myprivate.pics/film.php?id=FLEGT4.exe
52.173.151.229 0 B URL myprivate.pics/film.php?id=FLEGT4.exe
IP 52.173.151.229:0
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /film.php?id=FLEGT4.exe HTTP/1.1
Host: myprivate.pics
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Content-Length: 0
Content-Type: text/html; charset=utf-8
Date: Wed, 27 Sep 2023 23:59:15 GMT
Server: Apache
Location: https://grabify.world/film.php?id=FLEGT4.exe
Status: 301 Moved Permanently
cf-cache-status: DYNAMIC
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
cf-ray: 56137e603e72eeba
myprivate.pics/
52.173.151.229 1.1 kB IP 52.173.151.229:0
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1104), with CRLF line terminators
Hash 245c54536eed9afe61be03f1c899e159
236aefb8503cbbb9259d391a8c61e1b8ae701395
c89da767ccea1f52a47a8fc017e7b20e438eff0c5a649c73804c69e525eeece9
GET / HTTP/1.1
Host: myprivate.pics
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Length: 1139
Content-Type: text/html; charset=utf-8
Date: Wed, 27 Sep 2023 23:59:17 GMT
Server: Apache
Content-Encoding: gzip
Vary: Accept-Encoding
cf-cache-status: DYNAMIC
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
cf-ray: 56137e603e72eeba
grabify.link/film.php?id=FLEGT4.exe
104.26.8.202 0 B URL grabify.link/film.php?id=FLEGT4.exe
IP 104.26.8.202:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
NIDS Severity Alert suricata high ET HUNTING SUSPICIOUS Firesale gTLD EXE DL with no Referer June 13 2016
GET /film.php?id=FLEGT4.exe HTTP/1.1
Host: grabify.link
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Wed, 27 Sep 2023 23:59:18 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Thu, 28 Sep 2023 00:59:18 GMT
Location: https://grabify.link/film.php?id=FLEGT4.exe
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jrtOjkjgtm2Bp%2B%2F9%2BYia0rQvWVKHCb6Uog24a885rR7dLVpPWvHMqUIV2gShLrSGRIRJstssJb6dmF5yfwxFl49dpRpzbd4AL9uElWvpy%2FM2hB2sQejXckvPc9%2Bu2Q%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 80d7b31acf5356cb-OSL
alt-svc: h2=":443"; ma=60
grabify.link/js/ads.js
104.26.8.202 19 B IP 104.26.8.202:0
File type ASCII text, with no line terminators
Hash 14380b81da6c1f82d54ddad07bdca87c
a72b216e23ce2fd0c275f0c66381255e2b34c1be
6a0f6cf6b4648c192d81b5fc7b70cb2f6819ef4a799e421e8626cae9697aa85a
GET /js/ads.js HTTP/1.1
Host: grabify.link
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6IkNPelIweGRtdlVzQXM2UWNrY1ZVQlE9PSIsInZhbHVlIjoiWFdkZDNTNHhPSVVVQjhYdmhQcFRPL1RrZmVleDFWOFhPM0VkdmhuTHd2TzJyc1JXU3NRZVRJdTVxejBNcG5peDhoVmd4bnhHS3Z3OVlSMWZ6enF0TTdhb3ViaUl2Nkk3MGNtMEZwTXNYd1VybW55V284QTNSMGF4NFVlYXkvSTUiLCJtYWMiOiJjZGFlMWUzODhkNThjMzk2YmQ1ZmUxOGQ0NjliN2NmOWUxOTQyZWIzNzBlZmVlOTc0NDM1ZWUzNjM5MjZkNDg0IiwidGFnIjoiIn0%3D; g_session=eyJpdiI6IkFnaEpQWmluZjFNL3FtRms5MEFQMGc9PSIsInZhbHVlIjoiR3JGMEUxQXE2VnJRdVI0d3Z5SUVJQy9aY0hDd3dZbnVsWnN0TkM1a1JvbVJwQnBoNTZVWlJzVXV4VTJNcUI2WXRwZkkyY2dHSTJ5RDdzMW9zZldPRFg4S0NUeVRQMkhLVXNpdzA4aWc1WFRkMk9vT1NTK292cEwxS3FxWk4xN3MiLCJtYWMiOiI1ZDVkM2Q2NjA2NDk2NWM2YmJkOTkwZjk3MWI5MDBkMTQ1MTNjMGE5MGNiM2FhYWVjMGI5ZjE5MTQyYjMxZTY3IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 27 Sep 2023 23:59:19 GMT
content-type: application/javascript
content-length: 19
cf-bgj: minify
cf-polished: origSize=21
etag: "15-5f5e6e55d59b7"
last-modified: Thu, 02 Mar 2023 08:48:42 GMT
cf-cache-status: HIT
age: 1627
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=eNDxzYqIT1dHZ0Xz8ubzeQCiJo6qiVn%2FSXVucLtAw5luyophGH899yj6dJZeKDyl6wX8GC1SnkZe4DlaAIK7%2BjFPqygLPQLyZSc5kCMln%2B35CzPkNvSjVcR%2BUxnzJg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 80d7b321ba9f5688-OSL
alt-svc: h3=":443"; ma=86400
grabify.link/film.php?id=FLEGT4.exe
104.26.8.202 55 kB URL grabify.link/film.php?id=FLEGT4.exe
IP 104.26.8.202:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (379)
Hash f791c119a39ca40625116c48873af9b7
ee37e1c1cb798fbd051360e214b370673999bc5d
4902255607c4cffde9c78f3f0c503ff97922ccc6d874330fd76be7c72bc49f62
NIDS Severity Alert suricata high ET HUNTING SUSPICIOUS Firesale gTLD EXE DL with no Referer June 13 2016
GET /film.php?id=FLEGT4.exe HTTP/1.1
Host: grabify.link
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 27 Sep 2023 23:59:19 GMT
content-type: text/html; charset=UTF-8
cache-control: no-cache, private
x-ratelimit-limit: 15
x-ratelimit-remaining: 13
set-cookie: XSRF-TOKEN=eyJpdiI6IkNPelIweGRtdlVzQXM2UWNrY1ZVQlE9PSIsInZhbHVlIjoiWFdkZDNTNHhPSVVVQjhYdmhQcFRPL1RrZmVleDFWOFhPM0VkdmhuTHd2TzJyc1JXU3NRZVRJdTVxejBNcG5peDhoVmd4bnhHS3Z3OVlSMWZ6enF0TTdhb3ViaUl2Nkk3MGNtMEZwTXNYd1VybW55V284QTNSMGF4NFVlYXkvSTUiLCJtYWMiOiJjZGFlMWUzODhkNThjMzk2YmQ1ZmUxOGQ0NjliN2NmOWUxOTQyZWIzNzBlZmVlOTc0NDM1ZWUzNjM5MjZkNDg0IiwidGFnIjoiIn0%3D; expires=Thu, 28 Sep 2023 04:59:19 GMT; Max-Age=18000; path=/; secure
g_session=eyJpdiI6IkFnaEpQWmluZjFNL3FtRms5MEFQMGc9PSIsInZhbHVlIjoiR3JGMEUxQXE2VnJRdVI0d3Z5SUVJQy9aY0hDd3dZbnVsWnN0TkM1a1JvbVJwQnBoNTZVWlJzVXV4VTJNcUI2WXRwZkkyY2dHSTJ5RDdzMW9zZldPRFg4S0NUeVRQMkhLVXNpdzA4aWc1WFRkMk9vT1NTK292cEwxS3FxWk4xN3MiLCJtYWMiOiI1ZDVkM2Q2NjA2NDk2NWM2YmJkOTkwZjk3MWI5MDBkMTQ1MTNjMGE5MGNiM2FhYWVjMGI5ZjE5MTQyYjMxZTY3IiwidGFnIjoiIn0%3D; expires=Thu, 28 Sep 2023 04:59:19 GMT; Max-Age=18000; path=/; secure; httponly
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=oifG488E7kXwbdGy0RG89yzyXa2udHhPey6rdCbdp5YQu53L1T4SodUwareM0gj4Mey5pcjt0BNkRkFh%2F41N1c73EdJInu6Zt4ViJmSANKWsrw4buiP671H%2FYCxxTg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80d7b31aef6856cb-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
urseforge.com/minecraft/search?page=1&pageSize=20&sortType=1&class=mc-mods
77.247.183.153 11 B URL urseforge.com/minecraft/search?page=1&pageSize=20&sortType=1&class=mc-mods
IP 77.247.183.153:0
ASN #43350 NForce Entertainment B.V.
File type ASCII text, with no line terminators
Hash 32682312d17c7cbf18e73594f5570319
60e22121bdd0bc71cdb2bae2a3aa577006b2eae9
e55fb1a1d731153e943b68844af12dcce8bfac917c98ffdea64c80da0607dd47
GET /minecraft/search?page=1&pageSize=20&sortType=1&class=mc-mods HTTP/1.1
Host: urseforge.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
cache-control: max-age=0, private, must-revalidate
content-length: 11
date: Wed, 27 Sep 2023 23:59:22 GMT
location: http://vibiu-dau.com/zclkvisitor/e1303ca6-5d91-11ee-95f3-0a54427315b5/72092e88-2c53-401c-b988-51ef43ce1034?campaignid=9f91b420-e5de-11ed-a30d-0a918cbcbb97
server: Cowboy
set-cookie: sid=e11c6298-5d91-11ee-a6b6-929169cd7321; path=/; domain=.urseforge.com; expires=Tue, 16 Oct 2091 03:13:29 GMT; max-age=2147483647; secure; HttpOnly
X-Firefox-Spdy: h2
vibiu-dau.com/zclkvisitor/e1303ca6-5d91-11ee-95f3-0a54427315b5/72092e88-2c53-401c-b988-51ef43ce1034?campaignid=9f91b420-e5de-11ed-a30d-0a918cbcbb97
18.232.14.192 1.1 kB URL vibiu-dau.com/zclkvisitor/e1303ca6-5d91-11ee-95f3-0a54427315b5/72092e88-2c53-401c-b988-51ef43ce1034?campaignid=9f91b420-e5de-11ed-a30d-0a918cbcbb97
IP 18.232.14.192:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash bb10a6aedd6d53f6ef509d081408d0e1
e351f300633af8afd20b023d8c15a733bbe74822
52f88bef1115fc38a0fc1e5cdf9626c8f8026114d3e63c7d48f492ef812d4137
GET /zclkvisitor/e1303ca6-5d91-11ee-95f3-0a54427315b5/72092e88-2c53-401c-b988-51ef43ce1034?campaignid=9f91b420-e5de-11ed-a30d-0a918cbcbb97 HTTP/1.1
Host: vibiu-dau.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200
Date: Wed, 27 Sep 2023 23:59:23 GMT
Content-Type: text/html;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-store, no-cache, pre-check=0, post-check=0
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
x-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
X-WebKit-CSP: default-src 'self'; script-src 'self' 'unsafe-inline'
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET,POST,OPTIONS
Access-Control-Allow-Headers: X-Requested-With,Content-Type,x-exadsrtb-version,x-openrtb-version,x-zerortb-version,X-Flag
Server: tJaKTiqs
grabify.link/cdn-cgi/rum?
104.26.8.202 0 B URL grabify.link/cdn-cgi/rum?
IP 104.26.8.202:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cdn-cgi/rum? HTTP/1.1
Host: grabify.link
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 480
Origin: https://grabify.link
DNT: 1
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6IlN6R1IwS2lpK3Ryck0vakx4UENubHc9PSIsInZhbHVlIjoiVXZ0ckQxQTRhdUtRbjVQS09uRjZjSGFJRlpzY01OSWNQSVlRVVZ1OVR5T2o3RnAvM0dYd2pMVDRZK2RITTl0WVF4dXQzclZTR3lzeEQvRzdlb2dGSytCMldteGkrMFIxRlByU2UzSnVmZS9MendXYm5FTGJmei8zTlVCZDl6WkkiLCJtYWMiOiI4MWJhNWJiOWNhZWI5YWQ4N2QwZGEwMTU5NTAxNzUzZDk2OTRiZGM5OTg0ZTAyYjRhODNiMGVmZmQxZTBhNjU3IiwidGFnIjoiIn0%3D; g_session=eyJpdiI6IkdrTTIyZUYvK21oZ2F2UXpKRHVEVlE9PSIsInZhbHVlIjoiNjZWcUl5Y29OYzBtYlcxVXZDU050bElZVGovZmZRNGhYTXY0NkZvUVBINmVJNnNNL21nL3lWMXFkbzJXUVFmVnF5ZW1DVk92NzMwSXlXVHIxR1N3eXlZemFUTDNuK09FT2JUU3FWS25hWDFHaWs5Z3kwL1B6ODVjd242VDliM3EiLCJtYWMiOiJiMWVjNWNjMGYxMGFiYmIwOTliZWI5ZjIyZmI0YWRjMjEyNTZjYjEyZWFmNGQzMTdmNGY3ODc4OTNjZDczOGU4IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/3 204 No Content
date: Wed, 27 Sep 2023 23:59:23 GMT
access-control-allow-origin: https://grabify.link
access-control-allow-methods: POST,OPTIONS
access-control-max-age: 86400
vary: Origin
access-control-allow-credentials: true
server: cloudflare
cf-ray: 80d7b33a6ed45688-OSL
x-frame-options: DENY
x-content-type-options: nosniff
ocsp.r2m01.amazontrust.com/
143.204.48.16 471 B URL ocsp.r2m01.amazontrust.com/
IP 143.204.48.16:0
Hash 3bfbcb9ff59a3c6651793c155b8101e9
a453fd51eed2a1e9b44b26a63cbc2b9f757005ad
625edd954b0a28f1cc6e9d435a52479b9a73043af5bc03aeda764c7bc7c860a6
POST / HTTP/1.1
Host: ocsp.r2m01.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=7200
Date: Wed, 27 Sep 2023 23:59:23 GMT
Last-Modified: Wed, 27 Sep 2023 22:19:06 GMT
Server: ECAcc (amb/6B38)
X-Cache: Miss from cloudfront
Via: 1.1 1d8cf7c8865ed1078c19a98771ad34ca.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 6p_-H-ZEcMR-jCl6pVy95-on9UQQhIMTCT_ZJaB_ktJJfNa2b-RU0A==
Age: 6017
vibiu-dau.com/zclkredirect?visitid=e1303ca6-5d91-11ee-95f3-0a54427315b5&type=js&browserWidth=1280&browserHeight=1024&iframeDetected=false&webdriverDetected=false
18.232.14.192 724 B URL vibiu-dau.com/zclkredirect?visitid=e1303ca6-5d91-11ee-95f3-0a54427315b5&type=js&browserWidth=1280&browserHeight=1024&iframeDetected=false&webdriverDetected=false
IP 18.232.14.192:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (319)
Hash 65377340e3977bbceead9d6a223014d5
caef3011ae122406787384743c051869805f6d42
fd28ea43e92e27fd1b7253f4a5efc5a7aef40464643fbcbe401b3a8c01c2e338
GET /zclkredirect?visitid=e1303ca6-5d91-11ee-95f3-0a54427315b5&type=js&browserWidth=1280&browserHeight=1024&iframeDetected=false&webdriverDetected=false HTTP/1.1
Host: vibiu-dau.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://vibiu-dau.com/zclkvisitor/e1303ca6-5d91-11ee-95f3-0a54427315b5/72092e88-2c53-401c-b988-51ef43ce1034?campaignid=9f91b420-e5de-11ed-a30d-0a918cbcbb97
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200
Date: Wed, 27 Sep 2023 23:59:23 GMT
Content-Type: text/html;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-store, no-cache, pre-check=0, post-check=0
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
x-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
X-WebKit-CSP: default-src 'self'; script-src 'self' 'unsafe-inline'
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET,POST,OPTIONS
Access-Control-Allow-Headers: X-Requested-With,Content-Type,x-exadsrtb-version,x-openrtb-version,x-zerortb-version,X-Flag
redirected: JS
Server: VTFOhAFw
vibiu-dau.com/favicon.ico
18.232.14.192 653 B URL vibiu-dau.com/favicon.ico
IP 18.232.14.192:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (649), with no line terminators
Hash ba2732b1b2fa2626ffaa15f62f9e7d66
203d4e7fbb1d80449d6e4e1f3ae7a9bf8625debe
879861cb72fe9fbb476dab246021c4c83b4066327de2529e05ec54d3afb0a1c8
GET /favicon.ico HTTP/1.1
Host: vibiu-dau.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://vibiu-dau.com/zclkredirect?visitid=e1303ca6-5d91-11ee-95f3-0a54427315b5&type=js&browserWidth=1280&browserHeight=1024&iframeDetected=false&webdriverDetected=false
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404
Date: Wed, 27 Sep 2023 23:59:24 GMT
Content-Type: text/html;charset=utf-8
Content-Length: 653
Connection: keep-alive
Cache-Control: no-store, no-cache, pre-check=0, post-check=0
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
x-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
X-WebKit-CSP: default-src 'self'; script-src 'self' 'unsafe-inline'
Content-Language: en
Server: ODsgJKtY
ocsp.r2m02.amazontrust.com/
143.204.48.16 471 B URL ocsp.r2m02.amazontrust.com/
IP 143.204.48.16:0
Hash ce29aaacdc3c4beb574807f33b46d479
7aba1d0ae8fc9d4c1a5b91c374fe60caec331c8e
5c329ef1ac337bb7b75f14c0e89a2868414a484026df2aa3c3f023625fd69627
POST / HTTP/1.1
Host: ocsp.r2m02.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=7200
Date: Wed, 27 Sep 2023 23:59:24 GMT
Last-Modified: Wed, 27 Sep 2023 23:58:22 GMT
Server: ECAcc (amb/6AD6)
X-Cache: Miss from cloudfront
Via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 12pnt_GyNcWxAqDe8CIXrJGgWF72ORCKPHImMHxeok-rfDDQlkLuTA==
Age: 62
app.linqto.com/signup?utm_campaign=ZP_Int_Epic_Signup&utm_term=badious-buzzard_urseforge%2Curseforge.com%2Ccurseforge&utm_source=ZeroPark&utm_medium=charlie-sub-OCVqYSFn&click_id=zre1303ca65d9111ee95f30a54427315b5ff036e8c8ed844348f63f5abd72aa295076607058372853244
34.215.53.193 2.4 kB URL app.linqto.com/signup?utm_campaign=ZP_Int_Epic_Signup&utm_term=badious-buzzard_urseforge%2Curseforge.com%2Ccurseforge&utm_source=ZeroPark&utm_medium=charlie-sub-OCVqYSFn&click_id=zre1303ca65d9111ee95f30a54427315b5ff036e8c8ed844348f63f5abd72aa295076607058372853244
IP 34.215.53.193:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (5351), with no line terminators
Hash dbee3936aab473dcb3ec4635b57dc434
e376eb9486df4a3e417e117c5655fb6beba2aae8
650906326b7712a60ffe846073f609db9401c7e66c16b03c013e4339c8a690cc
GET /signup?utm_campaign=ZP_Int_Epic_Signup&utm_term=badious-buzzard_urseforge%2Curseforge.com%2Ccurseforge&utm_source=ZeroPark&utm_medium=charlie-sub-OCVqYSFn&click_id=zre1303ca65d9111ee95f30a54427315b5ff036e8c8ed844348f63f5abd72aa295076607058372853244 HTTP/1.1
Host: app.linqto.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://vibiu-dau.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 27 Sep 2023 23:59:24 GMT
content-type: text/html; charset=UTF-8
content-length: 2404
server: Apache/2.4.57 () OpenSSL/1.0.2k-fips
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Fri, 22 Sep 2023 20:07:18 GMT
etag: "14e7-605f827cc6980-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
x-hostname: awsProdB1
x-xss-protection: 1; mode=block
content-security-policy: frame-ancestors 'self'; default-src 'self' data: blob: 'unsafe-inline' 'unsafe-eval' *.g.doubleclick.net cdnjs.cloudflare.com cdn.uphold.com fonts.googleapis.com *.gstatic.com cdnjs.cloudflare.com www.googletagmanager.com cdn.plaid.com cdn.branch.io app.link www.google-analytics.com api2.branch.io *.microblink.com www.youtube.com *.googlevideo.com *.hs-scripts.com js.hscollectedforms.net js.hs-banner.com js.hs-analytics.net *.hubspot.com forms.hsforms.com purecatamphetamine.github.io js.hsadspixel.net api.hubapi.com connect.facebook.net snap.licdn.com www.googleadservices.com *.linkedin.com *.oribi.io *.google.com google.com www.facebook.com p.adsymptotic.com www.google.com.tw *.sentry.io live.rezync.com secure.adnxs.com *.rfihub.net *.rfihub.com *.bluekai.com *.mixpanel.com *.zoominfo.com *.clickagy.com d34r8q7sht0t9k.cloudfront.net cdn.taboola.com trc.taboola.com trc-events.taboola.com cds.taboola.com pips.taboola.com verifi.podscribe.com js.usemessages.com *.plaid.com cdn.growthbook.io appleid.cdn-apple.com *.braze.com *.appboycdn.com d3pkntwtp2ukl5.cloudfront.net d1wbjksx0xxdn3.cloudfront.net events.ub-analytics.com braze-images.com;
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/semantic-ui/2.4.1/semantic.min.css
104.17.24.14200 OK 80 kB URL GET HTTP/2 cdnjs.cloudflare.com/ajax/libs/semantic-ui/2.4.1/semantic.min.css
IP 104.17.24.14:443
Requested by https://app.linqto.com/signup?utm_campaign=ZP_Int_Epic_Signup&utm_term=badious-buzzard_urseforge%2Curseforge.com%2Ccurseforge&utm_source=ZeroPark&utm_medium=charlie-sub-OCVqYSFn&click_id=zre1303ca65d9111ee95f30a54427315b5ff036e8c8ed844348f63f5abd72aa295076607058372853244
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File type ASCII text, with very long lines (59894)
Hash 979091fc4831c0cdf5dcecb2746c982f
59af1bb82700788b8eb751be1c960edb1bce3074
f666e439f561a3764f5df33b5bcb15d929ddac60ee87bc2ec8b8edb167932354
GET /ajax/libs/semantic-ui/2.4.1/semantic.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://app.linqto.com
DNT: 1
Connection: keep-alive
Referer: https://app.linqto.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 27 Sep 2023 23:59:25 GMT
content-type: text/css; charset=utf-8
content-length: 79566
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "64942dfb-136ce"
last-modified: Thu, 22 Jun 2023 11:18:19 GMT
cf-cdnjs-via: cfworker/r2
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 6081674
expires: Mon, 16 Sep 2024 23:59:25 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tiergPBirv8ciMkZtnbomkZhHWxVZMfU5sgWWRbtJr8ELC%2FnAGCCjdSNntf3f3%2BIx2pzwetHFyPj%2FullT9bdEBMhqwRtcujlb%2FPm%2FuYW2gOw0q5QYvoqU2d7l1KtMg6dw7zEYZG0"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 80d7b3457e6eb529-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131 471 B IP 142.250.74.131:0
Hash cbb6b90952f5230c043b0bbe8fb528b1
8e990f9e4448fdfb0b2c4dce68a9f5d6e3a843d9
2aaceb74eb7e1e69517de5bb254cdd373aa0abbd1c51acd3495756fec52ec5ce
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 27 Sep 2023 23:59:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtag/js?id=GA_TRACKING_ID
142.250.74.168 44 kB URL www.googletagmanager.com/gtag/js?id=GA_TRACKING_ID
IP 142.250.74.168:0
File type ASCII text, with very long lines (2213)
Hash b72f979c84ed194e218814d19bfb7321
008a9be1c9bc5127a8195f6ad0b9b42b357cbb27
337646a0ae361f768dd15da8f2802c129eebf78ddc9be0bd2b2d2436764dcfa9
GET /gtag/js?id=GA_TRACKING_ID HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://app.linqto.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 27 Sep 2023 23:59:25 GMT
expires: Wed, 27 Sep 2023 23:59:25 GMT
cache-control: private, max-age=900
last-modified: Wed, 27 Sep 2023 22:08:23 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 44324
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131 471 B IP 142.250.74.131:0
Hash cbb6b90952f5230c043b0bbe8fb528b1
8e990f9e4448fdfb0b2c4dce68a9f5d6e3a843d9
2aaceb74eb7e1e69517de5bb254cdd373aa0abbd1c51acd3495756fec52ec5ce
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 27 Sep 2023 23:59:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131 471 B IP 142.250.74.131:0
Hash 0bbd1e938700d156e361c1ab8640f3bd
20e70357b360a225b5094714bc89889fd045aa14
7e4f05e6aba3abeaf61da9d17ed8d5518df3bc493c3b319eb29faa4c282fb8db
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 27 Sep 2023 23:59:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.googleapis.com/css?family=Lato:400,700,400italic,700italic&subset=latin
216.58.207.202 920 B URL fonts.googleapis.com/css?family=Lato:400,700,400italic,700italic&subset=latin
IP 216.58.207.202:0
File type gzip compressed data, max compression\012- data
Hash 592df05c9b91cbb11ac8dec5c761ebb9
bf0e1517e122c6ab8e18945eb27f91143b819160
4f3d916fdf345234cab3c40375cb5cc58124ea24759fb1b4c2125c0b13bc5bb7
GET /css?family=Lato:400,700,400italic,700italic&subset=latin HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cdnjs.cloudflare.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 27 Sep 2023 23:59:25 GMT
date: Wed, 27 Sep 2023 23:59:25 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
app.linqto.com/static/css/4.82138376.chunk.css
34.215.53.193 28 kB URL app.linqto.com/static/css/4.82138376.chunk.css
IP 34.215.53.193:0
File type ASCII text, with very long lines (58044)
Hash 033f82c4906b7ddbc38e26ffe079c21e
50d3425153a086517a87419cd8850e02ff4b00e2
1a87be9afac46832c1980765fbd95b293f9f0a147886449c85d309b3457863c9
GET /static/css/4.82138376.chunk.css HTTP/1.1
Host: app.linqto.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://app.linqto.com/signup?utm_campaign=ZP_Int_Epic_Signup&utm_term=badious-buzzard_urseforge%2Curseforge.com%2Ccurseforge&utm_source=ZeroPark&utm_medium=charlie-sub-OCVqYSFn&click_id=zre1303ca65d9111ee95f30a54427315b5ff036e8c8ed844348f63f5abd72aa295076607058372853244
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 27 Sep 2023 23:59:25 GMT
content-type: text/css
content-length: 28013
server: Apache/2.4.57 () OpenSSL/1.0.2k-fips
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Fri, 22 Sep 2023 20:07:19 GMT
etag: "e2ed-605f827dbabc0-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
x-hostname: awsProdA2
x-xss-protection: 1; mode=block
content-security-policy: frame-ancestors 'self'; default-src 'self' data: blob: 'unsafe-inline' 'unsafe-eval' *.g.doubleclick.net cdnjs.cloudflare.com cdn.uphold.com fonts.googleapis.com *.gstatic.com cdnjs.cloudflare.com www.googletagmanager.com cdn.plaid.com cdn.branch.io app.link www.google-analytics.com api2.branch.io *.microblink.com www.youtube.com *.googlevideo.com *.hs-scripts.com js.hscollectedforms.net js.hs-banner.com js.hs-analytics.net *.hubspot.com forms.hsforms.com purecatamphetamine.github.io js.hsadspixel.net api.hubapi.com connect.facebook.net snap.licdn.com www.googleadservices.com *.linkedin.com *.oribi.io *.google.com google.com www.facebook.com p.adsymptotic.com www.google.com.tw *.sentry.io live.rezync.com secure.adnxs.com *.rfihub.net *.rfihub.com *.bluekai.com *.mixpanel.com *.zoominfo.com *.clickagy.com d34r8q7sht0t9k.cloudfront.net cdn.taboola.com trc.taboola.com trc-events.taboola.com cds.taboola.com pips.taboola.com verifi.podscribe.com js.usemessages.com *.plaid.com cdn.growthbook.io appleid.cdn-apple.com *.braze.com *.appboycdn.com d3pkntwtp2ukl5.cloudfront.net d1wbjksx0xxdn3.cloudfront.net events.ub-analytics.com braze-images.com;
X-Firefox-Spdy: h2
www.googletagmanager.com/gtm.js?id=GTM-5HGLBZS
142.250.74.168 89 kB URL www.googletagmanager.com/gtm.js?id=GTM-5HGLBZS
IP 142.250.74.168:0
File type ASCII text, with very long lines (9635)
Hash 505ccd044f509e8d08d59d435cec4fb8
e1bbbc6a3f2e0e1ae2ad21b598277476874f945c
42e5ac037db57fd952a32e413739bdecf950ec6d80faa42865bf925a002ea9a3
GET /gtm.js?id=GTM-5HGLBZS HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://app.linqto.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 27 Sep 2023 23:59:25 GMT
expires: Wed, 27 Sep 2023 23:59:25 GMT
cache-control: private, max-age=900
last-modified: Wed, 27 Sep 2023 22:08:23 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 88654
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.googletagmanager.com/gtag/js?id=G-3RQ2QB03RK&l=dataLayer&cx=c
142.250.74.168200 OK 93 kB URL GET HTTP/3 www.googletagmanager.com/gtag/js?id=G-3RQ2QB03RK&l=dataLayer&cx=c
IP 142.250.74.168:443
Requested by https://app.linqto.com/signup?utm_campaign=ZP_Int_Epic_Signup&utm_term=badious-buzzard_urseforge%2Curseforge.com%2Ccurseforge&utm_source=ZeroPark&utm_medium=charlie-sub-OCVqYSFn&click_id=zre1303ca65d9111ee95f30a54427315b5ff036e8c8ed844348f63f5abd72aa295076607058372853244
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint00:ED:16:68:8D:DB:14:8B:43:01:81:CA:83:9A:AE:5B:24:AB:11:18
ValidityMon, 04 Sep 2023 08:17:06 GMT - Mon, 27 Nov 2023 08:17:05 GMT
File type ASCII text, with very long lines (7470)
Hash ce45a0afc0836da1c01115d3a125d466
897177f0a21c03d8a7d5da096e6a833e7534a36a
abe548693153f28b9c22665144d20150f34ecd81864555684b1fe3c216b03e1b
GET /gtag/js?id=G-3RQ2QB03RK&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://app.linqto.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 27 Sep 2023 23:59:25 GMT
expires: Wed, 27 Sep 2023 23:59:25 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 93364
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
app.linqto.com/static/css/main.4ddc3fea.chunk.css
34.215.53.193200 OK 42 kB URL GET HTTP/2 app.linqto.com/static/css/main.4ddc3fea.chunk.css
IP 34.215.53.193:443
Requested by https://app.linqto.com/signup?utm_campaign=ZP_Int_Epic_Signup&utm_term=badious-buzzard_urseforge%2Curseforge.com%2Ccurseforge&utm_source=ZeroPark&utm_medium=charlie-sub-OCVqYSFn&click_id=zre1303ca65d9111ee95f30a54427315b5ff036e8c8ed844348f63f5abd72aa295076607058372853244
Certificate IssuerAmazon
Subjectlinqto.com
Fingerprint2B:09:E8:D2:E2:C0:B8:A2:4A:C7:6F:DA:42:42:FC:CD:A9:E0:99:5E
ValiditySun, 11 Jun 2023 00:00:00 GMT - Wed, 10 Jul 2024 23:59:59 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash e0f49ab8f20275fe7fd9f7a1e6123183
deeb5cad69353f7991781670d8cddd6292fc0023
1b2a78b1668a400a2366c791f92186df40e815caf83b191662c889d6aa72ea6b
GET /static/css/main.4ddc3fea.chunk.css HTTP/1.1
Host: app.linqto.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://app.linqto.com/signup?utm_campaign=ZP_Int_Epic_Signup&utm_term=badious-buzzard_urseforge%2Curseforge.com%2Ccurseforge&utm_source=ZeroPark&utm_medium=charlie-sub-OCVqYSFn&click_id=zre1303ca65d9111ee95f30a54427315b5ff036e8c8ed844348f63f5abd72aa295076607058372853244
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 27 Sep 2023 23:59:25 GMT
content-type: text/css
content-length: 42427
server: Apache/2.4.57 () OpenSSL/1.0.2k-fips
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Fri, 22 Sep 2023 20:07:19 GMT
etag: "49463-605f827dbabc0-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
x-hostname: awsProdB1
x-xss-protection: 1; mode=block
content-security-policy: frame-ancestors 'self'; default-src 'self' data: blob: 'unsafe-inline' 'unsafe-eval' *.g.doubleclick.net cdnjs.cloudflare.com cdn.uphold.com fonts.googleapis.com *.gstatic.com cdnjs.cloudflare.com www.googletagmanager.com cdn.plaid.com cdn.branch.io app.link www.google-analytics.com api2.branch.io *.microblink.com www.youtube.com *.googlevideo.com *.hs-scripts.com js.hscollectedforms.net js.hs-banner.com js.hs-analytics.net *.hubspot.com forms.hsforms.com purecatamphetamine.github.io js.hsadspixel.net api.hubapi.com connect.facebook.net snap.licdn.com www.googleadservices.com *.linkedin.com *.oribi.io *.google.com google.com www.facebook.com p.adsymptotic.com www.google.com.tw *.sentry.io live.rezync.com secure.adnxs.com *.rfihub.net *.rfihub.com *.bluekai.com *.mixpanel.com *.zoominfo.com *.clickagy.com d34r8q7sht0t9k.cloudfront.net cdn.taboola.com trc.taboola.com trc-events.taboola.com cds.taboola.com pips.taboola.com verifi.podscribe.com js.usemessages.com *.plaid.com cdn.growthbook.io appleid.cdn-apple.com *.braze.com *.appboycdn.com d3pkntwtp2ukl5.cloudfront.net d1wbjksx0xxdn3.cloudfront.net events.ub-analytics.com braze-images.com;
X-Firefox-Spdy: h2
app.linqto.com/static/js/4.b15c1d65.chunk.js
34.215.53.193 578 kB URL app.linqto.com/static/js/4.b15c1d65.chunk.js
IP 34.215.53.193:0
File type ASCII text, with very long lines (65462)
Size 578 kB (577977 bytes)
Hash cfabdd9a318fd58f4faf569ecef89da6
177fff418c10990e3022d41dc4043a9e37cb7bdc
f9bb8b0a22088459128c51e1e0bb6e54dbfabef854113c541145243d32f2bed0
GET /static/js/4.b15c1d65.chunk.js HTTP/1.1
Host: app.linqto.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://app.linqto.com/signup?utm_campaign=ZP_Int_Epic_Signup&utm_term=badious-buzzard_urseforge%2Curseforge.com%2Ccurseforge&utm_source=ZeroPark&utm_medium=charlie-sub-OCVqYSFn&click_id=zre1303ca65d9111ee95f30a54427315b5ff036e8c8ed844348f63f5abd72aa295076607058372853244
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 27 Sep 2023 23:59:25 GMT
content-type: application/javascript
server: Apache/2.4.57 () OpenSSL/1.0.2k-fips
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Fri, 22 Sep 2023 20:07:19 GMT
etag: "1dc995-605f827dbabc0-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
x-hostname: awsProdB2
x-xss-protection: 1; mode=block
content-security-policy: frame-ancestors 'self'; default-src 'self' data: blob: 'unsafe-inline' 'unsafe-eval' *.g.doubleclick.net cdnjs.cloudflare.com cdn.uphold.com fonts.googleapis.com *.gstatic.com cdnjs.cloudflare.com www.googletagmanager.com cdn.plaid.com cdn.branch.io app.link www.google-analytics.com api2.branch.io *.microblink.com www.youtube.com *.googlevideo.com *.hs-scripts.com js.hscollectedforms.net js.hs-banner.com js.hs-analytics.net *.hubspot.com forms.hsforms.com purecatamphetamine.github.io js.hsadspixel.net api.hubapi.com connect.facebook.net snap.licdn.com www.googleadservices.com *.linkedin.com *.oribi.io *.google.com google.com www.facebook.com p.adsymptotic.com www.google.com.tw *.sentry.io live.rezync.com secure.adnxs.com *.rfihub.net *.rfihub.com *.bluekai.com *.mixpanel.com *.zoominfo.com *.clickagy.com d34r8q7sht0t9k.cloudfront.net cdn.taboola.com trc.taboola.com trc-events.taboola.com cds.taboola.com pips.taboola.com verifi.podscribe.com js.usemessages.com *.plaid.com cdn.growthbook.io appleid.cdn-apple.com *.braze.com *.appboycdn.com d3pkntwtp2ukl5.cloudfront.net d1wbjksx0xxdn3.cloudfront.net events.ub-analytics.com braze-images.com;
X-Firefox-Spdy: h2
fonts.googleapis.com/css2?family=Roboto:wght@300;400;500;700;900&family=Source+Sans+Pro:wght@300;400;600;700;900&display=swap
216.58.207.202 1.6 kB URL fonts.googleapis.com/css2?family=Roboto:wght@300;400;500;700;900&family=Source+Sans+Pro:wght@300;400;600;700;900&display=swap
IP 216.58.207.202:0
File type gzip compressed data, max compression\012- data
Hash 45febd6eea1ce5eefd40cbb068044d05
f7f28f6f720249092cf06729d8cdc6bf6b34d7e6
e46efe2f607dc384beeda065055dd8f9e163f349bdcf657c61e11a7ca0663043
GET /css2?family=Roboto:wght@300;400;500;700;900&family=Source+Sans+Pro:wght@300;400;600;700;900&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://app.linqto.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 27 Sep 2023 23:59:25 GMT
date: Wed, 27 Sep 2023 23:59:25 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.googletagmanager.com/gtag/js?id=G-3RQ2QB03RK
142.250.74.168200 OK 94 kB URL GET HTTP/3 www.googletagmanager.com/gtag/js?id=G-3RQ2QB03RK
IP 142.250.74.168:443
Requested by https://app.linqto.com/signup?utm_campaign=ZP_Int_Epic_Signup&utm_term=badious-buzzard_urseforge%2Curseforge.com%2Ccurseforge&utm_source=ZeroPark&utm_medium=charlie-sub-OCVqYSFn&click_id=zre1303ca65d9111ee95f30a54427315b5ff036e8c8ed844348f63f5abd72aa295076607058372853244
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint00:ED:16:68:8D:DB:14:8B:43:01:81:CA:83:9A:AE:5B:24:AB:11:18
ValidityMon, 04 Sep 2023 08:17:06 GMT - Mon, 27 Nov 2023 08:17:05 GMT
File type ASCII text, with very long lines (7470)
Hash b013db1871564882014f513f03096206
402a366fe7d955fedfeccd8c16b87aa421ba9771
93b6435e6c2a460d53a54c6210ad9094309947cf30de2194b43f798925c32b88
GET /gtag/js?id=G-3RQ2QB03RK HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://app.linqto.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 27 Sep 2023 23:59:26 GMT
expires: Wed, 27 Sep 2023 23:59:26 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 94494
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
cdn.growthbook.io/api/features/sdk-ko0KaVCh6GNPLYUB
151.101.1.91 463 B URL cdn.growthbook.io/api/features/sdk-ko0KaVCh6GNPLYUB
IP 151.101.1.91:0
File type JSON data\012- , ASCII text, with very long lines (463), with no line terminators
Hash cafbaa61becaf1f55a575181e6e242a2
1e79a6c3d72b0d853e1c6780e4c3978542b84932
51fceb76ea093ca774fde2472fd95f9a636691d10313af97eb3b276c891e8890
GET /api/features/sdk-ko0KaVCh6GNPLYUB HTTP/1.1
Host: cdn.growthbook.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://app.linqto.com/
Origin: https://app.linqto.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/json; charset=utf-8
x-powered-by: Express
access-control-allow-origin: *
cache-control: public, max-age=30, stale-while-revalidate=3600, stale-if-error=36000
etag: W/"1cf-Hnmmw9crDYU+HGeA5MOXhUK4STI"
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Wed, 27 Sep 2023 23:59:26 GMT
age: 28
x-served-by: cache-iad-kiad7000179-IAD, cache-bma1632-BMA
x-cache: HIT, HIT
x-cache-hits: 1613780, 1
x-timer: S1695859167.760451,VS0,VE1
vary: Accept-Encoding
x-sse-support: enabled
access-control-expose-headers: x-sse-support
content-length: 463
X-Firefox-Spdy: h2
fonts.gstatic.com/s/lato/v24/S6uyw4BMUTPHjx4wXg.woff2
216.58.207.227 24 kB URL fonts.gstatic.com/s/lato/v24/S6uyw4BMUTPHjx4wXg.woff2
IP 216.58.207.227:0
File type Web Open Font Format (Version 2), TrueType, length 23580, version 1.0\012- data
Hash e1b3b5908c9cf23dfb2b9c52b9a023ab
fcd4136085f2a03481d9958cc6793a5ed98e714c
918b7dc3e2e2d015c16ce08b57bcb64d2253bafc1707658f361e72865498e537
GET /s/lato/v24/S6uyw4BMUTPHjx4wXg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://app.linqto.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 23580
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 21 Sep 2023 15:16:10 GMT
expires: Fri, 20 Sep 2024 15:16:10 GMT
cache-control: public, max-age=31536000
age: 549796
last-modified: Tue, 02 May 2023 15:17:22 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2
216.58.207.227200 OK 15 kB URL GET HTTP/2 fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2
IP 216.58.207.227:443
Requested by https://app.linqto.com/signup?utm_campaign=ZP_Int_Epic_Signup&utm_term=badious-buzzard_urseforge%2Curseforge.com%2Ccurseforge&utm_source=ZeroPark&utm_medium=charlie-sub-OCVqYSFn&click_id=zre1303ca65d9111ee95f30a54427315b5ff036e8c8ed844348f63f5abd72aa295076607058372853244
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint3D:35:56:30:C0:0F:0C:7F:20:BA:7D:A8:48:DB:24:1B:15:F5:48:27
ValidityMon, 04 Sep 2023 08:23:09 GMT - Mon, 27 Nov 2023 08:23:08 GMT
File type Web Open Font Format (Version 2), TrueType, length 14892, version 1.0\012- data
Hash 9ec6deaf6bada919e20b98f9f7b718b1
501d36403ad8205e4644532600019ecb10f5cb0a
7b348b30ea1fe43857e68fc462c29e5c6e63c97666af75135c4396a272e54762
GET /s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://app.linqto.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14892
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 27 Sep 2023 07:39:48 GMT
expires: Thu, 26 Sep 2024 07:39:48 GMT
cache-control: public, max-age=31536000
age: 58778
last-modified: Thu, 01 Jun 2023 22:52:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131 471 B IP 142.250.74.131:0
Hash c84db2aa974ecd33b439a3a6124cea47
a55ea70feb23dfce1365b7aeb60cd3047b0ca1bb
5b6308af9df276542b1f5542a75827208cc0cb612feffc28efd3ef79da97d97a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 27 Sep 2023 23:59:26 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131 471 B IP 142.250.74.131:0
Hash a56fc4dd67bb37c1cb401ec13384cb59
a6c42318f5e170c977730c09d43642e281377924
ff516588b548958a8bb5e7110144f1e33482f2ae369343df7b653ab177562b57
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 27 Sep 2023 23:59:26 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ig4vwlxdu.woff2
216.58.207.227200 OK 15 kB URL GET HTTP/2 fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ig4vwlxdu.woff2
IP 216.58.207.227:443
Requested by https://app.linqto.com/signup?utm_campaign=ZP_Int_Epic_Signup&utm_term=badious-buzzard_urseforge%2Curseforge.com%2Ccurseforge&utm_source=ZeroPark&utm_medium=charlie-sub-OCVqYSFn&click_id=zre1303ca65d9111ee95f30a54427315b5ff036e8c8ed844348f63f5abd72aa295076607058372853244
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint3D:35:56:30:C0:0F:0C:7F:20:BA:7D:A8:48:DB:24:1B:15:F5:48:27
ValidityMon, 04 Sep 2023 08:23:09 GMT - Mon, 27 Nov 2023 08:23:08 GMT
File type Web Open Font Format (Version 2), TrueType, length 14712, version 1.0\012- data
Hash 3afeae0d768769f5e5f30ac9805c5b70
3ada17c2b462db3e7a1fd85c3f4670dfe7704f4d
0d0a6262c545e8bbc895116e5afb22579c468d7abb77e378f377d6fed57c1dce
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ig4vwlxdu.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://app.linqto.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14712
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 21 Sep 2023 15:16:10 GMT
expires: Fri, 20 Sep 2024 15:16:10 GMT
cache-control: public, max-age=31536000
age: 549797
last-modified: Thu, 01 Jun 2023 22:52:57 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
app.linqto.com/static/media/footer-logo.4c5b82c8.svg
34.215.53.193 456 B URL app.linqto.com/static/media/footer-logo.4c5b82c8.svg
IP 34.215.53.193:0
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (371)
Hash 0e75e2c5c8228418335cbf7cb4e1270b
4559ec0b0b8c95184b56f71b92cabd3cdf5139a8
60270cd5c310eb88aab53c2c0d2087f559fddd155050822c6d31a706b6133bbb
GET /static/media/footer-logo.4c5b82c8.svg HTTP/1.1
Host: app.linqto.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://app.linqto.com/signup?utm_campaign=ZP_Int_Epic_Signup&utm_term=badious-buzzard_urseforge%2Curseforge.com%2Ccurseforge&utm_source=ZeroPark&utm_medium=charlie-sub-OCVqYSFn&click_id=zre1303ca65d9111ee95f30a54427315b5ff036e8c8ed844348f63f5abd72aa295076607058372853244
Cookie: _gcl_au=1.1.731391507.1695859166; _ga_3RQ2QB03RK=GS1.1.1695859165.1.0.1695859165.60.0.0; _ga=GA1.1.862186572.1695859166; mp_9520a6432633394d40b28aa63ca84020_mixpanel=%7B%22distinct_id%22%3A%20%2218ad9154e9859-0dbe07fe85486a8-47380720-140000-18ad9154e991b5%22%2C%22%24device_id%22%3A%20%2218ad9154e9859-0dbe07fe85486a8-47380720-140000-18ad9154e991b5%22%2C%22utm_source%22%3A%20%22ZeroPark%22%2C%22utm_medium%22%3A%20%22charlie-sub-OCVqYSFn%22%2C%22utm_campaign%22%3A%20%22ZP_Int_Epic_Signup%22%2C%22utm_term%22%3A%20%22badious-buzzard_urseforge%2Curseforge.com%2Ccurseforge%22%2C%22%24initial_referrer%22%3A%20%22http%3A%2F%2Fvibiu-dau.com%2F%22%2C%22%24initial_referring_domain%22%3A%20%22vibiu-dau.com%22%7D; appInstallId=9ug4iik5y2c2l988
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 27 Sep 2023 23:59:27 GMT
content-type: image/svg+xml
content-length: 456
server: Apache/2.4.57 () OpenSSL/1.0.2k-fips
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Fri, 22 Sep 2023 20:07:20 GMT
etag: "31e-605f827eaee00-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
x-hostname: awsProdA1
x-xss-protection: 1; mode=block
content-security-policy: frame-ancestors 'self'; default-src 'self' data: blob: 'unsafe-inline' 'unsafe-eval' *.g.doubleclick.net cdnjs.cloudflare.com cdn.uphold.com fonts.googleapis.com *.gstatic.com cdnjs.cloudflare.com www.googletagmanager.com cdn.plaid.com cdn.branch.io app.link www.google-analytics.com api2.branch.io *.microblink.com www.youtube.com *.googlevideo.com *.hs-scripts.com js.hscollectedforms.net js.hs-banner.com js.hs-analytics.net *.hubspot.com forms.hsforms.com purecatamphetamine.github.io js.hsadspixel.net api.hubapi.com connect.facebook.net snap.licdn.com www.googleadservices.com *.linkedin.com *.oribi.io *.google.com google.com www.facebook.com p.adsymptotic.com www.google.com.tw *.sentry.io live.rezync.com secure.adnxs.com *.rfihub.net *.rfihub.com *.bluekai.com *.mixpanel.com *.zoominfo.com *.clickagy.com d34r8q7sht0t9k.cloudfront.net cdn.taboola.com trc.taboola.com trc-events.taboola.com cds.taboola.com pips.taboola.com verifi.podscribe.com js.usemessages.com *.plaid.com cdn.growthbook.io appleid.cdn-apple.com *.braze.com *.appboycdn.com d3pkntwtp2ukl5.cloudfront.net d1wbjksx0xxdn3.cloudfront.net events.ub-analytics.com braze-images.com;
X-Firefox-Spdy: h2
app.linqto.com/static/media/footer_instagram.1998831c.svg
34.215.53.193 2.0 kB URL app.linqto.com/static/media/footer_instagram.1998831c.svg
IP 34.215.53.193:0
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (2348)
Hash b08816d52c110c33f8284c5c467a1be4
5ed2531b299a5dcbd093ea00004c0444dd657908
aa47edd1ca5686bb3315969d5f79fbbe6f1900dd109891486ef63a0da376ddd1
GET /static/media/footer_instagram.1998831c.svg HTTP/1.1
Host: app.linqto.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://app.linqto.com/signup?utm_campaign=ZP_Int_Epic_Signup&utm_term=badious-buzzard_urseforge%2Curseforge.com%2Ccurseforge&utm_source=ZeroPark&utm_medium=charlie-sub-OCVqYSFn&click_id=zre1303ca65d9111ee95f30a54427315b5ff036e8c8ed844348f63f5abd72aa295076607058372853244
Cookie: _gcl_au=1.1.731391507.1695859166; _ga_3RQ2QB03RK=GS1.1.1695859165.1.0.1695859165.60.0.0; _ga=GA1.1.862186572.1695859166; mp_9520a6432633394d40b28aa63ca84020_mixpanel=%7B%22distinct_id%22%3A%20%2218ad9154e9859-0dbe07fe85486a8-47380720-140000-18ad9154e991b5%22%2C%22%24device_id%22%3A%20%2218ad9154e9859-0dbe07fe85486a8-47380720-140000-18ad9154e991b5%22%2C%22utm_source%22%3A%20%22ZeroPark%22%2C%22utm_medium%22%3A%20%22charlie-sub-OCVqYSFn%22%2C%22utm_campaign%22%3A%20%22ZP_Int_Epic_Signup%22%2C%22utm_term%22%3A%20%22badious-buzzard_urseforge%2Curseforge.com%2Ccurseforge%22%2C%22%24initial_referrer%22%3A%20%22http%3A%2F%2Fvibiu-dau.com%2F%22%2C%22%24initial_referring_domain%22%3A%20%22vibiu-dau.com%22%7D; appInstallId=9ug4iik5y2c2l988
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 27 Sep 2023 23:59:27 GMT
content-type: image/svg+xml
content-length: 1968
server: Apache/2.4.57 () OpenSSL/1.0.2k-fips
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Fri, 22 Sep 2023 20:07:20 GMT
etag: "1343-605f827eaee00-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
x-hostname: awsProdA2
x-xss-protection: 1; mode=block
content-security-policy: frame-ancestors 'self'; default-src 'self' data: blob: 'unsafe-inline' 'unsafe-eval' *.g.doubleclick.net cdnjs.cloudflare.com cdn.uphold.com fonts.googleapis.com *.gstatic.com cdnjs.cloudflare.com www.googletagmanager.com cdn.plaid.com cdn.branch.io app.link www.google-analytics.com api2.branch.io *.microblink.com www.youtube.com *.googlevideo.com *.hs-scripts.com js.hscollectedforms.net js.hs-banner.com js.hs-analytics.net *.hubspot.com forms.hsforms.com purecatamphetamine.github.io js.hsadspixel.net api.hubapi.com connect.facebook.net snap.licdn.com www.googleadservices.com *.linkedin.com *.oribi.io *.google.com google.com www.facebook.com p.adsymptotic.com www.google.com.tw *.sentry.io live.rezync.com secure.adnxs.com *.rfihub.net *.rfihub.com *.bluekai.com *.mixpanel.com *.zoominfo.com *.clickagy.com d34r8q7sht0t9k.cloudfront.net cdn.taboola.com trc.taboola.com trc-events.taboola.com cds.taboola.com pips.taboola.com verifi.podscribe.com js.usemessages.com *.plaid.com cdn.growthbook.io appleid.cdn-apple.com *.braze.com *.appboycdn.com d3pkntwtp2ukl5.cloudfront.net d1wbjksx0xxdn3.cloudfront.net events.ub-analytics.com braze-images.com;
X-Firefox-Spdy: h2
app.linqto.com/static/media/footer_facebook.c1242801.svg
34.215.53.193 654 B URL app.linqto.com/static/media/footer_facebook.c1242801.svg
IP 34.215.53.193:0
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (952)
Hash 574cd5c182e1bf6d168eae203cb52fcf
83c608c526117ea9a309ab40d2e879a7d8d567f5
bbbb3ec37e8883409ce2b6b867325e8a7296b2b1011a09a56aad8f7127cec375
GET /static/media/footer_facebook.c1242801.svg HTTP/1.1
Host: app.linqto.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://app.linqto.com/signup?utm_campaign=ZP_Int_Epic_Signup&utm_term=badious-buzzard_urseforge%2Curseforge.com%2Ccurseforge&utm_source=ZeroPark&utm_medium=charlie-sub-OCVqYSFn&click_id=zre1303ca65d9111ee95f30a54427315b5ff036e8c8ed844348f63f5abd72aa295076607058372853244
Cookie: _gcl_au=1.1.731391507.1695859166; _ga_3RQ2QB03RK=GS1.1.1695859165.1.0.1695859165.60.0.0; _ga=GA1.1.862186572.1695859166; mp_9520a6432633394d40b28aa63ca84020_mixpanel=%7B%22distinct_id%22%3A%20%2218ad9154e9859-0dbe07fe85486a8-47380720-140000-18ad9154e991b5%22%2C%22%24device_id%22%3A%20%2218ad9154e9859-0dbe07fe85486a8-47380720-140000-18ad9154e991b5%22%2C%22utm_source%22%3A%20%22ZeroPark%22%2C%22utm_medium%22%3A%20%22charlie-sub-OCVqYSFn%22%2C%22utm_campaign%22%3A%20%22ZP_Int_Epic_Signup%22%2C%22utm_term%22%3A%20%22badious-buzzard_urseforge%2Curseforge.com%2Ccurseforge%22%2C%22%24initial_referrer%22%3A%20%22http%3A%2F%2Fvibiu-dau.com%2F%22%2C%22%24initial_referring_domain%22%3A%20%22vibiu-dau.com%22%7D; appInstallId=9ug4iik5y2c2l988
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 27 Sep 2023 23:59:27 GMT
content-type: image/svg+xml
content-length: 654
server: Apache/2.4.57 () OpenSSL/1.0.2k-fips
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Fri, 22 Sep 2023 20:07:20 GMT
etag: "525-605f827eaee00-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
x-hostname: awsProdB1
x-xss-protection: 1; mode=block
content-security-policy: frame-ancestors 'self'; default-src 'self' data: blob: 'unsafe-inline' 'unsafe-eval' *.g.doubleclick.net cdnjs.cloudflare.com cdn.uphold.com fonts.googleapis.com *.gstatic.com cdnjs.cloudflare.com www.googletagmanager.com cdn.plaid.com cdn.branch.io app.link www.google-analytics.com api2.branch.io *.microblink.com www.youtube.com *.googlevideo.com *.hs-scripts.com js.hscollectedforms.net js.hs-banner.com js.hs-analytics.net *.hubspot.com forms.hsforms.com purecatamphetamine.github.io js.hsadspixel.net api.hubapi.com connect.facebook.net snap.licdn.com www.googleadservices.com *.linkedin.com *.oribi.io *.google.com google.com www.facebook.com p.adsymptotic.com www.google.com.tw *.sentry.io live.rezync.com secure.adnxs.com *.rfihub.net *.rfihub.com *.bluekai.com *.mixpanel.com *.zoominfo.com *.clickagy.com d34r8q7sht0t9k.cloudfront.net cdn.taboola.com trc.taboola.com trc-events.taboola.com cds.taboola.com pips.taboola.com verifi.podscribe.com js.usemessages.com *.plaid.com cdn.growthbook.io appleid.cdn-apple.com *.braze.com *.appboycdn.com d3pkntwtp2ukl5.cloudfront.net d1wbjksx0xxdn3.cloudfront.net events.ub-analytics.com braze-images.com;
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131 472 B IP 142.250.74.131:0
Hash 051fbfb512308bf4552549afb6980c3d
1f9b620307192ea04611816b172e395067ff901b
0fc04f41b6dbdcc08e3e094227b5185e20f242d084c47fabd027bcdd60f01a7c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 27 Sep 2023 23:59:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
app.linqto.com/static/media/footer_linkedin.fad4c07c.svg
34.215.53.193 1.0 kB URL app.linqto.com/static/media/footer_linkedin.fad4c07c.svg
IP 34.215.53.193:0
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (952)
Hash 25c7753e0e08f588bc288ee16237fca6
3bcf5cfafd355cc682bddf5eeee7a3ae3ecc2af4
de14dd3af932d1d5e4b1443f5d45b00caff3b024d0d86bf37d86a25ee069a572
GET /static/media/footer_linkedin.fad4c07c.svg HTTP/1.1
Host: app.linqto.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://app.linqto.com/signup?utm_campaign=ZP_Int_Epic_Signup&utm_term=badious-buzzard_urseforge%2Curseforge.com%2Ccurseforge&utm_source=ZeroPark&utm_medium=charlie-sub-OCVqYSFn&click_id=zre1303ca65d9111ee95f30a54427315b5ff036e8c8ed844348f63f5abd72aa295076607058372853244
Cookie: _gcl_au=1.1.731391507.1695859166; _ga_3RQ2QB03RK=GS1.1.1695859165.1.0.1695859165.60.0.0; _ga=GA1.1.862186572.1695859166; mp_9520a6432633394d40b28aa63ca84020_mixpanel=%7B%22distinct_id%22%3A%20%2218ad9154e9859-0dbe07fe85486a8-47380720-140000-18ad9154e991b5%22%2C%22%24device_id%22%3A%20%2218ad9154e9859-0dbe07fe85486a8-47380720-140000-18ad9154e991b5%22%2C%22utm_source%22%3A%20%22ZeroPark%22%2C%22utm_medium%22%3A%20%22charlie-sub-OCVqYSFn%22%2C%22utm_campaign%22%3A%20%22ZP_Int_Epic_Signup%22%2C%22utm_term%22%3A%20%22badious-buzzard_urseforge%2Curseforge.com%2Ccurseforge%22%2C%22%24initial_referrer%22%3A%20%22http%3A%2F%2Fvibiu-dau.com%2F%22%2C%22%24initial_referring_domain%22%3A%20%22vibiu-dau.com%22%7D; appInstallId=9ug4iik5y2c2l988
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 27 Sep 2023 23:59:27 GMT
content-type: image/svg+xml
content-length: 1015
server: Apache/2.4.57 () OpenSSL/1.0.2k-fips
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Fri, 22 Sep 2023 20:07:20 GMT
etag: "889-605f827eaee00-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
x-hostname: awsProdB2
x-xss-protection: 1; mode=block
content-security-policy: frame-ancestors 'self'; default-src 'self' data: blob: 'unsafe-inline' 'unsafe-eval' *.g.doubleclick.net cdnjs.cloudflare.com cdn.uphold.com fonts.googleapis.com *.gstatic.com cdnjs.cloudflare.com www.googletagmanager.com cdn.plaid.com cdn.branch.io app.link www.google-analytics.com api2.branch.io *.microblink.com www.youtube.com *.googlevideo.com *.hs-scripts.com js.hscollectedforms.net js.hs-banner.com js.hs-analytics.net *.hubspot.com forms.hsforms.com purecatamphetamine.github.io js.hsadspixel.net api.hubapi.com connect.facebook.net snap.licdn.com www.googleadservices.com *.linkedin.com *.oribi.io *.google.com google.com www.facebook.com p.adsymptotic.com www.google.com.tw *.sentry.io live.rezync.com secure.adnxs.com *.rfihub.net *.rfihub.com *.bluekai.com *.mixpanel.com *.zoominfo.com *.clickagy.com d34r8q7sht0t9k.cloudfront.net cdn.taboola.com trc.taboola.com trc-events.taboola.com cds.taboola.com pips.taboola.com verifi.podscribe.com js.usemessages.com *.plaid.com cdn.growthbook.io appleid.cdn-apple.com *.braze.com *.appboycdn.com d3pkntwtp2ukl5.cloudfront.net d1wbjksx0xxdn3.cloudfront.net events.ub-analytics.com braze-images.com;
X-Firefox-Spdy: h2
app.linqto.com/static/media/footer_youtube.e0bf62fa.svg
34.215.53.193 902 B URL app.linqto.com/static/media/footer_youtube.e0bf62fa.svg
IP 34.215.53.193:0
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (952)
Hash f1e8ab95b264896a7d019d64ac06389f
999f55cb13abb55f25cecbcc6b1ebd0f5ed7bed7
4c6d137f6a84447d829789388e336bca897c1a92378d08c6248b241208f4fa22
GET /static/media/footer_youtube.e0bf62fa.svg HTTP/1.1
Host: app.linqto.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://app.linqto.com/signup?utm_campaign=ZP_Int_Epic_Signup&utm_term=badious-buzzard_urseforge%2Curseforge.com%2Ccurseforge&utm_source=ZeroPark&utm_medium=charlie-sub-OCVqYSFn&click_id=zre1303ca65d9111ee95f30a54427315b5ff036e8c8ed844348f63f5abd72aa295076607058372853244
Cookie: _gcl_au=1.1.731391507.1695859166; _ga_3RQ2QB03RK=GS1.1.1695859165.1.0.1695859165.60.0.0; _ga=GA1.1.862186572.1695859166; mp_9520a6432633394d40b28aa63ca84020_mixpanel=%7B%22distinct_id%22%3A%20%2218ad9154e9859-0dbe07fe85486a8-47380720-140000-18ad9154e991b5%22%2C%22%24device_id%22%3A%20%2218ad9154e9859-0dbe07fe85486a8-47380720-140000-18ad9154e991b5%22%2C%22utm_source%22%3A%20%22ZeroPark%22%2C%22utm_medium%22%3A%20%22charlie-sub-OCVqYSFn%22%2C%22utm_campaign%22%3A%20%22ZP_Int_Epic_Signup%22%2C%22utm_term%22%3A%20%22badious-buzzard_urseforge%2Curseforge.com%2Ccurseforge%22%2C%22%24initial_referrer%22%3A%20%22http%3A%2F%2Fvibiu-dau.com%2F%22%2C%22%24initial_referring_domain%22%3A%20%22vibiu-dau.com%22%7D; appInstallId=9ug4iik5y2c2l988
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 27 Sep 2023 23:59:27 GMT
content-type: image/svg+xml
content-length: 902
server: Apache/2.4.57 () OpenSSL/1.0.2k-fips
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Fri, 22 Sep 2023 20:07:20 GMT
etag: "77e-605f827eaee00-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
x-hostname: awsProdA1
x-xss-protection: 1; mode=block
content-security-policy: frame-ancestors 'self'; default-src 'self' data: blob: 'unsafe-inline' 'unsafe-eval' *.g.doubleclick.net cdnjs.cloudflare.com cdn.uphold.com fonts.googleapis.com *.gstatic.com cdnjs.cloudflare.com www.googletagmanager.com cdn.plaid.com cdn.branch.io app.link www.google-analytics.com api2.branch.io *.microblink.com www.youtube.com *.googlevideo.com *.hs-scripts.com js.hscollectedforms.net js.hs-banner.com js.hs-analytics.net *.hubspot.com forms.hsforms.com purecatamphetamine.github.io js.hsadspixel.net api.hubapi.com connect.facebook.net snap.licdn.com www.googleadservices.com *.linkedin.com *.oribi.io *.google.com google.com www.facebook.com p.adsymptotic.com www.google.com.tw *.sentry.io live.rezync.com secure.adnxs.com *.rfihub.net *.rfihub.com *.bluekai.com *.mixpanel.com *.zoominfo.com *.clickagy.com d34r8q7sht0t9k.cloudfront.net cdn.taboola.com trc.taboola.com trc-events.taboola.com cds.taboola.com pips.taboola.com verifi.podscribe.com js.usemessages.com *.plaid.com cdn.growthbook.io appleid.cdn-apple.com *.braze.com *.appboycdn.com d3pkntwtp2ukl5.cloudfront.net d1wbjksx0xxdn3.cloudfront.net events.ub-analytics.com braze-images.com;
X-Firefox-Spdy: h2
app.linqto.com/static/media/footer_twitter.7d339bad.svg
34.215.53.193200 OK 1.1 kB URL GET HTTP/2 app.linqto.com/static/media/footer_twitter.7d339bad.svg
IP 34.215.53.193:443
Requested by https://app.linqto.com/signup?utm_campaign=ZP_Int_Epic_Signup&utm_term=badious-buzzard_urseforge%2Curseforge.com%2Ccurseforge&utm_source=ZeroPark&utm_medium=charlie-sub-OCVqYSFn&click_id=zre1303ca65d9111ee95f30a54427315b5ff036e8c8ed844348f63f5abd72aa295076607058372853244
Certificate IssuerAmazon
Subjectlinqto.com
Fingerprint2B:09:E8:D2:E2:C0:B8:A2:4A:C7:6F:DA:42:42:FC:CD:A9:E0:99:5E
ValiditySun, 11 Jun 2023 00:00:00 GMT - Wed, 10 Jul 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1239)
Hash a83f77d44ad57315f97401e6ed3a7ff4
b072be69fb321b94062977eaf0e3ece017073cbc
e27614282ed15d4ba800e0e31831bc117f550436bd43a7123cc52bf19f2629b6
GET /static/media/footer_twitter.7d339bad.svg HTTP/1.1
Host: app.linqto.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://app.linqto.com/signup?utm_campaign=ZP_Int_Epic_Signup&utm_term=badious-buzzard_urseforge%2Curseforge.com%2Ccurseforge&utm_source=ZeroPark&utm_medium=charlie-sub-OCVqYSFn&click_id=zre1303ca65d9111ee95f30a54427315b5ff036e8c8ed844348f63f5abd72aa295076607058372853244
Cookie: _gcl_au=1.1.731391507.1695859166; _ga_3RQ2QB03RK=GS1.1.1695859165.1.0.1695859165.60.0.0; _ga=GA1.1.862186572.1695859166; mp_9520a6432633394d40b28aa63ca84020_mixpanel=%7B%22distinct_id%22%3A%20%2218ad9154e9859-0dbe07fe85486a8-47380720-140000-18ad9154e991b5%22%2C%22%24device_id%22%3A%20%2218ad9154e9859-0dbe07fe85486a8-47380720-140000-18ad9154e991b5%22%2C%22utm_source%22%3A%20%22ZeroPark%22%2C%22utm_medium%22%3A%20%22charlie-sub-OCVqYSFn%22%2C%22utm_campaign%22%3A%20%22ZP_Int_Epic_Signup%22%2C%22utm_term%22%3A%20%22badious-buzzard_urseforge%2Curseforge.com%2Ccurseforge%22%2C%22%24initial_referrer%22%3A%20%22http%3A%2F%2Fvibiu-dau.com%2F%22%2C%22%24initial_referring_domain%22%3A%20%22vibiu-dau.com%22%7D; appInstallId=9ug4iik5y2c2l988
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 27 Sep 2023 23:59:27 GMT
content-type: image/svg+xml
content-length: 1129
server: Apache/2.4.57 () OpenSSL/1.0.2k-fips
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Fri, 22 Sep 2023 20:07:20 GMT
etag: "8f8-605f827eaee00-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
x-hostname: awsProdA2
x-xss-protection: 1; mode=block
content-security-policy: frame-ancestors 'self'; default-src 'self' data: blob: 'unsafe-inline' 'unsafe-eval' *.g.doubleclick.net cdnjs.cloudflare.com cdn.uphold.com fonts.googleapis.com *.gstatic.com cdnjs.cloudflare.com www.googletagmanager.com cdn.plaid.com cdn.branch.io app.link www.google-analytics.com api2.branch.io *.microblink.com www.youtube.com *.googlevideo.com *.hs-scripts.com js.hscollectedforms.net js.hs-banner.com js.hs-analytics.net *.hubspot.com forms.hsforms.com purecatamphetamine.github.io js.hsadspixel.net api.hubapi.com connect.facebook.net snap.licdn.com www.googleadservices.com *.linkedin.com *.oribi.io *.google.com google.com www.facebook.com p.adsymptotic.com www.google.com.tw *.sentry.io live.rezync.com secure.adnxs.com *.rfihub.net *.rfihub.com *.bluekai.com *.mixpanel.com *.zoominfo.com *.clickagy.com d34r8q7sht0t9k.cloudfront.net cdn.taboola.com trc.taboola.com trc-events.taboola.com cds.taboola.com pips.taboola.com verifi.podscribe.com js.usemessages.com *.plaid.com cdn.growthbook.io appleid.cdn-apple.com *.braze.com *.appboycdn.com d3pkntwtp2ukl5.cloudfront.net d1wbjksx0xxdn3.cloudfront.net events.ub-analytics.com braze-images.com;
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=AW-1057610699
142.250.74.168 85 kB URL www.googletagmanager.com/gtag/js?id=AW-1057610699
IP 142.250.74.168:0
File type ASCII text, with very long lines (4179)
Hash 01db169ff33056122781e4e0a74ee4bd
b641ccff3f3bddd68c779e9b07968a7370f42776
74e8b24566d6715d21ca8ec80086dbfec8f957be9c150276611419c0a074ed79
GET /gtag/js?id=AW-1057610699 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://app.linqto.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 27 Sep 2023 23:59:27 GMT
expires: Wed, 27 Sep 2023 23:59:27 GMT
cache-control: private, max-age=900
last-modified: Wed, 27 Sep 2023 22:08:23 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 84657
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
app.linqto.com/static/media/Codec-Cold-Bold.71bcbf48.woff2
34.215.53.193 98 kB URL app.linqto.com/static/media/Codec-Cold-Bold.71bcbf48.woff2
IP 34.215.53.193:0
File type Web Open Font Format (Version 2), TrueType, length 98044, version 3.0\012- data
Hash 6d3bdabb892ccf86aa2418816b0abc2a
2e5b822b740ae5f2f8bb0c462cc93d13dcecfa74
05672f40edf01da38ac65ffba97aeecf789e34f8dd594a8219402bf2203840cc
GET /static/media/Codec-Cold-Bold.71bcbf48.woff2 HTTP/1.1
Host: app.linqto.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://app.linqto.com/static/css/main.4ddc3fea.chunk.css
Cookie: _gcl_au=1.1.731391507.1695859166; _ga_3RQ2QB03RK=GS1.1.1695859165.1.0.1695859165.60.0.0; _ga=GA1.1.862186572.1695859166; mp_9520a6432633394d40b28aa63ca84020_mixpanel=%7B%22distinct_id%22%3A%20%2218ad9154e9859-0dbe07fe85486a8-47380720-140000-18ad9154e991b5%22%2C%22%24device_id%22%3A%20%2218ad9154e9859-0dbe07fe85486a8-47380720-140000-18ad9154e991b5%22%2C%22utm_source%22%3A%20%22ZeroPark%22%2C%22utm_medium%22%3A%20%22charlie-sub-OCVqYSFn%22%2C%22utm_campaign%22%3A%20%22ZP_Int_Epic_Signup%22%2C%22utm_term%22%3A%20%22badious-buzzard_urseforge%2Curseforge.com%2Ccurseforge%22%2C%22%24initial_referrer%22%3A%20%22http%3A%2F%2Fvibiu-dau.com%2F%22%2C%22%24initial_referring_domain%22%3A%20%22vibiu-dau.com%22%7D; appInstallId=9ug4iik5y2c2l988
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 27 Sep 2023 23:59:27 GMT
content-length: 98044
server: Apache/2.4.57 () OpenSSL/1.0.2k-fips
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Fri, 22 Sep 2023 20:07:19 GMT
etag: "17efc-605f827dbabc0"
accept-ranges: bytes
vary: Accept-Encoding
x-hostname: awsProdB1
x-xss-protection: 1; mode=block
content-security-policy: frame-ancestors 'self'; default-src 'self' data: blob: 'unsafe-inline' 'unsafe-eval' *.g.doubleclick.net cdnjs.cloudflare.com cdn.uphold.com fonts.googleapis.com *.gstatic.com cdnjs.cloudflare.com www.googletagmanager.com cdn.plaid.com cdn.branch.io app.link www.google-analytics.com api2.branch.io *.microblink.com www.youtube.com *.googlevideo.com *.hs-scripts.com js.hscollectedforms.net js.hs-banner.com js.hs-analytics.net *.hubspot.com forms.hsforms.com purecatamphetamine.github.io js.hsadspixel.net api.hubapi.com connect.facebook.net snap.licdn.com www.googleadservices.com *.linkedin.com *.oribi.io *.google.com google.com www.facebook.com p.adsymptotic.com www.google.com.tw *.sentry.io live.rezync.com secure.adnxs.com *.rfihub.net *.rfihub.com *.bluekai.com *.mixpanel.com *.zoominfo.com *.clickagy.com d34r8q7sht0t9k.cloudfront.net cdn.taboola.com trc.taboola.com trc-events.taboola.com cds.taboola.com pips.taboola.com verifi.podscribe.com js.usemessages.com *.plaid.com cdn.growthbook.io appleid.cdn-apple.com *.braze.com *.appboycdn.com d3pkntwtp2ukl5.cloudfront.net d1wbjksx0xxdn3.cloudfront.net events.ub-analytics.com braze-images.com;
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=AW-1057610699&l=dataLayer&cx=c
142.250.74.168 85 kB URL www.googletagmanager.com/gtag/js?id=AW-1057610699&l=dataLayer&cx=c
IP 142.250.74.168:0
File type ASCII text, with very long lines (4179)
Hash a0d247baa896624432644e36298017a6
4397ecdd843f7bdb7c68fb8de532e1b4e500c2a8
bdb5d868ef7096afa8b261f8c199168264772fa42a167e42c369f8ab2218e009
GET /gtag/js?id=AW-1057610699&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://app.linqto.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 27 Sep 2023 23:59:27 GMT
expires: Wed, 27 Sep 2023 23:59:27 GMT
cache-control: private, max-age=900
last-modified: Wed, 27 Sep 2023 22:08:23 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 84742
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
app.linqto.com/api/1/register
34.215.53.193 512 B URL app.linqto.com/api/1/register
IP 34.215.53.193:0
File type JSON data\012- , ASCII text, with very long lines (1044), with no line terminators
Hash 5f02b2168aeec70c1a4b6fa256ae2cdb
5ebfe8cad7d2d649a07eb46cb4eda26cbdb2d7df
8a80b5e336bbc901ca63d955996d42e7ea1efb57494dfc73ceb876d58fba8e5d
GET /api/1/register HTTP/1.1
Host: app.linqto.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
hostname: app.linqto.com
sentry-trace: 0ec440bb26c74d86b66ff26f94aab311-9ebdfc715f0512da-0
baggage: sentry-environment=production,sentry-public_key=c3ef68580daf4804936dd7d14b6bc746,sentry-trace_id=0ec440bb26c74d86b66ff26f94aab311,sentry-sample_rate=0
DNT: 1
Connection: keep-alive
Referer: https://app.linqto.com/signup?utm_campaign=ZP_Int_Epic_Signup&utm_term=badious-buzzard_urseforge%2Curseforge.com%2Ccurseforge&utm_source=ZeroPark&utm_medium=charlie-sub-OCVqYSFn&click_id=zre1303ca65d9111ee95f30a54427315b5ff036e8c8ed844348f63f5abd72aa295076607058372853244
Cookie: _gcl_au=1.1.731391507.1695859166; _ga_3RQ2QB03RK=GS1.1.1695859165.1.0.1695859165.60.0.0; _ga=GA1.1.862186572.1695859166; mp_9520a6432633394d40b28aa63ca84020_mixpanel=%7B%22distinct_id%22%3A%20%2218ad9154e9859-0dbe07fe85486a8-47380720-140000-18ad9154e991b5%22%2C%22%24device_id%22%3A%20%2218ad9154e9859-0dbe07fe85486a8-47380720-140000-18ad9154e991b5%22%2C%22utm_source%22%3A%20%22ZeroPark%22%2C%22utm_medium%22%3A%20%22charlie-sub-OCVqYSFn%22%2C%22utm_campaign%22%3A%20%22ZP_Int_Epic_Signup%22%2C%22utm_term%22%3A%20%22badious-buzzard_urseforge%2Curseforge.com%2Ccurseforge%22%2C%22%24initial_referrer%22%3A%20%22http%3A%2F%2Fvibiu-dau.com%2F%22%2C%22%24initial_referring_domain%22%3A%20%22vibiu-dau.com%22%7D; appInstallId=9ug4iik5y2c2l988
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 27 Sep 2023 23:59:27 GMT
content-type: application/json
content-length: 512
server: Apache/2.4.57 () OpenSSL/1.0.2k-fips
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-expose-headers: access_token, content-type, accept, set-cookie, setcookie
access-control-allow-headers: access_token, content-type, accept
access-control-allow-origin: *
access-control-allow-methods: GET, POST, DELETE, OPTIONS
vary: Accept-Encoding
content-encoding: gzip
x-hostname: awsProdB2
x-xss-protection: 1; mode=block
content-security-policy: frame-ancestors 'self'; default-src 'self' data: blob: 'unsafe-inline' 'unsafe-eval' *.g.doubleclick.net cdnjs.cloudflare.com cdn.uphold.com fonts.googleapis.com *.gstatic.com cdnjs.cloudflare.com www.googletagmanager.com cdn.plaid.com cdn.branch.io app.link www.google-analytics.com api2.branch.io *.microblink.com www.youtube.com *.googlevideo.com *.hs-scripts.com js.hscollectedforms.net js.hs-banner.com js.hs-analytics.net *.hubspot.com forms.hsforms.com purecatamphetamine.github.io js.hsadspixel.net api.hubapi.com connect.facebook.net snap.licdn.com www.googleadservices.com *.linkedin.com *.oribi.io *.google.com google.com www.facebook.com p.adsymptotic.com www.google.com.tw *.sentry.io live.rezync.com secure.adnxs.com *.rfihub.net *.rfihub.com *.bluekai.com *.mixpanel.com *.zoominfo.com *.clickagy.com d34r8q7sht0t9k.cloudfront.net cdn.taboola.com trc.taboola.com trc-events.taboola.com cds.taboola.com pips.taboola.com verifi.podscribe.com js.usemessages.com *.plaid.com cdn.growthbook.io appleid.cdn-apple.com *.braze.com *.appboycdn.com d3pkntwtp2ukl5.cloudfront.net d1wbjksx0xxdn3.cloudfront.net events.ub-analytics.com braze-images.com;
X-Firefox-Spdy: h2
app.linqto.com/api/1/logo
34.215.53.193 4.7 kB URL app.linqto.com/api/1/logo
IP 34.215.53.193:0
File type PNG image data, 324 x 60, 8-bit/color RGBA, non-interlaced\012- data
Hash 1fcb83d5ff54ea2085fa8e3d89263d40
a6def326a1f29d61a1ad971d5897e00eda0206b9
cad6eb2e63e8e9add59d37b3763ba5f639ef250d31d79e87033a4c61a4b5e549
GET /api/1/logo HTTP/1.1
Host: app.linqto.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://app.linqto.com/signup?utm_campaign=ZP_Int_Epic_Signup&utm_term=badious-buzzard_urseforge%2Curseforge.com%2Ccurseforge&utm_source=ZeroPark&utm_medium=charlie-sub-OCVqYSFn&click_id=zre1303ca65d9111ee95f30a54427315b5ff036e8c8ed844348f63f5abd72aa295076607058372853244
Cookie: _gcl_au=1.1.731391507.1695859166; _ga_3RQ2QB03RK=GS1.1.1695859165.1.0.1695859165.60.0.0; _ga=GA1.1.862186572.1695859166; mp_9520a6432633394d40b28aa63ca84020_mixpanel=%7B%22distinct_id%22%3A%20%2218ad9154e9859-0dbe07fe85486a8-47380720-140000-18ad9154e991b5%22%2C%22%24device_id%22%3A%20%2218ad9154e9859-0dbe07fe85486a8-47380720-140000-18ad9154e991b5%22%2C%22utm_source%22%3A%20%22ZeroPark%22%2C%22utm_medium%22%3A%20%22charlie-sub-OCVqYSFn%22%2C%22utm_campaign%22%3A%20%22ZP_Int_Epic_Signup%22%2C%22utm_term%22%3A%20%22badious-buzzard_urseforge%2Curseforge.com%2Ccurseforge%22%2C%22%24initial_referrer%22%3A%20%22http%3A%2F%2Fvibiu-dau.com%2F%22%2C%22%24initial_referring_domain%22%3A%20%22vibiu-dau.com%22%7D; appInstallId=9ug4iik5y2c2l988
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 27 Sep 2023 23:59:27 GMT
content-type: image/png
content-length: 4707
server: Apache/2.4.57 () OpenSSL/1.0.2k-fips
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-disposition: inline;filename="linqtoLogo_2023-07-18_14-43-15.031287.png"
accept-ranges: bytes
etag: linqtoLogo_2023-07-18_14-43-15.031287.png
last-modified: Tue, 18 Jul 2023 14:43:16 GMT
expires: Wed, 04 Oct 2023 23:59:27 GMT
content-range: bytes 0-4706/4707
x-hostname: awsProdB2
x-xss-protection: 1; mode=block
content-security-policy: frame-ancestors 'self'; default-src 'self' data: blob: 'unsafe-inline' 'unsafe-eval' *.g.doubleclick.net cdnjs.cloudflare.com cdn.uphold.com fonts.googleapis.com *.gstatic.com cdnjs.cloudflare.com www.googletagmanager.com cdn.plaid.com cdn.branch.io app.link www.google-analytics.com api2.branch.io *.microblink.com www.youtube.com *.googlevideo.com *.hs-scripts.com js.hscollectedforms.net js.hs-banner.com js.hs-analytics.net *.hubspot.com forms.hsforms.com purecatamphetamine.github.io js.hsadspixel.net api.hubapi.com connect.facebook.net snap.licdn.com www.googleadservices.com *.linkedin.com *.oribi.io *.google.com google.com www.facebook.com p.adsymptotic.com www.google.com.tw *.sentry.io live.rezync.com secure.adnxs.com *.rfihub.net *.rfihub.com *.bluekai.com *.mixpanel.com *.zoominfo.com *.clickagy.com d34r8q7sht0t9k.cloudfront.net cdn.taboola.com trc.taboola.com trc-events.taboola.com cds.taboola.com pips.taboola.com verifi.podscribe.com js.usemessages.com *.plaid.com cdn.growthbook.io appleid.cdn-apple.com *.braze.com *.appboycdn.com d3pkntwtp2ukl5.cloudfront.net d1wbjksx0xxdn3.cloudfront.net events.ub-analytics.com braze-images.com;
X-Firefox-Spdy: h2
fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3i54rwlxdu.woff2
216.58.207.227 15 kB URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3i54rwlxdu.woff2
IP 216.58.207.227:0
File type Web Open Font Format (Version 2), TrueType, length 14824, version 1.0\012- data
Hash 48598bad30f08e1c3eb3d0e69b420bd5
28c2cf160273c2062f909a875c4b4c0541ee2f84
ca57b79a870bbf54700730858603a70d79743779c1b059922ec401bfddc5adc9
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3i54rwlxdu.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://app.linqto.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14824
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 21 Sep 2023 15:13:33 GMT
expires: Fri, 20 Sep 2024 15:13:33 GMT
cache-control: public, max-age=31536000
age: 549954
last-modified: Thu, 01 Jun 2023 22:52:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
app.linqto.com/static/media/chevron-down.c9690ca6.svg
34.215.53.193 198 B URL app.linqto.com/static/media/chevron-down.c9690ca6.svg
IP 34.215.53.193:0
File type SVG Scalable Vector Graphics image\012- , ASCII text
Hash 1fad49c7a5ab4cf0ca05efafb33bdf0d
9c29b2b2aa7148cee421290da1d8b3d6603c874d
2e4b542a5421817bbd04b045ec831af47d820b7e8b4b0d76f421c12b352f5b79
GET /static/media/chevron-down.c9690ca6.svg HTTP/1.1
Host: app.linqto.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://app.linqto.com/signup?utm_campaign=ZP_Int_Epic_Signup&utm_term=badious-buzzard_urseforge%2Curseforge.com%2Ccurseforge&utm_source=ZeroPark&utm_medium=charlie-sub-OCVqYSFn&click_id=zre1303ca65d9111ee95f30a54427315b5ff036e8c8ed844348f63f5abd72aa295076607058372853244
Cookie: _gcl_au=1.1.731391507.1695859166; _ga_3RQ2QB03RK=GS1.1.1695859165.1.0.1695859165.60.0.0; _ga=GA1.1.862186572.1695859166; mp_9520a6432633394d40b28aa63ca84020_mixpanel=%7B%22distinct_id%22%3A%20%2218ad9154e9859-0dbe07fe85486a8-47380720-140000-18ad9154e991b5%22%2C%22%24device_id%22%3A%20%2218ad9154e9859-0dbe07fe85486a8-47380720-140000-18ad9154e991b5%22%2C%22utm_source%22%3A%20%22ZeroPark%22%2C%22utm_medium%22%3A%20%22charlie-sub-OCVqYSFn%22%2C%22utm_campaign%22%3A%20%22ZP_Int_Epic_Signup%22%2C%22utm_term%22%3A%20%22badious-buzzard_urseforge%2Curseforge.com%2Ccurseforge%22%2C%22%24initial_referrer%22%3A%20%22http%3A%2F%2Fvibiu-dau.com%2F%22%2C%22%24initial_referring_domain%22%3A%20%22vibiu-dau.com%22%7D; appInstallId=9ug4iik5y2c2l988
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 27 Sep 2023 23:59:27 GMT
content-type: image/svg+xml
content-length: 198
server: Apache/2.4.57 () OpenSSL/1.0.2k-fips
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Fri, 22 Sep 2023 20:07:20 GMT
etag: "f8-605f827eaee00-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
x-hostname: awsProdA1
x-xss-protection: 1; mode=block
content-security-policy: frame-ancestors 'self'; default-src 'self' data: blob: 'unsafe-inline' 'unsafe-eval' *.g.doubleclick.net cdnjs.cloudflare.com cdn.uphold.com fonts.googleapis.com *.gstatic.com cdnjs.cloudflare.com www.googletagmanager.com cdn.plaid.com cdn.branch.io app.link www.google-analytics.com api2.branch.io *.microblink.com www.youtube.com *.googlevideo.com *.hs-scripts.com js.hscollectedforms.net js.hs-banner.com js.hs-analytics.net *.hubspot.com forms.hsforms.com purecatamphetamine.github.io js.hsadspixel.net api.hubapi.com connect.facebook.net snap.licdn.com www.googleadservices.com *.linkedin.com *.oribi.io *.google.com google.com www.facebook.com p.adsymptotic.com www.google.com.tw *.sentry.io live.rezync.com secure.adnxs.com *.rfihub.net *.rfihub.com *.bluekai.com *.mixpanel.com *.zoominfo.com *.clickagy.com d34r8q7sht0t9k.cloudfront.net cdn.taboola.com trc.taboola.com trc-events.taboola.com cds.taboola.com pips.taboola.com verifi.podscribe.com js.usemessages.com *.plaid.com cdn.growthbook.io appleid.cdn-apple.com *.braze.com *.appboycdn.com d3pkntwtp2ukl5.cloudfront.net d1wbjksx0xxdn3.cloudfront.net events.ub-analytics.com braze-images.com;
X-Firefox-Spdy: h2
app.linqto.com/static/media/google-btn.e2af88d1.svg
34.215.53.193 3.0 kB URL app.linqto.com/static/media/google-btn.e2af88d1.svg
IP 34.215.53.193:0
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (3620)
Hash ebc33f9cf24e2c65498b692a0642534a
a0923a9e236997c95e0103b948e2a4ff12518df9
bbce6677b8f56dcdc106d016bf3ceed16ac727f117d8206be2f7776219e2d262
GET /static/media/google-btn.e2af88d1.svg HTTP/1.1
Host: app.linqto.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://app.linqto.com/signup?utm_campaign=ZP_Int_Epic_Signup&utm_term=badious-buzzard_urseforge%2Curseforge.com%2Ccurseforge&utm_source=ZeroPark&utm_medium=charlie-sub-OCVqYSFn&click_id=zre1303ca65d9111ee95f30a54427315b5ff036e8c8ed844348f63f5abd72aa295076607058372853244
Cookie: _gcl_au=1.1.731391507.1695859166; _ga_3RQ2QB03RK=GS1.1.1695859165.1.0.1695859165.60.0.0; _ga=GA1.1.862186572.1695859166; mp_9520a6432633394d40b28aa63ca84020_mixpanel=%7B%22distinct_id%22%3A%20%2218ad9154e9859-0dbe07fe85486a8-47380720-140000-18ad9154e991b5%22%2C%22%24device_id%22%3A%20%2218ad9154e9859-0dbe07fe85486a8-47380720-140000-18ad9154e991b5%22%2C%22utm_source%22%3A%20%22ZeroPark%22%2C%22utm_medium%22%3A%20%22charlie-sub-OCVqYSFn%22%2C%22utm_campaign%22%3A%20%22ZP_Int_Epic_Signup%22%2C%22utm_term%22%3A%20%22badious-buzzard_urseforge%2Curseforge.com%2Ccurseforge%22%2C%22%24initial_referrer%22%3A%20%22http%3A%2F%2Fvibiu-dau.com%2F%22%2C%22%24initial_referring_domain%22%3A%20%22vibiu-dau.com%22%7D; appInstallId=9ug4iik5y2c2l988
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 27 Sep 2023 23:59:27 GMT
content-type: image/svg+xml
content-length: 3004
server: Apache/2.4.57 () OpenSSL/1.0.2k-fips
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Fri, 22 Sep 2023 20:07:20 GMT
etag: "fa8-605f827eaee00-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
x-hostname: awsProdB1
x-xss-protection: 1; mode=block
content-security-policy: frame-ancestors 'self'; default-src 'self' data: blob: 'unsafe-inline' 'unsafe-eval' *.g.doubleclick.net cdnjs.cloudflare.com cdn.uphold.com fonts.googleapis.com *.gstatic.com cdnjs.cloudflare.com www.googletagmanager.com cdn.plaid.com cdn.branch.io app.link www.google-analytics.com api2.branch.io *.microblink.com www.youtube.com *.googlevideo.com *.hs-scripts.com js.hscollectedforms.net js.hs-banner.com js.hs-analytics.net *.hubspot.com forms.hsforms.com purecatamphetamine.github.io js.hsadspixel.net api.hubapi.com connect.facebook.net snap.licdn.com www.googleadservices.com *.linkedin.com *.oribi.io *.google.com google.com www.facebook.com p.adsymptotic.com www.google.com.tw *.sentry.io live.rezync.com secure.adnxs.com *.rfihub.net *.rfihub.com *.bluekai.com *.mixpanel.com *.zoominfo.com *.clickagy.com d34r8q7sht0t9k.cloudfront.net cdn.taboola.com trc.taboola.com trc-events.taboola.com cds.taboola.com pips.taboola.com verifi.podscribe.com js.usemessages.com *.plaid.com cdn.growthbook.io appleid.cdn-apple.com *.braze.com *.appboycdn.com d3pkntwtp2ukl5.cloudfront.net d1wbjksx0xxdn3.cloudfront.net events.ub-analytics.com braze-images.com;
X-Firefox-Spdy: h2
app.linqto.com/static/media/apple-logo.9e7cfd1f.svg
34.215.53.193 1.8 kB URL app.linqto.com/static/media/apple-logo.9e7cfd1f.svg
IP 34.215.53.193:0
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (2048)
Hash ea7fc3295203dda00f7ede77793118ae
9faab92068021f9b4e607fb186ce973f4357d8fe
2224626b82360b496713d180b45dec7112cadfb7722fe5dcb5fc1890aa5a2198
GET /static/media/apple-logo.9e7cfd1f.svg HTTP/1.1
Host: app.linqto.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://app.linqto.com/signup?utm_campaign=ZP_Int_Epic_Signup&utm_term=badious-buzzard_urseforge%2Curseforge.com%2Ccurseforge&utm_source=ZeroPark&utm_medium=charlie-sub-OCVqYSFn&click_id=zre1303ca65d9111ee95f30a54427315b5ff036e8c8ed844348f63f5abd72aa295076607058372853244
Cookie: _gcl_au=1.1.731391507.1695859166; _ga_3RQ2QB03RK=GS1.1.1695859165.1.0.1695859165.60.0.0; _ga=GA1.1.862186572.1695859166; mp_9520a6432633394d40b28aa63ca84020_mixpanel=%7B%22distinct_id%22%3A%20%2218ad9154e9859-0dbe07fe85486a8-47380720-140000-18ad9154e991b5%22%2C%22%24device_id%22%3A%20%2218ad9154e9859-0dbe07fe85486a8-47380720-140000-18ad9154e991b5%22%2C%22utm_source%22%3A%20%22ZeroPark%22%2C%22utm_medium%22%3A%20%22charlie-sub-OCVqYSFn%22%2C%22utm_campaign%22%3A%20%22ZP_Int_Epic_Signup%22%2C%22utm_term%22%3A%20%22badious-buzzard_urseforge%2Curseforge.com%2Ccurseforge%22%2C%22%24initial_referrer%22%3A%20%22http%3A%2F%2Fvibiu-dau.com%2F%22%2C%22%24initial_referring_domain%22%3A%20%22vibiu-dau.com%22%7D; appInstallId=9ug4iik5y2c2l988
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 27 Sep 2023 23:59:27 GMT
content-type: image/svg+xml
content-length: 1816
server: Apache/2.4.57 () OpenSSL/1.0.2k-fips
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Fri, 22 Sep 2023 20:07:20 GMT
etag: "97e-605f827eaee00-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
x-hostname: awsProdB2
x-xss-protection: 1; mode=block
content-security-policy: frame-ancestors 'self'; default-src 'self' data: blob: 'unsafe-inline' 'unsafe-eval' *.g.doubleclick.net cdnjs.cloudflare.com cdn.uphold.com fonts.googleapis.com *.gstatic.com cdnjs.cloudflare.com www.googletagmanager.com cdn.plaid.com cdn.branch.io app.link www.google-analytics.com api2.branch.io *.microblink.com www.youtube.com *.googlevideo.com *.hs-scripts.com js.hscollectedforms.net js.hs-banner.com js.hs-analytics.net *.hubspot.com forms.hsforms.com purecatamphetamine.github.io js.hsadspixel.net api.hubapi.com connect.facebook.net snap.licdn.com www.googleadservices.com *.linkedin.com *.oribi.io *.google.com google.com www.facebook.com p.adsymptotic.com www.google.com.tw *.sentry.io live.rezync.com secure.adnxs.com *.rfihub.net *.rfihub.com *.bluekai.com *.mixpanel.com *.zoominfo.com *.clickagy.com d34r8q7sht0t9k.cloudfront.net cdn.taboola.com trc.taboola.com trc-events.taboola.com cds.taboola.com pips.taboola.com verifi.podscribe.com js.usemessages.com *.plaid.com cdn.growthbook.io appleid.cdn-apple.com *.braze.com *.appboycdn.com d3pkntwtp2ukl5.cloudfront.net d1wbjksx0xxdn3.cloudfront.net events.ub-analytics.com braze-images.com;
X-Firefox-Spdy: h2
app.linqto.com/static/media/show-password.5ee6d3f4.svg
34.215.53.193 949 B URL app.linqto.com/static/media/show-password.5ee6d3f4.svg
IP 34.215.53.193:0
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1338)
Hash 17c9ef57305e3f845bc5888740f93e4f
c94efd4c7c11ba11b037026c5f787cf6bea3e682
f38c1cd3514987fbf02f67f3d40f35a1402254f5863584243ad75ab66e28f272
GET /static/media/show-password.5ee6d3f4.svg HTTP/1.1
Host: app.linqto.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://app.linqto.com/signup?utm_campaign=ZP_Int_Epic_Signup&utm_term=badious-buzzard_urseforge%2Curseforge.com%2Ccurseforge&utm_source=ZeroPark&utm_medium=charlie-sub-OCVqYSFn&click_id=zre1303ca65d9111ee95f30a54427315b5ff036e8c8ed844348f63f5abd72aa295076607058372853244
Cookie: _gcl_au=1.1.731391507.1695859166; _ga_3RQ2QB03RK=GS1.1.1695859165.1.0.1695859165.60.0.0; _ga=GA1.1.862186572.1695859166; mp_9520a6432633394d40b28aa63ca84020_mixpanel=%7B%22distinct_id%22%3A%20%2218ad9154e9859-0dbe07fe85486a8-47380720-140000-18ad9154e991b5%22%2C%22%24device_id%22%3A%20%2218ad9154e9859-0dbe07fe85486a8-47380720-140000-18ad9154e991b5%22%2C%22utm_source%22%3A%20%22ZeroPark%22%2C%22utm_medium%22%3A%20%22charlie-sub-OCVqYSFn%22%2C%22utm_campaign%22%3A%20%22ZP_Int_Epic_Signup%22%2C%22utm_term%22%3A%20%22badious-buzzard_urseforge%2Curseforge.com%2Ccurseforge%22%2C%22%24initial_referrer%22%3A%20%22http%3A%2F%2Fvibiu-dau.com%2F%22%2C%22%24initial_referring_domain%22%3A%20%22vibiu-dau.com%22%7D; appInstallId=9ug4iik5y2c2l988
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 27 Sep 2023 23:59:27 GMT
content-type: image/svg+xml
content-length: 949
server: Apache/2.4.57 () OpenSSL/1.0.2k-fips
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Fri, 22 Sep 2023 20:07:21 GMT
etag: "8c7-605f827fa3040-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
x-hostname: awsProdA2
x-xss-protection: 1; mode=block
content-security-policy: frame-ancestors 'self'; default-src 'self' data: blob: 'unsafe-inline' 'unsafe-eval' *.g.doubleclick.net cdnjs.cloudflare.com cdn.uphold.com fonts.googleapis.com *.gstatic.com cdnjs.cloudflare.com www.googletagmanager.com cdn.plaid.com cdn.branch.io app.link www.google-analytics.com api2.branch.io *.microblink.com www.youtube.com *.googlevideo.com *.hs-scripts.com js.hscollectedforms.net js.hs-banner.com js.hs-analytics.net *.hubspot.com forms.hsforms.com purecatamphetamine.github.io js.hsadspixel.net api.hubapi.com connect.facebook.net snap.licdn.com www.googleadservices.com *.linkedin.com *.oribi.io *.google.com google.com www.facebook.com p.adsymptotic.com www.google.com.tw *.sentry.io live.rezync.com secure.adnxs.com *.rfihub.net *.rfihub.com *.bluekai.com *.mixpanel.com *.zoominfo.com *.clickagy.com d34r8q7sht0t9k.cloudfront.net cdn.taboola.com trc.taboola.com trc-events.taboola.com cds.taboola.com pips.taboola.com verifi.podscribe.com js.usemessages.com *.plaid.com cdn.growthbook.io appleid.cdn-apple.com *.braze.com *.appboycdn.com d3pkntwtp2ukl5.cloudfront.net d1wbjksx0xxdn3.cloudfront.net events.ub-analytics.com braze-images.com;
X-Firefox-Spdy: h2
appleid.cdn-apple.com/appleauth/static/jsapi/appleid/1/en_US/appleid.auth.js
104.110.7.150 17 kB URL appleid.cdn-apple.com/appleauth/static/jsapi/appleid/1/en_US/appleid.auth.js
IP 104.110.7.150:0
File type Unicode text, UTF-8 text, with very long lines (39767)
Hash 5016e169748a6e203fdf156b9ab6da33
e882467086e870ed3d166982cf27d8b855078ce0
8356948d6f3bef342ff37a4deca7f6b64b58ca0b90ca128c1929c1bb76cc7a54
GET /appleauth/static/jsapi/appleid/1/en_US/appleid.auth.js HTTP/1.1
Host: appleid.cdn-apple.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://app.linqto.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Apple
Content-Type: application/javascript;charset=UTF-8
Cache-Control: public, max-age=86400,stale-while-revalidate=86400
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
Accept-Ranges: bytes
ETag: W/"43171-1695315555819"
Last-Modified: Thu, 21 Sep 2023 16:59:15 GMT
Vary: accept-encoding
Content-Encoding: gzip
Content-Length: 17356
Date: Wed, 27 Sep 2023 23:59:27 GMT
Connection: keep-alive
Access-Control-Allow-Origin: *
ocsp.pki.goog/gts1c3
142.250.74.131 471 B IP 142.250.74.131:0
Hash 054e2e2987a83464c1c843bd8a793ac2
c83148535c94459ea0ac79d979df6c5962807d0b
dbe15fc3d8713eb4b8f48f3f545083133b87f77342ed1d08ce300aa77c6eed4d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 27 Sep 2023 23:59:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.gstatic.com/recaptcha/releases/Ai7lOI0zKMDPHxlv62g7oMoJ/recaptcha__en.js
142.250.74.99200 OK 464 kB URL GET HTTP/2 www.gstatic.com/recaptcha/releases/Ai7lOI0zKMDPHxlv62g7oMoJ/recaptcha__en.js
IP 142.250.74.99:443
Requested by https://app.linqto.com/signup?utm_campaign=ZP_Int_Epic_Signup&utm_term=badious-buzzard_urseforge%2Curseforge.com%2Ccurseforge&utm_source=ZeroPark&utm_medium=charlie-sub-OCVqYSFn&click_id=zre1303ca65d9111ee95f30a54427315b5ff036e8c8ed844348f63f5abd72aa295076607058372853244
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint3D:35:56:30:C0:0F:0C:7F:20:BA:7D:A8:48:DB:24:1B:15:F5:48:27
ValidityMon, 04 Sep 2023 08:23:09 GMT - Mon, 27 Nov 2023 08:23:08 GMT
File type ASCII text, with very long lines (549)
Size 464 kB (463864 bytes)
Hash b9fa78b438652d549f20ad262bffa843
ac85e9636a3cf1c7a935ad2b1a7eeefcf2799feb
97ac5eba21b58460149454c9115b09ed01937650647fdcfe405d5d61d85b72e5
GET /recaptcha/releases/Ai7lOI0zKMDPHxlv62g7oMoJ/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://app.linqto.com
DNT: 1
Connection: keep-alive
Referer: https://app.linqto.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 463864
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 26 Sep 2023 16:36:50 GMT
expires: Wed, 25 Sep 2024 16:36:50 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 18 Sep 2023 04:01:58 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 112957
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
app.linqto.com/logo192.png
34.215.53.193 3.0 kB URL app.linqto.com/logo192.png
IP 34.215.53.193:0
File type PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced\012- data
Hash 01b8ad5ce9420b4447528690a993763f
2fdb5068236cd04a860e3fe6bdb63c55a7d5359f
68dea75881076fe7012441a74fac60d0086d8071dcb2b8934a550ab54e672a34
GET /logo192.png HTTP/1.1
Host: app.linqto.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://app.linqto.com/signup?utm_campaign=ZP_Int_Epic_Signup&utm_term=badious-buzzard_urseforge%2Curseforge.com%2Ccurseforge&utm_source=ZeroPark&utm_medium=charlie-sub-OCVqYSFn&click_id=zre1303ca65d9111ee95f30a54427315b5ff036e8c8ed844348f63f5abd72aa295076607058372853244
Cookie: _gcl_au=1.1.731391507.1695859166; _ga_3RQ2QB03RK=GS1.1.1695859165.1.0.1695859165.60.0.0; _ga=GA1.1.862186572.1695859166; mp_9520a6432633394d40b28aa63ca84020_mixpanel=%7B%22distinct_id%22%3A%20%2218ad9154e9859-0dbe07fe85486a8-47380720-140000-18ad9154e991b5%22%2C%22%24device_id%22%3A%20%2218ad9154e9859-0dbe07fe85486a8-47380720-140000-18ad9154e991b5%22%2C%22utm_source%22%3A%20%22ZeroPark%22%2C%22utm_medium%22%3A%20%22charlie-sub-OCVqYSFn%22%2C%22utm_campaign%22%3A%20%22ZP_Int_Epic_Signup%22%2C%22utm_term%22%3A%20%22badious-buzzard_urseforge%2Curseforge.com%2Ccurseforge%22%2C%22%24initial_referrer%22%3A%20%22http%3A%2F%2Fvibiu-dau.com%2F%22%2C%22%24initial_referring_domain%22%3A%20%22vibiu-dau.com%22%2C%22UTM%20Source%20(last%20touch)%22%3A%20%22ZeroPark%22%2C%22UTM%20Medium%20(last%20touch)%22%3A%20%22charlie%20sub%20OCVqYSFn%22%2C%22UTM%20Campaign%20(last%20touch)%22%3A%20%22ZP_Int_Epic_Signup%22%2C%22UTM%20Term%20(last%20touch)%22%3A%20%22badious%20buzzard_urseforge%20urseforge%20com%20curseforge%22%2C%22Referral%20by%20another%20user%22%3A%20false%2C%22Referred%20by%20an%20advisor%22%3A%20false%2C%22Referral%20credit%22%3A%200%2C%22Platform%22%3A%20%22Web%22%7D; appInstallId=9ug4iik5y2c2l988
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 27 Sep 2023 23:59:27 GMT
content-type: image/png
content-length: 2997
server: Apache/2.4.57 () OpenSSL/1.0.2k-fips
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Fri, 22 Sep 2023 20:07:18 GMT
etag: "bf7-605f827cc6980-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
x-hostname: awsProdA1
x-xss-protection: 1; mode=block
content-security-policy: frame-ancestors 'self'; default-src 'self' data: blob: 'unsafe-inline' 'unsafe-eval' *.g.doubleclick.net cdnjs.cloudflare.com cdn.uphold.com fonts.googleapis.com *.gstatic.com cdnjs.cloudflare.com www.googletagmanager.com cdn.plaid.com cdn.branch.io app.link www.google-analytics.com api2.branch.io *.microblink.com www.youtube.com *.googlevideo.com *.hs-scripts.com js.hscollectedforms.net js.hs-banner.com js.hs-analytics.net *.hubspot.com forms.hsforms.com purecatamphetamine.github.io js.hsadspixel.net api.hubapi.com connect.facebook.net snap.licdn.com www.googleadservices.com *.linkedin.com *.oribi.io *.google.com google.com www.facebook.com p.adsymptotic.com www.google.com.tw *.sentry.io live.rezync.com secure.adnxs.com *.rfihub.net *.rfihub.com *.bluekai.com *.mixpanel.com *.zoominfo.com *.clickagy.com d34r8q7sht0t9k.cloudfront.net cdn.taboola.com trc.taboola.com trc-events.taboola.com cds.taboola.com pips.taboola.com verifi.podscribe.com js.usemessages.com *.plaid.com cdn.growthbook.io appleid.cdn-apple.com *.braze.com *.appboycdn.com d3pkntwtp2ukl5.cloudfront.net d1wbjksx0xxdn3.cloudfront.net events.ub-analytics.com braze-images.com;
X-Firefox-Spdy: h2
app.linqto.com/favicon.ico
34.215.53.193200 OK 1.9 kB URL GET HTTP/2 app.linqto.com/favicon.ico
IP 34.215.53.193:443
Requested by https://app.linqto.com/signup?utm_campaign=ZP_Int_Epic_Signup&utm_term=badious-buzzard_urseforge%2Curseforge.com%2Ccurseforge&utm_source=ZeroPark&utm_medium=charlie-sub-OCVqYSFn&click_id=zre1303ca65d9111ee95f30a54427315b5ff036e8c8ed844348f63f5abd72aa295076607058372853244
Certificate IssuerAmazon
Subjectlinqto.com
Fingerprint2B:09:E8:D2:E2:C0:B8:A2:4A:C7:6F:DA:42:42:FC:CD:A9:E0:99:5E
ValiditySun, 11 Jun 2023 00:00:00 GMT - Wed, 10 Jul 2024 23:59:59 GMT
File type MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel\012- data
Hash a6002b103113055a30f565fe88937da6
dcb14b80fa3683ea799af13064a69d848636b6f8
d9b45e431046130df3a78255a7ad16b14117895802f8328e10ac6d79a29a684e
GET /favicon.ico HTTP/1.1
Host: app.linqto.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://app.linqto.com/signup?utm_campaign=ZP_Int_Epic_Signup&utm_term=badious-buzzard_urseforge%2Curseforge.com%2Ccurseforge&utm_source=ZeroPark&utm_medium=charlie-sub-OCVqYSFn&click_id=zre1303ca65d9111ee95f30a54427315b5ff036e8c8ed844348f63f5abd72aa295076607058372853244
Cookie: _gcl_au=1.1.731391507.1695859166; _ga_3RQ2QB03RK=GS1.1.1695859165.1.0.1695859165.60.0.0; _ga=GA1.1.862186572.1695859166; mp_9520a6432633394d40b28aa63ca84020_mixpanel=%7B%22distinct_id%22%3A%20%2218ad9154e9859-0dbe07fe85486a8-47380720-140000-18ad9154e991b5%22%2C%22%24device_id%22%3A%20%2218ad9154e9859-0dbe07fe85486a8-47380720-140000-18ad9154e991b5%22%2C%22utm_source%22%3A%20%22ZeroPark%22%2C%22utm_medium%22%3A%20%22charlie-sub-OCVqYSFn%22%2C%22utm_campaign%22%3A%20%22ZP_Int_Epic_Signup%22%2C%22utm_term%22%3A%20%22badious-buzzard_urseforge%2Curseforge.com%2Ccurseforge%22%2C%22%24initial_referrer%22%3A%20%22http%3A%2F%2Fvibiu-dau.com%2F%22%2C%22%24initial_referring_domain%22%3A%20%22vibiu-dau.com%22%2C%22UTM%20Source%20(last%20touch)%22%3A%20%22ZeroPark%22%2C%22UTM%20Medium%20(last%20touch)%22%3A%20%22charlie%20sub%20OCVqYSFn%22%2C%22UTM%20Campaign%20(last%20touch)%22%3A%20%22ZP_Int_Epic_Signup%22%2C%22UTM%20Term%20(last%20touch)%22%3A%20%22badious%20buzzard_urseforge%20urseforge%20com%20curseforge%22%2C%22Referral%20by%20another%20user%22%3A%20false%2C%22Referred%20by%20an%20advisor%22%3A%20false%2C%22Referral%20credit%22%3A%200%2C%22Platform%22%3A%20%22Web%22%7D; appInstallId=9ug4iik5y2c2l988
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 27 Sep 2023 23:59:27 GMT
content-type: image/vnd.microsoft.icon
content-length: 1866
server: Apache/2.4.57 () OpenSSL/1.0.2k-fips
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Fri, 22 Sep 2023 20:07:18 GMT
etag: "3c2e-605f827cc6980-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
x-hostname: awsProdA2
x-xss-protection: 1; mode=block
content-security-policy: frame-ancestors 'self'; default-src 'self' data: blob: 'unsafe-inline' 'unsafe-eval' *.g.doubleclick.net cdnjs.cloudflare.com cdn.uphold.com fonts.googleapis.com *.gstatic.com cdnjs.cloudflare.com www.googletagmanager.com cdn.plaid.com cdn.branch.io app.link www.google-analytics.com api2.branch.io *.microblink.com www.youtube.com *.googlevideo.com *.hs-scripts.com js.hscollectedforms.net js.hs-banner.com js.hs-analytics.net *.hubspot.com forms.hsforms.com purecatamphetamine.github.io js.hsadspixel.net api.hubapi.com connect.facebook.net snap.licdn.com www.googleadservices.com *.linkedin.com *.oribi.io *.google.com google.com www.facebook.com p.adsymptotic.com www.google.com.tw *.sentry.io live.rezync.com secure.adnxs.com *.rfihub.net *.rfihub.com *.bluekai.com *.mixpanel.com *.zoominfo.com *.clickagy.com d34r8q7sht0t9k.cloudfront.net cdn.taboola.com trc.taboola.com trc-events.taboola.com cds.taboola.com pips.taboola.com verifi.podscribe.com js.usemessages.com *.plaid.com cdn.growthbook.io appleid.cdn-apple.com *.braze.com *.appboycdn.com d3pkntwtp2ukl5.cloudfront.net d1wbjksx0xxdn3.cloudfront.net events.ub-analytics.com braze-images.com;
X-Firefox-Spdy: h2
www.google.com/recaptcha/enterprise/anchor?ar=1&k=6LduFywkAAAAAL69I87KWwwn6hxIyKuh63__zSP_&co=aHR0cHM6Ly9hcHAubGlucXRvLmNvbTo0NDM.&hl=en&v=Ai7lOI0zKMDPHxlv62g7oMoJ&size=invisible&cb=342p2iu2o2gs
142.250.74.132 54 kB URL www.google.com/recaptcha/enterprise/anchor?ar=1&k=6LduFywkAAAAAL69I87KWwwn6hxIyKuh63__zSP_&co=aHR0cHM6Ly9hcHAubGlucXRvLmNvbTo0NDM.&hl=en&v=Ai7lOI0zKMDPHxlv62g7oMoJ&size=invisible&cb=342p2iu2o2gs
IP 142.250.74.132:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (44078)
Hash 8443abab01f5271c7fd17d22f253e9e7
652d3b0ddf76acceef871211846dad678236eec8
e5f05fb5ff57a8df7b701fc0054fefff6e22e941f30e4494a03f915296437ce3
GET /recaptcha/enterprise/anchor?ar=1&k=6LduFywkAAAAAL69I87KWwwn6hxIyKuh63__zSP_&co=aHR0cHM6Ly9hcHAubGlucXRvLmNvbTo0NDM.&hl=en&v=Ai7lOI0zKMDPHxlv62g7oMoJ&size=invisible&cb=342p2iu2o2gs HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://app.linqto.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/html; charset=utf-8
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 27 Sep 2023 23:59:28 GMT
content-security-policy: script-src 'nonce-IsP8t-5KIt6I9fRK5YsCCA' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.gstatic.com/recaptcha/releases/Ai7lOI0zKMDPHxlv62g7oMoJ/recaptcha__en.js
142.250.74.99200 OK 464 kB URL GET HTTP/2 www.gstatic.com/recaptcha/releases/Ai7lOI0zKMDPHxlv62g7oMoJ/recaptcha__en.js
IP 142.250.74.99:443
Requested by https://app.linqto.com/signup?utm_campaign=ZP_Int_Epic_Signup&utm_term=badious-buzzard_urseforge%2Curseforge.com%2Ccurseforge&utm_source=ZeroPark&utm_medium=charlie-sub-OCVqYSFn&click_id=zre1303ca65d9111ee95f30a54427315b5ff036e8c8ed844348f63f5abd72aa295076607058372853244
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint3D:35:56:30:C0:0F:0C:7F:20:BA:7D:A8:48:DB:24:1B:15:F5:48:27
ValidityMon, 04 Sep 2023 08:23:09 GMT - Mon, 27 Nov 2023 08:23:08 GMT
File type ASCII text, with very long lines (549)
Size 464 kB (463864 bytes)
Hash b9fa78b438652d549f20ad262bffa843
ac85e9636a3cf1c7a935ad2b1a7eeefcf2799feb
97ac5eba21b58460149454c9115b09ed01937650647fdcfe405d5d61d85b72e5
GET /recaptcha/releases/Ai7lOI0zKMDPHxlv62g7oMoJ/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 463864
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 26 Sep 2023 16:36:50 GMT
expires: Wed, 25 Sep 2024 16:36:50 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 18 Sep 2023 04:01:58 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 112958
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
216.58.207.227 15 kB URL fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
IP 216.58.207.227:0
File type Web Open Font Format (Version 2), TrueType, length 15344, version 1.0\012- data
Hash 5d4aeb4e5f5ef754e307d7ffaef688bd
06db651cdf354c64a7383ea9c77024ef4fb4cef8
3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 21 Sep 2023 15:24:26 GMT
expires: Fri, 20 Sep 2024 15:24:26 GMT
cache-control: public, max-age=31536000
age: 549302
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
216.58.207.227 16 kB URL fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP 216.58.207.227:0
File type Web Open Font Format (Version 2), TrueType, length 15552, version 1.0\012- data
Hash 285467176f7fe6bb6a9c6873b3dad2cc
ea04e4ff5142ddd69307c183def721a160e0a64e
5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 26 Sep 2023 05:45:56 GMT
expires: Wed, 25 Sep 2024 05:45:56 GMT
cache-control: public, max-age=31536000
age: 152012
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.google.com/recaptcha/enterprise/webworker.js?hl=en&v=Ai7lOI0zKMDPHxlv62g7oMoJ
142.250.74.132 2.3 kB URL www.google.com/recaptcha/enterprise/webworker.js?hl=en&v=Ai7lOI0zKMDPHxlv62g7oMoJ
IP 142.250.74.132:0
File type gzip compressed data\012- data
Hash 743dfa3332375af9d6dd741711932729
07fb3994c0c427adddbcb5dc0816195d56faa80a
598a566d1364715399258668821dbe2d25201ad32e2f1d4191c35092cce3c1ed
GET /recaptcha/enterprise/webworker.js?hl=en&v=Ai7lOI0zKMDPHxlv62g7oMoJ HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/recaptcha/enterprise/anchor?ar=1&k=6LduFywkAAAAAL69I87KWwwn6hxIyKuh63__zSP_&co=aHR0cHM6Ly9hcHAubGlucXRvLmNvbTo0NDM.&hl=en&v=Ai7lOI0zKMDPHxlv62g7oMoJ&size=invisible&cb=342p2iu2o2gs
Sec-Fetch-Dest: worker
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/javascript; charset=UTF-8
expires: Wed, 27 Sep 2023 23:59:28 GMT
date: Wed, 27 Sep 2023 23:59:28 GMT
cache-control: private, max-age=300
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.gstatic.com/recaptcha/releases/Ai7lOI0zKMDPHxlv62g7oMoJ/recaptcha__en.js
142.250.74.99200 OK 464 kB URL GET HTTP/2 www.gstatic.com/recaptcha/releases/Ai7lOI0zKMDPHxlv62g7oMoJ/recaptcha__en.js
IP 142.250.74.99:443
Requested by https://app.linqto.com/signup?utm_campaign=ZP_Int_Epic_Signup&utm_term=badious-buzzard_urseforge%2Curseforge.com%2Ccurseforge&utm_source=ZeroPark&utm_medium=charlie-sub-OCVqYSFn&click_id=zre1303ca65d9111ee95f30a54427315b5ff036e8c8ed844348f63f5abd72aa295076607058372853244
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint3D:35:56:30:C0:0F:0C:7F:20:BA:7D:A8:48:DB:24:1B:15:F5:48:27
ValidityMon, 04 Sep 2023 08:23:09 GMT - Mon, 27 Nov 2023 08:23:08 GMT
File type ASCII text, with very long lines (549)
Size 464 kB (463864 bytes)
Hash b9fa78b438652d549f20ad262bffa843
ac85e9636a3cf1c7a935ad2b1a7eeefcf2799feb
97ac5eba21b58460149454c9115b09ed01937650647fdcfe405d5d61d85b72e5
GET /recaptcha/releases/Ai7lOI0zKMDPHxlv62g7oMoJ/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 463864
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 26 Sep 2023 16:36:50 GMT
expires: Wed, 25 Sep 2024 16:36:50 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 18 Sep 2023 04:01:58 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 112958
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
js.hs-banner.com/v2/20548088/banner.js
104.18.34.229200 OK 67 kB URL GET HTTP/2 js.hs-banner.com/v2/20548088/banner.js
IP 104.18.34.229:443
Requested by https://app.linqto.com/signup?utm_campaign=ZP_Int_Epic_Signup&utm_term=badious-buzzard_urseforge%2Curseforge.com%2Ccurseforge&utm_source=ZeroPark&utm_medium=charlie-sub-OCVqYSFn&click_id=zre1303ca65d9111ee95f30a54427315b5ff036e8c8ed844348f63f5abd72aa295076607058372853244
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint2C:9C:DC:70:87:29:18:51:70:06:6E:2F:4B:4D:E0:23:1F:30:84:18
ValidityTue, 02 May 2023 00:00:00 GMT - Wed, 01 May 2024 23:59:59 GMT
File type ASCII text, with very long lines (65000)
Hash 095181f7b3e4fe7e49a82a529ffd41dd
1b0ce4ea4394b02e16505aa1657f417b2099814c
8abe5116019b360e247b2ea42ad0b95c1313368fed26524bedece7b1f801e059
GET /v2/20548088/banner.js HTTP/1.1
Host: js.hs-banner.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://app.linqto.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 27 Sep 2023 23:59:25 GMT
content-type: text/javascript; charset=UTF-8
x-amz-id-2: ofqYtkpIwnA74HNOdiRZjwhu/P+iVGJOQoZRUVaj34bkdXEvRNibRL6LHC4b2cCSHxJeWX7yjYI=
x-amz-request-id: VJ8T25DPPTCK5VVJ
last-modified: Tue, 26 Sep 2023 21:43:01 GMT
etag: W/"095181f7b3e4fe7e49a82a529ffd41dd"
x-amz-server-side-encryption: AES256
cache-control: max-age=300,public
x-amz-version-id: u0mGt28r3tUPr1l9xCxVFusweU3gTdf0
access-control-allow-origin: https://app.linqto.com
access-control-allow-methods: GET, OPTIONS, PUT, POST, DELETE, PATCH, HEAD
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Accept-Charset, Accept-Encoding, X-Override-Internal-Permissions, X-Properties-Source, X-Properties-SourceId, X-Properties-Flag, X-Hubspot-User-Id, X-Hubspot-Trace, X-Hubspot-Callee, X-Hubspot-Offset, X-Hubspot-No-Trace, X-HubSpot-Static-App-Info, X-HubSpot-Messages-Uri, X-HubSpot-Request-Source, X-HubSpot-Request-Reason, Subscription-Billing-Auth-Token, X-App-CSRF, X-Tools-CSRF, Online-Payment-Signing-UUID, X-Source, X-SourceId, X-Origin-UserId, X-Biden-Request-Source, X-HubSpot-CSRF-hubspotapi, X-Force-Cookie-Refresh, X-Force-Cookie-Refresh-No-Cache, X-HS-User-Request, X-Application-Id, X-HS-Referer, X-HubSpot-Correlation-Id
access-control-expose-headers: x-last-modified-timestamp, X-HubSpot-NotFound, X-HS-User-Request, Link, Server-Timing
access-control-allow-credentials: true
access-control-max-age: 604800
timing-allow-origin: *
vary: origin, Accept-Encoding
expires: Thu, 28 Sep 2023 00:01:32 GMT
x-envoy-upstream-service-time: 18
x-evy-trace-route-service-name: envoyset-translator
x-evy-trace-virtual-host: all
x-evy-trace-served-by-pod: iad02/analytics-js-proxy-td/envoy-proxy-c5f7fd779-7gpw4
x-evy-trace-listener: listener_https
x-evy-trace-route-configuration: listener_https/all
x-hubspot-correlation-id: 85363cb3-f6ae-4bc5-bee9-9c911fabcfef
x-request-id: 85363cb3-f6ae-4bc5-bee9-9c911fabcfef
cf-cache-status: HIT
server: cloudflare
cf-ray: 80d7b348680a0afe-OSL
content-encoding: br
X-Firefox-Spdy: h2
fonts.googleapis.com/css2?family=Sofia+Sans+Condensed:wght@400;500;600;700&display=swap
216.58.207.202200 OK 7.4 kB URL GET HTTP/3 fonts.googleapis.com/css2?family=Sofia+Sans+Condensed:wght@400;500;600;700&display=swap
IP 216.58.207.202:443
Requested by https://app.linqto.com/signup?utm_campaign=ZP_Int_Epic_Signup&utm_term=badious-buzzard_urseforge%2Curseforge.com%2Ccurseforge&utm_source=ZeroPark&utm_medium=charlie-sub-OCVqYSFn&click_id=zre1303ca65d9111ee95f30a54427315b5ff036e8c8ed844348f63f5abd72aa295076607058372853244
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintBE:40:3A:A6:DE:CC:A7:8B:75:43:68:F2:F9:56:63:71:49:61:06:49
ValidityMon, 04 Sep 2023 08:23:18 GMT - Mon, 27 Nov 2023 08:23:17 GMT
File type ASCII text, with very long lines (7532), with no line terminators
Hash 651bf9594383549f4f92c2efdf2a9800
87221c9d73523c23167e62cc5c7641f196bae897
eae23e3305128fbba67b1d5367a592c5296c85d05193d11edbad9daa995d5a73
GET /css2?family=Sofia+Sans+Condensed:wght@400;500;600;700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://app.linqto.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 27 Sep 2023 23:59:25 GMT
date: Wed, 27 Sep 2023 23:59:25 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
accounts.google.com/gsi/client
142.250.74.109200 OK 202 kB URL GET HTTP/2 accounts.google.com/gsi/client
IP 142.250.74.109:443
Requested by https://app.linqto.com/signup?utm_campaign=ZP_Int_Epic_Signup&utm_term=badious-buzzard_urseforge%2Curseforge.com%2Ccurseforge&utm_source=ZeroPark&utm_medium=charlie-sub-OCVqYSFn&click_id=zre1303ca65d9111ee95f30a54427315b5ff036e8c8ed844348f63f5abd72aa295076607058372853244
Certificate IssuerGoogle Trust Services LLC
Subjectaccounts.google.com
Fingerprint2F:C1:71:0A:05:D9:0F:38:EF:D1:16:F7:50:AF:41:48:6B:F9:BA:B5
ValidityMon, 04 Sep 2023 08:23:30 GMT - Mon, 27 Nov 2023 08:23:29 GMT
File type ASCII text, with very long lines (3006)
Size 202 kB (201516 bytes)
Hash 953b745c4caa1fb62cec86d20b7fd464
fe22f9cfe5455a2c5b3f83aa2e7576b8e38513a5
101fb814d86faf348e283c4da1dcaeaaa08d595e2d02e6c850fa6da181258a03
GET /gsi/client HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://app.linqto.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
expires: Wed, 27 Sep 2023 23:59:27 GMT
date: Wed, 27 Sep 2023 23:59:27 GMT
cache-control: private, max-age=1800
report-to: {"group":"coop_dd7de8473bddc59c6b748810a67a39b1","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/dd7de8473bddc59c6b748810a67a39b1"}]}
cross-origin-opener-policy-report-only: same-origin; report-to="coop_dd7de8473bddc59c6b748810a67a39b1"
cross-origin-resource-policy: cross-origin
content-security-policy: require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/identity-sign-in-google-http, script-src 'nonce-1VKV4zzqptMdQQ8ak1asSQ' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/identity-sign-in-google-http
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
app.linqto.com/static/js/main.e89a980c.chunk.js
34.215.53.193200 OK 828 kB URL GET HTTP/2 app.linqto.com/static/js/main.e89a980c.chunk.js
IP 34.215.53.193:443
Requested by https://app.linqto.com/signup?utm_campaign=ZP_Int_Epic_Signup&utm_term=badious-buzzard_urseforge%2Curseforge.com%2Ccurseforge&utm_source=ZeroPark&utm_medium=charlie-sub-OCVqYSFn&click_id=zre1303ca65d9111ee95f30a54427315b5ff036e8c8ed844348f63f5abd72aa295076607058372853244
Certificate IssuerAmazon
Subjectlinqto.com
Fingerprint2B:09:E8:D2:E2:C0:B8:A2:4A:C7:6F:DA:42:42:FC:CD:A9:E0:99:5E
ValiditySun, 11 Jun 2023 00:00:00 GMT - Wed, 10 Jul 2024 23:59:59 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Size 828 kB (827544 bytes)
Hash d20d60e120821f2541b63b66fed08ca1
ede8ba143456deaac33dbabe2847259990dcfb56
fdc3d8a1e31a6816aa1817be6b19d9f7ed37fdeba3047bb3adcced0661d38eb3
GET /static/js/main.e89a980c.chunk.js HTTP/1.1
Host: app.linqto.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://app.linqto.com/signup?utm_campaign=ZP_Int_Epic_Signup&utm_term=badious-buzzard_urseforge%2Curseforge.com%2Ccurseforge&utm_source=ZeroPark&utm_medium=charlie-sub-OCVqYSFn&click_id=zre1303ca65d9111ee95f30a54427315b5ff036e8c8ed844348f63f5abd72aa295076607058372853244
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 27 Sep 2023 23:59:25 GMT
content-type: application/javascript
server: Apache/2.4.57 () OpenSSL/1.0.2k-fips
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Fri, 22 Sep 2023 20:07:19 GMT
etag: "ca098-605f827dbabc0-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
x-hostname: awsProdA1
x-xss-protection: 1; mode=block
content-security-policy: frame-ancestors 'self'; default-src 'self' data: blob: 'unsafe-inline' 'unsafe-eval' *.g.doubleclick.net cdnjs.cloudflare.com cdn.uphold.com fonts.googleapis.com *.gstatic.com cdnjs.cloudflare.com www.googletagmanager.com cdn.plaid.com cdn.branch.io app.link www.google-analytics.com api2.branch.io *.microblink.com www.youtube.com *.googlevideo.com *.hs-scripts.com js.hscollectedforms.net js.hs-banner.com js.hs-analytics.net *.hubspot.com forms.hsforms.com purecatamphetamine.github.io js.hsadspixel.net api.hubapi.com connect.facebook.net snap.licdn.com www.googleadservices.com *.linkedin.com *.oribi.io *.google.com google.com www.facebook.com p.adsymptotic.com www.google.com.tw *.sentry.io live.rezync.com secure.adnxs.com *.rfihub.net *.rfihub.com *.bluekai.com *.mixpanel.com *.zoominfo.com *.clickagy.com d34r8q7sht0t9k.cloudfront.net cdn.taboola.com trc.taboola.com trc-events.taboola.com cds.taboola.com pips.taboola.com verifi.podscribe.com js.usemessages.com *.plaid.com cdn.growthbook.io appleid.cdn-apple.com *.braze.com *.appboycdn.com d3pkntwtp2ukl5.cloudfront.net d1wbjksx0xxdn3.cloudfront.net events.ub-analytics.com braze-images.com;
X-Firefox-Spdy: h2
js.hsadspixel.net/fb.js
104.17.228.163200 OK 6.1 kB IP 104.17.228.163:443
Requested by https://app.linqto.com/signup?utm_campaign=ZP_Int_Epic_Signup&utm_term=badious-buzzard_urseforge%2Curseforge.com%2Ccurseforge&utm_source=ZeroPark&utm_medium=charlie-sub-OCVqYSFn&click_id=zre1303ca65d9111ee95f30a54427315b5ff036e8c8ed844348f63f5abd72aa295076607058372853244
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintFC:DB:B2:8A:EC:7E:99:5C:25:C2:01:C0:DB:44:A4:07:41:7E:4F:3A
ValidityWed, 17 May 2023 00:00:00 GMT - Thu, 16 May 2024 23:59:59 GMT
File type ASCII text, with very long lines (6282), with no line terminators
Hash c660f8caff9031e4a4d7374dba223bcd
bcf6993dcecf9433a622f1d9a39e48bc64ad156f
ac834f3b7304e30767eeced91612b3a8f5f96c8b0baa1cf953bfcf1ed36b1b7b
GET /fb.js HTTP/1.1
Host: js.hsadspixel.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://app.linqto.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 27 Sep 2023 23:59:25 GMT
content-type: application/javascript; charset=utf-8
x-amz-replication-status: COMPLETED
last-modified: Tue, 19 Sep 2023 08:21:28 UTC
x-amz-server-side-encryption: AES256
x-amz-version-id: MiORZOji2P27E5f3usS102mv5dcg0lYn
etag: W/"1bce211846e6a6691aa314979e0a21fb"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a4f9ca051b97c1ac09e2af244690d376.cloudfront.net (CloudFront)
x-amz-cf-pop: IAD12-P3
x-amz-cf-id: 938m5IpyNnxj1xSCpDYw2DFKNduKEoDB8ASavQj-nQBSKhwAzo_CvA==
content-security-policy-report-only: frame-ancestors 'self'; report-uri https://send.hsbrowserreports.com/csp/report?resource=adsscriptloaderstatic/static-1.485/bundles/pixels-release.js&cfRay=809497ece9b2d96b-ARN
cache-control: max-age=600
x-hs-target-asset: adsscriptloaderstatic/static-1.485/bundles/pixels-release.js
x-content-type-options: nosniff
x-hs-cache-status: HIT
x-envoy-upstream-service-time: 10
x-evy-trace-route-service-name: envoyset-translator
x-evy-trace-virtual-host: all
x-evy-trace-served-by-pod: iad02/app-td/envoy-proxy-57ff77fcd-v9tfr
x-evy-trace-listener: listener_https
x-evy-trace-route-configuration: listener_https/all
x-hubspot-correlation-id: 63cc003f-5b04-4781-8ac2-d8776597e9f7
x-request-id: 63cc003f-5b04-4781-8ac2-d8776597e9f7
cache-tag: staticjsapp-AdsScriptLoaderCloudflare-web-prod,staticjsapp-prod
cf-cache-status: HIT
age: 340
server: cloudflare
cf-ray: 80d7b348883656c4-OSL
content-encoding: br
X-Firefox-Spdy: h2