 0
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-origin: *
access-control-allow-methods: POST, POST, GET, OPTIONS, DELETE, PUT
access-control-allow-headers: content-type, x-requested-with, Content-Type, origin, authorization, accept, client-security-token, x-whatfix-integration-key, x-whatfix-user, x-whatfix-event-sink
access-control-max-age: 1800
allow: GET, HEAD, POST, PUT, DELETE, OPTIONS, PATCH
strict-transport-security: max-age=31536000; includeSubDomains
referrer-policy: same-origin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
pragma: no-cache
cache-control: no-cache,no-store
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 82e4c4ceee41b4ed-OSL
X-Firefox-Spdy: h2
whatfix.com/service/event/collect/v2/960e7e50-acae-11e9-9e6e-04013d24cd02
200 OK 0 B URL POST HTTP/2 whatfix.com/service/event/collect/v2/960e7e50-acae-11e9-9e6e-04013d24cd02
IP
Requested by https://www.axs.com/events/516600/real-estate-tickets/promos/687630?skin=trumankc
Certificate IssuerGoDaddy.com, Inc.
Subject*.whatfix.com
FingerprintC4:34:4B:FD:14:9C:CA:FD:75:CF:AC:9D:2C:45:B2:5E:7C:75:2C:42
ValidityMon, 30 Oct 2023 09:39:32 GMT - Sat, 16 Nov 2024 14:29:03 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /service/event/collect/v2/960e7e50-acae-11e9-9e6e-04013d24cd02 HTTP/1.1
Host: whatfix.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 1694
Origin: https://www.axs.com
DNT: 1
Connection: keep-alive
Referer: https://www.axs.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 30 Nov 2023 17:21:47 GMT
content-length: 0
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
referrer-policy: same-origin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-methods: POST, GET, OPTIONS, DELETE, PUT
access-control-allow-headers: x-requested-with, Content-Type, origin, authorization, accept, client-security-token, x-whatfix-integration-key, x-whatfix-user, x-whatfix-event-sink
pragma: no-cache
cache-control: no-cache,no-store
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 82e4c4cf9ecdb4ed-OSL
X-Firefox-Spdy: h2
internalsink.com/post/8d639ed0585961f/e65bc5dc60bd9bbc58de3b6a6bce4f6272a82
200 OK 303 B URL POST HTTP/2 internalsink.com/post/8d639ed0585961f/e65bc5dc60bd9bbc58de3b6a6bce4f6272a82
IP
Requested by https://www.axs.com/events/516600/real-estate-tickets/promos/687630?skin=trumankc
Certificate IssuerLet's Encrypt
Subjectinternalsink.com
Fingerprint33:3D:63:BE:7A:B1:D9:62:D3:7F:F1:7B:C1:34:31:E7:FC:A0:7C:63
ValidityMon, 20 Nov 2023 00:47:27 GMT - Sun, 18 Feb 2024 00:47:26 GMT
File type JSON data\012- , ASCII text, with very long lines (302)
Hash 1cf632661bfdde573021b12cc706e4e5
dadd1b1fb43212b7483383b00109d146c1db80a7
15b37e10c775f91f80fd9aad660ba018287d52bbefb8a5131cc5fb7a6e2cf42d
POST /post/8d639ed0585961f/e65bc5dc60bd9bbc58de3b6a6bce4f6272a82 HTTP/1.1
Host: internalsink.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 416
Origin: https://www.axs.com
DNT: 1
Connection: keep-alive
Referer: https://www.axs.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Cookie
access-control-allow-methods: POST, OPTIONS
access-control-allow-origin: https://www.axs.com
cache-control: no-cache, no-store, must-revalidate
content-type: application/json; charset=utf-8
expires: Thu, 30 Nov 2023 17:21:46 GMT
strict-transport-security: max-age=15724800; preload
timing-allow-origin: *
vary: Accept-Encoding, Origin
x-buildname: hoothoot
x-buildnumber: 1072352451
x-datacenter: gce-europe-west1
x-hostname: fen-hoothoot-europe-west1-test-cmwb
date: Thu, 30 Nov 2023 17:21:47 GMT
content-length: 303
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
internalsink.com/869342afdae596818d1b0c157a6f6a8b386337f743ca76618af0
200 OK 3 B URL POST HTTP/2 internalsink.com/869342afdae596818d1b0c157a6f6a8b386337f743ca76618af0
IP
Requested by https://www.axs.com/events/516600/real-estate-tickets/promos/687630?skin=trumankc
Certificate IssuerLet's Encrypt
Subjectinternalsink.com
Fingerprint33:3D:63:BE:7A:B1:D9:62:D3:7F:F1:7B:C1:34:31:E7:FC:A0:7C:63
ValidityMon, 20 Nov 2023 00:47:27 GMT - Sun, 18 Feb 2024 00:47:26 GMT
File type JSON data\012- , ASCII text
Hash 8a80554c91d9fca8acb82f023de02f11
5f36b2ea290645ee34d943220a14b54ee5ea5be5
ca3d163bab055381827226140568f3bef7eaac187cebd76878e0b63e9e442356
POST /869342afdae596818d1b0c157a6f6a8b386337f743ca76618af0 HTTP/1.1
Host: internalsink.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 356
Origin: https://www.axs.com
DNT: 1
Connection: keep-alive
Referer: https://www.axs.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Cookie
access-control-allow-methods: POST, OPTIONS
access-control-allow-origin: https://www.axs.com
cache-control: no-cache, no-store, must-revalidate
content-type: application/json; charset=utf-8
expires: Thu, 30 Nov 2023 17:21:46 GMT
strict-transport-security: max-age=15724800; preload
timing-allow-origin: *
vary: Accept-Encoding, Origin
x-buildname: hoothoot
x-buildnumber: 1072352451
x-datacenter: gce-europe-west1
x-hostname: fen-hoothoot-europe-west1-test-cmwb
date: Thu, 30 Nov 2023 17:21:47 GMT
content-length: 3
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
get.s-onetag.com/d5514583-c747-4df0-89fe-fd177ed26cda/tag.min.js
200 OK 16 kB URL GET HTTP/2 get.s-onetag.com/d5514583-c747-4df0-89fe-fd177ed26cda/tag.min.js
IP
Requested by https://www.axs.com/events/516600/real-estate-tickets/promos/687630?skin=trumankc
Certificate IssuerAmazon
Subject*.s-onetag.com
Fingerprint16:E8:8E:F6:16:D5:F6:4C:D2:F5:A0:A6:70:23:FF:E3:EA:22:DE:E1
ValiditySat, 04 Nov 2023 00:00:00 GMT - Sun, 01 Dec 2024 23:59:59 GMT
File type gzip compressed data, from Unix\012- data
Hash d9ebcdd43c26232110a246936d3f5f5e
71372c6f163561798635e60bf31f962186cf4b57
f2a7e2e3dd35fc970e223a66bd4431b3ce7fc5b13564ff6b25e848a6fc46d2cc
GET /d5514583-c747-4df0-89fe-fd177ed26cda/tag.min.js HTTP/1.1
Host: get.s-onetag.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.axs.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/javascript
last-modified: Tue, 01 Dec 2020 22:12:43 GMT
x-amz-version-id: dqKxIUi6r_raI5NEZ56qiNJg_j4XulL2
server: AmazonS3
content-encoding: gzip
date: Thu, 30 Nov 2023 05:47:31 GMT
cache-control: max-age=86400
etag: W/"6e0beeabbbd97ffaaf6198bffa9ed8cd"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: D_1FXWkqtHoPdlc4jeGZy_edKkB5LF1yzKG3kBO1jbjleHajXLQKNg==
age: 41654
X-Firefox-Spdy: h2
signal-beacon.s-onetag.com/beacon.min.js
200 OK 13 kB URL GET HTTP/2 signal-beacon.s-onetag.com/beacon.min.js
IP
Requested by https://www.axs.com/events/516600/real-estate-tickets/promos/687630?skin=trumankc
Certificate IssuerAmazon
Subject*.s-onetag.com
Fingerprint16:E8:8E:F6:16:D5:F6:4C:D2:F5:A0:A6:70:23:FF:E3:EA:22:DE:E1
ValiditySat, 04 Nov 2023 00:00:00 GMT - Sun, 01 Dec 2024 23:59:59 GMT
File type gzip compressed data, from Unix\012- data
Hash 2b18bbc8635e9f136cc52be2e37a6ae3
b4e5613b94d7ed27e9ff0a850bdede6650634044
f8eb81f6ad8537d3d52c95baa52713024a55c130a711e9e3ea4c986ca40bc48b
GET /beacon.min.js HTTP/1.1
Host: signal-beacon.s-onetag.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.axs.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
last-modified: Tue, 13 Jun 2023 14:58:24 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: bto3eb0o1YxjKQVMPWidTjdqvOBrBN1F
server: AmazonS3
content-encoding: gzip
date: Thu, 30 Nov 2023 06:07:51 GMT
cache-control: max-age=86400
etag: W/"565eb88b90415391668a5cb7cfb4557a"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 4838101f07e2dfcd1db4abc88031f082.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN56-P1
x-amz-cf-id: cPoNbqPo5BgadwIbr9jex4wOM8h5xhPiLnTWlnWATOarjKHr7OnJdw==
age: 40434
X-Firefox-Spdy: h2
ciscobinary.openh264.org/openh264-linux64-2e1774ab6dc6c43debb0b5b628bdf122a391d521.zip
512 kB URL ciscobinary.openh264.org/openh264-linux64-2e1774ab6dc6c43debb0b5b628bdf122a391d521.zip
IP
ASN #20940 Akamai International B.V.
File type Zip archive data, at least v2.0 to extract, compression method=deflate\012- data
Size 512 kB (511815 bytes)
Hash 152eda253e242e18443ef3282495bc7c
ff0fa85565f21ec4931baad4573b4c0bd08c4019
8e03090fee16f6e0ee2e436af8e51d0c3deed6d9f0db80dec048e668fc009a48
GET /openh264-linux64-2e1774ab6dc6c43debb0b5b628bdf122a391d521.zip HTTP/1.1
Host: ciscobinary.openh264.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 200 OK
Last-Modified: Thu, 16 Nov 2023 07:38:15 GMT
ETag: 152eda253e242e18443ef3282495bc7c
Content-Length: 511815
Accept-Ranges: bytes
X-Timestamp: 1700120294.87662
Content-Type: application/zip
X-Trans-Id: tx35e1afa589ba4bd9a93ea-006556c567dfw1
Cache-Control: public, max-age=246215
Expires: Sun, 03 Dec 2023 13:45:31 GMT
Date: Thu, 30 Nov 2023 17:21:56 GMT
Connection: keep-alive
signal-metrics-collector-beta.s-onetag.com/metrics
0 B URL signal-metrics-collector-beta.s-onetag.com/metrics
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /metrics HTTP/1.1
Host: signal-metrics-collector-beta.s-onetag.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 421
Origin: https://www.axs.com
DNT: 1
Connection: keep-alive
Referer: https://www.axs.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 30 Nov 2023 17:21:56 GMT
content-length: 0
vary: Origin
access-control-allow-origin: *
X-Firefox-Spdy: h2
connect-metrics-collector.s-onetag.com/metrics
0 B URL connect-metrics-collector.s-onetag.com/metrics
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /metrics HTTP/1.1
Host: connect-metrics-collector.s-onetag.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 269
Origin: https://www.axs.com
DNT: 1
Connection: keep-alive
Referer: https://www.axs.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 30 Nov 2023 17:21:56 GMT
content-length: 0
vary: Origin
access-control-allow-origin: *
X-Firefox-Spdy: h2
signal-metrics-collector-beta.s-onetag.com/metrics
0 B URL signal-metrics-collector-beta.s-onetag.com/metrics
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /metrics HTTP/1.1
Host: signal-metrics-collector-beta.s-onetag.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 419
Origin: https://www.axs.com
DNT: 1
Connection: keep-alive
Referer: https://www.axs.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 30 Nov 2023 17:21:56 GMT
content-length: 0
vary: Origin
access-control-allow-origin: *
X-Firefox-Spdy: h2
prod-satisfilabs-resources-gcs.satis.fi/ClientAssets/PopupConfigs/PopupConfig-7405.js?v=d81a6b67-277e-4991-a89e-d2ca76a004a5
200 OK 1.3 kB URL GET HTTP/3 prod-satisfilabs-resources-gcs.satis.fi/ClientAssets/PopupConfigs/PopupConfig-7405.js?v=d81a6b67-277e-4991-a89e-d2ca76a004a5
IP
Requested by https://www.axs.com/events/516600/real-estate-tickets/promos/687630?skin=trumankc
Certificate IssuerSectigo Limited
Subject*.satis.fi
FingerprintF1:5D:2E:B7:58:F9:66:43:19:23:41:24:92:A8:2C:65:55:03:40:34
ValidityTue, 17 Oct 2023 00:00:00 GMT - Fri, 25 Oct 2024 23:59:59 GMT
File type ASCII text, with very long lines (1302), with no line terminators
Hash c50f059fc6282a2ceb89e21a8f5cf909
bedae20861f64bcbfe09c60956a06daca8b9301d
b6da64a671b34044ba0bb2caef03472e1e523ed6fdf6aec7ab6f7ffc65d7ee9d
GET /ClientAssets/PopupConfigs/PopupConfig-7405.js?v=d81a6b67-277e-4991-a89e-d2ca76a004a5 HTTP/1.1
Host: prod-satisfilabs-resources-gcs.satis.fi
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.axs.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
x-guploader-uploadid: ABPtcPrNwuz4MH8YBDIouuE2GjOHg0iz205MePCzynLB2DLGLBnsSY7WfVksw2mxlUY2w0MtGST-rvpiLSi9DEmbaHifyedd6JZE
x-goog-generation: 1692106998232067
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 1270
x-goog-hash: crc32c=jj+tOA==, md5=Nucv5GEi0H0IIEHkUrrItQ==
x-goog-storage-class: STANDARD
accept-ranges: bytes
content-length: 1270
access-control-allow-origin: *
server: UploadServer
date: Thu, 30 Nov 2023 17:21:46 GMT
last-modified: Tue, 15 Aug 2023 13:43:18 GMT
etag: "36e72fe46122d07d082041e452bac8b5"
content-type: application/javascript
age: 0
cache-control: public,max-age=0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
cdn.cookielaw.org/scripttemplates/202308.1.0/assets/otCommonStyles.css
200 OK 22 kB URL GET HTTP/2 cdn.cookielaw.org/scripttemplates/202308.1.0/assets/otCommonStyles.css
IP
Requested by https://www.axs.com/events/516600/real-estate-tickets/promos/687630?skin=trumankc
Certificate IssuerCloudflare, Inc.
Subjectcookielaw.org
Fingerprint72:BB:48:60:EB:F2:A2:EB:51:29:51:1A:B9:2A:85:30:97:3D:9A:2E
ValiditySat, 01 Apr 2023 00:00:00 GMT - Sun, 31 Mar 2024 23:59:59 GMT
File type ASCII text, with very long lines (21778), with no line terminators
Hash 73bc4067d312180a1b19a4d883f42d6a
ad328a9a572fbea43f295e7769835ff08f6ff1fd
d3f7b0ec4de079928a999641e781e80f33597a392a561bc460276dfb4efb6eec
GET /scripttemplates/202308.1.0/assets/otCommonStyles.css HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.axs.com
DNT: 1
Connection: keep-alive
Referer: https://www.axs.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Nov 2023 17:21:46 GMT
content-type: text/css
content-md5: c7xAZ9MSGAobGaTYg/Qtag==
last-modified: Wed, 25 Oct 2023 03:55:54 GMT
x-ms-request-id: f042e277-001e-004d-719e-0bf66f000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=86400
cf-cache-status: HIT
age: 32861
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 82e4c4c90b765689-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
www.axs.com/cdn-cgi/challenge-platform/scripts/jsd/main.js
302 Found 7.4 kB URL GET HTTP/2 www.axs.com/cdn-cgi/challenge-platform/scripts/jsd/main.js
IP
Requested by https://www.axs.com/events/516600/real-estate-tickets/promos/687630?skin=trumankc
Certificate IssuerLet's Encrypt
Subjectwww.axs.com
Fingerprint87:68:07:F1:4B:3D:46:14:AF:EA:16:57:5A:AE:C7:C3:76:2C:F5:5F
ValiditySat, 11 Nov 2023 02:56:16 GMT - Fri, 09 Feb 2024 02:56:15 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1
Host: www.axs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=iplkbd0pteu9d5ita6cs5ici65; axs_geo_static_v1=NO%3A%3AOslo%3A%3A%3A59.95500%3A10.85900%3A%3A; axs_geo_v1=US%3ACA%3ALos+Angeles%3A%3A%3A34.05%3A-118.24%3AAmerica%2FLos_Angeles%3A1; preferred_locale=en-US; device_view=full; __cf_bm=2kAvX3QH_Rw3t1r5wFl5._y9Rl0OS5v5Rm6jYVTgROU-1701364903-0-ASw6YOj1XC79VHEljnFMfAiTuuzstwWhL0CTkK7WjHizWm0nLbxtm/kLZMTr10xzY5KLrlLbaR1U/V4FTxFS8vs=; _sfid_3e99={%22anonymousId%22:%2224eb6be39babf58b%22}; _evga_82e0={%22uuid%22:%2224eb6be39babf58b%22}; AMCV_B7B972315A1341150A495EFE%40AdobeOrg=179643557%7CMCIDTS%7C19692%7CvVersion%7C5.5.0; mbox=session#c6ee0e80eb9844299dd989aec39e438a#1701366770; at_check=true
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Thu, 30 Nov 2023 17:21:45 GMT
cache-control: max-age=300, public
access-control-allow-origin: *
location: /cdn-cgi/challenge-platform/h/g/scripts/jsd/9914b343/main.js
vary: accept-encoding
strict-transport-security: max-age=15552000
x-content-type-options: nosniff
x-powered-by: AXS
x-careers: https://solutions.axs.com/careers/
server: cloudflare
cf-ray: 82e4c4c2796956c3-OSL
X-Firefox-Spdy: h2
www.axs.com/events/516600/real-estate-tickets/promos/687630?skin=trumankc
200 OK 188 kB URL User Request GET HTTP/2 www.axs.com/events/516600/real-estate-tickets/promos/687630?skin=trumankc
IP
Certificate IssuerLet's Encrypt
Subjectwww.axs.com
Fingerprint87:68:07:F1:4B:3D:46:14:AF:EA:16:57:5A:AE:C7:C3:76:2C:F5:5F
ValiditySat, 11 Nov 2023 02:56:16 GMT - Fri, 09 Feb 2024 02:56:15 GMT
Size 188 kB (187852 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /events/516600/real-estate-tickets/promos/687630?skin=trumankc HTTP/1.1
Host: www.axs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fanlink.to/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Nov 2023 17:21:43 GMT
content-type: text/html; charset=UTF-8
cache-control: no-cache
strict-transport-security: max-age=15552000
x-frame-options: sameorigin
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-permitted-cross-domain-policies: none
referrer-policy: no-referrer-when-downgrade
cf-cache-status: DYNAMIC
set-cookie: PHPSESSID=iplkbd0pteu9d5ita6cs5ici65; path=/; domain=.axs.com; secure
axs_geo_static_v1=NO%3A%3AOslo%3A%3A%3A59.95500%3A10.85900%3A%3A; expires=Thu, 30-Nov-2023 21:21:43 GMT; Max-Age=14400; path=/; domain=.axs.com
axs_geo_v1=US%3ACA%3ALos+Angeles%3A%3A%3A34.05%3A-118.24%3AAmerica%2FLos_Angeles%3A1; expires=Thu, 30-Nov-2023 21:21:43 GMT; Max-Age=14400; path=/; domain=.axs.com
preferred_locale=en-US; path=/; domain=.axs.com
PHPSESSID=iplkbd0pteu9d5ita6cs5ici65; path=/; domain=.axs.com; secure
device_view=full; expires=Sat, 30-Dec-2023 17:21:43 GMT; Max-Age=2592000; path=/; secure; HttpOnly
__cf_bm=2kAvX3QH_Rw3t1r5wFl5._y9Rl0OS5v5Rm6jYVTgROU-1701364903-0-ASw6YOj1XC79VHEljnFMfAiTuuzstwWhL0CTkK7WjHizWm0nLbxtm/kLZMTr10xzY5KLrlLbaR1U/V4FTxFS8vs=; path=/; expires=Thu, 30-Nov-23 17:51:43 GMT; domain=.axs.com; HttpOnly; Secure; SameSite=None
x-powered-by: AXS
x-careers: https://solutions.axs.com/careers/
server: cloudflare
cf-ray: 82e4c4b1ee9656c3-OSL
content-encoding: br
X-Firefox-Spdy: h2
s.axs.com/whatfix/Fan-Account/lib/ga/analytics.js
200 OK 35 kB URL GET HTTP/2 s.axs.com/whatfix/Fan-Account/lib/ga/analytics.js
IP
Requested by https://www.axs.com/events/516600/real-estate-tickets/promos/687630?skin=trumankc
Certificate IssuerAmazon
Subject*.axs.com
FingerprintA3:B2:AA:EA:EB:FD:68:3F:3D:3B:49:29:4F:98:BA:DB:D5:B4:14:65
ValidityTue, 04 Jul 2023 00:00:00 GMT - Thu, 01 Aug 2024 23:59:59 GMT
File type ASCII text, with very long lines (1837)
Hash 64615acd5da6e5acbd0a54b34174aefe
8db13cf86fa09d44b60d8e3e480da1646631b00e
3fab1c883847e4b5a02f3749a9f4d9eab15cd4765873d3b2904a1a4c8755fba3
GET /whatfix/Fan-Account/lib/ga/analytics.js HTTP/1.1
Host: s.axs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.axs.com/events/516600/real-estate-tickets/promos/687630?skin=trumankc
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=iplkbd0pteu9d5ita6cs5ici65; axs_geo_static_v1=NO%3A%3AOslo%3A%3A%3A59.95500%3A10.85900%3A%3A; axs_geo_v1=US%3ACA%3ALos+Angeles%3A%3A%3A34.05%3A-118.24%3AAmerica%2FLos_Angeles%3A1; preferred_locale=en-US; __cf_bm=2kAvX3QH_Rw3t1r5wFl5._y9Rl0OS5v5Rm6jYVTgROU-1701364903-0-ASw6YOj1XC79VHEljnFMfAiTuuzstwWhL0CTkK7WjHizWm0nLbxtm/kLZMTr10xzY5KLrlLbaR1U/V4FTxFS8vs=; _sfid_3e99={%22anonymousId%22:%2224eb6be39babf58b%22%2C%22consents%22:[]}; _evga_82e0={%22uuid%22:%2224eb6be39babf58b%22}; AMCV_B7B972315A1341150A495EFE%40AdobeOrg=179643557%7CMCIDTS%7C19692%7CMCMID%7C28501962150500959361483131312528890669%7CMCOPTOUT-1701372110s%7CNONE%7CvVersion%7C5.5.0; mbox=session#c6ee0e80eb9844299dd989aec39e438a#1701366771; at_check=true; cf_clearance=92fGukB_ae0s1hfXZtEeN9TZ6eC7a6iX6S9DFmAJRiM-1701364905-0-1-730ca2d2.ea3afa48.240dfd32-0.2.1701364905; _ga_D0FS4F37VT=GS1.1.1701364910.1.0.1701364910.60.0.0; _ga=GA1.1.892993240.1701364911; AMCVS_B7B972315A1341150A495EFE%40AdobeOrg=1; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Nov+30+2023+17%3A21%3A51+GMT%2B0000+(Coordinated+Universal+Time)&version=202308.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=5388481a-7646-41be-83f0-b72d0305bfbc&interactionCount=0&landingPath=https%3A%2F%2Fwww.axs.com%2Fevents%2F516600%2Freal-estate-tickets%2Fpromos%2F687630%3Fskin%3Dtrumankc&groups=C0001%3A1%2CC0004%3A0%2CC0002%3A0%2CC0003%3A0%2CC0005%3A0; wfx_unq=qRXhgzSdh5DgQmUU
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/javascript
last-modified: Tue, 23 May 2023 00:22:55 GMT
x-amz-server-side-encryption: AES256
server: AmazonS3
content-encoding: gzip
date: Thu, 30 Nov 2023 01:12:54 GMT
etag: W/"64615acd5da6e5acbd0a54b34174aefe"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 10ba4f180c8b00c38f956300d7b2f4c8.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN1-C1
x-amz-cf-id: oV4BhA02yN1uCzOFSlHzR5fjhM3jd67e5CXp9SJWIh5nn49S-t8qqA==
age: 58464
X-Firefox-Spdy: h2
s.axs.com/whatfix/Fan-Account/embed/BD097C829E420C247502E4AFFB4CBFC1.cache.js
200 OK 2.8 MB URL GET HTTP/2 s.axs.com/whatfix/Fan-Account/embed/BD097C829E420C247502E4AFFB4CBFC1.cache.js
IP
Requested by https://www.axs.com/events/516600/real-estate-tickets/promos/687630?skin=trumankc
Certificate IssuerAmazon
Subject*.axs.com
FingerprintA3:B2:AA:EA:EB:FD:68:3F:3D:3B:49:29:4F:98:BA:DB:D5:B4:14:65
ValidityTue, 04 Jul 2023 00:00:00 GMT - Thu, 01 Aug 2024 23:59:59 GMT
Size 2.8 MB (2813422 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /whatfix/Fan-Account/embed/BD097C829E420C247502E4AFFB4CBFC1.cache.js HTTP/1.1
Host: s.axs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.axs.com/
Cookie: PHPSESSID=iplkbd0pteu9d5ita6cs5ici65; axs_geo_static_v1=NO%3A%3AOslo%3A%3A%3A59.95500%3A10.85900%3A%3A; axs_geo_v1=US%3ACA%3ALos+Angeles%3A%3A%3A34.05%3A-118.24%3AAmerica%2FLos_Angeles%3A1; preferred_locale=en-US; __cf_bm=2kAvX3QH_Rw3t1r5wFl5._y9Rl0OS5v5Rm6jYVTgROU-1701364903-0-ASw6YOj1XC79VHEljnFMfAiTuuzstwWhL0CTkK7WjHizWm0nLbxtm/kLZMTr10xzY5KLrlLbaR1U/V4FTxFS8vs=; _sfid_3e99={%22anonymousId%22:%2224eb6be39babf58b%22}; _evga_82e0={%22uuid%22:%2224eb6be39babf58b%22}; AMCV_B7B972315A1341150A495EFE%40AdobeOrg=179643557%7CMCIDTS%7C19692%7CvVersion%7C5.5.0; mbox=session#c6ee0e80eb9844299dd989aec39e438a#1701366770; at_check=true; cf_clearance=92fGukB_ae0s1hfXZtEeN9TZ6eC7a6iX6S9DFmAJRiM-1701364905-0-1-730ca2d2.ea3afa48.240dfd32-0.2.1701364905
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/javascript
last-modified: Tue, 23 May 2023 00:22:53 GMT
x-amz-server-side-encryption: AES256
server: AmazonS3
content-encoding: gzip
date: Thu, 30 Nov 2023 16:08:08 GMT
etag: W/"d7ede7fb823886aa50db02ec417c8e59"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 10ba4f180c8b00c38f956300d7b2f4c8.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN1-C1
x-amz-cf-id: RViG4Z4h104LwfBJ9iUpFR690Nlq2OO5Qv6QVvqrgsAAe2pziZ4QAw==
age: 7117
X-Firefox-Spdy: h2
s.axs.com/whatfix/Fan-Account/data/enterprise_cb.js
200 OK 70 kB URL GET HTTP/2 s.axs.com/whatfix/Fan-Account/data/enterprise_cb.js
IP
Requested by https://www.axs.com/events/516600/real-estate-tickets/promos/687630?skin=trumankc
Certificate IssuerAmazon
Subject*.axs.com
FingerprintA3:B2:AA:EA:EB:FD:68:3F:3D:3B:49:29:4F:98:BA:DB:D5:B4:14:65
ValidityTue, 04 Jul 2023 00:00:00 GMT - Thu, 01 Aug 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /whatfix/Fan-Account/data/enterprise_cb.js HTTP/1.1
Host: s.axs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.axs.com/events/516600/real-estate-tickets/promos/687630?skin=trumankc
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=iplkbd0pteu9d5ita6cs5ici65; axs_geo_static_v1=NO%3A%3AOslo%3A%3A%3A59.95500%3A10.85900%3A%3A; axs_geo_v1=US%3ACA%3ALos+Angeles%3A%3A%3A34.05%3A-118.24%3AAmerica%2FLos_Angeles%3A1; preferred_locale=en-US; __cf_bm=2kAvX3QH_Rw3t1r5wFl5._y9Rl0OS5v5Rm6jYVTgROU-1701364903-0-ASw6YOj1XC79VHEljnFMfAiTuuzstwWhL0CTkK7WjHizWm0nLbxtm/kLZMTr10xzY5KLrlLbaR1U/V4FTxFS8vs=; _sfid_3e99={%22anonymousId%22:%2224eb6be39babf58b%22%2C%22consents%22:[]}; _evga_82e0={%22uuid%22:%2224eb6be39babf58b%22}; AMCV_B7B972315A1341150A495EFE%40AdobeOrg=179643557%7CMCIDTS%7C19692%7CMCMID%7C28501962150500959361483131312528890669%7CMCOPTOUT-1701372110s%7CNONE%7CvVersion%7C5.5.0; mbox=session#c6ee0e80eb9844299dd989aec39e438a#1701366771; at_check=true; cf_clearance=92fGukB_ae0s1hfXZtEeN9TZ6eC7a6iX6S9DFmAJRiM-1701364905-0-1-730ca2d2.ea3afa48.240dfd32-0.2.1701364905; _ga_D0FS4F37VT=GS1.1.1701364910.1.0.1701364910.60.0.0; _ga=GA1.1.892993240.1701364911; AMCVS_B7B972315A1341150A495EFE%40AdobeOrg=1; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Nov+30+2023+17%3A21%3A51+GMT%2B0000+(Coordinated+Universal+Time)&version=202308.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=5388481a-7646-41be-83f0-b72d0305bfbc&interactionCount=0&landingPath=https%3A%2F%2Fwww.axs.com%2Fevents%2F516600%2Freal-estate-tickets%2Fpromos%2F687630%3Fskin%3Dtrumankc&groups=C0001%3A1%2CC0004%3A0%2CC0002%3A0%2CC0003%3A0%2CC0005%3A0; wfx_unq=qRXhgzSdh5DgQmUU
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/javascript
last-modified: Tue, 23 May 2023 00:22:14 GMT
x-amz-server-side-encryption: AES256
server: AmazonS3
content-encoding: gzip
date: Wed, 29 Nov 2023 23:35:25 GMT
etag: W/"b94e31379a9b5c4e3064018afe727325"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 10ba4f180c8b00c38f956300d7b2f4c8.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN1-C1
x-amz-cf-id: XL1TVn2ived5ckOMLOeH23d7SMiv4Iu6LoBJzKNjg0zOtEXXQ1mrPg==
age: 64043
X-Firefox-Spdy: h2
images.discovery-prod.axs.com/skins/new/trumankc/axscom.css
200 OK 5.5 kB URL GET HTTP/2 images.discovery-prod.axs.com/skins/new/trumankc/axscom.css
IP
Requested by https://www.axs.com/events/516600/real-estate-tickets/promos/687630?skin=trumankc
Certificate IssuerAmazon
Subject*.discovery-prod.axs.com
Fingerprint05:39:17:A4:F5:B5:7A:B1:D6:32:36:3C:AA:1D:B7:4D:CC:E9:93:17
ValiditySat, 15 Jul 2023 00:00:00 GMT - Mon, 12 Aug 2024 23:59:59 GMT
File type ASCII text, with very long lines (5698), with no line terminators
Hash 05afa19e75851d33add2ac5221c42532
6fd5d11d2af2ae8041bb631d1f0040c7ed335a2b
e3d960235e18b21012adc41ad362a72a21875e3e02fc5ebcfc4bff14255f98d9
GET /skins/new/trumankc/axscom.css HTTP/1.1
Host: images.discovery-prod.axs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.axs.com/events/516600/real-estate-tickets/promos/687630?skin=trumankc
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=iplkbd0pteu9d5ita6cs5ici65; axs_geo_static_v1=NO%3A%3AOslo%3A%3A%3A59.95500%3A10.85900%3A%3A; axs_geo_v1=US%3ACA%3ALos+Angeles%3A%3A%3A34.05%3A-118.24%3AAmerica%2FLos_Angeles%3A1; preferred_locale=en-US; __cf_bm=2kAvX3QH_Rw3t1r5wFl5._y9Rl0OS5v5Rm6jYVTgROU-1701364903-0-ASw6YOj1XC79VHEljnFMfAiTuuzstwWhL0CTkK7WjHizWm0nLbxtm/kLZMTr10xzY5KLrlLbaR1U/V4FTxFS8vs=
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css
last-modified: Thu, 17 Feb 2022 22:26:11 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: OAAmJ48M2YNgQEsEUi8hgYpCzEY03iEv
server: AmazonS3
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: img-src * 'self' data: https:; default-src * 'unsafe-inline' 'unsafe-eval';
x-frame-options: sameorigin
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: origin
content-encoding: gzip
date: Thu, 30 Nov 2023 07:57:16 GMT
cache-control: max-age=31536000
etag: W/"6c118722f9cb7e303578e2c0b2e7a6ee"
vary: Accept-Encoding,Origin
x-cache: Hit from cloudfront
via: 1.1 a7b25290e9400fd200644534ae04f210.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN56-P2
x-amz-cf-id: bBlqzJLk4OIvmVAQkT4Uv2VBYr8u-IuoeDZ-M74BkIzGA1Vc8HfcXA==
age: 33869
X-Firefox-Spdy: h2
static.discovery-prod.axs.com/axs/bundles/aegaxs/icons/defs/icon-defs.svg?3.0.0.732
200 OK 204 kB URL GET HTTP/2 static.discovery-prod.axs.com/axs/bundles/aegaxs/icons/defs/icon-defs.svg?3.0.0.732
IP
Requested by https://www.axs.com/events/516600/real-estate-tickets/promos/687630?skin=trumankc
Certificate IssuerAmazon
Subject*.static.discovery-prod.axs.com
Fingerprint3D:2D:98:A9:4E:93:A7:7D:22:86:11:BF:03:7D:50:D1:6D:4C:00:05
ValidityTue, 26 Sep 2023 00:00:00 GMT - Thu, 24 Oct 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document, ASCII text, with very long lines (65536), with no line terminators
Size 204 kB (203914 bytes)
Hash d7ff19b79ebc4268354559812b698dba
0119904a3924780eb9d7f24b277a200c81784348
dd3f19e197fc725dcfbb9b5a8c5f3e57f4d2ee7cad74bfff301fe1f995b54812
GET /axs/bundles/aegaxs/icons/defs/icon-defs.svg?3.0.0.732 HTTP/1.1
Host: static.discovery-prod.axs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.axs.com/events/516600/real-estate-tickets/promos/687630?skin=trumankc
Origin: https://www.axs.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/svg+xml
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-expose-headers: ETag
access-control-max-age: 3000
last-modified: Thu, 16 Nov 2023 21:36:33 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: pIJHBHc29tgrC.yCiYhQDcci8Q09_0WO
server: AmazonS3
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: img-src * 'self' data: https:; default-src * 'unsafe-inline' 'unsafe-eval';
x-frame-options: sameorigin
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: origin
content-encoding: gzip
date: Thu, 30 Nov 2023 16:50:39 GMT
etag: W/"d7ff19b79ebc4268354559812b698dba"
vary: Accept-Encoding,Origin
x-cache: Hit from cloudfront
via: 1.1 990c1aa70667fe4e8f93d88ac8400fc4.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN54-C1
x-amz-cf-id: 5XIcE6-adyJILwbPaI4QCnXWCTxTZSnyBd2lpvsPxb-Rx96gfrDDOw==
age: 1875
X-Firefox-Spdy: h2
region1.analytics.google.com/g/collect?v=2&tid=G-D0FS4F37VT>m=45je3b60v9108023832&_p=1701364909704&_gaz=1&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=892993240.1701364911&ul=en-us&sr=1280x1024&_s=1&sid=1701364910&sct=1&seg=0&dl=https%3A%2F%2Fwww.axs.com%2Fevents%2F516600%2Freal-estate-tickets%2Fpromos%2F687630%3Fskin%3Dtrumankc&dr=https%3A%2F%2Ffanlink.to%2F&dt=Real%20Estate%20Additional%20Offers&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1&tfd=3370
204 No Content 0 B URL POST HTTP/2 region1.analytics.google.com/g/collect?v=2&tid=G-D0FS4F37VT>m=45je3b60v9108023832&_p=1701364909704&_gaz=1&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=892993240.1701364911&ul=en-us&sr=1280x1024&_s=1&sid=1701364910&sct=1&seg=0&dl=https%3A%2F%2Fwww.axs.com%2Fevents%2F516600%2Freal-estate-tickets%2Fpromos%2F687630%3Fskin%3Dtrumankc&dr=https%3A%2F%2Ffanlink.to%2F&dt=Real%20Estate%20Additional%20Offers&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1&tfd=3370
IP
Requested by https://www.axs.com/events/516600/real-estate-tickets/promos/687630?skin=trumankc
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-D0FS4F37VT>m=45je3b60v9108023832&_p=1701364909704&_gaz=1&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=892993240.1701364911&ul=en-us&sr=1280x1024&_s=1&sid=1701364910&sct=1&seg=0&dl=https%3A%2F%2Fwww.axs.com%2Fevents%2F516600%2Freal-estate-tickets%2Fpromos%2F687630%3Fskin%3Dtrumankc&dr=https%3A%2F%2Ffanlink.to%2F&dt=Real%20Estate%20Additional%20Offers&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1&tfd=3370 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.axs.com
DNT: 1
Connection: keep-alive
Referer: https://www.axs.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://www.axs.com
date: Thu, 30 Nov 2023 17:21:46 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
rumcdn.geoedge.be/grumi-ip.js
200 OK 16 kB URL GET HTTP/2 rumcdn.geoedge.be/grumi-ip.js
IP
Requested by https://www.axs.com/events/516600/real-estate-tickets/promos/687630?skin=trumankc
Certificate IssuerAmazon
Subjectgw.geoedge.be
Fingerprint96:0E:E4:15:45:80:34:C1:7F:22:56:C8:34:4D:08:FD:03:08:3E:8F
ValiditySat, 12 Aug 2023 00:00:00 GMT - Mon, 09 Sep 2024 23:59:59 GMT
File type HTML document, ASCII text, with very long lines (15451), with no line terminators
Hash 4c4f4bf824d2aa120a5e0b665b4c9828
755309710c76c46798a0675970e429e23b299447
ccf7b12ecc8e9e8ffdde253ba24560e0b8742463ad4868c7659fc90968ffcb3a
GET /grumi-ip.js HTTP/1.1
Host: rumcdn.geoedge.be
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.axs.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
date: Thu, 30 Nov 2023 16:47:48 GMT
last-modified: Sat, 30 Sep 2023 14:56:14 GMT
etag: W/"4c4f4bf824d2aa120a5e0b665b4c9828"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=14400, stale-while-revalidate=14400, immutable
x-amz-version-id: UsDbhp3DKJzQFkiO2rZfweKkBkl0vF1S
server: AmazonS3
content-encoding: br
x-cache: Hit from cloudfront
via: 1.1 5bcfe2deda0bdbc6bade0af9b61602ca.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: HZ4tfNLrveCgrVGXHWomjkEgxoDOzsxEWPOMxwT3JBwVsZt8RuTtOg==
age: 2037
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
chat.satis.fi/Default/GetAWSConfig
200 OK 197 B URL GET HTTP/3 chat.satis.fi/Default/GetAWSConfig
IP
Requested by https://www.axs.com/events/516600/real-estate-tickets/promos/687630?skin=trumankc
Certificate IssuerSectigo Limited
Subject*.satis.fi
FingerprintF1:5D:2E:B7:58:F9:66:43:19:23:41:24:92:A8:2C:65:55:03:40:34
ValidityTue, 17 Oct 2023 00:00:00 GMT - Fri, 25 Oct 2024 23:59:59 GMT
File type troff or preprocessor input, ASCII text, with no line terminators
Hash e95f903967bf81176384dea628e39f3a
9da68294c732d156af6975c6fa56057f012a45e5
be71b9959241d53bbcbe5cbaa1e999c719022d9f334d1de8c902590b5c213fc6
GET /Default/GetAWSConfig HTTP/1.1
Host: chat.satis.fi
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.axs.com
DNT: 1
Connection: keep-alive
Referer: https://www.axs.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/json; charset=utf-8
server: Microsoft-IIS/10.0
access-control-allow-origin: https://www.axs.com
access-control-allow-credentials: true
x-powered-by: ASP.NET
date: Thu, 30 Nov 2023 17:21:44 GMT
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
static.discovery-prod.axs.com/axs/js/a705d32.js?3.0.0.732
200 OK 419 kB URL GET HTTP/2 static.discovery-prod.axs.com/axs/js/a705d32.js?3.0.0.732
IP
Requested by https://www.axs.com/events/516600/real-estate-tickets/promos/687630?skin=trumankc
Certificate IssuerAmazon
Subject*.static.discovery-prod.axs.com
Fingerprint3D:2D:98:A9:4E:93:A7:7D:22:86:11:BF:03:7D:50:D1:6D:4C:00:05
ValidityTue, 26 Sep 2023 00:00:00 GMT - Thu, 24 Oct 2024 23:59:59 GMT
Size 419 kB (418651 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /axs/js/a705d32.js?3.0.0.732 HTTP/1.1
Host: static.discovery-prod.axs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.axs.com/events/516600/real-estate-tickets/promos/687630?skin=trumankc
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=iplkbd0pteu9d5ita6cs5ici65; axs_geo_static_v1=NO%3A%3AOslo%3A%3A%3A59.95500%3A10.85900%3A%3A; axs_geo_v1=US%3ACA%3ALos+Angeles%3A%3A%3A34.05%3A-118.24%3AAmerica%2FLos_Angeles%3A1; preferred_locale=en-US; __cf_bm=2kAvX3QH_Rw3t1r5wFl5._y9Rl0OS5v5Rm6jYVTgROU-1701364903-0-ASw6YOj1XC79VHEljnFMfAiTuuzstwWhL0CTkK7WjHizWm0nLbxtm/kLZMTr10xzY5KLrlLbaR1U/V4FTxFS8vs=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
last-modified: Thu, 16 Nov 2023 21:36:43 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: H.RZAsFPg0WXNIylerppP1lG9ylNfysm
server: AmazonS3
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: img-src * 'self' data: https:; default-src * 'unsafe-inline' 'unsafe-eval';
x-frame-options: sameorigin
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: origin
content-encoding: gzip
date: Thu, 30 Nov 2023 16:34:46 GMT
etag: W/"c5b3799e7c9c2ed68aee9e6f95ce85b8"
vary: Accept-Encoding,Origin
x-cache: Hit from cloudfront
via: 1.1 ed87681648230d81cfe4a69364ab730c.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN54-C1
x-amz-cf-id: NuVuA2RpprOy4i2L1XZOQmSHj8E1SWWupohCvYhYUH2YQdFEHG9B9g==
age: 2820
X-Firefox-Spdy: h2
cdn.cookielaw.org/logos/static/ot_guard_logo.svg
200 OK 497 B URL GET HTTP/2 cdn.cookielaw.org/logos/static/ot_guard_logo.svg
IP
Requested by https://www.axs.com/events/516600/real-estate-tickets/promos/687630?skin=trumankc
Certificate IssuerCloudflare, Inc.
Subjectcookielaw.org
Fingerprint72:BB:48:60:EB:F2:A2:EB:51:29:51:1A:B9:2A:85:30:97:3D:9A:2E
ValiditySat, 01 Apr 2023 00:00:00 GMT - Sun, 31 Mar 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (507), with no line terminators
Hash 4cefeea2da1f500b581d4842d6454a50
9939dd4c1394641f53655e558bfdca7499480c52
220f235f0188ff469b92b56eb86adf4e828b8a90c587ebfa073383b8583aaeb2
GET /logos/static/ot_guard_logo.svg HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.axs.com
DNT: 1
Connection: keep-alive
Referer: https://www.axs.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Nov 2023 17:21:46 GMT
content-type: image/svg+xml
content-md5: tXyZydHjxQshFMbbBT1/8A==
last-modified: Thu, 30 Nov 2023 03:21:57 GMT
x-ms-request-id: 4397caed-901e-0084-1c48-234b82000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=86400
cf-cache-status: HIT
age: 38405
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 82e4c4c9bc205689-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
cdn.cookielaw.org/consent/8ef2ade6-043b-4e3c-9128-b1e4d573c2f1/0b41f45d-0495-4c6f-b551-bb2e112158b0/en.json
200 OK 104 kB URL GET HTTP/2 cdn.cookielaw.org/consent/8ef2ade6-043b-4e3c-9128-b1e4d573c2f1/0b41f45d-0495-4c6f-b551-bb2e112158b0/en.json
IP
Requested by https://www.axs.com/events/516600/real-estate-tickets/promos/687630?skin=trumankc
Certificate IssuerCloudflare, Inc.
Subjectcookielaw.org
Fingerprint72:BB:48:60:EB:F2:A2:EB:51:29:51:1A:B9:2A:85:30:97:3D:9A:2E
ValiditySat, 01 Apr 2023 00:00:00 GMT - Sun, 31 Mar 2024 23:59:59 GMT
Size 104 kB (104181 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /consent/8ef2ade6-043b-4e3c-9128-b1e4d573c2f1/0b41f45d-0495-4c6f-b551-bb2e112158b0/en.json HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.axs.com
DNT: 1
Connection: keep-alive
Referer: https://www.axs.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Nov 2023 17:21:46 GMT
content-type: application/x-javascript
content-length: 22142
cf-ray: 82e4c4c8ab0b5689-OSL
cf-cache-status: HIT
accept-ranges: bytes
access-control-allow-origin: *
age: 46877
cache-control: public, max-age=86400
content-encoding: gzip
etag: 0x8DBB2EB20827463
expires: Fri, 01 Dec 2023 17:21:46 GMT
last-modified: Mon, 11 Sep 2023 17:18:33 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
content-md5: Q9hUc/2SPVNdnITHhTv9GQ==
x-content-type-options: nosniff
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: 0609c5aa-c01e-000f-3863-144fef000000
x-ms-version: 2009-09-19
server: cloudflare
X-Firefox-Spdy: h2
appleid.cdn-apple.com/appleauth/static/jsapi/appleid/1/en_US/appleid.auth.js
200 OK 43 kB URL GET HTTP/1.1 appleid.cdn-apple.com/appleauth/static/jsapi/appleid/1/en_US/appleid.auth.js
IP
Requested by https://www.axs.com/events/516600/real-estate-tickets/promos/687630?skin=trumankc
Certificate IssuerApple Inc.
Subjectappleid.cdn-apple.com
FingerprintBC:5D:E3:0A:D7:E5:4C:97:11:28:06:54:BB:47:0F:44:70:77:92:5A
ValidityWed, 08 Nov 2023 21:23:20 GMT - Tue, 06 Feb 2024 21:33:20 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /appleauth/static/jsapi/appleid/1/en_US/appleid.auth.js HTTP/1.1
Host: appleid.cdn-apple.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.axs.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Apple
Content-Type: application/javascript;charset=UTF-8
Cache-Control: public, max-age=86400,stale-while-revalidate=86400
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
Accept-Ranges: bytes
ETag: W/"43171-1701237923702"
Last-Modified: Wed, 29 Nov 2023 06:05:23 GMT
Vary: accept-encoding
Content-Encoding: gzip
Content-Length: 17356
Date: Thu, 30 Nov 2023 17:21:45 GMT
Connection: keep-alive
Access-Control-Allow-Origin: *
rumcdn.geoedge.be/ce97f45c-1e13-4b4f-a316-a0a1ea386096/grumi.js
200 OK 177 kB URL GET HTTP/2 rumcdn.geoedge.be/ce97f45c-1e13-4b4f-a316-a0a1ea386096/grumi.js
IP
Requested by https://www.axs.com/events/516600/real-estate-tickets/promos/687630?skin=trumankc
Certificate IssuerAmazon
Subjectgw.geoedge.be
Fingerprint96:0E:E4:15:45:80:34:C1:7F:22:56:C8:34:4D:08:FD:03:08:3E:8F
ValiditySat, 12 Aug 2023 00:00:00 GMT - Mon, 09 Sep 2024 23:59:59 GMT
File type ASCII text, with very long lines (65436)
Size 177 kB (177340 bytes)
Hash 13f9f36da1c0bd0cba03b9bcf8eaf162
178b137c0084181c553bdf1430ee61fe7ada65c9
ec110343d36a3bf1577d466edb137151150d1204e0f5f1e682bd812d068ede91
GET /ce97f45c-1e13-4b4f-a316-a0a1ea386096/grumi.js HTTP/1.1
Host: rumcdn.geoedge.be
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.axs.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/javascript
date: Thu, 30 Nov 2023 16:47:50 GMT
last-modified: Thu, 30 Nov 2023 16:06:50 GMT
etag: W/"13f9f36da1c0bd0cba03b9bcf8eaf162"
x-amz-server-side-encryption: AES256
cache-control: public,max-age=3600,stale-while-revalidate=3600,immutable,must-revalidate
x-amz-version-id: uWBXEgMPLDRjA_NmK8NUVqPwesItehwA
server: AmazonS3
content-encoding: br
x-cache: Hit from cloudfront
via: 1.1 5bcfe2deda0bdbc6bade0af9b61602ca.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: H03HtJMu_YziYdfMn4rv36pkFx7VzOht-niKERDCxFeiJMJD1unqyA==
age: 2034
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
static.discovery-prod.axs.com/axs/js/7f0476f.js?3.0.0.732
200 OK 500 kB URL GET HTTP/2 static.discovery-prod.axs.com/axs/js/7f0476f.js?3.0.0.732
IP
Requested by https://www.axs.com/events/516600/real-estate-tickets/promos/687630?skin=trumankc
Certificate IssuerAmazon
Subject*.static.discovery-prod.axs.com
Fingerprint3D:2D:98:A9:4E:93:A7:7D:22:86:11:BF:03:7D:50:D1:6D:4C:00:05
ValidityTue, 26 Sep 2023 00:00:00 GMT - Thu, 24 Oct 2024 23:59:59 GMT
Size 500 kB (500470 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /axs/js/7f0476f.js?3.0.0.732 HTTP/1.1
Host: static.discovery-prod.axs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.axs.com/events/516600/real-estate-tickets/promos/687630?skin=trumankc
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=iplkbd0pteu9d5ita6cs5ici65; axs_geo_static_v1=NO%3A%3AOslo%3A%3A%3A59.95500%3A10.85900%3A%3A; axs_geo_v1=US%3ACA%3ALos+Angeles%3A%3A%3A34.05%3A-118.24%3AAmerica%2FLos_Angeles%3A1; preferred_locale=en-US; __cf_bm=2kAvX3QH_Rw3t1r5wFl5._y9Rl0OS5v5Rm6jYVTgROU-1701364903-0-ASw6YOj1XC79VHEljnFMfAiTuuzstwWhL0CTkK7WjHizWm0nLbxtm/kLZMTr10xzY5KLrlLbaR1U/V4FTxFS8vs=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
last-modified: Thu, 16 Nov 2023 21:36:43 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: ZwlVLXp6wTt_bvemkfy3AYmUn9Vlsic6
server: AmazonS3
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: img-src * 'self' data: https:; default-src * 'unsafe-inline' 'unsafe-eval';
x-frame-options: sameorigin
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: origin
content-encoding: gzip
date: Thu, 30 Nov 2023 17:02:25 GMT
etag: W/"7aa55eb309b999de5a25c960170ae5f1"
vary: Accept-Encoding,Origin
x-cache: Hit from cloudfront
via: 1.1 ed87681648230d81cfe4a69364ab730c.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN54-C1
x-amz-cf-id: gKnrVbpj81FAMhb6cbfYD2p55cpaUtSknHL2yac3nvZT8P6m63UEJw==
age: 1204
X-Firefox-Spdy: h2
cdn.cookielaw.org/scripttemplates/202308.1.0/assets/otFlat.json
200 OK 13 kB URL GET HTTP/2 cdn.cookielaw.org/scripttemplates/202308.1.0/assets/otFlat.json
IP
Requested by https://www.axs.com/events/516600/real-estate-tickets/promos/687630?skin=trumankc
Certificate IssuerCloudflare, Inc.
Subjectcookielaw.org
Fingerprint72:BB:48:60:EB:F2:A2:EB:51:29:51:1A:B9:2A:85:30:97:3D:9A:2E
ValiditySat, 01 Apr 2023 00:00:00 GMT - Sun, 31 Mar 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with very long lines (11171)
Hash 4d4429a2dfaa8a27fbe9659e8e717f74
28ad4885ff33594fa46eced61bd42874926aa17c
ea5db5581e262d77d1a43fbb3f0fa3661b51d097b40ca38f584b4943f47cf2e0
GET /scripttemplates/202308.1.0/assets/otFlat.json HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.axs.com
DNT: 1
Connection: keep-alive
Referer: https://www.axs.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Nov 2023 17:21:46 GMT
content-type: application/json
content-length: 3017
content-encoding: gzip
content-md5: C2c3Qd8FHm1wstxOFHDJ2w==
last-modified: Wed, 25 Oct 2023 03:55:37 GMT
etag: 0x8DBD50E3F9DEF08
x-ms-request-id: 3ee6c189-601e-0074-7746-230d73000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=86400
cf-cache-status: HIT
age: 44267
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 82e4c4c90b735689-OSL
X-Firefox-Spdy: h2
aegpresents.us-5.evergage.com/api2/event/prod?event=eyJhY3Rpb24iOiJWaWV3IEVEUCIsIml0ZW1BY3Rpb24iOiJWaWV3IEl0ZW0iLCJzb3VyY2UiOnsicGFnZVR5cGUiOiJFRFAiLCJjb250ZW50Wm9uZXMiOlsiZ2xvYmFsX3NsaWRlX2luIiwiZ2xvYmFsX3BvcHVwIl0sInVybCI6Imh0dHBzOi8vd3d3LmF4cy5jb20vZXZlbnRzLzUxNjYwMC9yZWFsLWVzdGF0ZS10aWNrZXRzL3Byb21vcy82ODc2MzA%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%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%3D%3D
200 OK 137 B URL GET HTTP/2 aegpresents.us-5.evergage.com/api2/event/prod?event=eyJhY3Rpb24iOiJWaWV3IEVEUCIsIml0ZW1BY3Rpb24iOiJWaWV3IEl0ZW0iLCJzb3VyY2UiOnsicGFnZVR5cGUiOiJFRFAiLCJjb250ZW50Wm9uZXMiOlsiZ2xvYmFsX3NsaWRlX2luIiwiZ2xvYmFsX3BvcHVwIl0sInVybCI6Imh0dHBzOi8vd3d3LmF4cy5jb20vZXZlbnRzLzUxNjYwMC9yZWFsLWVzdGF0ZS10aWNrZXRzL3Byb21vcy82ODc2MzA%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%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%3D%3D
IP
Requested by https://www.axs.com/events/516600/real-estate-tickets/promos/687630?skin=trumankc
Certificate IssuerAmazon
Subject*.us-5.evergage.com
Fingerprint9D:F2:ED:06:53:2A:94:7B:0C:76:E6:C0:0A:A2:08:22:94:83:7A:3C
ValiditySat, 20 May 2023 00:00:00 GMT - Mon, 17 Jun 2024 23:59:59 GMT
File type troff or preprocessor input, ASCII text, with no line terminators
Hash fd02e839376ad35eb5b3cdb8bf1609b7
0def796fad1e8cb89d3c5ad39f96c1635854de7a
5b0b19671570a8953c6e81651572cd09365a7f146b0320677b65d6bc99d342f0
GET /api2/event/prod?event=eyJhY3Rpb24iOiJWaWV3IEVEUCIsIml0ZW1BY3Rpb24iOiJWaWV3IEl0ZW0iLCJzb3VyY2UiOnsicGFnZVR5cGUiOiJFRFAiLCJjb250ZW50Wm9uZXMiOlsiZ2xvYmFsX3NsaWRlX2luIiwiZ2xvYmFsX3BvcHVwIl0sInVybCI6Imh0dHBzOi8vd3d3LmF4cy5jb20vZXZlbnRzLzUxNjYwMC9yZWFsLWVzdGF0ZS10aWNrZXRzL3Byb21vcy82ODc2MzA%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%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%3D%3D HTTP/1.1
Host: aegpresents.us-5.evergage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.axs.com
DNT: 1
Connection: keep-alive
Referer: https://www.axs.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Nov 2023 17:21:46 GMT
content-type: application/json;charset=UTF-8
set-cookie: AWSALBTG=qHFX/8op8AlXVcaPdWkkt6YyM2PBju7hExeEhJAlnfnyOtLGhRtVTZn9oOdAZXKXwJ18t83+Jd6SlzKsxIL+c4SGTa56kCKSzMszUOuQXzVuyRjPn6C0C50cYFePdoT+HRJ7PW0saZuGlBlinxQ4s66MFYehOzPjZPl9WUwdTxmIMLPdPec=; Expires=Thu, 07 Dec 2023 17:21:46 GMT; Path=/
AWSALBTGCORS=qHFX/8op8AlXVcaPdWkkt6YyM2PBju7hExeEhJAlnfnyOtLGhRtVTZn9oOdAZXKXwJ18t83+Jd6SlzKsxIL+c4SGTa56kCKSzMszUOuQXzVuyRjPn6C0C50cYFePdoT+HRJ7PW0saZuGlBlinxQ4s66MFYehOzPjZPl9WUwdTxmIMLPdPec=; Expires=Thu, 07 Dec 2023 17:21:46 GMT; Path=/; SameSite=None; Secure
access-control-allow-origin: https://www.axs.com
timing-allow-origin: *
cache-control: no-cache, no-store
access-control-allow-credentials: true
x-content-type-options: nosniff
vary: accept-encoding
content-encoding: gzip
X-Firefox-Spdy: h2
s.axs.com/whatfix/Fan-Account/integration/integration.nocache.js
200 OK 10 kB URL GET HTTP/2 s.axs.com/whatfix/Fan-Account/integration/integration.nocache.js
IP
Requested by https://www.axs.com/events/516600/real-estate-tickets/promos/687630?skin=trumankc
Certificate IssuerAmazon
Subject*.axs.com
FingerprintA3:B2:AA:EA:EB:FD:68:3F:3D:3B:49:29:4F:98:BA:DB:D5:B4:14:65
ValidityTue, 04 Jul 2023 00:00:00 GMT - Thu, 01 Aug 2024 23:59:59 GMT
Hash fcf439b40f068305e02057661e3a92de
243f818a0c88774946a5e911136425ae2b2ae486
4db77394d8841b4f31b5531b1782836b301ed50f02e6a06162c195f07f1038d7
GET /whatfix/Fan-Account/integration/integration.nocache.js HTTP/1.1
Host: s.axs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.axs.com/events/516600/real-estate-tickets/promos/687630?skin=trumankc
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=iplkbd0pteu9d5ita6cs5ici65; axs_geo_static_v1=NO%3A%3AOslo%3A%3A%3A59.95500%3A10.85900%3A%3A; axs_geo_v1=US%3ACA%3ALos+Angeles%3A%3A%3A34.05%3A-118.24%3AAmerica%2FLos_Angeles%3A1; preferred_locale=en-US; __cf_bm=2kAvX3QH_Rw3t1r5wFl5._y9Rl0OS5v5Rm6jYVTgROU-1701364903-0-ASw6YOj1XC79VHEljnFMfAiTuuzstwWhL0CTkK7WjHizWm0nLbxtm/kLZMTr10xzY5KLrlLbaR1U/V4FTxFS8vs=; _sfid_3e99={%22anonymousId%22:%2224eb6be39babf58b%22%2C%22consents%22:[]}; _evga_82e0={%22uuid%22:%2224eb6be39babf58b%22}; AMCV_B7B972315A1341150A495EFE%40AdobeOrg=179643557%7CMCIDTS%7C19692%7CMCMID%7C28501962150500959361483131312528890669%7CMCOPTOUT-1701372110s%7CNONE%7CvVersion%7C5.5.0; mbox=session#c6ee0e80eb9844299dd989aec39e438a#1701366771; at_check=true; cf_clearance=92fGukB_ae0s1hfXZtEeN9TZ6eC7a6iX6S9DFmAJRiM-1701364905-0-1-730ca2d2.ea3afa48.240dfd32-0.2.1701364905; _ga_D0FS4F37VT=GS1.1.1701364910.1.0.1701364910.60.0.0; _ga=GA1.1.892993240.1701364911; AMCVS_B7B972315A1341150A495EFE%40AdobeOrg=1; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Nov+30+2023+17%3A21%3A51+GMT%2B0000+(Coordinated+Universal+Time)&version=202308.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=5388481a-7646-41be-83f0-b72d0305bfbc&interactionCount=0&landingPath=https%3A%2F%2Fwww.axs.com%2Fevents%2F516600%2Freal-estate-tickets%2Fpromos%2F687630%3Fskin%3Dtrumankc&groups=C0001%3A1%2CC0004%3A0%2CC0002%3A0%2CC0003%3A0%2CC0005%3A0; wfx_unq=qRXhgzSdh5DgQmUU
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/javascript
last-modified: Tue, 23 May 2023 00:22:55 GMT
x-amz-server-side-encryption: AES256
server: AmazonS3
content-encoding: gzip
date: Thu, 30 Nov 2023 01:12:54 GMT
etag: W/"fcf439b40f068305e02057661e3a92de"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 10ba4f180c8b00c38f956300d7b2f4c8.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN1-C1
x-amz-cf-id: 2lQqIC47k4HZTOKYAHCEkR3T34BihUJAxM5TzFtDW-Nz2F1Wj2zzbw==
age: 58464
X-Firefox-Spdy: h2
geolocation.onetrust.com/cookieconsentpub/v1/geo/location
200 OK 72 B URL GET HTTP/2 geolocation.onetrust.com/cookieconsentpub/v1/geo/location
IP
Requested by https://www.axs.com/events/516600/real-estate-tickets/promos/687630?skin=trumankc
Certificate IssuerCloudflare, Inc.
Subjectonetrust.com
Fingerprint9B:BC:B4:A8:C7:6C:6C:02:0F:FD:9F:06:F2:67:FB:DD:A1:E0:3F:47
ValidityMon, 13 Nov 2023 00:00:00 GMT - Tue, 12 Nov 2024 23:59:59 GMT
File type troff or preprocessor input, ASCII text, with no line terminators
Hash adf75b99dbbf416c627dfc5de30f9ad1
699f3845f7dfb3fa9968c2117b44c3f3eb728fff
a0e4a8f457272bd17d07ae2e1e09731df6cc6fdc3ea9e32e713ef4a8a012fc27
GET /cookieconsentpub/v1/geo/location HTTP/1.1
Host: geolocation.onetrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.axs.com
DNT: 1
Connection: keep-alive
Referer: https://www.axs.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Nov 2023 17:21:46 GMT
content-type: application/json
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: GET, OPTIONS
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 82e4c4c7382cb51b-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
assets.adobedtm.com/f8e955bdde76/4d3654675a9f/452d647be4f8/RC3805f5a13a5a4a6aa803317f212858ec-source.min.js
200 OK 371 B URL GET HTTP/2 assets.adobedtm.com/f8e955bdde76/4d3654675a9f/452d647be4f8/RC3805f5a13a5a4a6aa803317f212858ec-source.min.js
IP
Requested by https://www.axs.com/events/516600/real-estate-tickets/promos/687630?skin=trumankc
Certificate IssuerDigiCert Inc
Subjectassets.adobedtm.com
Fingerprint8E:2F:9F:94:55:93:C2:B5:58:37:E8:D3:02:3C:23:AF:BA:E7:1D:EA
ValidityTue, 11 Jul 2023 00:00:00 GMT - Sat, 10 Aug 2024 23:59:59 GMT
File type ASCII text, with very long lines (378), with no line terminators
Hash 9346013119542a91bab2736b26bbe871
26f49e2b172619dc7f3509babfb6d6b541467b01
ea40edf847495d3291925927be05cc721368881256c7adf93642949197eda6d9
GET /f8e955bdde76/4d3654675a9f/452d647be4f8/RC3805f5a13a5a4a6aa803317f212858ec-source.min.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.axs.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "eb21ca635c535e7fb2f610b7a480592e:1701261551.975596"
last-modified: Wed, 29 Nov 2023 12:39:11 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
content-length: 230
cache-control: max-age=3600
expires: Thu, 30 Nov 2023 18:21:45 GMT
date: Thu, 30 Nov 2023 17:21:45 GMT
access-control-allow-origin: https://www.axs.com
timing-allow-origin: *
X-Firefox-Spdy: h2
www.axs.com/cdn-cgi/challenge-platform/h/g/scripts/jsd/9914b343/main.js
200 OK 7.4 kB URL GET HTTP/2 www.axs.com/cdn-cgi/challenge-platform/h/g/scripts/jsd/9914b343/main.js
IP
Requested by https://www.axs.com/events/516600/real-estate-tickets/promos/687630?skin=trumankc
Certificate IssuerLet's Encrypt
Subjectwww.axs.com
Fingerprint87:68:07:F1:4B:3D:46:14:AF:EA:16:57:5A:AE:C7:C3:76:2C:F5:5F
ValiditySat, 11 Nov 2023 02:56:16 GMT - Fri, 09 Feb 2024 02:56:15 GMT
File type ASCII text, with very long lines (7406), with no line terminators
Hash 296cd4c6dddd742257d73b39bbef316c
1f74a1667e0e67e02e11b79be7e2520fbfc47e62
8427324c2810f3d13b7f85635b7d0a1241feffd3b72d1332a4bbc09963032230
GET /cdn-cgi/challenge-platform/h/g/scripts/jsd/9914b343/main.js HTTP/1.1
Host: www.axs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=iplkbd0pteu9d5ita6cs5ici65; axs_geo_static_v1=NO%3A%3AOslo%3A%3A%3A59.95500%3A10.85900%3A%3A; axs_geo_v1=US%3ACA%3ALos+Angeles%3A%3A%3A34.05%3A-118.24%3AAmerica%2FLos_Angeles%3A1; preferred_locale=en-US; device_view=full; __cf_bm=2kAvX3QH_Rw3t1r5wFl5._y9Rl0OS5v5Rm6jYVTgROU-1701364903-0-ASw6YOj1XC79VHEljnFMfAiTuuzstwWhL0CTkK7WjHizWm0nLbxtm/kLZMTr10xzY5KLrlLbaR1U/V4FTxFS8vs=; _sfid_3e99={%22anonymousId%22:%2224eb6be39babf58b%22}; _evga_82e0={%22uuid%22:%2224eb6be39babf58b%22}; AMCV_B7B972315A1341150A495EFE%40AdobeOrg=179643557%7CMCIDTS%7C19692%7CvVersion%7C5.5.0; mbox=session#c6ee0e80eb9844299dd989aec39e438a#1701366770; at_check=true
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Nov 2023 17:21:45 GMT
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
cache-control: max-age=14400, public
vary: accept-encoding
strict-transport-security: max-age=15552000
x-powered-by: AXS
x-careers: https://solutions.axs.com/careers/
server: cloudflare
cf-ray: 82e4c4c2f9e056c3-OSL
content-encoding: br
X-Firefox-Spdy: h2
cdn.cookielaw.org/logos/static/powered_by_logo.svg
200 OK 5.2 kB URL GET HTTP/2 cdn.cookielaw.org/logos/static/powered_by_logo.svg
IP
Requested by https://www.axs.com/events/516600/real-estate-tickets/promos/687630?skin=trumankc
Certificate IssuerCloudflare, Inc.
Subjectcookielaw.org
Fingerprint72:BB:48:60:EB:F2:A2:EB:51:29:51:1A:B9:2A:85:30:97:3D:9A:2E
ValiditySat, 01 Apr 2023 00:00:00 GMT - Sun, 31 Mar 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (5220), with no line terminators
Hash 38b5388f36f8f885deb26afdac0e3116
112eccab1891a3a7cab1c5602ba72c9e127136e0
a8562f11c5a80a5c1c4ab388cfa2a69598203a57a5c67d1f80512bddd80d09ef
GET /logos/static/powered_by_logo.svg HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.axs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Nov 2023 17:21:46 GMT
content-type: image/svg+xml
content-md5: Y+c301RBZNK39PvKQWrIBw==
last-modified: Tue, 28 Nov 2023 21:09:38 GMT
x-ms-request-id: 2e71fb0e-a01e-009f-0e77-227581000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=86400
cf-cache-status: HIT
age: 53763
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 82e4c4c9ae3d1c0a-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
static.discovery-prod.axs.com/axs/css/90a6f65.css?3.0.0.732
200 OK 297 kB URL GET HTTP/2 static.discovery-prod.axs.com/axs/css/90a6f65.css?3.0.0.732
IP
Requested by https://www.axs.com/events/516600/real-estate-tickets/promos/687630?skin=trumankc
Certificate IssuerAmazon
Subject*.static.discovery-prod.axs.com
Fingerprint3D:2D:98:A9:4E:93:A7:7D:22:86:11:BF:03:7D:50:D1:6D:4C:00:05
ValidityTue, 26 Sep 2023 00:00:00 GMT - Thu, 24 Oct 2024 23:59:59 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Size 297 kB (297343 bytes)
Hash ea3b0ca0ff8e842e5cd5f419252f8565
7da94d8769cabc16c6557e31b8c8f0ad9843bd0e
45637fd9e730ff67eee3d4d42c8202b64e3d8b9dd0e6abd024e651b0e2fa336a
GET /axs/css/90a6f65.css?3.0.0.732 HTTP/1.1
Host: static.discovery-prod.axs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.axs.com/events/516600/real-estate-tickets/promos/687630?skin=trumankc
Origin: https://www.axs.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-expose-headers: ETag
access-control-max-age: 3000
last-modified: Thu, 16 Nov 2023 21:36:42 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: d6XtJ.qs_YoqXXW2Eje4KC6zw1PfrAK_
server: AmazonS3
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: img-src * 'self' data: https:; default-src * 'unsafe-inline' 'unsafe-eval';
x-frame-options: sameorigin
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: origin
content-encoding: gzip
date: Thu, 30 Nov 2023 17:12:01 GMT
etag: W/"ea3b0ca0ff8e842e5cd5f419252f8565"
vary: Accept-Encoding,Origin
x-cache: Hit from cloudfront
via: 1.1 990c1aa70667fe4e8f93d88ac8400fc4.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN54-C1
x-amz-cf-id: 7Q14YO9Xl4VMHBrmwfKibqDWdMGtGwtOdWjPQ9OAArZySKyg-nwGBw==
age: 596
X-Firefox-Spdy: h2
static.discovery-prod.axs.com/axs/js/9ae915d.js?3.0.0.732
200 OK 217 kB URL GET HTTP/2 static.discovery-prod.axs.com/axs/js/9ae915d.js?3.0.0.732
IP
Requested by https://www.axs.com/events/516600/real-estate-tickets/promos/687630?skin=trumankc
Certificate IssuerAmazon
Subject*.static.discovery-prod.axs.com
Fingerprint3D:2D:98:A9:4E:93:A7:7D:22:86:11:BF:03:7D:50:D1:6D:4C:00:05
ValidityTue, 26 Sep 2023 00:00:00 GMT - Thu, 24 Oct 2024 23:59:59 GMT
File type ASCII text, with very long lines (32025)
Size 217 kB (217163 bytes)
Hash 79963d4e6f21bb92dd3ec900196d8e38
07838d3101a7b3e581f6ca7642cd951d4f135cba
bad3eb61c6589bff2507fd73dc2dfe0b081cb6e1a48bb69e1b44fad3fc914537
GET /axs/js/9ae915d.js?3.0.0.732 HTTP/1.1
Host: static.discovery-prod.axs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.axs.com/events/516600/real-estate-tickets/promos/687630?skin=trumankc
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=iplkbd0pteu9d5ita6cs5ici65; axs_geo_static_v1=NO%3A%3AOslo%3A%3A%3A59.95500%3A10.85900%3A%3A; axs_geo_v1=US%3ACA%3ALos+Angeles%3A%3A%3A34.05%3A-118.24%3AAmerica%2FLos_Angeles%3A1; preferred_locale=en-US; __cf_bm=2kAvX3QH_Rw3t1r5wFl5._y9Rl0OS5v5Rm6jYVTgROU-1701364903-0-ASw6YOj1XC79VHEljnFMfAiTuuzstwWhL0CTkK7WjHizWm0nLbxtm/kLZMTr10xzY5KLrlLbaR1U/V4FTxFS8vs=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
last-modified: Thu, 16 Nov 2023 21:36:43 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: vaPTdK89xssxrX8JBSaIUHFJUqkDZhoh
server: AmazonS3
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: img-src * 'self' data: https:; default-src * 'unsafe-inline' 'unsafe-eval';
x-frame-options: sameorigin
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: origin
content-encoding: gzip
date: Thu, 30 Nov 2023 16:50:35 GMT
etag: W/"79963d4e6f21bb92dd3ec900196d8e38"
vary: Accept-Encoding,Origin
x-cache: Hit from cloudfront
via: 1.1 ed87681648230d81cfe4a69364ab730c.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN54-C1
x-amz-cf-id: qVM_ldx6YfSBt6J1C-3fgAQKbYip1RbHCVO-hLE4bmxXWyrS7Il7gQ==
age: 1877
X-Firefox-Spdy: h2
www.axs.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js
200 OK 1.2 kB URL GET HTTP/2 www.axs.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js
IP
Requested by https://www.axs.com/events/516600/real-estate-tickets/promos/687630?skin=trumankc
Certificate IssuerLet's Encrypt
Subjectwww.axs.com
Fingerprint87:68:07:F1:4B:3D:46:14:AF:EA:16:57:5A:AE:C7:C3:76:2C:F5:5F
ValiditySat, 11 Nov 2023 02:56:16 GMT - Fri, 09 Feb 2024 02:56:15 GMT
File type HTML document, ASCII text, with very long lines (1271), with no line terminators
Hash 40d981045a7516cdadd00e8dccc9c58d
8b8d9a48c6b9d2fba596034ef5db3dd0f2f781c3
71c7d5fc630ff38080f71945be1e8b0c43140d8c25338056b752495e18739c0c
GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1
Host: www.axs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.axs.com/events/516600/real-estate-tickets/promos/687630?skin=trumankc
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=iplkbd0pteu9d5ita6cs5ici65; axs_geo_static_v1=NO%3A%3AOslo%3A%3A%3A59.95500%3A10.85900%3A%3A; axs_geo_v1=US%3ACA%3ALos+Angeles%3A%3A%3A34.05%3A-118.24%3AAmerica%2FLos_Angeles%3A1; preferred_locale=en-US; device_view=full; __cf_bm=2kAvX3QH_Rw3t1r5wFl5._y9Rl0OS5v5Rm6jYVTgROU-1701364903-0-ASw6YOj1XC79VHEljnFMfAiTuuzstwWhL0CTkK7WjHizWm0nLbxtm/kLZMTr10xzY5KLrlLbaR1U/V4FTxFS8vs=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Nov 2023 17:21:43 GMT
content-type: application/javascript
last-modified: Tue, 28 Nov 2023 16:06:21 GMT
etag: W/"65660ffd-4d7"
vary: Accept-Encoding
strict-transport-security: max-age=15552000
x-content-type-options: nosniff
server: cloudflare
cf-ray: 82e4c4b9988356c3-OSL
x-frame-options: DENY
expires: Sat, 02 Dec 2023 17:21:43 GMT
cache-control: max-age=172800, public
content-encoding: gzip
X-Firefox-Spdy: h2
cdn.cookielaw.org/logos/static/ot_close.svg
200 OK 651 B URL GET HTTP/2 cdn.cookielaw.org/logos/static/ot_close.svg
IP
Requested by https://www.axs.com/events/516600/real-estate-tickets/promos/687630?skin=trumankc
Certificate IssuerCloudflare, Inc.
Subjectcookielaw.org
Fingerprint72:BB:48:60:EB:F2:A2:EB:51:29:51:1A:B9:2A:85:30:97:3D:9A:2E
ValiditySat, 01 Apr 2023 00:00:00 GMT - Sun, 31 Mar 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (663), with no line terminators
Hash 775913dc8267eb216d54c1e1dfe467b1
c6c68dea713afbe52666360532140507347a5d10
7f95ae3119579940ba6840a95abc442065d3a8412a8f6aff872ffdf86bcc8240
GET /logos/static/ot_close.svg HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.axs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Nov 2023 17:21:46 GMT
content-type: image/svg+xml
content-md5: pcXWFGpuVeSg/jVnYCseRg==
last-modified: Thu, 30 Nov 2023 03:21:58 GMT
x-ms-request-id: 8fe3c915-e01e-0045-0349-23ec60000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=86400
cf-cache-status: HIT
age: 40304
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 82e4c4c96e201c0a-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
34.217.156.250
104.18.32.137
2.22.61.56
23.58.205.15
2.18.172.233
0.0.0.0