r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a2104f935c638b4767ca5ae0d738ef23
85c6af15af749be0ceeae6de17c36925b750f166
5d4789a3696bd7faa9916768cb627bbc89bf70a756d80e53860cbac13c2bc8b1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5D4789A3696BD7FAA9916768CB627BBC89BF70A756D80E53860CBAC13C2BC8B1"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6242
Expires: Mon, 30 Jan 2023 03:25:02 GMT
Date: Mon, 30 Jan 2023 01:41:00 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 81dd5c5cc5b3278876cb44dcb520a60f
c0511a59e9eccdcdda98717b87c89c5d59974808
41736c303afdb3d31e48724b107dcb22883cae02f3562308eb52d9164001a2de
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "41736C303AFDB3D31E48724B107DCB22883CAE02F3562308EB52D9164001A2DE"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5536
Expires: Mon, 30 Jan 2023 03:13:16 GMT
Date: Mon, 30 Jan 2023 01:41:00 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 302c7548412192add063ad6c8b99cf3b
e5d178931a27db036ce8daae302594d3ff7050b8
fc2bd9091006189e67e8074093805ee5492ce16e1dbfba32e083abeeae34969d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FC2BD9091006189E67E8074093805EE5492CE16E1DBFBA32E083ABEEAE34969D"
Last-Modified: Sat, 28 Jan 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13140
Expires: Mon, 30 Jan 2023 05:20:00 GMT
Date: Mon, 30 Jan 2023 01:41:00 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash bf0c602d32b3c14606f22a86183b5e3c
6eabd8d83475eba731968abe1a05a8bfd272f160
6c6a7c519a9e950c2445ed874a25211a94dd4d3cf3afb0103af9dcd1dbd5ff9e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Content-Length, Retry-After, Content-Type, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Mon, 30 Jan 2023 01:35:39 GMT
content-type: application/json
age: 321
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP
File type PEM certificate\012- , ASCII text
Hash 7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: K6vMrCzDf2bLiU/yaQv87X3buT5ZrgO3BYGpVdJ+PysonQhJN8X0mytJjdBLV+HhNLLoVl3S9sIQD908VEEogA==
x-amz-request-id: NZ371CMFB77FBMCV
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Mon, 30 Jan 2023 00:50:32 GMT
age: 3028
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 30 Jan 2023 01:41:00 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
identity.woodmac.com/content/css/styles-e3aeb98be55861b7cf1b61546b05b773.css
200 OK 136 kB URL HTTP/2 identity.woodmac.com/content/css/styles-e3aeb98be55861b7cf1b61546b05b773.css
IP
File type ASCII text, with very long lines (483)
Size 136 kB (135696 bytes)
Hash 67b882c24e5951f92cb17748c86699e9
c1e635c26497952ad11c2c2f82e534bc227972eb
91e2d105508fdea108e2da172b1953254a60254bb5e8ef9a523f7360382ab7ba
GET /content/css/styles-e3aeb98be55861b7cf1b61546b05b773.css HTTP/1.1
Host: identity.woodmac.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://identity.woodmac.com/sign-in?goto=https://my.woodmac.com/document/150096104
Cookie: _gcl_au=1.1.484173616.1675042813; _ga_S6XFT1XT8V=GS1.1.1675042813.1.0.1675042820.53.0.0; _ga=GA1.2.1378521543.1675042813; _gid=GA1.2.630455836.1675042814; _gat_UA-377468-13=1; _ga=GA1.3.1378521543.1675042813; _gid=GA1.3.630455836.1675042814; _uetsid=0a7cc030a03f11ed8eaa3f15a0395d4f; _uetvid=0a7cbdc0a03f11ed85b1839f8830eab6; BCSessionID=824af588-e95b-4eef-8404-3a3b49d0b533; ln_or=eyI0Mzk5NiI6ImQifQ%3D%3D; _fbp=fb.1.1675042814644.1312594071; JSESSIONID=A0FA37B38EFACBA9057B599BBB72A038; nlbi_1949747=3Gl7KQ996nG42bnx+B1QdgAAAACKxaewDWrruCdOLHj3fZ/0; incap_ses_277_1949747=M060SnVN+DRdpfUBjRrYAysg12MAAAAAxsU2xjfTIaOZ8NPyqaARVA==
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
etag: "cc4ed097"
last-modified: Fri, 07 Oct 2022 15:50:03 GMT
content-type: text/css
content-length: 135696
content-encoding: gzip
cache-control: max-age=0, must-revalidate
date: Mon, 30 Jan 2023 01:40:59 GMT
x-cdn: Imperva
x-iinfo: 14-8868350-0 0CNN RT(1675042859247 401) q(0 -1 -1 -1) r(0 -1)
X-Firefox-Spdy: h2
identity.woodmac.com/content/js/jquery.min-c9f5aeeca3ad37bf2aa006139b935f0a.js
200 OK 30 kB URL HTTP/2 identity.woodmac.com/content/js/jquery.min-c9f5aeeca3ad37bf2aa006139b935f0a.js
IP
File type ASCII text, with very long lines (32058)
Hash d9d684a4c631766f087b3d340b3bb260
318cd9d00c34ecbc95ad040503d8a051a257c9af
5f16cf6a470e435e068369dfefd273389ceab363a2ca7681aa603b5ae03dea5c
GET /content/js/jquery.min-c9f5aeeca3ad37bf2aa006139b935f0a.js HTTP/1.1
Host: identity.woodmac.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://identity.woodmac.com/sign-in?goto=https://my.woodmac.com/document/150096104
Cookie: _gcl_au=1.1.484173616.1675042813; _ga_S6XFT1XT8V=GS1.1.1675042813.1.0.1675042820.53.0.0; _ga=GA1.2.1378521543.1675042813; _gid=GA1.2.630455836.1675042814; _gat_UA-377468-13=1; _ga=GA1.3.1378521543.1675042813; _gid=GA1.3.630455836.1675042814; _uetsid=0a7cc030a03f11ed8eaa3f15a0395d4f; _uetvid=0a7cbdc0a03f11ed85b1839f8830eab6; BCSessionID=824af588-e95b-4eef-8404-3a3b49d0b533; ln_or=eyI0Mzk5NiI6ImQifQ%3D%3D; _fbp=fb.1.1675042814644.1312594071; JSESSIONID=A0FA37B38EFACBA9057B599BBB72A038; nlbi_1949747=3Gl7KQ996nG42bnx+B1QdgAAAACKxaewDWrruCdOLHj3fZ/0; incap_ses_277_1949747=M060SnVN+DRdpfUBjRrYAysg12MAAAAAxsU2xjfTIaOZ8NPyqaARVA==
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
etag: "c9f5aeeca3ad37bf2aa006139b935f0a"
last-modified: Fri, 07 Oct 2022 15:50:03 GMT
content-type: application/javascript
content-length: 30138
content-encoding: gzip
cache-control: max-age=0, must-revalidate
date: Mon, 30 Jan 2023 01:40:59 GMT
x-cdn: Imperva
x-iinfo: 14-8868350-0 0CNN RT(1675042859247 404) q(0 -1 -1 -1) r(0 -1)
X-Firefox-Spdy: h2
identity.woodmac.com/content/js/jquery.validate-f490ed8cdd611b5952400f4b9d09d95b.js
200 OK 13 kB URL HTTP/2 identity.woodmac.com/content/js/jquery.validate-f490ed8cdd611b5952400f4b9d09d95b.js
IP
File type Unicode text, UTF-8 text, with very long lines (511)
Hash 8c2a1618cac53d81f89cce8edbabda79
29c6e805e427762389c0aec1192bdb4e0d3cda46
99894be39feaa4743758cc730f35e33bc49b0d94dc1304801d28cba96dedf25d
GET /content/js/jquery.validate-f490ed8cdd611b5952400f4b9d09d95b.js HTTP/1.1
Host: identity.woodmac.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://identity.woodmac.com/sign-in?goto=https://my.woodmac.com/document/150096104
Cookie: _gcl_au=1.1.484173616.1675042813; _ga_S6XFT1XT8V=GS1.1.1675042813.1.0.1675042820.53.0.0; _ga=GA1.2.1378521543.1675042813; _gid=GA1.2.630455836.1675042814; _gat_UA-377468-13=1; _ga=GA1.3.1378521543.1675042813; _gid=GA1.3.630455836.1675042814; _uetsid=0a7cc030a03f11ed8eaa3f15a0395d4f; _uetvid=0a7cbdc0a03f11ed85b1839f8830eab6; BCSessionID=824af588-e95b-4eef-8404-3a3b49d0b533; ln_or=eyI0Mzk5NiI6ImQifQ%3D%3D; _fbp=fb.1.1675042814644.1312594071; JSESSIONID=A0FA37B38EFACBA9057B599BBB72A038; nlbi_1949747=3Gl7KQ996nG42bnx+B1QdgAAAACKxaewDWrruCdOLHj3fZ/0; incap_ses_277_1949747=M060SnVN+DRdpfUBjRrYAysg12MAAAAAxsU2xjfTIaOZ8NPyqaARVA==
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
etag: "f490ed8cdd611b5952400f4b9d09d95b"
last-modified: Fri, 07 Oct 2022 15:50:03 GMT
content-type: application/javascript
content-length: 12771
content-encoding: gzip
cache-control: max-age=0, must-revalidate
date: Mon, 30 Jan 2023 01:40:59 GMT
x-cdn: Imperva
x-iinfo: 14-8868350-0 0CNN RT(1675042859247 406) q(0 -1 -1 -1) r(0 -1)
X-Firefox-Spdy: h2
identity.woodmac.com/content/js/validation-0d27a7dbaf81c735f293db3125102124.js
200 OK 743 B URL HTTP/2 identity.woodmac.com/content/js/validation-0d27a7dbaf81c735f293db3125102124.js
IP
Hash 65f4bbfba26c53ce0476cc054961bdea
90ada00bb40ad56d48f62f22c195c30fb9f0b8ad
92f8395901cf7587ee4fe6a5add8b2ca58fd8d640b6328226b6802ae040260a3
GET /content/js/validation-0d27a7dbaf81c735f293db3125102124.js HTTP/1.1
Host: identity.woodmac.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://identity.woodmac.com/sign-in?goto=https://my.woodmac.com/document/150096104
Cookie: _gcl_au=1.1.484173616.1675042813; _ga_S6XFT1XT8V=GS1.1.1675042813.1.0.1675042820.53.0.0; _ga=GA1.2.1378521543.1675042813; _gid=GA1.2.630455836.1675042814; _gat_UA-377468-13=1; _ga=GA1.3.1378521543.1675042813; _gid=GA1.3.630455836.1675042814; _uetsid=0a7cc030a03f11ed8eaa3f15a0395d4f; _uetvid=0a7cbdc0a03f11ed85b1839f8830eab6; BCSessionID=824af588-e95b-4eef-8404-3a3b49d0b533; ln_or=eyI0Mzk5NiI6ImQifQ%3D%3D; _fbp=fb.1.1675042814644.1312594071; JSESSIONID=A0FA37B38EFACBA9057B599BBB72A038; nlbi_1949747=3Gl7KQ996nG42bnx+B1QdgAAAACKxaewDWrruCdOLHj3fZ/0; incap_ses_277_1949747=M060SnVN+DRdpfUBjRrYAysg12MAAAAAxsU2xjfTIaOZ8NPyqaARVA==
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
etag: "0d27a7dbaf81c735f293db3125102124"
last-modified: Fri, 07 Oct 2022 15:50:03 GMT
content-type: application/javascript
content-length: 743
content-encoding: gzip
cache-control: max-age=0, must-revalidate
date: Mon, 30 Jan 2023 01:40:59 GMT
x-cdn: Imperva
x-iinfo: 14-8868350-0 0CNN RT(1675042859247 407) q(0 -1 -1 -1) r(0 -1)
X-Firefox-Spdy: h2
identity.woodmac.com/content/css/okta-theme-e1ddda7a068afbcd51fa7637aad6e734.css
200 OK 4.2 kB URL HTTP/2 identity.woodmac.com/content/css/okta-theme-e1ddda7a068afbcd51fa7637aad6e734.css
IP
File type ASCII text, with very long lines (321), with CRLF line terminators
Hash 6adef3efc77c07a248dc333b3aff256f
d4487a52b873d83f22407d4443d2dd88a1cb1757
7c70e5eb9582fa686f1407938c89deb999fe39c49235639e863bc11fa2c3e422
GET /content/css/okta-theme-e1ddda7a068afbcd51fa7637aad6e734.css HTTP/1.1
Host: identity.woodmac.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://identity.woodmac.com/sign-in?goto=https://my.woodmac.com/document/150096104
Cookie: _gcl_au=1.1.484173616.1675042813; _ga_S6XFT1XT8V=GS1.1.1675042813.1.0.1675042820.53.0.0; _ga=GA1.2.1378521543.1675042813; _gid=GA1.2.630455836.1675042814; _gat_UA-377468-13=1; _ga=GA1.3.1378521543.1675042813; _gid=GA1.3.630455836.1675042814; _uetsid=0a7cc030a03f11ed8eaa3f15a0395d4f; _uetvid=0a7cbdc0a03f11ed85b1839f8830eab6; BCSessionID=824af588-e95b-4eef-8404-3a3b49d0b533; ln_or=eyI0Mzk5NiI6ImQifQ%3D%3D; _fbp=fb.1.1675042814644.1312594071; JSESSIONID=A0FA37B38EFACBA9057B599BBB72A038; nlbi_1949747=3Gl7KQ996nG42bnx+B1QdgAAAACKxaewDWrruCdOLHj3fZ/0; incap_ses_277_1949747=M060SnVN+DRdpfUBjRrYAysg12MAAAAAxsU2xjfTIaOZ8NPyqaARVA==
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
etag: "b9eeb32f"
last-modified: Fri, 07 Oct 2022 15:50:03 GMT
content-type: text/css
content-length: 4176
content-encoding: gzip
cache-control: max-age=0, must-revalidate
date: Mon, 30 Jan 2023 01:40:59 GMT
x-cdn: Imperva
x-iinfo: 14-8868350-0 0CNN RT(1675042859247 408) q(0 -1 -1 -1) r(0 -1)
X-Firefox-Spdy: h2
identity.woodmac.com/content/img/logo.svg
200 OK 1.5 kB URL HTTP/2 identity.woodmac.com/content/img/logo.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (3540), with no line terminators
Hash cf324dafd9177c34a9efbedca751c762
b7ad3a5da32ac441d1bb2bc813fd8f4ade9eb66f
bdc608bf8f441fdac6e3bf83f533ba8440571d38ced11ec920a4d91441d06b57
GET /content/img/logo.svg HTTP/1.1
Host: identity.woodmac.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://identity.woodmac.com/sign-in?goto=https://my.woodmac.com/document/150096104
Cookie: _gcl_au=1.1.484173616.1675042813; _ga_S6XFT1XT8V=GS1.1.1675042813.1.0.1675042820.53.0.0; _ga=GA1.2.1378521543.1675042813; _gid=GA1.2.630455836.1675042814; _gat_UA-377468-13=1; _ga=GA1.3.1378521543.1675042813; _gid=GA1.3.630455836.1675042814; _uetsid=0a7cc030a03f11ed8eaa3f15a0395d4f; _uetvid=0a7cbdc0a03f11ed85b1839f8830eab6; BCSessionID=824af588-e95b-4eef-8404-3a3b49d0b533; ln_or=eyI0Mzk5NiI6ImQifQ%3D%3D; _fbp=fb.1.1675042814644.1312594071; JSESSIONID=A0FA37B38EFACBA9057B599BBB72A038; nlbi_1949747=3Gl7KQ996nG42bnx+B1QdgAAAACKxaewDWrruCdOLHj3fZ/0; incap_ses_277_1949747=M060SnVN+DRdpfUBjRrYAysg12MAAAAAxsU2xjfTIaOZ8NPyqaARVA==
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
etag: "bd0ceb3b"
last-modified: Fri, 07 Oct 2022 15:50:03 GMT
content-type: image/svg+xml
content-length: 1453
content-encoding: gzip
cache-control: max-age=0, must-revalidate
date: Mon, 30 Jan 2023 01:40:59 GMT
x-cdn: Imperva
x-iinfo: 14-8868350-0 0CNN RT(1675042859247 409) q(0 -1 -1 -1) r(0 -1)
X-Firefox-Spdy: h2
identity.woodmac.com/_Incapsula_Resource?SWJIYLWA=719d34d31c8e3a6e6fffd425f7e032f3&ns=1&cb=1172638888
200 OK 22 kB URL HTTP/2 identity.woodmac.com/_Incapsula_Resource?SWJIYLWA=719d34d31c8e3a6e6fffd425f7e032f3&ns=1&cb=1172638888
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 5e267489cd023af9bb523a473bdb3ff2
38256c50951f2a7ae303519e528aadbb175a8eb4
d9770ae80f9ce65eb16dce4b8e0a6e4030dad4519d10d94f1d7feeebf9fecaa5
GET /_Incapsula_Resource?SWJIYLWA=719d34d31c8e3a6e6fffd425f7e032f3&ns=1&cb=1172638888 HTTP/1.1
Host: identity.woodmac.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://identity.woodmac.com/sign-in?goto=https://my.woodmac.com/document/150096104
Cookie: _gcl_au=1.1.484173616.1675042813; _ga_S6XFT1XT8V=GS1.1.1675042813.1.0.1675042820.53.0.0; _ga=GA1.2.1378521543.1675042813; _gid=GA1.2.630455836.1675042814; _gat_UA-377468-13=1; _ga=GA1.3.1378521543.1675042813; _gid=GA1.3.630455836.1675042814; _uetsid=0a7cc030a03f11ed8eaa3f15a0395d4f; _uetvid=0a7cbdc0a03f11ed85b1839f8830eab6; BCSessionID=824af588-e95b-4eef-8404-3a3b49d0b533; ln_or=eyI0Mzk5NiI6ImQifQ%3D%3D; _fbp=fb.1.1675042814644.1312594071; JSESSIONID=A0FA37B38EFACBA9057B599BBB72A038; nlbi_1949747=3Gl7KQ996nG42bnx+B1QdgAAAACKxaewDWrruCdOLHj3fZ/0; incap_ses_277_1949747=M060SnVN+DRdpfUBjRrYAysg12MAAAAAxsU2xjfTIaOZ8NPyqaARVA==
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: no-cache, no-store
content-type: application/javascript
content-encoding: gzip
x-robots-tag: noindex
content-length: 21628
X-Firefox-Spdy: h2
identity.woodmac.com/content/img/logo-verisk.svg
200 OK 1.5 kB URL HTTP/2 identity.woodmac.com/content/img/logo-verisk.svg
IP
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (3667), with no line terminators
Hash 0176f5ac181e857515f43587b448c956
34fda2744fe442732d71a8388fefa9e44d5ec765
1372b52adaef58dffd1a9f2770ad439b332c1b876e936887645be9e1e6ac3548
GET /content/img/logo-verisk.svg HTTP/1.1
Host: identity.woodmac.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://identity.woodmac.com/sign-in?goto=https://my.woodmac.com/document/150096104
Cookie: _gcl_au=1.1.484173616.1675042813; _ga_S6XFT1XT8V=GS1.1.1675042813.1.0.1675042820.53.0.0; _ga=GA1.2.1378521543.1675042813; _gid=GA1.2.630455836.1675042814; _gat_UA-377468-13=1; _ga=GA1.3.1378521543.1675042813; _gid=GA1.3.630455836.1675042814; _uetsid=0a7cc030a03f11ed8eaa3f15a0395d4f; _uetvid=0a7cbdc0a03f11ed85b1839f8830eab6; BCSessionID=824af588-e95b-4eef-8404-3a3b49d0b533; ln_or=eyI0Mzk5NiI6ImQifQ%3D%3D; _fbp=fb.1.1675042814644.1312594071; JSESSIONID=A0FA37B38EFACBA9057B599BBB72A038; nlbi_1949747=3Gl7KQ996nG42bnx+B1QdgAAAACKxaewDWrruCdOLHj3fZ/0; incap_ses_277_1949747=M060SnVN+DRdpfUBjRrYAysg12MAAAAAxsU2xjfTIaOZ8NPyqaARVA==
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
etag: "bd60a48e"
last-modified: Fri, 07 Oct 2022 15:50:03 GMT
content-type: image/svg+xml
content-length: 1459
content-encoding: gzip
cache-control: max-age=0, must-revalidate
date: Mon, 30 Jan 2023 01:40:59 GMT
x-cdn: Imperva
x-iinfo: 14-8868350-0 0CNN RT(1675042859247 410) q(0 -1 -1 -1) r(0 -1)
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 75bf326700e29b1b06e57fb96ee2b064
4f979f28905b65637a058cd44be6c25bb51a42e4
385f7a9c4112c4d674264d02229719e7f82e7039e681db8aaa6685ebab2be0c1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 01:41:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash ba2ca6af7b23ce2e11aa4f9d86e66269
212aef55d64b6add292dcf6241b16e7c93d1bae2
f163a94d190f5aeeb05b2e344bc8e1544d9701772b08585e9c92b529c8652b3d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 01:41:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Last-Modified, Pragma, ETag, Retry-After, Content-Type, Content-Length, Expires, Cache-Control, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Mon, 30 Jan 2023 00:49:04 GMT
age: 3117
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
global.oktacdn.com/okta-signin-widget/5.0.2/font/montserrat-light-webfont.woff
200 OK 22 kB URL HTTP/2 global.oktacdn.com/okta-signin-widget/5.0.2/font/montserrat-light-webfont.woff
IP
File type Web Open Font Format, TrueType, length 22112, version 0.0\012- data
Hash 6225f3ca44b83090833064727a09cc95
3449db1ccdfe0aeaf89101cc28ecafaecae9fc89
feb177fb563f478cb8ecade71caea5df5ad318ca161c71875114e504ce304ace
GET /okta-signin-widget/5.0.2/font/montserrat-light-webfont.woff HTTP/1.1
Host: global.oktacdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://identity.woodmac.com
Connection: keep-alive
Referer: https://global.oktacdn.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 22112
date: Mon, 30 Jan 2023 01:39:42 GMT
x-amz-replication-status: COMPLETED
last-modified: Fri, 20 Nov 2020 01:04:27 GMT
etag: "6225f3ca44b83090833064727a09cc95"
x-amz-version-id: uVdI5rpjXyav8A_yD7TKTWOjZt_w0PRJ
accept-ranges: bytes
server: AmazonS3
cache-control: public,max-age=31536000,s-maxage=1814400
strict-transport-security: max-age=315360000
access-control-allow-origin: *
x-content-type-options: nosniff
x-cache: Hit from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: U_uiSl0rVz5uFpJgoks-OcrJ8Ngray-9DvZ66DzvKmq9PGTL78OZ2g==
age: 80
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash db3290a85d0ba4da27406ae9636aa618
4c69da45eddd66a1e26fce5562fc45eda7005309
19db4d0cc84bff9586883a5fa69c426af0b5fc1c2760ee7c259b0307c8afa6b2
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 01:41:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15920, version 1.0\012- data
Hash 3a44e06eb954b96aa043227f3534189d
23cef6993ddb2b2979e8e7647fc3763694e2ba7d
b019538234514166ec7665359d097403358f8a4c991901983922fb4d56989f1e
GET /s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://identity.woodmac.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15920
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 25 Jan 2023 07:51:59 GMT
expires: Thu, 25 Jan 2024 07:51:59 GMT
cache-control: public, max-age=31536000
age: 409742
last-modified: Wed, 11 May 2022 19:24:45 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash db3290a85d0ba4da27406ae9636aa618
4c69da45eddd66a1e26fce5562fc45eda7005309
19db4d0cc84bff9586883a5fa69c426af0b5fc1c2760ee7c259b0307c8afa6b2
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 01:41:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash db3290a85d0ba4da27406ae9636aa618
4c69da45eddd66a1e26fce5562fc45eda7005309
19db4d0cc84bff9586883a5fa69c426af0b5fc1c2760ee7c259b0307c8afa6b2
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 01:41:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 22b9916fc1fafc9bdc9bb37f9eac8a9a
86f640e134a741a0f906a8e3a0f5c6659dd0e394
a29ee843c8a39551a1507cc6ad949ad509e33aaae8b72c58ac4884bad8b0b38e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A29EE843C8A39551A1507CC6AD949AD509E33AAAE8B72C58AC4884BAD8B0B38E"
Last-Modified: Sun, 29 Jan 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6047
Expires: Mon, 30 Jan 2023 03:21:48 GMT
Date: Mon, 30 Jan 2023 01:41:01 GMT
Connection: keep-alive
identity.woodmac.com/content/js/app.js
200 OK 16 kB URL HTTP/2 identity.woodmac.com/content/js/app.js
IP
Hash b9c29351c46f3e8c8631c4002457f48a
e57e59c5780995ff2937ab2b511a769212974a87
f75911313e1c7802c23345ab57e754d87801581706780c993fb23ff4e0fe62ef
GET /content/js/app.js HTTP/1.1
Host: identity.woodmac.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://identity.woodmac.com/sign-in?goto=https://my.woodmac.com/document/150096104
Cookie: _gcl_au=1.1.484173616.1675042813; _ga_S6XFT1XT8V=GS1.1.1675042813.1.0.1675042820.53.0.0; _ga=GA1.2.1378521543.1675042813; _gid=GA1.2.630455836.1675042814; _gat_UA-377468-13=1; _ga=GA1.3.1378521543.1675042813; _gid=GA1.3.630455836.1675042814; _uetsid=0a7cc030a03f11ed8eaa3f15a0395d4f; _uetvid=0a7cbdc0a03f11ed85b1839f8830eab6; BCSessionID=824af588-e95b-4eef-8404-3a3b49d0b533; ln_or=eyI0Mzk5NiI6ImQifQ%3D%3D; _fbp=fb.1.1675042814644.1312594071; JSESSIONID=A0FA37B38EFACBA9057B599BBB72A038; nlbi_1949747=3Gl7KQ996nG42bnx+B1QdgAAAACKxaewDWrruCdOLHj3fZ/0; incap_ses_277_1949747=M060SnVN+DRdpfUBjRrYAysg12MAAAAAxsU2xjfTIaOZ8NPyqaARVA==
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
etag: "9e921bd3"
last-modified: Fri, 07 Oct 2022 15:50:03 GMT
content-type: application/javascript
content-length: 73531
content-encoding: gzip
cache-control: max-age=0, must-revalidate
date: Mon, 30 Jan 2023 01:40:59 GMT
x-cdn: Imperva
x-iinfo: 14-8868350-0 0CNN RT(1675042859247 411) q(0 -1 -1 -1) r(0 -1)
X-Firefox-Spdy: h2
identity.woodmac.com/_Incapsula_Resource?SWKMTFSR=1&e=0.9049915076596071
200 OK 1 B URL HTTP/2 identity.woodmac.com/_Incapsula_Resource?SWKMTFSR=1&e=0.9049915076596071
IP
File type very short file (no magic)
Hash c4ca4238a0b923820dcc509a6f75849b
356a192b7913b04c54574d18c28d46e6395428ab
6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
GET /_Incapsula_Resource?SWKMTFSR=1&e=0.9049915076596071 HTTP/1.1
Host: identity.woodmac.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://identity.woodmac.com/sign-in?goto=https://my.woodmac.com/document/150096104
Cookie: _gcl_au=1.1.484173616.1675042813; _ga_S6XFT1XT8V=GS1.1.1675042813.1.0.1675042820.53.0.0; _ga=GA1.2.1378521543.1675042813; _gid=GA1.2.630455836.1675042814; _gat_UA-377468-13=1; _ga=GA1.3.1378521543.1675042813; _gid=GA1.3.630455836.1675042814; _uetsid=0a7cc030a03f11ed8eaa3f15a0395d4f; _uetvid=0a7cbdc0a03f11ed85b1839f8830eab6; BCSessionID=824af588-e95b-4eef-8404-3a3b49d0b533; ln_or=eyI0Mzk5NiI6ImQifQ%3D%3D; _fbp=fb.1.1675042814644.1312594071; JSESSIONID=A0FA37B38EFACBA9057B599BBB72A038; nlbi_1949747=3Gl7KQ996nG42bnx+B1QdgAAAACKxaewDWrruCdOLHj3fZ/0; incap_ses_277_1949747=M060SnVN+DRdpfUBjRrYAysg12MAAAAAxsU2xjfTIaOZ8NPyqaARVA==; ___utmvc=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
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: no-cache, no-store
content-type: text/plain
x-robots-tag: noindex
content-length: 1
set-cookie: ___utmvc=a; Max-Age=0; path=/; expires=Tue, 24 Jan 2023 22:27:52 GMT
X-Firefox-Spdy: h2
global.oktacdn.com/okta-signin-widget/5.0.2/img/ui/forms/checkbox-sign-in-widget.png
200 OK 3.1 kB URL HTTP/2 global.oktacdn.com/okta-signin-widget/5.0.2/img/ui/forms/checkbox-sign-in-widget.png
IP
File type PNG image data, 50 x 1155, 8-bit/color RGBA, non-interlaced\012- data
Hash 7846b2f8c6d0a7ca69fdd3d3c294e92d
e0bb021ffdf93c68fef44de2a3b08f378b6fb50a
40810b0318131f9ba52c83a17e633a0ac476ade66ea8a914d6c4980571397665
GET /okta-signin-widget/5.0.2/img/ui/forms/checkbox-sign-in-widget.png HTTP/1.1
Host: global.oktacdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://global.oktacdn.com/okta-signin-widget/5.0.2/css/okta-sign-in.min.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 3141
x-amz-replication-status: COMPLETED
last-modified: Fri, 20 Nov 2020 01:04:27 GMT
x-amz-version-id: WlnbhyKRmjGaqBqR0GqadJtAdF4_sLZ5
accept-ranges: bytes
server: AmazonS3
strict-transport-security: max-age=315360000
access-control-allow-origin: *
x-content-type-options: nosniff
date: Sun, 29 Jan 2023 05:00:30 GMT
cache-control: public,max-age=31536000,s-maxage=1814400
etag: "7846b2f8c6d0a7ca69fdd3d3c294e92d"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: zJU9b9BoQstsMSqKF_kycpUgB1R7vctBgoerUy_67pPunI-CXKt4Yg==
age: 74431
X-Firefox-Spdy: h2
global.oktacdn.com/okta-signin-widget/5.0.2/font/montserrat-regular-webfont.woff
200 OK 22 kB URL HTTP/2 global.oktacdn.com/okta-signin-widget/5.0.2/font/montserrat-regular-webfont.woff
IP
File type Web Open Font Format, TrueType, length 21980, version 0.0\012- data
Hash 8f2822b73b5f9c106c6f2e0db820bcbb
b838e30072520735c49eda52cb2d3a0f4b30f0f2
1d5325892ecf2dc3abd0caf2a1ef4eabf2477e2937c9a372760fd2acae8fddf3
GET /okta-signin-widget/5.0.2/font/montserrat-regular-webfont.woff HTTP/1.1
Host: global.oktacdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://identity.woodmac.com
Connection: keep-alive
Referer: https://global.oktacdn.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 21980
date: Sun, 29 Jan 2023 14:22:05 GMT
x-amz-replication-status: COMPLETED
last-modified: Fri, 20 Nov 2020 01:04:27 GMT
etag: "8f2822b73b5f9c106c6f2e0db820bcbb"
x-amz-version-id: 8GVbGDQcPfCPs2IAg4dkfx_eYgJkY9h.
accept-ranges: bytes
server: AmazonS3
cache-control: public,max-age=31536000,s-maxage=1814400
strict-transport-security: max-age=315360000
access-control-allow-origin: *
x-content-type-options: nosniff
x-cache: Hit from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: KwNnOA9edmNCxCUxflusYQuEMoqJZQ-P9nh8aNkuQKXtSq9jvwmS5w==
age: 40737
X-Firefox-Spdy: h2
cdn.blueconic.net/woodmackenzie.js
200 OK 40 kB URL HTTP/2 cdn.blueconic.net/woodmackenzie.js
IP
File type ASCII text, with very long lines (14591)
Hash 36149493c114acf253b69134cabe6b00
36c96f68ea8d5eeeda280148791d29f882db7a3f
2d8c11d236b3dbc3821789697c9503889bf71b48d2a50b4f9946129335516d30
GET /woodmackenzie.js HTTP/1.1
Host: cdn.blueconic.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://identity.woodmac.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
content-length: 40119
date: Mon, 30 Jan 2023 01:39:41 GMT
server: -
last-modified: Mon, 19 Dec 2022 15:20:23 GMT
accept-ranges: none
content-encoding: gzip
cache-control: public, max-age=600, s-maxage=500
x-content-type-options: nosniff
x-robots-tag: noindex, nofollow
x-permitted-cross-domain-policies: master-only
x-xss-protection: 1; mode=block
etag: "20a51-5f02fdbaad768-gzip"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: oOlqYxDI1oRyAHNcNeIkTsnm9yZMLLRTQXRgavLZtDVNbHpn_DdhAA==
age: 80
X-Firefox-Spdy: h2
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: Bnfzmg0fTxAJqFO6xYcO7Q==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 8dn/rNfwjRZEn0X5cqz9RqRjw+0=
secure.leadforensics.com/js/18267.js
200 OK 135 B URL HTTP/1.1 secure.leadforensics.com/js/18267.js
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type ASCII text, with no line terminators
Hash 6ac09ba6827a5c62c35b970f783f5cc4
f791ae06231fc0dba926f67e200e0a3ca8c73165
263f47700eefc02530d1617ae7700cd526012ffb58c8648bb1567e29dd32e2aa
GET /js/18267.js HTTP/1.1
Host: secure.leadforensics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://identity.woodmac.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: no-store, must-revalidate
Pragma: no-cache
Content-Type: text/javascript
Content-Encoding: gzip
Expires: 0
Vary: Accept-Encoding
Server: Kestrel
Request-Context: appId=cid-v1:abe8a76f-f1a2-4b2e-9017-0ea36ffb5c20
Date: Mon, 30 Jan 2023 01:41:00 GMT
Content-Length: 135
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash 92cb548f128922704c9eff8d65d71bed
6933b1fd40a2793c23f594f4ecc266269e2abb80
221a170845a15cc8b15ef6817869e2154dc9a2ac7f20ce711b5b013241bc4d0f
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "221A170845A15CC8B15EF6817869E2154DC9A2AC7F20CE711B5B013241BC4D0F"
Last-Modified: Sun, 29 Jan 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9915
Expires: Mon, 30 Jan 2023 04:26:16 GMT
Date: Mon, 30 Jan 2023 01:41:01 GMT
Connection: keep-alive
identity.woodmac.com/content/img/icons/favicon-16x16.png
200 OK 2.5 kB URL HTTP/2 identity.woodmac.com/content/img/icons/favicon-16x16.png
IP
File type PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced\012- data
Hash e4f646985bd4ea5c74ce61be33cdf5ef
240fade814ce4655cbe6088cf698bb06fe38a3c2
a95808398b3c576668e2acae32145c1e4c57dee3047f1f90daeff2c96d05b1fd
GET /content/img/icons/favicon-16x16.png HTTP/1.1
Host: identity.woodmac.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://identity.woodmac.com/sign-in?goto=https://my.woodmac.com/document/150096104
Cookie: _gcl_au=1.1.484173616.1675042813; _ga_S6XFT1XT8V=GS1.1.1675042813.1.1.1675042871.2.0.0; _ga=GA1.1.1378521543.1675042813; _gid=GA1.2.630455836.1675042814; _gat_UA-377468-13=1; _ga=GA1.3.1378521543.1675042813; _gid=GA1.3.630455836.1675042814; _uetsid=0a7cc030a03f11ed8eaa3f15a0395d4f; _uetvid=0a7cbdc0a03f11ed85b1839f8830eab6; BCSessionID=824af588-e95b-4eef-8404-3a3b49d0b533; ln_or=eyI0Mzk5NiI6ImQifQ%3D%3D; _fbp=fb.1.1675042814644.1312594071; JSESSIONID=A0FA37B38EFACBA9057B599BBB72A038; nlbi_1949747=3Gl7KQ996nG42bnx+B1QdgAAAACKxaewDWrruCdOLHj3fZ/0; incap_ses_277_1949747=M060SnVN+DRdpfUBjRrYAysg12MAAAAAxsU2xjfTIaOZ8NPyqaARVA==
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
etag: "09bac5cb"
last-modified: Wed, 30 Nov 2022 17:25:07 GMT
content-type: image/png
content-length: 2470
cache-control: max-age=0, must-revalidate
date: Mon, 30 Jan 2023 01:41:01 GMT
x-cdn: Imperva
x-iinfo: 14-8868350-0 0CNN RT(1675042859247 2663) q(0 -1 -1 -1) r(0 -1)
X-Firefox-Spdy: h2
snap.licdn.com/li.lms-analytics/insight.min.js
200 OK 4.8 kB URL HTTP/2 snap.licdn.com/li.lms-analytics/insight.min.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (13351)
Hash 74f72658f6efd10c4c286ab07cd5e452
9fa4dfc644b6e818914f2f2c4fe4bdf791fd6d39
6681619d5962f95b3fccfa34a7f035664edb66522d237ea0c28a05851f9d295c
GET /li.lms-analytics/insight.min.js HTTP/1.1
Host: snap.licdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://identity.woodmac.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Tue, 10 Jan 2023 17:22:56 GMT
accept-ranges: bytes
content-type: application/x-javascript;charset=utf-8
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=27134
date: Mon, 30 Jan 2023 01:41:02 GMT
content-length: 4777
x-content-type-options: nosniff
x-cdn: AKAM
X-Firefox-Spdy: h2
d16fk4ms6rqz1v.cloudfront.net/capture/woodmac.js
200 OK 36 kB URL HTTP/1.1 d16fk4ms6rqz1v.cloudfront.net/capture/woodmac.js
IP
File type ASCII text, with very long lines (60229)
Hash 21419d6a23cb714a45e4ddb7d427a2aa
6d5c0bc89315b52163a12afbf8c7fa0f70a53105
bf46e90e8d29b769b325138df05e8ef33a29c70e4ed338f713312ac8bb834a95
GET /capture/woodmac.js HTTP/1.1
Host: d16fk4ms6rqz1v.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://identity.woodmac.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx/1.18.0
Last-Modified: Tue, 10 Dec 2019 14:28:06 GMT
Strict-Transport-Security: max-age=60; includeSubDomains
Content-Encoding: gzip
Date: Mon, 30 Jan 2023 01:40:47 GMT
ETag: W/"5defab76-195f2"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: LZ53LhWgr6Wz_oNQR5Ps5ZQOhaQCTulQxoY2Af7K1nW-45cWXxlb7Q==
Age: 15
static.ads-twitter.com/uwt.js
200 OK 15 kB URL HTTP/2 static.ads-twitter.com/uwt.js
IP
File type ASCII text, with very long lines (57596), with no line terminators
Hash 573e6a7f86f6f3063763360ef0672c01
b12eab3b4ac8872d49ac6e15f9cd17741765c0cf
02445eb022a04139531f0ce8d8980c31083a1c670936f1477f5cfc4d252133f7
GET /uwt.js HTTP/1.1
Host: static.ads-twitter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://identity.woodmac.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Thu, 27 Oct 2022 18:55:37 GMT
cache-control: no-cache
content-type: application/javascript; charset=utf-8
content-encoding: gzip
etag: "32ad004436155ec972bc50e6238b5b67+gzip+gzip"
accept-ranges: bytes
date: Mon, 30 Jan 2023 01:41:02 GMT
x-served-by: cache-iad-kjyo7100147-IAD, cache-hel1410032-HEL
x-cache: HIT, HIT
vary: Accept-Encoding,Host
p3p: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT"
x-tw-cdn: FT
content-length: 15375
X-Firefox-Spdy: h2
bat.bing.com/bat.js
200 OK 12 kB IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type Unicode text, UTF-8 text, with very long lines (39395), with no line terminators
Hash 4f378a725368a42971cd69e29f75db89
2a1cdf193b346d9281c6e04a9b3775e7fc1ae11e
6a2a9d238501343cb3f25e0f54f4ecc4ec2c4e0fa6b228cc72dc3fff90502078
GET /bat.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://identity.woodmac.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: private,max-age=1800
content-length: 11552
content-type: application/javascript
content-encoding: gzip
last-modified: Mon, 23 Jan 2023 19:59:24 GMT
accept-ranges: bytes
etag: "076bc30652fd91:0"
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 3404387304294BB6B428E1FA1B44D006 Ref B: OSL30EDGE0412 Ref C: 2023-01-30T01:41:02Z
date: Mon, 30 Jan 2023 01:41:02 GMT
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash ba2ca6af7b23ce2e11aa4f9d86e66269
212aef55d64b6add292dcf6241b16e7c93d1bae2
f163a94d190f5aeeb05b2e344bc8e1544d9701772b08585e9c92b529c8652b3d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 01:41:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e9eba61fbe87bc53d60d0fdd1ba6adb4
8dbb3dfacfaad4ce0fd3a355790cb9b245e01e07
9c0233792f873315e75ce5396d1a210f2df665db23ab858a0724f66bbb4528e7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 01:41:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 471 B IP
Hash 14681339fc16ac120967600c85c37d96
589ed56dc45067e35e26a667ad3d9a12d0f61884
c7a020eb97f372e9325a03c89aa4d97d023f8583ea94af56ae1ffc2363ab8547
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5939
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 01:41:03 GMT
Last-Modified: Mon, 30 Jan 2023 00:02:04 GMT
Server: ECS (ska/F715)
X-Cache: HIT
Content-Length: 471
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1490)
Hash ca7fbbfd120e3e329633044190bbf134
d17f81e03dd827554ddd207ea081fb46b3415445
847004cefb32f85a9cc16b0b1eb77529ff5753680c145bfcb23f651d214737db
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://identity.woodmac.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20085
date: Sun, 29 Jan 2023 23:46:59 GMT
expires: Mon, 30 Jan 2023 01:46:59 GMT
cache-control: public, max-age=7200
age: 6844
last-modified: Tue, 10 Jan 2023 21:29:14 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/viewthroughconversion/966362999/?random=1675042871326&cv=11&fst=1675042871326&bg=ffffff&guid=ON&async=1>m=2wg1p0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fidentity.woodmac.com%2Fsign-in%3Fgoto%3Dhttps%3A%2F%2Fmy.woodmac.com%2Fdocument%2F150096104&tiba=Wood%20Mackenzie%20%7C%20Sign%20in&auid=484173616.1675042813&rfmt=3&fmt=4
200 OK 908 B URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/966362999/?random=1675042871326&cv=11&fst=1675042871326&bg=ffffff&guid=ON&async=1>m=2wg1p0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fidentity.woodmac.com%2Fsign-in%3Fgoto%3Dhttps%3A%2F%2Fmy.woodmac.com%2Fdocument%2F150096104&tiba=Wood%20Mackenzie%20%7C%20Sign%20in&auid=484173616.1675042813&rfmt=3&fmt=4
IP
File type ASCII text, with very long lines (1951), with no line terminators
Hash beb0942f81a8e676f8aae8198360fe93
bb8b017ad9dfb404e8804ae04a25328e6facd8bd
4270b3b16546f3397fa0b9dda0c90ba812c841d30cd0107549ff9e7869e1c665
GET /pagead/viewthroughconversion/966362999/?random=1675042871326&cv=11&fst=1675042871326&bg=ffffff&guid=ON&async=1>m=2wg1p0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fidentity.woodmac.com%2Fsign-in%3Fgoto%3Dhttps%3A%2F%2Fmy.woodmac.com%2Fdocument%2F150096104&tiba=Wood%20Mackenzie%20%7C%20Sign%20in&auid=484173616.1675042813&rfmt=3&fmt=4 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://identity.woodmac.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Mon, 30 Jan 2023 01:41:03 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 908
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Mon, 30-Jan-2023 01:56:03 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
s.yimg.jp/images/listing/tool/cv/ytag.js
200 OK 9.8 kB URL HTTP/2 s.yimg.jp/images/listing/tool/cv/ytag.js
IP
File type ASCII text, with very long lines (32040), with no line terminators
Hash 365c9c596b34a4638836c22c8a5dc623
90f05e1c6c4016e5677709bb6f8f0e810b9ca58a
ecddfb33f676186b2a23f80d1d12b32bfe11d1144b1e44da0347d5ac2943b76f
GET /images/listing/tool/cv/ytag.js HTTP/1.1
Host: s.yimg.jp
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://identity.woodmac.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
date: Mon, 30 Jan 2023 01:35:30 GMT
vary: Accept-Encoding
last-modified: Mon, 19 Dec 2022 01:14:54 GMT
cache-control: public, max-age=600
content-encoding: gzip
server: ATS
accept-ch: Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch
permissions-policy: ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-platform-version=*, ch-ua-arch=*
age: 333
content-length: 9788
ats-carp-promotion: 1
x-z-chihaya: r=1
X-Firefox-Spdy: h2
woodmackenzie.blueconic.net/DG/DEFAULT/rest/rpc/937?referer=https%3A%2F%2Fidentity.woodmac.com%2Fsign-in%3Fgoto%3Dhttps%3A%2F%2Fmy.woodmac.com%2Fdocument%2F150096104&bcsessionid=824af588-e95b-4eef-8404-3a3b49d0b533&bctempid=&overruleReferrer=&time=2023-01-30T01%3A41%3A11%2B00%3A00&ts=1675042871635
200 OK 5.4 kB URL HTTP/2 woodmackenzie.blueconic.net/DG/DEFAULT/rest/rpc/937?referer=https%3A%2F%2Fidentity.woodmac.com%2Fsign-in%3Fgoto%3Dhttps%3A%2F%2Fmy.woodmac.com%2Fdocument%2F150096104&bcsessionid=824af588-e95b-4eef-8404-3a3b49d0b533&bctempid=&overruleReferrer=&time=2023-01-30T01%3A41%3A11%2B00%3A00&ts=1675042871635
IP
File type JSON data\012- , ASCII text, with very long lines (25089), with no line terminators
Hash ecca2f242f1db9cc2444d049a344f6ca
b8500f90f4286ca3184c16fda48b5fd4d14668ec
bdbc09a95095af20fda8f10028ea3f683c3b03cba92a2f199642128356b84f79
POST /DG/DEFAULT/rest/rpc/937?referer=https%3A%2F%2Fidentity.woodmac.com%2Fsign-in%3Fgoto%3Dhttps%3A%2F%2Fmy.woodmac.com%2Fdocument%2F150096104&bcsessionid=824af588-e95b-4eef-8404-3a3b49d0b533&bctempid=&overruleReferrer=&time=2023-01-30T01%3A41%3A11%2B00%3A00&ts=1675042871635 HTTP/1.1
Host: woodmackenzie.blueconic.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 831
Origin: https://identity.woodmac.com
Connection: keep-alive
Referer: https://identity.woodmac.com/
Cookie: BCSessionID=824af588-e95b-4eef-8404-3a3b49d0b533; AWSALBCORS=Q2yuC12CASm5sNtJ0+XPhU9Ds055Q98P4UNxnw1peYcAazF+DghovM0HJFs7XrCDc371NVrXMz+EWaFfEAUf/E6WDl0mRYlRJNdQHuesYWrIExRPWX3JWons0x47
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 30 Jan 2023 01:41:03 GMT
content-type: application/json; charset=utf-8
content-length: 5392
set-cookie: AWSALB=Fit5tS6jIK3PvKs54Z2nNFWTyjbjPpSIKWiDyLrlqcVwv8RiVcaZ37I2IoToVOe/cYAbHC7GP0CHo2M6vuDbiFLJwO2Ny6tPXFIR8SsooayK0enODIq6C8tVTWaV; Expires=Mon, 06 Feb 2023 01:41:03 GMT; Path=/
AWSALBCORS=Fit5tS6jIK3PvKs54Z2nNFWTyjbjPpSIKWiDyLrlqcVwv8RiVcaZ37I2IoToVOe/cYAbHC7GP0CHo2M6vuDbiFLJwO2Ny6tPXFIR8SsooayK0enODIq6C8tVTWaV; Expires=Mon, 06 Feb 2023 01:41:03 GMT; Path=/; SameSite=None; Secure
BCSessionID=824af588-e95b-4eef-8404-3a3b49d0b533;Path=/DG/DEFAULT;Expires=Tue, 05-Mar-2024 01:41:03 GMT;Secure;SameSite=None
BCTempID="";Version=1;Path=/DG/DEFAULT;Expires=Thu, 01-Jan-1970 00:00:00 GMT;Max-Age=0;Secure;SameSite=None
BCReferrerOverrule="";Version=1;Path=/;Expires=Thu, 01-Jan-1970 00:00:00 GMT;Max-Age=0;Secure;HttpOnly;SameSite=None
server: -
x-content-type-options: nosniff
x-permitted-cross-domain-policies: master-only
x-robots-tag: noindex, nofollow
x-xss-protection: 1; mode=block
p3p: policyref="", CP="DSP"
access-control-allow-origin: https://identity.woodmac.com
access-control-allow-credentials: true
accept-ch: sec-ch-ua-platform-version
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
cache-control: no-cache, no-store, no-transform, must-revalidate, private
content-encoding: gzip
X-Firefox-Spdy: h2
connect.facebook.net/en_US/fbevents.js
200 OK 28 kB URL HTTP/2 connect.facebook.net/en_US/fbevents.js
IP
File type ASCII text, with very long lines (64348)
Hash 541db4f3f0ba067bfb58cdac34cb86f4
20e6883f068568888ce37c6b9ef8f5d12be257c0
83898f3b2da2a11996d2eb3a5115ef301255030fdf231b8bf7971916769bc7be
GET /en_US/fbevents.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://identity.woodmac.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: application/x-javascript; charset=utf-8
content-security-policy: default-src facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com data: blob: 'self';script-src *.fbcdn.net *.facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com;connect-src *.fbcdn.net *.facebook.net wss://*.fbcdn.net attachment.fbsbx.com blob: 'self';block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: 7ha0DyVZl6njK1m8eyTwOJ9owX2dPV7ka/Uj1rDke/rJ4EPx9nh/VNZo3eTpElFGqx0ewwMp/QPabWxDLvOfTg==
priority: u=3,i
content-length: 27815
x-fb-trip-id: 1679558926
date: Mon, 30 Jan 2023 01:41:03 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash dfb84426fed94988d5c90372baff059c
f1c4740830034ff8a5759d59ae3f657ea524d083
d97efec67504b084ca6ff9e2af973b45b916f90aa021603e3615806bb2737b6a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D97EFEC67504B084CA6FF9E2AF973B45B916F90AA021603E3615806BB2737B6A"
Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4623
Expires: Mon, 30 Jan 2023 02:58:06 GMT
Date: Mon, 30 Jan 2023 01:41:03 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash dfb84426fed94988d5c90372baff059c
f1c4740830034ff8a5759d59ae3f657ea524d083
d97efec67504b084ca6ff9e2af973b45b916f90aa021603e3615806bb2737b6a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D97EFEC67504B084CA6FF9E2AF973B45B916F90AA021603E3615806BB2737B6A"
Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4623
Expires: Mon, 30 Jan 2023 02:58:06 GMT
Date: Mon, 30 Jan 2023 01:41:03 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash dfb84426fed94988d5c90372baff059c
f1c4740830034ff8a5759d59ae3f657ea524d083
d97efec67504b084ca6ff9e2af973b45b916f90aa021603e3615806bb2737b6a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D97EFEC67504B084CA6FF9E2AF973B45B916F90AA021603E3615806BB2737B6A"
Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4623
Expires: Mon, 30 Jan 2023 02:58:06 GMT
Date: Mon, 30 Jan 2023 01:41:03 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash dfb84426fed94988d5c90372baff059c
f1c4740830034ff8a5759d59ae3f657ea524d083
d97efec67504b084ca6ff9e2af973b45b916f90aa021603e3615806bb2737b6a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D97EFEC67504B084CA6FF9E2AF973B45B916F90AA021603E3615806BB2737B6A"
Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4623
Expires: Mon, 30 Jan 2023 02:58:06 GMT
Date: Mon, 30 Jan 2023 01:41:03 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F72e6599c-6a41-4dd2-a346-b15fa84cb20a.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F72e6599c-6a41-4dd2-a346-b15fa84cb20a.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 65c02d8a1b0d6a210cb2a649c5c67469
027dbc7a104c922904f067ed15d696c363c11774
89d5443a1d313c632d09a583ef602aa4645a16986076387329f434262d15b0a1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F72e6599c-6a41-4dd2-a346-b15fa84cb20a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10997
x-amzn-requestid: a6fac0ab-1acf-4808-8785-3b4ec5e32edf
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fhj30FX7IAMFa5w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d6e698-005109ec2e76529e793678d6;Sampled=0
x-amzn-remapped-date: Sun, 29 Jan 2023 21:35:20 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: skGKI_MWvDwpAbGibUcr8wTlimgoPU9ZYhEHltd3uhdJZ_GoNznVAA==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 325ed3ba58a560748d886354beef39c0.cloudfront.net (CloudFront), 1.1 google
date: Sun, 29 Jan 2023 21:53:08 GMT
age: 13675
etag: "027dbc7a104c922904f067ed15d696c363c11774"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdc895bb6-fa1f-4972-a2f8-5ce71b0c72c0.jpeg
200 OK 9.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdc895bb6-fa1f-4972-a2f8-5ce71b0c72c0.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6d200552d23c85c199558b79cc24348f
8cc20b9ce98eeacd5b826268da24955a82e78a01
09b05ae6f75b5141401ddc49014e0eb2eac0856ba3b5020bc85f4a9a64d3d2a6
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdc895bb6-fa1f-4972-a2f8-5ce71b0c72c0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9700
x-amzn-requestid: 9f944a46-7e39-44c3-a640-3c7e9b778bca
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fhkoEEkJIAMFs0w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d6e7cd-4b29196f5bd1b2fb04e6363f;Sampled=0
x-amzn-remapped-date: Sun, 29 Jan 2023 21:40:29 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Jdh2u-xrCjqq1SKWL7hCTqrlGRjbytuxecJS-cwiXb5FQypGKYbFzg==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 12a392bc3a7281f8d5d4591bfadc41fc.cloudfront.net (CloudFront), 1.1 google
date: Sun, 29 Jan 2023 21:55:35 GMT
age: 13528
etag: "8cc20b9ce98eeacd5b826268da24955a82e78a01"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2e1c93b4-807b-47ea-82fe-50d8216b163c.jpeg
200 OK 6.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2e1c93b4-807b-47ea-82fe-50d8216b163c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f49153c1aade8aa30bc6c84db4fa09d7
5cce4e085c87e7fbe82907694a36a91cc1bc9bfc
3285916959352e77cdbea34515dad3b3a0315b74bca7f45a8e5a2de4661203e2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2e1c93b4-807b-47ea-82fe-50d8216b163c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6646
x-amzn-requestid: c8a7d4b9-1a13-41c1-8391-853f03f3150c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fbvRsHiaIAMF4Yw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d49271-634529cc6844e70829b5750f;Sampled=0
x-amzn-remapped-date: Sat, 28 Jan 2023 03:11:45 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: PXMbaFBZrgdsIRduRmCb8ALPII3zv7dTT4Ikn2B_Waxz3wLcp2giKQ==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 7022a5bbf9872d4a09d63e6cdb457dfe.cloudfront.net (CloudFront), 1.1 google
date: Sun, 29 Jan 2023 03:49:27 GMT
age: 78696
etag: "5cce4e085c87e7fbe82907694a36a91cc1bc9bfc"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd9a423a9-16ee-4e3f-b9b4-34f6a469aba9.jpeg
200 OK 9.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd9a423a9-16ee-4e3f-b9b4-34f6a469aba9.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3be81f83687ddb6c93d3ff3c09a9dba2
50a48e737310d3f31840db4301b25927fbcc12c5
e78c909e2381898e7f546183784a05dff47c31734c95358aaada8c2777ad47be
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd9a423a9-16ee-4e3f-b9b4-34f6a469aba9.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9167
x-amzn-requestid: f644ca78-a07a-43d1-96e4-95bcdecff7fb
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fPGLfFtOIAMFp7w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63cf83e2-202ca7160544acd24259bd5d;Sampled=0
x-amzn-remapped-date: Tue, 24 Jan 2023 07:08:18 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: xRwqrWS66l4qJfg2HnGphN1dbrIUod9XKW3zTk_-Km9AQRPyV2UqWg==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 5565a51537c689d1d16f6b4d41f40082.cloudfront.net (CloudFront), 1.1 google
date: Sun, 29 Jan 2023 20:46:17 GMT
age: 17686
etag: "50a48e737310d3f31840db4301b25927fbcc12c5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
s.yimg.jp/images/listing/tool/cv/conversion.js
200 OK 2.1 kB URL HTTP/2 s.yimg.jp/images/listing/tool/cv/conversion.js
IP
File type ASCII text, with very long lines (5916), with no line terminators
Hash 7f0c66912062f79b500f784ef684772c
593e742f13af825a35b6f53a31ff9c7f657e1577
a2fa9e94110a358da7f9597072da76a107b72ef8700a7626a21cbbb216d51bdf
GET /images/listing/tool/cv/conversion.js HTTP/1.1
Host: s.yimg.jp
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://identity.woodmac.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Mon, 30 Jan 2023 01:37:54 GMT
vary: Accept-Encoding
last-modified: Tue, 25 Jan 2022 16:25:04 GMT
cache-control: public, max-age=600
content-encoding: gzip
server: ATS
accept-ch: Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch
permissions-policy: ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-platform-version=*, ch-ua-arch=*
age: 189
content-length: 2140
x-z-chihaya: r=1
ats-carp-promotion: 1
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 14681339fc16ac120967600c85c37d96
589ed56dc45067e35e26a667ad3d9a12d0f61884
c7a020eb97f372e9325a03c89aa4d97d023f8583ea94af56ae1ffc2363ab8547
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5939
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 01:41:03 GMT
Last-Modified: Mon, 30 Jan 2023 00:02:04 GMT
Server: ECS (ska/F715)
X-Cache: HIT
Content-Length: 471
woodmackenzie.blueconic.net/plugin/plugin/c4b36b9ce0e067236125a1cc5ff1eec9
200 OK 42 kB URL HTTP/2 woodmackenzie.blueconic.net/plugin/plugin/c4b36b9ce0e067236125a1cc5ff1eec9
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 9aef79d47f558fee323571c5aa0adfcf
06ce1df2cc1e68cbe96eea37e9784baa99c1a42b
c6743f1b9fccdd91e90497c75e0846b54beda23b4e07386c1b5b2a63acf04291
GET /plugin/plugin/c4b36b9ce0e067236125a1cc5ff1eec9 HTTP/1.1
Host: woodmackenzie.blueconic.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://identity.woodmac.com/
Cookie: AWSALBCORS=Fit5tS6jIK3PvKs54Z2nNFWTyjbjPpSIKWiDyLrlqcVwv8RiVcaZ37I2IoToVOe/cYAbHC7GP0CHo2M6vuDbiFLJwO2Ny6tPXFIR8SsooayK0enODIq6C8tVTWaV
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 01:41:03 GMT
content-type: text/javascript; charset=utf-8
content-length: 41968
set-cookie: AWSALB=4f3x2ifV+qjBVGs6SxZ5nzG4Zt46WAWOkLNGIwEpdhNy6zrn0j2IEQZZDZ+usN8aV9Bs/Q69RROuz8T8zxjbAakulSnnsQdqof1bnom53H5FXpdLfYqPr7Pxya6c; Expires=Mon, 06 Feb 2023 01:41:03 GMT; Path=/
AWSALBCORS=4f3x2ifV+qjBVGs6SxZ5nzG4Zt46WAWOkLNGIwEpdhNy6zrn0j2IEQZZDZ+usN8aV9Bs/Q69RROuz8T8zxjbAakulSnnsQdqof1bnom53H5FXpdLfYqPr7Pxya6c; Expires=Mon, 06 Feb 2023 01:41:03 GMT; Path=/; SameSite=None; Secure
server: -
x-content-type-options: nosniff
x-permitted-cross-domain-policies: master-only
x-robots-tag: noindex, nofollow
x-xss-protection: 1; mode=block
p3p: policyref="", CP="DSP"
cache-control: public, no-cache="Set-Cookie", max-age=31536000
etag: c4b36b9ce0e067236125a1cc5ff1eec9
expires: Tue, 30 Jan 2024 01:41:03 GMT
last-modified: Sun, 29 Jan 2023 01:41:03 GMT
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e9eba61fbe87bc53d60d0fdd1ba6adb4
8dbb3dfacfaad4ce0fd3a355790cb9b245e01e07
9c0233792f873315e75ce5396d1a210f2df665db23ab858a0724f66bbb4528e7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 01:41:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa29141be-cb17-4a1d-a64f-9b3d296461f2.jpeg
200 OK 5.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa29141be-cb17-4a1d-a64f-9b3d296461f2.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 546f1cb9f94ea553ae884a6f50c6bd3d
fd08d9841bcd8864aaf2e5d93ca61b31246b6db5
5aba48ac6c65e371c6c1aeee43f97670f196d3a3933b9f5812a67be90b7dbdfa
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa29141be-cb17-4a1d-a64f-9b3d296461f2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5764
x-amzn-requestid: 33ebf979-ba40-451e-bbdb-3ee4a9dc07ae
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fhksyGRVoAMF5UQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d6e7eb-55fcbb4d6d88dbf758409801;Sampled=0
x-amzn-remapped-date: Sun, 29 Jan 2023 21:40:59 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: X3lzViVGoynSgoeenp6EIU2E3FMSRlKNGOy73pIOAASV11hOk2B4UA==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 981753271eb5b6d11bc29d52f173a5da.cloudfront.net (CloudFront), 1.1 google
date: Sun, 29 Jan 2023 22:11:27 GMT
age: 12576
etag: "fd08d9841bcd8864aaf2e5d93ca61b31246b6db5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F55e9b24d-3c7c-46d8-89b7-084483cc3d1d.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F55e9b24d-3c7c-46d8-89b7-084483cc3d1d.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5190c0bdc6abe0ee258e9f8c20ddaf51
d60f280f8a742480527dbc32d08f321f972d4fcf
874b38a04aa3736e65aaef72da2cc2efceb208618267107a495bdfe51ec58e58
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F55e9b24d-3c7c-46d8-89b7-084483cc3d1d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12507
x-amzn-requestid: 85c9adcd-b997-48ca-bbfb-ccdeaf3e8cfb
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fhklyFaJoAMFqKA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d6e7be-2bcdd8c353d8429d2b1e95f6;Sampled=0
x-amzn-remapped-date: Sun, 29 Jan 2023 21:40:14 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: UDJKl99GiUxTW_EgWFDjLaJZbKFhfaJR-XRLsbQphwHuCXczDlxrDA==
via: 1.1 a20e81b65d2465c729ce2f6bfe539dd0.cloudfront.net (CloudFront), 1.1 82ea95080f526df99896343fb7269b06.cloudfront.net (CloudFront), 1.1 google
date: Sun, 29 Jan 2023 21:54:37 GMT
age: 13586
etag: "d60f280f8a742480527dbc32d08f321f972d4fcf"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 312 B IP
Hash d06ae4c607bf5f868f9b300b22384cfb
2629b2e0228105e2c1b21012c8095c041f857f97
65c2fdfa47c0e848e895e365ca185438e33fdae5776f4c430bf235cc24c35077
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3995
Cache-Control: max-age=127223
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 01:41:03 GMT
Etag: "63d65e8b-138"
Expires: Tue, 31 Jan 2023 13:01:26 GMT
Last-Modified: Sun, 29 Jan 2023 11:54:51 GMT
Server: ECS (ska/F715)
X-Cache: HIT
Content-Length: 312
b92.yahoo.co.jp/js/s_retargeting.js
403 Forbidden 14 kB URL HTTP/2 b92.yahoo.co.jp/js/s_retargeting.js
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (486)
Hash e986e7a04549f3bef16fe1bb24e61acd
b3ec35460824fae12cf6342ae42d27597ec94fb7
e8b72fe96bc96ffcfef2cdf8ebb503ac854e5c2997ae389b96d04bf78f478edd
GET /js/s_retargeting.js HTTP/1.1
Host: b92.yahoo.co.jp
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://identity.woodmac.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 403 Forbidden
date: Mon, 30 Jan 2023 01:41:03 GMT
server: ATS
x-z-chihaya: r=1
x-frame-options: SAMEORIGIN
content-length: 14275
content-type: text/html
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash d245089d6a5aec17a3ff289d41089f1c
4be0d444b0ae8ab19917fa9f2261a198e882ea74
c44c13b7499eb7bd534af762c02e6c43e73f012d1415d5c58815c95b58dad276
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=132100
Date: Mon, 30 Jan 2023 01:41:03 GMT
Etag: "63d67393-1d7"
Expires: Tue, 31 Jan 2023 14:22:43 GMT
Last-Modified: Sun, 29 Jan 2023 13:24:35 GMT
Server: ECS (bsa/EB1E)
X-Cache: Miss from cloudfront
Via: 1.1 92c4bb210eab82a152000047d3609a02.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 9G3Af7aDbY3lJuzuiWVAKBe1KX3UEQ8ayMDg7nVbaFUyOKykMU1PCQ==
Age: 3488
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash ec10755907fdbb8acde8d353cfff03c9
d50b2a638126af025747e72f796e49d23d02dd27
e9f45cf4815bf7440f0694e7d5d9d6f4f647edd512590d54f4c11f6721375df7
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=129334
Date: Mon, 30 Jan 2023 01:41:03 GMT
Etag: "63d669eb-1d7"
Expires: Tue, 31 Jan 2023 13:36:37 GMT
Last-Modified: Sun, 29 Jan 2023 12:43:23 GMT
Server: ECS (dcb/7F39)
X-Cache: Miss from cloudfront
Via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: caN75ke_9aXA88qepNhmcyRbCuya3pizGc2okRIbeUS3euw54NdHrA==
Age: 3194
t.co/i/adsct?bci=3&eci=2&event_id=cddfbf6a-14cc-4539-8abf-bc587be79ce3&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=9922cf64-1fbd-4959-abc2-172eebe1b259&tw_document_href=https%3A%2F%2Fidentity.woodmac.com%2Fsign-in%3Fgoto%3Dhttps%3A%2F%2Fmy.woodmac.com%2Fdocument%2F150096104&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o3lc8&type=javascript&version=2.3.29
200 OK 43 B URL HTTP/2 t.co/i/adsct?bci=3&eci=2&event_id=cddfbf6a-14cc-4539-8abf-bc587be79ce3&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=9922cf64-1fbd-4959-abc2-172eebe1b259&tw_document_href=https%3A%2F%2Fidentity.woodmac.com%2Fsign-in%3Fgoto%3Dhttps%3A%2F%2Fmy.woodmac.com%2Fdocument%2F150096104&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o3lc8&type=javascript&version=2.3.29
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 377d257f2d2e294916143c069141c1c5
b7cae69682cf31dd670b65088db8395acda6ed3e
ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957
GET /i/adsct?bci=3&eci=2&event_id=cddfbf6a-14cc-4539-8abf-bc587be79ce3&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=9922cf64-1fbd-4959-abc2-172eebe1b259&tw_document_href=https%3A%2F%2Fidentity.woodmac.com%2Fsign-in%3Fgoto%3Dhttps%3A%2F%2Fmy.woodmac.com%2Fdocument%2F150096104&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o3lc8&type=javascript&version=2.3.29 HTTP/1.1
Host: t.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://identity.woodmac.com/
Cookie: muc_ads=366bb543-e2c8-487a-b122-10dbd06e13e6
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 30 Jan 2023 01:41:02 GMT
perf: 7626143928
server: tsa_o
content-type: image/gif;charset=utf-8
cache-control: no-cache, no-store, max-age=0
content-length: 43
x-transaction-id: 59a60ac0698e6532
strict-transport-security: max-age=0
x-response-time: 111
x-connection-hash: b5645cbb89e3a130270e545e158ed7ba3cefc784fdc3993abb1e88a21274db92
X-Firefox-Spdy: h2
woodmackenzie.blueconic.net/DG/DEFAULT/rest/rpc/937?referer=https%3A%2F%2Fidentity.woodmac.com%2Fsign-in%3Fgoto%3Dhttps%3A%2F%2Fmy.woodmac.com%2Fdocument%2F150096104&bcsessionid=824af588-e95b-4eef-8404-3a3b49d0b533&bctempid=&overruleReferrer=&time=2023-01-30T01%3A41%3A13%2B00%3A00&ts=1675042873677
200 OK 710 B URL HTTP/2 woodmackenzie.blueconic.net/DG/DEFAULT/rest/rpc/937?referer=https%3A%2F%2Fidentity.woodmac.com%2Fsign-in%3Fgoto%3Dhttps%3A%2F%2Fmy.woodmac.com%2Fdocument%2F150096104&bcsessionid=824af588-e95b-4eef-8404-3a3b49d0b533&bctempid=&overruleReferrer=&time=2023-01-30T01%3A41%3A13%2B00%3A00&ts=1675042873677
IP
File type JSON data\012- , ASCII text, with very long lines (1751), with no line terminators
Hash e53a60e8a75378f4ef2de13dc8e7986d
235f3e4331fb292435adfdb35ee1462a4194b312
b9f896049714f9359f716185e8d6cdec1560aefdc3cc94f5e5b63debb8c28c0f
POST /DG/DEFAULT/rest/rpc/937?referer=https%3A%2F%2Fidentity.woodmac.com%2Fsign-in%3Fgoto%3Dhttps%3A%2F%2Fmy.woodmac.com%2Fdocument%2F150096104&bcsessionid=824af588-e95b-4eef-8404-3a3b49d0b533&bctempid=&overruleReferrer=&time=2023-01-30T01%3A41%3A13%2B00%3A00&ts=1675042873677 HTTP/1.1
Host: woodmackenzie.blueconic.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 953
Origin: https://identity.woodmac.com
Connection: keep-alive
Referer: https://identity.woodmac.com/
Cookie: BCSessionID=824af588-e95b-4eef-8404-3a3b49d0b533; AWSALBCORS=4f3x2ifV+qjBVGs6SxZ5nzG4Zt46WAWOkLNGIwEpdhNy6zrn0j2IEQZZDZ+usN8aV9Bs/Q69RROuz8T8zxjbAakulSnnsQdqof1bnom53H5FXpdLfYqPr7Pxya6c
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 01:41:03 GMT
content-type: application/json; charset=utf-8
content-length: 710
set-cookie: AWSALB=r/FDrDMCPKqEQ7KUQ8mE52O4nkvPI/nlMC1yxMeeSnBvrQssoLT+iAiHtMc+kuLBwMQuaAf4KCmO9n1RWXUW7xRD+Imw9izDuxF2MtuJVvnWEc/bHVrjoxDpc0jQ; Expires=Mon, 06 Feb 2023 01:41:03 GMT; Path=/
AWSALBCORS=r/FDrDMCPKqEQ7KUQ8mE52O4nkvPI/nlMC1yxMeeSnBvrQssoLT+iAiHtMc+kuLBwMQuaAf4KCmO9n1RWXUW7xRD+Imw9izDuxF2MtuJVvnWEc/bHVrjoxDpc0jQ; Expires=Mon, 06 Feb 2023 01:41:03 GMT; Path=/; SameSite=None; Secure
server: -
x-content-type-options: nosniff
x-permitted-cross-domain-policies: master-only
x-robots-tag: noindex, nofollow
x-xss-protection: 1; mode=block
p3p: policyref="", CP="DSP"
access-control-allow-origin: https://identity.woodmac.com
access-control-allow-credentials: true
accept-ch: sec-ch-ua-platform-version
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
cache-control: no-cache, no-store, no-transform, must-revalidate, private
content-encoding: gzip
X-Firefox-Spdy: h2
s.salecycle.com/receiver.html?sc_frame_id=7c8d0b42-3625-4fed-b201-474f542b31f7
200 OK 177 B URL HTTP/2 s.salecycle.com/receiver.html?sc_frame_id=7c8d0b42-3625-4fed-b201-474f542b31f7
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 421adb2de19f69ecbc128d3ff1ef4a5f
8ddd4b36f6fbafde7f34e7a1c3dabe68c4d8e4e2
9e85759d30a414d1de4440413ee83aaa9913b40f26a706ccf4799ad8686ec4ff
GET /receiver.html?sc_frame_id=7c8d0b42-3625-4fed-b201-474f542b31f7 HTTP/1.1
Host: s.salecycle.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://identity.woodmac.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html
content-length: 177
last-modified: Wed, 13 Sep 2017 11:45:27 GMT
server: AmazonS3
date: Mon, 30 Jan 2023 01:39:57 GMT
cache-control: max-age=14400
etag: "421adb2de19f69ecbc128d3ff1ef4a5f"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: UdQy97SmPjh6vEW3tJO8i3VeiiKXOIyBn49GbOTneq2lRql28f8fpA==
age: 68
X-Firefox-Spdy: h2
woodmackenzie.blueconic.net/plugin/library/51d0d34f0e55e428628afec9e46d4487
200 OK 105 kB URL HTTP/2 woodmackenzie.blueconic.net/plugin/library/51d0d34f0e55e428628afec9e46d4487
IP
File type ASCII text, with very long lines (17623)
Size 105 kB (104946 bytes)
Hash cba441564bc4f1f13d22bc665e016557
5312d2f597222b0dc7d6d044dbedbbd5d0ad6f4c
6f31a46ef24f29ec83183dce319505e6a267bb56278b4528ed039bd172279007
GET /plugin/library/51d0d34f0e55e428628afec9e46d4487 HTTP/1.1
Host: woodmackenzie.blueconic.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://identity.woodmac.com/
Cookie: AWSALBCORS=4f3x2ifV+qjBVGs6SxZ5nzG4Zt46WAWOkLNGIwEpdhNy6zrn0j2IEQZZDZ+usN8aV9Bs/Q69RROuz8T8zxjbAakulSnnsQdqof1bnom53H5FXpdLfYqPr7Pxya6c
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 01:41:03 GMT
content-type: text/javascript; charset=utf-8
content-length: 104946
set-cookie: AWSALB=4bLGfV4QNs53KHJXTtCgc6wLkZfSuOokk73JSfI7bWqH3w4gDnWo6+zmi+q9HupF0GcoHy5CkXMD2fJl9pqi2nI0UDxJ3zdbsGWIp0jIUZcaITHHN9BZwdaqWhrf; Expires=Mon, 06 Feb 2023 01:41:03 GMT; Path=/
AWSALBCORS=4bLGfV4QNs53KHJXTtCgc6wLkZfSuOokk73JSfI7bWqH3w4gDnWo6+zmi+q9HupF0GcoHy5CkXMD2fJl9pqi2nI0UDxJ3zdbsGWIp0jIUZcaITHHN9BZwdaqWhrf; Expires=Mon, 06 Feb 2023 01:41:03 GMT; Path=/; SameSite=None; Secure
server: -
x-content-type-options: nosniff
x-permitted-cross-domain-policies: master-only
x-robots-tag: noindex, nofollow
x-xss-protection: 1; mode=block
p3p: policyref="", CP="DSP"
cache-control: public, no-cache="Set-Cookie", max-age=31536000
etag: 51d0d34f0e55e428628afec9e46d4487
expires: Tue, 30 Jan 2024 01:41:03 GMT
last-modified: Sun, 29 Jan 2023 01:41:03 GMT
content-encoding: gzip
X-Firefox-Spdy: h2
bat.bing.com/action/0?ti=17516204&Ver=2&mid=bded905d-9a82-459e-8bf3-efc78219942a&sid=0a7cc030a03f11ed8eaa3f15a0395d4f&vid=0a7cbdc0a03f11ed85b1839f8830eab6&vids=0&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=Wood%20Mackenzie%20%7C%20Sign%20in&p=https%3A%2F%2Fidentity.woodmac.com%2Fsign-in%3Fgoto%3Dhttps%3A%2F%2Fmy.woodmac.com%2Fdocument%2F150096104&r=<=1151&evt=pageLoad&sv=1&rn=331523
204 No Content 0 B URL HTTP/2 bat.bing.com/action/0?ti=17516204&Ver=2&mid=bded905d-9a82-459e-8bf3-efc78219942a&sid=0a7cc030a03f11ed8eaa3f15a0395d4f&vid=0a7cbdc0a03f11ed85b1839f8830eab6&vids=0&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=Wood%20Mackenzie%20%7C%20Sign%20in&p=https%3A%2F%2Fidentity.woodmac.com%2Fsign-in%3Fgoto%3Dhttps%3A%2F%2Fmy.woodmac.com%2Fdocument%2F150096104&r=<=1151&evt=pageLoad&sv=1&rn=331523
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /action/0?ti=17516204&Ver=2&mid=bded905d-9a82-459e-8bf3-efc78219942a&sid=0a7cc030a03f11ed8eaa3f15a0395d4f&vid=0a7cbdc0a03f11ed85b1839f8830eab6&vids=0&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=Wood%20Mackenzie%20%7C%20Sign%20in&p=https%3A%2F%2Fidentity.woodmac.com%2Fsign-in%3Fgoto%3Dhttps%3A%2F%2Fmy.woodmac.com%2Fdocument%2F150096104&r=<=1151&evt=pageLoad&sv=1&rn=331523 HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://identity.woodmac.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
cache-control: no-cache, must-revalidate
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
set-cookie: MUID=1971753F62DF699621B367966388681A; domain=.bing.com; expires=Sat, 24-Feb-2024 01:41:04 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: FF7B44DEC1084043A7AE1FAD7DCABE3A Ref B: OSL30EDGE0412 Ref C: 2023-01-30T01:41:04Z
date: Mon, 30 Jan 2023 01:41:04 GMT
X-Firefox-Spdy: h2
i.salecycle.com/impression?msgId=d507958e-94db-4c6d-8279-86f559198fdd
200 OK 2 B URL HTTP/2 i.salecycle.com/impression?msgId=d507958e-94db-4c6d-8279-86f559198fdd
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
POST /impression?msgId=d507958e-94db-4c6d-8279-86f559198fdd HTTP/1.1
Host: i.salecycle.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1205
Origin: https://identity.woodmac.com
Connection: keep-alive
Referer: https://identity.woodmac.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 30 Jan 2023 01:41:04 GMT
content-type: text/html; charset=utf-8
content-length: 2
server: nginx
access-control-allow-origin: *
etag: W/"2-vyGp6PvFo4RvsFtPoIWeCReyIC8"
X-Firefox-Spdy: h2
bat.bing.com/p/action/17516204.js
204 No Content 0 B URL HTTP/2 bat.bing.com/p/action/17516204.js
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /p/action/17516204.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://identity.woodmac.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
cache-control: private,max-age=1800
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: E8BDE1E729424C9E9AD64C48A2BC9546 Ref B: OSL30EDGE0412 Ref C: 2023-01-30T01:41:04Z
date: Mon, 30 Jan 2023 01:41:04 GMT
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash b67335a8e235eacf68e4b7f98cc5dc40
887a9b34cf2ba9371bbe8c93e362c174668cf812
1ad2f6328af6d819acd85f4e4646afcafd945e17e555d5eeb54244db83cd48fa
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 01:41:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash a369a4445d1fccf2ce045c3c4c3f3d67
d6f618e6150a4f9ac6eb5df4a503141a635605a2
d62c7913686c10d4c4b8d691d533256534da77cecc9fcf3f8aa885380dcc148b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 01:41:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 313 B IP
Hash 6d2677a268c46fe7437bc9ba7f1933f0
c4c8338d86338480d15172e8691dc9b25c9c25bf
0709a1fe6bd9156d9e98f2c986bcb486031947ce2412744efd1e0ff52f7929d2
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4856
Cache-Control: max-age=169101
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 01:41:04 GMT
Etag: "63d6fec5-139"
Expires: Wed, 01 Feb 2023 00:39:25 GMT
Last-Modified: Sun, 29 Jan 2023 23:18:29 GMT
Server: ECS (ska/F715)
X-Cache: HIT
Content-Length: 313
www.google.no/pagead/1p-user-list/966362999/?random=1675042871326&cv=11&fst=1675040400000&bg=ffffff&guid=ON&async=1>m=2wg1p0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fidentity.woodmac.com%2Fsign-in%3Fgoto%3Dhttps%3A%2F%2Fmy.woodmac.com%2Fdocument%2F150096104&tiba=Wood%20Mackenzie%20%7C%20Sign%20in&fmt=3&is_vtc=1&random=3864904523&rmt_tld=1&ipr=y
200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-user-list/966362999/?random=1675042871326&cv=11&fst=1675040400000&bg=ffffff&guid=ON&async=1>m=2wg1p0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fidentity.woodmac.com%2Fsign-in%3Fgoto%3Dhttps%3A%2F%2Fmy.woodmac.com%2Fdocument%2F150096104&tiba=Wood%20Mackenzie%20%7C%20Sign%20in&fmt=3&is_vtc=1&random=3864904523&rmt_tld=1&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/966362999/?random=1675042871326&cv=11&fst=1675040400000&bg=ffffff&guid=ON&async=1>m=2wg1p0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fidentity.woodmac.com%2Fsign-in%3Fgoto%3Dhttps%3A%2F%2Fmy.woodmac.com%2Fdocument%2F150096104&tiba=Wood%20Mackenzie%20%7C%20Sign%20in&fmt=3&is_vtc=1&random=3864904523&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://identity.woodmac.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Mon, 30 Jan 2023 01:41:04 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.google.com/pagead/1p-user-list/966362999/?random=1675042871326&cv=11&fst=1675040400000&bg=ffffff&guid=ON&async=1>m=2wg1p0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fidentity.woodmac.com%2Fsign-in%3Fgoto%3Dhttps%3A%2F%2Fmy.woodmac.com%2Fdocument%2F150096104&tiba=Wood%20Mackenzie%20%7C%20Sign%20in&fmt=3&is_vtc=1&random=3864904523&rmt_tld=0&ipr=y
200 OK 42 B URL HTTP/2 www.google.com/pagead/1p-user-list/966362999/?random=1675042871326&cv=11&fst=1675040400000&bg=ffffff&guid=ON&async=1>m=2wg1p0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fidentity.woodmac.com%2Fsign-in%3Fgoto%3Dhttps%3A%2F%2Fmy.woodmac.com%2Fdocument%2F150096104&tiba=Wood%20Mackenzie%20%7C%20Sign%20in&fmt=3&is_vtc=1&random=3864904523&rmt_tld=0&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/966362999/?random=1675042871326&cv=11&fst=1675040400000&bg=ffffff&guid=ON&async=1>m=2wg1p0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fidentity.woodmac.com%2Fsign-in%3Fgoto%3Dhttps%3A%2F%2Fmy.woodmac.com%2Fdocument%2F150096104&tiba=Wood%20Mackenzie%20%7C%20Sign%20in&fmt=3&is_vtc=1&random=3864904523&rmt_tld=0&ipr=y HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://identity.woodmac.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Mon, 30 Jan 2023 01:41:04 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
px.ads.linkedin.com/collect?v=2&fmt=js&pid=43996&time=1675042873051&url=https%3A%2F%2Fidentity.woodmac.com%2Fsign-in%3Fgoto%3Dhttps%3A%2F%2Fmy.woodmac.com%2Fdocument%2F150096104
302 Found 0 B URL HTTP/2 px.ads.linkedin.com/collect?v=2&fmt=js&pid=43996&time=1675042873051&url=https%3A%2F%2Fidentity.woodmac.com%2Fsign-in%3Fgoto%3Dhttps%3A%2F%2Fmy.woodmac.com%2Fdocument%2F150096104
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /collect?v=2&fmt=js&pid=43996&time=1675042873051&url=https%3A%2F%2Fidentity.woodmac.com%2Fsign-in%3Fgoto%3Dhttps%3A%2F%2Fmy.woodmac.com%2Fdocument%2F150096104 HTTP/1.1
Host: px.ads.linkedin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://identity.woodmac.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
location: https://www.linkedin.com/px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D43996%26time%3D1675042873051%26url%3Dhttps%253A%252F%252Fidentity.woodmac.com%252Fsign-in%253Fgoto%253Dhttps%253A%252F%252Fmy.woodmac.com%252Fdocument%252F150096104%26liSync%3Dtrue
set-cookie: UserMatchHistory=AQINRse1sviMUwAAAYYAVb39yRNQZjtOqYewOz7svACvnxgdu5_Z6dMvX2_6fi0qDLxxmCCyhLuxww; Max-Age=2592000; Expires=Wed, 01 Mar 2023 01:41:04 GMT; SameSite=None; Path=/; Domain=.linkedin.com; Secure
AnalyticsSyncHistory=AQLV7YDaoStgswAAAYYAVb39FVEi6_NYM_TFqtuk007uBy3jxMaWy7NHtfERTaQq-9nVyaLy8aXuflgevDsEkQ; Max-Age=2592000; Expires=Wed, 01 Mar 2023 01:41:04 GMT; SameSite=None; Path=/; Domain=.linkedin.com; Secure
lang=v=2&lang=en-us; SameSite=None; Path=/; Domain=ads.linkedin.com; Secure
bcookie="v=2&eefb7a46-22a9-49eb-8d2d-a0ff843dad78"; domain=.linkedin.com; Path=/; Secure; Expires=Tue, 30-Jan-2024 01:41:04 GMT; SameSite=None
lidc="b=VGST09:s=V:r=V:a=V:p=V:g=2478:u=1:x=1:i=1675042864:t=1675129264:v=2:sig=AQHrQSatrdN5aPv8jh5TkNCBfbkv2lph"; Expires=Tue, 31 Jan 2023 01:41:04 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
x-li-fabric: prod-lva1
report-to: {"group":"network-errors","max_age":2592000,"endpoints":[{"url":"https://www.linkedin.com/li/rep"}],"include_subdomains":true}
nel: {"report_to":"network-errors","max_age":1296000,"success_fraction":0.00066,"failure_fraction":1,"include_subdomains":true}
x-li-pop: afd-prod-lva1-x
x-li-proto: http/2
x-li-uuid: AAXzcU7uBs5uHostY0eEgA==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: B55A90E3798F440A81C6B34CAF5DED34 Ref B: OSL30EDGE0122 Ref C: 2023-01-30T01:41:04Z
date: Mon, 30 Jan 2023 01:41:04 GMT
content-length: 0
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash a369a4445d1fccf2ce045c3c4c3f3d67
d6f618e6150a4f9ac6eb5df4a503141a635605a2
d62c7913686c10d4c4b8d691d533256534da77cecc9fcf3f8aa885380dcc148b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 01:41:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 1141ae65ad448fb3438690d5042af728
aa8b236bb1099c9440bfe3e98530939623250c03
e55eeaf5cd454042706c3e2d7d2b0211e91087b430cb5bae6b9e030392f57b4b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 01:41:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
analytics.twitter.com/i/adsct?bci=3&eci=2&event_id=cddfbf6a-14cc-4539-8abf-bc587be79ce3&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=9922cf64-1fbd-4959-abc2-172eebe1b259&tw_document_href=https%3A%2F%2Fidentity.woodmac.com%2Fsign-in%3Fgoto%3Dhttps%3A%2F%2Fmy.woodmac.com%2Fdocument%2F150096104&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o3lc8&type=javascript&version=2.3.29
200 OK 43 B URL HTTP/2 analytics.twitter.com/i/adsct?bci=3&eci=2&event_id=cddfbf6a-14cc-4539-8abf-bc587be79ce3&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=9922cf64-1fbd-4959-abc2-172eebe1b259&tw_document_href=https%3A%2F%2Fidentity.woodmac.com%2Fsign-in%3Fgoto%3Dhttps%3A%2F%2Fmy.woodmac.com%2Fdocument%2F150096104&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o3lc8&type=javascript&version=2.3.29
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 377d257f2d2e294916143c069141c1c5
b7cae69682cf31dd670b65088db8395acda6ed3e
ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957
GET /i/adsct?bci=3&eci=2&event_id=cddfbf6a-14cc-4539-8abf-bc587be79ce3&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=9922cf64-1fbd-4959-abc2-172eebe1b259&tw_document_href=https%3A%2F%2Fidentity.woodmac.com%2Fsign-in%3Fgoto%3Dhttps%3A%2F%2Fmy.woodmac.com%2Fdocument%2F150096104&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o3lc8&type=javascript&version=2.3.29 HTTP/1.1
Host: analytics.twitter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://identity.woodmac.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 30 Jan 2023 01:41:04 GMT
perf: 7626143928
server: tsa_o
set-cookie: personalization_id="v1_o8LlWN+LjJ8k2Z8ejpuI7A=="; Max-Age=63072000; Expires=Wed, 29 Jan 2025 01:41:04 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=None
content-type: image/gif;charset=utf-8
cache-control: no-cache, no-store, max-age=0
content-length: 43
x-transaction-id: b1452e2b0beed258
strict-transport-security: max-age=631138519
x-response-time: 106
x-connection-hash: 5afd1bd9931b75e5f62e7c6ee17cef4d49a1ffa05e92c86c6634434337be202c
X-Firefox-Spdy: h2
woodmackenzie.blueconic.net/DG/DEFAULT/rest/rpc/937?referer=https%3A%2F%2Fidentity.woodmac.com%2Fsign-in%3Fgoto%3Dhttps%3A%2F%2Fmy.woodmac.com%2Fdocument%2F150096104&bcsessionid=824af588-e95b-4eef-8404-3a3b49d0b533&bctempid=&overruleReferrer=&time=2023-01-30T01%3A41%3A14%2B00%3A00&ts=1675042874543
200 OK 176 B URL HTTP/2 woodmackenzie.blueconic.net/DG/DEFAULT/rest/rpc/937?referer=https%3A%2F%2Fidentity.woodmac.com%2Fsign-in%3Fgoto%3Dhttps%3A%2F%2Fmy.woodmac.com%2Fdocument%2F150096104&bcsessionid=824af588-e95b-4eef-8404-3a3b49d0b533&bctempid=&overruleReferrer=&time=2023-01-30T01%3A41%3A14%2B00%3A00&ts=1675042874543
IP
File type JSON data\012- , ASCII text, with very long lines (369), with no line terminators
Hash 49a8cdbd3d29036cb3e3c162c0867fd1
51e842829c22ea6843b36ae211e8807c47c71eab
89f1c33b60a2ef71f90fd955d46ee81242e113bdbaa8e87c94cc636dd37d6701
POST /DG/DEFAULT/rest/rpc/937?referer=https%3A%2F%2Fidentity.woodmac.com%2Fsign-in%3Fgoto%3Dhttps%3A%2F%2Fmy.woodmac.com%2Fdocument%2F150096104&bcsessionid=824af588-e95b-4eef-8404-3a3b49d0b533&bctempid=&overruleReferrer=&time=2023-01-30T01%3A41%3A14%2B00%3A00&ts=1675042874543 HTTP/1.1
Host: woodmackenzie.blueconic.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 1114
Origin: https://identity.woodmac.com
Connection: keep-alive
Referer: https://identity.woodmac.com/
Cookie: BCSessionID=824af588-e95b-4eef-8404-3a3b49d0b533; AWSALBCORS=r/FDrDMCPKqEQ7KUQ8mE52O4nkvPI/nlMC1yxMeeSnBvrQssoLT+iAiHtMc+kuLBwMQuaAf4KCmO9n1RWXUW7xRD+Imw9izDuxF2MtuJVvnWEc/bHVrjoxDpc0jQ
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 01:41:04 GMT
content-type: application/json; charset=utf-8
content-length: 176
set-cookie: AWSALB=EeJa1XS/hfr6tII+RA1P6bCJ6/SdGuX/v3cPal/UvthogR4nVaMknPitb35J2C1WLaNAFqyHkKe0TWhJ8gUgMLB4TqjKC4I5xhPz075X5kx3/MmkD4FN0wErmxDG; Expires=Mon, 06 Feb 2023 01:41:04 GMT; Path=/
AWSALBCORS=EeJa1XS/hfr6tII+RA1P6bCJ6/SdGuX/v3cPal/UvthogR4nVaMknPitb35J2C1WLaNAFqyHkKe0TWhJ8gUgMLB4TqjKC4I5xhPz075X5kx3/MmkD4FN0wErmxDG; Expires=Mon, 06 Feb 2023 01:41:04 GMT; Path=/; SameSite=None; Secure
server: -
x-content-type-options: nosniff
x-permitted-cross-domain-policies: master-only
x-robots-tag: noindex, nofollow
x-xss-protection: 1; mode=block
p3p: policyref="", CP="DSP"
access-control-allow-origin: https://identity.woodmac.com
access-control-allow-credentials: true
accept-ch: sec-ch-ua-platform-version
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
cache-control: no-cache, no-store, no-transform, must-revalidate, private
content-encoding: gzip
X-Firefox-Spdy: h2
www.linkedin.com/px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D43996%26time%3D1675042873051%26url%3Dhttps%253A%252F%252Fidentity.woodmac.com%252Fsign-in%253Fgoto%253Dhttps%253A%252F%252Fmy.woodmac.com%252Fdocument%252F150096104%26liSync%3Dtrue
302 Found 0 B URL HTTP/2 www.linkedin.com/px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D43996%26time%3D1675042873051%26url%3Dhttps%253A%252F%252Fidentity.woodmac.com%252Fsign-in%253Fgoto%253Dhttps%253A%252F%252Fmy.woodmac.com%252Fdocument%252F150096104%26liSync%3Dtrue
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D43996%26time%3D1675042873051%26url%3Dhttps%253A%252F%252Fidentity.woodmac.com%252Fsign-in%253Fgoto%253Dhttps%253A%252F%252Fmy.woodmac.com%252Fdocument%252F150096104%26liSync%3Dtrue HTTP/1.1
Host: www.linkedin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://identity.woodmac.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
cache-control: no-cache, no-store
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
location: https://px.ads.linkedin.com/collect?v=2&fmt=js&pid=43996&time=1675042873051&url=https%3A%2F%2Fidentity.woodmac.com%2Fsign-in%3Fgoto%3Dhttps%3A%2F%2Fmy.woodmac.com%2Fdocument%2F150096104&liSync=true
set-cookie: lang=v=2&lang=en-us; Domain=linkedin.com; Path=/; Secure; SameSite=None
bcookie="v=2&d5edb2ce-8a93-4299-8238-55487bcf6fb8"; Domain=.linkedin.com; Expires=Tue, 30-Jan-2024 01:41:05 GMT; Path=/; Secure; SameSite=None
bscookie="v=1&20230130014105b1545e65-6336-4987-8592-cbc06dffa32bAQEEgboHgHSL0V9IRXi3o1xa1xZjaylM"; Domain=.www.linkedin.com; Expires=Tue, 30-Jan-2024 01:41:05 GMT; Path=/; HttpOnly; Secure; SameSite=None
li_gc=MTswOzE2NzUwNDI4NjU7MjswMjETdIp8L1h/7RPtVfxDjdWEPmdB/GczCr2IaDmosturfg==; Domain=.linkedin.com; Expires=Sat, 29 Jul 2023 01:41:05 GMT; Path=/; Secure; SameSite=None
lidc="b=VGST09:s=V:r=V:a=V:p=V:g=2478:u=1:x=1:i=1675042865:t=1675129265:v=2:sig=AQEp3CshIeQuv07BIabYUIySb8f0__uz"; Expires=Tue, 31 Jan 2023 01:41:05 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
content-security-policy: default-src *; connect-src 'self' *.licdn.com *.linkedin.com wss://*.linkedin.com dpm.demdex.net/id lnkd.demdex.net blob: accounts.google.com/gsi/ linkedin.sc.omtrdc.net/b/ss/ *.qualtrics.com *.adyen.com *.microsoft.com; img-src data: blob: *; font-src data: *; style-src 'unsafe-inline' 'self' static-src.linkedin.com *.licdn.com; script-src 'unsafe-inline' 'unsafe-eval' 'self' spdy.linkedin.com static-src.linkedin.com *.ads.linkedin.com *.licdn.com static.chartbeat.com bcvipva02.rightnowtech.com www.bizographics.com sjs.bizographics.com js.bizographics.com d.la4-c1-was.salesforceliveagent.com platform.linkedin.com platform-akam.linkedin.com platform-ecst.linkedin.com platform-azur.linkedin.com; object-src 'none'; media-src blob: *; worker-src blob: 'self'; frame-src blob: lnkd-communities: voyager: *; frame-ancestors 'self' *.linkedin.com teams.microsoft.com client.learningapp.microsoft.com
x-frame-options: sameorigin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
expect-ct: max-age=86400, report-uri="https://www.linkedin.com/platform-telemetry/ct"
x-li-fabric: prod-lva1
x-li-pop: afd-prod-lva1-x
x-li-proto: http/2
x-li-uuid: AAXzcU77U8Kg3bBIkOtVNw==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: C22E12272EDD4EDE9792F9A463533189 Ref B: OSL30EDGE0122 Ref C: 2023-01-30T01:41:05Z
date: Mon, 30 Jan 2023 01:41:05 GMT
content-length: 0
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash eb163527bd2b92eabecc49cb6d8a9d4d
d8a48fbd94250865147db610678385ea139ea012
d2383c2b26af7d185790e6feb03e2e94e84d09bd8d6bd25719dfc43b100654d4
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=160202
Date: Mon, 30 Jan 2023 01:41:05 GMT
Etag: "63d6dbbb-1d7"
Expires: Tue, 31 Jan 2023 22:11:07 GMT
Last-Modified: Sun, 29 Jan 2023 20:48:59 GMT
Server: ECS (nyb/1D2F)
X-Cache: Miss from cloudfront
Via: 1.1 92c4bb210eab82a152000047d3609a02.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: eE9o8yyg-VcqT5bDtwXxliaEpmTHyuqHo49o91WLTPJkeBhEY1PmQw==
Age: 4928
bat.bing.com/actionp/0?ti=17516204&Ver=2&mid=bded905d-9a82-459e-8bf3-efc78219942a&sid=0a7cc030a03f11ed8eaa3f15a0395d4f&vid=0a7cbdc0a03f11ed85b1839f8830eab6&vids=0&msclkid=N&evt=dedup
204 No Content 0 B URL HTTP/2 bat.bing.com/actionp/0?ti=17516204&Ver=2&mid=bded905d-9a82-459e-8bf3-efc78219942a&sid=0a7cc030a03f11ed8eaa3f15a0395d4f&vid=0a7cbdc0a03f11ed85b1839f8830eab6&vids=0&msclkid=N&evt=dedup
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /actionp/0?ti=17516204&Ver=2&mid=bded905d-9a82-459e-8bf3-efc78219942a&sid=0a7cc030a03f11ed8eaa3f15a0395d4f&vid=0a7cbdc0a03f11ed85b1839f8830eab6&vids=0&msclkid=N&evt=dedup HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://identity.woodmac.com
Connection: keep-alive
Referer: https://identity.woodmac.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 204 No Content
cache-control: no-cache, must-revalidate
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
set-cookie: MUID=1C9E3256B41C64AF2D5120FFB54B6596; domain=.bing.com; expires=Sat, 24-Feb-2024 01:41:05 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 4095C16F163445C7BC4F6044E9E59B5B Ref B: OSL30EDGE0412 Ref C: 2023-01-30T01:41:05Z
date: Mon, 30 Jan 2023 01:41:05 GMT
X-Firefox-Spdy: h2
c.salecycle.com/osr/config?msgId=57eab221-a01d-4745-88f8-4d928256b92b
204 No Content 0 B URL HTTP/2 c.salecycle.com/osr/config?msgId=57eab221-a01d-4745-88f8-4d928256b92b
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /osr/config?msgId=57eab221-a01d-4745-88f8-4d928256b92b HTTP/1.1
Host: c.salecycle.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json; q=0.9, text/plain; q=0.5
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain; charset=UTF-8
Content-Length: 443
Origin: https://identity.woodmac.com
Connection: keep-alive
Referer: https://identity.woodmac.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Mon, 30 Jan 2023 01:41:05 GMT
server: nginx
access-control-allow-origin: https://identity.woodmac.com
vary: origin
access-control-expose-headers: api-version, content-length, content-md5, content-type, date, request-id, response-time
X-Firefox-Spdy: h2
px.ads.linkedin.com/collect?v=2&fmt=js&pid=43996&time=1675042873051&url=https%3A%2F%2Fidentity.woodmac.com%2Fsign-in%3Fgoto%3Dhttps%3A%2F%2Fmy.woodmac.com%2Fdocument%2F150096104&liSync=true
200 OK 0 B URL HTTP/2 px.ads.linkedin.com/collect?v=2&fmt=js&pid=43996&time=1675042873051&url=https%3A%2F%2Fidentity.woodmac.com%2Fsign-in%3Fgoto%3Dhttps%3A%2F%2Fmy.woodmac.com%2Fdocument%2F150096104&liSync=true
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /collect?v=2&fmt=js&pid=43996&time=1675042873051&url=https%3A%2F%2Fidentity.woodmac.com%2Fsign-in%3Fgoto%3Dhttps%3A%2F%2Fmy.woodmac.com%2Fdocument%2F150096104&liSync=true HTTP/1.1
Host: px.ads.linkedin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://identity.woodmac.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
set-cookie: lang=v=2&lang=en-us; SameSite=None; Path=/; Domain=ads.linkedin.com; Secure
bcookie="v=2&5e2bb120-8c3f-4a7f-8088-0d6d975e1f09"; domain=.linkedin.com; Path=/; Secure; Expires=Tue, 30-Jan-2024 01:41:05 GMT; SameSite=None
lidc="b=TGST09:s=T:r=T:a=T:p=T:g=2450:u=1:x=1:i=1675042865:t=1675129265:v=2:sig=AQGDZvhuqP4w2_fGMDYH6hx5NAg4A6-j"; Expires=Tue, 31 Jan 2023 01:41:05 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
x-li-fabric: prod-ltx1
report-to: {"group":"network-errors","max_age":2592000,"endpoints":[{"url":"https://www.linkedin.com/li/rep"}],"include_subdomains":true}
nel: {"report_to":"network-errors","max_age":1296000,"success_fraction":0.00066,"failure_fraction":1,"include_subdomains":true}
x-li-pop: afd-prod-ltx1-x
x-li-proto: http/2
x-li-uuid: AAXzcU7+qsDZ23hItcBbUQ==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 11B65F418AD841329D367E431D44A9FB Ref B: OSL30EDGE0122 Ref C: 2023-01-30T01:41:05Z
date: Mon, 30 Jan 2023 01:41:05 GMT
content-length: 0
X-Firefox-Spdy: h2
ssocsp.cybertrust.ne.jp/OcspServer
200 OK 1.5 kB URL HTTP/1.1 ssocsp.cybertrust.ne.jp/OcspServer
IP
Hash 2af6709e9f39e3d8e8144050e7a471cd
9e1a5ef6aeaff029ff3b6b0b20f23c733ca69ae2
9ff11f82180ce2f1052f1a05b5faa56b2f380d200ffb952627e10ebb7da00165
POST /OcspServer HTTP/1.1
Host: ssocsp.cybertrust.ne.jp
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 87
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 30 Jan 2023 01:41:05 GMT
Content-Type: application/ocsp-response
Content-Length: 1477
Connection: keep-alive
Keep-Alive: timeout=2
ssocsp.cybertrust.ne.jp/OcspServer
200 OK 1.5 kB URL HTTP/1.1 ssocsp.cybertrust.ne.jp/OcspServer
IP
Hash 2af6709e9f39e3d8e8144050e7a471cd
9e1a5ef6aeaff029ff3b6b0b20f23c733ca69ae2
9ff11f82180ce2f1052f1a05b5faa56b2f380d200ffb952627e10ebb7da00165
POST /OcspServer HTTP/1.1
Host: ssocsp.cybertrust.ne.jp
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 87
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 30 Jan 2023 01:41:06 GMT
Content-Type: application/ocsp-response
Content-Length: 1477
Connection: keep-alive
Keep-Alive: timeout=2
b97.yahoo.co.jp/pagead/conversion_async.js
403 Forbidden 14 kB URL HTTP/1.1 b97.yahoo.co.jp/pagead/conversion_async.js
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (486)
Hash e986e7a04549f3bef16fe1bb24e61acd
b3ec35460824fae12cf6342ae42d27597ec94fb7
e8b72fe96bc96ffcfef2cdf8ebb503ac854e5c2997ae389b96d04bf78f478edd
GET /pagead/conversion_async.js HTTP/1.1
Host: b97.yahoo.co.jp
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://identity.woodmac.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 403 Forbidden
Date: Mon, 30 Jan 2023 01:41:06 GMT
Connection: close
Server: ATS
X-Z-Chihaya: r=1
X-Frame-Options: SAMEORIGIN
Content-Length: 14275
Content-Type: text/html
c.salecycle.com/osr/config?msgId=3ea58c63-3bdd-40f0-8981-a1f9d6832c54
204 No Content 0 B URL HTTP/2 c.salecycle.com/osr/config?msgId=3ea58c63-3bdd-40f0-8981-a1f9d6832c54
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /osr/config?msgId=3ea58c63-3bdd-40f0-8981-a1f9d6832c54 HTTP/1.1
Host: c.salecycle.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json; q=0.9, text/plain; q=0.5
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain; charset=UTF-8
Content-Length: 443
Origin: https://identity.woodmac.com
Connection: keep-alive
Referer: https://identity.woodmac.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Mon, 30 Jan 2023 01:41:06 GMT
server: nginx
access-control-allow-origin: https://identity.woodmac.com
vary: origin
access-control-expose-headers: api-version, content-length, content-md5, content-type, date, request-id, response-time
X-Firefox-Spdy: h2
c.salecycle.com/osr/config?msgId=ec8a8592-c0c2-4265-a2cf-a4e2db1b962a
204 No Content 0 B URL HTTP/2 c.salecycle.com/osr/config?msgId=ec8a8592-c0c2-4265-a2cf-a4e2db1b962a
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /osr/config?msgId=ec8a8592-c0c2-4265-a2cf-a4e2db1b962a HTTP/1.1
Host: c.salecycle.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json; q=0.9, text/plain; q=0.5
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain; charset=UTF-8
Content-Length: 443
Origin: https://identity.woodmac.com
Connection: keep-alive
Referer: https://identity.woodmac.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Mon, 30 Jan 2023 01:41:08 GMT
server: nginx
access-control-allow-origin: https://identity.woodmac.com
vary: origin
access-control-expose-headers: api-version, content-length, content-md5, content-type, date, request-id, response-time
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 160bd5263b47a73f898b7e0d214c0141
e3640b5e71f48420542492fc0876f84fb829577b
b0edd5b0a87672c61177efda278f6448507cc29d1624198695ec599fb1de1715
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5148
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 01:41:08 GMT
Last-Modified: Mon, 30 Jan 2023 00:15:20 GMT
Server: ECS (ska/F715)
X-Cache: HIT
Content-Length: 471
region1.analytics.google.com/g/collect?v=2&tid=G-S6XFT1XT8V>m=2oe1p0&_p=305391098&cid=1378521543.1675042813&ul=en-us&sr=1280x1024&uaW=1&_s=1&sid=1675042813&sct=1&seg=1&dl=https%3A%2F%2Fidentity.woodmac.com%2Fsign-in%3Fgoto%3Dhttps%3A%2F%2Fmy.woodmac.com%2Fdocument%2F150096104&dt=Wood%20Mackenzie%20%7C%20Sign%20in&en=page_view&ep.full_referrer=&ep.path_clean=%2Fsign-in
204 No Content 0 B URL HTTP/2 region1.analytics.google.com/g/collect?v=2&tid=G-S6XFT1XT8V>m=2oe1p0&_p=305391098&cid=1378521543.1675042813&ul=en-us&sr=1280x1024&uaW=1&_s=1&sid=1675042813&sct=1&seg=1&dl=https%3A%2F%2Fidentity.woodmac.com%2Fsign-in%3Fgoto%3Dhttps%3A%2F%2Fmy.woodmac.com%2Fdocument%2F150096104&dt=Wood%20Mackenzie%20%7C%20Sign%20in&en=page_view&ep.full_referrer=&ep.path_clean=%2Fsign-in
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-S6XFT1XT8V>m=2oe1p0&_p=305391098&cid=1378521543.1675042813&ul=en-us&sr=1280x1024&uaW=1&_s=1&sid=1675042813&sct=1&seg=1&dl=https%3A%2F%2Fidentity.woodmac.com%2Fsign-in%3Fgoto%3Dhttps%3A%2F%2Fmy.woodmac.com%2Fdocument%2F150096104&dt=Wood%20Mackenzie%20%7C%20Sign%20in&en=page_view&ep.full_referrer=&ep.path_clean=%2Fsign-in HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://identity.woodmac.com
Connection: keep-alive
Referer: https://identity.woodmac.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://identity.woodmac.com
date: Mon, 30 Jan 2023 01:41:08 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
pi.pardot.com/pd.js
200 OK 1.9 kB IP
File type ASCII text, with very long lines (5297)
Hash c9f60ff021727eaffcf6d7bcce44cbc7
a62104686e86bf51494fa530bfaec55500e60a37
bd11307ac746bd34bac63885be9e4600e72c7711b370414b206533ebd076ce1b
GET /pd.js HTTP/1.1
Host: pi.pardot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://identity.woodmac.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Mon, 30 Jan 2023 01:41:08 GMT
Content-Type: application/javascript
Content-Length: 1946
Connection: keep-alive
last-modified: Fri, 27 Jan 2023 18:07:54 GMT
etag: "1547-gzip"
accept-ranges: bytes
cache-control: max-age=63072000
expires: Wed, 29 Jan 2025 01:41:08 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
Server: PardotServer
X-Pardot-Route: 16b0ab393667a33fe86adedc3141e88c
pi.pardot.com/analytics?ver=3&visitor_id=&visitor_id_sign=&pi_opt_in=&campaign_id=1387&account_id=132501&title=Wood%20Mackenzie%20%7C%20Sign%20in&url=https%3A%2F%2Fidentity.woodmac.com%2Fsign-in%3Fgoto%3Dhttps%3A%2F%2Fmy.woodmac.com%2Fdocument%2F150096104&referrer=
200 OK 1.4 kB URL HTTP/1.1 pi.pardot.com/analytics?ver=3&visitor_id=&visitor_id_sign=&pi_opt_in=&campaign_id=1387&account_id=132501&title=Wood%20Mackenzie%20%7C%20Sign%20in&url=https%3A%2F%2Fidentity.woodmac.com%2Fsign-in%3Fgoto%3Dhttps%3A%2F%2Fmy.woodmac.com%2Fdocument%2F150096104&referrer=
IP
File type ASCII text, with very long lines (2283)
Hash 34eaef524ff3cef2d2283406973b1b52
68de8d73a18a10debde5a010cb89ff808d285211
ea8db72cb3690d5eae4779c1f598c1f021b0dbcd08a97d1a01c1c544417bc845
GET /analytics?ver=3&visitor_id=&visitor_id_sign=&pi_opt_in=&campaign_id=1387&account_id=132501&title=Wood%20Mackenzie%20%7C%20Sign%20in&url=https%3A%2F%2Fidentity.woodmac.com%2Fsign-in%3Fgoto%3Dhttps%3A%2F%2Fmy.woodmac.com%2Fdocument%2F150096104&referrer= HTTP/1.1
Host: pi.pardot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://identity.woodmac.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Mon, 30 Jan 2023 01:41:09 GMT
Content-Type: text/javascript; charset=utf-8
Content-Length: 1445
Connection: keep-alive
x-pardot-canary: true
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
x-pardot-rsp: 0/0/1
strict-transport-security: max-age=31536000; includeSubDomains
p3p: CP="NOI DSP COR CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT", policyref="/w3c/p3p.xml", CP="NOI DSP COR CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT", policyref="/w3c/p3p.xml"
set-cookie: pardot=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0
visitor_id131501=359898151; expires=Thu, 27-Jan-2033 01:41:08 GMT; Max-Age=315359999; path=/; domain=.pardot.com; secure; SameSite=None
visitor_id131501-hash=198cfb9d6c6b636ca34219d53761379ea29e307a3c7a69cf3ba50a6c45862befd7cd2710c9c6e6e53e47303fd0edbc4b9d1f0234; expires=Thu, 27-Jan-2033 01:41:08 GMT; Max-Age=315359999; path=/; domain=.pardot.com; secure; SameSite=None
lpv131501=aHR0cHM6Ly9pZGVudGl0eS53b29kbWFjLmNvbS9zaWduLWluP2dvdG89aHR0cHM6Ly9teS53b29kbWFjLmNvbS9kb2N1bWVudC8xNTAwOTYxMDQ%3D; expires=Mon, 30-Jan-2023 02:11:09 GMT; Max-Age=1800; path=/; secure; SameSite=None
vary: Accept-Encoding,User-Agent
content-encoding: gzip
Server: PardotServer
X-Pardot-Route: 9b06e8e2308c32c7bf9ba8adfb7be2e1
identity.woodmac.com/content/img/icons/apple-touch-icon.png
404 Not Found 0 B URL HTTP/2 identity.woodmac.com/content/img/icons/apple-touch-icon.png
IP
GET /content/img/icons/apple-touch-icon.png HTTP/1.1
Host: identity.woodmac.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://identity.woodmac.com/sign-in?goto=https://my.woodmac.com/document/150096104
Cookie: _gcl_au=1.1.484173616.1675042813; _ga_S6XFT1XT8V=GS1.1.1675042813.1.1.1675042871.2.0.0; _ga=GA1.1.1378521543.1675042813; _gid=GA1.2.630455836.1675042814; _gat_UA-377468-13=1; _ga=GA1.3.1378521543.1675042813; _gid=GA1.3.630455836.1675042814; _uetsid=0a7cc030a03f11ed8eaa3f15a0395d4f; _uetvid=0a7cbdc0a03f11ed85b1839f8830eab6; BCSessionID=824af588-e95b-4eef-8404-3a3b49d0b533; ln_or=eyI0Mzk5NiI6ImQifQ%3D%3D; _fbp=fb.1.1675042814644.1312594071; JSESSIONID=A0FA37B38EFACBA9057B599BBB72A038; nlbi_1949747=3Gl7KQ996nG42bnx+B1QdgAAAACKxaewDWrruCdOLHj3fZ/0; incap_ses_277_1949747=M060SnVN+DRdpfUBjRrYAysg12MAAAAAxsU2xjfTIaOZ8NPyqaARVA==
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
date: Mon, 30 Jan 2023 01:41:02 GMT
content-type: text/html;charset=UTF-8
server: Apache
x-wm-id: Y9cgLq7Hqc0mdXCk0O5avQAAAAk
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: 0
strict-transport-security: max-age=31536000 ; includeSubDomains
x-frame-options: DENY
content-language: en-US
set-cookie: JSESSIONID=894D1F9950102D7C732014CCF453B6DA; Path=/; Secure; HttpOnly
x-cdn: Imperva
content-encoding: gzip
x-iinfo: 14-8868350-8828558 2NYN RT(1675042859247 2660) q(0 0 0 -1) r(1 1) U11
X-Firefox-Spdy: h2
s.salecycle.com/iframe_receiver/bundle.js
200 OK 0 B URL HTTP/2 s.salecycle.com/iframe_receiver/bundle.js
IP
GET /iframe_receiver/bundle.js HTTP/1.1
Host: s.salecycle.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://s.salecycle.com/receiver.html?sc_frame_id=7c8d0b42-3625-4fed-b201-474f542b31f7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
last-modified: Wed, 04 Oct 2017 08:59:52 GMT
server: AmazonS3
content-encoding: gzip
date: Mon, 30 Jan 2023 01:35:26 GMT
cache-control: max-age=3600
etag: W/"be8a0b97622c8ba3452b0759eeaac54a"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 3hMUN0L3Bku0nbZo64dY-xOUmdDih0DdLc1B8h1Q-o3ShwiQLXR5tA==
age: 340
X-Firefox-Spdy: h2
identity.woodmac.com/sign-in?goto=https://my.woodmac.com/document/150096104
200 OK 0 B URL HTTP/2 identity.woodmac.com/sign-in?goto=https://my.woodmac.com/document/150096104
IP
GET /sign-in?goto=https://my.woodmac.com/document/150096104 HTTP/1.1
Host: identity.woodmac.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Cookie: _gcl_au=1.1.484173616.1675042813; _ga_S6XFT1XT8V=GS1.1.1675042813.1.0.1675042820.53.0.0; _ga=GA1.2.1378521543.1675042813; _gid=GA1.2.630455836.1675042814; _gat_UA-377468-13=1; _ga=GA1.3.1378521543.1675042813; _gid=GA1.3.630455836.1675042814; _uetsid=0a7cc030a03f11ed8eaa3f15a0395d4f; _uetvid=0a7cbdc0a03f11ed85b1839f8830eab6; BCSessionID=824af588-e95b-4eef-8404-3a3b49d0b533; ln_or=eyI0Mzk5NiI6ImQifQ%3D%3D; _fbp=fb.1.1675042814644.1312594071
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Mon, 30 Jan 2023 01:41:00 GMT
content-type: text/html;charset=UTF-8
server: Apache
x-wm-id: Y9cgLPRllp-X3407ZtR5vgAAABU
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: 0
strict-transport-security: max-age=31536000 ; includeSubDomains
x-frame-options: DENY
content-language: en-US
set-cookie: JSESSIONID=A0FA37B38EFACBA9057B599BBB72A038; Path=/; Secure; HttpOnly
HTTP_NONSUBSCRIBER=""; Expires=Thu, 01 Jan 1970 00:00:10 GMT; Path=/; domain=woodmac.com
iPlanetDirectoryPro=""; Expires=Thu, 01 Jan 1970 00:00:10 GMT; Path=/; domain=woodmac.com
DProPCookie=""; Expires=Thu, 01 Jan 1970 00:00:10 GMT; Path=/; domain=woodmac.com
ssorememberme=""; Expires=Thu, 01 Jan 1970 00:00:10 GMT; Path=/; domain=woodmac.com
P2_AUTH_TOKEN=""; Expires=Thu, 01 Jan 1970 00:00:10 GMT; Path=/; domain=woodmac.com
nlbi_1949747=3Gl7KQ996nG42bnx+B1QdgAAAACKxaewDWrruCdOLHj3fZ/0; path=/; Domain=.woodmac.com
incap_ses_277_1949747=M060SnVN+DRdpfUBjRrYAysg12MAAAAAxsU2xjfTIaOZ8NPyqaARVA==; path=/; Domain=.woodmac.com
x-cdn: Imperva
content-encoding: gzip
x-iinfo: 14-8868350-8868154 PNYy RT(1675042859247 105) q(0 0 0 1) r(1 1) U5
X-Firefox-Spdy: h2
global.oktacdn.com/okta-signin-widget/5.0.2/js/okta-sign-in.min.js
200 OK 0 B URL HTTP/2 global.oktacdn.com/okta-signin-widget/5.0.2/js/okta-sign-in.min.js
IP
GET /okta-signin-widget/5.0.2/js/okta-sign-in.min.js HTTP/1.1
Host: global.oktacdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://identity.woodmac.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/x-javascript
x-amz-replication-status: COMPLETED
last-modified: Fri, 20 Nov 2020 01:04:29 GMT
x-amz-version-id: I9AzzuNcQqkFt1NSosepB1lJyw6QaAqV
server: AmazonS3
strict-transport-security: max-age=315360000
access-control-allow-origin: *
x-content-type-options: nosniff
content-encoding: gzip
date: Mon, 30 Jan 2023 01:39:40 GMT
cache-control: public,max-age=31536000,s-maxage=1814400
etag: W/"fc58be568734d692764a26b4935c0855"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: pfldQ5oFFAC4PB2aZpHND1bnHct59wMIiy9PKJKx3nUUe5LQD6iBPA==
age: 11367
X-Firefox-Spdy: h2
obsprojek.com/LibreOffice_7.4.4_Win_x64.exe
200 OK 0 B URL HTTP/2 obsprojek.com/LibreOffice_7.4.4_Win_x64.exe
IP
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /LibreOffice_7.4.4_Win_x64.exe HTTP/1.1
Host: obsprojek.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 30 Jan 2023 01:41:01 GMT
content-type: application/octet-stream
content-length: 340019315
last-modified: Sun, 15 Jan 2023 15:09:25 GMT
etag: "63c41725-14444873"
expires: Thu, 23 Feb 2023 17:39:04 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 460917
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2Bt1IX0R5TswPhF%2B%2F5%2F3WBvoYwFUWTyIIc1yroLRnx9SGZFwgxadsBJDymMFKKVP9Sd8CacBlJPg6UnJMh6AGrAqme4y8IC%2BikqOkN8NrmHLzB9Ff9jnA1OCgIhtRUfNZ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 791680bd9b2fb529-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
45.60.33.15
51.140.49.131
151.101.244.157
34.247.4.112
183.79.248.124
188.114.96.1
23.36.76.226
0.0.0.0