www.buildinglink.com/
302 Found 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: www.buildinglink.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
Date: Wed, 23 Nov 2022 18:21:59 GMT
Content-Length: 0
Connection: keep-alive
Location: https://www.buildinglink.com/
CF-Cache-Status: DYNAMIC
Set-Cookie: __cflb=02DiuDXvJ1dKekvY3orry22HB3MMHGLG5XSa2CdAgjsXJ; SameSite=Lax; path=/; expires=Thu, 24-Nov-22 17:21:59 GMT; HttpOnly
Server: cloudflare
CF-RAY: 76ebed7feaf4b500-OSL
alt-svc: h2=":443"; ma=60
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1456357aecbd23f21ad98da57e0127eb
7074815b39fa8da9013883971d665e4c1b0797ea
f3eba265ee64870b2f822f1511b36c747d763c382557789cdad8be1d3b52d1f5
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F3EBA265EE64870B2F822F1511B36C747D763C382557789CDAD8BE1D3B52D1F5"
Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4767
Expires: Wed, 23 Nov 2022 19:41:26 GMT
Date: Wed, 23 Nov 2022 18:21:59 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash 770d09773b5f304acf141fd66a4862b4
5ddc46ab75de26c858a9a6f6d1beaaec9bb181f5
c7bcc6928fa1c0bb225ce8a2f6badd6cb1bd6ea002fb808ed34e8dafbd7b3b26
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5936
Cache-Control: max-age=150493
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 18:21:59 GMT
Etag: "637df674-1d7"
Expires: Fri, 25 Nov 2022 12:10:12 GMT
Last-Modified: Wed, 23 Nov 2022 10:31:16 GMT
Server: ECS (ska/F711)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 054ff0d1a0a43f7cb1d78dbd34e27f99
3caf54f3de1d6a8c6f6454083f8b8e7dec77db54
fcdcef8306ae31f20c366489e1f88aa40b08f154d25d45f4055c4f8cdef47634
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FCDCEF8306AE31F20C366489E1F88AA40B08F154D25D45F4055C4F8CDEF47634"
Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6560
Expires: Wed, 23 Nov 2022 20:11:19 GMT
Date: Wed, 23 Nov 2022 18:21:59 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 4d7e4eed097b9c4e5d509419f1cfc85a
290bb3d428a7c6330e2e3d73a952b16f820896c8
0dc9ca0f57af15adcd416035e92794711434e3d53a1feff21d8481d6d500986c
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Content-Length, Alert, Backoff, Retry-After
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Wed, 23 Nov 2022 18:17:09 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 290
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: g83ewIqWp7Ms3Vz7hjIjkIblSuuRwPTc9TOkZwhRs+iD9BgPudZVEf4OCgd25fksf1J5z8Arl4Y=
x-amz-request-id: BSY9EDSTHDR4JQXW
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Wed, 23 Nov 2022 17:43:04 GMT
age: 2335
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 23 Nov 2022 18:21:59 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash 5ede4e99a5cd2c17b9037b73498f230c
58e91961c4f2f65d09e9f869e128ec69fd6189d7
44fbf85bf288379005b8de97e699c6d540740deb34543dcdb8684c366fb11832
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Wed, 23 Nov 2022 18:22:00 GMT
Content-Type: application/ocsp-response
Content-Length: 1777
Connection: keep-alive
X-Sucuri-ID: 19022
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Tue, 22 Nov 2022 19:35:40 GMT
Expires: Wed, 23 Nov 2022 19:35:40 GMT
ETag: "58e91961c4f2f65d09e9f869e128ec69fd6189d7"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Pragma, Alert, Content-Type, ETag, Retry-After, Last-Modified, Content-Length, Cache-Control, Expires
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Wed, 23 Nov 2022 18:08:53 GMT
cache-control: public,max-age=3600
age: 787
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash eb52164d651f5f45416e873aec29eb04
405b29bb7e7cd4367cf82988f8603e53db65f139
ed885e05db822ff30fe951e10b6d4f21e574d053939afca792992a1549a15301
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2824
Cache-Control: max-age=142317
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 18:22:00 GMT
Etag: "637de2ad-1d7"
Expires: Fri, 25 Nov 2022 09:53:57 GMT
Last-Modified: Wed, 23 Nov 2022 09:06:53 GMT
Server: ECS (ska/F711)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: QVR5LU/SH/sf/eUpQMKdWw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 8QUvM0VeJoM8YJvpt9hB2+JtTBc=
ocsp.digicert.com/
200 OK 280 B IP
Hash 298f6f027434581a9c93f97b90c7cfe1
80dc738070e4abb1303cf0a406537eb1c34b7d78
29c10d9b434354dfc91c2a9faac73b16245708c06d95ff17af8a7469fbf9b52b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5337
Cache-Control: max-age=165717
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 18:22:01 GMT
Etag: "637e3445-118"
Expires: Fri, 25 Nov 2022 16:23:58 GMT
Last-Modified: Wed, 23 Nov 2022 14:55:01 GMT
Server: ECS (ska/F711)
X-Cache: HIT
Content-Length: 280
www.buildinglink.com/public/wp-content/uploads/2021/12/Logo2.png
200 OK 7.0 kB URL HTTP/2 www.buildinglink.com/public/wp-content/uploads/2021/12/Logo2.png
IP
File type PNG image data, 314 x 80, 8-bit/color RGBA, non-interlaced\012- data
Hash ab070d40389513d2cdd4614aee0c1455
4c54652d022dd2e7f691b419985fe2b6d5de5f8b
b59ac4d1b5a12f2865977d2db6647c015655d53b1683c21bb9e02c4fb810a439
GET /public/wp-content/uploads/2021/12/Logo2.png HTTP/1.1
Host: www.buildinglink.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.buildinglink.com/marketing/public/main
Cookie: __cflb=02DiuDXvJ1dKekvY3orry22HB3MMHGLG5YBPYQBpK1Y1i
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 23 Nov 2022 18:22:01 GMT
content-type: image/png
content-length: 6950
cf-bgj: imgq:100,h2pri
cf-polished: origSize=9956
etag: "26e4-5d57d5ba93f40"
last-modified: Thu, 13 Jan 2022 21:27:49 GMT
cf-cache-status: HIT
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 76ebed888c7bb52d-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/gsap/3.5.0/gsap.min.js?ver=6.1.1
200 OK 22 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/gsap/3.5.0/gsap.min.js?ver=6.1.1
IP
File type ASCII text, with very long lines (60772)
Hash 8003d2baf33eedc129971e5743ba3452
50971ee1b3738f63a1b1b32e86bde890b8899591
608f1a6da25b59d79f4598ce32fe624330683c39b4759579436526b27ddee5e3
GET /ajax/libs/gsap/3.5.0/gsap.min.js?ver=6.1.1 HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.buildinglink.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 23 Nov 2022 18:22:01 GMT
content-type: application/javascript; charset=utf-8
content-length: 21895
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5f35e1c6-ee8d"
last-modified: Fri, 14 Aug 2020 00:58:46 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
vary: Accept-Encoding
cf-cache-status: HIT
age: 19342040
expires: Mon, 13 Nov 2023 18:22:01 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gBuKZu2w4ag%2BtjFCfDNb6QMvB40KpMXo%2B3UvPqwPG6hj1switgoqP%2F85z9ys9I3mlLkZtaPvPhzTlVGaKxZ6gJdZzPXfnJmLp%2BkhgZHkQpzxHbULGrTyygmjib1pYHw8F4IIGxrg"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 76ebed89dd5c1c0e-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/gsap/3.5.0/ScrollTrigger.min.js?ver=6.1.1
200 OK 7.8 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/gsap/3.5.0/ScrollTrigger.min.js?ver=6.1.1
IP
File type ASCII text, with very long lines (19151)
Hash 1084e33c566f4ceba44cd166601a21b6
4634ded7d4557a3bf503be25a6f7c1d1282fac6e
ed0a34dd94046d5b1b039f52afdca81f09e908536a160b45ccefc219c5bf372c
GET /ajax/libs/gsap/3.5.0/ScrollTrigger.min.js?ver=6.1.1 HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.buildinglink.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 23 Nov 2022 18:22:01 GMT
content-type: application/javascript; charset=utf-8
content-length: 7823
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5f35e1c6-4c01"
last-modified: Fri, 14 Aug 2020 00:58:46 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
vary: Accept-Encoding
cf-cache-status: HIT
age: 22698258
expires: Mon, 13 Nov 2023 18:22:01 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=AhRKY5SZzvCLx2jCNYFaY9u91i7ABWaFM44V6kRqQjE1wdqn%2BpEmZcNcHhHbKx3dxlJBEuRdf8OXLTqtL7NM7Pg7mK9puvBRJZnhouQf%2BIA42FdfXra56fwhZHwD2aKroidmSLOt"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 76ebed89cd4e1c0e-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.buildinglink.com/public/wp-includes/js/wp-emoji-release.min.js?ver=6.1.1
200 OK 5.3 kB URL HTTP/2 www.buildinglink.com/public/wp-includes/js/wp-emoji-release.min.js?ver=6.1.1
IP
File type ASCII text, with very long lines (15660)
Hash bf3c68dd4b8b0bdbab26b7f612c04d80
f39fa75c8ec1151f9ae651920cd205a7b2d95cc4
e15d8c04627fdf5c615e2f8295b0b31ce74a10bb9a28fba62bbd821e451be4ed
GET /public/wp-includes/js/wp-emoji-release.min.js?ver=6.1.1 HTTP/1.1
Host: www.buildinglink.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.buildinglink.com/marketing/public/main
Cookie: __cflb=02DiuDXvJ1dKekvY3orry22HB3MMHGLG5YBPYQBpK1Y1i
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 23 Nov 2022 18:22:01 GMT
content-type: application/javascript
last-modified: Wed, 25 May 2022 07:31:58 GMT
etag: W/"48b9-5dfd111827334-gzip"
vary: Accept-Encoding
cf-cache-status: HIT
server: cloudflare
cf-ray: 76ebed88dd00b52d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 065495ec7a963a205abd9c8dbc75cb5d
ea416d0df4f6706150bda5da2077174f5cdd986b
1b2a2afee887651b23a849f14ace89b330329f6bf61c331545a3f6d12037aee5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 18:22:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 065495ec7a963a205abd9c8dbc75cb5d
ea416d0df4f6706150bda5da2077174f5cdd986b
1b2a2afee887651b23a849f14ace89b330329f6bf61c331545a3f6d12037aee5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 18:22:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash fb4ee3082622f9f3340432290d63437e
852ca64934462e133e34043fca561aca215e6255
d4c2f665873baede94309128e276df6fdf7f0e1ec15699e75cd6bae2c24d556a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 18:22:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 065495ec7a963a205abd9c8dbc75cb5d
ea416d0df4f6706150bda5da2077174f5cdd986b
1b2a2afee887651b23a849f14ace89b330329f6bf61c331545a3f6d12037aee5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 18:22:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/recaptcha/api.js?render=6LeZUI8eAAAAABgGtdVPSVx6VtgrA7bEecOL0jBp&ver=3.0
200 OK 582 B URL HTTP/2 www.google.com/recaptcha/api.js?render=6LeZUI8eAAAAABgGtdVPSVx6VtgrA7bEecOL0jBp&ver=3.0
IP
File type ASCII text, with very long lines (884), with no line terminators
Hash ef6a42182df03c4aa47cc1eb3077eb46
8c1813ceb69fb3cc4798f017babf25c3c2f9c064
3327523f75c51131c76456668de610676e00df04dd17ec0b770d9a6eb13c58af
GET /recaptcha/api.js?render=6LeZUI8eAAAAABgGtdVPSVx6VtgrA7bEecOL0jBp&ver=3.0 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.buildinglink.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
expires: Wed, 23 Nov 2022 18:22:01 GMT
date: Wed, 23 Nov 2022 18:22:01 GMT
cache-control: private, max-age=300
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 582
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash a54ccb27cee7db352e269389e279a76c
d62c9f3d2db62114a67e13d0ed23aea091edb4dc
a83b0a3f58c5527d087f1b48f8cb264c405f2839c0598beb372fabee4f63aae9
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 700
Cache-Control: max-age=150989
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 18:22:01 GMT
Etag: "637e0cda-117"
Expires: Fri, 25 Nov 2022 12:18:30 GMT
Last-Modified: Wed, 23 Nov 2022 12:06:50 GMT
Server: ECS (ska/F711)
X-Cache: HIT
Content-Length: 279
cdn.jsdelivr.net/npm/locomotive-scroll@3.5.4/dist/locomotive-scroll.min.js?ver=6.1.1
200 OK 10 kB URL HTTP/2 cdn.jsdelivr.net/npm/locomotive-scroll@3.5.4/dist/locomotive-scroll.min.js?ver=6.1.1
IP
File type ASCII text, with very long lines (37232), with no line terminators
Hash 8483b481b15691466caad701dc6e1503
492f07185e3b14622c55f8236306112ea3979f81
cb8e8a7986a75684d612f3443d99e23b0b367c4c5dbc3c897396e82ee946b6aa
GET /npm/locomotive-scroll@3.5.4/dist/locomotive-scroll.min.js?ver=6.1.1 HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.buildinglink.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 3.5.4
x-jsd-version-type: version
etag: W/"9170-A1p+FrHHz52vewF/y7LPrfqJmbE"
content-encoding: gzip
accept-ranges: bytes
date: Wed, 23 Nov 2022 18:22:01 GMT
age: 2892137
x-served-by: cache-fra-eddf8230023-FRA, cache-bma1634-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 10152
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=UA-2730441-3
200 OK 44 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=UA-2730441-3
IP
File type ASCII text, with very long lines (1921)
Hash c94ccf89fead7e3abd12f6c4015a5388
4f9f17ee4f27ceb24d3c0cb136e030a3e705de78
3860d48b3daa7e78156123b8f81b4961d444b6b0a3299c11788a7b85dd6b40ce
GET /gtag/js?id=UA-2730441-3 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.buildinglink.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 23 Nov 2022 18:22:01 GMT
expires: Wed, 23 Nov 2022 18:22:01 GMT
cache-control: private, max-age=900
last-modified: Wed, 23 Nov 2022 18:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 43654
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 8069f5e67c25fc0b7388ba5d4decd8c9
64a85ba44c80ea206f4382f573c3d61e4f607ccf
7587cd04333ddf1cff15ae219cb8fca0618786a9fe4cee989975f4d50889e72a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 18:22:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.buildinglink.com/public/wp-content/plugins/duracelltomi-google-tag-manager/js/gtm4wp-form-move-tracker.js?ver=1.16.2
200 OK 1.8 kB URL HTTP/2 www.buildinglink.com/public/wp-content/plugins/duracelltomi-google-tag-manager/js/gtm4wp-form-move-tracker.js?ver=1.16.2
IP
File type ASCII text, with very long lines (1300), with no line terminators
Hash 604d2d28483b54cb121953bb12ff654e
b5feb424abc7b23eb70fb64912153a9aabba8a45
647e7ff1491db184366a3cb085bb4d98627033a1a912b801d767bdb5eb14e921
GET /public/wp-content/plugins/duracelltomi-google-tag-manager/js/gtm4wp-form-move-tracker.js?ver=1.16.2 HTTP/1.1
Host: www.buildinglink.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.buildinglink.com/marketing/public/main
Cookie: __cflb=02DiuDXvJ1dKekvY3orry22HB3MMHGLG5YBPYQBpK1Y1i
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 23 Nov 2022 18:22:01 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=1530
etag: W/"5fa-5edafa46e0c19-gzip"
last-modified: Thu, 17 Nov 2022 19:31:57 GMT
vary: Accept-Encoding
cf-cache-status: HIT
server: cloudflare
cf-ray: 76ebed88bcd1b52d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
use.fontawesome.com/releases/v5.15.4/css/all.css?ver=6.1.1
200 OK 13 kB URL HTTP/2 use.fontawesome.com/releases/v5.15.4/css/all.css?ver=6.1.1
IP
File type ASCII text, with very long lines (59119)
Hash 959e1a19f4482fc79324ed40ef7cf37c
4f7e93a1405bb062fe97a465c618e9e117f7a11b
890888e13b28fe3c13eaae6269db7a0b697308e3d78e048ec7bf428f54377945
GET /releases/v5.15.4/css/all.css?ver=6.1.1 HTTP/1.1
Host: use.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.buildinglink.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 23 Nov 2022 18:22:01 GMT
content-type: text/css
x-amz-id-2: Ksywrolnb9VfPG4UJV/YGSQ5trBSRTaHfLemMg6kAkb/xgip9IfcfokchWSVN8hEUxtFEL5XHVI=
x-amz-request-id: JCCS85DK566V7REG
last-modified: Wed, 04 Aug 2021 20:43:22 GMT
etag: W/"ecd507b3125edc4d2a03aa6ae5d07da9"
cache-control: max-age=31556926
cf-cache-status: HIT
age: 685407
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lXaxN06LsT0WYhMFwNnYXcC6yTAXUlrJ2Y5JBxRXbH3xJ2yvN2R4qmGl%2FNXln2Q%2Fzwk7b9oCZg2GATTsEcwJ3ehmQ3ynXxblNZ4Tq3p9yC2jPIcvlUYf%2BI3WYKDTjouhozOck2rl"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76ebed8a9c437576-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 065495ec7a963a205abd9c8dbc75cb5d
ea416d0df4f6706150bda5da2077174f5cdd986b
1b2a2afee887651b23a849f14ace89b330329f6bf61c331545a3f6d12037aee5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 18:22:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.buildinglink.com/public/wp-content/themes/buildinglink/js/jquery.main.js?ver=6.1.1
200 OK 3.1 kB URL HTTP/2 www.buildinglink.com/public/wp-content/themes/buildinglink/js/jquery.main.js?ver=6.1.1
IP
File type ASCII text, with very long lines (1391)
Hash 5edc8bdf33cecd57f001b7ca6f4da756
d59d30542545ec77942c2d93e4cccbf2d6ecea4b
e040c24ca16304b238ab730d3435f9dabf178bbb716902dc6828e8f0407b2efd
GET /public/wp-content/themes/buildinglink/js/jquery.main.js?ver=6.1.1 HTTP/1.1
Host: www.buildinglink.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.buildinglink.com/marketing/public/main
Cookie: __cflb=02DiuDXvJ1dKekvY3orry22HB3MMHGLG5YBPYQBpK1Y1i
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 23 Nov 2022 18:22:01 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=11830
etag: W/"2e36-5d7ffdefff70d-gzip"
last-modified: Mon, 14 Feb 2022 20:00:41 GMT
vary: Accept-Encoding
cf-cache-status: HIT
server: cloudflare
cf-ray: 76ebed88bcd7b52d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash a54ccb27cee7db352e269389e279a76c
d62c9f3d2db62114a67e13d0ed23aea091edb4dc
a83b0a3f58c5527d087f1b48f8cb264c405f2839c0598beb372fabee4f63aae9
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 700
Cache-Control: max-age=150989
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 18:22:01 GMT
Etag: "637e0cda-117"
Expires: Fri, 25 Nov 2022 12:18:30 GMT
Last-Modified: Wed, 23 Nov 2022 12:06:50 GMT
Server: ECS (ska/F711)
X-Cache: HIT
Content-Length: 279
www.buildinglink.com/public/wp-content/plugins/contact-form-7/modules/recaptcha/index.js?ver=5.5.5
200 OK 85 kB URL HTTP/2 www.buildinglink.com/public/wp-content/plugins/contact-form-7/modules/recaptcha/index.js?ver=5.5.5
IP
File type ASCII text, with very long lines (999), with no line terminators
Hash caef0bd238043312c50d850e7b27d2f8
80979d6a2e43ac91e7e477ef61bf045d35b70c42
3828ff1a91f924c9ed7a422ea56daf268d8d98f75ff4e5eb0c8de0453d8bb0d1
GET /public/wp-content/plugins/contact-form-7/modules/recaptcha/index.js?ver=5.5.5 HTTP/1.1
Host: www.buildinglink.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.buildinglink.com/marketing/public/main
Cookie: __cflb=02DiuDXvJ1dKekvY3orry22HB3MMHGLG5YBPYQBpK1Y1i
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 23 Nov 2022 18:22:01 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"3e7-5d8776cb54b48-gzip"
last-modified: Sun, 20 Feb 2022 18:38:40 GMT
vary: Accept-Encoding
cf-cache-status: HIT
server: cloudflare
cf-ray: 76ebed88bcdab52d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 4f22437494cab8f3b1de6d48c3677f43
42461557365b59e300ae356c37b95f652e10dacd
420bc8cc7c6624d9201c6e12fb6478f4a9cf77e90aad033b4d12687968003ccf
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 18:22:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 4f22437494cab8f3b1de6d48c3677f43
42461557365b59e300ae356c37b95f652e10dacd
420bc8cc7c6624d9201c6e12fb6478f4a9cf77e90aad033b4d12687968003ccf
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 18:22:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.buildinglink.com/public/wp-includes/css/classic-themes.min.css?ver=1
200 OK 628 B URL HTTP/2 www.buildinglink.com/public/wp-includes/css/classic-themes.min.css?ver=1
IP
Hash 1fd91f6e48ce742c98c8e5c56cfaccb3
448dfdb3541c620ad396e66786515e280f7bc6c7
e78a04cba630bee7448a8427524c1b2af9f723c53f84cc10d0a8ee783a3f9b74
GET /public/wp-includes/css/classic-themes.min.css?ver=1 HTTP/1.1
Host: www.buildinglink.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.buildinglink.com/marketing/public/main
Cookie: __cflb=02DiuDXvJ1dKekvY3orry22HB3MMHGLG5YBPYQBpK1Y1i
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 23 Nov 2022 18:22:01 GMT
content-type: text/css
last-modified: Wed, 02 Nov 2022 07:32:05 GMT
etag: W/"d9-5ec77d666627b-gzip"
vary: Accept-Encoding
cf-cache-status: HIT
server: cloudflare
cf-ray: 76ebed884c1bb52d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.buildinglink.com/public/wp-content/plugins/duracelltomi-google-tag-manager/js/analytics-talk-content-tracking.js?ver=1.16.2
200 OK 16 kB URL HTTP/2 www.buildinglink.com/public/wp-content/plugins/duracelltomi-google-tag-manager/js/analytics-talk-content-tracking.js?ver=1.16.2
IP
File type ASCII text, with very long lines (454)
Hash 1c3748d7a071c841198bfd3442929bd3
70002a286c0a024c5684d523f82aa8cb83c10121
988d456e1dabb89ffb7ed7193cb6b8e450f168ffafcf1d0ff41ad66ddab869f5
GET /public/wp-content/plugins/duracelltomi-google-tag-manager/js/analytics-talk-content-tracking.js?ver=1.16.2 HTTP/1.1
Host: www.buildinglink.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.buildinglink.com/marketing/public/main
Cookie: __cflb=02DiuDXvJ1dKekvY3orry22HB3MMHGLG5YBPYQBpK1Y1i
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 23 Nov 2022 18:22:01 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=3862
etag: W/"f16-5edafa46e0c19-gzip"
last-modified: Thu, 17 Nov 2022 19:31:57 GMT
vary: Accept-Encoding
cf-cache-status: HIT
server: cloudflare
cf-ray: 76ebed887c60b52d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.buildinglink.com/public/wp-content/themes/buildinglink/style.css?ver=11
200 OK 24 kB URL HTTP/2 www.buildinglink.com/public/wp-content/themes/buildinglink/style.css?ver=11
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash c5836421d3d4233812588cf5fb32e375
a8b0b545b365cb016eded1c3f69252ba7e82b9d5
99a3d4c71d169fbcfee7bbd1f0794e4d6ed65dd780f50a52f724430c6c64e9de
GET /public/wp-content/themes/buildinglink/style.css?ver=11 HTTP/1.1
Host: www.buildinglink.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.buildinglink.com/marketing/public/main
Cookie: __cflb=02DiuDXvJ1dKekvY3orry22HB3MMHGLG5YBPYQBpK1Y1i
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 23 Nov 2022 18:22:01 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=194495
etag: W/"2f7bf-5d81317df6662-gzip"
last-modified: Tue, 15 Feb 2022 18:56:40 GMT
vary: Accept-Encoding
cf-cache-status: HIT
server: cloudflare
cf-ray: 76ebed885c46b52d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.buildinglink.com/public/wp-content/themes/buildinglink/js/vendors/fancybox/fancybox.css?ver=6.1.1
200 OK 19 kB URL HTTP/2 www.buildinglink.com/public/wp-content/themes/buildinglink/js/vendors/fancybox/fancybox.css?ver=6.1.1
IP
File type ASCII text, with very long lines (15132), with no line terminators
Hash 7eb8630edc4fc2f704b06e3d0c49a02d
2788eb4fe4fd16efa2ad0da01712754c34c7d721
3d6216b9831c0abd8d94c2b85ed11d08cd934c448e542ac2912ad668050e544b
GET /public/wp-content/themes/buildinglink/js/vendors/fancybox/fancybox.css?ver=6.1.1 HTTP/1.1
Host: www.buildinglink.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.buildinglink.com/marketing/public/main
Cookie: __cflb=02DiuDXvJ1dKekvY3orry22HB3MMHGLG5YBPYQBpK1Y1i
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 23 Nov 2022 18:22:01 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=15295
etag: W/"3bbf-5d57d53327fc0-gzip"
last-modified: Thu, 13 Jan 2022 21:25:27 GMT
vary: Accept-Encoding
cf-cache-status: HIT
server: cloudflare
cf-ray: 76ebed885c49b52d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
fonts.googleapis.com/css2?family=Work+Sans%3Aital%2Cwght%400%2C100%3B0%2C200%3B0%2C300%3B0%2C400%3B0%2C500%3B0%2C600%3B0%2C700%3B0%2C800%3B0%2C900%3B1%2C100%3B1%2C200%3B1%2C300%3B1%2C400%3B1%2C500%3B1%2C600%3B1%2C700%3B1%2C800%3B1%2C900&display=swap&ver=6.1.1
200 OK 18 kB URL HTTP/2 fonts.googleapis.com/css2?family=Work+Sans%3Aital%2Cwght%400%2C100%3B0%2C200%3B0%2C300%3B0%2C400%3B0%2C500%3B0%2C600%3B0%2C700%3B0%2C800%3B0%2C900%3B1%2C100%3B1%2C200%3B1%2C300%3B1%2C400%3B1%2C500%3B1%2C600%3B1%2C700%3B1%2C800%3B1%2C900&display=swap&ver=6.1.1
IP
Hash a5218d967393f48846037de8edcaa27d
8c993b3bc765830edf7a3d1bd67a6d88429b9ef5
3a6583cd90f46cad4200302833d3922bec42c1f3a0fa578dbbaf2b2557c6c405
GET /css2?family=Work+Sans%3Aital%2Cwght%400%2C100%3B0%2C200%3B0%2C300%3B0%2C400%3B0%2C500%3B0%2C600%3B0%2C700%3B0%2C800%3B0%2C900%3B1%2C100%3B1%2C200%3B1%2C300%3B1%2C400%3B1%2C500%3B1%2C600%3B1%2C700%3B1%2C800%3B1%2C900&display=swap&ver=6.1.1 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.buildinglink.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 23 Nov 2022 18:22:01 GMT
date: Wed, 23 Nov 2022 18:22:01 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
unpkg.com/swiper@7/swiper-bundle.min.js
302 Found 48 kB URL HTTP/2 unpkg.com/swiper@7/swiper-bundle.min.js
IP
Hash 7e18deadf885189f44b469826dc29d36
175750542dc18b9e35c6f708bd1589ad407c1364
6594ae441c78547430fe0fd7efac27bbe6504a4f4c0e6d766c79e879e8188878
GET /swiper@7/swiper-bundle.min.js HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.buildinglink.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
date: Wed, 23 Nov 2022 18:22:01 GMT
content-type: text/plain; charset=utf-8
access-control-allow-origin: *
cache-control: public, s-maxage=600, max-age=60
location: /swiper@7.4.1/swiper-bundle.min.js
vary: Accept, Accept-Encoding
via: 1.1 fly.io
fly-request-id: 01GJJVJDPAXWH8HCNCC4A9Z9HM-fra
cf-cache-status: HIT
age: 31
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 76ebed8a8aef0b51-OSL
X-Firefox-Spdy: h2
www.buildinglink.com/public/wp-content/plugins/simple-google-recaptcha/sgr.js?ver=1645382970
200 OK 38 kB URL HTTP/2 www.buildinglink.com/public/wp-content/plugins/simple-google-recaptcha/sgr.js?ver=1645382970
IP
File type ASCII text, with very long lines (453)
Hash aeb5f27df7c824448410bbaa03457daf
b2bb96ebd1abcd6952f24d1926b5ac65f410b8f1
d27a1c99c5cd1b50715b69ae5fc5108274dfdddc7ae96eab5cbe86dc7246b8dc
GET /public/wp-content/plugins/simple-google-recaptcha/sgr.js?ver=1645382970 HTTP/1.1
Host: www.buildinglink.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.buildinglink.com/marketing/public/main
Cookie: __cflb=02DiuDXvJ1dKekvY3orry22HB3MMHGLG5YBPYQBpK1Y1i
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 23 Nov 2022 18:22:01 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=1355
etag: W/"54b-5d877937841f3-gzip"
last-modified: Sun, 20 Feb 2022 18:49:30 GMT
vary: Accept-Encoding
cf-cache-status: HIT
server: cloudflare
cf-ray: 76ebed886c4bb52d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1Mu51xIIzI.woff2
200 OK 17 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1Mu51xIIzI.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 17368, version 1.0\012- data
Hash abe083d96b58eb02ada8b7c30d7b09f2
61447d66d13a8c8f4335696777a85c438c46f749
db0424fb67fb52e7e538490240cc7fb9c05aa076333a4968f3dee30b825dabf9
GET /s/roboto/v30/KFOkCnqEu92Fr1Mu51xIIzI.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.buildinglink.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 17368
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 16 Nov 2022 18:56:18 GMT
expires: Thu, 16 Nov 2023 18:56:18 GMT
cache-control: public, max-age=31536000
age: 602743
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.buildinglink.com/public/wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.9
200 OK 18 kB URL HTTP/2 www.buildinglink.com/public/wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.9
IP
File type ASCII text, with very long lines (6475), with no line terminators
Hash 4fbb2c0ddbca47c5c197e0b650284482
6cdad2e85a01d1b1adec96569d8411d10012d7bf
deb3543ec7968331d4f4862515c1365e12a9b3072e08184ff20b0d76ef5213d3
GET /public/wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.9 HTTP/1.1
Host: www.buildinglink.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.buildinglink.com/marketing/public/main
Cookie: __cflb=02DiuDXvJ1dKekvY3orry22HB3MMHGLG5YBPYQBpK1Y1i
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 23 Nov 2022 18:22:01 GMT
content-type: application/javascript
last-modified: Wed, 25 May 2022 07:31:58 GMT
etag: W/"194b-5dfd11181e694-gzip"
vary: Accept-Encoding
cf-cache-status: HIT
server: cloudflare
cf-ray: 76ebed888c7db52d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51TjASc6CsQ.woff2
200 OK 18 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51TjASc6CsQ.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 17508, version 1.0\012- data
Hash 7fbdfaab6bd8b191496ffe1ef1b9e748
e9e592f8498d489d8000f3a4cfb1bb447f251edd
bb8007225d94a099cddbade7ea904667c0dd0b68d5e30778e5c6257589ab94d1
GET /s/roboto/v30/KFOjCnqEu92Fr1Mu51TjASc6CsQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.buildinglink.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 17508
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 16 Nov 2022 19:44:33 GMT
expires: Thu, 16 Nov 2023 19:44:33 GMT
cache-control: public, max-age=31536000
age: 599848
last-modified: Wed, 11 May 2022 19:24:41 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15860, version 1.0\012- data
Hash e9f5aaf547f165386cd313b995dddd8e
acdef5603c2387b0e5bffd744b679a24a8bc1968
f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.buildinglink.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 16 Nov 2022 18:53:49 GMT
expires: Thu, 16 Nov 2023 18:53:49 GMT
cache-control: public, max-age=31536000
age: 602892
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.googleapis.com/css2?family=Inter%3Awght%40100%3B200%3B300%3B400%3B500%3B600%3B700%3B800%3B900&display=swap&ver=6.1.1
200 OK 151 kB URL HTTP/2 fonts.googleapis.com/css2?family=Inter%3Awght%40100%3B200%3B300%3B400%3B500%3B600%3B700%3B800%3B900&display=swap&ver=6.1.1
IP
Size 151 kB (151124 bytes)
Hash 5f9800214056c98d1acb8f8fd416e476
9b87e8afe8b556989801c0af7fd97e1159513f5a
3b0c6aff11bf0fba8cc313843a892ce92383542fd04c302d16f1447675ee87ad
GET /css2?family=Inter%3Awght%40100%3B200%3B300%3B400%3B500%3B600%3B700%3B800%3B900&display=swap&ver=6.1.1 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.buildinglink.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 23 Nov 2022 18:22:01 GMT
date: Wed, 23 Nov 2022 18:22:01 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 4f22437494cab8f3b1de6d48c3677f43
42461557365b59e300ae356c37b95f652e10dacd
420bc8cc7c6624d9201c6e12fb6478f4a9cf77e90aad033b4d12687968003ccf
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 18:22:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.bugherd.com/sidebarv2.js?apikey=eyfp3lkelft8jnffosp8dq&ver=6.1.1
200 OK 77 kB URL HTTP/1.1 www.bugherd.com/sidebarv2.js?apikey=eyfp3lkelft8jnffosp8dq&ver=6.1.1
IP
Hash b3d3b91ed8a30e6ff861dc83217165f7
1d8de7312f5a062289317bd7630a1fd89d8d324b
983fc63864d21bf6328c73a00d706ce42ab0056dbf3d8a539f619f238b3e8432
GET /sidebarv2.js?apikey=eyfp3lkelft8jnffosp8dq&ver=6.1.1 HTTP/1.1
Host: www.bugherd.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.buildinglink.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Cowboy
Connection: close
Date: Wed, 23 Nov 2022 18:22:01 GMT
X-Frame-Options: SAMEORIGIN
X-Xss-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Permitted-Cross-Domain-Policies: none
Referrer-Policy: strict-origin-when-cross-origin
P3p: CP="NOI ADM DEV COM NAV OUR STP"
Content-Type: text/javascript; charset=utf-8
Vary: Accept-Encoding
Content-Encoding: gzip
Etag: W/"25c9a60debf9a14707bc0cd7f7413116"
Cache-Control: max-age=0, private, must-revalidate
X-Request-Id: c81691bc-1179-4c21-9870-c2c0ce4eaa7e
X-Runtime: 0.009069
Strict-Transport-Security: max-age=0; includeSubDomains
Via: 1.1 vegur
www.buildinglink.com/public/wp-content/plugins/wpml-cms-nav/res/css/cms-navigation-base.css?ver=1.5.5
200 OK 101 kB URL HTTP/2 www.buildinglink.com/public/wp-content/plugins/wpml-cms-nav/res/css/cms-navigation-base.css?ver=1.5.5
IP
File type ASCII text, with very long lines (1908), with no line terminators
Size 101 kB (100631 bytes)
Hash 11e98a21fab3b03965dd2a34a1b0cfcb
3c80abe23d6f2a7408d995aa94ede58078a9a159
052b5d939434af6716a396dfd196af2f9119494a638c9581877c3d8a31495856
GET /public/wp-content/plugins/wpml-cms-nav/res/css/cms-navigation-base.css?ver=1.5.5 HTTP/1.1
Host: www.buildinglink.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.buildinglink.com/marketing/public/main
Cookie: __cflb=02DiuDXvJ1dKekvY3orry22HB3MMHGLG5YBPYQBpK1Y1i
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 23 Nov 2022 18:22:01 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=3004
etag: W/"bbc-5d57d52c7b000-gzip"
last-modified: Thu, 13 Jan 2022 21:25:20 GMT
vary: Accept-Encoding
cf-cache-status: HIT
server: cloudflare
cf-ray: 76ebed885c39b52d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.buildinglink.com/public/wp-content/themes/buildinglink/js/vendors/fancybox/fancybox.umd.js?ver=6.1.1
200 OK 90 kB URL HTTP/2 www.buildinglink.com/public/wp-content/themes/buildinglink/js/vendors/fancybox/fancybox.umd.js?ver=6.1.1
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 847853ed0fac7b44fd570e2032ab61e0
dac45694ca1ff5453f2c3f294dbfde09a5cb8a1c
3acb89b6b4909f7385629061b81800c9f7f8dffe762ed6c29032351e3d7c1117
GET /public/wp-content/themes/buildinglink/js/vendors/fancybox/fancybox.umd.js?ver=6.1.1 HTTP/1.1
Host: www.buildinglink.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.buildinglink.com/marketing/public/main
Cookie: __cflb=02DiuDXvJ1dKekvY3orry22HB3MMHGLG5YBPYQBpK1Y1i
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 23 Nov 2022 18:22:01 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=100944
etag: W/"18a50-5d57d53327fc0-gzip"
last-modified: Thu, 13 Jan 2022 21:25:27 GMT
vary: Accept-Encoding
cf-cache-status: HIT
server: cloudflare
cf-ray: 76ebed88bcd8b52d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 1.7 kB IP
Hash b2a0db5021dacd32009e173361da374d
0259884a5a4a455908d69e0d5d5667e5ede3291e
c87579f64e1f4a75dc349bf2b02992ff25b158afb816d248e9da161c7c9c13bf
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4558
Cache-Control: max-age=108397
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 18:22:02 GMT
Etag: "637d5769-118"
Expires: Fri, 25 Nov 2022 00:28:39 GMT
Last-Modified: Tue, 22 Nov 2022 23:12:41 GMT
Server: ECS (amb/6B9E)
X-Cache: HIT
Content-Length: 280
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 611d1eca860866489908506a26bd6a2a
5e8c401f098357cd12889a6e507baf7c8a87772a
e3216e5edd547bc8f6a43780da5a118842b96de96d5cf668af68d8706ceb32e4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E3216E5EDD547BC8F6A43780DA5A118842B96DE96D5CF668AF68D8706CEB32E4"
Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4531
Expires: Wed, 23 Nov 2022 19:37:33 GMT
Date: Wed, 23 Nov 2022 18:22:02 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 611d1eca860866489908506a26bd6a2a
5e8c401f098357cd12889a6e507baf7c8a87772a
e3216e5edd547bc8f6a43780da5a118842b96de96d5cf668af68d8706ceb32e4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E3216E5EDD547BC8F6A43780DA5A118842B96DE96D5CF668AF68D8706CEB32E4"
Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4531
Expires: Wed, 23 Nov 2022 19:37:33 GMT
Date: Wed, 23 Nov 2022 18:22:02 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 611d1eca860866489908506a26bd6a2a
5e8c401f098357cd12889a6e507baf7c8a87772a
e3216e5edd547bc8f6a43780da5a118842b96de96d5cf668af68d8706ceb32e4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E3216E5EDD547BC8F6A43780DA5A118842B96DE96D5CF668AF68D8706CEB32E4"
Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4531
Expires: Wed, 23 Nov 2022 19:37:33 GMT
Date: Wed, 23 Nov 2022 18:22:02 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 611d1eca860866489908506a26bd6a2a
5e8c401f098357cd12889a6e507baf7c8a87772a
e3216e5edd547bc8f6a43780da5a118842b96de96d5cf668af68d8706ceb32e4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E3216E5EDD547BC8F6A43780DA5A118842B96DE96D5CF668AF68D8706CEB32E4"
Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4531
Expires: Wed, 23 Nov 2022 19:37:33 GMT
Date: Wed, 23 Nov 2022 18:22:02 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F45ca81c5-d11a-4d86-a922-dbdce0f6b46c.jpeg
200 OK 5.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F45ca81c5-d11a-4d86-a922-dbdce0f6b46c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 0cc111ba6ae699fca7fbff3490640960
18084197b48ea3b4a143636250396e8791d0285f
34fbba92e665ad371ea2bd1a871251cf0c5b7832d6f4661b21b2cfbd7f786923
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F45ca81c5-d11a-4d86-a922-dbdce0f6b46c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4977
x-amzn-requestid: 3e56de91-7ed1-4b1e-b230-5f19b2cc6601
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bxQKBHzdIAMFpUw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6376c70c-41c572d27999534d3c198372;Sampled=0
x-amzn-remapped-date: Thu, 17 Nov 2022 23:43:08 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Or1B6k7o4cYqVXfndjJsKLOV-aYKX8bfHCQIUqNzvofjQSnIf8f04A==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 5565a51537c689d1d16f6b4d41f40082.cloudfront.net (CloudFront), 1.1 google
date: Tue, 22 Nov 2022 21:52:42 GMT
age: 73760
etag: "18084197b48ea3b4a143636250396e8791d0285f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.buildinglink.com/public/wp-content/plugins/svg-support/js/min/svgs-inline-min.js?ver=1.0.0
200 OK 6.5 kB URL HTTP/2 www.buildinglink.com/public/wp-content/plugins/svg-support/js/min/svgs-inline-min.js?ver=1.0.0
IP
File type ASCII text, with very long lines (1245), with no line terminators
Hash a1bc196ccb878ca04cbb7268c84f22bb
463871450d6fd36f22a204c9bf088b6e4b69e993
7d1dbab8ef6729c2d4366d191b082f6a8c55a28bc9a7face39438a1966f1d181
GET /public/wp-content/plugins/svg-support/js/min/svgs-inline-min.js?ver=1.0.0 HTTP/1.1
Host: www.buildinglink.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.buildinglink.com/marketing/public/main
Cookie: __cflb=02DiuDXvJ1dKekvY3orry22HB3MMHGLG5YBPYQBpK1Y1i
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 23 Nov 2022 18:22:01 GMT
content-type: application/javascript
last-modified: Thu, 13 Jan 2022 21:25:12 GMT
etag: W/"4dd-5d57d524d9e00-gzip"
vary: Accept-Encoding
cf-cache-status: HIT
server: cloudflare
cf-ray: 76ebed887c5cb52d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4d582ed2-f829-4647-9113-832d4500a207.jpeg
200 OK 9.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4d582ed2-f829-4647-9113-832d4500a207.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6d2c986e076309d51d199332caebb07a
343a5bfba0f8fec28f9345f276b44f44c6eaf6a6
64e6fba6a45c70c1db6040a2273472774c00257bef373cc45b6ca00cb819681a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4d582ed2-f829-4647-9113-832d4500a207.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9138
x-amzn-requestid: 524e565e-a9fb-45f9-b786-d64cf26a3cdf
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cBcAAHG8IAMFhwQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637d4066-3689e70e6212e9e77dc134f4;Sampled=0
x-amzn-remapped-date: Tue, 22 Nov 2022 21:34:30 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: cwu__NPGaU0zyAG0H1yZhmjGsFzvNmzsGv6Zt9hrF5gwSysEio2MjA==
via: 1.1 5a1753718d8b33365e5f693dd338c510.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Tue, 22 Nov 2022 21:45:52 GMT
age: 74170
etag: "343a5bfba0f8fec28f9345f276b44f44c6eaf6a6"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F559c6770-d162-460d-b372-5ff036a364d6.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F559c6770-d162-460d-b372-5ff036a364d6.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 9defa28d124bae7e5ef29a1fb165ee02
2afe813f0fefae511064297ccff9a6de548104e8
8cfdd12386dcc87cfd874ed0c2d42cd33ae2a05cb35127f1a94e163d17bd5b31
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F559c6770-d162-460d-b372-5ff036a364d6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11576
x-amzn-requestid: 9dd2cb2e-de79-4937-b525-05be9d57c03b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b-IrdFuxoAMFa9g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637bee49-5437ea0f1568967278fe96ad;Sampled=0
x-amzn-remapped-date: Mon, 21 Nov 2022 21:31:53 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 1daKtJmaZARpzMRiPQaWttMITAndRqZt0VwhiBzbxzxBvw4a28a2sg==
via: 1.1 b4085435efbe95a420f374958bd145be.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google
date: Tue, 22 Nov 2022 22:03:20 GMT
age: 73122
etag: "2afe813f0fefae511064297ccff9a6de548104e8"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F44f9633f-15fe-459e-aebf-06d2b582efa8.jpeg
200 OK 9.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F44f9633f-15fe-459e-aebf-06d2b582efa8.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3e8d7af3a5d030774447a0f71c7824f0
663cace8681891ad55943dd0273493aa9474d102
22068df04672281e392caa485259df103d591ab247c3eb5e0ccba10ffd8a9ef0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F44f9633f-15fe-459e-aebf-06d2b582efa8.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9766
x-amzn-requestid: ca8b7a9f-3c1a-419d-953e-2944bf820e5e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cBcR_Hd4IAMFWUg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637d40d9-4ca5e9b2476a47cd199b9cba;Sampled=0
x-amzn-remapped-date: Tue, 22 Nov 2022 21:36:25 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: gtzOoH3--VR9BQTHvU5vInc6yhBcK0-O1oBbVJpAhpRRqqKY8vAf_g==
via: 1.1 49b94a8674d6e86a841d6523f7dbaf14.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google
date: Tue, 22 Nov 2022 21:45:48 GMT
age: 74174
etag: "663cace8681891ad55943dd0273493aa9474d102"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F20f7461d-18d1-4343-9ecb-d68d44ce1ee4.jpeg
200 OK 7.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F20f7461d-18d1-4343-9ecb-d68d44ce1ee4.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 06c6e720bc9900b38e88cd72f739603e
22884cbc78622d6f78c1c3397c9b440946144a99
8675d08e6d8ae5bdedbc7c7ce647f8c6e72cc457917b4ed1856c50b11c2fe88b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F20f7461d-18d1-4343-9ecb-d68d44ce1ee4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7589
x-amzn-requestid: 533d7650-cb21-4090-a50a-e205adad316d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: brr5zH4qoAMF79Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63748d0b-017f7bf4390eb124097af648;Sampled=0
x-amzn-remapped-date: Wed, 16 Nov 2022 07:11:07 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: ZtjzvMh_vqVaOqm8xPfZ2EWGGl0X7Iv8GK40Z32EbKM4wk6tGPnlYA==
via: 1.1 95b0ac620fa3a80ee590ecf1cda1c698.cloudfront.net (CloudFront), 1.1 707e733794d52100fde0ab21bf0b1462.cloudfront.net (CloudFront), 1.1 google
date: Tue, 22 Nov 2022 22:27:21 GMT
age: 71681
etag: "22884cbc78622d6f78c1c3397c9b440946144a99"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.buildinglink.com/public/wp-includes/js/jquery/jquery.min.js?ver=3.6.1
200 OK 32 kB URL HTTP/2 www.buildinglink.com/public/wp-includes/js/jquery/jquery.min.js?ver=3.6.1
IP
File type ASCII text, with very long lines (65447)
Hash 59483a2ce188958a0dab14e3568cdada
92f0f82bf44f14a71bcb48263785dee616ad1805
8edec667331a8b4ae00a6bb82df0febfb2fe149a256c9c4eb04165c2f02a6b1c
GET /public/wp-includes/js/jquery/jquery.min.js?ver=3.6.1 HTTP/1.1
Host: www.buildinglink.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.buildinglink.com/marketing/public/main
Cookie: __cflb=02DiuDXvJ1dKekvY3orry22HB3MMHGLG5YBPYQBpK1Y1i
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 23 Nov 2022 18:22:01 GMT
content-type: application/javascript
last-modified: Wed, 02 Nov 2022 07:32:06 GMT
etag: W/"15e54-5ec77d66bfff8-gzip"
vary: Accept-Encoding
cf-cache-status: HIT
server: cloudflare
cf-ray: 76ebed886c4cb52d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash 5ede4e99a5cd2c17b9037b73498f230c
58e91961c4f2f65d09e9f869e128ec69fd6189d7
44fbf85bf288379005b8de97e699c6d540740deb34543dcdb8684c366fb11832
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Wed, 23 Nov 2022 18:22:02 GMT
Content-Type: application/ocsp-response
Content-Length: 1777
Connection: keep-alive
X-Sucuri-ID: 19022
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Tue, 22 Nov 2022 19:35:40 GMT
Expires: Wed, 23 Nov 2022 19:35:40 GMT
ETag: "58e91961c4f2f65d09e9f869e128ec69fd6189d7"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
ocsp.digicert.com/
200 OK 279 B IP
Hash 5a46068d8b8f22ae3fb9b18f00b19b70
4578b88e4030d17634f814805b9b5d326697018d
e68bc0b927b61ee785ae8912cc022bbbf1db3db49926d8526827a473f7a0a67b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5820
Cache-Control: max-age=136334
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 18:22:02 GMT
Etag: "637dbf9c-117"
Expires: Fri, 25 Nov 2022 08:14:16 GMT
Last-Modified: Wed, 23 Nov 2022 06:37:16 GMT
Server: ECS (ska/F711)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
200 OK 279 B IP
Hash eef5529f60fcae469fe7cd3a2288adf2
66647c4d0e8d61377bf080096b68422a36e56568
a406dd61281794b202c5c7827f48df6caf269143c50148ee4f42c79d6f07ef4d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4302
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 18:22:02 GMT
Last-Modified: Wed, 23 Nov 2022 17:10:20 GMT
Server: ECS (ska/F711)
X-Cache: HIT
Content-Length: 279
www.buildinglink.com/public/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.5.5
200 OK 1.1 kB URL HTTP/2 www.buildinglink.com/public/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.5.5
IP
File type ASCII text, with very long lines (2226), with no line terminators
Hash 7ad748fd1da769b8a9e7555e8f917942
7f25e321a4cd18d26610bff3da97c82ab1055a00
dd16c085287d048ce4e378e12e111600a678b3a780b9d0d0c016bc74cf685e28
GET /public/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.5.5 HTTP/1.1
Host: www.buildinglink.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.buildinglink.com/marketing/public/main
Cookie: __cflb=02DiuDXvJ1dKekvY3orry22HB3MMHGLG5YBPYQBpK1Y1i
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 23 Nov 2022 18:22:01 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=2731
etag: W/"aab-5d8776cb53ba8-gzip"
last-modified: Sun, 20 Feb 2022 18:38:40 GMT
vary: Accept-Encoding
cf-cache-status: HIT
server: cloudflare
cf-ray: 76ebed885c30b52d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
fonts.googleapis.com/css2?family=Roboto%3Aital%2Cwght%400%2C100%3B0%2C300%3B0%2C400%3B0%2C500%3B0%2C700%3B0%2C900%3B1%2C100%3B1%2C300%3B1%2C400%3B1%2C500%3B1%2C700%3B1%2C900&display=swap&ver=6.1.1
200 OK 1.6 kB URL HTTP/2 fonts.googleapis.com/css2?family=Roboto%3Aital%2Cwght%400%2C100%3B0%2C300%3B0%2C400%3B0%2C500%3B0%2C700%3B0%2C900%3B1%2C100%3B1%2C300%3B1%2C400%3B1%2C500%3B1%2C700%3B1%2C900&display=swap&ver=6.1.1
IP
Hash 6db697f23a9c63a162b9346432297c41
4abda704226d233d74d188aa5dd0d64e85907022
2058bf1603ae982aee4eb05a5dc531d9881d2c27e0aa6b625338206e9f50bfe3
GET /css2?family=Roboto%3Aital%2Cwght%400%2C100%3B0%2C300%3B0%2C400%3B0%2C500%3B0%2C700%3B0%2C900%3B1%2C100%3B1%2C300%3B1%2C400%3B1%2C500%3B1%2C700%3B1%2C900&display=swap&ver=6.1.1 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.buildinglink.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 23 Nov 2022 18:22:01 GMT
date: Wed, 23 Nov 2022 18:22:01 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
js.calltrk.com/companies/647579612/external_forms.js?t=1669227722373&
200 OK 24 kB URL HTTP/2 js.calltrk.com/companies/647579612/external_forms.js?t=1669227722373&
IP
Hash c0f9ae37cfefff49df040767beef4958
eafa76e7a264a016219c586265338cb62b5faad6
27d5bb80dd4065030712962a991da4c4c531e3373f5dbf685999eae3a85db5d2
GET /companies/647579612/external_forms.js?t=1669227722373& HTTP/1.1
Host: js.calltrk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.buildinglink.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
date: Wed, 23 Nov 2022 18:22:02 GMT
cache-control: max-age=0, private, must-revalidate
etag: W/"e398c800cb5323885a4a2af58eafdf27"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
x-download-options: noopen
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-request-id: bd80dd42-9ac1-48a5-87c0-a4f890241c69
x-runtime: 0.004739
x-xss-protection: 1; mode=block
x-cache: Miss from cloudfront
via: 1.1 f00e3524edcdf61801454f2bb21e71ce.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: JixPSbC8U9cd87c8ff5QvHJXIv7M6oCHmDFhBZ4pgsa5K0mmTQWzqw==
X-Firefox-Spdy: h2
www.buildinglink.com/public/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
200 OK 4.6 kB URL HTTP/2 www.buildinglink.com/public/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
IP
File type ASCII text, with very long lines (11126)
Hash c41b4e459180955271bcedc2575eda46
3975fa3c03a9ed77c84947c1e16fe7c8671297f6
80785142053ca241e1c9c4e15c579099e4bc1a3e35e31c2b73b94227486c8614
GET /public/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1
Host: www.buildinglink.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.buildinglink.com/marketing/public/main
Cookie: __cflb=02DiuDXvJ1dKekvY3orry22HB3MMHGLG5YBPYQBpK1Y1i
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 23 Nov 2022 18:22:01 GMT
content-type: application/javascript
last-modified: Fri, 21 Jan 2022 13:43:17 GMT
etag: W/"2bd8-5d617cd1f4d02-gzip"
vary: Accept-Encoding
cf-cache-status: HIT
server: cloudflare
cf-ray: 76ebed887c59b52d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash b2b92f1110c82662bfa1addc9bab3130
d6f86300cbfd5b21b3d505c08ffd6edef34b654a
6914944644172d563d0d7c2a5084690fce86ead13949ff29f42842d4bb6e0734
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 18:22:02 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cdn.js.customerlabs.co/cl50833agdusz4.js
200 OK 96 kB URL HTTP/2 cdn.js.customerlabs.co/cl50833agdusz4.js
IP
File type ASCII text, with very long lines (33540)
Hash 4863499e715a0758d47148369c40be37
3bb25659715c1356d8141d6ab418a5ba75f85320
753ba5770b1a03af9aeeb78edc4ca6e8e3ed693fe6c0a43646fa2363b77d7f1f
GET /cl50833agdusz4.js HTTP/1.1
Host: cdn.js.customerlabs.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.buildinglink.com
Connection: keep-alive
Referer: https://www.buildinglink.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 96231
access-control-allow-origin: *
access-control-allow-methods: HEAD, GET, PUT, POST, DELETE
access-control-expose-headers: ETag, x-amz-meta-custom-header
x-amz-replication-status: COMPLETED
last-modified: Fri, 18 Nov 2022 14:24:38 GMT
x-amz-version-id: vXd1YVeqQInaWM9E32mfdqB7S6KtzPzp
accept-ranges: bytes
server: AmazonS3
date: Wed, 23 Nov 2022 18:22:03 GMT
cache-control: max-age=60
etag: "4863499e715a0758d47148369c40be37"
vary: Accept-Encoding,Origin,Access-Control-Request-Headers,Access-Control-Request-Method
x-cache: RefreshHit from cloudfront
via: 1.1 76c917e0bb0ba45eb834d25d76ee125e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 1-rERcCCdUjSa8Fn_5gtti6jDDMTxxgdZtn4VZoM_qo6aF-XENPwwQ==
X-Firefox-Spdy: h2
js.hs-banner.com/20565294.js
200 OK 15 kB URL HTTP/2 js.hs-banner.com/20565294.js
IP
File type ASCII text, with very long lines (60033)
Hash 6e7efe77e88893d4b81bddac86b23a3a
422d508181263ac9925abdad4f26dbba6f87cb85
53b881982c7a446fc0f9acdafd1f79391974f6094440f584d55b0c2cb69a8ff0
GET /20565294.js HTTP/1.1
Host: js.hs-banner.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.buildinglink.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 23 Nov 2022 18:22:02 GMT
content-type: text/javascript; charset=UTF-8
x-amz-id-2: SaDSv3w0ddMy1k7/uibtfakhuUBgKBZq/LSCQN5901mtsDrD+nB4fV245CEjhJAieTH9JfKsWK4=
x-amz-request-id: Z3KWNNQY8G1QDVPX
last-modified: Tue, 15 Nov 2022 15:59:26 GMT
etag: W/"d5d4717b507e16ca93ccdae6bc22bfa1"
x-amz-server-side-encryption: AES256
cache-control: max-age=300, public
x-amz-version-id: tRSwLsnLEVjVefsJve3Hyve4B03WNbpa
access-control-allow-origin: https://www.buildinglink.com
access-control-allow-methods: GET, OPTIONS, PUT, POST, DELETE, PATCH, HEAD
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Accept-Charset, Accept-Encoding, X-Override-Internal-Permissions, X-Properties-Source, X-Properties-SourceId, X-Properties-Flag, X-Hubspot-User-Id, X-Hubspot-Trace, X-Hubspot-Callee, X-Hubspot-Offset, X-Hubspot-No-Trace, X-HubSpot-Static-App-Info, X-HubSpot-Messages-Uri, X-HubSpot-Request-Source, X-HubSpot-Request-Reason, Subscription-Billing-Auth-Token, X-App-CSRF, X-Tools-CSRF, Online-Payment-Signing-UUID, X-Source, X-SourceId, X-Origin-UserId, X-Biden-Request-Source, X-HubSpot-CSRF-hubspotapi, X-Force-Cookie-Refresh, X-Force-Cookie-Refresh-No-Cache, X-HS-User-Request, X-Application-Id, X-HS-Referer, X-HubSpot-Correlation-Id
access-control-expose-headers: x-last-modified-timestamp, X-HubSpot-NotFound, X-HS-User-Request, Link, Server-Timing
access-control-allow-credentials: true
access-control-max-age: 604800
timing-allow-origin: *
vary: origin, Accept-Encoding
expires: Wed, 23 Nov 2022 18:27:02 GMT
cf-cache-status: REVALIDATED
server: cloudflare
cf-ray: 76ebed90dbd3b4f9-OSL
content-encoding: br
X-Firefox-Spdy: h2
stats.g.doubleclick.net/g/collect?v=2&tid=G-2S1YDMR0NM&cid=1880161463.1669227722>m=2oeb90&aip=1
204 No Content 0 B URL HTTP/2 stats.g.doubleclick.net/g/collect?v=2&tid=G-2S1YDMR0NM&cid=1880161463.1669227722>m=2oeb90&aip=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-2S1YDMR0NM&cid=1880161463.1669227722>m=2oeb90&aip=1 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.buildinglink.com
Connection: keep-alive
Referer: https://www.buildinglink.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://www.buildinglink.com
date: Wed, 23 Nov 2022 18:22:03 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash ee8abbfb294611fcf46ff324593c05f5
e312ee90f149132f6bbe9c2f1c21065e8ea1d465
150426ef2c5387260067269ed54a2179e7865fda24c35bde6371529823cb432c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3088
Cache-Control: max-age=119546
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 18:22:03 GMT
Etag: "637d88b5-117"
Expires: Fri, 25 Nov 2022 03:34:29 GMT
Last-Modified: Wed, 23 Nov 2022 02:43:01 GMT
Server: ECS (ska/F711)
X-Cache: HIT
Content-Length: 279
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash b2b92f1110c82662bfa1addc9bab3130
d6f86300cbfd5b21b3d505c08ffd6edef34b654a
6914944644172d563d0d7c2a5084690fce86ead13949ff29f42842d4bb6e0734
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 18:22:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
forms.hsforms.com/embed/v3/counters.gif?key=collected-forms-embed-js-form-bind&count=2
200 OK 35 B URL HTTP/2 forms.hsforms.com/embed/v3/counters.gif?key=collected-forms-embed-js-form-bind&count=2
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash c2196de8ba412c60c22ab491af7b1409
5fbd472222feb8a22cf5b8aa5dc5b8e13af88e2b
6adc3d4c1056996e4e8b765a62604c78b1f867cceb3b15d0b9bedb7c4857f992
GET /embed/v3/counters.gif?key=collected-forms-embed-js-form-bind&count=2 HTTP/1.1
Host: forms.hsforms.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.buildinglink.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 23 Nov 2022 18:22:03 GMT
content-type: image/gif
content-length: 35
x-trace: 2BC840F7ABD7A937077ADF679C14047F07E8D0352C000000000000000000
cache-control: max-age=0, no-cache, no-store
vary: origin
x-hubspot-correlation-id: 96f6a17d-03d2-465b-8570-c172bacd4368
access-control-allow-credentials: false
access-control-expose-headers: X-Origin-Hublet
x-robots-tag: none
cf-cache-status: DYNAMIC
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 76ebed951dab0b61-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash ee8abbfb294611fcf46ff324593c05f5
e312ee90f149132f6bbe9c2f1c21065e8ea1d465
150426ef2c5387260067269ed54a2179e7865fda24c35bde6371529823cb432c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3088
Cache-Control: max-age=119546
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 18:22:03 GMT
Etag: "637d88b5-117"
Expires: Fri, 25 Nov 2022 03:34:29 GMT
Last-Modified: Wed, 23 Nov 2022 02:43:01 GMT
Server: ECS (ska/F711)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
200 OK 471 B IP
Hash 50a0ba5d7f2a295844ed61663e59549a
b48dbe4fc15860a1090f153c7c03fdd21485975c
0a6f9c4cd39ecd32076fef4032ef8adebd546fc71300dd6f15da82ad384ce980
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3622
Cache-Control: max-age=125093
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 18:22:03 GMT
Etag: "637d9c4a-1d7"
Expires: Fri, 25 Nov 2022 05:06:56 GMT
Last-Modified: Wed, 23 Nov 2022 04:06:34 GMT
Server: ECS (ska/F711)
X-Cache: HIT
Content-Length: 471
pixel.tapad.com/idsync/ex/receive?partner_id=3318&partner_device_id=c759a83d-dcfb-40c6-bf9b-ce07d47a35da&partner_url=https%3a%2f%2fa%2eclickcertain%2ecom%2fpx%2fta%2f%3fdone%3dtrue%26ta_id%3d%24%7bTA_DEVICE_ID%7d
302 Found 0 B URL HTTP/2 pixel.tapad.com/idsync/ex/receive?partner_id=3318&partner_device_id=c759a83d-dcfb-40c6-bf9b-ce07d47a35da&partner_url=https%3a%2f%2fa%2eclickcertain%2ecom%2fpx%2fta%2f%3fdone%3dtrue%26ta_id%3d%24%7bTA_DEVICE_ID%7d
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /idsync/ex/receive?partner_id=3318&partner_device_id=c759a83d-dcfb-40c6-bf9b-ce07d47a35da&partner_url=https%3a%2f%2fa%2eclickcertain%2ecom%2fpx%2fta%2f%3fdone%3dtrue%26ta_id%3d%24%7bTA_DEVICE_ID%7d HTTP/1.1
Host: pixel.tapad.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://a.clickcertain.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Wed, 23 Nov 2022 18:22:03 GMT
strict-transport-security: max-age=31536000
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-WoW64
p3p: policyref="http://tapad-taptags.s3.amazonaws.com/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
set-cookie: TapAd_TS=1669227723248;Expires=Sun, 22 Jan 2023 18:22:03 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None
TapAd_DID=735e36a4-f609-4cca-ade0-c2815bacd96d;Expires=Sun, 22 Jan 2023 18:22:03 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None
location: https://pixel.tapad.com/idsync/ex/receive/check?partner_id=3318&partner_device_id=c759a83d-dcfb-40c6-bf9b-ce07d47a35da&partner_url=https%3a%2f%2fa%2eclickcertain%2ecom%2fpx%2fta%2f%3fdone%3dtrue%26ta_id%3d%24%7bTA_DEVICE_ID%7d
content-length: 0
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 278 B IP
Hash 94457fbe7945214060f5a42a0786eba9
f63688c850a79687deb66968412e07423ad54df9
520290f23e93a8415793d1ed74678565e36b294b4c0dc832d262584fe8af3275
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6409
Cache-Control: max-age=88278
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 18:22:03 GMT
Etag: "637d0198-116"
Expires: Thu, 24 Nov 2022 18:53:21 GMT
Last-Modified: Tue, 22 Nov 2022 17:06:32 GMT
Server: ECS (ska/F711)
X-Cache: HIT
Content-Length: 278
ocsp.digicert.com/
200 OK 279 B IP
Hash b26065eafe2ed5554d1c91c03bf4308f
1109d6d466a491ac3d12be611150e05125aafeb1
0292c07f767002b9d87e555aa1496cded49487fa5a540269b2fc6497306520cf
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5086
Cache-Control: max-age=148154
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 18:22:03 GMT
Etag: "637df0a7-117"
Expires: Fri, 25 Nov 2022 11:31:17 GMT
Last-Modified: Wed, 23 Nov 2022 10:06:31 GMT
Server: ECS (ska/F6FE)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
200 OK 279 B IP
Hash 3d6bd99fd84f097301abb3553d75fc44
e6e17e3f91320b9408e02534b7f9467d221f9b1a
530a32b967df70d77920d2a8c47abda6660a4cb656620d1a7d92af64fa6abd66
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6584
Cache-Control: max-age=109016
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 18:22:03 GMT
Etag: "637d51eb-117"
Expires: Fri, 25 Nov 2022 00:38:59 GMT
Last-Modified: Tue, 22 Nov 2022 22:49:15 GMT
Server: ECS (ska/F711)
X-Cache: HIT
Content-Length: 279
pixel.tapad.com/idsync/ex/receive/check?partner_id=3318&partner_device_id=c759a83d-dcfb-40c6-bf9b-ce07d47a35da&partner_url=https%3a%2f%2fa%2eclickcertain%2ecom%2fpx%2fta%2f%3fdone%3dtrue%26ta_id%3d%24%7bTA_DEVICE_ID%7d
302 Found 0 B URL HTTP/2 pixel.tapad.com/idsync/ex/receive/check?partner_id=3318&partner_device_id=c759a83d-dcfb-40c6-bf9b-ce07d47a35da&partner_url=https%3a%2f%2fa%2eclickcertain%2ecom%2fpx%2fta%2f%3fdone%3dtrue%26ta_id%3d%24%7bTA_DEVICE_ID%7d
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /idsync/ex/receive/check?partner_id=3318&partner_device_id=c759a83d-dcfb-40c6-bf9b-ce07d47a35da&partner_url=https%3a%2f%2fa%2eclickcertain%2ecom%2fpx%2fta%2f%3fdone%3dtrue%26ta_id%3d%24%7bTA_DEVICE_ID%7d HTTP/1.1
Host: pixel.tapad.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://a.clickcertain.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
date: Wed, 23 Nov 2022 18:22:03 GMT
strict-transport-security: max-age=31536000
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-WoW64
p3p: policyref="http://tapad-taptags.s3.amazonaws.com/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
set-cookie: TapAd_TS=1669227723308;Expires=Sun, 22 Jan 2023 18:22:03 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None
TapAd_DID=7ccfada7-fc41-4ef6-a300-d3c07373bf7b;Expires=Sun, 22 Jan 2023 18:22:03 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None
TapAd_3WAY_SYNCS=;Expires=Sun, 22 Jan 2023 18:22:03 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None
location: https://a.clickcertain.com/px/ta/?done=true&ta_id=7ccfada7-fc41-4ef6-a300-d3c07373bf7b
content-length: 0
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 50a0ba5d7f2a295844ed61663e59549a
b48dbe4fc15860a1090f153c7c03fdd21485975c
0a6f9c4cd39ecd32076fef4032ef8adebd546fc71300dd6f15da82ad384ce980
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3115
Cache-Control: max-age=124586
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 18:22:03 GMT
Etag: "637d9c4a-1d7"
Expires: Fri, 25 Nov 2022 04:58:29 GMT
Last-Modified: Wed, 23 Nov 2022 04:06:34 GMT
Server: ECS (ska/F6FE)
X-Cache: HIT
Content-Length: 471
googleads.g.doubleclick.net/pagead/viewthroughconversion/1037606382/?random=1669227721938&cv=11&fst=1669227721938&bg=ffffff&guid=ON&async=1>m=2wgb90&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fwww.buildinglink.com%2Fmarketing%2Fpublic%2Fmain&tiba=Industry-Leading%20Property%20Management%20Software%20-%20BuildingLink&auid=647244029.1669227722&rfmt=3&fmt=4
200 OK 893 B URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/1037606382/?random=1669227721938&cv=11&fst=1669227721938&bg=ffffff&guid=ON&async=1>m=2wgb90&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fwww.buildinglink.com%2Fmarketing%2Fpublic%2Fmain&tiba=Industry-Leading%20Property%20Management%20Software%20-%20BuildingLink&auid=647244029.1669227722&rfmt=3&fmt=4
IP
File type ASCII text, with very long lines (1939), with no line terminators
Hash 50db02747e005a1b575b44eb8bff68d8
1f90094e6be393f7c410214fb324519703d7e01d
f9fbacf73df81ecb3fc77fc86ae31ece20ad671236309f15542f6cb497540965
GET /pagead/viewthroughconversion/1037606382/?random=1669227721938&cv=11&fst=1669227721938&bg=ffffff&guid=ON&async=1>m=2wgb90&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fwww.buildinglink.com%2Fmarketing%2Fpublic%2Fmain&tiba=Industry-Leading%20Property%20Management%20Software%20-%20BuildingLink&auid=647244029.1669227722&rfmt=3&fmt=4 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.buildinglink.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 23 Nov 2022 18:22:03 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 893
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Wed, 23-Nov-2022 18:37:03 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash c04aed338f8610ba6b0acc4ab749c52e
9cce76bf45ca7cb7e101d6c5c8013ecc83f188a4
4d4e0d35a6f2357ff749b146e4f0fdff7f5f8631b3e6efee952f5c82fb256fbd
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 18:22:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1325)
Hash 47e6f374ca946fddd5b59871b325736c
baa9282efc8785e84d247c3bff518eaa45f101c4
16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.buildinglink.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Wed, 23 Nov 2022 16:41:08 GMT
expires: Wed, 23 Nov 2022 18:41:08 GMT
cache-control: public, max-age=7200
age: 6055
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-2S1YDMR0NM&cid=1880161463.1669227722>m=2oeb90&aip=1&z=565896912
200 OK 42 B URL HTTP/2 www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-2S1YDMR0NM&cid=1880161463.1669227722>m=2oeb90&aip=1&z=565896912
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-2S1YDMR0NM&cid=1880161463.1669227722>m=2oeb90&aip=1&z=565896912 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.buildinglink.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 23 Nov 2022 18:22:03 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash c04aed338f8610ba6b0acc4ab749c52e
9cce76bf45ca7cb7e101d6c5c8013ecc83f188a4
4d4e0d35a6f2357ff749b146e4f0fdff7f5f8631b3e6efee952f5c82fb256fbd
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 18:22:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.r2m02.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.r2m02.amazontrust.com/
IP
Hash ab4aa8cd05ebe516a54efd94f075c6b4
8bc560e0b6774fbfe6f296d8e27b0670342167dd
b27ddd30019022a5a18437efedc3a77e724cc07721cf16f0d220e8d1577559ab
POST / HTTP/1.1
Host: ocsp.r2m02.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=133328
Date: Wed, 23 Nov 2022 18:22:03 GMT
Etag: "637dc802-1d7"
Expires: Fri, 25 Nov 2022 07:24:11 GMT
Last-Modified: Wed, 23 Nov 2022 07:13:06 GMT
Server: ECS (dcb/7EED)
X-Cache: Miss from cloudfront
Via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: nKElW0PRanRJ2_-CltkIe211SvxfRNWFPzqSphHeoSomlzv51oM4ug==
Age: 665
vars.hotjar.com/box-5e66f98b4ee957db209dc6f63e3d59dd.html
200 OK 1.0 kB URL HTTP/2 vars.hotjar.com/box-5e66f98b4ee957db209dc6f63e3d59dd.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2368), with no line terminators
Hash e0652b84b7b3b650769c759fc520c3f8
0b55d6e28613350c7f41b88f19e726e6751ad03b
94b4c240f83065223dcacdd3f8b69cb229d0616edc3e2041eef3e270d859fc3d
GET /box-5e66f98b4ee957db209dc6f63e3d59dd.html HTTP/1.1
Host: vars.hotjar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.buildinglink.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html
content-length: 1035
date: Wed, 23 Nov 2022 13:10:06 GMT
accept-ranges: bytes
cache-control: max-age=31536000
content-encoding: br
cross-origin-embedder-policy: require-corp
cross-origin-resource-policy: cross-origin
etag: "e0652b84b7b3b650769c759fc520c3f8"
last-modified: Wed, 23 Nov 2022 13:09:18 GMT
strict-transport-security: max-age=2592000; includeSubDomains
x-robots-tag: none
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 1d8cf7c8865ed1078c19a98771ad34ca.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: GMM5kipHwlqdYZmUgZHEZSGJUI1OZteZdb9y9vVpdtzvIBf4_lL8FA==
age: 18717
X-Firefox-Spdy: h2
a.clickcertain.com/px/ta/?done=true&ta_id=7ccfada7-fc41-4ef6-a300-d3c07373bf7b
204 No Content 0 B URL HTTP/2 a.clickcertain.com/px/ta/?done=true&ta_id=7ccfada7-fc41-4ef6-a300-d3c07373bf7b
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /px/ta/?done=true&ta_id=7ccfada7-fc41-4ef6-a300-d3c07373bf7b HTTP/1.1
Host: a.clickcertain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://a.clickcertain.com/
Connection: keep-alive
Cookie: _ccpx_u=c759a83d%2ddcfb%2d40c6%2dbf9b%2dce07d47a35da; _ccpx=24abd7d60f26320; _ccpx_24abd7d60f26320=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Wed, 23 Nov 2022 18:22:03 GMT
set-cookie: _ccpx_u=c759a83d%2ddcfb%2d40c6%2dbf9b%2dce07d47a35da; Expires=Thu, 23 Nov 2023 18:22:03 GMT; Path=/; HttpOnly; SameSite=None; Secure
x-frontend: cc-nginx-c76b96594-7r2hm:cc-nginx-c76b96594-7r2hm
x-requestid: 1fd4130d-fa2a-4fc2-acf9-69a3b5cee100
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Zx0iWs5lGp%2Ft5AQgPPsn9iEfGJK5XPkv1Mi5TqbvyjvdbekfNiWJ9%2BUP300NIAp0ei4UPaLiaoAjfQBwGiaArU9AxnyBXpw1BaMZ%2Bcneloi9oF%2FkekTXTV8pol1cLdIbnLbtzw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76ebed96e8bcb50b-OSL
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 0c6d4bb63bcc9c2e2931f3aeacd13ed0
846e5a0c60fdde69782cde989f2ab4ea24c9f256
23921af286d7b52a6d1a46083f3f00e12faaa20978265654952fb866eb664715
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=106719
Date: Wed, 23 Nov 2022 18:22:03 GMT
Etag: "637d5ba0-1d7"
Expires: Fri, 25 Nov 2022 00:00:42 GMT
Last-Modified: Tue, 22 Nov 2022 23:30:40 GMT
Server: ECS (dcb/7EEF)
X-Cache: Miss from cloudfront
Via: 1.1 76c917e0bb0ba45eb834d25d76ee125e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: kZditiqui4_G0dq1GBu1RHj9F22uRNWLnQ-RztZdUHx-uph-VUHUjA==
Age: 1802
i.liadm.com/s/56408?bidder_id=200441&bidder_uuid=c759a83d-dcfb-40c6-bf9b-ce07d47a35da&ccid=c759a83d-dcfb-40c6-bf9b-ce07d47a35da&redir=https%253a%252f%252fcm%252eg%252edoubleclick%252enet%252fpixel%253fgoogle_nid%253dclickcertain%2526google_cm%253d1%2526google_sc%253d1%2526redir%253dhttps%25253a%25252f%25252fsecure%25252eadnxs%25252ecom%25252fgetuidu%25253fhttps%25253a%25252f%25252fa%25252eclickcertain%25252ecom%25252fpx%25252fimg%25252fbidswitch%25252f%25253fdone%25253dtrue%252526ccid%25253dc759a83d%25252ddcfb%25252d40c6%25252dbf9b%25252dce07d47a35da%252526anx_uId%25253d%252524UID
303 See Other 0 B URL HTTP/1.1 i.liadm.com/s/56408?bidder_id=200441&bidder_uuid=c759a83d-dcfb-40c6-bf9b-ce07d47a35da&ccid=c759a83d-dcfb-40c6-bf9b-ce07d47a35da&redir=https%253a%252f%252fcm%252eg%252edoubleclick%252enet%252fpixel%253fgoogle_nid%253dclickcertain%2526google_cm%253d1%2526google_sc%253d1%2526redir%253dhttps%25253a%25252f%25252fsecure%25252eadnxs%25252ecom%25252fgetuidu%25253fhttps%25253a%25252f%25252fa%25252eclickcertain%25252ecom%25252fpx%25252fimg%25252fbidswitch%25252f%25253fdone%25253dtrue%252526ccid%25253dc759a83d%25252ddcfb%25252d40c6%25252dbf9b%25252dce07d47a35da%252526anx_uId%25253d%252524UID
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /s/56408?bidder_id=200441&bidder_uuid=c759a83d-dcfb-40c6-bf9b-ce07d47a35da&ccid=c759a83d-dcfb-40c6-bf9b-ce07d47a35da&redir=https%253a%252f%252fcm%252eg%252edoubleclick%252enet%252fpixel%253fgoogle_nid%253dclickcertain%2526google_cm%253d1%2526google_sc%253d1%2526redir%253dhttps%25253a%25252f%25252fsecure%25252eadnxs%25252ecom%25252fgetuidu%25253fhttps%25253a%25252f%25252fa%25252eclickcertain%25252ecom%25252fpx%25252fimg%25252fbidswitch%25252f%25253fdone%25253dtrue%252526ccid%25253dc759a83d%25252ddcfb%25252d40c6%25252dbf9b%25252dce07d47a35da%252526anx_uId%25253d%252524UID HTTP/1.1
Host: i.liadm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://a.clickcertain.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 303 See Other
Date: Wed, 23 Nov 2022 18:22:03 GMT
Content-Length: 0
Connection: keep-alive
Location: /s/56408?redir=https%253a%252f%252fcm%252eg%252edoubleclick%252enet%252fpixel%253fgoogle_nid%253dclickcertain%2526google_cm%253d1%2526google_sc%253d1%2526redir%253dhttps%25253a%25252f%25252fsecure%25252eadnxs%25252ecom%25252fgetuidu%25253fhttps%25253a%25252f%25252fa%25252eclickcertain%25252ecom%25252fpx%25252fimg%25252fbidswitch%25252f%25253fdone%25253dtrue%252526ccid%25253dc759a83d%25252ddcfb%25252d40c6%25252dbf9b%25252dce07d47a35da%252526anx_uId%25253d%252524UID&bidder_id=200441&bidder_uuid=c759a83d-dcfb-40c6-bf9b-ce07d47a35da&_li_chk=true&ccid=c759a83d-dcfb-40c6-bf9b-ce07d47a35da&previous_uuid=464104d655e340e6a06fa169c4887e7e
Set-Cookie: lidid=464104d6-55e3-40e6-a06f-a169c4887e7e; Max-Age=63072000; Expires=Fri, 22 Nov 2024 18:22:03 GMT; SameSite=None; Path=/; Domain=liadm.com; Secure
Request-Time: 0
Strict-Transport-Security: max-age=31536000; includeSubDomains
api.hubapi.com/hs-script-loader-public/v1/config/adwords/enhanced-conversion-event-settings/json?portalId=20565294
200 OK 2 B URL HTTP/2 api.hubapi.com/hs-script-loader-public/v1/config/adwords/enhanced-conversion-event-settings/json?portalId=20565294
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash d751713988987e9331980363e24189ce
97d170e1550eee4afc0af065b78cda302a97674c
4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
GET /hs-script-loader-public/v1/config/adwords/enhanced-conversion-event-settings/json?portalId=20565294 HTTP/1.1
Host: api.hubapi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.buildinglink.com
Connection: keep-alive
Referer: https://www.buildinglink.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 23 Nov 2022 18:22:03 GMT
content-type: application/json;charset=utf-8
content-length: 2
cf-ray: 76ebed96cfc7b4fd-OSL
access-control-allow-origin: https://www.buildinglink.com
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: origin, Accept-Encoding
cf-cache-status: DYNAMIC
access-control-allow-credentials: false
access-control-allow-headers: *
access-control-allow-methods: GET, OPTIONS, PUT, POST, DELETE, PATCH, HEAD
access-control-max-age: 180
x-hubspot-correlation-id: 74856e6e-1470-44ae-8071-c373b6898e32
x-trace: 2B9AFFA3409760F542BD5F5A2434C5690A2364F6E8000000000000000000
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ER1%2BIDxYfrqRnrUV%2Fu4eqBETjbQx%2BNXbSnPEIQyooNL0v1bVJbVHy4VQwy7iEwjnEbrDQgJB8vx%2BVdg7Cy3BJeFKg2qbgTJZ2bClP6kJoSG7N5L9FLFc8kzQHVefcuHk"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
server: cloudflare
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
a.browserspeed.support/cs?puid=ce17e558-bcd4-5566-b7f9-1cc77f4f931e&pid=lc
302 Found 24 B URL HTTP/2 a.browserspeed.support/cs?puid=ce17e558-bcd4-5566-b7f9-1cc77f4f931e&pid=lc
IP
File type HTML document, ASCII text
Hash cd5fa747861f510d1d45ab9dc80a16a0
90d910869fbe5e0f79b7f7e58f59f5303f46ad78
5bdd19de1ad3c04f1a88334882b16565cef8ac274902e671a72ebebdb35c697c
GET /cs?puid=ce17e558-bcd4-5566-b7f9-1cc77f4f931e&pid=lc HTTP/1.1
Host: a.browserspeed.support
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://a.clickcertain.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: awselb/2.0
date: Wed, 23 Nov 2022 18:22:03 GMT
content-type: text/html; charset=utf-8
content-length: 24
location: https://a.browserspeed.support/
set-cookie: tuid=16c5f3ff-343a-46af-9f83-83a89976cee1; Path=/; Domain=a.browserspeed.support; Max-Age=31536000; HttpOnly; Secure; SameSite=None
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 15 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15344, version 1.0\012- data
Hash 5d4aeb4e5f5ef754e307d7ffaef688bd
06db651cdf354c64a7383ea9c77024ef4fb4cef8
3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 19 Nov 2022 12:31:58 GMT
expires: Sun, 19 Nov 2023 12:31:58 GMT
cache-control: public, max-age=31536000
age: 366605
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15552, version 1.0\012- data
Hash 285467176f7fe6bb6a9c6873b3dad2cc
ea04e4ff5142ddd69307c183def721a160e0a64e
5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 17 Nov 2022 21:46:16 GMT
expires: Fri, 17 Nov 2023 21:46:16 GMT
cache-control: public, max-age=31536000
age: 506147
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
i.liadm.com/s/56408?redir=https%253a%252f%252fcm%252eg%252edoubleclick%252enet%252fpixel%253fgoogle_nid%253dclickcertain%2526google_cm%253d1%2526google_sc%253d1%2526redir%253dhttps%25253a%25252f%25252fsecure%25252eadnxs%25252ecom%25252fgetuidu%25253fhttps%25253a%25252f%25252fa%25252eclickcertain%25252ecom%25252fpx%25252fimg%25252fbidswitch%25252f%25253fdone%25253dtrue%252526ccid%25253dc759a83d%25252ddcfb%25252d40c6%25252dbf9b%25252dce07d47a35da%252526anx_uId%25253d%252524UID&bidder_id=200441&bidder_uuid=c759a83d-dcfb-40c6-bf9b-ce07d47a35da&_li_chk=true&ccid=c759a83d-dcfb-40c6-bf9b-ce07d47a35da&previous_uuid=464104d655e340e6a06fa169c4887e7e
303 See Other 0 B URL HTTP/1.1 i.liadm.com/s/56408?redir=https%253a%252f%252fcm%252eg%252edoubleclick%252enet%252fpixel%253fgoogle_nid%253dclickcertain%2526google_cm%253d1%2526google_sc%253d1%2526redir%253dhttps%25253a%25252f%25252fsecure%25252eadnxs%25252ecom%25252fgetuidu%25253fhttps%25253a%25252f%25252fa%25252eclickcertain%25252ecom%25252fpx%25252fimg%25252fbidswitch%25252f%25253fdone%25253dtrue%252526ccid%25253dc759a83d%25252ddcfb%25252d40c6%25252dbf9b%25252dce07d47a35da%252526anx_uId%25253d%252524UID&bidder_id=200441&bidder_uuid=c759a83d-dcfb-40c6-bf9b-ce07d47a35da&_li_chk=true&ccid=c759a83d-dcfb-40c6-bf9b-ce07d47a35da&previous_uuid=464104d655e340e6a06fa169c4887e7e
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /s/56408?redir=https%253a%252f%252fcm%252eg%252edoubleclick%252enet%252fpixel%253fgoogle_nid%253dclickcertain%2526google_cm%253d1%2526google_sc%253d1%2526redir%253dhttps%25253a%25252f%25252fsecure%25252eadnxs%25252ecom%25252fgetuidu%25253fhttps%25253a%25252f%25252fa%25252eclickcertain%25252ecom%25252fpx%25252fimg%25252fbidswitch%25252f%25253fdone%25253dtrue%252526ccid%25253dc759a83d%25252ddcfb%25252d40c6%25252dbf9b%25252dce07d47a35da%252526anx_uId%25253d%252524UID&bidder_id=200441&bidder_uuid=c759a83d-dcfb-40c6-bf9b-ce07d47a35da&_li_chk=true&ccid=c759a83d-dcfb-40c6-bf9b-ce07d47a35da&previous_uuid=464104d655e340e6a06fa169c4887e7e HTTP/1.1
Host: i.liadm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://a.clickcertain.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 303 See Other
Date: Wed, 23 Nov 2022 18:22:03 GMT
Content-Length: 0
Connection: keep-alive
Location: https://a.clickcertain.com/px/li/?redir=https%3a%2f%2fcm%2eg%2edoubleclick%2enet%2fpixel%3fgoogle_nid%3dclickcertain%26google_cm%3d1%26google_sc%3d1%26redir%3dhttps%253a%252f%252fsecure%252eadnxs%252ecom%252fgetuidu%253fhttps%253a%252f%252fa%252eclickcertain%252ecom%252fpx%252fimg%252fbidswitch%252f%253fdone%253dtrue%2526ccid%253dc759a83d%252ddcfb%252d40c6%252dbf9b%252dce07d47a35da%2526anx_uId%253d%2524UID&ccid=c759a83d-dcfb-40c6-bf9b-ce07d47a35da
Set-Cookie: _li_ss=MgYIkgEQ1hM; Max-Age=2592000; Expires=Fri, 23 Dec 2022 18:22:03 GMT; SameSite=None; Path=/s; Secure
lidid=eeb0f66d-eba5-4e47-a1fa-f049a97f2339; Max-Age=63072000; Expires=Fri, 22 Nov 2024 18:22:03 GMT; SameSite=None; Path=/; Domain=liadm.com; Secure
Request-Time: 2
Strict-Transport-Security: max-age=31536000; includeSubDomains
js.hs-analytics.net/analytics/1669227600000/20565294.js
200 OK 20 kB URL HTTP/2 js.hs-analytics.net/analytics/1669227600000/20565294.js
IP
File type ASCII text, with very long lines (64108)
Hash 1c623b5c7d00acc7d96d74572ad72055
cd480c49bfb1aedf3219fec997f3e489d97cb97a
ea7b37b3cc1367d4bb06c4af2dd04f01fd4bb1888fc5c00e241614d8795f2ed9
GET /analytics/1669227600000/20565294.js HTTP/1.1
Host: js.hs-analytics.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.buildinglink.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 23 Nov 2022 18:22:03 GMT
content-type: text/javascript
x-amz-id-2: QmxWJQ4jSXiOasckFf5dI9/QlSXuX82jNuxAVvri0HuEuvakrlpAyp4iZtzig0lh3ht8VcTHVY4=
x-amz-request-id: TGJVFNST6HRS2D1W
last-modified: Tue, 15 Nov 2022 15:59:29 GMT
etag: W/"bf9c43a7237d9fadad17efeaa588aca3"
x-amz-server-side-encryption: AES256
cache-control: max-age=300, public
x-amz-version-id: null
access-control-allow-credentials: false
vary: origin, Accept-Encoding
expires: Wed, 23 Nov 2022 18:27:03 GMT
cf-cache-status: MISS
server: cloudflare
cf-ray: 76ebed96ea2eb4eb-OSL
content-encoding: br
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash b0082eed5b8f14d4694afbf7b5e17482
99ad7255205ba37430a4dd5f8a80fad7494b4a79
b036896dbd00afd98f9ef46061d284fa0f06c51c6db4fb11a29725372b14b8a4
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=144755
Date: Wed, 23 Nov 2022 18:22:03 GMT
Etag: "637de15a-1d7"
Expires: Fri, 25 Nov 2022 10:34:38 GMT
Last-Modified: Wed, 23 Nov 2022 09:01:14 GMT
Server: ECS (bsa/EB1E)
X-Cache: Miss from cloudfront
Via: 1.1 76c917e0bb0ba45eb834d25d76ee125e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: IYbOXoE4xiZqOkx6m-tvifwAdNg1_qG5Va6aqIY41yv56rVwhhsfYg==
Age: 5604
script.crazyegg.com/pages/scripts/0112/6942.js
200 OK 2.2 kB URL HTTP/2 script.crazyegg.com/pages/scripts/0112/6942.js
IP
File type ASCII text, with very long lines (6087)
Hash 8fa0b56ec3c66effb2ff45d041da33ff
6c5bccfc34e9dc02a8f452901b5e83d44f9e8fc0
3a1b1d953f1f96a4b9e6660a5777ef145a89ae5a96175d6e48b4b2a4b74de066
GET /pages/scripts/0112/6942.js HTTP/1.1
Host: script.crazyegg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.buildinglink.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 23 Nov 2022 18:22:03 GMT
content-type: text/javascript
content-length: 2204
access-control-expose-headers: CE-Version
ce-version: 11.5.9
cache-control: public, max-age=300, s-maxage=1209600
timing-allow-origin: *
last-modified: Wed, 23 Nov 2022 18:22:03 GMT
content-encoding: gzip
access-control-allow-origin: *
cf-cache-status: EXPIRED
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 76ebed96caa8b50c-OSL
X-Firefox-Spdy: h2
a.browserspeed.support/
200 OK 4 B IP
File type ASCII text, with no line terminators
Hash 72054d9a6fbdcc7df012e19f32345b65
52dd4c74c813db3790179c4f236ceadaca3467a8
c48b5b1a9776c84602de2306d7903a7241158a5077e7a8519af75c33441b8334
Analyzer Verdict Alert fortinet Phishing
GET / HTTP/1.1
Host: a.browserspeed.support
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://a.clickcertain.com/
Connection: keep-alive
Cookie: tuid=16c5f3ff-343a-46af-9f83-83a89976cee1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: awselb/2.0
date: Wed, 23 Nov 2022 18:22:03 GMT
content-type: application/json; charset=utf-8
content-length: 4
set-cookie: tuid=16c5f3ff-343a-46af-9f83-83a89976cee1; Path=/; Domain=a.browserspeed.support; Max-Age=31536000; HttpOnly; Secure; SameSite=None
X-Firefox-Spdy: h2
script.hotjar.com/modules.142ca8ad0099c834b74b.js
200 OK 69 kB URL HTTP/2 script.hotjar.com/modules.142ca8ad0099c834b74b.js
IP
File type Unicode text, UTF-8 text, with very long lines (48714)
Hash 89212b5c8abb5621e2a22cf9215bd643
2b18176c96f995460cd9d4e5282a65232629f342
f07b1382d3ba11923089aaf8c381cc515bd0f5b25f46472a84c228deb4a5dde5
GET /modules.142ca8ad0099c834b74b.js HTTP/1.1
Host: script.hotjar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.buildinglink.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
content-length: 68590
date: Wed, 23 Nov 2022 13:10:06 GMT
accept-ranges: bytes
access-control-allow-origin: *
cache-control: max-age=31536000
content-encoding: br
cross-origin-resource-policy: cross-origin
etag: "89212b5c8abb5621e2a22cf9215bd643"
last-modified: Wed, 23 Nov 2022 13:09:18 GMT
strict-transport-security: max-age=2592000; includeSubDomains
x-content-type-options: nosniff
x-robots-tag: none
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 80d21802b1b80c40e55ccf83433b8eac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 6SlZEPYWWnAI-zNNmN1JcB9M6P30k7XYNlMdPEoHmkV7zrSYDcvG5w==
age: 18717
X-Firefox-Spdy: h2
a.remarketstats.com/px/smart/?c=24abd7d60f26320&seg=marketing/public/main&partner_id=cl50833agdusz475a2deda-f7a9-4130-b17d-1fea89699421
302 Found 42 B URL HTTP/2 a.remarketstats.com/px/smart/?c=24abd7d60f26320&seg=marketing/public/main&partner_id=cl50833agdusz475a2deda-f7a9-4130-b17d-1fea89699421
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /px/smart/?c=24abd7d60f26320&seg=marketing/public/main&partner_id=cl50833agdusz475a2deda-f7a9-4130-b17d-1fea89699421 HTTP/1.1
Host: a.remarketstats.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.buildinglink.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
date: Wed, 23 Nov 2022 18:22:03 GMT
content-type: text/html
location: https://a.clickcertain.com/px/smart/a/?c=24abd7d60f26320&partner_id=cl50833agdusz475a2deda-f7a9-4130-b17d-1fea89699421&seg=marketing/public/main
x-frontend: cc-nginx-c76b96594-c4vdz:cc-nginx-c76b96594-c4vdz
x-requestid: 28a13461-919d-4407-816e-e8c20863406f
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QZFmjLhfD%2BFW8L5MHkFwpjhk2Jx1nsiiTyuz%2FTie4r4uLMba5uSDurUZ9rlgZmRhxUIfoxXQ%2FXivk8qoa0Whij4VVvAQVFO13DSTRC9q%2F7C%2F%2FptbHkpaW%2FKXdDeKkneEYW9Hn5w%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76ebed986f53b509-OSL
X-Firefox-Spdy: h2
static.hotjar.com/c/hotjar-3073375.js?sv=7
200 OK 2.8 kB URL HTTP/2 static.hotjar.com/c/hotjar-3073375.js?sv=7
IP
File type ASCII text, with very long lines (5909)
Hash 8a6e4ef525e1153d8b796f29b3e8e642
bf2d47927faecfa5c3c794f02c9891fd8939f5ef
30dae211b86c3fc05129ecf59c5866253955bd7e3a697377c451a93cc191b627
GET /c/hotjar-3073375.js?sv=7 HTTP/1.1
Host: static.hotjar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.buildinglink.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
date: Wed, 23 Nov 2022 18:22:03 GMT
access-control-allow-origin: *
cache-control: max-age=60
content-encoding: br
cross-origin-resource-policy: cross-origin
etag: W/3d8b12125706f578fd195ded1a10e10b
strict-transport-security: max-age=2592000; includeSubDomains
x-cache-hit: 1
x-content-type-options: nosniff
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 6480520a5e02f3163410e3134bd77baa.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: RY5RyR1OVCE2YwPu4eAUieRtvDenv1Hmv5Oz5cNDaDkEZuMygJOINg==
X-Firefox-Spdy: h2
io.v2.customerlabs.co/externalIds?customerlabs_user_id=cl50833agdusz475a2deda-f7a9-4130-b17d-1fea89699421&id=cl50833agdusz4&uid=cl50833agdusz475a2deda-f7a9-4130-b17d-1fea89699421
200 OK 178 B URL HTTP/1.1 io.v2.customerlabs.co/externalIds?customerlabs_user_id=cl50833agdusz475a2deda-f7a9-4130-b17d-1fea89699421&id=cl50833agdusz4&uid=cl50833agdusz475a2deda-f7a9-4130-b17d-1fea89699421
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 450469a5bab3472b5f9304bf067b5180
0f9c95fddccb56b887e772697435e6960d1fcdcc
d040b4e2bdcd7d008e0c1adf6dc5fe3e1ca2cf648492a6f9779115008312b350
GET /externalIds?customerlabs_user_id=cl50833agdusz475a2deda-f7a9-4130-b17d-1fea89699421&id=cl50833agdusz4&uid=cl50833agdusz475a2deda-f7a9-4130-b17d-1fea89699421 HTTP/1.1
Host: io.v2.customerlabs.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.buildinglink.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Access-Control-Allow-Headers: Origin, Accept, Content-Type, Max-Age, X-CL-APP-ID, X-Content-Type-Options
Access-Control-Allow-Methods: POST, OPTIONS
Content-Type: application/json
Date: Wed, 23 Nov 2022 18:22:04 GMT
Server: nginx/1.12.1
Content-Length: 178
Connection: keep-alive
a.clickcertain.com/px/smart/a/?c=24abd7d60f26320&partner_id=cl50833agdusz475a2deda-f7a9-4130-b17d-1fea89699421&seg=marketing/public/main
302 Found 0 B URL HTTP/2 a.clickcertain.com/px/smart/a/?c=24abd7d60f26320&partner_id=cl50833agdusz475a2deda-f7a9-4130-b17d-1fea89699421&seg=marketing/public/main
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /px/smart/a/?c=24abd7d60f26320&partner_id=cl50833agdusz475a2deda-f7a9-4130-b17d-1fea89699421&seg=marketing/public/main HTTP/1.1
Host: a.clickcertain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.buildinglink.com/
Connection: keep-alive
Cookie: _ccpx_u=c759a83d%2ddcfb%2d40c6%2dbf9b%2dce07d47a35da; _ccpx=24abd7d60f26320; _ccpx_24abd7d60f26320=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
date: Wed, 23 Nov 2022 18:22:03 GMT
content-type: text/javascript
location: https://a.clickcertain.com/px/?c=24abd7d60f26320
set-cookie: _ccpx_u=c759a83d%2ddcfb%2d40c6%2dbf9b%2dce07d47a35da; Expires=Thu, 23 Nov 2023 18:22:03 GMT; Path=/; HttpOnly; SameSite=None; Secure
x-frontend: cc-nginx-c76b96594-94d6q:cc-nginx-c76b96594-94d6q
x-requestid: 886a6df7-5590-42aa-a089-1a019acf6cc3
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zn06FjW0R%2BdisBWCmLkS70bOB8WsvpepXeDWe719xR1iyiaPfvTiny74CHjgG%2BV6qfTRTQlzVrF3GorqnsDGen6K8paBfTn2%2BWdRfmLCTKZsTeMWbZeS88E3897ZFVmzvO2hXQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76ebed99ad9eb50b-OSL
X-Firefox-Spdy: h2
a.clickcertain.com/px/li/?redir=https%3a%2f%2fcm%2eg%2edoubleclick%2enet%2fpixel%3fgoogle_nid%3dclickcertain%26google_cm%3d1%26google_sc%3d1%26redir%3dhttps%253a%252f%252fsecure%252eadnxs%252ecom%252fgetuidu%253fhttps%253a%252f%252fa%252eclickcertain%252ecom%252fpx%252fimg%252fbidswitch%252f%253fdone%253dtrue%2526ccid%253dc759a83d%252ddcfb%252d40c6%252dbf9b%252dce07d47a35da%2526anx_uId%253d%2524UID&ccid=c759a83d-dcfb-40c6-bf9b-ce07d47a35da
302 Found 509 B URL HTTP/2 a.clickcertain.com/px/li/?redir=https%3a%2f%2fcm%2eg%2edoubleclick%2enet%2fpixel%3fgoogle_nid%3dclickcertain%26google_cm%3d1%26google_sc%3d1%26redir%3dhttps%253a%252f%252fsecure%252eadnxs%252ecom%252fgetuidu%253fhttps%253a%252f%252fa%252eclickcertain%252ecom%252fpx%252fimg%252fbidswitch%252f%253fdone%253dtrue%2526ccid%253dc759a83d%252ddcfb%252d40c6%252dbf9b%252dce07d47a35da%2526anx_uId%253d%2524UID&ccid=c759a83d-dcfb-40c6-bf9b-ce07d47a35da
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (332), with CRLF, LF line terminators
Hash 66c1c42a1f64c219f7cee7592d001e11
8b6c1b1444de3f25bfbab85edd4cf388d06a758e
dde50bf911a845927d0b8651b0a8f0bfa606c1fbc202371db68459900f84f772
GET /px/li/?redir=https%3a%2f%2fcm%2eg%2edoubleclick%2enet%2fpixel%3fgoogle_nid%3dclickcertain%26google_cm%3d1%26google_sc%3d1%26redir%3dhttps%253a%252f%252fsecure%252eadnxs%252ecom%252fgetuidu%253fhttps%253a%252f%252fa%252eclickcertain%252ecom%252fpx%252fimg%252fbidswitch%252f%253fdone%253dtrue%2526ccid%253dc759a83d%252ddcfb%252d40c6%252dbf9b%252dce07d47a35da%2526anx_uId%253d%2524UID&ccid=c759a83d-dcfb-40c6-bf9b-ce07d47a35da HTTP/1.1
Host: a.clickcertain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://a.clickcertain.com/
Connection: keep-alive
Cookie: _ccpx_u=c759a83d%2ddcfb%2d40c6%2dbf9b%2dce07d47a35da; _ccpx=24abd7d60f26320; _ccpx_24abd7d60f26320=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
date: Wed, 23 Nov 2022 18:22:04 GMT
content-type: text/html
location: https://cm.g.doubleclick.net/pixel?google_nid=clickcertain&google_cm=1&google_sc=1&redir=https%3a%2f%2fsecure%2eadnxs%2ecom%2fgetuidu%3fhttps%3a%2f%2fa%2eclickcertain%2ecom%2fpx%2fimg%2fbidswitch%2f%3fdone%3dtrue%26ccid%3dc759a83d%2ddcfb%2d40c6%2dbf9b%2dce07d47a35da%26anx_uId%3d%24UID
set-cookie: _ccpx_u=c759a83d%2ddcfb%2d40c6%2dbf9b%2dce07d47a35da; Expires=Thu, 23 Nov 2023 18:22:04 GMT; Path=/; HttpOnly; SameSite=None; Secure
x-frontend: cc-nginx-c76b96594-26vl2:cc-nginx-c76b96594-26vl2
x-requestid: 62916d3a-6279-4b19-8d08-bc5557befa0c
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=47Dsdbd1uChvphX7%2BMGXDdCNfGQWaSV8oDFDrcXL%2FUyR1uMKWiAnL2NRqa%2Boy9n%2F5qEW8zLFcDf7cXLcjAlI%2BWvrkTp4iL%2BJqPalulhfdtIrz3EsXur3qiPjcDz66Ep6Io6lmQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76ebed9adfe0b50b-OSL
X-Firefox-Spdy: h2
cm.g.doubleclick.net/pixel?google_nid=clickcertain&google_cm=1&google_sc=1&redir=https%3A%2F%2Fsecure%2Eadnxs%2Ecom%2Fgetuidu%3Fhttps%3A%2F%2Fa%2Eclickcertain%2Ecom%2Fpx%2Fimg%2Fbidswitch%2F%3Fdone%3Dtrue%26ccid%3Dc759a83d%2Ddcfb%2D40c6%2Dbf9b%2Dce07d47a35da%26anx_uId%3D%24UID&google_tc=
302 Found 455 B URL HTTP/2 cm.g.doubleclick.net/pixel?google_nid=clickcertain&google_cm=1&google_sc=1&redir=https%3A%2F%2Fsecure%2Eadnxs%2Ecom%2Fgetuidu%3Fhttps%3A%2F%2Fa%2Eclickcertain%2Ecom%2Fpx%2Fimg%2Fbidswitch%2F%3Fdone%3Dtrue%26ccid%3Dc759a83d%2Ddcfb%2D40c6%2Dbf9b%2Dce07d47a35da%26anx_uId%3D%24UID&google_tc=
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Hash 38f714142ae14189ad366bf18eda9c75
12177092e785763872c0220295be3400b4420877
e4e1b4b0bef52d3bf3493ffaf10c1c8d5cc8e064296718f8984a165ffa97e708
GET /pixel?google_nid=clickcertain&google_cm=1&google_sc=1&redir=https%3A%2F%2Fsecure%2Eadnxs%2Ecom%2Fgetuidu%3Fhttps%3A%2F%2Fa%2Eclickcertain%2Ecom%2Fpx%2Fimg%2Fbidswitch%2F%3Fdone%3Dtrue%26ccid%3Dc759a83d%2Ddcfb%2D40c6%2Dbf9b%2Dce07d47a35da%26anx_uId%3D%24UID&google_tc= HTTP/1.1
Host: cm.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://a.clickcertain.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
location: https://a.clickcertain.com/px/img/g/?redir=https%3A%2F%2Fsecure%2Eadnxs%2Ecom%2Fgetuidu%3Fhttps%3A%2F%2Fa%2Eclickcertain%2Ecom%2Fpx%2Fimg%2Fbidswitch%2F%3Fdone%3Dtrue%26ccid%3Dc759a83d%2Ddcfb%2D40c6%2Dbf9b%2Dce07d47a35da%26anx_uId%3D%24UID&google_error=3
date: Wed, 23 Nov 2022 18:22:04 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
server: HTTP server (unknown)
content-length: 455
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
a.clickcertain.com/px/cont/?c=24abd7d60f26320&ccid=c759a83d-dcfb-40c6-bf9b-ce07d47a35da&cn=NO
304 Not Modified 0 B URL HTTP/2 a.clickcertain.com/px/cont/?c=24abd7d60f26320&ccid=c759a83d-dcfb-40c6-bf9b-ce07d47a35da&cn=NO
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /px/cont/?c=24abd7d60f26320&ccid=c759a83d-dcfb-40c6-bf9b-ce07d47a35da&cn=NO HTTP/1.1
Host: a.clickcertain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: _ccpx_u=c759a83d%2ddcfb%2d40c6%2dbf9b%2dce07d47a35da; _ccpx=24abd7d60f26320; _ccpx_24abd7d60f26320=2
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
If-None-Match: W/"Yzc1OWE4M2RnZGNmYmc0MGM2Z2JmOWJnY2UwN2Q0N2EzNWRhLXow"
TE: trailers
HTTP/2 304 Not Modified
date: Wed, 23 Nov 2022 18:22:04 GMT
etag: W/"Yzc1OWE4M2RnZGNmYmc0MGM2Z2JmOWJnY2UwN2Q0N2EzNWRhLXow"
set-cookie: _ccpx_u=c759a83d%2ddcfb%2d40c6%2dbf9b%2dce07d47a35da; Expires=Thu, 23 Nov 2023 18:22:04 GMT; Path=/; HttpOnly; SameSite=None; Secure
x-frontend: cc-nginx-c76b96594-lwtmd:cc-nginx-c76b96594-lwtmd
x-requestid: 44563cb4-96db-4df4-b6ea-7483a9281110
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=r%2BzsHa7znb%2BZHYG8yG4gr5i5DD7ExrPhkKpUORTX%2FxSpmjtX9%2FLywQVlKzYm6FFEz12pgjOt3oLsICZvhWnGChnyQh%2B%2F78djTCP4pOubijBDdeLQZcZg3ySWBTNEl3YUcw974Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76ebed9c5afcb50b-OSL
X-Firefox-Spdy: h2
secure.adnxs.com/getuidu?https://a.clickcertain.com/px/img/bidswitch/?done=true&ccid=c759a83d-dcfb-40c6-bf9b-ce07d47a35da&anx_uId=$UID
307 Redirection 0 B URL HTTP/1.1 secure.adnxs.com/getuidu?https://a.clickcertain.com/px/img/bidswitch/?done=true&ccid=c759a83d-dcfb-40c6-bf9b-ce07d47a35da&anx_uId=$UID
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /getuidu?https://a.clickcertain.com/px/img/bidswitch/?done=true&ccid=c759a83d-dcfb-40c6-bf9b-ce07d47a35da&anx_uId=$UID HTTP/1.1
Host: secure.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://a.clickcertain.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Redirection
Server: nginx/1.21.3
Date: Wed, 23 Nov 2022 18:22:04 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Location: https://secure.adnxs.com/bounce?%2Fgetuidu%3Fhttps%3A%2F%2Fa.clickcertain.com%2Fpx%2Fimg%2Fbidswitch%2F%3Fdone%3Dtrue%26ccid%3Dc759a83d-dcfb-40c6-bf9b-ce07d47a35da%26anx_uId%3D%24UID
AN-X-Request-Uuid: 157355c1-5447-4cc3-9447-51cc79152cea
Set-Cookie: uuid2=4781800192158075229; SameSite=None; Path=/; Max-Age=7776000; Expires=Tue, 21-Feb-2023 18:22:04 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 959.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
io.v2.customerlabs.co/cl
200 OK 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cl HTTP/1.1
Host: io.v2.customerlabs.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 709
Origin: https://www.buildinglink.com
Connection: keep-alive
Referer: https://www.buildinglink.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Access-Control-Allow-Headers: Origin, Accept, Content-Type, Max-Age, X-CL-APP-ID, X-Content-Type-Options
Access-Control-Allow-Methods: POST, OPTIONS
Access-Control-Allow-Origin: https://www.buildinglink.com
Date: Wed, 23 Nov 2022 18:22:04 GMT
Server: nginx/1.12.1
Content-Length: 0
Connection: keep-alive
secure.adnxs.com/bounce?%2Fgetuidu%3Fhttps%3A%2F%2Fa.clickcertain.com%2Fpx%2Fimg%2Fbidswitch%2F%3Fdone%3Dtrue%26ccid%3Dc759a83d-dcfb-40c6-bf9b-ce07d47a35da%26anx_uId%3D%24UID
302 Found 0 B URL HTTP/1.1 secure.adnxs.com/bounce?%2Fgetuidu%3Fhttps%3A%2F%2Fa.clickcertain.com%2Fpx%2Fimg%2Fbidswitch%2F%3Fdone%3Dtrue%26ccid%3Dc759a83d-dcfb-40c6-bf9b-ce07d47a35da%26anx_uId%3D%24UID
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /bounce?%2Fgetuidu%3Fhttps%3A%2F%2Fa.clickcertain.com%2Fpx%2Fimg%2Fbidswitch%2F%3Fdone%3Dtrue%26ccid%3Dc759a83d-dcfb-40c6-bf9b-ce07d47a35da%26anx_uId%3D%24UID HTTP/1.1
Host: secure.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://a.clickcertain.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx/1.21.3
Date: Wed, 23 Nov 2022 18:22:04 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Location: https://a.clickcertain.com/px/img/bidswitch/?done=true&ccid=c759a83d-dcfb-40c6-bf9b-ce07d47a35da&anx_uId=0
AN-X-Request-Uuid: 76eb8618-dee8-4de7-8dda-119c48ec0087
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 959.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
script.crazyegg.com/pages/data-scripts/0112/6942/site/www.buildinglink.com.json?t=1
200 OK 1.7 kB URL HTTP/2 script.crazyegg.com/pages/data-scripts/0112/6942/site/www.buildinglink.com.json?t=1
IP
File type JSON data\012- , ASCII text, with very long lines (5085), with no line terminators
Hash 0c36816cc6ab112e0ddcf2bd222643ec
939665db7c87b4792805f86215a351b11a2b82ec
66dbc4186229238cb64664ee4469c46916580a183ef7bbcd6891c0b0c9191144
GET /pages/data-scripts/0112/6942/site/www.buildinglink.com.json?t=1 HTTP/1.1
Host: script.crazyegg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.buildinglink.com
Connection: keep-alive
Referer: https://www.buildinglink.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 23 Nov 2022 18:22:04 GMT
content-type: application/json
content-length: 1680
access-control-expose-headers: CE-Version
ce-version: 11.5.9
cache-control: public, max-age=300, s-maxage=1209600
timing-allow-origin: *
last-modified: Wed, 23 Nov 2022 18:22:04 GMT
content-encoding: gzip
access-control-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 76ebed9c69f0b511-OSL
X-Firefox-Spdy: h2
io.v2.customerlabs.co/cl/firstVisit
200 OK 0 B URL HTTP/1.1 io.v2.customerlabs.co/cl/firstVisit
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cl/firstVisit HTTP/1.1
Host: io.v2.customerlabs.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 550
Origin: https://www.buildinglink.com
Connection: keep-alive
Referer: https://www.buildinglink.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Access-Control-Allow-Headers: Origin, Accept, Content-Type, Max-Age, X-CL-APP-ID, X-Content-Type-Options
Access-Control-Allow-Methods: POST, OPTIONS
Access-Control-Allow-Origin: https://www.buildinglink.com
Date: Wed, 23 Nov 2022 18:22:04 GMT
Server: nginx/1.12.1
Content-Length: 0
Connection: keep-alive
a.browserspeed.support/cs?puid=ce17e558-bcd4-5566-b7f9-1cc77f4f931e&pid=lc
302 Found 24 B URL HTTP/2 a.browserspeed.support/cs?puid=ce17e558-bcd4-5566-b7f9-1cc77f4f931e&pid=lc
IP
File type HTML document, ASCII text
Hash cd5fa747861f510d1d45ab9dc80a16a0
90d910869fbe5e0f79b7f7e58f59f5303f46ad78
5bdd19de1ad3c04f1a88334882b16565cef8ac274902e671a72ebebdb35c697c
GET /cs?puid=ce17e558-bcd4-5566-b7f9-1cc77f4f931e&pid=lc HTTP/1.1
Host: a.browserspeed.support
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://a.clickcertain.com/
Cookie: tuid=16c5f3ff-343a-46af-9f83-83a89976cee1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: awselb/2.0
date: Wed, 23 Nov 2022 18:22:04 GMT
content-type: text/html; charset=utf-8
content-length: 24
location: https://a.browserspeed.support/
set-cookie: tuid=16c5f3ff-343a-46af-9f83-83a89976cee1; Path=/; Domain=a.browserspeed.support; Max-Age=31536000; HttpOnly; Secure; SameSite=None
X-Firefox-Spdy: h2
script.crazyegg.com/pages/versioned/common-scripts/051214b1ee034dc81c1493c28aa557bd.js
200 OK 27 kB URL HTTP/2 script.crazyegg.com/pages/versioned/common-scripts/051214b1ee034dc81c1493c28aa557bd.js
IP
File type ASCII text, with very long lines (63889)
Hash 30bc1b81957127b7151f4a1bef344b03
fe72680380c13352dd7c5c484a69cb1670f0a20a
465d3124ce2f40f4980d867b482a011fb26f5239ec3ae94ab23a51b12d53c329
GET /pages/versioned/common-scripts/051214b1ee034dc81c1493c28aa557bd.js HTTP/1.1
Host: script.crazyegg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.buildinglink.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 23 Nov 2022 18:22:04 GMT
content-type: text/javascript
content-length: 26836
cache-control: public, max-age=31536000, s-maxage=31536000
timing-allow-origin: *
last-modified: Fri, 18 Nov 2022 16:53:01 GMT
content-encoding: gzip
access-control-allow-origin: *
cf-cache-status: HIT
age: 2162
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 76ebed9e98fbb50c-OSL
X-Firefox-Spdy: h2
a.browserspeed.support/
200 OK 4 B IP
File type ASCII text, with no line terminators
Hash 72054d9a6fbdcc7df012e19f32345b65
52dd4c74c813db3790179c4f236ceadaca3467a8
c48b5b1a9776c84602de2306d7903a7241158a5077e7a8519af75c33441b8334
Analyzer Verdict Alert fortinet Phishing
GET / HTTP/1.1
Host: a.browserspeed.support
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://a.clickcertain.com/
Connection: keep-alive
Cookie: tuid=16c5f3ff-343a-46af-9f83-83a89976cee1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: awselb/2.0
date: Wed, 23 Nov 2022 18:22:04 GMT
content-type: application/json; charset=utf-8
content-length: 4
set-cookie: tuid=16c5f3ff-343a-46af-9f83-83a89976cee1; Path=/; Domain=a.browserspeed.support; Max-Age=31536000; HttpOnly; Secure; SameSite=None
X-Firefox-Spdy: h2
io.v2.customerlabs.co/externalIds?customerlabs_user_id=cl50833agdusz475a2deda-f7a9-4130-b17d-1fea89699421&id=cl50833agdusz4&uid=cl50833agdusz475a2deda-f7a9-4130-b17d-1fea89699421&t=0&sc=1280%20x%201024
200 OK 512 B URL HTTP/1.1 io.v2.customerlabs.co/externalIds?customerlabs_user_id=cl50833agdusz475a2deda-f7a9-4130-b17d-1fea89699421&id=cl50833agdusz4&uid=cl50833agdusz475a2deda-f7a9-4130-b17d-1fea89699421&t=0&sc=1280%20x%201024
IP
File type JSON data\012- , ASCII text, with very long lines (512), with no line terminators
Hash 21c5a1a7d89971810612ee544929ae33
8b17515bd6fa98ab9a0e85f8581929bda2217d6b
9a9fc4c5eb33dc3811a1223bfdcde1eb20e3f953737736f1748091b9755b3c51
GET /externalIds?customerlabs_user_id=cl50833agdusz475a2deda-f7a9-4130-b17d-1fea89699421&id=cl50833agdusz4&uid=cl50833agdusz475a2deda-f7a9-4130-b17d-1fea89699421&t=0&sc=1280%20x%201024 HTTP/1.1
Host: io.v2.customerlabs.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.buildinglink.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Access-Control-Allow-Headers: Origin, Accept, Content-Type, Max-Age, X-CL-APP-ID, X-Content-Type-Options
Access-Control-Allow-Methods: POST, OPTIONS
Content-Type: application/json
Date: Wed, 23 Nov 2022 18:22:04 GMT
Server: nginx/1.12.1
Content-Length: 512
Connection: keep-alive
a.clickcertain.com/px/ta/?done=true&ta_id=2dfa5ce4-8ba8-4ccd-9065-dc316217514b
204 No Content 0 B URL HTTP/2 a.clickcertain.com/px/ta/?done=true&ta_id=2dfa5ce4-8ba8-4ccd-9065-dc316217514b
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /px/ta/?done=true&ta_id=2dfa5ce4-8ba8-4ccd-9065-dc316217514b HTTP/1.1
Host: a.clickcertain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://a.clickcertain.com/
Connection: keep-alive
Cookie: _ccpx_u=c759a83d%2ddcfb%2d40c6%2dbf9b%2dce07d47a35da; _ccpx=24abd7d60f26320; _ccpx_24abd7d60f26320=2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Wed, 23 Nov 2022 18:22:04 GMT
set-cookie: _ccpx_u=c759a83d%2ddcfb%2d40c6%2dbf9b%2dce07d47a35da; Expires=Thu, 23 Nov 2023 18:22:04 GMT; Path=/; HttpOnly; SameSite=None; Secure
x-frontend: cc-nginx-c76b96594-c4vdz:cc-nginx-c76b96594-c4vdz
x-requestid: 790d411f-b5f4-4d8b-b2b1-aa92a4e27a08
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=SiKt2DbPnLPRWv97d4bfoHBNkJZ1Eqdpmyv%2Fk0bIX3m2RhTXpb6EatdAoHZSx85u7vnW2bqayLFzqvLY%2FuqjW0OK3yQJw8MTfGLUoik%2F30HIfZDGR1FcfMq4cS4aH0aQlg66LA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76ebed9fdfebb50b-OSL
X-Firefox-Spdy: h2
a.clickcertain.com/px/ta/?ccid=c759a83d-dcfb-40c6-bf9b-ce07d47a35da
302 Found 63 B URL HTTP/2 a.clickcertain.com/px/ta/?ccid=c759a83d-dcfb-40c6-bf9b-ce07d47a35da
IP
File type gzip compressed data, last modified: Wed Nov 23 18:22:05 2022, max compression, from Unix\012- data
Hash 49a01b6a885170ab32d0b06aba7438d1
a6b7bf26bf1422e36b063c8799590cbc458a2746
15434d45b0762b7e2117355da73c4e151e32c02895b26a7d97895330e3927438
GET /px/ta/?ccid=c759a83d-dcfb-40c6-bf9b-ce07d47a35da HTTP/1.1
Host: a.clickcertain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://a.clickcertain.com/px/cont/?c=24abd7d60f26320&ccid=c759a83d-dcfb-40c6-bf9b-ce07d47a35da&cn=NO
Cookie: _ccpx_u=c759a83d%2ddcfb%2d40c6%2dbf9b%2dce07d47a35da; _ccpx=24abd7d60f26320; _ccpx_24abd7d60f26320=2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 302 Found
date: Wed, 23 Nov 2022 18:22:04 GMT
content-type: text/html
location: https://pixel.tapad.com/idsync/ex/receive?partner_id=3318&partner_device_id=c759a83d-dcfb-40c6-bf9b-ce07d47a35da&partner_url=https%3a%2f%2fa%2eclickcertain%2ecom%2fpx%2fta%2f%3fdone%3dtrue%26ta_id%3d%24%7bTA_DEVICE_ID%7d
set-cookie: _ccpx_u=c759a83d%2ddcfb%2d40c6%2dbf9b%2dce07d47a35da; Expires=Thu, 23 Nov 2023 18:22:04 GMT; Path=/; HttpOnly; SameSite=None; Secure
x-frontend: cc-nginx-c76b96594-2pwf9:cc-nginx-c76b96594-2pwf9
x-requestid: 6fd90709-34fc-41f9-ad3e-757c7781ad61
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DgCrsqLCHxk8Pn%2BIwm%2B5N6IddHh6Wb7FHeKmg8l7tFZKDqDrQFy%2B%2F1yAh8doa69AiEZb%2BchFqwAGWdMT90eUlW89TX5tqNKzqLScqoZ3g3%2FYPhnKaij8k0oEcIl7eafKlJ53AA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76ebed9d4c61b50b-OSL
X-Firefox-Spdy: h2
assets-tracking.crazyegg.com/healthcheck
200 OK 19 B URL HTTP/2 assets-tracking.crazyegg.com/healthcheck
IP
File type JSON data\012- , ASCII text
Hash d06f04fccf68d0b228a5923187ce1afd
5de9df9fdd66a91eed06e31981553d4ab9ccf490
830e67bda2532cd5880ee86e3b33e69721082f8458bb0df0cd4edbb1577fd375
GET /healthcheck HTTP/1.1
Host: assets-tracking.crazyegg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.buildinglink.com
Connection: keep-alive
Referer: https://www.buildinglink.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/json
content-length: 19
date: Mon, 22 Aug 2022 11:33:15 GMT
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-expose-headers: Access-Control-Allow-Origin
access-control-max-age: 31536000
last-modified: Fri, 08 Jul 2022 22:25:51 GMT
etag: "d06f04fccf68d0b228a5923187ce1afd"
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 e2f427863e6bdb72ad8bed72b596d81e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: sDM_UxAk3qcdxDThIP6VRGGj3OnAfN2Yripw3j5Xkx4kBsG_j7hmXQ==
age: 8059730
X-Firefox-Spdy: h2
pagestates-tracking.crazyegg.com/healthcheck
200 OK 19 B URL HTTP/2 pagestates-tracking.crazyegg.com/healthcheck
IP
File type JSON data\012- , ASCII text
Hash d06f04fccf68d0b228a5923187ce1afd
5de9df9fdd66a91eed06e31981553d4ab9ccf490
830e67bda2532cd5880ee86e3b33e69721082f8458bb0df0cd4edbb1577fd375
GET /healthcheck HTTP/1.1
Host: pagestates-tracking.crazyegg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.buildinglink.com
Connection: keep-alive
Referer: https://www.buildinglink.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/json
content-length: 19
date: Fri, 30 Sep 2022 16:18:54 GMT
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-expose-headers: Access-Control-Allow-Origin
access-control-max-age: 31536000
last-modified: Fri, 08 Jul 2022 22:25:51 GMT
etag: "d06f04fccf68d0b228a5923187ce1afd"
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 5bcfe2deda0bdbc6bade0af9b61602ca.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: N40oNVCRnQ_Q6H1OG1ezPTgwRbpykbrjd353FmlMCMdn5MnpaG0f3g==
age: 4672992
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash 86776344fc6dd826ff48ca2f315dec8a
23054ddd051e653c90cc3232bbe1ecb88820b29a
7a6a778b4a383d8385e3843a7fd1ad88a5e7182d5627740511dd2c83a6f264c1
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 23 Nov 2022 18:22:05 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Tue, 22 Nov 2022 13:56:48 GMT
Expires: Tue, 29 Nov 2022 13:56:47 GMT
Etag: "23054ddd051e653c90cc3232bbe1ecb88820b29a"
Cache-Control: max-age=501882,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 76ebeda04cdd1c12-OSL
x.bidswitch.net/sync?dsp_id=179&user_id=c759a83d-dcfb-40c6-bf9b-ce07d47a35da&expires=5&user_group=0
302 Found 0 B URL HTTP/2 x.bidswitch.net/sync?dsp_id=179&user_id=c759a83d-dcfb-40c6-bf9b-ce07d47a35da&expires=5&user_group=0
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sync?dsp_id=179&user_id=c759a83d-dcfb-40c6-bf9b-ce07d47a35da&expires=5&user_group=0 HTTP/1.1
Host: x.bidswitch.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://a.clickcertain.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Wed, 23 Nov 2022 18:22:05 GMT
content-length: 0
location: https://x.bidswitch.net/ul_cb/sync?dsp_id=179&user_id=c759a83d-dcfb-40c6-bf9b-ce07d47a35da&expires=5&user_group=0
cache-control: no-cache, no-store, must-revalidate
set-cookie: tuuid=f674338e-25f0-4f29-8784-2719de457f87; path=/; expires=Thu, 23-Nov-2023 18:22:05 GMT; domain=.bidswitch.net; samesite=none; secure
c=1669227725; path=/; expires=Thu, 23-Nov-2023 18:22:05 GMT; domain=.bidswitch.net; samesite=none; secure
tuuid_lu=1669227725; path=/; expires=Thu, 23-Nov-2023 18:22:05 GMT; domain=.bidswitch.net; samesite=none; secure
c=1669227725; path=/; expires=Thu, 23-Nov-2023 18:22:05 GMT; domain=.bidswitch.net; samesite=none; secure
X-Firefox-Spdy: h2
x.bidswitch.net/ul_cb/sync?dsp_id=179&user_id=c759a83d-dcfb-40c6-bf9b-ce07d47a35da&expires=5&user_group=0
200 OK 43 B URL HTTP/2 x.bidswitch.net/ul_cb/sync?dsp_id=179&user_id=c759a83d-dcfb-40c6-bf9b-ce07d47a35da&expires=5&user_group=0
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /ul_cb/sync?dsp_id=179&user_id=c759a83d-dcfb-40c6-bf9b-ce07d47a35da&expires=5&user_group=0 HTTP/1.1
Host: x.bidswitch.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://a.clickcertain.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 23 Nov 2022 18:22:05 GMT
content-type: image/gif
content-length: 43
cache-control: no-cache, no-store, must-revalidate
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash e41348e76a50e362e1c69c3546ed5c6f
1c2f8c5c2cae68a3d71ac7451706bbc42edf0fd1
7bf16157dce83ce431f6311cc61ea02030839620960fd8fe735600ff34da1b67
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=163798
Date: Wed, 23 Nov 2022 18:22:05 GMT
Etag: "637e370b-1d7"
Expires: Fri, 25 Nov 2022 15:52:03 GMT
Last-Modified: Wed, 23 Nov 2022 15:06:51 GMT
Server: ECS (bsa/EB1E)
X-Cache: Miss from cloudfront
Via: 1.1 76c917e0bb0ba45eb834d25d76ee125e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: x8MPKxRfByYFZgwbkKlhe3dRcnDuWfLhwtsVWGHKXkxRzA-X9TKTSw==
Age: 2712
tracking.crazyegg.com/clock?t=1669227725115&tk=undefined
200 OK 26 B URL HTTP/2 tracking.crazyegg.com/clock?t=1669227725115&tk=undefined
IP
File type ASCII text, with no line terminators
Hash cf6e3cc52c9ad0aa805d6ccc60aa209c
2397fbb80c30bbc2b5e9b4c9090c5d936ce1efc3
845565e06425528a88a704fa67e9dc3c488986891f94257439d7b255f15ab842
GET /clock?t=1669227725115&tk=undefined HTTP/1.1
Host: tracking.crazyegg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.buildinglink.com
Connection: keep-alive
Referer: https://www.buildinglink.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: awselb/2.0
date: Wed, 23 Nov 2022 18:22:05 GMT
content-type: text/plain
content-length: 26
cache-control: no-store
access-control-allow-origin: *
X-Firefox-Spdy: h2
www.buildinglink.com/public/wp-includes/css/dist/block-library/style.min.css?ver=6.1.1
200 OK 0 B URL HTTP/2 www.buildinglink.com/public/wp-includes/css/dist/block-library/style.min.css?ver=6.1.1
IP
GET /public/wp-includes/css/dist/block-library/style.min.css?ver=6.1.1 HTTP/1.1
Host: www.buildinglink.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.buildinglink.com/marketing/public/main
Cookie: __cflb=02DiuDXvJ1dKekvY3orry22HB3MMHGLG5YBPYQBpK1Y1i
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 23 Nov 2022 18:22:01 GMT
content-type: text/css
last-modified: Wed, 16 Nov 2022 07:31:58 GMT
etag: W/"172a9-5ed9177bb5f58-gzip"
vary: Accept-Encoding
cf-cache-status: HIT
server: cloudflare
cf-ray: 76ebed884c16b52d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.buildinglink.com/public/wp-content/plugins/wpml-cms-nav/res/css/cms-navigation.css?ver=1.5.5
200 OK 0 B URL HTTP/2 www.buildinglink.com/public/wp-content/plugins/wpml-cms-nav/res/css/cms-navigation.css?ver=1.5.5
IP
GET /public/wp-content/plugins/wpml-cms-nav/res/css/cms-navigation.css?ver=1.5.5 HTTP/1.1
Host: www.buildinglink.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.buildinglink.com/marketing/public/main
Cookie: __cflb=02DiuDXvJ1dKekvY3orry22HB3MMHGLG5YBPYQBpK1Y1i
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 23 Nov 2022 18:22:01 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=2374
etag: W/"946-5d57d52c7b000-gzip"
last-modified: Thu, 13 Jan 2022 21:25:20 GMT
vary: Accept-Encoding
cf-cache-status: HIT
server: cloudflare
cf-ray: 76ebed885c3cb52d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.buildinglink.com/public/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0
200 OK 0 B URL HTTP/2 www.buildinglink.com/public/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0
IP
GET /public/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0 HTTP/1.1
Host: www.buildinglink.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.buildinglink.com/marketing/public/main
Cookie: __cflb=02DiuDXvJ1dKekvY3orry22HB3MMHGLG5YBPYQBpK1Y1i
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 23 Nov 2022 18:22:01 GMT
content-type: application/javascript
last-modified: Wed, 02 Nov 2022 07:32:06 GMT
etag: W/"459f-5ec77d66b1598-gzip"
vary: Accept-Encoding
cf-cache-status: EXPIRED
server: cloudflare
cf-ray: 76ebed888c88b52d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
unpkg.com/swiper@7.4.1/swiper-bundle.min.css
200 OK 0 B URL HTTP/2 unpkg.com/swiper@7.4.1/swiper-bundle.min.css
IP
GET /swiper@7.4.1/swiper-bundle.min.css HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.buildinglink.com/
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 23 Nov 2022 18:22:01 GMT
content-type: text/css; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=31536000
last-modified: Sat, 26 Oct 1985 08:15:00 GMT
etag: W/"3ccb-5Koe10fACH1gYqRziowpfORPwas"
via: 1.1 fly.io
fly-request-id: 01G4XE8SCR7T97G2PBX7YV096Y-fra
cf-cache-status: HIT
age: 14677187
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 76ebed8a8ae90b51-OSL
content-encoding: br
X-Firefox-Spdy: h2
www.buildinglink.com/public/wp-content/plugins/megamenu/js/maxmegamenu.js?ver=2.9.5
200 OK 0 B URL HTTP/2 www.buildinglink.com/public/wp-content/plugins/megamenu/js/maxmegamenu.js?ver=2.9.5
IP
GET /public/wp-content/plugins/megamenu/js/maxmegamenu.js?ver=2.9.5 HTTP/1.1
Host: www.buildinglink.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.buildinglink.com/marketing/public/main
Cookie: __cflb=02DiuDXvJ1dKekvY3orry22HB3MMHGLG5YBPYQBpK1Y1i
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 23 Nov 2022 18:22:01 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=30529
etag: W/"7741-5d57d51597a00-gzip"
last-modified: Thu, 13 Jan 2022 21:24:56 GMT
vary: Accept-Encoding
cf-cache-status: HIT
server: cloudflare
cf-ray: 76ebed88bcdeb52d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
a.clickcertain.com/px/?c=24abd7d60f26320
200 OK 0 B URL HTTP/2 a.clickcertain.com/px/?c=24abd7d60f26320
IP
GET /px/?c=24abd7d60f26320 HTTP/1.1
Host: a.clickcertain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.buildinglink.com/
Connection: keep-alive
Cookie: _ccpx_u=c759a83d%2ddcfb%2d40c6%2dbf9b%2dce07d47a35da; _ccpx=24abd7d60f26320; _ccpx_24abd7d60f26320=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 23 Nov 2022 18:22:04 GMT
content-type: text/javascript
set-cookie: _ccpx_u=c759a83d%2ddcfb%2d40c6%2dbf9b%2dce07d47a35da; Expires=Thu, 23 Nov 2023 18:22:04 GMT; Path=/; HttpOnly; SameSite=None; Secure
_ccpx=24abd7d60f26320; Expires=Thu, 23 Nov 2023 18:22:04 GMT; Path=/; HttpOnly; SameSite=None; Secure
_ccpx_24abd7d60f26320=2; Expires=Thu, 23 Nov 2023 18:22:04 GMT; Path=/; HttpOnly; SameSite=None; Secure
x-frontend: cc-nginx-c76b96594-2pwf9:cc-nginx-c76b96594-2pwf9
x-requestid: 6d2aa61b-8d04-4632-800d-315849e2351d
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JUg4tBuPYDY%2BrLvi%2FGwsPsC4FjOeqIHgJXhPrHjW9yhVMxhszhP%2B0FAba%2FKNKl5Xz6N%2B5sFg6PU9cIz1eSMcVQbEqYzxcg7d%2B3%2FmCl2A3mZT%2FYySOpi044JsLZYB7J%2FCb6SMWg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76ebed9b68b4b50b-OSL
content-encoding: br
X-Firefox-Spdy: h2
cdn.calltrk.com/companies/647579612/070f1f86d6ecd47ee30e/12/swap.js
200 OK 0 B URL HTTP/2 cdn.calltrk.com/companies/647579612/070f1f86d6ecd47ee30e/12/swap.js
IP
GET /companies/647579612/070f1f86d6ecd47ee30e/12/swap.js HTTP/1.1
Host: cdn.calltrk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.buildinglink.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
date: Wed, 23 Nov 2022 18:22:02 GMT
cache-control: max-age=3600, public
etag: W/"13604b96b63bf8d6260f188bcfd73f31"
timing-allow-origin: *
x-request-id: b8bb2163-dc4a-484e-a5b2-73ff0d55c26c
x-runtime: 0.008941
x-cache: Miss from cloudfront
via: 1.1 f00e3524edcdf61801454f2bb21e71ce.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: JmQhRoB5Zg-HNZ1pXmJ-LcjWdRnZIfeRAJ32jkOYPHNLhmd_p6HJDw==
X-Firefox-Spdy: h2
www.buildinglink.com/public/wp-includes/css/dashicons.min.css?ver=6.1.1
200 OK 0 B URL HTTP/2 www.buildinglink.com/public/wp-includes/css/dashicons.min.css?ver=6.1.1
IP
GET /public/wp-includes/css/dashicons.min.css?ver=6.1.1 HTTP/1.1
Host: www.buildinglink.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.buildinglink.com/marketing/public/main
Cookie: __cflb=02DiuDXvJ1dKekvY3orry22HB3MMHGLG5YBPYQBpK1Y1i
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 23 Nov 2022 18:22:01 GMT
content-type: text/css
last-modified: Fri, 21 Jan 2022 13:43:17 GMT
etag: W/"e688-5d617cd1a6b03-gzip"
vary: Accept-Encoding
cf-cache-status: HIT
server: cloudflare
cf-ray: 76ebed885c36b52d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.buildinglink.com/public/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.5.5
200 OK 0 B URL HTTP/2 www.buildinglink.com/public/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.5.5
IP
GET /public/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.5.5 HTTP/1.1
Host: www.buildinglink.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.buildinglink.com/marketing/public/main
Cookie: __cflb=02DiuDXvJ1dKekvY3orry22HB3MMHGLG5YBPYQBpK1Y1i
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 23 Nov 2022 18:22:01 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"25f8-5d8776cb53ba8-gzip"
last-modified: Sun, 20 Feb 2022 18:38:40 GMT
vary: Accept-Encoding
cf-cache-status: HIT
server: cloudflare
cf-ray: 76ebed888c8fb52d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
a.clickcertain.com/px/smart/a/?c=24abd7d60f26320&seg=marketing/public/main
302 Found 0 B URL HTTP/2 a.clickcertain.com/px/smart/a/?c=24abd7d60f26320&seg=marketing/public/main
IP
GET /px/smart/a/?c=24abd7d60f26320&seg=marketing/public/main HTTP/1.1
Host: a.clickcertain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.buildinglink.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Wed, 23 Nov 2022 18:22:02 GMT
content-type: text/javascript
location: https://a.clickcertain.com/px/?c=24abd7d60f26320
set-cookie: _ccpx_u=c759a83d%2ddcfb%2d40c6%2dbf9b%2dce07d47a35da; Expires=Thu, 23 Nov 2023 18:22:02 GMT; Path=/; HttpOnly; SameSite=None; Secure
x-frontend: cc-nginx-c76b96594-cvjkk:cc-nginx-c76b96594-cvjkk
x-requestid: 51c61b0d-ec2d-402f-8bcc-aeb531194ea7
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ki97RLWpMHvkeoiAXKmTmh1uvb5KB1f9nDeRVisqkz7H8FhNvhrJZ%2BlZDghP7gEeeIpHe2SeXx6TkWXxoHOknKSua4j1NbarJOnaui2LLcia1bltAVqzsMdLUO1HFH5Ep444Dw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76ebed912fcfb50b-OSL
X-Firefox-Spdy: h2
a.clickcertain.com/px/?c=24abd7d60f26320
200 OK 0 B URL HTTP/2 a.clickcertain.com/px/?c=24abd7d60f26320
IP
GET /px/?c=24abd7d60f26320 HTTP/1.1
Host: a.clickcertain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.buildinglink.com/
Connection: keep-alive
Cookie: _ccpx_u=c759a83d%2ddcfb%2d40c6%2dbf9b%2dce07d47a35da
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 23 Nov 2022 18:22:02 GMT
content-type: text/javascript
set-cookie: _ccpx_u=c759a83d%2ddcfb%2d40c6%2dbf9b%2dce07d47a35da; Expires=Thu, 23 Nov 2023 18:22:02 GMT; Path=/; HttpOnly; SameSite=None; Secure
_ccpx=24abd7d60f26320; Expires=Thu, 23 Nov 2023 18:22:02 GMT; Path=/; HttpOnly; SameSite=None; Secure
_ccpx_24abd7d60f26320=1; Expires=Thu, 23 Nov 2023 18:22:02 GMT; Path=/; HttpOnly; SameSite=None; Secure
x-frontend: cc-nginx-c76b96594-cvjkk:cc-nginx-c76b96594-cvjkk
x-requestid: 6b217a76-cd2a-4d47-b594-18fc3cc3fcb5
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fDZcPyMi73pQyS9oEne0k%2FBb7VewD9FG7XsuMRSfO6R%2FkkD%2Bc3L1uGO6%2BLs%2BjJ4wRs44ABw%2FwIQKJ4SLjccnDgbrX9ibBqfUW9zoGPirSacaNGFDGWXNVLUka6UoI3g1ST2FBA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76ebed9259b5b50b-OSL
content-encoding: br
X-Firefox-Spdy: h2
www.buildinglink.com/
301 Moved Permanently 0 B IP
GET / HTTP/1.1
Host: www.buildinglink.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 301 Moved Permanently
date: Wed, 23 Nov 2022 18:22:00 GMT
content-type: text/html; charset=UTF-8
location: https://www.buildinglink.com/v2/default.aspx
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
set-cookie: __cflb=02DiuDXvJ1dKekvY3orry22HB3MMHGLG5YBPYQBpK1Y1i; SameSite=Lax; path=/; expires=Thu, 24-Nov-22 17:22:00 GMT; HttpOnly
server: cloudflare
cf-ray: 76ebed824c41b52d-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
a.clickcertain.com/px/img/g/?redir=https%3A%2F%2Fsecure%2Eadnxs%2Ecom%2Fgetuidu%3Fhttps%3A%2F%2Fa%2Eclickcertain%2Ecom%2Fpx%2Fimg%2Fbidswitch%2F%3Fdone%3Dtrue%26ccid%3Dc759a83d%2Ddcfb%2D40c6%2Dbf9b%2Dce07d47a35da%26anx_uId%3D%24UID&google_error=3
302 Found 0 B URL HTTP/2 a.clickcertain.com/px/img/g/?redir=https%3A%2F%2Fsecure%2Eadnxs%2Ecom%2Fgetuidu%3Fhttps%3A%2F%2Fa%2Eclickcertain%2Ecom%2Fpx%2Fimg%2Fbidswitch%2F%3Fdone%3Dtrue%26ccid%3Dc759a83d%2Ddcfb%2D40c6%2Dbf9b%2Dce07d47a35da%26anx_uId%3D%24UID&google_error=3
IP
GET /px/img/g/?redir=https%3A%2F%2Fsecure%2Eadnxs%2Ecom%2Fgetuidu%3Fhttps%3A%2F%2Fa%2Eclickcertain%2Ecom%2Fpx%2Fimg%2Fbidswitch%2F%3Fdone%3Dtrue%26ccid%3Dc759a83d%2Ddcfb%2D40c6%2Dbf9b%2Dce07d47a35da%26anx_uId%3D%24UID&google_error=3 HTTP/1.1
Host: a.clickcertain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://a.clickcertain.com/
Connection: keep-alive
Cookie: _ccpx_u=c759a83d%2ddcfb%2d40c6%2dbf9b%2dce07d47a35da; _ccpx=24abd7d60f26320; _ccpx_24abd7d60f26320=2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
date: Wed, 23 Nov 2022 18:22:04 GMT
content-type: text/html
location: https://secure.adnxs.com/getuidu?https://a.clickcertain.com/px/img/bidswitch/?done=true&ccid=c759a83d-dcfb-40c6-bf9b-ce07d47a35da&anx_uId=$UID
x-frontend: cc-nginx-c76b96594-lwtmd:cc-nginx-c76b96594-lwtmd
x-requestid: b611bb96-8114-4db0-9de9-417583cf7a9c
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ZQLoR4HJdsBIclYiX82eHFHkLdwtpr6kpS5M4YTpraWHxdGvTyt5lY9%2FkpAOYXdDpgADAUoZ4575gL6Usavt6T163YbAx3gC%2FDRNHklL6AfwgXlpFP8MSk56TLHyZ3inlt31xQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76ebed9cab83b50b-OSL
X-Firefox-Spdy: h2
a.clickcertain.com/px/img/bidswitch/?done=true&ccid=c759a83d-dcfb-40c6-bf9b-ce07d47a35da&anx_uId=0
302 Found 0 B URL HTTP/2 a.clickcertain.com/px/img/bidswitch/?done=true&ccid=c759a83d-dcfb-40c6-bf9b-ce07d47a35da&anx_uId=0
IP
GET /px/img/bidswitch/?done=true&ccid=c759a83d-dcfb-40c6-bf9b-ce07d47a35da&anx_uId=0 HTTP/1.1
Host: a.clickcertain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://a.clickcertain.com/
Connection: keep-alive
Cookie: _ccpx_u=c759a83d%2ddcfb%2d40c6%2dbf9b%2dce07d47a35da; _ccpx=24abd7d60f26320; _ccpx_24abd7d60f26320=2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
date: Wed, 23 Nov 2022 18:22:04 GMT
content-type: text/html
location: https://x.bidswitch.net/sync?dsp_id=179&user_id=c759a83d-dcfb-40c6-bf9b-ce07d47a35da&expires=5&user_group=0
set-cookie: _ccpx_u=c759a83d%2ddcfb%2d40c6%2dbf9b%2dce07d47a35da; Expires=Thu, 23 Nov 2023 18:22:04 GMT; Path=/; HttpOnly; SameSite=None; Secure
x-frontend: cc-nginx-c76b96594-wdwcn:cc-nginx-c76b96594-wdwcn
x-requestid: d7485594-5729-4c70-b1a9-91aaae8dc7a3
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Ygb9j6IEY3%2BJb70JQt%2FxXQ1%2FsD9az8l3ZF7c6KoPXEJNXgLrPN0I0%2BSaHeV6x9o4dbRlfLNJDy%2FjxNkVoGvT3G2EkTCCEDl2id%2B%2ByAyB%2FAzJsV5B2CoTfM%2BPGiibRWAu0Is7QQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76ebed9e6e05b50b-OSL
X-Firefox-Spdy: h2
www.buildinglink.com/public/wp-includes/js/hoverIntent.min.js?ver=1.10.2
200 OK 0 B URL HTTP/2 www.buildinglink.com/public/wp-includes/js/hoverIntent.min.js?ver=1.10.2
IP
GET /public/wp-includes/js/hoverIntent.min.js?ver=1.10.2 HTTP/1.1
Host: www.buildinglink.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.buildinglink.com/marketing/public/main
Cookie: __cflb=02DiuDXvJ1dKekvY3orry22HB3MMHGLG5YBPYQBpK1Y1i
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 23 Nov 2022 18:22:01 GMT
content-type: application/javascript
last-modified: Wed, 25 May 2022 07:31:58 GMT
etag: W/"5db-5dfd1118282d4-gzip"
vary: Accept-Encoding
cf-cache-status: HIT
server: cloudflare
cf-ray: 76ebed88bcdbb52d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.buildinglink.com/public/wp-content/themes/buildinglink/js/libs.js?ver=6.1.1
200 OK 0 B URL HTTP/2 www.buildinglink.com/public/wp-content/themes/buildinglink/js/libs.js?ver=6.1.1
IP
GET /public/wp-content/themes/buildinglink/js/libs.js?ver=6.1.1 HTTP/1.1
Host: www.buildinglink.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.buildinglink.com/marketing/public/main
Cookie: __cflb=02DiuDXvJ1dKekvY3orry22HB3MMHGLG5YBPYQBpK1Y1i
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 23 Nov 2022 18:22:01 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=232186
etag: W/"38afa-5d57d53327fc0-gzip"
last-modified: Thu, 13 Jan 2022 21:25:27 GMT
vary: Accept-Encoding
cf-cache-status: HIT
server: cloudflare
cf-ray: 76ebed88bcd4b52d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
a.clickcertain.com/px/r/?ccid=c759a83d-dcfb-40c6-bf9b-ce07d47a35da
302 Found 0 B URL HTTP/2 a.clickcertain.com/px/r/?ccid=c759a83d-dcfb-40c6-bf9b-ce07d47a35da
IP
GET /px/r/?ccid=c759a83d-dcfb-40c6-bf9b-ce07d47a35da HTTP/1.1
Host: a.clickcertain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://a.clickcertain.com/px/cont/?c=24abd7d60f26320&ccid=c759a83d-dcfb-40c6-bf9b-ce07d47a35da&cn=NO
Cookie: _ccpx_u=c759a83d%2ddcfb%2d40c6%2dbf9b%2dce07d47a35da; _ccpx=24abd7d60f26320; _ccpx_24abd7d60f26320=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 302 Found
date: Wed, 23 Nov 2022 18:22:03 GMT
content-type: text/html
location: https://i.liadm.com/s/56408?bidder_id=200441&bidder_uuid=c759a83d-dcfb-40c6-bf9b-ce07d47a35da&ccid=c759a83d-dcfb-40c6-bf9b-ce07d47a35da&redir=https%253a%252f%252fcm%252eg%252edoubleclick%252enet%252fpixel%253fgoogle_nid%253dclickcertain%2526google_cm%253d1%2526google_sc%253d1%2526redir%253dhttps%25253a%25252f%25252fsecure%25252eadnxs%25252ecom%25252fgetuidu%25253fhttps%25253a%25252f%25252fa%25252eclickcertain%25252ecom%25252fpx%25252fimg%25252fbidswitch%25252f%25253fdone%25253dtrue%252526ccid%25253dc759a83d%25252ddcfb%25252d40c6%25252dbf9b%25252dce07d47a35da%252526anx_uId%25253d%252524UID
set-cookie: _ccpx_u=c759a83d%2ddcfb%2d40c6%2dbf9b%2dce07d47a35da; Expires=Thu, 23 Nov 2023 18:22:03 GMT; Path=/; HttpOnly; SameSite=None; Secure
x-frontend: cc-nginx-c76b96594-cvjkk:cc-nginx-c76b96594-cvjkk
x-requestid: ec939ba8-26bc-423b-8aba-8da77c50f51c
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2Bn3thqC4prufKtNLXpIH%2FjWlsKWSh93Q4JuIk58Xm2%2BlFAujnnQjGAMAZkzZ84y1TsMmNOZyJpUh7ubbCk2ZO69inOAYOoBC%2BBcUcfxlXxLsebBKhj2FmTqg2Mp3q1UbKxEgvw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76ebed948cdbb50b-OSL
X-Firefox-Spdy: h2
unpkg.com/swiper@7/swiper-bundle.min.css?ver=6.1.1
302 Found 0 B URL HTTP/2 unpkg.com/swiper@7/swiper-bundle.min.css?ver=6.1.1
IP
GET /swiper@7/swiper-bundle.min.css?ver=6.1.1 HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.buildinglink.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Wed, 23 Nov 2022 18:22:01 GMT
content-type: text/plain; charset=utf-8
access-control-allow-origin: *
location: /swiper@7/swiper-bundle.min.css
vary: Accept, Accept-Encoding
via: 1.1 fly.io
fly-request-id: 01GJJTVVS3SXFJVG12K3W5GA7G-fra
cf-cache-status: HIT
age: 771
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 76ebed89796e0b51-OSL
X-Firefox-Spdy: h2
js.createsend1.com/javascript/copypastesubscribeformlogic.js
200 OK 0 B URL HTTP/2 js.createsend1.com/javascript/copypastesubscribeformlogic.js
IP
GET /javascript/copypastesubscribeformlogic.js HTTP/1.1
Host: js.createsend1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.buildinglink.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
server: csw
date: Wed, 23 Nov 2022 17:57:01 GMT
cache-control: public, max-age=3598
expires: Wed, 23 Nov 2022 18:56:59 GMT
last-modified: Wed, 23 Nov 2022 17:56:59 GMT
x-frame-options: SAMEORIGIN
x-ua-compatible: IE=edge
access-control-allow-origin: *
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
referrer-policy: no-referrer-when-downgrade
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 9db8c72ec08059d1364d1dd74e1dc958.cloudfront.net (CloudFront)
x-amz-cf-pop: ZAG50-C1
x-amz-cf-id: DtVu6EaRIywlr8xyOYyi1AqtYMYVTfzeNNuRdo6apUDpYK8Bt0icDQ==
age: 1500
X-Firefox-Spdy: h2
www.buildinglink.com/v2/default.aspx
302 Found 0 B URL HTTP/2 www.buildinglink.com/v2/default.aspx
IP
GET /v2/default.aspx HTTP/1.1
Host: www.buildinglink.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: __cflb=02DiuDXvJ1dKekvY3orry22HB3MMHGLG5YBPYQBpK1Y1i
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
TE: trailers
HTTP/2 302 Found
date: Wed, 23 Nov 2022 18:22:00 GMT
content-type: text/html; charset=utf-8
cache-control: no-cache
location: /marketing/public/main
request-context: appId=cid-v1:e697f7f3-a53c-4468-8d72-c065cc83a539
access-control-expose-headers: Request-Context
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 76ebed831d7db52d-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
js.hs-scripts.com/20565294.js?integration=WordPress&ver=8.13.58
200 OK 0 B URL HTTP/2 js.hs-scripts.com/20565294.js?integration=WordPress&ver=8.13.58
IP
GET /20565294.js?integration=WordPress&ver=8.13.58 HTTP/1.1
Host: js.hs-scripts.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.buildinglink.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 23 Nov 2022 18:22:02 GMT
content-type: application/javascript;charset=utf-8
x-trace: 2BF8F95B1BF856D710841220E39BDB64C3AA5D3C93000000000000000000
cache-control: public, max-age=60
vary: origin, Accept-Encoding
x-hubspot-correlation-id: 7284a6d2-1eee-41ac-9e49-c2dde381bf9f
access-control-allow-credentials: true
access-control-max-age: 3600
access-control-allow-origin: https://www.buildinglink.com
last-modified: Tue, 22 Nov 2022 22:01:30 GMT
cf-cache-status: EXPIRED
expires: Wed, 23 Nov 2022 18:23:02 GMT
server: cloudflare
cf-ray: 76ebed89c961b4fd-OSL
content-encoding: br
X-Firefox-Spdy: h2
www.buildinglink.com/public/wp-content/uploads/maxmegamenu/style_en.css?ver=b65a6d
200 OK 0 B URL HTTP/2 www.buildinglink.com/public/wp-content/uploads/maxmegamenu/style_en.css?ver=b65a6d
IP
GET /public/wp-content/uploads/maxmegamenu/style_en.css?ver=b65a6d HTTP/1.1
Host: www.buildinglink.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.buildinglink.com/marketing/public/main
Cookie: __cflb=02DiuDXvJ1dKekvY3orry22HB3MMHGLG5YBPYQBpK1Y1i
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 23 Nov 2022 18:22:01 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=135137
etag: W/"20fe1-5d57d5c6f9c80-gzip"
last-modified: Thu, 13 Jan 2022 21:28:02 GMT
vary: Accept-Encoding
cf-cache-status: HIT
server: cloudflare
cf-ray: 76ebed885c33b52d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.buildinglink.com/public/wp-content/themes/buildinglink/js/calculator.js?ver=6.1.1
200 OK 0 B URL HTTP/2 www.buildinglink.com/public/wp-content/themes/buildinglink/js/calculator.js?ver=6.1.1
IP
GET /public/wp-content/themes/buildinglink/js/calculator.js?ver=6.1.1 HTTP/1.1
Host: www.buildinglink.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.buildinglink.com/marketing/public/main
Cookie: __cflb=02DiuDXvJ1dKekvY3orry22HB3MMHGLG5YBPYQBpK1Y1i
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 23 Nov 2022 18:22:01 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=9636
etag: W/"25a4-5d57d53327fc0-gzip"
last-modified: Thu, 13 Jan 2022 21:25:27 GMT
vary: Accept-Encoding
cf-cache-status: HIT
server: cloudflare
cf-ray: 76ebed88bcd6b52d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.gstatic.com/recaptcha/releases/Km9gKuG06He-isPsP6saG8cn/recaptcha__en.js
200 OK 0 B URL HTTP/2 www.gstatic.com/recaptcha/releases/Km9gKuG06He-isPsP6saG8cn/recaptcha__en.js
IP
GET /recaptcha/releases/Km9gKuG06He-isPsP6saG8cn/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.buildinglink.com
Connection: keep-alive
Referer: https://www.buildinglink.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 162976
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 23 Nov 2022 14:58:48 GMT
expires: Thu, 23 Nov 2023 14:58:48 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 14 Nov 2022 03:01:59 GMT
content-type: text/javascript
age: 12195
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
unpkg.com/swiper@7/swiper-bundle.min.js?ver=6.1.1
302 Found 0 B URL HTTP/2 unpkg.com/swiper@7/swiper-bundle.min.js?ver=6.1.1
IP
GET /swiper@7/swiper-bundle.min.js?ver=6.1.1 HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.buildinglink.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Wed, 23 Nov 2022 18:22:01 GMT
content-type: text/plain; charset=utf-8
access-control-allow-origin: *
location: /swiper@7/swiper-bundle.min.js
vary: Accept, Accept-Encoding
via: 1.1 fly.io
fly-request-id: 01GJJTY2EVWEHYEZ10RPHDBEBJ-fra
cf-cache-status: HIT
age: 699
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 76ebed8a7ad90b51-OSL
X-Firefox-Spdy: h2
js.hsadspixel.net/fb.js
200 OK 0 B IP
GET /fb.js HTTP/1.1
Host: js.hsadspixel.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.buildinglink.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 23 Nov 2022 18:22:02 GMT
content-type: application/javascript; charset=utf-8
x-amz-replication-status: COMPLETED
last-modified: Mon, 14 Nov 2022 03:38:56 UTC
x-amz-server-side-encryption: AES256
x-amz-version-id: aoUPWE.Bu9NRjxDy7F1Soox3yNWe2Us6
etag: W/"c32a10854f4ff995fc7198ba0324bcc6"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 76e55a2361219fb19722e949475d1844.cloudfront.net (CloudFront)
x-amz-cf-pop: IAD12-P3
x-amz-cf-id: smhvQzjcFZrUF_W80GOlXD1DdtGd0AC68U0HlvjmUpwB5gIHEEOtRA==
age: 5
cache-control: max-age=600
content-security-policy-report-only: frame-ancestors 'self'; report-uri https://exceptions.hubspot.com/csp/report?resource=adsscriptloaderstatic/static-1.302/bundles/pixels-release.js&cfRay=76d6427b4847b506-IAD
x-hs-target-asset: adsscriptloaderstatic/static-1.302/bundles/pixels-release.js
x-hs-cache-status: HIT
cache-tag: staticjsapp-AdsScriptLoaderCloudflare-web-prod,staticjsapp-prod
cf-cache-status: HIT
server: cloudflare
cf-ray: 76ebed90ea5eb51b-OSL
content-encoding: br
X-Firefox-Spdy: h2
js.hscollectedforms.net/collectedforms.js
200 OK 0 B URL HTTP/2 js.hscollectedforms.net/collectedforms.js
IP
GET /collectedforms.js HTTP/1.1
Host: js.hscollectedforms.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.buildinglink.com
Connection: keep-alive
Referer: https://www.buildinglink.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 23 Nov 2022 18:22:02 GMT
content-type: application/javascript; charset=utf-8
x-amz-replication-status: COMPLETED
last-modified: Wed, 16 Nov 2022 03:41:33 UTC
x-amz-server-side-encryption: AES256
x-amz-version-id: _5EZs_H26Fc6JgVRh7ahoi0orqifRkcW
etag: W/"59a69a76233d8365d7266548d5703c09"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6b29c936420d116b13807604a0e67044.cloudfront.net (CloudFront)
x-amz-cf-pop: IAD12-P3
x-amz-cf-id: g2iKh8exvIApTKMdgvmt2Agwrnxr8LI73L401toVK4frcst1rFobcg==
cache-control: s-maxage=600, max-age=300
content-security-policy-report-only: frame-ancestors 'self'; report-uri https://exceptions.hubspot.com/csp/report?resource=collected-forms-embed-js/static-1.311/bundles/project.js&cfRay=76d4d4b4bf87b51d-IAD
x-hs-target-asset: collected-forms-embed-js/static-1.311/bundles/project.js
access-control-allow-origin: *
x-hs-cache-status: HIT
cache-tag: staticjsapp-collected-forms-embed-js-web-prod,staticjsapp-prod
cf-cache-status: MISS
server: cloudflare
cf-ray: 76ebed90de31b512-OSL
content-encoding: br
X-Firefox-Spdy: h2
104.18.22.136
104.26.8.50
104.17.25.14
93.184.220.29
3.71.211.152
151.101.85.229
23.36.76.226
52.50.139.125