click.everyaction.com/k/41950990/331017006/-2116672619?emci=2c751078-d190-ec11-a507-281878b83d8a&emdi=34751078-d190-ec11-a507-281878b83d8a&fn=Katie&ln=Barden&em=katie.barden@slurpmail.net&pc=&hp=5074447487&mp=5074567475&utm_source=ea&utm_medium=email&utm_campaign=pto_igc4&sourceid=1013359&nvep=ew0KICAiVGVuYW50VXJpIjogIm5ncHZhbjovL3Zhbi9UU00vVFNNR1AvMS81NTY3OCIsDQogICJEaXN0cmlidXRpb25VbmlxdWVJZCI6ICIzNDc1MTA3OC1kMTkwLWVjMTEtYTUwNy0yODE4NzhiODNkOGEiLA0KICAiRW1haWxBZGRyZXNzIjogImthdGllLmJhcmRlbkBjby5zdGVlbGUubW4udXMiDQp9&hmac=snmDQj0lGIaK-RD1tohE3sF8xVG1iYBcpuzD1nqFpfU=&ceid=2592146
301 Moved Permanently 0 B URL HTTP/1.1 click.everyaction.com/k/41950990/331017006/-2116672619?emci=2c751078-d190-ec11-a507-281878b83d8a&emdi=34751078-d190-ec11-a507-281878b83d8a&fn=Katie&ln=Barden&em=katie.barden@slurpmail.net&pc=&hp=5074447487&mp=5074567475&utm_source=ea&utm_medium=email&utm_campaign=pto_igc4&sourceid=1013359&nvep=ew0KICAiVGVuYW50VXJpIjogIm5ncHZhbjovL3Zhbi9UU00vVFNNR1AvMS81NTY3OCIsDQogICJEaXN0cmlidXRpb25VbmlxdWVJZCI6ICIzNDc1MTA3OC1kMTkwLWVjMTEtYTUwNy0yODE4NzhiODNkOGEiLA0KICAiRW1haWxBZGRyZXNzIjogImthdGllLmJhcmRlbkBjby5zdGVlbGUubW4udXMiDQp9&hmac=snmDQj0lGIaK-RD1tohE3sF8xVG1iYBcpuzD1nqFpfU=&ceid=2592146
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /k/41950990/331017006/-2116672619?emci=2c751078-d190-ec11-a507-281878b83d8a&emdi=34751078-d190-ec11-a507-281878b83d8a&fn=Katie&ln=Barden&em=katie.barden@slurpmail.net&pc=&hp=5074447487&mp=5074567475&utm_source=ea&utm_medium=email&utm_campaign=pto_igc4&sourceid=1013359&nvep=ew0KICAiVGVuYW50VXJpIjogIm5ncHZhbjovL3Zhbi9UU00vVFNNR1AvMS81NTY3OCIsDQogICJEaXN0cmlidXRpb25VbmlxdWVJZCI6ICIzNDc1MTA3OC1kMTkwLWVjMTEtYTUwNy0yODE4NzhiODNkOGEiLA0KICAiRW1haWxBZGRyZXNzIjogImthdGllLmJhcmRlbkBjby5zdGVlbGUubW4udXMiDQp9&hmac=snmDQj0lGIaK-RD1tohE3sF8xVG1iYBcpuzD1nqFpfU=&ceid=2592146 HTTP/1.1
Host: click.everyaction.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Content-Length: 0
Date: Sat, 26 Nov 2022 22:22:09 GMT
Location: https://click.everyaction.com/k/41950990/331017006/-2116672619?emci=2c751078-d190-ec11-a507-281878b83d8a&emdi=34751078-d190-ec11-a507-281878b83d8a&fn=Katie&ln=Barden&em=katie.barden@slurpmail.net&pc=&hp=5074447487&mp=5074567475&utm_source=ea&utm_medium=email&utm_campaign=pto_igc4&sourceid=1013359&nvep=ew0KICAiVGVuYW50VXJpIjogIm5ncHZhbjovL3Zhbi9UU00vVFNNR1AvMS81NTY3OCIsDQogICJEaXN0cmlidXRpb25VbmlxdWVJZCI6ICIzNDc1MTA3OC1kMTkwLWVjMTEtYTUwNy0yODE4NzhiODNkOGEiLA0KICAiRW1haWxBZGRyZXNzIjogImthdGllLmJhcmRlbkBjby5zdGVlbGUubW4udXMiDQp9&hmac=snmDQj0lGIaK-RD1tohE3sF8xVG1iYBcpuzD1nqFpfU=&ceid=2592146
Set-Cookie: visid_incap_1392949=AnKQx3KKSmiuilLJftk+gVORgmMAAAAAQUIPAAAAAADRcHwxPeAvLk21NYKu/Dvl; expires=Sun, 26 Nov 2023 22:16:30 GMT; HttpOnly; path=/; Domain=.everyaction.com
nlbi_1392949=5QeKHCfLwwvPc0kjc8ry4wAAAACduaOeCtVI5zgdUrXf6KpQ; path=/; Domain=.everyaction.com
incap_ses_722_1392949=LwmFZhQy0A7T/r3nFxAFCpGRgmMAAAAAj4P5KYZ1x3olhH5hBz1ZEg==; path=/; Domain=.everyaction.com
X-CDN: Imperva
X-Iinfo: 6-23196376-23196379 NNNY CT(100 -1 0) RT(1669501329689 83) q(0 0 0 0) r(1 1) U11
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a9f1d4d98705c281fed3b60343463200
db6f8aa98d2eda4e5473b116a222c3055568bb78
164d11173045b569cafb32e300e4c1ec6d6ab177fd34d0414cc40c541268779f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "164D11173045B569CAFB32E300E4C1EC6D6AB177FD34D0414CC40C541268779F"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6587
Expires: Sun, 27 Nov 2022 00:11:57 GMT
Date: Sat, 26 Nov 2022 22:22:10 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash 15b59d5e62caedb4bec3ba6724906c1e
960f801e608a56fdd11449f4face29f62cad2b21
8c72a45737c2eeddf328b0ed3236f3243551d904e94ec9dd7254972ebfb9229e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1367
Cache-Control: max-age=131505
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 22:22:10 GMT
Etag: "6381eaec-1d7"
Expires: Mon, 28 Nov 2022 10:53:55 GMT
Last-Modified: Sat, 26 Nov 2022 10:31:08 GMT
Server: ECS (ska/F70A)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 260e9998c20d831b66f1029c8f47aac9
716d630f647c54dc69a7f9c63a6cac294b3df7f7
c9951a909f354174f0075a01c01c3c3aa6960983040e328bfbbbea81aeb405c2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C9951A909F354174F0075A01C01C3C3AA6960983040E328BFBBBEA81AEB405C2"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7508
Expires: Sun, 27 Nov 2022 00:27:18 GMT
Date: Sat, 26 Nov 2022 22:22:10 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 4d7e4eed097b9c4e5d509419f1cfc85a
290bb3d428a7c6330e2e3d73a952b16f820896c8
0dc9ca0f57af15adcd416035e92794711434e3d53a1feff21d8481d6d500986c
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Content-Length, Alert, Backoff, Retry-After
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sat, 26 Nov 2022 22:19:17 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 173
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: +pjkQCuK+5scuQEk/+TzN35RJ6icKNbu7Sa0BR/55GoT2jyy8V0QZBwqcTMwXfyxbdtmw508Ng4=
x-amz-request-id: 7NXRCXR18XNSNEDT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sat, 26 Nov 2022 21:44:23 GMT
age: 2267
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 22:22:10 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
click.everyaction.com/k/41950990/331017006/-2116672619?emci=2c751078-d190-ec11-a507-281878b83d8a&emdi=34751078-d190-ec11-a507-281878b83d8a&fn=Katie&ln=Barden&em=katie.barden@slurpmail.net&pc=&hp=5074447487&mp=5074567475&utm_source=ea&utm_medium=email&utm_campaign=pto_igc4&sourceid=1013359&nvep=ew0KICAiVGVuYW50VXJpIjogIm5ncHZhbjovL3Zhbi9UU00vVFNNR1AvMS81NTY3OCIsDQogICJEaXN0cmlidXRpb25VbmlxdWVJZCI6ICIzNDc1MTA3OC1kMTkwLWVjMTEtYTUwNy0yODE4NzhiODNkOGEiLA0KICAiRW1haWxBZGRyZXNzIjogImthdGllLmJhcmRlbkBjby5zdGVlbGUubW4udXMiDQp9&hmac=snmDQj0lGIaK-RD1tohE3sF8xVG1iYBcpuzD1nqFpfU=&ceid=2592146
302 Found 0 B URL HTTP/1.1 click.everyaction.com/k/41950990/331017006/-2116672619?emci=2c751078-d190-ec11-a507-281878b83d8a&emdi=34751078-d190-ec11-a507-281878b83d8a&fn=Katie&ln=Barden&em=katie.barden@slurpmail.net&pc=&hp=5074447487&mp=5074567475&utm_source=ea&utm_medium=email&utm_campaign=pto_igc4&sourceid=1013359&nvep=ew0KICAiVGVuYW50VXJpIjogIm5ncHZhbjovL3Zhbi9UU00vVFNNR1AvMS81NTY3OCIsDQogICJEaXN0cmlidXRpb25VbmlxdWVJZCI6ICIzNDc1MTA3OC1kMTkwLWVjMTEtYTUwNy0yODE4NzhiODNkOGEiLA0KICAiRW1haWxBZGRyZXNzIjogImthdGllLmJhcmRlbkBjby5zdGVlbGUubW4udXMiDQp9&hmac=snmDQj0lGIaK-RD1tohE3sF8xVG1iYBcpuzD1nqFpfU=&ceid=2592146
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /k/41950990/331017006/-2116672619?emci=2c751078-d190-ec11-a507-281878b83d8a&emdi=34751078-d190-ec11-a507-281878b83d8a&fn=Katie&ln=Barden&em=katie.barden@slurpmail.net&pc=&hp=5074447487&mp=5074567475&utm_source=ea&utm_medium=email&utm_campaign=pto_igc4&sourceid=1013359&nvep=ew0KICAiVGVuYW50VXJpIjogIm5ncHZhbjovL3Zhbi9UU00vVFNNR1AvMS81NTY3OCIsDQogICJEaXN0cmlidXRpb25VbmlxdWVJZCI6ICIzNDc1MTA3OC1kMTkwLWVjMTEtYTUwNy0yODE4NzhiODNkOGEiLA0KICAiRW1haWxBZGRyZXNzIjogImthdGllLmJhcmRlbkBjby5zdGVlbGUubW4udXMiDQp9&hmac=snmDQj0lGIaK-RD1tohE3sF8xVG1iYBcpuzD1nqFpfU=&ceid=2592146 HTTP/1.1
Host: click.everyaction.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 302 Found
Content-Length: 0
Date: Sat, 26 Nov 2022 22:22:09 GMT
Server: Microsoft-IIS/10.0
Access-Control-Expose-Headers: Request-Context
Cache-Control: no-cache
Expires: -1
Location: https://engage.us.greenpeace.org/onlineactions/un8-YeF_R06GSq7I0_xKNg2?emci=2c751078-d190-ec11-a507-281878b83d8a&emdi=34751078-d190-ec11-a507-281878b83d8a&fn=Katie&ln=Barden&em=katie.barden%40slurpmail.net&pc=&hp=5074447487&mp=5074567475&utm_source=ea&utm_medium=email&utm_campaign=pto_igc4&sourceid=1013359&ceid=2592146
Pragma: no-cache
X-AspNet-Version: 4.0.30319
Request-Context: appId=cid-v1:ccd92c0b-19c7-485c-b607-cbfe2344efa3
X-Robots-Tag: noindex
Set-Cookie: visid_incap_1392949=YE4X4Kd4TEWhTSsvHP9rPpKRgmMAAAAAQUIPAAAAAAB/rDDkB71Jard09yBDG/oL; expires=Sun, 26 Nov 2023 22:16:29 GMT; HttpOnly; path=/; Domain=.everyaction.com
nlbi_1392949=H9geXrd/F2paUKl1c8ry4wAAAABCvVbhrTD5T6egv8bN2FSD; path=/; Domain=.everyaction.com
incap_ses_722_1392949=qodqSugfb3TDFb7nFxAFCpKRgmMAAAAAlUxTaqJD3dhsvzWAyIa+fw==; path=/; Domain=.everyaction.com
X-CDN: Imperva
X-Iinfo: 7-35155848-35155849 NNNY CT(99 213 0) RT(1669501330011 23) q(0 0 0 -1) r(1 1) U11
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Content-Length, Alert, Cache-Control, ETag, Pragma, Expires, Backoff, Last-Modified
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sat, 26 Nov 2022 22:11:12 GMT
cache-control: public,max-age=3600
age: 658
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash d3df71aab146eefc49acb608796aab63
8401892995193919376dfcd798b09c8261579454
a616c1e54e896576601e6107c1814adbebf35364d8ed807cdd89ac36b8200c88
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4967
Cache-Control: max-age=130048
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 22:22:10 GMT
Etag: "6381d72b-1d7"
Expires: Mon, 28 Nov 2022 10:29:38 GMT
Last-Modified: Sat, 26 Nov 2022 09:06:51 GMT
Server: ECS (ska/F70A)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: FH53mjmkwzw/l6+wBertbw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: PkNfPtn7LubeCa2KT61bANuE9Zg=
engage.us.greenpeace.org/_Incapsula_Resource?SWJIYLWA=719d34d31c8e3a6e6fffd425f7e032f3&ns=1&cb=1348060230
200 OK 18 kB URL HTTP/2 engage.us.greenpeace.org/_Incapsula_Resource?SWJIYLWA=719d34d31c8e3a6e6fffd425f7e032f3&ns=1&cb=1348060230
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 12a6986519128d0096fecab6ef890815
a927fa403007a80afc886f5a1aee0ecfa9ad26c2
7545a66e23f50decfe7c2591700208386a3a4ac347ddea9118aa55a2aa529d1e
GET /_Incapsula_Resource?SWJIYLWA=719d34d31c8e3a6e6fffd425f7e032f3&ns=1&cb=1348060230 HTTP/1.1
Host: engage.us.greenpeace.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engage.us.greenpeace.org/onlineactions/un8-YeF_R06GSq7I0_xKNg2?emci=2c751078-d190-ec11-a507-281878b83d8a&emdi=34751078-d190-ec11-a507-281878b83d8a&fn=Katie&ln=Barden&em=katie.barden%40slurpmail.net&pc=&hp=5074447487&mp=5074567475&utm_source=ea&utm_medium=email&utm_campaign=pto_igc4&sourceid=1013359&ceid=2592146
Cookie: visid_incap_1935261=hEOrvSY2QoCWWLLJvH15RpKRgmMAAAAAQUIPAAAAAADUP+8omL9imPWBiRzp23iX; nlbi_1935261=b473PvLlD2K7uFx+du09AQAAAACaqIIAcrFda4JuN/pAAY1/; incap_ses_722_1935261=yVTHamt7nwX0Fb7nFxAFCpORgmMAAAAAhl1iuq6wNFUGyiIUqmIFXg==; TiPMix=86.30083827597895; x-ms-routing-name=self
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: no-cache, no-store
content-type: application/javascript
content-encoding: gzip
x-robots-tag: noindex
content-length: 17843
X-Firefox-Spdy: h2
az416426.vo.msecnd.net/scripts/b/ai.2.min.js
200 OK 47 kB URL HTTP/2 az416426.vo.msecnd.net/scripts/b/ai.2.min.js
IP
File type ASCII text, with very long lines (65410)
Hash a63d60c7192016d8b1f193f1428ede03
1fa157368c482270a28192cad9240c4cdaae789f
90c8c4e24538675470966affee751d2b969a20fca1c621a720beb4e152490f6e
GET /scripts/b/ai.2.min.js HTTP/1.1
Host: az416426.vo.msecnd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engage.us.greenpeace.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-encoding: gzip
access-control-allow-origin: *
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding
age: 1557
cache-control: public, max-age=1800, immutable, no-transform
content-md5: 9j1it/ejcfI34cTV1VuCzA==
content-type: text/javascript; charset=utf-8
date: Sat, 26 Nov 2022 22:22:11 GMT
etag: 0x8DABB6EAE654DEC
expires: Sat, 26 Nov 2022 22:52:11 GMT
last-modified: Mon, 31 Oct 2022 18:35:27 GMT
server: ECAcc (ska/F778)
vary: Accept-Encoding
x-cache: HIT
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-meta-aijssdksrc: [cdn]/scripts/b/ai.2.8.9.min.js
x-ms-meta-aijssdkver: 2.8.9
x-ms-meta-lastmodified: 2020-10-07 00:07:47
x-ms-request-id: 10f05048-c01e-0002-17e1-01ce8f000000
x-ms-version: 2009-09-19
content-length: 47276
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e388353a642bc503beff27c23339e2b5
7849301df8cbfa3f9c019b1d4033b66e0f44c4bd
5e595e9ce96c6147c3ff79ebba0068ddb0d997237a671936cb05d9575c59a424
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 22:22:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash cf6437ae6bdba23a0ea8da78c82de183
e7d8a320b192aa7d766fe114b305303a2b78bff4
8aba81a07d65eab72ef19d9f0dfec032f6b58f78b1ce9054d50d5ebf1367272d
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=96063
Date: Sat, 26 Nov 2022 22:22:11 GMT
Etag: "63815470-1d7"
Expires: Mon, 28 Nov 2022 01:03:14 GMT
Last-Modified: Fri, 25 Nov 2022 23:49:04 GMT
Server: ECS (dcb/7F14)
X-Cache: Miss from cloudfront
Via: 1.1 e49f22f18c16784c0f42291e768d1daa.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 0tKvmG5iPxx16k9hX7JVv4o7qbDlY75dQJte1-0Rk2aDky_taBfJZA==
Age: 4450
static.everyaction.com/ea-actiontag/at.js
200 OK 235 kB URL HTTP/2 static.everyaction.com/ea-actiontag/at.js
IP
File type Unicode text, UTF-8 text, with very long lines (32063)
Size 235 kB (235422 bytes)
Hash faccf46f084544c4a3c84387a9ef20fd
4e53cc43d23e653f89ce6183f94abde307480fe3
e9d194f63f1a7ce12fca7aa967bc5769ed1242ef809ac59f829def55808386be
GET /ea-actiontag/at.js HTTP/1.1
Host: static.everyaction.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://engage.us.greenpeace.org
Connection: keep-alive
Referer: https://engage.us.greenpeace.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
content-length: 235422
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Tue, 15 Nov 2022 15:33:04 GMT
content-encoding: gzip
accept-ranges: bytes
server: AmazonS3
date: Sat, 26 Nov 2022 16:27:25 GMT
cache-control: max-age=900, s-maxage=86400, public
etag: "faccf46f084544c4a3c84387a9ef20fd"
x-cache: Hit from cloudfront
via: 1.1 227a1815a1677b9cf6dd587e443000b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: VNQ_f9h5n8Iz8Nf4zAPf7tsR-9sNnL_9FHgSYG8PNU5uyMycI1QC3Q==
age: 22545
X-Firefox-Spdy: h2
www.googletagmanager.com/gtm.js?id=GTM-MF5BX25
200 OK 76 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-MF5BX25
IP
File type ASCII text, with very long lines (6087)
Hash 6bab2ce7333f2218a74a8898d6975f2b
07ddb8c886828f03c6c508d1050962684e0b9ebc
4c162366976832344a0c15ff016c1e4c889e1627f1fddf7bd63d4ebd40d0b884
GET /gtm.js?id=GTM-MF5BX25 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engage.us.greenpeace.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sat, 26 Nov 2022 22:22:11 GMT
expires: Sat, 26 Nov 2022 22:22:11 GMT
cache-control: private, max-age=900
last-modified: Sat, 26 Nov 2022 21:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 75872
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.googletagmanager.com/gtm.js?id=GTM-KNNP28
200 OK 94 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-KNNP28
IP
File type ASCII text, with very long lines (40632)
Hash b32cd98e4d43c1ce2ea76edd0a6460a6
3bd9a4f81dde6c49882a306f954bc979b64d419c
cd53f8188705c46381f68698972df8acabbf66c689fa15d00a8183cbc149e8fb
GET /gtm.js?id=GTM-KNNP28 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engage.us.greenpeace.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sat, 26 Nov 2022 22:22:11 GMT
expires: Sat, 26 Nov 2022 22:22:11 GMT
cache-control: private, max-age=900
last-modified: Sat, 26 Nov 2022 21:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 94477
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash bf32b05c5c24b57ea6a3c2e0d4053e3b
e34867d50f1ee0d389da2ffdf8d2c7a97496c7ff
2515e73c3fa0f5552919327b77360ebaacd4aa8e746f5e986c6fc9b625ae0d31
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=87980
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 22:22:11 GMT
Etag: "6381463f-117"
Expires: Sun, 27 Nov 2022 22:48:31 GMT
Last-Modified: Fri, 25 Nov 2022 22:48:31 GMT
Server: nginx
Content-Length: 279
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e388353a642bc503beff27c23339e2b5
7849301df8cbfa3f9c019b1d4033b66e0f44c4bd
5e595e9ce96c6147c3ff79ebba0068ddb0d997237a671936cb05d9575c59a424
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 22:22:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
js.verygoodvault.com/vgs-collect/2.14.0/vgs-collect.js
200 OK 44 kB URL HTTP/1.1 js.verygoodvault.com/vgs-collect/2.14.0/vgs-collect.js
IP
File type Unicode text, UTF-8 text, with very long lines (65432)
Hash 50f62e9bd38498f9f99ea5dd7f082785
a1205e159502018e4f547172918dd7d15caa371e
42e7dc09299843f320e136c4d14a2a5289ba9cd53fcb5602b592a905bebe30d4
GET /vgs-collect/2.14.0/vgs-collect.js HTTP/1.1
Host: js.verygoodvault.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://engage.us.greenpeace.org
Connection: keep-alive
Referer: https://engage.us.greenpeace.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 08 Jun 2022 01:07:52 GMT
x-amz-version-id: uQF6CVoMnT1mOHvFavSn8ur6rXtO9Qh9
Server: AmazonS3
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Date: Sat, 26 Nov 2022 22:22:11 GMT
Cache-Control: max-age=60
ETag: W/"2eb620d1b4f90db03c929f89d188cf80"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 60929bddfcfe8b3a510a9502ad6d8742.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: ANgWT7CSW5VHMNvfnkp8rp7KoVwu77ajClfipPrcfQUbh8ulsocymQ==
Age: 5
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash cf6437ae6bdba23a0ea8da78c82de183
e7d8a320b192aa7d766fe114b305303a2b78bff4
8aba81a07d65eab72ef19d9f0dfec032f6b58f78b1ce9054d50d5ebf1367272d
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=91613
Date: Sat, 26 Nov 2022 22:22:11 GMT
Etag: "63815470-1d7"
Expires: Sun, 27 Nov 2022 23:49:04 GMT
Last-Modified: Fri, 25 Nov 2022 23:49:04 GMT
Server: nginx
X-Cache: Miss from cloudfront
Via: 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: ujeCXvSpjH8gsFegYDO8tVcQCYFYyZWkbhRsFAy0EBP1DeToBM0sRw==
static.everyaction.com/ea-actiontag/at.min.css
200 OK 12 kB URL HTTP/2 static.everyaction.com/ea-actiontag/at.min.css
IP
File type Unicode text, UTF-8 text, with very long lines (60105), with CRLF, LF line terminators
Hash 23799b0f415ad6f0bf43b806a8dc4afb
ba1bbc1b1e0cf8058f8492078735101b0e096211
dc5ae3762d46ac135cf981665a04948952af33a69c4d4aa54e69850561d9bfe6
GET /ea-actiontag/at.min.css HTTP/1.1
Host: static.everyaction.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engage.us.greenpeace.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
content-length: 11466
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Tue, 15 Nov 2022 15:33:04 GMT
content-encoding: gzip
accept-ranges: bytes
server: AmazonS3
date: Sat, 26 Nov 2022 15:56:00 GMT
cache-control: max-age=900, s-maxage=86400, public
etag: "23799b0f415ad6f0bf43b806a8dc4afb"
x-cache: Hit from cloudfront
via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: kDQ8cDERZzZ-j2mhLCrgTo15-mNML7sWevdl6Um-dYufVO4Qw9_ZeQ==
age: 56799
X-Firefox-Spdy: h2
up.pixel.ad/assets/up.js?um=1
200 OK 1.6 kB URL HTTP/2 up.pixel.ad/assets/up.js?um=1
IP
File type ASCII text, with very long lines (3275)
Hash 745340d954663bbef59f3e65c8aa728b
0af5bfef26b3eeec2000086014638c4d11821220
71bfd4fead77b57be5c1ffa6a3c49e4c5defba58cbcabf255a1757a4579c53e6
GET /assets/up.js?um=1 HTTP/1.1
Host: up.pixel.ad
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engage.us.greenpeace.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/javascript
content-encoding: gzip
vary: Accept-Encoding
server: AC1.1
x-llid: 600238586f4ae5ec881455f1f06ed21f
age: 52723
date: Sat, 26 Nov 2022 22:22:11 GMT
last-modified: Wed, 16 Mar 2022 16:22:21 GMT
content-length: 1550
X-Firefox-Spdy: h2
sc-static.net/scevent.min.js
200 OK 12 kB URL HTTP/2 sc-static.net/scevent.min.js
IP
File type ASCII text, with very long lines (27639), with no line terminators
Hash 6d231d01533de87f1978527ff1582e85
2681a231f71539018d1e7ef81b21035159e70067
dd8eda4130a189c4da20100752803ccb737e26f5c93f97f8db822f29f545be19
GET /scevent.min.js HTTP/1.1
Host: sc-static.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engage.us.greenpeace.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript;charset=utf-8
content-length: 11968
server: CloudFront
date: Sat, 26 Nov 2022 22:22:11 GMT
content-encoding: gzip
access-control-allow-origin: *
access-control-allow-headers: Content-Type
cache-control: private, s-maxage=0, max-age=600
set-cookie: X-AB=0d6e407936704bd380072f5891d28b0e;max-age=86400;expires=Sun, 27 Nov 2022 20:57:42 GMT;Path=/scevent.min.js; Secure; SameSite=None
x-cache: LambdaGeneratedResponse from cloudfront
via: 1.1 e2f427863e6bdb72ad8bed72b596d81e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: EVfwbOT-UAdkFmbrdqiLPlWqStde6c-eFbbNjCQjjKA9BJJh85SgTQ==
X-Firefox-Spdy: h2
nvlupin.blob.core.windows.net/images/van/TSM/TSMGP/1/55678/images/THEME%20FILES/texture.jpg
200 OK 18 kB URL HTTP/1.1 nvlupin.blob.core.windows.net/images/van/TSM/TSMGP/1/55678/images/THEME%20FILES/texture.jpg
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 176x176, components 3\012- data
Hash ae6804aed7d444ec613622c27d53d208
ca18d47ad0c561c79b759783f3a9133be3cda717
22d020d937f0238382c3d79991582d78be9626cb3e4ca2ac54a59a98b616c7fa
GET /images/van/TSM/TSMGP/1/55678/images/THEME%20FILES/texture.jpg HTTP/1.1
Host: nvlupin.blob.core.windows.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engage.us.greenpeace.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Length: 17535
Content-Type: image/jpeg
Last-Modified: Wed, 29 Apr 2020 11:17:59 GMT
ETag: 0x8D7EC2EF941914E
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 9f48bc9e-f01e-0051-28e5-01dadd000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
Access-Control-Allow-Origin: *
Date: Sat, 26 Nov 2022 22:22:11 GMT
nvlupin.blob.core.windows.net/images/van/TSM/TSMGP/1/55678/images/THEME%20FILES/jquery.min.js
200 OK 97 kB URL HTTP/1.1 nvlupin.blob.core.windows.net/images/van/TSM/TSMGP/1/55678/images/THEME%20FILES/jquery.min.js
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type ASCII text, with very long lines (32077)
Hash 4f252523d4af0b478c810c2547a63e19
5a9dcfbef655a2668e78baebeaa8dc6f41d8dabb
668b046d12db350ccba6728890476b3efee53b2f42dbb84743e5e9f1ae0cc404
GET /images/van/TSM/TSMGP/1/55678/images/THEME%20FILES/jquery.min.js HTTP/1.1
Host: nvlupin.blob.core.windows.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engage.us.greenpeace.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Length: 97163
Content-Type: application/x-javascript
Last-Modified: Tue, 28 Apr 2020 13:18:26 GMT
ETag: 0x8D7EB76A2B442C0
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 238ba518-401e-0054-69e5-010806000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
Access-Control-Allow-Origin: *
Date: Sat, 26 Nov 2022 22:22:10 GMT
static.everyaction.com/ea-actiontag/at.js
304 Not Modified 0 B URL HTTP/2 static.everyaction.com/ea-actiontag/at.js
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ea-actiontag/at.js HTTP/1.1
Host: static.everyaction.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://engage.us.greenpeace.org
Connection: keep-alive
Referer: https://engage.us.greenpeace.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
If-Modified-Since: Tue, 15 Nov 2022 15:33:04 GMT
If-None-Match: "faccf46f084544c4a3c84387a9ef20fd"
TE: trailers
HTTP/2 304 Not Modified
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Tue, 15 Nov 2022 15:33:04 GMT
server: AmazonS3
date: Sat, 26 Nov 2022 16:27:25 GMT
cache-control: max-age=900, s-maxage=86400, public
etag: "faccf46f084544c4a3c84387a9ef20fd"
x-cache: Hit from cloudfront
via: 1.1 227a1815a1677b9cf6dd587e443000b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Eo_iA33GuTMRbgGDMPm1M2n1WWIIuRiJ6FG8mF-gmL45gCKiEN_eAw==
age: 22546
X-Firefox-Spdy: h2
nvlupin.blob.core.windows.net/images/van/TSM/TSMGP/1/55678/images/THEME%20FILES/greenpeace-logo-green.svg
200 OK 102 kB URL HTTP/1.1 nvlupin.blob.core.windows.net/images/van/TSM/TSMGP/1/55678/images/THEME%20FILES/greenpeace-logo-green.svg
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Size 102 kB (101755 bytes)
Hash 7c9874df1535cfa16fe5b56cb1fb9bd6
cdc8c8f03f2690b04578afb9945623295e26cee0
eb3ffb31beee5ce4540d357e0920f569d86320c73a0c9378ccc29d9af43b649d
GET /images/van/TSM/TSMGP/1/55678/images/THEME%20FILES/greenpeace-logo-green.svg HTTP/1.1
Host: nvlupin.blob.core.windows.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engage.us.greenpeace.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Length: 101755
Content-Type: image/svg+xml
Last-Modified: Tue, 28 Apr 2020 14:15:26 GMT
ETag: 0x8D7EB7E992881C1
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 50c6dcf2-601e-006c-31e5-01acc6000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
Access-Control-Allow-Origin: *
Date: Sat, 26 Nov 2022 22:22:11 GMT
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6827d82f488045e02e40d6a2fdbae4b3
4944139a4b08769511ffc6aa913857d88a0db7bc
0e4ef6ddef97ec03d43df4c0bada61d792b9f030e4d9fab5bd3cf904aeaa3bc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E4EF6DDEF97EC03D43DF4C0BADA61D792B9F030E4D9FAB5BD3CF904AEAA3BC9"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16102
Expires: Sun, 27 Nov 2022 02:50:34 GMT
Date: Sat, 26 Nov 2022 22:22:12 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fba57ea10-c30b-4188-bb72-b589f3564094.jpeg
200 OK 8.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fba57ea10-c30b-4188-bb72-b589f3564094.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 741ddfb19764ac9a77509e7e87cfbfb2
308c08784ce4a0757cbd112807555b83e17a1d56
e9271a76da94d8b655860c3b00d111396c5d3a227fd2f19e0ef400fd5e84d87e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fba57ea10-c30b-4188-bb72-b589f3564094.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8817
x-amzn-requestid: 31bd21c7-1d75-4159-af51-52035da16da4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b-krGE6AIAMF2Kg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637c1b13-32a7b9c6642592c70783a0cf;Sampled=0
x-amzn-remapped-date: Tue, 22 Nov 2022 00:42:59 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 6v42KU65wdKKPvjE7TRA3Li3o2dvrdPH7oGVDZGPPsAepqFFjQJkkA==
via: 1.1 1cc6ed0d2d3dd9529ce544f9dfe61a52.cloudfront.net (CloudFront), 1.1 64f86ae1c24221f3a2e4d653d6dbc416.cloudfront.net (CloudFront), 1.1 google
date: Sat, 26 Nov 2022 16:15:20 GMT
age: 22012
etag: "308c08784ce4a0757cbd112807555b83e17a1d56"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F881a33ae-e81b-4603-85d9-a2242b17be66.jpeg
200 OK 4.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F881a33ae-e81b-4603-85d9-a2242b17be66.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash cc0a257323f882caff067adb86d906e4
cedf2f21be7cd366bd46055b62b5513db3011dfc
c16a9296d5e840a468fef7fb2764b9f7d4b3131d7ade2ce4999de1eead5469e0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F881a33ae-e81b-4603-85d9-a2242b17be66.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4803
x-amzn-requestid: 80f7f1c8-0316-4181-83ac-2787b1ae825f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cOo4iFHoIAMF2-g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63828836-2c0a081b07e0785b4350c10c;Sampled=0
x-amzn-remapped-date: Sat, 26 Nov 2022 21:42:14 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: AVwDLlKoy5pc9NNuR_OakMB0ONGAoO-k2AKwV--b2sjiaqYSKAWlZg==
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 98aedae6661e3904540676966998ed88.cloudfront.net (CloudFront), 1.1 google
date: Sat, 26 Nov 2022 21:51:37 GMT
age: 1835
etag: "cedf2f21be7cd366bd46055b62b5513db3011dfc"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F34752db1-0be8-4784-9fa0-41e828e40e06.jpeg
200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F34752db1-0be8-4784-9fa0-41e828e40e06.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1db6041a0bdb2319ae85afcc30caaeec
3b0ec6a7188dadf986f72fda8110296d9abd6f35
05f1f9b7834e7268dc34e3233434217f58cb68ee43a403cd08d0bb0ab4f37815
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F34752db1-0be8-4784-9fa0-41e828e40e06.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13049
x-amzn-requestid: 2755f206-af23-4597-b4b9-7dae5001d6be
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cBsvpHDJoAMFhFQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637d5b30-600008f573bd7e0024585eb1;Sampled=0
x-amzn-remapped-date: Tue, 22 Nov 2022 23:28:48 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: z7Hy7zEJmW8khrRb_uNcDa3UATX8DaKsdis-wUJAXfOZN4BM-0JtvQ==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google
date: Sat, 26 Nov 2022 01:46:48 GMT
age: 74124
etag: "3b0ec6a7188dadf986f72fda8110296d9abd6f35"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
engage.us.greenpeace.org/_Incapsula_Resource?SWKMTFSR=1&e=0.3287270879392066
200 OK 1 B URL HTTP/2 engage.us.greenpeace.org/_Incapsula_Resource?SWKMTFSR=1&e=0.3287270879392066
IP
File type very short file (no magic)
Hash c4ca4238a0b923820dcc509a6f75849b
356a192b7913b04c54574d18c28d46e6395428ab
6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
GET /_Incapsula_Resource?SWKMTFSR=1&e=0.3287270879392066 HTTP/1.1
Host: engage.us.greenpeace.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engage.us.greenpeace.org/onlineactions/un8-YeF_R06GSq7I0_xKNg2?emci=2c751078-d190-ec11-a507-281878b83d8a&emdi=34751078-d190-ec11-a507-281878b83d8a&fn=Katie&ln=Barden&em=katie.barden%40slurpmail.net&pc=&hp=5074447487&mp=5074567475&utm_source=ea&utm_medium=email&utm_campaign=pto_igc4&sourceid=1013359&ceid=2592146
Cookie: visid_incap_1935261=hEOrvSY2QoCWWLLJvH15RpKRgmMAAAAAQUIPAAAAAADUP+8omL9imPWBiRzp23iX; nlbi_1935261=b473PvLlD2K7uFx+du09AQAAAACaqIIAcrFda4JuN/pAAY1/; incap_ses_722_1935261=yVTHamt7nwX0Fb7nFxAFCpORgmMAAAAAhl1iuq6wNFUGyiIUqmIFXg==; TiPMix=86.30083827597895; x-ms-routing-name=self; ai_user=VEj48EHHtAJ4XVfkhlOE1z|2022-11-26T22:22:11.400Z; _gcl_au=1.1.2109658517.1669501332; _ga_ENX841EBF4=GS1.1.1669501331.1.0.1669501331.0.0.0; _ga=GA1.1.846543259.1669501332; ___utmvc=1K30+fZv07JFZS3U0t2VMIZE9uFuWr5EeDWGwVsQkBGODoiXGsNllrA4hAtOgyn6WIJuQdJQn7ECeO0glKJLEjabGVD+imxuRJ6Zje5fQUMh1wOeVFovaWJmdRZeWbaeFuik1JFH//zu5yat/BbMbztj6rytPZGkXCiuSRzA55pPWPWl0NQXF84a/f1pKFqQ00xq3fqnpEPAkI9ObigB9jZ7AGRCksMIQ4j+dVPJVgzdhtvNdSqBzLSuDtPbl1t/qX7Qw+Necmvt/ArvehyduRby+RWYVT1C76H6aQROTty19Jkxid4rjltrqCATIlma0uXPsOAJx1f/UTLWo+WeVXg38vceCzZxWJ5ZgYw7tYbckWeLGtINOFz3mhXkNa58dt6/sEkO9b52n2l+0MyJ1Aj4brwLrqlHYzYt0sbMYjfh5iytDjlBPa7L8Li48qeZJR+i7isPI4g6nJsqXTxacqP6h1GZHviGUOkocXpy1PHfHEbNzgo63qErgShuMPmiNwvBPqgwPUOBag6L1kP58dFXOVoad0cnxap5oh04htp6czRrpb/cWvn02pejzMTm8Yvz20VRUBHRPKtl1O5TjKOU06miA3DlfuEGE5NJWiR78lqmc/avzilcQN/ysPZ+IFA8L7po64qYVSKHUXE0qhgPRTiAIcPHCDEPy6LcagoDgCpfKl9XfaXJC3G21shGWyE4pt6fe6thclxMhF5VYlSu2DHC2cM/NmZXlpOXR975RsPZfOLsP8uqO5APEKgh7a4DB5Kw4qs3Br8VCigqz9g9eZs6kgkrQsIjmv/A9O1KcnnmN/XjvSqtl29xTpFWJSvjMznJGellIdzxZMwVwu4xglq0TW/Z2qnrueIqPhg9P3vYONV8K5HSZZ3J+G3nrhtOvpCskKjl6+vbEwj7kCJgQW1AwYfbN1dNw6eiMyyq8CcthL/Pdv+/2QTiFP8LFvbeaJzPA5KhXG6KUiS0k7Yt4vZSFXE+HhEHDNYb1Bzx2qOqrEUYD0Z631bZG4aJ/5LzbzbcoR3bmrKPfLz9zs68aHB4vVgV9k3FRYlY3iPY3+ZMFtcT4OjlQdhmcqk69R1J+AJVGUeKr849ZQKDW6p6bEY/svQb0NJrLUCVHh/2BgOdI1JbZm0ikxn2itzZrG0Vkp+fqSj84AKxKqOiqv1COQpVw7Y76R4Izc4JDN5njhdrW/oL0uK9ZldpYc2Yq6yXffuEzRtnMH+muCpwrjIT7vWbSgy8r1P+Xpzz/1TLytgY290MXW0LzyOFz3x2pBtIkfy6hyBHOj9WR1vlp+5rlx9G9R1913rVCN+NjKyyCDq+ppW9XercTe+eirjQL3I7mySywG77htbyLNYuTEj7xOXRXqjRaxO2dOZAavTM0kso1aNfsAEwZk/8Wu89F8Qpa1efoJHGrQW90OnsOzPVjoHNldMCE32v0cOuHiUdWhE67Pupl1Cb8brAmXWijob7AnBY/aQRsKMPLVpQaaFEvXpgosnjKF5pdfQlLyTMGF/YaCaDACsTQcB9rbtN0rZZnothiMxcf0RZ+FpjMI8i81ux1TYhjLweFKRKI18d8LTzJwk+ysEMT0cQt3G6lG14VInN1kR3+5i7faCD2YB4M+LqG2roo7LBFd+lvzoqCPdLhGg83iJ7HnDMyAOgJrA91sEKOm8Ll3RpbTdDtHXEf6PUPZ8b4F2IoyGDZGXM7M052ODYeFB9q7qAkP4oq1fWYNteA7lt7Z/ezNJB/o9IWMXCUGhXSP67jEll5nX/4YxVNAlV5++AmdCYIp+5sVD6x9sKcn7axpN8gxHnhX+oxPcH7dA2s/66WV0WbteIrPCNInFgvoe2D1H8Vnqz1WgtEllOtQbJhjaV6V+pCgy+YkIXDwNWSRaZNn601GE0SYi/wWEGF/PLeeOn9/04tj8KL7u3G5L9IQl2gjaOMgbBrs150FoRi9AbnqHa2h7CsdsgiPjHSXoWyJFOzMQE5YUO1j8ZM0QVSVF1axqhxMl7zJgRxxbyRp2vq7MOjU+JppNpiWoY3PMiPZobvnzA+U/7vXfviGjBdGOVP9R6K9CAspnDoTq2etri4EhrT4YsBsbJNmPM4zfEwKRUSvZBO892RiVUK4eGNpMH+W/fLkJ+mKLbhJf0kIaVn56zQstORVbUhWdg3N44gHx9/zBFT0LTXu8IUsKCv446pWvElypm9bJ1hKpCbimxZUFscb4EyrOEEZoFF7eSZZkiOdrqP5oWQHlm36Yz1aDMKaxGPXP2lxAbyy25YXx4qlBrebVUs8ItWYe2mxg/l02lsyausu9C3A1uMVpoYqatqYADA6iKAhpDDNkW/Uv8jie9sMIV6+5BiKAMQDBVvJMokiWfuNuaexzzho4CJ94utDI7uXYw4vH/6iXTbmBVvQ+rlVKEHDsUYNtMQH1rgnfLGp+Jzaoc9ummhkQaYG4fPlyE3uLdkQbspjFqVSHcECYIT2TJlX3oiZLeBzf6cNdIGFIa7vY92qeEeHdGZ64yL4Jb8NZSJCzYLKidW97UEBb2pR1X2bgDmESItYScUa2am5GgA8QoiM6T1Ya0Y03/jELigNKMir0+lEwCDGSK6YyYmSkc6B0i/naKH8XKHIqokJJ5UHXeuG/MRWI5qGpbu5Ugg8gDqPo75kmclCp0Da2NquO+/q78Gfzz32cTH2zlojtPAc0tWovMje5poZCO83x5YJRFs/zihCxkaWdlc3Q9MTg1Mjg3LHM9YTY5MTg2OGI5YjZjODE4MDZhYWI5YzZjYTE3YTlhODc4YzhmN2FhYThhODY2YWExOGE5YTk2YWI4NDY4OGI5MTgyODI3MDgxNzlhZjcyNmY=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: no-cache, no-store
content-type: text/plain
x-robots-tag: noindex
content-length: 1
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff0b2959f-9d1d-41c7-a7c1-b9f52a7766ac.jpeg
200 OK 7.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff0b2959f-9d1d-41c7-a7c1-b9f52a7766ac.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 76c00eceed956377d7469ef58b0815cb
97a135335f5b1b042adeb385718f8808cb78528b
81fb72ab752b2eb39ab6ee015055304490b3b6c3259968703fd07c2a2eed1e61
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff0b2959f-9d1d-41c7-a7c1-b9f52a7766ac.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7380
x-amzn-requestid: 18589644-299c-4a39-9376-db1bd1472009
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cOo4iEegIAMFeuQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63828836-23990acc0fdc599a75a534e3;Sampled=0
x-amzn-remapped-date: Sat, 26 Nov 2022 21:42:14 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: RqsZxAtbOkWBGbXJ3sZHxcS-ZvWOw7Yg2Qd4zj0QLhrp3wAXC8w6jA==
via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 aef00f14752da9aa504d392fd46eff94.cloudfront.net (CloudFront), 1.1 google
date: Sat, 26 Nov 2022 21:50:08 GMT
age: 1924
etag: "97a135335f5b1b042adeb385718f8808cb78528b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6827d82f488045e02e40d6a2fdbae4b3
4944139a4b08769511ffc6aa913857d88a0db7bc
0e4ef6ddef97ec03d43df4c0bada61d792b9f030e4d9fab5bd3cf904aeaa3bc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E4EF6DDEF97EC03D43DF4C0BADA61D792B9F030E4D9FAB5BD3CF904AEAA3BC9"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16102
Expires: Sun, 27 Nov 2022 02:50:34 GMT
Date: Sat, 26 Nov 2022 22:22:12 GMT
Connection: keep-alive
static.everyaction.com/ea-actiontag/extra.min.css
200 OK 14 kB URL HTTP/2 static.everyaction.com/ea-actiontag/extra.min.css
IP
File type troff or preprocessor input, Unicode text, UTF-8 text, with very long lines (65530), with no line terminators
Hash cde47ba7d262fdacf5f429a951576121
585ebe35a6ade2ca36f86316c5cb8cef25af0f4b
2f7173072a03a32e09f2b33d509f57387031afdf8a95c07193fa1708c40cdf22
GET /ea-actiontag/extra.min.css HTTP/1.1
Host: static.everyaction.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engage.us.greenpeace.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/css; charset=utf-8
content-length: 14198
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Tue, 15 Nov 2022 15:33:04 GMT
content-encoding: gzip
accept-ranges: bytes
server: AmazonS3
date: Sat, 26 Nov 2022 14:04:33 GMT
cache-control: max-age=900, s-maxage=86400, public
etag: "cde47ba7d262fdacf5f429a951576121"
x-cache: Hit from cloudfront
via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: bMnlLBkvp7rZ8MYLPACFBAaFZiRDGSJPva1anmedRGQ-cY_wmb0Qqw==
age: 29859
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fde03fed4-26de-4471-bc0e-a0c0483636ce.jpeg
200 OK 8.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fde03fed4-26de-4471-bc0e-a0c0483636ce.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6ee5071a31d351c552aa651e40b16189
6fca9136030ea6f67be44e428ea39c34ff3e28e7
8d52f14267b8bd47119954796ff6c5d54eb6aa5d23c6e8bbd246108a5b89c1d9
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fde03fed4-26de-4471-bc0e-a0c0483636ce.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8254
x-amzn-requestid: e12624ea-58c6-4f39-826c-8a1d87ebc5ba
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cFySQGegIAMF-HA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637efda7-2c5e216a0d8a1502615186a8;Sampled=0
x-amzn-remapped-date: Thu, 24 Nov 2022 05:14:15 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 0Ylris3tg94-66p8L5kYl2zgnVZ4mCc04ju96DslaB97Dfr-6nTyfA==
via: 1.1 c7c3cdef911c9ee3c1a83a78f425dc5a.cloudfront.net (CloudFront), 1.1 a3bd0eb50c22e4d5fbda56a30b96002c.cloudfront.net (CloudFront), 1.1 google
date: Sat, 26 Nov 2022 21:52:26 GMT
age: 1786
etag: "6fca9136030ea6f67be44e428ea39c34ff3e28e7"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash a22bc94a1116f343d9c3377cfd4fc5b2
b0bad6a620abd0c33a96c32721ad87849da9f9e6
294cd4b44650b17a93cbe9a4de887ad1da8ab8c11105707cccff17812a8d5890
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 22:22:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F297e7532-86f8-4631-9062-cdd6a291b40b.jpeg
200 OK 5.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F297e7532-86f8-4631-9062-cdd6a291b40b.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 433875a1b1fef34e45f2d8ac344c07e3
f2129466436cbbdd58abe42a47fb7af19eba58e6
ab1e7b46f3804640c7dd94d70c8c31ec2dfc3e2f0f015a8556d04d9d9089c450
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F297e7532-86f8-4631-9062-cdd6a291b40b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5099
x-amzn-requestid: 57648043-7820-453d-9549-0f743b6c2557
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cOo4jFBvoAMFl1w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63828836-53b59d607b82c264180f469d;Sampled=0
x-amzn-remapped-date: Sat, 26 Nov 2022 21:42:14 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: VsdLWuh4rCawI5V0YYGaHxEMl2YEVNgsbjfCwzDsrnCZhRK2FkCkVw==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 7eb3b782ab09047ce0d11ee03763894c.cloudfront.net (CloudFront), 1.1 google
date: Sat, 26 Nov 2022 21:51:41 GMT
age: 1831
etag: "f2129466436cbbdd58abe42a47fb7af19eba58e6"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 30f833b25d6e5af2229d9584c6f6cf97
ee79c3fa994d53c1d0687ca61353d63cce459e25
1bc091991c4663dbc86ae735e47ddc3e887a24661050ad9f24b8d458bfd11a6b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 22:22:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1325)
Hash 47e6f374ca946fddd5b59871b325736c
baa9282efc8785e84d247c3bff518eaa45f101c4
16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engage.us.greenpeace.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Sat, 26 Nov 2022 20:41:08 GMT
expires: Sat, 26 Nov 2022 22:41:08 GMT
cache-control: public, max-age=7200
age: 6064
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
bat.bing.com/bat.js
200 OK 11 kB IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type Unicode text, UTF-8 text, with very long lines (39007), with no line terminators
Hash 22e2e3226eb5ada04929a2e43307eeda
04615fa88f80567974bdeb0f103ca5909746ebd7
41feebdfb0b03cd7fee2eb886adef6f3f1f85d3f14215e9a388d2a50e42efb9b
GET /bat.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engage.us.greenpeace.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: private,max-age=1800
content-length: 11421
content-type: application/javascript
content-encoding: gzip
last-modified: Wed, 09 Nov 2022 21:23:50 GMT
accept-ranges: bytes
etag: "077538f81f4d81:0"
vary: Accept-Encoding
set-cookie: MUID=36553BF208DD6029365C299A09286189; domain=.bing.com; expires=Thu, 21-Dec-2023 22:22:12 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 38B00864EB074E09B43592D0519A6B55 Ref B: OSL30EDGE0217 Ref C: 2022-11-26T22:22:12Z
date: Sat, 26 Nov 2022 22:22:12 GMT
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash a22bc94a1116f343d9c3377cfd4fc5b2
b0bad6a620abd0c33a96c32721ad87849da9f9e6
294cd4b44650b17a93cbe9a4de887ad1da8ab8c11105707cccff17812a8d5890
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 22:22:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash a22bc94a1116f343d9c3377cfd4fc5b2
b0bad6a620abd0c33a96c32721ad87849da9f9e6
294cd4b44650b17a93cbe9a4de887ad1da8ab8c11105707cccff17812a8d5890
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 22:22:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
googleads.g.doubleclick.net/pagead/viewthroughconversion/732817806/?random=1669501331749&cv=11&fst=1669501331749&bg=ffffff&guid=ON&async=1>m=2oab90&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fengage.us.greenpeace.org%2Fonlineactions%2Fun8-YeF_R06GSq7I0_xKNg2%3Femci%3D2c751078-d190-ec11-a507-281878b83d8a%26emdi%3D34751078-d190-ec11-a507-281878b83d8a%26fn%3DKatie%26ln%3DBarden%26em%3Dkatie.barden%2540slurpmail.net%26pc%3D%26hp%3D5074447487%26mp%3D5074567475%26utm_source%3Dea%26utm_medium%3Demail%26utm_campaign%3Dpto_igc4%26sourceid%3D1013359%26ceid%3D2592146&tiba=Add%20Your%20Name%20to%20Support%20the%20Global%20Ocean%20Treaty!%20-%20Greenpeace&auid=2109658517.1669501332&data=event%3Dgtag.config&rfmt=3&fmt=4
200 OK 1.1 kB URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/732817806/?random=1669501331749&cv=11&fst=1669501331749&bg=ffffff&guid=ON&async=1>m=2oab90&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fengage.us.greenpeace.org%2Fonlineactions%2Fun8-YeF_R06GSq7I0_xKNg2%3Femci%3D2c751078-d190-ec11-a507-281878b83d8a%26emdi%3D34751078-d190-ec11-a507-281878b83d8a%26fn%3DKatie%26ln%3DBarden%26em%3Dkatie.barden%2540slurpmail.net%26pc%3D%26hp%3D5074447487%26mp%3D5074567475%26utm_source%3Dea%26utm_medium%3Demail%26utm_campaign%3Dpto_igc4%26sourceid%3D1013359%26ceid%3D2592146&tiba=Add%20Your%20Name%20to%20Support%20the%20Global%20Ocean%20Treaty!%20-%20Greenpeace&auid=2109658517.1669501332&data=event%3Dgtag.config&rfmt=3&fmt=4
IP
File type ASCII text, with very long lines (2665), with no line terminators
Hash aa6abc0fc9ab2b160965d5fe1bc2fe9b
6875c17589fa172f0d3b5a73ec11b6bcfef0627f
b50ea5a26180f61b1efad764e78e25fee0521f0d6b1bf0012806c419dc7ad640
GET /pagead/viewthroughconversion/732817806/?random=1669501331749&cv=11&fst=1669501331749&bg=ffffff&guid=ON&async=1>m=2oab90&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fengage.us.greenpeace.org%2Fonlineactions%2Fun8-YeF_R06GSq7I0_xKNg2%3Femci%3D2c751078-d190-ec11-a507-281878b83d8a%26emdi%3D34751078-d190-ec11-a507-281878b83d8a%26fn%3DKatie%26ln%3DBarden%26em%3Dkatie.barden%2540slurpmail.net%26pc%3D%26hp%3D5074447487%26mp%3D5074567475%26utm_source%3Dea%26utm_medium%3Demail%26utm_campaign%3Dpto_igc4%26sourceid%3D1013359%26ceid%3D2592146&tiba=Add%20Your%20Name%20to%20Support%20the%20Global%20Ocean%20Treaty!%20-%20Greenpeace&auid=2109658517.1669501332&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engage.us.greenpeace.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sat, 26 Nov 2022 22:22:12 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 1117
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Sat, 26-Nov-2022 22:37:12 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google-analytics.com/gtm/optimize.js?id=GTM-MDG2TG9
200 OK 44 kB URL HTTP/2 www.google-analytics.com/gtm/optimize.js?id=GTM-MDG2TG9
IP
File type ASCII text, with very long lines (1921)
Hash 04a8f1c4d0932bd82563bcf5d5fc6c64
a6425e2eae2c25bd04a3a173fc5ad71624c17b3c
71ae4a360fcee0df87af65dfd5521ecb6d1c0c0c971d312853aea4e116e32259
GET /gtm/optimize.js?id=GTM-MDG2TG9 HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engage.us.greenpeace.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sat, 26 Nov 2022 22:22:12 GMT
expires: Sat, 26 Nov 2022 22:22:12 GMT
cache-control: private, max-age=900
last-modified: Sat, 26 Nov 2022 21:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 44013
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash a22bc94a1116f343d9c3377cfd4fc5b2
b0bad6a620abd0c33a96c32721ad87849da9f9e6
294cd4b44650b17a93cbe9a4de887ad1da8ab8c11105707cccff17812a8d5890
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 22:22:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
nvlupin.blob.core.windows.net/images/van/TSM/TSMGP/1/55678/images/favicon.png
200 OK 12 kB URL HTTP/1.1 nvlupin.blob.core.windows.net/images/van/TSM/TSMGP/1/55678/images/favicon.png
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type PNG image data, 121 x 123, 8-bit/color RGB, non-interlaced\012- data
Hash e687508e045887b5f42b5f8215a1edaf
4acc05048e7b63b9e3cebc7955f9c2ba5b68ecbb
cf4b5b9c3a64cf081413b8e6d125c6af1db40067007c9baa6290fe08a5c44cfe
GET /images/van/TSM/TSMGP/1/55678/images/favicon.png HTTP/1.1
Host: nvlupin.blob.core.windows.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engage.us.greenpeace.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Length: 11480
Content-Type: image/png
Last-Modified: Thu, 30 Apr 2020 20:12:41 GMT
ETag: 0x8D7ED42D677B71B
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 50c6df4a-601e-006c-64e5-01acc6000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
Access-Control-Allow-Origin: *
Date: Sat, 26 Nov 2022 22:22:11 GMT
www.google.com/pagead/1p-conversion/720319789/?random=1669501331545&cv=11&fst=1669501331545&bg=ffffff&guid=ON&async=1>m=2wgb90&u_w=1280&u_h=1024&label=IuOuCJPWg7QBEK3qvNcC&hn=www.google.com&frm=0&url=https%3A%2F%2Fengage.us.greenpeace.org%2Fonlineactions%2Fun8-YeF_R06GSq7I0_xKNg2%3Femci%3D2c751078-d190-ec11-a507-281878b83d8a%26emdi%3D34751078-d190-ec11-a507-281878b83d8a%26fn%3DKatie%26ln%3DBarden%26em%3Dkatie.barden%2540slurpmail.net%26pc%3D%26hp%3D5074447487%26mp%3D5074567475%26utm_source%3Dea%26utm_medium%3Demail%26utm_campaign%3Dpto_igc4%26sourceid%3D1013359%26ceid%3D2592146&tiba=Add%20Your%20Name%20to%20Support%20the%20Global%20Ocean%20Treaty!%20-%20Greenpeace&value=0&bttype=purchase&auid=2109658517.1669501332&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4
302 Found 63 B URL HTTP/2 www.google.com/pagead/1p-conversion/720319789/?random=1669501331545&cv=11&fst=1669501331545&bg=ffffff&guid=ON&async=1>m=2wgb90&u_w=1280&u_h=1024&label=IuOuCJPWg7QBEK3qvNcC&hn=www.google.com&frm=0&url=https%3A%2F%2Fengage.us.greenpeace.org%2Fonlineactions%2Fun8-YeF_R06GSq7I0_xKNg2%3Femci%3D2c751078-d190-ec11-a507-281878b83d8a%26emdi%3D34751078-d190-ec11-a507-281878b83d8a%26fn%3DKatie%26ln%3DBarden%26em%3Dkatie.barden%2540slurpmail.net%26pc%3D%26hp%3D5074447487%26mp%3D5074567475%26utm_source%3Dea%26utm_medium%3Demail%26utm_campaign%3Dpto_igc4%26sourceid%3D1013359%26ceid%3D2592146&tiba=Add%20Your%20Name%20to%20Support%20the%20Global%20Ocean%20Treaty!%20-%20Greenpeace&value=0&bttype=purchase&auid=2109658517.1669501332&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4
IP
File type ASCII text, with no line terminators
Hash 0339f8f57d1bf75003db591e28957e45
ae2286e497c9f76a02cb40c40a674b73bd293b76
609cd8e12464fe137cfaa9f1ab6637150d44e105559c901b6df50303fd05aa26
GET /pagead/1p-conversion/720319789/?random=1669501331545&cv=11&fst=1669501331545&bg=ffffff&guid=ON&async=1>m=2wgb90&u_w=1280&u_h=1024&label=IuOuCJPWg7QBEK3qvNcC&hn=www.google.com&frm=0&url=https%3A%2F%2Fengage.us.greenpeace.org%2Fonlineactions%2Fun8-YeF_R06GSq7I0_xKNg2%3Femci%3D2c751078-d190-ec11-a507-281878b83d8a%26emdi%3D34751078-d190-ec11-a507-281878b83d8a%26fn%3DKatie%26ln%3DBarden%26em%3Dkatie.barden%2540slurpmail.net%26pc%3D%26hp%3D5074447487%26mp%3D5074567475%26utm_source%3Dea%26utm_medium%3Demail%26utm_campaign%3Dpto_igc4%26sourceid%3D1013359%26ceid%3D2592146&tiba=Add%20Your%20Name%20to%20Support%20the%20Global%20Ocean%20Treaty!%20-%20Greenpeace&value=0&bttype=purchase&auid=2109658517.1669501332&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engage.us.greenpeace.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sat, 26 Nov 2022 22:22:12 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
location: https://www.google.no/pagead/1p-conversion/720319789/?random=1669501331545&cv=11&fst=1669501331545&bg=ffffff&guid=ON&async=1>m=2wgb90&u_w=1280&u_h=1024&label=IuOuCJPWg7QBEK3qvNcC&hn=www.google.com&frm=0&url=https%3A%2F%2Fengage.us.greenpeace.org%2Fonlineactions%2Fun8-YeF_R06GSq7I0_xKNg2%3Femci%3D2c751078-d190-ec11-a507-281878b83d8a%26emdi%3D34751078-d190-ec11-a507-281878b83d8a%26fn%3DKatie%26ln%3DBarden%26em%3Dkatie.barden%2540slurpmail.net%26pc%3D%26hp%3D5074447487%26mp%3D5074567475%26utm_source%3Dea%26utm_medium%3Demail%26utm_campaign%3Dpto_igc4%26sourceid%3D1013359%26ceid%3D2592146&tiba=Add%20Your%20Name%20to%20Support%20the%20Global%20Ocean%20Treaty!%20-%20Greenpeace&value=0&bttype=purchase&auid=2109658517.1669501332&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4&ipr=y&prhg=0
content-type: text/javascript; charset=UTF-8
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 63
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/viewthroughconversion/720319789/?random=1669501331545&cv=11&fst=1669501331545&fmt=3&bg=ffffff&guid=ON&async=1>m=2wgb90&u_w=1280&u_h=1024&label=IuOuCJPWg7QBEK3qvNcC&hn=www.google.com&frm=0&url=https%3A%2F%2Fengage.us.greenpeace.org%2Fonlineactions%2Fun8-YeF_R06GSq7I0_xKNg2%3Femci%3D2c751078-d190-ec11-a507-281878b83d8a%26emdi%3D34751078-d190-ec11-a507-281878b83d8a%26fn%3DKatie%26ln%3DBarden%26em%3Dkatie.barden%2540slurpmail.net%26pc%3D%26hp%3D5074447487%26mp%3D5074567475%26utm_source%3Dea%26utm_medium%3Demail%26utm_campaign%3Dpto_igc4%26sourceid%3D1013359%26ceid%3D2592146&tiba=Add%20Your%20Name%20to%20Support%20the%20Global%20Ocean%20Treaty!%20-%20Greenpeace&value=0&bttype=purchase&auid=2109658517.1669501332&gcp=1&ct_cookie_present=1
200 OK 42 B URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/720319789/?random=1669501331545&cv=11&fst=1669501331545&fmt=3&bg=ffffff&guid=ON&async=1>m=2wgb90&u_w=1280&u_h=1024&label=IuOuCJPWg7QBEK3qvNcC&hn=www.google.com&frm=0&url=https%3A%2F%2Fengage.us.greenpeace.org%2Fonlineactions%2Fun8-YeF_R06GSq7I0_xKNg2%3Femci%3D2c751078-d190-ec11-a507-281878b83d8a%26emdi%3D34751078-d190-ec11-a507-281878b83d8a%26fn%3DKatie%26ln%3DBarden%26em%3Dkatie.barden%2540slurpmail.net%26pc%3D%26hp%3D5074447487%26mp%3D5074567475%26utm_source%3Dea%26utm_medium%3Demail%26utm_campaign%3Dpto_igc4%26sourceid%3D1013359%26ceid%3D2592146&tiba=Add%20Your%20Name%20to%20Support%20the%20Global%20Ocean%20Treaty!%20-%20Greenpeace&value=0&bttype=purchase&auid=2109658517.1669501332&gcp=1&ct_cookie_present=1
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/viewthroughconversion/720319789/?random=1669501331545&cv=11&fst=1669501331545&fmt=3&bg=ffffff&guid=ON&async=1>m=2wgb90&u_w=1280&u_h=1024&label=IuOuCJPWg7QBEK3qvNcC&hn=www.google.com&frm=0&url=https%3A%2F%2Fengage.us.greenpeace.org%2Fonlineactions%2Fun8-YeF_R06GSq7I0_xKNg2%3Femci%3D2c751078-d190-ec11-a507-281878b83d8a%26emdi%3D34751078-d190-ec11-a507-281878b83d8a%26fn%3DKatie%26ln%3DBarden%26em%3Dkatie.barden%2540slurpmail.net%26pc%3D%26hp%3D5074447487%26mp%3D5074567475%26utm_source%3Dea%26utm_medium%3Demail%26utm_campaign%3Dpto_igc4%26sourceid%3D1013359%26ceid%3D2592146&tiba=Add%20Your%20Name%20to%20Support%20the%20Global%20Ocean%20Treaty!%20-%20Greenpeace&value=0&bttype=purchase&auid=2109658517.1669501332&gcp=1&ct_cookie_present=1 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engage.us.greenpeace.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sat, 26 Nov 2022 22:22:12 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Sat, 26-Nov-2022 22:37:12 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/viewthroughconversion/10887043785/?random=1669501331810&cv=11&fst=1669501331810&bg=ffffff&guid=ON&async=1>m=2oab90&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fengage.us.greenpeace.org%2Fonlineactions%2Fun8-YeF_R06GSq7I0_xKNg2%3Femci%3D2c751078-d190-ec11-a507-281878b83d8a%26emdi%3D34751078-d190-ec11-a507-281878b83d8a%26fn%3DKatie%26ln%3DBarden%26em%3Dkatie.barden%2540slurpmail.net%26pc%3D%26hp%3D5074447487%26mp%3D5074567475%26utm_source%3Dea%26utm_medium%3Demail%26utm_campaign%3Dpto_igc4%26sourceid%3D1013359%26ceid%3D2592146&tiba=Add%20Your%20Name%20to%20Support%20the%20Global%20Ocean%20Treaty!%20-%20Greenpeace&auid=2109658517.1669501332&data=event%3Dgtag.config&rfmt=3&fmt=4
200 OK 1.1 kB URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/10887043785/?random=1669501331810&cv=11&fst=1669501331810&bg=ffffff&guid=ON&async=1>m=2oab90&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fengage.us.greenpeace.org%2Fonlineactions%2Fun8-YeF_R06GSq7I0_xKNg2%3Femci%3D2c751078-d190-ec11-a507-281878b83d8a%26emdi%3D34751078-d190-ec11-a507-281878b83d8a%26fn%3DKatie%26ln%3DBarden%26em%3Dkatie.barden%2540slurpmail.net%26pc%3D%26hp%3D5074447487%26mp%3D5074567475%26utm_source%3Dea%26utm_medium%3Demail%26utm_campaign%3Dpto_igc4%26sourceid%3D1013359%26ceid%3D2592146&tiba=Add%20Your%20Name%20to%20Support%20the%20Global%20Ocean%20Treaty!%20-%20Greenpeace&auid=2109658517.1669501332&data=event%3Dgtag.config&rfmt=3&fmt=4
IP
File type ASCII text, with very long lines (2669), with no line terminators
Hash 561a8b64a75642271a09c3298879e8b7
a63288d514b46ad42eb4d38425e007c604fffdc9
5222ad7754195d68768e22953431481fe76bb66afa4575763d2eed52a9804576
GET /pagead/viewthroughconversion/10887043785/?random=1669501331810&cv=11&fst=1669501331810&bg=ffffff&guid=ON&async=1>m=2oab90&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fengage.us.greenpeace.org%2Fonlineactions%2Fun8-YeF_R06GSq7I0_xKNg2%3Femci%3D2c751078-d190-ec11-a507-281878b83d8a%26emdi%3D34751078-d190-ec11-a507-281878b83d8a%26fn%3DKatie%26ln%3DBarden%26em%3Dkatie.barden%2540slurpmail.net%26pc%3D%26hp%3D5074447487%26mp%3D5074567475%26utm_source%3Dea%26utm_medium%3Demail%26utm_campaign%3Dpto_igc4%26sourceid%3D1013359%26ceid%3D2592146&tiba=Add%20Your%20Name%20to%20Support%20the%20Global%20Ocean%20Treaty!%20-%20Greenpeace&auid=2109658517.1669501332&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engage.us.greenpeace.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sat, 26 Nov 2022 22:22:12 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 1116
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Sat, 26-Nov-2022 22:37:12 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
engage.us.greenpeace.org/onlineactions/un8-YeF_R06GSq7I0_xKNg2?emci=2c751078-d190-ec11-a507-281878b83d8a&emdi=34751078-d190-ec11-a507-281878b83d8a&fn=Katie&ln=Barden&em=katie.barden%40slurpmail.net&pc=&hp=5074447487&mp=5074567475&utm_source=ea&utm_medium=email&utm_campaign=pto_igc4&sourceid=1013359&ceid=2592146
200 OK 19 kB URL HTTP/2 engage.us.greenpeace.org/onlineactions/un8-YeF_R06GSq7I0_xKNg2?emci=2c751078-d190-ec11-a507-281878b83d8a&emdi=34751078-d190-ec11-a507-281878b83d8a&fn=Katie&ln=Barden&em=katie.barden%40slurpmail.net&pc=&hp=5074447487&mp=5074567475&utm_source=ea&utm_medium=email&utm_campaign=pto_igc4&sourceid=1013359&ceid=2592146
IP
Hash a10082fc47f50505fec3945ac5c62728
930850596c535624e4fca3acc4f82e618ec63bf3
79846c77449726867dccdd8fd20a394308bcbd7e090ac4e5b64afd29a4b11048
GET /onlineactions/un8-YeF_R06GSq7I0_xKNg2?emci=2c751078-d190-ec11-a507-281878b83d8a&emdi=34751078-d190-ec11-a507-281878b83d8a&fn=Katie&ln=Barden&em=katie.barden%40slurpmail.net&pc=&hp=5074447487&mp=5074567475&utm_source=ea&utm_medium=email&utm_campaign=pto_igc4&sourceid=1013359&ceid=2592146 HTTP/1.1
Host: engage.us.greenpeace.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
content-type: text/html; charset=utf-8
date: Sat, 26 Nov 2022 22:22:10 GMT
access-control-expose-headers: Request-Context
cache-control: public, max-age=10
content-encoding: gzip
vary: Accept-Encoding
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
request-context: appId=cid-v1:ccd92c0b-19c7-485c-b607-cbfe2344efa3
content-security-policy: default-src * 'unsafe-eval' 'unsafe-inline' data: blob:
set-cookie: visid_incap_1935261=hEOrvSY2QoCWWLLJvH15RpKRgmMAAAAAQUIPAAAAAADUP+8omL9imPWBiRzp23iX; expires=Sun, 26 Nov 2023 22:16:28 GMT; HttpOnly; path=/; Domain=.us.greenpeace.org
nlbi_1935261=b473PvLlD2K7uFx+du09AQAAAACaqIIAcrFda4JuN/pAAY1/; path=/; Domain=.us.greenpeace.org
incap_ses_722_1935261=yVTHamt7nwX0Fb7nFxAFCpORgmMAAAAAhl1iuq6wNFUGyiIUqmIFXg==; path=/; Domain=.us.greenpeace.org
TiPMix=86.30083827597895; path=/; HttpOnly; Domain=engage.us.greenpeace.org; Max-Age=3600; Secure; SameSite=None; SameSite=None; Secure
x-ms-routing-name=self; path=/; HttpOnly; Domain=engage.us.greenpeace.org; Max-Age=3600; Secure; SameSite=None; SameSite=None; Secure
; Secure; SameSite=None; SameSite=None; Secure
x-cdn: Imperva
x-iinfo: 1004-27886482-27886488 NNNN CT(98 203 0) RT(1669501330308 373) q(0 0 3 0) r(5 5) U18
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash c36cdc1c171cf7d87d4b10a348523625
a7f02b6e39eaeb2d2816cbd53aa9901b6848d67d
fc6a91474bee54da0d1c3a5a5903c31231e9b599f9c0c7ca6e18eec81e45f709
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6270
Cache-Control: max-age=117650
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 22:22:12 GMT
Etag: "6381a1a8-1d7"
Expires: Mon, 28 Nov 2022 07:03:02 GMT
Last-Modified: Sat, 26 Nov 2022 05:18:32 GMT
Server: ECS (ska/F70A)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash a22bc94a1116f343d9c3377cfd4fc5b2
b0bad6a620abd0c33a96c32721ad87849da9f9e6
294cd4b44650b17a93cbe9a4de887ad1da8ab8c11105707cccff17812a8d5890
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 22:22:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e922b25acaba2d7f8921ebe973a4b261
5dd4c237c84a652cbcf3db163529f3788ceafc46
a7856c7777aa01b671ddae097494f2b031cbbddc7b244fe8714a8c02b85d8589
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 22:22:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
pixel.sitescout.com/dmp/asyncPixelSync
302 Found 0 B URL HTTP/2 pixel.sitescout.com/dmp/asyncPixelSync
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /dmp/asyncPixelSync HTTP/1.1
Host: pixel.sitescout.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engage.us.greenpeace.org/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
set-cookie: ssi=d61283ae-771c-4ef1-b6d3-0278ffdde6d5#1669501332509; Domain=.sitescout.com; Expires=Sun, 26-Nov-2023 22:22:12 GMT; Path=/; Secure; SameSite=None
location: https://pixel.sitescout.com/dmp/asyncPixelSync?cookieQ=1
content-length: 0
date: Sat, 26 Nov 2022 22:22:11 GMT
server: AC1.1
X-Firefox-Spdy: h2
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-84485273-1&cid=846543259.1669501332&jid=712436187&gjid=1883252398&_gid=125051171.1669501332&_u=aCDAgEABQAAAAEAAI~&z=961063202
200 OK 4 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-84485273-1&cid=846543259.1669501332&jid=712436187&gjid=1883252398&_gid=125051171.1669501332&_u=aCDAgEABQAAAAEAAI~&z=961063202
IP
File type ASCII text, with no line terminators
Hash 48c0473b7821185d937e685216e2168b
3743e47f8a429a5e87b86cb582d78940733d9d2e
570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-84485273-1&cid=846543259.1669501332&jid=712436187&gjid=1883252398&_gid=125051171.1669501332&_u=aCDAgEABQAAAAEAAI~&z=961063202 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://engage.us.greenpeace.org
Connection: keep-alive
Referer: https://engage.us.greenpeace.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://engage.us.greenpeace.org
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Sat, 26 Nov 2022 22:22:12 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
pixel.sitescout.com/dmp/asyncPixelSync?cookieQ=1
204 No Content 0 B URL HTTP/2 pixel.sitescout.com/dmp/asyncPixelSync?cookieQ=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /dmp/asyncPixelSync?cookieQ=1 HTTP/1.1
Host: pixel.sitescout.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://engage.us.greenpeace.org/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
cache-control: max-age=0,no-cache,no-store
pragma: no-cache
expires: Tue, 11 Oct 1977 12:34:56 GMT
p3p: CP="NON DEVa PSAa PSDa OUR NOR NAV",policyref="/w3c/p3p.xml"
date: Sat, 26 Nov 2022 22:22:11 GMT
server: AC1.1
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 50cab60ad9e3aa502f24401bd24ca0b6
2b84e0d4d5aa3763645a13f2d1eb628678526b3e
dbc55232afc54846879c9275a2ce3ff7ddaefbdc11f2d33f3593585d851f5242
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=108396
Date: Sat, 26 Nov 2022 22:22:12 GMT
Etag: "6381922f-1d7"
Expires: Mon, 28 Nov 2022 04:28:48 GMT
Last-Modified: Sat, 26 Nov 2022 04:12:31 GMT
Server: ECS (bsa/EB16)
X-Cache: Miss from cloudfront
Via: 1.1 e49f22f18c16784c0f42291e768d1daa.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: QvCuaNNh733XSf8EzHjb1S9OcV-DGxypdX-Ot2-chipZZ5rX3BwaVw==
Age: 977
region1.google-analytics.com/g/collect?v=2&tid=G-ENX841EBF4>m=2oeb90&_p=1332152792&cid=846543259.1669501332&ul=en-us&sr=1280x1024&_s=1&sid=1669501331&sct=1&seg=0&dl=https%3A%2F%2Fengage.us.greenpeace.org%2Fonlineactions%2Fun8-YeF_R06GSq7I0_xKNg2%3Femci%3D2c751078-d190-ec11-a507-281878b83d8a%26emdi%3D34751078-d190-ec11-a507-281878b83d8a%26fn%3DKatie%26ln%3DBarden%26em%3Dkatie.barden%2540slurpmail.net%26pc%3D%26hp%3D5074447487%26mp%3D5074567475%26utm_source%3Dea%26utm_medium%3Demail%26utm_campaign%3Dpto_igc4%26sourceid%3D1013359%26ceid%3D2592146&dt=Add%20Your%20Name%20to%20Support%20the%20Global%20Ocean%20Treaty!%20-%20Greenpeace&en=page_view&_fv=1&_nsi=1&_ss=1
204 No Content 0 B URL HTTP/2 region1.google-analytics.com/g/collect?v=2&tid=G-ENX841EBF4>m=2oeb90&_p=1332152792&cid=846543259.1669501332&ul=en-us&sr=1280x1024&_s=1&sid=1669501331&sct=1&seg=0&dl=https%3A%2F%2Fengage.us.greenpeace.org%2Fonlineactions%2Fun8-YeF_R06GSq7I0_xKNg2%3Femci%3D2c751078-d190-ec11-a507-281878b83d8a%26emdi%3D34751078-d190-ec11-a507-281878b83d8a%26fn%3DKatie%26ln%3DBarden%26em%3Dkatie.barden%2540slurpmail.net%26pc%3D%26hp%3D5074447487%26mp%3D5074567475%26utm_source%3Dea%26utm_medium%3Demail%26utm_campaign%3Dpto_igc4%26sourceid%3D1013359%26ceid%3D2592146&dt=Add%20Your%20Name%20to%20Support%20the%20Global%20Ocean%20Treaty!%20-%20Greenpeace&en=page_view&_fv=1&_nsi=1&_ss=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-ENX841EBF4>m=2oeb90&_p=1332152792&cid=846543259.1669501332&ul=en-us&sr=1280x1024&_s=1&sid=1669501331&sct=1&seg=0&dl=https%3A%2F%2Fengage.us.greenpeace.org%2Fonlineactions%2Fun8-YeF_R06GSq7I0_xKNg2%3Femci%3D2c751078-d190-ec11-a507-281878b83d8a%26emdi%3D34751078-d190-ec11-a507-281878b83d8a%26fn%3DKatie%26ln%3DBarden%26em%3Dkatie.barden%2540slurpmail.net%26pc%3D%26hp%3D5074447487%26mp%3D5074567475%26utm_source%3Dea%26utm_medium%3Demail%26utm_campaign%3Dpto_igc4%26sourceid%3D1013359%26ceid%3D2592146&dt=Add%20Your%20Name%20to%20Support%20the%20Global%20Ocean%20Treaty!%20-%20Greenpeace&en=page_view&_fv=1&_nsi=1&_ss=1 HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://engage.us.greenpeace.org
Connection: keep-alive
Referer: https://engage.us.greenpeace.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://engage.us.greenpeace.org
date: Sat, 26 Nov 2022 22:22:12 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
tags.srv.stackadapt.com/events.js
200 OK 5.4 kB URL HTTP/1.1 tags.srv.stackadapt.com/events.js
IP
File type ASCII text, with very long lines (16677)
Hash a97033a150cc278317693cc3bee83882
90c612dca5b89a01491af9f7b5ebdd010be6c456
977416918343413b13367304c16348b9b42c275b841f965361a6308515f44668
GET /events.js HTTP/1.1
Host: tags.srv.stackadapt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engage.us.greenpeace.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Cache-Control: max-age=5
Content-Encoding: gzip
Content-Type: text/javascript
Date: Sat, 26 Nov 2022 22:22:12 GMT
Set-Cookie: sa-user-id=s%3A0-c82feaf0-b2cd-46d3-7303-ca663f292b3d.mAY1BaVzGmB79PORnfWg1bF9UzqxDGq2yazW5aJbGnc; Max-Age=31536000; Secure; SameSite=None
sa-user-id-v2=s%3AyC_q8LLNRtNzA8pmPykrPVtaKpo.Y3uo32tIobfcSKk0jRRzQ411LA73ZLvpG2JeSP3ZzVg; Domain=srv.stackadapt.com; Max-Age=31536000; Secure; SameSite=None
Content-Length: 5381
Connection: keep-alive
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash 09cc378e92259f5a94d89ed032445183
d0067dcf4bb5b4b3dd104d2f1bfab40094f9d5d8
31006fa4b38a2ab891c00526c1921a5aa1e4e9b9723b33368501c9419e552562
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Sat, 26 Nov 2022 22:22:13 GMT
Content-Type: application/ocsp-response
Content-Length: 1777
Connection: keep-alive
X-Sucuri-ID: 19041
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Sat, 26 Nov 2022 20:06:34 GMT
Expires: Sun, 27 Nov 2022 20:06:34 GMT
ETag: "d0067dcf4bb5b4b3dd104d2f1bfab40094f9d5d8"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
tags.srv.stackadapt.com/sa.css
200 OK 27 B URL HTTP/1.1 tags.srv.stackadapt.com/sa.css
IP
Hash 83f5ba33314db5f218488a5a51da1455
87a21689afa235c4c65437334085be4bf5cca170
3f100e5e6ff270dadb43b44878f0118a2389dee0d844acc102b5179d70a824dc
GET /sa.css HTTP/1.1
Host: tags.srv.stackadapt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engage.us.greenpeace.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Cache-Control: only-if-cached, no-transform, private, max-age=7776000
Content-Type: text/css
Date: Sat, 26 Nov 2022 22:22:12 GMT
Content-Length: 27
Connection: keep-alive
profile.ngpvan.com/identity?callback=_jqjsp
200 OK 192 B URL HTTP/2 profile.ngpvan.com/identity?callback=_jqjsp
IP
File type ASCII text, with no line terminators
Hash c0ed5f6ad790ceb2b82d3bd624d47427
6dec27f90e6a8e3fc7e1056143501842c543a6d7
1697cc79b8304ac543e26a78316f5b76d0b06eb9370ea580b50f0cefb92e66d7
GET /identity?callback=_jqjsp HTTP/1.1
Host: profile.ngpvan.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engage.us.greenpeace.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
date: Sat, 26 Nov 2022 22:22:12 GMT
server: Microsoft-IIS/10.0
content-encoding: gzip
etag: W/"48-++NvJ1Cx7TemrB51mmJF+IdSDEA"
vary: Accept-Encoding
content-length: 192
request-context: appId=cid-v1:ccd92c0b-19c7-485c-b607-cbfe2344efa3
x-powered-by: Express, ASP.NET
p3p: CP="NOI ADM DEV PSAi OUR OTRo STP IND COM NAV DEM"
x-content-type-options: nosniff
set-cookie: visid_incap_2233503=Qos0NEZQSCu//bIlWC4IpVWRgmMAAAAAQUIPAAAAAADHiwDjNr2KeQEopoVFfYAz; expires=Sun, 26 Nov 2023 22:16:28 GMT; HttpOnly; path=/; Domain=.ngpvan.com
nlbi_2233503=/gTAVUJhCm/qb4MwvIV21QAAAABqBGeVmR0tnB5exz1mbRlZ; path=/; Domain=.ngpvan.com
incap_ses_722_2233503=p6KNQpEpLy+c/73nFxAFCpSRgmMAAAAAwIHSClsFct9u6TYbnu9HSQ==; path=/; Domain=.ngpvan.com
TiPMix=26.566004625393834; path=/; HttpOnly; Domain=profile.ngpvan.com; Max-Age=3600; Secure; SameSite=None; SameSite=None; Secure
x-ms-routing-name=self; path=/; HttpOnly; Domain=profile.ngpvan.com; Max-Age=3600; Secure; SameSite=None; SameSite=None; Secure
ngpvanuser=SpHoPjH0MZqudSy3MM4Of3dc; Max-Age=315532800; Path=/; Expires=Thu, 25 Nov 2032 22:22:12 GMT; Secure; SameSite=None; SameSite=None; Secure
x-cdn: Imperva
x-iinfo: 11-36841804-36841807 NNNN CT(99 205 0) RT(1669501332245 57) q(0 0 3 0) r(4 4) U5
X-Firefox-Spdy: h2
advocator.ngpvan.com/https%3a%2f%2fsecure.everyaction.com%2fv1%2fForms%2fun8-YeF_R06GSq7I0_xKNg2/ngpForm?emci=2c751078-d190-ec11-a507-281878b83d8a&emdi=34751078-d190-ec11-a507-281878b83d8a&fn=Katie&ln=Barden&em=katie.barden%40slurpmail.net&pc=&hp=5074447487&mp=5074567475&utm_source=ea&utm_medium=email&utm_campaign=pto_igc4&sourceid=1013359&ceid=2592146
200 OK 5.1 kB URL HTTP/1.1 advocator.ngpvan.com/https%3a%2f%2fsecure.everyaction.com%2fv1%2fForms%2fun8-YeF_R06GSq7I0_xKNg2/ngpForm?emci=2c751078-d190-ec11-a507-281878b83d8a&emdi=34751078-d190-ec11-a507-281878b83d8a&fn=Katie&ln=Barden&em=katie.barden%40slurpmail.net&pc=&hp=5074447487&mp=5074567475&utm_source=ea&utm_medium=email&utm_campaign=pto_igc4&sourceid=1013359&ceid=2592146
IP
File type JSON data\012- HTML document, Unicode text, UTF-8 text, with very long lines (16386), with no line terminators
Hash 5f0f301f69094fc6a41316375ce3f4f3
244a6e6d7091d021fecef968eb2959269e616e6a
7d032f91ad5984029ec1c34761d52cc9c3bad852c8a8e98bc1805ef5666cdfa4
GET /https%3a%2f%2fsecure.everyaction.com%2fv1%2fForms%2fun8-YeF_R06GSq7I0_xKNg2/ngpForm?emci=2c751078-d190-ec11-a507-281878b83d8a&emdi=34751078-d190-ec11-a507-281878b83d8a&fn=Katie&ln=Barden&em=katie.barden%40slurpmail.net&pc=&hp=5074447487&mp=5074567475&utm_source=ea&utm_medium=email&utm_campaign=pto_igc4&sourceid=1013359&ceid=2592146 HTTP/1.1
Host: advocator.ngpvan.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://engage.us.greenpeace.org
Connection: keep-alive
Referer: https://engage.us.greenpeace.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Cowboy
Connection: keep-alive
Request-Context: appId=cid-v1:ccd92c0b-19c7-485c-b607-cbfe2344efa3
X-Powered-By: Express
Access-Control-Allow-Origin: https://engage.us.greenpeace.org
Vary: Origin
Access-Control-Allow-Credentials: true
Strict-Transport-Security: max-age=31536000; includeSubDomains
Content-Type: application/json; charset=utf-8
Etag: W/"4009-BNcRjb7MKrLBJFfSRmn72aXF/WY"
Date: Sat, 26 Nov 2022 22:22:12 GMT
Via: 1.1 vegur
Set-Cookie: visid_incap_1803973=pklPaTonQ/ebgzdknWwjw5SRgmMAAAAAQUIPAAAAAACPbwKS47PjuIDAA29iA0iL; expires=Sun, 26 Nov 2023 22:16:33 GMT; HttpOnly; path=/; Domain=.ngpvan.com
nlbi_1803973=1KVIItBMDkiqKodH5e3YtQAAAACzBjqzio8+3Ad2Qx3THlLS; path=/; Domain=.ngpvan.com
incap_ses_722_1803973=cNAld3dSomWpFr7nFxAFCpSRgmMAAAAAHQgA27eg5UkVeJTrH8a8zw==; path=/; Domain=.ngpvan.com
X-CDN: Imperva
Content-Encoding: gzip
Transfer-Encoding: chunked
X-Iinfo: 2-10009792-10009794 NNYN CT(110 113 0) RT(1669501332273 57) q(0 0 2 0) r(2 4) U4
static.everyaction.com/ea-actiontag/assets/styles/intlTelInput.min.css
200 OK 20 kB URL HTTP/2 static.everyaction.com/ea-actiontag/assets/styles/intlTelInput.min.css
IP
File type ASCII text, with very long lines (19754)
Hash 7e7462900c78bbf73c9dfde6c0b617fc
3114738cf2bd0244badb59d54a7ed7b472a254c9
80174969764673851b6aa49f7f2db4e556666c28a1a23466ab984b1743eb0aa7
GET /ea-actiontag/assets/styles/intlTelInput.min.css HTTP/1.1
Host: static.everyaction.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engage.us.greenpeace.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/css; charset=utf-8
content-length: 19755
date: Sat, 26 Nov 2022 19:27:32 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Wed, 06 Jul 2022 18:06:16 GMT
etag: "7e7462900c78bbf73c9dfde6c0b617fc"
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: _A99qaeQaSvJB5TEu_UIQBejGd9l4QIDYjfsTYqHz68jbOwpvqdn3A==
age: 10482
X-Firefox-Spdy: h2
static.everyaction.com/ea-actiontag/assets/js/intlTelInput.js
200 OK 21 kB URL HTTP/2 static.everyaction.com/ea-actiontag/assets/js/intlTelInput.js
IP
File type Unicode text, UTF-8 text, with very long lines (9887)
Hash 4e9eea3ebff6224045ec4e2eb462c4f7
bb6a2f226e3c646de1af3d61fecfb9abab1c8db9
7015ba2658db2c4c776ec2a1fcff92381c0d2cd14dc6e4d578f537342af8eff0
GET /ea-actiontag/assets/js/intlTelInput.js HTTP/1.1
Host: static.everyaction.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engage.us.greenpeace.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
content-length: 20855
date: Wed, 13 Jul 2022 18:08:44 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Wed, 06 Jul 2022 18:06:16 GMT
etag: "4e9eea3ebff6224045ec4e2eb462c4f7"
cache-control: max-age=31536000
content-encoding: gzip
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: EP5Uy8BjVHYIibkwssngruPlsEEpvC4yLXbmwLq9uh_JPA7WktnIKQ==
age: 11765609
X-Firefox-Spdy: h2
static.everyaction.com/ea-actiontag/assets/js/intl-tel.input.utils.js
200 OK 56 kB URL HTTP/2 static.everyaction.com/ea-actiontag/assets/js/intl-tel.input.utils.js
IP
File type ASCII text, with very long lines (1435)
Hash 4b9bf850ee4aa76202eb0e6f5948bfa8
5a4930bd7a7c1b958bdd56c6d0ca5a5648f3ccdd
5d24a55eb43432999298a8056fb6e7c1952728ecdbb4a75b325dbb16bc7eca20
GET /ea-actiontag/assets/js/intl-tel.input.utils.js HTTP/1.1
Host: static.everyaction.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engage.us.greenpeace.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
content-length: 56004
date: Fri, 22 Apr 2022 00:31:20 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Tue, 12 Apr 2022 14:33:00 GMT
etag: "4b9bf850ee4aa76202eb0e6f5948bfa8"
cache-control: max-age=31536000
content-encoding: gzip
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: uND46-UwKHOajls9tknpUb_XFtDTTIDN-nbdeAKcxeyNs0P-k93utA==
age: 18913854
X-Firefox-Spdy: h2
profile.ngpvan.com/v2/data/SpHoPjH0MZqudSy3MM4Of3dc/nvtag
200 OK 123 B URL HTTP/2 profile.ngpvan.com/v2/data/SpHoPjH0MZqudSy3MM4Of3dc/nvtag
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 704ffddba77692d66286bd1b34132b02
de7c51a12e5513f458806bac51e7d4901d36ccef
2307a854b6915f18c78cb43897e7116e9c0438765b95ce537bf7c379fc966ad1
GET /v2/data/SpHoPjH0MZqudSy3MM4Of3dc/nvtag HTTP/1.1
Host: profile.ngpvan.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://engage.us.greenpeace.org
Connection: keep-alive
Referer: https://engage.us.greenpeace.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/json; charset=utf-8
date: Sat, 26 Nov 2022 22:22:13 GMT
server: Microsoft-IIS/10.0
access-control-allow-credentials: true
access-control-allow-origin: https://engage.us.greenpeace.org
content-encoding: gzip
etag: W/"2-vyGp6PvFo4RvsFtPoIWeCReyIC8"
vary: Origin,Accept-Encoding
content-length: 123
request-context: appId=cid-v1:ccd92c0b-19c7-485c-b607-cbfe2344efa3
x-powered-by: Express, ASP.NET
set-cookie: visid_incap_2233503=yhQZO34wTyGQY2gBcasqcpWRgmMAAAAAQUIPAAAAAAD00L2e1ES4x/SnB8ci+v5t; expires=Sun, 26 Nov 2023 22:16:28 GMT; HttpOnly; path=/; Domain=.ngpvan.com
nlbi_2233503=/5APQcQtvTu1RY4QvIV21QAAAABLOav7OQrkfxmtu2w3uXG7; path=/; Domain=.ngpvan.com
incap_ses_722_2233503=C3QCHSB07gnxFr7nFxAFCpWRgmMAAAAAWxLuw2FqPlh5acoilfovgw==; path=/; Domain=.ngpvan.com
TiPMix=68.40904574002909; path=/; HttpOnly; Domain=profile.ngpvan.com; Max-Age=3600; Secure; SameSite=None; SameSite=None; Secure
x-ms-routing-name=self; path=/; HttpOnly; Domain=profile.ngpvan.com; Max-Age=3600; Secure; SameSite=None; SameSite=None; Secure
x-cdn: Imperva
x-iinfo: 5-41715506-41715508 NNNN CT(99 205 0) RT(1669501332744 17) q(0 0 3 -1) r(4 4) U5
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash 9b36651e5e390eed7b81ac3bf8c7435e
6bbe4a73ea8e20ab1a7fee2cb2c5faa51164f014
f81455f818ae8ac5394d3bfa3a42a13edaa9f1ef54a909393035a2ee227e9165
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 26 Nov 2022 22:22:13 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Fri, 25 Nov 2022 11:26:24 GMT
Expires: Fri, 02 Dec 2022 11:26:23 GMT
Etag: "6bbe4a73ea8e20ab1a7fee2cb2c5faa51164f014"
Cache-Control: max-age=478449,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 770605854c590b55-OSL
static.everyaction.com/ea-actiontag/assets/images/flags.png
200 OK 20 kB URL HTTP/2 static.everyaction.com/ea-actiontag/assets/images/flags.png
IP
File type PNG image data, 5652 x 15, 8-bit colormap, non-interlaced\012- data
Hash 4e54a2ee652e9cddbd4ef6f8c46e5390
21343b573b0ce1b9e01cc2ef9e5e3008688f92b9
0e536a139bbeaa0fb9d847a1a53a4704dc91fa6cb7faf4524984993d7dad9eca
GET /ea-actiontag/assets/images/flags.png HTTP/1.1
Host: static.everyaction.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static.everyaction.com/ea-actiontag/assets/styles/intlTelInput.min.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 20389
date: Sun, 01 May 2022 03:01:05 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Tue, 07 Dec 2021 15:33:44 GMT
etag: "4e54a2ee652e9cddbd4ef6f8c46e5390"
cache-control: public,max-age=31536000
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 8_oRUUF6Byz_BrcXOEykbV9a4I2nITHRKz6UjTFZzYr6nNIZ78RCpA==
age: 18127269
X-Firefox-Spdy: h2
nvlupin.blob.core.windows.net/images/van/TSM/TSMGP/1/55678/images/SpermWhaleSargassum800x300.jpg
200 OK 382 kB URL HTTP/1.1 nvlupin.blob.core.windows.net/images/van/TSM/TSMGP/1/55678/images/SpermWhaleSargassum800x300.jpg
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 300x300, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=12, PhotometricIntepretation=(unknown=0xffff8023), description=Earth's largest predator photographed in the wild, in the Caribbean sea, a few miles offshore from the east coast of Dominica, manufacturer=NIKON CORPORATION, model=NIKON D7000, orientation=upper-left, xresolution=314, yresolution=322, software=Aperture 3.6, datetime=2019:03:01 18:05:57], baseline, precision 8, 800x300, components 3\012- data
Size 382 kB (381453 bytes)
Hash 2af3a463e7364c85252bef6059ec7025
927cfcf7a8ff6608b0029447f43377a331f00767
5189f1ef36951b611e0efc9baa493fd276ad32e3ff00a7b2099e2bca76514861
GET /images/van/TSM/TSMGP/1/55678/images/SpermWhaleSargassum800x300.jpg HTTP/1.1
Host: nvlupin.blob.core.windows.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engage.us.greenpeace.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Length: 381453
Content-Type: image/jpeg
Last-Modified: Wed, 31 Jul 2019 21:28:46 GMT
ETag: 0x8D715FE1227775B
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 50c6e25e-601e-006c-4de5-01acc6000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
Access-Control-Allow-Origin: *
Date: Sat, 26 Nov 2022 22:22:12 GMT
tags.srv.stackadapt.com/saq_pxl?uid=7X3Yd5UNM3t0m2RuXzwrcQ&is_js=true&landing_url=https%3A%2F%2Fengage.us.greenpeace.org%2Fonlineactions%2Fun8-YeF_R06GSq7I0_xKNg2%3Femci%3D2c751078-d190-ec11-a507-281878b83d8a%26emdi%3D34751078-d190-ec11-a507-281878b83d8a%26fn%3DKatie%26ln%3DBarden%26em%3Dkatie.barden%2540slurpmail.net%26pc%3D%26hp%3D5074447487%26mp%3D5074567475%26utm_source%3Dea%26utm_medium%3Demail%26utm_campaign%3Dpto_igc4%26sourceid%3D1013359%26ceid%3D2592146&t=Add%20Your%20Name%20to%20Support%20the%20Global%20Ocean%20Treaty!%20-%20Greenpeace&tip=WFmgDQCSE043wixd3XE70C1Uznwp6WLI-Omb28fCR5U&host=https://engage.us.greenpeace.org&sa-user-id-v2=s%253AyC_q8LLNRtNzA8pmPykrPVtaKpo.Y3uo32tIobfcSKk0jRRzQ411LA73ZLvpG2JeSP3ZzVg&sa-user-id=s%253A0-c82feaf0-b2cd-46d3-7303-ca663f292b3d.mAY1BaVzGmB79PORnfWg1bF9UzqxDGq2yazW5aJbGnc
200 OK 94 B URL HTTP/1.1 tags.srv.stackadapt.com/saq_pxl?uid=7X3Yd5UNM3t0m2RuXzwrcQ&is_js=true&landing_url=https%3A%2F%2Fengage.us.greenpeace.org%2Fonlineactions%2Fun8-YeF_R06GSq7I0_xKNg2%3Femci%3D2c751078-d190-ec11-a507-281878b83d8a%26emdi%3D34751078-d190-ec11-a507-281878b83d8a%26fn%3DKatie%26ln%3DBarden%26em%3Dkatie.barden%2540slurpmail.net%26pc%3D%26hp%3D5074447487%26mp%3D5074567475%26utm_source%3Dea%26utm_medium%3Demail%26utm_campaign%3Dpto_igc4%26sourceid%3D1013359%26ceid%3D2592146&t=Add%20Your%20Name%20to%20Support%20the%20Global%20Ocean%20Treaty!%20-%20Greenpeace&tip=WFmgDQCSE043wixd3XE70C1Uznwp6WLI-Omb28fCR5U&host=https://engage.us.greenpeace.org&sa-user-id-v2=s%253AyC_q8LLNRtNzA8pmPykrPVtaKpo.Y3uo32tIobfcSKk0jRRzQ411LA73ZLvpG2JeSP3ZzVg&sa-user-id=s%253A0-c82feaf0-b2cd-46d3-7303-ca663f292b3d.mAY1BaVzGmB79PORnfWg1bF9UzqxDGq2yazW5aJbGnc
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 2d12c1129f6ff37622d03db4a2a5949e
bc44653c4a06e671ce423600755fed86fad8ec24
078f3dd88e751c3c421b2007e1cb27bcb65a95daf278bd25de81ba7b2bf3c4e4
GET /saq_pxl?uid=7X3Yd5UNM3t0m2RuXzwrcQ&is_js=true&landing_url=https%3A%2F%2Fengage.us.greenpeace.org%2Fonlineactions%2Fun8-YeF_R06GSq7I0_xKNg2%3Femci%3D2c751078-d190-ec11-a507-281878b83d8a%26emdi%3D34751078-d190-ec11-a507-281878b83d8a%26fn%3DKatie%26ln%3DBarden%26em%3Dkatie.barden%2540slurpmail.net%26pc%3D%26hp%3D5074447487%26mp%3D5074567475%26utm_source%3Dea%26utm_medium%3Demail%26utm_campaign%3Dpto_igc4%26sourceid%3D1013359%26ceid%3D2592146&t=Add%20Your%20Name%20to%20Support%20the%20Global%20Ocean%20Treaty!%20-%20Greenpeace&tip=WFmgDQCSE043wixd3XE70C1Uznwp6WLI-Omb28fCR5U&host=https://engage.us.greenpeace.org&sa-user-id-v2=s%253AyC_q8LLNRtNzA8pmPykrPVtaKpo.Y3uo32tIobfcSKk0jRRzQ411LA73ZLvpG2JeSP3ZzVg&sa-user-id=s%253A0-c82feaf0-b2cd-46d3-7303-ca663f292b3d.mAY1BaVzGmB79PORnfWg1bF9UzqxDGq2yazW5aJbGnc HTTP/1.1
Host: tags.srv.stackadapt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://engage.us.greenpeace.org
Connection: keep-alive
Referer: https://engage.us.greenpeace.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: GET
Access-Control-Allow-Origin: https://engage.us.greenpeace.org
Content-Type: text/plain; charset=utf-8
Date: Sat, 26 Nov 2022 22:22:13 GMT
Content-Length: 94
Connection: keep-alive
100.20.58.101/is
200 OK 32 B IP
File type ASCII text, with no line terminators
Hash 6d3d520a9607c29ece08fc741a4710f8
73df435aa8435e786de5fe389a2118c6f9ca4205
12542787fd998b13ef843522658f9e1ee5a6cd24e3529bc34bf1b793c91dcaed
Analyzer Verdict Alert quad9 Sinkholed
GET /is HTTP/1.1
Host: 100.20.58.101
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://engage.us.greenpeace.org/
Origin: https://engage.us.greenpeace.org
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
date: Sat, 26 Nov 2022 22:22:13 GMT
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, x-requested-with, X-Custom-Header
x-application-context: application:prod:8080
content-type: text/plain;charset=utf-8
content-length: 32
x-envoy-upstream-service-time: 0
server: istio-envoy
connection: close
secure.everyaction.com/Databag/Profile/SpHoPjH0MZqudSy3MM4Of3dc
204 No Content 0 B URL HTTP/2 secure.everyaction.com/Databag/Profile/SpHoPjH0MZqudSy3MM4Of3dc
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /Databag/Profile/SpHoPjH0MZqudSy3MM4Of3dc HTTP/1.1
Host: secure.everyaction.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://engage.us.greenpeace.org
Connection: keep-alive
Referer: https://engage.us.greenpeace.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Sat, 26 Nov 2022 22:22:12 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://engage.us.greenpeace.org
access-control-expose-headers: Request-Context
cache-control: private
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
x-frame-options: SAMEORIGIN
request-context: appId=cid-v1:ccd92c0b-19c7-485c-b607-cbfe2344efa3
content-security-policy: default-src * 'unsafe-eval' 'unsafe-inline' data: blob:
set-cookie: visid_incap_823975=ZrOKzMWFTRCUfJF+hEbxVJWRgmMAAAAAQUIPAAAAAAABgw3S6qcEViNIgfrVyc38; expires=Sun, 26 Nov 2023 22:16:31 GMT; HttpOnly; path=/; Domain=.everyaction.com
nlbi_823975=coVbKiTD8B9BKmQVxwoUeQAAAADZTAAdoyiQu0NhDbFTnZ5D; path=/; Domain=.everyaction.com
incap_ses_722_823975=EYYeFxdeKlEUF77nFxAFCpWRgmMAAAAAnBlOeOc8Jx/yLnfMfkaT1w==; path=/; Domain=.everyaction.com
TiPMix=70.89340365029464; path=/; HttpOnly; Domain=secure.everyaction.com; Max-Age=3600; Secure; SameSite=None; SameSite=None; Secure
x-ms-routing-name=self; path=/; HttpOnly; Domain=secure.everyaction.com; Max-Age=3600; Secure; SameSite=None; SameSite=None; Secure
ProfileDatabagId=SpHoPjH0MZqudSy3MM4Of3dc; domain=.everyaction.com; expires=Fri, 26-Nov-2032 22:22:13 GMT; path=/; Secure; SameSite=None; SameSite=None; Secure
x-cdn: Imperva
x-iinfo: 10-21001549-21001551 PNNN RT(1669501333084 319) q(0 0 0 -1) r(1 1) U11
X-Firefox-Spdy: h2
secure.everyaction.com/v1/Track/un8-YeF_R06GSq7I0_xKNg2?emci=2c751078-d190-ec11-a507-281878b83d8a&emdi=34751078-d190-ec11-a507-281878b83d8a&fn=Katie&ln=Barden&em=katie.barden%40slurpmail.net&pc=&hp=5074447487&mp=5074567475&utm_source=ea&utm_medium=email&utm_campaign=pto_igc4&sourceid=1013359&ceid=2592146&formSessionId=cd3da55a-a4e8-4729-82b1-363ed69c4eea&bName=firefox&dType=desktop&fUrl=aHR0cHM6Ly9lbmdhZ2UudXMuZ3JlZW5wZWFjZS5vcmcvb25saW5lYWN0aW9ucy91bjgtWWVGX1IwNkdTcTdJMF94S05nMj9lbWNpPTJjNzUxMDc4LWQxOTAtZWMxMS1hNTA3LTI4MTg3OGI4M2Q4YSZlbWRpPTM0NzUxMDc4LWQxOTAtZWMxMS1hNTA3LTI4MTg3OGI4M2Q4YSZmbj1LYXRpZSZsbj1CYXJkZW4mZW09a2F0aWUuYmFyZGVuJTQwc2x1cnBtYWlsLm5ldCZwYz0maHA9NTA3NDQ0NzQ4NyZtcD01MDc0NTY3NDc1JnV0bV9zb3VyY2U9ZWEmdXRtX21lZGl1bT1lbWFpbCZ1dG1fY2FtcGFpZ249cHRvX2lnYzQmc291cmNlaWQ9MTAxMzM1OSZjZWlkPTI1OTIxNDY%3D&fRef=
200 OK 0 B URL HTTP/2 secure.everyaction.com/v1/Track/un8-YeF_R06GSq7I0_xKNg2?emci=2c751078-d190-ec11-a507-281878b83d8a&emdi=34751078-d190-ec11-a507-281878b83d8a&fn=Katie&ln=Barden&em=katie.barden%40slurpmail.net&pc=&hp=5074447487&mp=5074567475&utm_source=ea&utm_medium=email&utm_campaign=pto_igc4&sourceid=1013359&ceid=2592146&formSessionId=cd3da55a-a4e8-4729-82b1-363ed69c4eea&bName=firefox&dType=desktop&fUrl=aHR0cHM6Ly9lbmdhZ2UudXMuZ3JlZW5wZWFjZS5vcmcvb25saW5lYWN0aW9ucy91bjgtWWVGX1IwNkdTcTdJMF94S05nMj9lbWNpPTJjNzUxMDc4LWQxOTAtZWMxMS1hNTA3LTI4MTg3OGI4M2Q4YSZlbWRpPTM0NzUxMDc4LWQxOTAtZWMxMS1hNTA3LTI4MTg3OGI4M2Q4YSZmbj1LYXRpZSZsbj1CYXJkZW4mZW09a2F0aWUuYmFyZGVuJTQwc2x1cnBtYWlsLm5ldCZwYz0maHA9NTA3NDQ0NzQ4NyZtcD01MDc0NTY3NDc1JnV0bV9zb3VyY2U9ZWEmdXRtX21lZGl1bT1lbWFpbCZ1dG1fY2FtcGFpZ249cHRvX2lnYzQmc291cmNlaWQ9MTAxMzM1OSZjZWlkPTI1OTIxNDY%3D&fRef=
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v1/Track/un8-YeF_R06GSq7I0_xKNg2?emci=2c751078-d190-ec11-a507-281878b83d8a&emdi=34751078-d190-ec11-a507-281878b83d8a&fn=Katie&ln=Barden&em=katie.barden%40slurpmail.net&pc=&hp=5074447487&mp=5074567475&utm_source=ea&utm_medium=email&utm_campaign=pto_igc4&sourceid=1013359&ceid=2592146&formSessionId=cd3da55a-a4e8-4729-82b1-363ed69c4eea&bName=firefox&dType=desktop&fUrl=aHR0cHM6Ly9lbmdhZ2UudXMuZ3JlZW5wZWFjZS5vcmcvb25saW5lYWN0aW9ucy91bjgtWWVGX1IwNkdTcTdJMF94S05nMj9lbWNpPTJjNzUxMDc4LWQxOTAtZWMxMS1hNTA3LTI4MTg3OGI4M2Q4YSZlbWRpPTM0NzUxMDc4LWQxOTAtZWMxMS1hNTA3LTI4MTg3OGI4M2Q4YSZmbj1LYXRpZSZsbj1CYXJkZW4mZW09a2F0aWUuYmFyZGVuJTQwc2x1cnBtYWlsLm5ldCZwYz0maHA9NTA3NDQ0NzQ4NyZtcD01MDc0NTY3NDc1JnV0bV9zb3VyY2U9ZWEmdXRtX21lZGl1bT1lbWFpbCZ1dG1fY2FtcGFpZ249cHRvX2lnYzQmc291cmNlaWQ9MTAxMzM1OSZjZWlkPTI1OTIxNDY%3D&fRef= HTTP/1.1
Host: secure.everyaction.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engage.us.greenpeace.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 26 Nov 2022 22:22:13 GMT
access-control-expose-headers: Request-Context
cache-control: no-cache
expires: -1
pragma: no-cache
content-length: 0
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
x-frame-options: SAMEORIGIN
request-context: appId=cid-v1:ccd92c0b-19c7-485c-b607-cbfe2344efa3
content-security-policy: default-src * 'unsafe-eval' 'unsafe-inline' data: blob:
set-cookie: visid_incap_823975=+rNQqXilRrKG+tZY9rBBBlWRgmMAAAAAQUIPAAAAAAAgPgdVJscEt/HokhInLhwJ; expires=Sun, 26 Nov 2023 22:16:31 GMT; HttpOnly; path=/; Domain=.everyaction.com
nlbi_823975=yVuNQpo8nDb19VVbxwoUeQAAAADOi/Lq6uCnn2/f3D5Vb3Bu; path=/; Domain=.everyaction.com
incap_ses_722_823975=wFlFG3dHrSme/73nFxAFCpWRgmMAAAAAX4OrM1gX3PTBIF/ziAyOvQ==; path=/; Domain=.everyaction.com
TiPMix=57.731294915086686; path=/; HttpOnly; Domain=secure.everyaction.com; Max-Age=3600; Secure; SameSite=None; SameSite=None; Secure
x-ms-routing-name=self; path=/; HttpOnly; Domain=secure.everyaction.com; Max-Age=3600; Secure; SameSite=None; SameSite=None; Secure
; Secure; SameSite=None; SameSite=None; Secure
x-cdn: Imperva
x-iinfo: 10-21001549-21001551 NNNN CT(98 202 0) RT(1669501333084 22) q(0 0 3 4) r(4 4) U2
X-Firefox-Spdy: h2
engage.us.greenpeace.org/Databag/Profile/SpHoPjH0MZqudSy3MM4Of3dc
204 No Content 0 B URL HTTP/2 engage.us.greenpeace.org/Databag/Profile/SpHoPjH0MZqudSy3MM4Of3dc
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /Databag/Profile/SpHoPjH0MZqudSy3MM4Of3dc HTTP/1.1
Host: engage.us.greenpeace.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Request-Id: |17d3fff34d0c4f0590376d98d7bfb50c.23aff539d4dd4ad7
traceparent: 00-17d3fff34d0c4f0590376d98d7bfb50c-23aff539d4dd4ad7-01
Connection: keep-alive
Referer: https://engage.us.greenpeace.org/onlineactions/un8-YeF_R06GSq7I0_xKNg2?emci=2c751078-d190-ec11-a507-281878b83d8a&emdi=34751078-d190-ec11-a507-281878b83d8a&fn=Katie&ln=Barden&em=katie.barden%40slurpmail.net&pc=&hp=5074447487&mp=5074567475&utm_source=ea&utm_medium=email&utm_campaign=pto_igc4&sourceid=1013359&ceid=2592146
Cookie: visid_incap_1935261=hEOrvSY2QoCWWLLJvH15RpKRgmMAAAAAQUIPAAAAAADUP+8omL9imPWBiRzp23iX; nlbi_1935261=b473PvLlD2K7uFx+du09AQAAAACaqIIAcrFda4JuN/pAAY1/; incap_ses_722_1935261=yVTHamt7nwX0Fb7nFxAFCpORgmMAAAAAhl1iuq6wNFUGyiIUqmIFXg==; TiPMix=86.30083827597895; x-ms-routing-name=self; ai_user=VEj48EHHtAJ4XVfkhlOE1z|2022-11-26T22:22:11.400Z; _gcl_au=1.1.2109658517.1669501332; _ga_ENX841EBF4=GS1.1.1669501331.1.0.1669501331.0.0.0; _ga=GA1.2.846543259.1669501332; ___utmvc=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; _gid=GA1.2.125051171.1669501332; _dc_gtm_UA-84485273-1=1; ai_session=+khYgqfPm9EFSqiRdZrc+f|1669501332392|1669501332392; _uetsid=c63388e06dd811eda0914f2feea23293; _uetvid=c633c9306dd811ed84a9135567d1962b; sa-user-id=s%253A0-c82feaf0-b2cd-46d3-7303-ca663f292b3d.mAY1BaVzGmB79PORnfWg1bF9UzqxDGq2yazW5aJbGnc; sa-user-id-v2=s%253AyC_q8LLNRtNzA8pmPykrPVtaKpo.Y3uo32tIobfcSKk0jRRzQ411LA73ZLvpG2JeSP3ZzVg; _ga=GA1.4.846543259.1669501332; _gid=GA1.4.125051171.1669501332; _dc_gtm_UA-84485273-15=1; _gat_UA-84485273-15=1; _gat_UA-84485273-1=1; _gat_UA-109290164-1=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 204 No Content
date: Sat, 26 Nov 2022 22:22:12 GMT
access-control-allow-origin: *
access-control-expose-headers: Request-Context
cache-control: private
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
x-frame-options: SAMEORIGIN
request-context: appId=cid-v1:ccd92c0b-19c7-485c-b607-cbfe2344efa3
content-security-policy: default-src * 'unsafe-eval' 'unsafe-inline' data: blob:
x-cdn: Imperva
set-cookie: ___utmvc=a; Max-Age=0; path=/; expires=Wed, 09 Nov 2022 22:09:20 GMT
ProfileDatabagId=SpHoPjH0MZqudSy3MM4Of3dc; domain=engage.us.greenpeace.org; expires=Fri, 26-Nov-2032 22:22:13 GMT; path=/; Secure; SameSite=None; SameSite=None; Secure
x-iinfo: 4-27886482-27886488 PNNN RT(1669501330308 3108) q(0 0 0 -1) r(1 1) U11
X-Firefox-Spdy: h2
dx.steelhousemedia.com/spx?dxver=4.0.0&shaid=31488&tdr=&plh=https%3A%2F%2Fengage.us.greenpeace.org%2Fonlineactions%2Fun8-YeF_R06GSq7I0_xKNg2%3Femci%3D2c751078-d190-ec11-a507-281878b83d8a%26emdi%3D34751078-d190-ec11-a507-281878b83d8a%26fn%3DKatie%26ln%3DBarden%26em%3Dkatie.barden%2540slurpmail.net%26pc%3D%26hp%3D5074447487%26mp%3D5074567475%26utm_source%3Dea%26utm_medium%3Demail%26utm_campaign%3Dpto_igc4%26sourceid%3D1013359%26ceid%3D2592146&cb=57237621534353976term=value
200 4.0 kB URL HTTP/1.1 dx.steelhousemedia.com/spx?dxver=4.0.0&shaid=31488&tdr=&plh=https%3A%2F%2Fengage.us.greenpeace.org%2Fonlineactions%2Fun8-YeF_R06GSq7I0_xKNg2%3Femci%3D2c751078-d190-ec11-a507-281878b83d8a%26emdi%3D34751078-d190-ec11-a507-281878b83d8a%26fn%3DKatie%26ln%3DBarden%26em%3Dkatie.barden%2540slurpmail.net%26pc%3D%26hp%3D5074447487%26mp%3D5074567475%26utm_source%3Dea%26utm_medium%3Demail%26utm_campaign%3Dpto_igc4%26sourceid%3D1013359%26ceid%3D2592146&cb=57237621534353976term=value
IP
File type ASCII text, with very long lines (14891), with no line terminators
Hash 420a2ffa9eacf125910d4df4f90e686c
cc696822ddf916091e8b03e6468729d267a931f9
bc357584ca315757e11176439de9fb636c6b85a1dd20dee88d509807f39e232d
GET /spx?dxver=4.0.0&shaid=31488&tdr=&plh=https%3A%2F%2Fengage.us.greenpeace.org%2Fonlineactions%2Fun8-YeF_R06GSq7I0_xKNg2%3Femci%3D2c751078-d190-ec11-a507-281878b83d8a%26emdi%3D34751078-d190-ec11-a507-281878b83d8a%26fn%3DKatie%26ln%3DBarden%26em%3Dkatie.barden%2540slurpmail.net%26pc%3D%26hp%3D5074447487%26mp%3D5074567475%26utm_source%3Dea%26utm_medium%3Demail%26utm_campaign%3Dpto_igc4%26sourceid%3D1013359%26ceid%3D2592146&cb=57237621534353976term=value HTTP/1.1
Host: dx.steelhousemedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engage.us.greenpeace.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200
vary: origin,access-control-request-method,access-control-request-headers,accept-encoding
expires: Thu, 01 Jan 1970 00:00:00 GMT
content-encoding: gzip
content-type: application/javascript;charset=utf-8
date: Sat, 26 Nov 2022 22:22:12 GMT
connection: close
pixel.sitescout.com/up/61d3f7d89b9ff2db?cntr_url=https%3A%2F%2Fengage.us.greenpeace.org%2Fonlineactions%2Fun8-YeF_R06GSq7I0_xKNg2%3Femci%3D2c751078-d190-ec11-a507-281878b83d8a%26emdi%3D34751078-d190-ec11-a507-281878b83d8a%26fn%3DKatie%26ln%3DBarden%26em%3Dkatie.barden%2540slurpmail.net%26pc%3D%26hp%3D5074447487%26mp%3D5074567475%26utm_source%3Dea%26utm_medium%3Demail%26utm_campaign%3Dpto_igc4%26sourceid%3D1013359%26ceid%3D2592146
302 Found 0 B URL HTTP/2 pixel.sitescout.com/up/61d3f7d89b9ff2db?cntr_url=https%3A%2F%2Fengage.us.greenpeace.org%2Fonlineactions%2Fun8-YeF_R06GSq7I0_xKNg2%3Femci%3D2c751078-d190-ec11-a507-281878b83d8a%26emdi%3D34751078-d190-ec11-a507-281878b83d8a%26fn%3DKatie%26ln%3DBarden%26em%3Dkatie.barden%2540slurpmail.net%26pc%3D%26hp%3D5074447487%26mp%3D5074567475%26utm_source%3Dea%26utm_medium%3Demail%26utm_campaign%3Dpto_igc4%26sourceid%3D1013359%26ceid%3D2592146
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /up/61d3f7d89b9ff2db?cntr_url=https%3A%2F%2Fengage.us.greenpeace.org%2Fonlineactions%2Fun8-YeF_R06GSq7I0_xKNg2%3Femci%3D2c751078-d190-ec11-a507-281878b83d8a%26emdi%3D34751078-d190-ec11-a507-281878b83d8a%26fn%3DKatie%26ln%3DBarden%26em%3Dkatie.barden%2540slurpmail.net%26pc%3D%26hp%3D5074447487%26mp%3D5074567475%26utm_source%3Dea%26utm_medium%3Demail%26utm_campaign%3Dpto_igc4%26sourceid%3D1013359%26ceid%3D2592146 HTTP/1.1
Host: pixel.sitescout.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engage.us.greenpeace.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
set-cookie: ssi=8fb4d70a-8119-410c-bd3c-9f83bec9aadf#1669501333814; Domain=.sitescout.com; Expires=Sun, 26-Nov-2023 22:22:13 GMT; Path=/; Secure; SameSite=None
location: https://pixel.sitescout.com/up/61d3f7d89b9ff2db?cookieQ=1&cntr_url=https%3A%2F%2Fengage.us.greenpeace.org%2Fonlineactions%2Fun8-YeF_R06GSq7I0_xKNg2%3Femci%3D2c751078-d190-ec11-a507-281878b83d8a%26emdi%3D34751078-d190-ec11-a507-281878b83d8a%26fn%3DKatie%26ln%3DBarden%26em%3Dkatie.barden%2540slurpmail.net%26pc%3D%26hp%3D5074447487%26mp%3D5074567475%26utm_source%3Dea%26utm_medium%3Demail%26utm_campaign%3Dpto_igc4%26sourceid%3D1013359%26ceid%3D2592146
content-length: 0
date: Sat, 26 Nov 2022 22:22:13 GMT
server: AC1.1
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash ae452333438465bef0a71a80768855a0
dae89646a66487e12b6dba40b7796c4b608506bd
dc15bc4a1e175a446f69fedc8475164a75477dd7a455b044f0ca85884f873917
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1508
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 22:22:13 GMT
Last-Modified: Sat, 26 Nov 2022 21:57:05 GMT
Server: ECS (ska/F70A)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash f3424fd0abb5ab18be62cd209cb3d3dc
dbb2a21b12e92c8837c4346b6d052454bb6dffd6
e69548655278cf6a48fce549928656eb5a91d787e7b1afc12959e2bffb58990b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 22:22:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash f3424fd0abb5ab18be62cd209cb3d3dc
dbb2a21b12e92c8837c4346b6d052454bb6dffd6
e69548655278cf6a48fce549928656eb5a91d787e7b1afc12959e2bffb58990b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 22:22:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash f3424fd0abb5ab18be62cd209cb3d3dc
dbb2a21b12e92c8837c4346b6d052454bb6dffd6
e69548655278cf6a48fce549928656eb5a91d787e7b1afc12959e2bffb58990b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 22:22:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash f3424fd0abb5ab18be62cd209cb3d3dc
dbb2a21b12e92c8837c4346b6d052454bb6dffd6
e69548655278cf6a48fce549928656eb5a91d787e7b1afc12959e2bffb58990b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 22:22:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash f3424fd0abb5ab18be62cd209cb3d3dc
dbb2a21b12e92c8837c4346b6d052454bb6dffd6
e69548655278cf6a48fce549928656eb5a91d787e7b1afc12959e2bffb58990b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 22:22:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
connect.facebook.net/en_US/fbevents.js
200 OK 27 kB URL HTTP/2 connect.facebook.net/en_US/fbevents.js
IP
File type ASCII text, with very long lines (64348)
Hash 44ecaa3c2a4929a40141edc4540aaf84
f29a573182333b2500d41bfc389d6c5232dfb348
6589fe14578dedd4df678a909afadd7e5bc7f57c7e3e24518a7f5faac7383396
GET /en_US/fbevents.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engage.us.greenpeace.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: application/x-javascript; charset=utf-8
content-security-policy: default-src facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com data: blob: 'self';script-src *.fbcdn.net *.facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com;connect-src *.fbcdn.net *.facebook.net wss://*.fbcdn.net attachment.fbsbx.com blob: 'self';block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: M5fLM2D6LYgXX8B05fq7DafPLlpBqqPz2g2NUNrxEJLvdcUVGfVKRA4fNQeJTaTSJyM8LqMIGH0NFbRohBARlQ==
priority: u=3,i
content-length: 27340
x-fb-trip-id: 1904183273
date: Sat, 26 Nov 2022 22:22:13 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-84485273-1&cid=846543259.1669501332&jid=1821911290&_u=aDHACEABRAAAAGAAI~&z=1944077585
200 OK 42 B URL HTTP/2 www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-84485273-1&cid=846543259.1669501332&jid=1821911290&_u=aDHACEABRAAAAGAAI~&z=1944077585
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-84485273-1&cid=846543259.1669501332&jid=1821911290&_u=aDHACEABRAAAAGAAI~&z=1944077585 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engage.us.greenpeace.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sat, 26 Nov 2022 22:22:13 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
bat.bing.com/p/action/56344932.js
204 No Content 0 B URL HTTP/2 bat.bing.com/p/action/56344932.js
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /p/action/56344932.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engage.us.greenpeace.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
cache-control: private,max-age=1800
set-cookie: MUID=1828E824F7296B592ADDFA4CF6DC6A91; domain=.bing.com; expires=Thu, 21-Dec-2023 22:22:13 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 5001FBAF037743438B9B58DC25B34BAA Ref B: OSL30EDGE0217 Ref C: 2022-11-26T22:22:13Z
date: Sat, 26 Nov 2022 22:22:13 GMT
X-Firefox-Spdy: h2
www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-109290164-1&cid=846543259.1669501332&jid=1426321809&_u=aDHACEABRAAAAGAAIg~&z=322881582
200 OK 42 B URL HTTP/2 www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-109290164-1&cid=846543259.1669501332&jid=1426321809&_u=aDHACEABRAAAAGAAIg~&z=322881582
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-109290164-1&cid=846543259.1669501332&jid=1426321809&_u=aDHACEABRAAAAGAAIg~&z=322881582 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engage.us.greenpeace.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sat, 26 Nov 2022 22:22:13 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.no/pagead/1p-user-list/10887043785/?random=1669501331810&cv=11&fst=1669500000000&bg=ffffff&guid=ON&async=1>m=2oab90&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fengage.us.greenpeace.org%2Fonlineactions%2Fun8-YeF_R06GSq7I0_xKNg2%3Femci%3D2c751078-d190-ec11-a507-281878b83d8a%26emdi%3D34751078-d190-ec11-a507-281878b83d8a%26fn%3DKatie%26ln%3DBarden%26em%3Dkatie.barden%2540slurpmail.net%26pc%3D%26hp%3D5074447487%26mp%3D5074567475%26utm_source%3Dea%26utm_medium%3Demail%26utm_campaign%3Dpto_igc4%26sourceid%3D1013359%26ceid%3D2592146&tiba=Add%20Your%20Name%20to%20Support%20the%20Global%20Ocean%20Treaty!%20-%20Greenpeace&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=701216086&rmt_tld=1&ipr=y
200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-user-list/10887043785/?random=1669501331810&cv=11&fst=1669500000000&bg=ffffff&guid=ON&async=1>m=2oab90&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fengage.us.greenpeace.org%2Fonlineactions%2Fun8-YeF_R06GSq7I0_xKNg2%3Femci%3D2c751078-d190-ec11-a507-281878b83d8a%26emdi%3D34751078-d190-ec11-a507-281878b83d8a%26fn%3DKatie%26ln%3DBarden%26em%3Dkatie.barden%2540slurpmail.net%26pc%3D%26hp%3D5074447487%26mp%3D5074567475%26utm_source%3Dea%26utm_medium%3Demail%26utm_campaign%3Dpto_igc4%26sourceid%3D1013359%26ceid%3D2592146&tiba=Add%20Your%20Name%20to%20Support%20the%20Global%20Ocean%20Treaty!%20-%20Greenpeace&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=701216086&rmt_tld=1&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/10887043785/?random=1669501331810&cv=11&fst=1669500000000&bg=ffffff&guid=ON&async=1>m=2oab90&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fengage.us.greenpeace.org%2Fonlineactions%2Fun8-YeF_R06GSq7I0_xKNg2%3Femci%3D2c751078-d190-ec11-a507-281878b83d8a%26emdi%3D34751078-d190-ec11-a507-281878b83d8a%26fn%3DKatie%26ln%3DBarden%26em%3Dkatie.barden%2540slurpmail.net%26pc%3D%26hp%3D5074447487%26mp%3D5074567475%26utm_source%3Dea%26utm_medium%3Demail%26utm_campaign%3Dpto_igc4%26sourceid%3D1013359%26ceid%3D2592146&tiba=Add%20Your%20Name%20to%20Support%20the%20Global%20Ocean%20Treaty!%20-%20Greenpeace&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=701216086&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engage.us.greenpeace.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sat, 26 Nov 2022 22:22:13 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-84485273-15&cid=846543259.1669501332&jid=1972461597&_u=aDDAiEABRAAAAEAAI~&z=1475608063
200 OK 42 B URL HTTP/2 www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-84485273-15&cid=846543259.1669501332&jid=1972461597&_u=aDDAiEABRAAAAEAAI~&z=1475608063
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-84485273-15&cid=846543259.1669501332&jid=1972461597&_u=aDDAiEABRAAAAEAAI~&z=1475608063 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engage.us.greenpeace.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sat, 26 Nov 2022 22:22:13 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-84485273-1&cid=846543259.1669501332&jid=712436187&_u=aCDAgEABQAAAAEAAI~&z=1632764251
200 OK 42 B URL HTTP/2 www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-84485273-1&cid=846543259.1669501332&jid=712436187&_u=aCDAgEABQAAAAEAAI~&z=1632764251
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-84485273-1&cid=846543259.1669501332&jid=712436187&_u=aCDAgEABQAAAAEAAI~&z=1632764251 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engage.us.greenpeace.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sat, 26 Nov 2022 22:22:13 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.no/pagead/1p-user-list/720319789/?random=1669501331552&cv=11&fst=1669500000000&bg=ffffff&guid=ON&async=1>m=2wgb90&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fengage.us.greenpeace.org%2Fonlineactions%2Fun8-YeF_R06GSq7I0_xKNg2%3Femci%3D2c751078-d190-ec11-a507-281878b83d8a%26emdi%3D34751078-d190-ec11-a507-281878b83d8a%26fn%3DKatie%26ln%3DBarden%26em%3Dkatie.barden%2540slurpmail.net%26pc%3D%26hp%3D5074447487%26mp%3D5074567475%26utm_source%3Dea%26utm_medium%3Demail%26utm_campaign%3Dpto_igc4%26sourceid%3D1013359%26ceid%3D2592146&tiba=Add%20Your%20Name%20to%20Support%20the%20Global%20Ocean%20Treaty!%20-%20Greenpeace&fmt=3&is_vtc=1&random=2145478034&rmt_tld=1&ipr=y
200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-user-list/720319789/?random=1669501331552&cv=11&fst=1669500000000&bg=ffffff&guid=ON&async=1>m=2wgb90&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fengage.us.greenpeace.org%2Fonlineactions%2Fun8-YeF_R06GSq7I0_xKNg2%3Femci%3D2c751078-d190-ec11-a507-281878b83d8a%26emdi%3D34751078-d190-ec11-a507-281878b83d8a%26fn%3DKatie%26ln%3DBarden%26em%3Dkatie.barden%2540slurpmail.net%26pc%3D%26hp%3D5074447487%26mp%3D5074567475%26utm_source%3Dea%26utm_medium%3Demail%26utm_campaign%3Dpto_igc4%26sourceid%3D1013359%26ceid%3D2592146&tiba=Add%20Your%20Name%20to%20Support%20the%20Global%20Ocean%20Treaty!%20-%20Greenpeace&fmt=3&is_vtc=1&random=2145478034&rmt_tld=1&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/720319789/?random=1669501331552&cv=11&fst=1669500000000&bg=ffffff&guid=ON&async=1>m=2wgb90&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fengage.us.greenpeace.org%2Fonlineactions%2Fun8-YeF_R06GSq7I0_xKNg2%3Femci%3D2c751078-d190-ec11-a507-281878b83d8a%26emdi%3D34751078-d190-ec11-a507-281878b83d8a%26fn%3DKatie%26ln%3DBarden%26em%3Dkatie.barden%2540slurpmail.net%26pc%3D%26hp%3D5074447487%26mp%3D5074567475%26utm_source%3Dea%26utm_medium%3Demail%26utm_campaign%3Dpto_igc4%26sourceid%3D1013359%26ceid%3D2592146&tiba=Add%20Your%20Name%20to%20Support%20the%20Global%20Ocean%20Treaty!%20-%20Greenpeace&fmt=3&is_vtc=1&random=2145478034&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engage.us.greenpeace.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sat, 26 Nov 2022 22:22:13 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.no/pagead/1p-user-list/732817806/?random=1669501331749&cv=11&fst=1669500000000&bg=ffffff&guid=ON&async=1>m=2oab90&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fengage.us.greenpeace.org%2Fonlineactions%2Fun8-YeF_R06GSq7I0_xKNg2%3Femci%3D2c751078-d190-ec11-a507-281878b83d8a%26emdi%3D34751078-d190-ec11-a507-281878b83d8a%26fn%3DKatie%26ln%3DBarden%26em%3Dkatie.barden%2540slurpmail.net%26pc%3D%26hp%3D5074447487%26mp%3D5074567475%26utm_source%3Dea%26utm_medium%3Demail%26utm_campaign%3Dpto_igc4%26sourceid%3D1013359%26ceid%3D2592146&tiba=Add%20Your%20Name%20to%20Support%20the%20Global%20Ocean%20Treaty!%20-%20Greenpeace&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=659880788&rmt_tld=1&ipr=y
200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-user-list/732817806/?random=1669501331749&cv=11&fst=1669500000000&bg=ffffff&guid=ON&async=1>m=2oab90&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fengage.us.greenpeace.org%2Fonlineactions%2Fun8-YeF_R06GSq7I0_xKNg2%3Femci%3D2c751078-d190-ec11-a507-281878b83d8a%26emdi%3D34751078-d190-ec11-a507-281878b83d8a%26fn%3DKatie%26ln%3DBarden%26em%3Dkatie.barden%2540slurpmail.net%26pc%3D%26hp%3D5074447487%26mp%3D5074567475%26utm_source%3Dea%26utm_medium%3Demail%26utm_campaign%3Dpto_igc4%26sourceid%3D1013359%26ceid%3D2592146&tiba=Add%20Your%20Name%20to%20Support%20the%20Global%20Ocean%20Treaty!%20-%20Greenpeace&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=659880788&rmt_tld=1&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/732817806/?random=1669501331749&cv=11&fst=1669500000000&bg=ffffff&guid=ON&async=1>m=2oab90&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fengage.us.greenpeace.org%2Fonlineactions%2Fun8-YeF_R06GSq7I0_xKNg2%3Femci%3D2c751078-d190-ec11-a507-281878b83d8a%26emdi%3D34751078-d190-ec11-a507-281878b83d8a%26fn%3DKatie%26ln%3DBarden%26em%3Dkatie.barden%2540slurpmail.net%26pc%3D%26hp%3D5074447487%26mp%3D5074567475%26utm_source%3Dea%26utm_medium%3Demail%26utm_campaign%3Dpto_igc4%26sourceid%3D1013359%26ceid%3D2592146&tiba=Add%20Your%20Name%20to%20Support%20the%20Global%20Ocean%20Treaty!%20-%20Greenpeace&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=659880788&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engage.us.greenpeace.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sat, 26 Nov 2022 22:22:13 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.no/pagead/1p-conversion/720319789/?random=1669501331545&cv=11&fst=1669501331545&bg=ffffff&guid=ON&async=1>m=2wgb90&u_w=1280&u_h=1024&label=IuOuCJPWg7QBEK3qvNcC&hn=www.google.com&frm=0&url=https%3A%2F%2Fengage.us.greenpeace.org%2Fonlineactions%2Fun8-YeF_R06GSq7I0_xKNg2%3Femci%3D2c751078-d190-ec11-a507-281878b83d8a%26emdi%3D34751078-d190-ec11-a507-281878b83d8a%26fn%3DKatie%26ln%3DBarden%26em%3Dkatie.barden%2540slurpmail.net%26pc%3D%26hp%3D5074447487%26mp%3D5074567475%26utm_source%3Dea%26utm_medium%3Demail%26utm_campaign%3Dpto_igc4%26sourceid%3D1013359%26ceid%3D2592146&tiba=Add%20Your%20Name%20to%20Support%20the%20Global%20Ocean%20Treaty!%20-%20Greenpeace&value=0&bttype=purchase&auid=2109658517.1669501332&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4&ipr=y&prhg=0
200 OK 63 B URL HTTP/2 www.google.no/pagead/1p-conversion/720319789/?random=1669501331545&cv=11&fst=1669501331545&bg=ffffff&guid=ON&async=1>m=2wgb90&u_w=1280&u_h=1024&label=IuOuCJPWg7QBEK3qvNcC&hn=www.google.com&frm=0&url=https%3A%2F%2Fengage.us.greenpeace.org%2Fonlineactions%2Fun8-YeF_R06GSq7I0_xKNg2%3Femci%3D2c751078-d190-ec11-a507-281878b83d8a%26emdi%3D34751078-d190-ec11-a507-281878b83d8a%26fn%3DKatie%26ln%3DBarden%26em%3Dkatie.barden%2540slurpmail.net%26pc%3D%26hp%3D5074447487%26mp%3D5074567475%26utm_source%3Dea%26utm_medium%3Demail%26utm_campaign%3Dpto_igc4%26sourceid%3D1013359%26ceid%3D2592146&tiba=Add%20Your%20Name%20to%20Support%20the%20Global%20Ocean%20Treaty!%20-%20Greenpeace&value=0&bttype=purchase&auid=2109658517.1669501332&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4&ipr=y&prhg=0
IP
File type ASCII text, with no line terminators
Hash 0339f8f57d1bf75003db591e28957e45
ae2286e497c9f76a02cb40c40a674b73bd293b76
609cd8e12464fe137cfaa9f1ab6637150d44e105559c901b6df50303fd05aa26
GET /pagead/1p-conversion/720319789/?random=1669501331545&cv=11&fst=1669501331545&bg=ffffff&guid=ON&async=1>m=2wgb90&u_w=1280&u_h=1024&label=IuOuCJPWg7QBEK3qvNcC&hn=www.google.com&frm=0&url=https%3A%2F%2Fengage.us.greenpeace.org%2Fonlineactions%2Fun8-YeF_R06GSq7I0_xKNg2%3Femci%3D2c751078-d190-ec11-a507-281878b83d8a%26emdi%3D34751078-d190-ec11-a507-281878b83d8a%26fn%3DKatie%26ln%3DBarden%26em%3Dkatie.barden%2540slurpmail.net%26pc%3D%26hp%3D5074447487%26mp%3D5074567475%26utm_source%3Dea%26utm_medium%3Demail%26utm_campaign%3Dpto_igc4%26sourceid%3D1013359%26ceid%3D2592146&tiba=Add%20Your%20Name%20to%20Support%20the%20Global%20Ocean%20Treaty!%20-%20Greenpeace&value=0&bttype=purchase&auid=2109658517.1669501332&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4&ipr=y&prhg=0 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://engage.us.greenpeace.org/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sat, 26 Nov 2022 22:22:13 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: text/javascript; charset=UTF-8
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 63
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-84485273-15&cid=846543259.1669501332&jid=1471855437&_u=aDHACEABRAAAAGAAI~&z=1665495810
200 OK 42 B URL HTTP/2 www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-84485273-15&cid=846543259.1669501332&jid=1471855437&_u=aDHACEABRAAAAGAAI~&z=1665495810
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-84485273-15&cid=846543259.1669501332&jid=1471855437&_u=aDHACEABRAAAAGAAI~&z=1665495810 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engage.us.greenpeace.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sat, 26 Nov 2022 22:22:13 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash ae452333438465bef0a71a80768855a0
dae89646a66487e12b6dba40b7796c4b608506bd
dc15bc4a1e175a446f69fedc8475164a75477dd7a455b044f0ca85884f873917
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1508
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 22:22:13 GMT
Last-Modified: Sat, 26 Nov 2022 21:57:05 GMT
Server: ECS (ska/F70A)
X-Cache: HIT
Content-Length: 471
pixel.sitescout.com/up/61d3f7d89b9ff2db?cookieQ=1&cntr_url=https%3A%2F%2Fengage.us.greenpeace.org%2Fonlineactions%2Fun8-YeF_R06GSq7I0_xKNg2%3Femci%3D2c751078-d190-ec11-a507-281878b83d8a%26emdi%3D34751078-d190-ec11-a507-281878b83d8a%26fn%3DKatie%26ln%3DBarden%26em%3Dkatie.barden%2540slurpmail.net%26pc%3D%26hp%3D5074447487%26mp%3D5074567475%26utm_source%3Dea%26utm_medium%3Demail%26utm_campaign%3Dpto_igc4%26sourceid%3D1013359%26ceid%3D2592146
200 OK 43 B URL HTTP/2 pixel.sitescout.com/up/61d3f7d89b9ff2db?cookieQ=1&cntr_url=https%3A%2F%2Fengage.us.greenpeace.org%2Fonlineactions%2Fun8-YeF_R06GSq7I0_xKNg2%3Femci%3D2c751078-d190-ec11-a507-281878b83d8a%26emdi%3D34751078-d190-ec11-a507-281878b83d8a%26fn%3DKatie%26ln%3DBarden%26em%3Dkatie.barden%2540slurpmail.net%26pc%3D%26hp%3D5074447487%26mp%3D5074567475%26utm_source%3Dea%26utm_medium%3Demail%26utm_campaign%3Dpto_igc4%26sourceid%3D1013359%26ceid%3D2592146
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 07fff40b5dd495aca2ac4e1c3fbc60aa
e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
GET /up/61d3f7d89b9ff2db?cookieQ=1&cntr_url=https%3A%2F%2Fengage.us.greenpeace.org%2Fonlineactions%2Fun8-YeF_R06GSq7I0_xKNg2%3Femci%3D2c751078-d190-ec11-a507-281878b83d8a%26emdi%3D34751078-d190-ec11-a507-281878b83d8a%26fn%3DKatie%26ln%3DBarden%26em%3Dkatie.barden%2540slurpmail.net%26pc%3D%26hp%3D5074447487%26mp%3D5074567475%26utm_source%3Dea%26utm_medium%3Demail%26utm_campaign%3Dpto_igc4%26sourceid%3D1013359%26ceid%3D2592146 HTTP/1.1
Host: pixel.sitescout.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://engage.us.greenpeace.org/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: max-age=0,no-cache,no-store
pragma: no-cache
expires: Tue, 11 Oct 1977 12:34:56 GMT
p3p: CP="NON DEVa PSAa PSDa OUR NOR NAV",policyref="/w3c/p3p.xml"
content-type: image/gif
content-length: 43
date: Sat, 26 Nov 2022 22:22:13 GMT
server: AC1.1
X-Firefox-Spdy: h2
secure.ngpvan.com/Databag/Profile/SpHoPjH0MZqudSy3MM4Of3dc
204 No Content 0 B URL HTTP/2 secure.ngpvan.com/Databag/Profile/SpHoPjH0MZqudSy3MM4Of3dc
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /Databag/Profile/SpHoPjH0MZqudSy3MM4Of3dc HTTP/1.1
Host: secure.ngpvan.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://engage.us.greenpeace.org
Connection: keep-alive
Referer: https://engage.us.greenpeace.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Sat, 26 Nov 2022 22:22:13 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://engage.us.greenpeace.org
access-control-expose-headers: Request-Context
cache-control: private
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
x-frame-options: SAMEORIGIN
request-context: appId=cid-v1:ccd92c0b-19c7-485c-b607-cbfe2344efa3
content-security-policy: default-src * 'unsafe-eval' 'unsafe-inline' data: blob:
set-cookie: visid_incap_1002065=UwxO+5tfRx6wvhfQnaftGFaRgmMAAAAAQUIPAAAAAADJolLalt/y4JN1fRw/xwrZ; expires=Sun, 26 Nov 2023 22:16:28 GMT; HttpOnly; path=/; Domain=.ngpvan.com
nlbi_1002065=ehecTrxXrxwJOMzA0IOYSwAAAABUkQO+qsihXoPgf76V5Ebd; path=/; Domain=.ngpvan.com
incap_ses_722_1002065=aKWzITl8LCcBAL7nFxAFCpWRgmMAAAAAVQMxNwDzkLgw1Ni+2J3Afw==; path=/; Domain=.ngpvan.com
TiPMix=61.21530145934501; path=/; HttpOnly; Domain=secure.ngpvan.com; Max-Age=3600; Secure; SameSite=None; SameSite=None; Secure
x-ms-routing-name=self; path=/; HttpOnly; Domain=secure.ngpvan.com; Max-Age=3600; Secure; SameSite=None; SameSite=None; Secure
ProfileDatabagId=SpHoPjH0MZqudSy3MM4Of3dc; domain=.ngpvan.com; expires=Fri, 26-Nov-2032 22:22:13 GMT; path=/; Secure; SameSite=None; SameSite=None; Secure
x-cdn: Imperva
x-iinfo: 11-36841804-36841832 NNNN CT(100 206 0) RT(1669501332245 1183) q(0 0 3 0) r(4 4) U11
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash f3424fd0abb5ab18be62cd209cb3d3dc
dbb2a21b12e92c8837c4346b6d052454bb6dffd6
e69548655278cf6a48fce549928656eb5a91d787e7b1afc12959e2bffb58990b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 22:22:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
pixel.quantserve.com/pixel;r=998698584;labels=_fp.event.Default;rf=0;a=p-5X4qAcGHjYwZt;url=https%3A%2F%2Fengage.us.greenpeace.org%2Fonlineactions%2Fun8-YeF_R06GSq7I0_xKNg2%3Femci%3D2c751078-d190-ec11-a507-281878b83d8a%26emdi%3D34751078-d190-ec11-a507-281878b83d8a%26fn%3DKatie%26ln%3DBarden%26em%3Dkatie.barden%2540slurpmail.net%26pc%3D%26hp%3D5074447487%26mp%3D5074567475%26utm_source%3Dea%26utm_medium%3Demail%26utm_campaign%3Dpto_igc4%26sourceid%3D1013359%26ceid%3D2592146;uh=eb045d78d273107348b0300c01d29b7552d622abbc6faf81b3ec55359aa9950c;uht=2;fpan=1;fpa=P0-1801539828-1669501332403;pbc=;ns=0;ce=1;qjs=1;qv=48c6ea86-20221121114006;cm=;gdpr=0;ref=;d=greenpeace.org;dst=0;et=1669501333847;tzo=0;ogl=description.Join%20me%20and%20the%20movement%20to%20Protect%20the%20Oceans!%20Add%20your%20name%20to%20demand%20leaders%20%2Ctype.Add%20Your%20Name%20to%20Support%20the%20Global%20Ocean%20Treaty!%20-%20Greenpeace%2Cimage.https%3A%2F%2Fnvlupin%252Eblob%252Ecore%252Ewindows%252Enet%2Fimages%2Fvan%2FTSM%2FTSMGP%2F1%2F55678%2Fimages%2FGP1SWX%2Csite_name.Greenpeace;ses=fadbed78-6b13-4a96-91aa-53c08f4ae956
200 OK 35 B URL HTTP/2 pixel.quantserve.com/pixel;r=998698584;labels=_fp.event.Default;rf=0;a=p-5X4qAcGHjYwZt;url=https%3A%2F%2Fengage.us.greenpeace.org%2Fonlineactions%2Fun8-YeF_R06GSq7I0_xKNg2%3Femci%3D2c751078-d190-ec11-a507-281878b83d8a%26emdi%3D34751078-d190-ec11-a507-281878b83d8a%26fn%3DKatie%26ln%3DBarden%26em%3Dkatie.barden%2540slurpmail.net%26pc%3D%26hp%3D5074447487%26mp%3D5074567475%26utm_source%3Dea%26utm_medium%3Demail%26utm_campaign%3Dpto_igc4%26sourceid%3D1013359%26ceid%3D2592146;uh=eb045d78d273107348b0300c01d29b7552d622abbc6faf81b3ec55359aa9950c;uht=2;fpan=1;fpa=P0-1801539828-1669501332403;pbc=;ns=0;ce=1;qjs=1;qv=48c6ea86-20221121114006;cm=;gdpr=0;ref=;d=greenpeace.org;dst=0;et=1669501333847;tzo=0;ogl=description.Join%20me%20and%20the%20movement%20to%20Protect%20the%20Oceans!%20Add%20your%20name%20to%20demand%20leaders%20%2Ctype.Add%20Your%20Name%20to%20Support%20the%20Global%20Ocean%20Treaty!%20-%20Greenpeace%2Cimage.https%3A%2F%2Fnvlupin%252Eblob%252Ecore%252Ewindows%252Enet%2Fimages%2Fvan%2FTSM%2FTSMGP%2F1%2F55678%2Fimages%2FGP1SWX%2Csite_name.Greenpeace;ses=fadbed78-6b13-4a96-91aa-53c08f4ae956
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 55d25e9dc950d5db4d53a3b195c046c6
75e91ae3e549dab12ed1c9787ade9131aef1c981
a0d3a0aff7dc3bf32d2176fc3dcda6e7aba2867c4f4d1f7af6355d2cfc6c44f8
GET /pixel;r=998698584;labels=_fp.event.Default;rf=0;a=p-5X4qAcGHjYwZt;url=https%3A%2F%2Fengage.us.greenpeace.org%2Fonlineactions%2Fun8-YeF_R06GSq7I0_xKNg2%3Femci%3D2c751078-d190-ec11-a507-281878b83d8a%26emdi%3D34751078-d190-ec11-a507-281878b83d8a%26fn%3DKatie%26ln%3DBarden%26em%3Dkatie.barden%2540slurpmail.net%26pc%3D%26hp%3D5074447487%26mp%3D5074567475%26utm_source%3Dea%26utm_medium%3Demail%26utm_campaign%3Dpto_igc4%26sourceid%3D1013359%26ceid%3D2592146;uh=eb045d78d273107348b0300c01d29b7552d622abbc6faf81b3ec55359aa9950c;uht=2;fpan=1;fpa=P0-1801539828-1669501332403;pbc=;ns=0;ce=1;qjs=1;qv=48c6ea86-20221121114006;cm=;gdpr=0;ref=;d=greenpeace.org;dst=0;et=1669501333847;tzo=0;ogl=description.Join%20me%20and%20the%20movement%20to%20Protect%20the%20Oceans!%20Add%20your%20name%20to%20demand%20leaders%20%2Ctype.Add%20Your%20Name%20to%20Support%20the%20Global%20Ocean%20Treaty!%20-%20Greenpeace%2Cimage.https%3A%2F%2Fnvlupin%252Eblob%252Ecore%252Ewindows%252Enet%2Fimages%2Fvan%2FTSM%2FTSMGP%2F1%2F55678%2Fimages%2FGP1SWX%2Csite_name.Greenpeace;ses=fadbed78-6b13-4a96-91aa-53c08f4ae956 HTTP/1.1
Host: pixel.quantserve.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engage.us.greenpeace.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 22:22:14 GMT
content-type: image/gif
content-length: 35
cache-control: private, no-cache, no-store, proxy-revalidate
expires: Fri, 04 Aug 1978 12:00:00 GMT
p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAo PSDo OUR SAMa IND COM NAV"
pragma: no-cache
set-cookie: mc=63829196-02063-86022-31a6c; expires=Wed, 27-Dec-2023 22:22:14 GMT; path=/; domain=.quantserve.com
X-Firefox-Spdy: h2
www.facebook.com/tr/?id=1055834218174209&ev=PageView&dl=https%3A%2F%2Fengage.us.greenpeace.org%2Fonlineactions%2Fun8-YeF_R06GSq7I0_xKNg2%3Femci%3D2c751078-d190-ec11-a507-281878b83d8a%26emdi%3D34751078-d190-ec11-a507-281878b83d8a%26fn%3DKatie%26ln%3DBarden%26em%3Dkatie.barden%2540slurpmail.net%26pc%3D%26hp%3D5074447487%26mp%3D5074567475%26utm_source%3Dea%26utm_medium%3Demail%26utm_campaign%3Dpto_igc4%26sourceid%3D1013359%26ceid%3D2592146&rl=&if=false&ts=1669501334006&sw=1280&sh=1024&v=2.9.89&r=stable&ec=0&o=30&fbp=fb.1.1669501334005.66778418&it=1669501333838&coo=false&rqm=GET
200 OK 0 B URL HTTP/2 www.facebook.com/tr/?id=1055834218174209&ev=PageView&dl=https%3A%2F%2Fengage.us.greenpeace.org%2Fonlineactions%2Fun8-YeF_R06GSq7I0_xKNg2%3Femci%3D2c751078-d190-ec11-a507-281878b83d8a%26emdi%3D34751078-d190-ec11-a507-281878b83d8a%26fn%3DKatie%26ln%3DBarden%26em%3Dkatie.barden%2540slurpmail.net%26pc%3D%26hp%3D5074447487%26mp%3D5074567475%26utm_source%3Dea%26utm_medium%3Demail%26utm_campaign%3Dpto_igc4%26sourceid%3D1013359%26ceid%3D2592146&rl=&if=false&ts=1669501334006&sw=1280&sh=1024&v=2.9.89&r=stable&ec=0&o=30&fbp=fb.1.1669501334005.66778418&it=1669501333838&coo=false&rqm=GET
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=1055834218174209&ev=PageView&dl=https%3A%2F%2Fengage.us.greenpeace.org%2Fonlineactions%2Fun8-YeF_R06GSq7I0_xKNg2%3Femci%3D2c751078-d190-ec11-a507-281878b83d8a%26emdi%3D34751078-d190-ec11-a507-281878b83d8a%26fn%3DKatie%26ln%3DBarden%26em%3Dkatie.barden%2540slurpmail.net%26pc%3D%26hp%3D5074447487%26mp%3D5074567475%26utm_source%3Dea%26utm_medium%3Demail%26utm_campaign%3Dpto_igc4%26sourceid%3D1013359%26ceid%3D2592146&rl=&if=false&ts=1669501334006&sw=1280&sh=1024&v=2.9.89&r=stable&ec=0&o=30&fbp=fb.1.1669501334005.66778418&it=1669501333838&coo=false&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engage.us.greenpeace.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Sat, 26 Nov 2022 22:22:14 GMT
X-Firefox-Spdy: h2
tags.srv.stackadapt.com/sa.jpeg
200 OK 651 B URL HTTP/1.1 tags.srv.stackadapt.com/sa.jpeg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 1x1, components 3\012- data
Hash c1688c2ea5d2309aa4321586d83a05fd
f59ec6d00c731e13e2b5f84ea06c4416a42fee37
094b6d855d01f8871f93335350409aa997cc5c5a7a66792af7fc646e17c5a912
GET /sa.jpeg HTTP/1.1
Host: tags.srv.stackadapt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://engage.us.greenpeace.org/
Origin: https://engage.us.greenpeace.org
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Cache-Control: only-if-cached, no-transform, private, max-age=7776000
Content-Type: image/jpeg
Date: Sat, 26 Nov 2022 22:22:14 GMT
Content-Length: 651
Connection: keep-alive
ww.steelhousemedia.com/gs
200 OK 144 B URL HTTP/1.1 ww.steelhousemedia.com/gs
IP
File type ASCII text, with no line terminators
Hash 6ad91ba9b153815a9519f92f9360a589
ab7566df9e73d376cd3c3ddd1c43a09c14f1cae0
696f751b139fa900c8b91c1719a64d6f1dec716bfd400195e8aceedc34246b09
GET /gs HTTP/1.1
Host: ww.steelhousemedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engage.us.greenpeace.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
date: Sat, 26 Nov 2022 22:22:14 GMT
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, x-requested-with, X-Custom-Header
x-application-context: application:prod:8080
content-type: application/javascript;charset=utf-8
p3p: CP="NON DSP COR NID CURa ADMa DEVa PSAa PSDa OUR STP UNI COM NAV INT STA PRE"
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jan 1970 00:00:00 GMT
content-length: 144
x-envoy-upstream-service-time: 0
server: istio-envoy
connection: close
ocsp.globalsign.com/gsgccr3dvtlsca2020
200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsgccr3dvtlsca2020
IP
Hash 57cf3ef0131139d754163e870c20f252
baba772957cb87d153f6dc31b37f365d0003b862
2a4eff25f99c2ccc7f2fd6640ae733a39729877a50df30d3e743f5beed4021f3
POST /gsgccr3dvtlsca2020 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 26 Nov 2022 22:22:16 GMT
Content-Type: application/ocsp-response
Content-Length: 1414
Connection: keep-alive
Expires: Wed, 30 Nov 2022 19:04:10 GMT
ETag: "baba772957cb87d153f6dc31b37f365d0003b862"
Last-Modified: Sat, 26 Nov 2022 19:04:11 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 880
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 77060596c8121bfa-OSL
ocsp.globalsign.com/gsgccr3dvtlsca2020
200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsgccr3dvtlsca2020
IP
Hash 57cf3ef0131139d754163e870c20f252
baba772957cb87d153f6dc31b37f365d0003b862
2a4eff25f99c2ccc7f2fd6640ae733a39729877a50df30d3e743f5beed4021f3
POST /gsgccr3dvtlsca2020 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 26 Nov 2022 22:22:16 GMT
Content-Type: application/ocsp-response
Content-Length: 1414
Connection: keep-alive
Expires: Wed, 30 Nov 2022 19:04:10 GMT
ETag: "baba772957cb87d153f6dc31b37f365d0003b862"
Last-Modified: Sat, 26 Nov 2022 19:04:11 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 880
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 77060596e8391bfa-OSL
px.steelhousemedia.com/st?ga_tracking_id=UA-84485273-1&ga_client_id=846543259.1669501332&shpt=Add%20Your%20Name%20to%20Support%20the%20Global%20Ocean%20Treaty!%20-%20Greenpeace&ga_info=%7B%22status%22%3A%22OK%22%2C%22ga_tracking_id%22%3A%22UA-84485273-1%22%2C%22ga_client_id%22%3A%22846543259.1669501332%22%2C%22shpt%22%3A%22Add%20Your%20Name%20to%20Support%20the%20Global%20Ocean%20Treaty!%20-%20Greenpeace%22%2C%22dcm_cid%22%3A%221669501331.1%22%2C%22dcm_gid%22%3A%22125051171.1669501332%22%2C%22ga_utm_campaign%22%3A%22pto_igc4%22%2C%22ga_utm_source%22%3A%22ea%22%2C%22ga_utm_medium%22%3A%22email%22%2C%22mntnis%22%3A%227f0yJU9ikoV76X4ssbjbx0PE4ynn6HAz%22%2C%22execution_workflow%22%3A%7B%22iteration%22%3A6%2C%22shpt%22%3A%22OK%22%2C%22dcm_cid%22%3A%22OK%22%2C%22dcm_gid%22%3A%22OK%22%2C%22ga_utm_campaign%22%3A%22OK%22%2C%22ga_utm_source%22%3A%22OK%22%2C%22ga_utm_medium%22%3A%22OK%22%7D%7D&dcm_cid=1669501331.1&dcm_gid=125051171.1669501332&dxver=4.0.0&shaid=31488&plh=https%3A%2F%2Fengage.us.greenpeace.org%2Fonlineactions%2Fun8-YeF_R06GSq7I0_xKNg2%3Femci%3D2c751078-d190-ec11-a507-281878b83d8a%26emdi%3D34751078-d190-ec11-a507-281878b83d8a%26fn%3DKatie%26ln%3DBarden%26em%3Dkatie.barden%2540slurpmail.net%26pc%3D%26hp%3D5074447487%26mp%3D5074567475%26utm_source%3Dea%26utm_medium%3Demail%26utm_campaign%3Dpto_igc4%26sourceid%3D1013359%26ceid%3D2592146&cb=57237621534353976term%3Dvalue&shadditional=googletagmanager%3Dtrue%2Cga4%3Dtrue
200 OK 1.4 kB URL HTTP/1.1 px.steelhousemedia.com/st?ga_tracking_id=UA-84485273-1&ga_client_id=846543259.1669501332&shpt=Add%20Your%20Name%20to%20Support%20the%20Global%20Ocean%20Treaty!%20-%20Greenpeace&ga_info=%7B%22status%22%3A%22OK%22%2C%22ga_tracking_id%22%3A%22UA-84485273-1%22%2C%22ga_client_id%22%3A%22846543259.1669501332%22%2C%22shpt%22%3A%22Add%20Your%20Name%20to%20Support%20the%20Global%20Ocean%20Treaty!%20-%20Greenpeace%22%2C%22dcm_cid%22%3A%221669501331.1%22%2C%22dcm_gid%22%3A%22125051171.1669501332%22%2C%22ga_utm_campaign%22%3A%22pto_igc4%22%2C%22ga_utm_source%22%3A%22ea%22%2C%22ga_utm_medium%22%3A%22email%22%2C%22mntnis%22%3A%227f0yJU9ikoV76X4ssbjbx0PE4ynn6HAz%22%2C%22execution_workflow%22%3A%7B%22iteration%22%3A6%2C%22shpt%22%3A%22OK%22%2C%22dcm_cid%22%3A%22OK%22%2C%22dcm_gid%22%3A%22OK%22%2C%22ga_utm_campaign%22%3A%22OK%22%2C%22ga_utm_source%22%3A%22OK%22%2C%22ga_utm_medium%22%3A%22OK%22%7D%7D&dcm_cid=1669501331.1&dcm_gid=125051171.1669501332&dxver=4.0.0&shaid=31488&plh=https%3A%2F%2Fengage.us.greenpeace.org%2Fonlineactions%2Fun8-YeF_R06GSq7I0_xKNg2%3Femci%3D2c751078-d190-ec11-a507-281878b83d8a%26emdi%3D34751078-d190-ec11-a507-281878b83d8a%26fn%3DKatie%26ln%3DBarden%26em%3Dkatie.barden%2540slurpmail.net%26pc%3D%26hp%3D5074447487%26mp%3D5074567475%26utm_source%3Dea%26utm_medium%3Demail%26utm_campaign%3Dpto_igc4%26sourceid%3D1013359%26ceid%3D2592146&cb=57237621534353976term%3Dvalue&shadditional=googletagmanager%3Dtrue%2Cga4%3Dtrue
IP
Hash 07130643684071c01d7f42b0438ab4b2
32d9c170644435fac938ace6680cfd3c465043b6
3d0df9042b3b3dc727ef9016bd895e2ac0ca451ba874dd16972a33b8e5dfa071
GET /st?ga_tracking_id=UA-84485273-1&ga_client_id=846543259.1669501332&shpt=Add%20Your%20Name%20to%20Support%20the%20Global%20Ocean%20Treaty!%20-%20Greenpeace&ga_info=%7B%22status%22%3A%22OK%22%2C%22ga_tracking_id%22%3A%22UA-84485273-1%22%2C%22ga_client_id%22%3A%22846543259.1669501332%22%2C%22shpt%22%3A%22Add%20Your%20Name%20to%20Support%20the%20Global%20Ocean%20Treaty!%20-%20Greenpeace%22%2C%22dcm_cid%22%3A%221669501331.1%22%2C%22dcm_gid%22%3A%22125051171.1669501332%22%2C%22ga_utm_campaign%22%3A%22pto_igc4%22%2C%22ga_utm_source%22%3A%22ea%22%2C%22ga_utm_medium%22%3A%22email%22%2C%22mntnis%22%3A%227f0yJU9ikoV76X4ssbjbx0PE4ynn6HAz%22%2C%22execution_workflow%22%3A%7B%22iteration%22%3A6%2C%22shpt%22%3A%22OK%22%2C%22dcm_cid%22%3A%22OK%22%2C%22dcm_gid%22%3A%22OK%22%2C%22ga_utm_campaign%22%3A%22OK%22%2C%22ga_utm_source%22%3A%22OK%22%2C%22ga_utm_medium%22%3A%22OK%22%7D%7D&dcm_cid=1669501331.1&dcm_gid=125051171.1669501332&dxver=4.0.0&shaid=31488&plh=https%3A%2F%2Fengage.us.greenpeace.org%2Fonlineactions%2Fun8-YeF_R06GSq7I0_xKNg2%3Femci%3D2c751078-d190-ec11-a507-281878b83d8a%26emdi%3D34751078-d190-ec11-a507-281878b83d8a%26fn%3DKatie%26ln%3DBarden%26em%3Dkatie.barden%2540slurpmail.net%26pc%3D%26hp%3D5074447487%26mp%3D5074567475%26utm_source%3Dea%26utm_medium%3Demail%26utm_campaign%3Dpto_igc4%26sourceid%3D1013359%26ceid%3D2592146&cb=57237621534353976term%3Dvalue&shadditional=googletagmanager%3Dtrue%2Cga4%3Dtrue HTTP/1.1
Host: px.steelhousemedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engage.us.greenpeace.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
date: Sat, 26 Nov 2022 22:22:14 GMT
content-type: application/javascript;charset=utf-8
access-control-allow-origin: *
p3p: CP="NON DSP COR NID CURa ADMa DEVa PSAa PSDa OUR STP UNI COM NAV INT STA PRE"
set-cookie: guid=c77859e3-6dd8-11ed-a44a-831053dee537;Domain=steelhousemedia.com;Max-Age=63113852;Path=/;SameSite=None;Secure
content-encoding: gzip
connection: close
ocsp.digicert.com/
200 OK 471 B IP
Hash 62e6d568f83cbed0627d11a2f186c60e
c130e28cc6e9891cf6be0af325a5864826b9dbd5
7578ed4d45343147688ced1d3e79442c99010c7baca982fe1db4fa855e3af89a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3816
Cache-Control: max-age=120631
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 22:22:16 GMT
Etag: "6381b6e7-1d7"
Expires: Mon, 28 Nov 2022 07:52:47 GMT
Last-Modified: Sat, 26 Nov 2022 06:49:11 GMT
Server: ECS (ska/F70A)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 471 B IP
Hash 62e6d568f83cbed0627d11a2f186c60e
c130e28cc6e9891cf6be0af325a5864826b9dbd5
7578ed4d45343147688ced1d3e79442c99010c7baca982fe1db4fa855e3af89a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3816
Cache-Control: max-age=120631
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 22:22:16 GMT
Etag: "6381b6e7-1d7"
Expires: Mon, 28 Nov 2022 07:52:47 GMT
Last-Modified: Sat, 26 Nov 2022 06:49:11 GMT
Server: ECS (ska/F70A)
X-Cache: HIT
Content-Length: 471
px.steelhousemedia.com/st?ga_tracking_id=UA-84485273-1&ga_client_id=846543259.1669501332&shpt=Add%20Your%20Name%20to%20Support%20the%20Global%20Ocean%20Treaty!%20-%20Greenpeace&ga_info=%7B%22status%22%3A%22OK%22%2C%22ga_tracking_id%22%3A%22UA-84485273-1%22%2C%22ga_client_id%22%3A%22846543259.1669501332%22%2C%22shpt%22%3A%22Add%20Your%20Name%20to%20Support%20the%20Global%20Ocean%20Treaty!%20-%20Greenpeace%22%2C%22dcm_cid%22%3A%221669501331.1%22%2C%22dcm_gid%22%3A%22125051171.1669501332%22%2C%22ga_utm_campaign%22%3A%22pto_igc4%22%2C%22ga_utm_source%22%3A%22ea%22%2C%22ga_utm_medium%22%3A%22email%22%2C%22mntnis%22%3A%227f0yJU9ikoV76X4ssbjbx0PE4ynn6HAz%22%2C%22execution_workflow%22%3A%7B%22iteration%22%3A6%2C%22shpt%22%3A%22OK%22%2C%22dcm_cid%22%3A%22OK%22%2C%22dcm_gid%22%3A%22OK%22%2C%22ga_utm_campaign%22%3A%22OK%22%2C%22ga_utm_source%22%3A%22OK%22%2C%22ga_utm_medium%22%3A%22OK%22%7D%7D&dcm_cid=1669501331.1&dcm_gid=125051171.1669501332&dxver=4.0.0&shaid=31488&plh=https%3A%2F%2Fengage.us.greenpeace.org%2Fonlineactions%2Fun8-YeF_R06GSq7I0_xKNg2%3Femci%3D2c751078-d190-ec11-a507-281878b83d8a%26emdi%3D34751078-d190-ec11-a507-281878b83d8a%26fn%3DKatie%26ln%3DBarden%26em%3Dkatie.barden%2540slurpmail.net%26pc%3D%26hp%3D5074447487%26mp%3D5074567475%26utm_source%3Dea%26utm_medium%3Demail%26utm_campaign%3Dpto_igc4%26sourceid%3D1013359%26ceid%3D2592146&shadditional=googletagmanager%3Dtrue%2Cga4%3Dtrue&cb=1669501334528186&shguid=35b0bce9-d250-329d-b012-c0426f88d0bd&shgts=1669501335230
200 OK 1.5 kB URL HTTP/1.1 px.steelhousemedia.com/st?ga_tracking_id=UA-84485273-1&ga_client_id=846543259.1669501332&shpt=Add%20Your%20Name%20to%20Support%20the%20Global%20Ocean%20Treaty!%20-%20Greenpeace&ga_info=%7B%22status%22%3A%22OK%22%2C%22ga_tracking_id%22%3A%22UA-84485273-1%22%2C%22ga_client_id%22%3A%22846543259.1669501332%22%2C%22shpt%22%3A%22Add%20Your%20Name%20to%20Support%20the%20Global%20Ocean%20Treaty!%20-%20Greenpeace%22%2C%22dcm_cid%22%3A%221669501331.1%22%2C%22dcm_gid%22%3A%22125051171.1669501332%22%2C%22ga_utm_campaign%22%3A%22pto_igc4%22%2C%22ga_utm_source%22%3A%22ea%22%2C%22ga_utm_medium%22%3A%22email%22%2C%22mntnis%22%3A%227f0yJU9ikoV76X4ssbjbx0PE4ynn6HAz%22%2C%22execution_workflow%22%3A%7B%22iteration%22%3A6%2C%22shpt%22%3A%22OK%22%2C%22dcm_cid%22%3A%22OK%22%2C%22dcm_gid%22%3A%22OK%22%2C%22ga_utm_campaign%22%3A%22OK%22%2C%22ga_utm_source%22%3A%22OK%22%2C%22ga_utm_medium%22%3A%22OK%22%7D%7D&dcm_cid=1669501331.1&dcm_gid=125051171.1669501332&dxver=4.0.0&shaid=31488&plh=https%3A%2F%2Fengage.us.greenpeace.org%2Fonlineactions%2Fun8-YeF_R06GSq7I0_xKNg2%3Femci%3D2c751078-d190-ec11-a507-281878b83d8a%26emdi%3D34751078-d190-ec11-a507-281878b83d8a%26fn%3DKatie%26ln%3DBarden%26em%3Dkatie.barden%2540slurpmail.net%26pc%3D%26hp%3D5074447487%26mp%3D5074567475%26utm_source%3Dea%26utm_medium%3Demail%26utm_campaign%3Dpto_igc4%26sourceid%3D1013359%26ceid%3D2592146&shadditional=googletagmanager%3Dtrue%2Cga4%3Dtrue&cb=1669501334528186&shguid=35b0bce9-d250-329d-b012-c0426f88d0bd&shgts=1669501335230
IP
Hash 85738cb6ce6393d14b3c4c50ede9f887
29f776610cae3fad221894cfba00904978b05c22
34e9208af227b28faad532545f11287e68731a7cd0206c76057d63ca28aeb4cc
GET /st?ga_tracking_id=UA-84485273-1&ga_client_id=846543259.1669501332&shpt=Add%20Your%20Name%20to%20Support%20the%20Global%20Ocean%20Treaty!%20-%20Greenpeace&ga_info=%7B%22status%22%3A%22OK%22%2C%22ga_tracking_id%22%3A%22UA-84485273-1%22%2C%22ga_client_id%22%3A%22846543259.1669501332%22%2C%22shpt%22%3A%22Add%20Your%20Name%20to%20Support%20the%20Global%20Ocean%20Treaty!%20-%20Greenpeace%22%2C%22dcm_cid%22%3A%221669501331.1%22%2C%22dcm_gid%22%3A%22125051171.1669501332%22%2C%22ga_utm_campaign%22%3A%22pto_igc4%22%2C%22ga_utm_source%22%3A%22ea%22%2C%22ga_utm_medium%22%3A%22email%22%2C%22mntnis%22%3A%227f0yJU9ikoV76X4ssbjbx0PE4ynn6HAz%22%2C%22execution_workflow%22%3A%7B%22iteration%22%3A6%2C%22shpt%22%3A%22OK%22%2C%22dcm_cid%22%3A%22OK%22%2C%22dcm_gid%22%3A%22OK%22%2C%22ga_utm_campaign%22%3A%22OK%22%2C%22ga_utm_source%22%3A%22OK%22%2C%22ga_utm_medium%22%3A%22OK%22%7D%7D&dcm_cid=1669501331.1&dcm_gid=125051171.1669501332&dxver=4.0.0&shaid=31488&plh=https%3A%2F%2Fengage.us.greenpeace.org%2Fonlineactions%2Fun8-YeF_R06GSq7I0_xKNg2%3Femci%3D2c751078-d190-ec11-a507-281878b83d8a%26emdi%3D34751078-d190-ec11-a507-281878b83d8a%26fn%3DKatie%26ln%3DBarden%26em%3Dkatie.barden%2540slurpmail.net%26pc%3D%26hp%3D5074447487%26mp%3D5074567475%26utm_source%3Dea%26utm_medium%3Demail%26utm_campaign%3Dpto_igc4%26sourceid%3D1013359%26ceid%3D2592146&shadditional=googletagmanager%3Dtrue%2Cga4%3Dtrue&cb=1669501334528186&shguid=35b0bce9-d250-329d-b012-c0426f88d0bd&shgts=1669501335230 HTTP/1.1
Host: px.steelhousemedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engage.us.greenpeace.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
date: Sat, 26 Nov 2022 22:22:15 GMT
content-type: application/javascript;charset=utf-8
access-control-allow-origin: *
p3p: CP="NON DSP COR NID CURa ADMa DEVa PSAa PSDa OUR STP UNI COM NAV INT STA PRE"
set-cookie: rt="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";Domain=steelhousemedia.com;Max-Age=63113852;Path=/;SameSite=None;Secure
guid=35b0bce9-d250-329d-b012-c0426f88d0bd;Domain=steelhousemedia.com;Max-Age=63113852;Path=/;SameSite=None;Secure
content-encoding: gzip
connection: close
tr.snapchat.com/p?pid=9144f2f1-18b0-455c-af1d-3afd58e994cd&ev=PAGE_VIEW&intg=gtm&pl=https%3A%2F%2Fengage.us.greenpeace.org%2Fonlineactions%2Fun8-YeF_R06GSq7I0_xKNg2%3Femci%3D2c751078-d190-ec11-a507-281878b83d8a%26emdi%3D34751078-d190-ec11-a507-281878b83d8a%26fn%3DKatie%26ln%3DBarden%26em%3Dkatie.barden%2540slurpmail.net%26pc%3D%26hp%3D5074447487%26mp%3D5074567475%26utm_source%3Dea%26utm_medium%3Demail%26utm_campaign%3Dpto_igc4%26sourceid%3D1013359%26ceid%3D2592146&bt=1d53c387&if=false&m_dcl=2487&m_fcps=1547&m_pi=2479&m_pl=6467&m_pv=v2&m_rd=6527&m_sl=2053&rf=&trackId=5f0bfff8-a40b-47a3-ab76-19e9ac5853ae&ts=1669501336178&u_c1=5a5e6f4e-5b53-4acf-8719-ec0b83ee1867&u_sclid=3adfe871-4d94-41de-9d65-2d2cea8ae642&u_scsid=f74b22af-0612-4514-9dff-ab25e8216772&v=2.0.0
200 OK 68 B URL HTTP/2 tr.snapchat.com/p?pid=9144f2f1-18b0-455c-af1d-3afd58e994cd&ev=PAGE_VIEW&intg=gtm&pl=https%3A%2F%2Fengage.us.greenpeace.org%2Fonlineactions%2Fun8-YeF_R06GSq7I0_xKNg2%3Femci%3D2c751078-d190-ec11-a507-281878b83d8a%26emdi%3D34751078-d190-ec11-a507-281878b83d8a%26fn%3DKatie%26ln%3DBarden%26em%3Dkatie.barden%2540slurpmail.net%26pc%3D%26hp%3D5074447487%26mp%3D5074567475%26utm_source%3Dea%26utm_medium%3Demail%26utm_campaign%3Dpto_igc4%26sourceid%3D1013359%26ceid%3D2592146&bt=1d53c387&if=false&m_dcl=2487&m_fcps=1547&m_pi=2479&m_pl=6467&m_pv=v2&m_rd=6527&m_sl=2053&rf=&trackId=5f0bfff8-a40b-47a3-ab76-19e9ac5853ae&ts=1669501336178&u_c1=5a5e6f4e-5b53-4acf-8719-ec0b83ee1867&u_sclid=3adfe871-4d94-41de-9d65-2d2cea8ae642&u_scsid=f74b22af-0612-4514-9dff-ab25e8216772&v=2.0.0
IP
File type PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash c4a2b870062c2bb98c500bc1526c0498
528666ccdb12997358077bc8fcdbfb6b825c7788
2aa4fa20701cdd6d8d56046069001186b5267e3ee7d0ef618ad2f4a683723e11
GET /p?pid=9144f2f1-18b0-455c-af1d-3afd58e994cd&ev=PAGE_VIEW&intg=gtm&pl=https%3A%2F%2Fengage.us.greenpeace.org%2Fonlineactions%2Fun8-YeF_R06GSq7I0_xKNg2%3Femci%3D2c751078-d190-ec11-a507-281878b83d8a%26emdi%3D34751078-d190-ec11-a507-281878b83d8a%26fn%3DKatie%26ln%3DBarden%26em%3Dkatie.barden%2540slurpmail.net%26pc%3D%26hp%3D5074447487%26mp%3D5074567475%26utm_source%3Dea%26utm_medium%3Demail%26utm_campaign%3Dpto_igc4%26sourceid%3D1013359%26ceid%3D2592146&bt=1d53c387&if=false&m_dcl=2487&m_fcps=1547&m_pi=2479&m_pl=6467&m_pv=v2&m_rd=6527&m_sl=2053&rf=&trackId=5f0bfff8-a40b-47a3-ab76-19e9ac5853ae&ts=1669501336178&u_c1=5a5e6f4e-5b53-4acf-8719-ec0b83ee1867&u_sclid=3adfe871-4d94-41de-9d65-2d2cea8ae642&u_scsid=f74b22af-0612-4514-9dff-ab25e8216772&v=2.0.0 HTTP/1.1
Host: tr.snapchat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engage.us.greenpeace.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 22:22:16 GMT
access-control-allow-origin: *
cache-control: no-cache, no-transform
set-cookie: sc_at=v2|H4sIAAAAAAAAAAXBgQ0AIAgDsItIwCnRc5DhFRxv68Xi4paDAZkvQuJOE4Y+ApuZ6Db3s9QAb/0J6YnEMgAAAA==;SameSite=None;Version=1;Comment=;Domain=.snapchat.com;Path=/;Max-Age=33696000;Secure
content-type: image/png
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-length: 68
x-envoy-upstream-service-time: 1
server: API Gateway
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 62e6d568f83cbed0627d11a2f186c60e
c130e28cc6e9891cf6be0af325a5864826b9dbd5
7578ed4d45343147688ced1d3e79442c99010c7baca982fe1db4fa855e3af89a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3816
Cache-Control: max-age=120631
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 22:22:16 GMT
Etag: "6381b6e7-1d7"
Expires: Mon, 28 Nov 2022 07:52:47 GMT
Last-Modified: Sat, 26 Nov 2022 06:49:11 GMT
Server: ECS (ska/F70A)
X-Cache: HIT
Content-Length: 471
dc.services.visualstudio.com/v2/track
200 OK 0 B URL HTTP/2 dc.services.visualstudio.com/v2/track
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /v2/track HTTP/1.1
Host: dc.services.visualstudio.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,sdk-context
Referer: https://engage.us.greenpeace.org/
Origin: https://engage.us.greenpeace.org
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-methods: POST
access-control-allow-headers: Origin, X-Requested-With, Content-Name, Content-Type, Accept, Sdk-Context
access-control-allow-origin: *
access-control-max-age: 3600
x-content-type-options: nosniff
date: Sat, 26 Nov 2022 22:22:15 GMT
content-length: 0
X-Firefox-Spdy: h2
dc.services.visualstudio.com/v2/track
200 OK 98 B URL HTTP/2 dc.services.visualstudio.com/v2/track
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type JSON data\012- , ASCII text, with no line terminators
Hash 8cd26d790d17150409a2cf787f0fd331
87823c0258aa46566c877f49cb5fb66725f7e58a
24fb52b3ef7bd7e4d3d97d454197bc817be04d1d0dc0882ee59ab946fab2d158
POST /v2/track HTTP/1.1
Host: dc.services.visualstudio.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/json
Sdk-Context: appId
Content-Length: 43397
Origin: https://engage.us.greenpeace.org
Connection: keep-alive
Referer: https://engage.us.greenpeace.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
x-ms-session-id: 3FA7469F-A3A7-4098-A9EF-A951704FF896
strict-transport-security: max-age=31536000
access-control-allow-headers: Origin, X-Requested-With, Content-Name, Content-Type, Accept, Cache-Control, Sdk-Context
access-control-allow-origin: *
access-control-max-age: 3600
x-content-type-options: nosniff
date: Sat, 26 Nov 2022 22:22:15 GMT
content-length: 98
X-Firefox-Spdy: h2
dc.services.visualstudio.com/v2/track
200 OK 49 B URL HTTP/2 dc.services.visualstudio.com/v2/track
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type JSON data\012- , ASCII text, with no line terminators
Hash c7786b0a0bbc5001f070e66fe91b816c
c4696b3bf57159fd00863f7c14f20428a792e776
fc7b7e92726f4f516f4fa4710b1af4fdfa32580b2654a774bf96e45c147c096a
POST /v2/track HTTP/1.1
Host: dc.services.visualstudio.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=utf-8
Content-Length: 1436
Origin: https://engage.us.greenpeace.org
Connection: keep-alive
Referer: https://engage.us.greenpeace.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
x-ms-session-id: CA617640-0FA8-4E0D-9DA5-F556C55216CC
strict-transport-security: max-age=31536000
access-control-allow-headers: Origin, X-Requested-With, Content-Name, Content-Type, Accept, Cache-Control, Sdk-Context
access-control-allow-origin: *
access-control-max-age: 3600
x-content-type-options: nosniff
date: Sat, 26 Nov 2022 22:22:18 GMT
content-length: 49
X-Firefox-Spdy: h2
tr.snapchat.com/collector/is_enabled?pids=9144f2f1-18b0-455c-af1d-3afd58e994cd&tld=org
200 OK 0 B URL HTTP/2 tr.snapchat.com/collector/is_enabled?pids=9144f2f1-18b0-455c-af1d-3afd58e994cd&tld=org
IP
GET /collector/is_enabled?pids=9144f2f1-18b0-455c-af1d-3afd58e994cd&tld=org HTTP/1.1
Host: tr.snapchat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://engage.us.greenpeace.org
Connection: keep-alive
Referer: https://engage.us.greenpeace.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 26 Nov 2022 22:22:16 GMT
access-control-allow-origin: https://engage.us.greenpeace.org
content-type: application/json
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-envoy-upstream-service-time: 0
content-encoding: gzip
vary: Accept-Encoding
server: API Gateway
access-control-allow-credentials: true
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
secure.quantserve.com/quant.js
200 OK 0 B URL HTTP/2 secure.quantserve.com/quant.js
IP
GET /quant.js HTTP/1.1
Host: secure.quantserve.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engage.us.greenpeace.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 26 Nov 2022 22:22:12 GMT
content-type: application/javascript
accept-ranges: bytes
cache-control: private, max-age=604800
content-encoding: gzip
etag: "nAbmxtqHqaYrwBiADJAeFg=="
expires: Sat, 03 Dec 2022 22:22:12 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
widgets.guidestar.org/TransparencySeal/8441673
200 OK 0 B URL HTTP/2 widgets.guidestar.org/TransparencySeal/8441673
IP
GET /TransparencySeal/8441673 HTTP/1.1
Host: widgets.guidestar.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engage.us.greenpeace.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 22:22:12 GMT
content-type: image/svg+xml
set-cookie: AWSALB=xXtqYKpPFOlhIjJgSKMg5x/3v8rq9JXDW8cfUzLMIIiks8lQDBgzSQHuP9PGjxuIv8AVs3IUO2yDLUVt7lo+9TD8wpo8eKHxSkI4DGEsscTz33Ga+DCq0kmbvWHU; Expires=Sat, 03 Dec 2022 22:22:11 GMT; Path=/
AWSALBCORS=xXtqYKpPFOlhIjJgSKMg5x/3v8rq9JXDW8cfUzLMIIiks8lQDBgzSQHuP9PGjxuIv8AVs3IUO2yDLUVt7lo+9TD8wpo8eKHxSkI4DGEsscTz33Ga+DCq0kmbvWHU; Expires=Sat, 03 Dec 2022 22:22:11 GMT; Path=/; SameSite=None; Secure
cache-control: no-cache
pragma: no-cache
expires: -1
x-aspnet-version: 4.0.30319
x-powered-by: ASP.NET
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7706057a5d51b529-OSL
content-encoding: br
X-Firefox-Spdy: h2
rules.quantcount.com/rules-p-5X4qAcGHjYwZt.js
200 OK 0 B URL HTTP/2 rules.quantcount.com/rules-p-5X4qAcGHjYwZt.js
IP
GET /rules-p-5X4qAcGHjYwZt.js HTTP/1.1
Host: rules.quantcount.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://engage.us.greenpeace.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
last-modified: Thu, 13 Oct 2022 22:20:50 GMT
x-amz-server-side-encryption: AES256
server: AmazonS3
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
access-control-allow-methods: GET
content-encoding: gzip
date: Sat, 26 Nov 2022 22:22:13 GMT
cache-control: max-age=3600
etag: W/"19a677fbd3b251be918a5e3594109129"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 784cb0c259a6d79800d037bda4e7de86.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Qu90mOj-aiICc2JJ9hq0si7ZZ_aMlIrKaTJNQnQHToaQB0tMsvqMyQ==
age: 1745
X-Firefox-Spdy: h2
45.60.33.183
66.155.71.150
52.236.186.216
31.13.72.12
23.36.76.226
104.18.32.68