Overview

URL singlesignon.secured-login.net/
IP34.197.66.98
ASN
Location United States
Report completed2018-03-18 08:19:20 CET
StatusLoading report..
urlQuery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Level


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blacklists

MDL  No alerts detected
OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter
Added / Verified Severity Host Comment
2018-03-18 2 singlesignon.secured-login.net/ Phishing
2018-03-18 2 singlesignon.secured-login.net/login Phishing
2018-03-18 2 singlesignon.secured-login.net/assets/modernizr-654222debe8018b12f1993ceddf (...) Phishing
2018-03-18 2 singlesignon.secured-login.net/assets/application-1038ec4180cfacc81f87b7231 (...) Phishing
2018-03-18 2 singlesignon.secured-login.net/assets/favicon-af6643024af4ecfc57b7e5358608e (...) Phishing
2018-03-18 2 singlesignon.secured-login.net/dashboard/index Phishing
DNS-BH  No alerts detected
mnemonic secure dns  No alerts detected


Recent reports on same IP/ASN/Domain

Last 10 reports on IP: 34.197.66.98

Date UQ / IDS / BL URL IP
2018-06-16 01:54:27 +0200
0 - 0 - 21 singlesignon.secured-login.net/ 34.197.66.98
2018-06-15 17:57:29 +0200
0 - 0 - 1 strongencryption.org/ 34.197.66.98
2018-06-15 16:55:35 +0200
0 - 0 - 1 login.strongencryption.org/ 34.197.66.98
2018-06-15 09:54:15 +0200
0 - 0 - 2 messaging-security.comano.us/ 34.197.66.98
2018-06-14 19:55:22 +0200
0 - 0 - 1 login.strongencryption.org/ 34.197.66.98
2018-06-13 16:12:21 +0200
0 - 1 - 0 https://pages.knowbe4training.com/pages/c3955 (...) 34.197.66.98
2018-06-11 19:26:16 +0200
0 - 0 - 2 messaging-security.comano.us/ 34.197.66.98
2018-06-11 19:07:57 +0200
0 - 0 - 7 safe-site.protected-forms.com/ 34.197.66.98
2018-06-11 19:07:57 +0200
0 - 0 - 7 salesfarce.secured-login.net/ 34.197.66.98
2018-06-11 18:57:15 +0200
0 - 0 - 2 webmail.strongencryption.org/ 34.197.66.98

Last 10 reports on ASN:

Date UQ / IDS / BL URL IP
2018-10-21 12:13:18 +0200
0 - 0 - 0 https://www.imdb.com/list/ls040488626/ 52.94.225.248
2018-10-21 12:10:45 +0200
0 - 0 - 0 https://www.sportsblog.com/titans-vs-chargers (...) 35.186.246.227
2018-10-21 12:09:17 +0200
0 - 0 - 0 https://gmrashel01.hatenablog.com/entry/2018/ (...) 13.230.115.161
2018-10-21 12:00:42 +0200
0 - 0 - 0 https://gmrashel01.hatenablog.com/entry/2018/ (...) 13.115.18.61
2018-10-21 11:58:01 +0200
0 - 1 - 0 pccheck.win/ 198.54.117.200
2018-10-21 11:57:04 +0200
0 - 0 - 0 https://gmrashel01.hatenablog.com/entry/2018/ (...) 13.230.115.161
2018-10-21 11:54:37 +0200
0 - 1 - 0 cplhqireyp.bid/c1 198.54.117.200
2018-10-21 11:54:28 +0200
0 - 1 - 0 rdtqouzoxvkwx.bid/c1 198.54.117.200
2018-10-21 11:54:24 +0200
0 - 1 - 0 ovbqoqmmxxwipg.bid/c1 198.54.117.200
2018-10-21 11:54:18 +0200
0 - 1 - 0 iiodogqlmuopmh.bid/c1 198.54.117.200

No other reports on domain: secured-login.net



JavaScript

Executed Scripts (26)


Executed Evals (1)

#1 JavaScript::Eval (size: 221, repeated: 1) - SHA256: 9dd6f825a51788418ca27e58b80fcef0a65dd5aceadf7c1b8fbf6016e0aa2831

                                        (function() {
    var a = google_tag_manager["GTM-N7W93L8"].macro('gtm1').length ? "\x26" + google_tag_manager["GTM-N7W93L8"].macro('gtm2') : "";
    a = a.length ? "?" + a.replace(/&[^&@]+@[^&]+/g, "").substring(1) : "";
    return 1 >= a.length ? "" : a
})();
                                    

Executed Writes (2)

#1 JavaScript::Write (size: 1615, repeated: 1) - SHA256: d3d8faac029c03b75395a608358e75e5c4b39c2a5943636c0dcd11db4eafc283

                                        < !doctype html > < html > < body > < iframe style = "display:none"
data - ad - client = "ca-pub-2333199711088866"
id = "google_esf"
name = "google_esf"
src = "https://googleads.g.doubleclick.net/pagead/html/r20180312/r20170110/zrt_lookup.html#" > < /iframe><script>google_reactive_ads_config={};google_ad_client="ca-pub-2333199711088866";google_ad_modifications={"plle":true,"eids":["368226201","38893302","21061122","191880502"],"loeids":["368226211","38893312"]};google_loader_used="aa";google_reactive_tag_first=true;google_ad_format="0x0";google_ad_unit_key="3123021140";google_ad_dom_fingerprint="807048394";google_sailm=false;google_unique_id=0;google_async_iframe_id="aswift_0";google_start_time=1521357931037;google_pub_vars="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";google_bpp=22;google_async_rrc=0;google_iframe_start_time=new Date().getTime();</script > < script src = "http://pagead2.googlesyndication.com/pagead/js/r20180312/r20170110/show_ads_impl.js" > < /script></body > < /html>
                                    

#2 JavaScript::Write (size: 1379, repeated: 1) - SHA256: a6b660a55e46f99e01aae37133d4258c15efdf771ef8d247675b18850ffe2bd9

                                        < iframe id = "google_ads_frame0"
name = "google_ads_frame0"
frameborder = "0"
src = "https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-2333199711088866&amp;output=html&amp;adk=3123021140&amp;adf=807048394&amp;lmt=1521357915&amp;loeid=368226211%2C38893312&amp;plat=1%3A1081352%2C2%3A1082376%2C8%3A32776%2C9%3A32776%2C16%3A8388608%2C26%3A32768&amp;format=0x0&amp;url=http%3A%2F%2Fsinglesignon.secured-login.net%2Flogin&amp;ea=0&amp;flash=10.0.45&amp;pra=5&amp;wgl=0&amp;adsid=NT&amp;dt=1521357931037&amp;bpp=22&amp;fdt=30&amp;idt=197&amp;shv=r20180312&amp;cbv=r20170110&amp;saldr=aa&amp;correlator=3969860449930&amp;frm=20&amp;ga_vid=388872527.1521357921&amp;ga_sid=1521357931&amp;ga_hid=1013464081&amp;ga_fc=0&amp;pv=2&amp;icsg=0&amp;nhd=1&amp;dssz=0&amp;mdo=0&amp;mso=0&amp;u_tz=60&amp;u_his=1&amp;u_java=1&amp;u_h=885&amp;u_w=1176&amp;u_ah=855&amp;u_aw=1176&amp;u_cd=24&amp;u_nplug=10&amp;u_nmime=92&amp;adx=0&amp;ady=0&amp;biw=1176&amp;bih=754&amp;abxe=1&amp;scr_x=0&amp;scr_y=0&amp;eid=368226201%2C38893302%2C21061122%2C191880502%2C33895413%2C20040069&amp;oid=3&amp;rx=0&amp;eae=6&amp;fc=784&amp;brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&amp;vis=0&amp;rsz=%7C%7Cr%7C&amp;abl=CS&amp;ppjl=f&amp;fu=16&amp;bc=1&amp;ifi=0&amp;dtd=220"
marginwidth = "0"
marginheight = "0"
vspace = "0"
hspace = "0"
allowtransparency = "true"
scrolling = "no"
allowfullscreen = "true" > < /iframe>
                                    


HTTP Transactions (122)


Request Response
                                        
                                            GET / HTTP/1.1 
Host: singlesignon.secured-login.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         52.4.77.110
HTTP/1.1 302 Found
Content-Type: text/html; charset=utf-8
                                        
Date: Sun, 18 Mar 2018 07:25:14 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx/1.4.6 (Ubuntu)
Status: 302 Found
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Location: http://singlesignon.secured-login.net/dashboard/index
Cache-Control: no-cache
X-Request-Id: b39efe1d-230b-4c00-9156-ded92219d14f
X-Runtime: 0.002513


--- Additional Info ---
Magic:  HTML document text
Size:   119
Md5:    3a9ca3e5124cca76f34703cc045e8c49
Sha1:   a66b5734bb38eb0b3b11bd815b9343586c41287a
Sha256: 574f76ff130f48cf53cbfb7d10bb0ecdef1336939ed42c4ff3f49d1ff3b43b5b

Alerts:
  Blacklists:
    - fortinet: Phishing
                                        
                                            GET /login HTTP/1.1 
Host: singlesignon.secured-login.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: _knowbe4_session=Ly9NZHJETkNGTHEvdXJkbXQ2ZUc5QndTT09iaDVjbDNOYStwTHVNRXZOaW1mZThqdHlBTGtYOFJPdkxJTUFWODF0dWtBcHJFZGJWRkpmeTgrZTNHYXVTT0R4UWZtdVh2cnl0UDk1S1VTaGluMFBHSTJtclVINkVhSmhkM1V4LzV6ZTJGaUJZT28xcHlNRE9FNzBPMFlRcFBZQUNUbDFhTDFidFJoMnM4ekVKRHp5aWxRdmNiU2txMGt3OHJKeXdQOGZPOGdmeVdaS2dpdU9yajdLS2JJWTJqK01IM3hGbkplbGVSRUhUR3NQSFFaU25lUnJCN3Bsc0tYS3NhdTFxOC0tdDlMcnEvWkpHYWVCWk0relcwU3FkQT09--262bac263eacc45dd2734ef1a04bff4c1e7092d3

                                         
                                         52.4.77.110
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Date: Sun, 18 Mar 2018 07:25:15 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx/1.4.6 (Ubuntu)
Vary: Accept-Encoding
Status: 200 OK
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Cache-Control: max-age=0, private, must-revalidate
Set-Cookie: _knowbe4_session=STJCcVIzT2luWDVqU1FqamZ2SFFpc0xFZlpWVlR2Zi96RTdMQmRpWS9RNWV2RDFMWjZFWHRpWXFKeHJMUmN1NHZNSTJwSXllbjVNTFFhcmxidk1oTWVwOGZ0a2RyRC9ta2Y5U3JZSXVLZlJBNzF3REtVOExNWGxDYTh3eUhyNUg3UW5oNGEzRXNZTllMSHk1SHNwMlowK0NGWk5OdFl2N3lDU0lDK1dOUHlxWUo4dWswRk55TXFUWWdVYjUrQlYrbW1VZ2FuZWxZNFY1d1VDenNvVlM1SVVQL2RvY0ZSdmF5RVNHampBa3FHS3JTOWhkQXEzdGFoREZOSzN0bFB3RWJ0c09RV0cwb2wwWWtWaUx6OExkOUJZMU1XMG80UUh3bXYrazN5NWQrclJMOS9qeXpBTUJ6bU5VK2xOQzlFcmpkWU5OTXV5QWdDdWJHWkpwWTVmeHpBPT0tLVZVTGJmUnp5Nkx1U2RwUW4zYzVHQUE9PQ%3D%3D--94bb08136f2a680b4e0852f85b9c3d02065a0848; path=/; HttpOnly
X-Request-Id: ae383135-327b-477d-ba02-f555608fefd0
X-Runtime: 0.005382
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   2475
Md5:    d864b534ddd6020375dd225e8624d859
Sha1:   1bf21ed6f2e25fa50091bbc5ef5e75dc31bd9c83
Sha256: e5ef261857ffe09fd4ca7b9838627229a04ee9a55a449bb5c5f05c933e1c785f

Alerts:
  Blacklists:
    - fortinet: Phishing
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         216.58.211.14
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 18 Mar 2018 07:25:15 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    6aef97825f83213b29cf25c526ceaefc
Sha1:   2f82ae7992011247484c837302f91b0d44dbdd83
Sha256: bf8f1f08d4b53cd61ac28a5505650add84908cd97d8e26d9092968d30678c960
                                        
                                            POST /gsr2 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 112
Content-Type: application/ocsp-request

                                         
                                         216.58.211.14
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 18 Mar 2018 07:25:15 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 468
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   468
Md5:    6bf50ec404fb4a8b4a94be8390d11938
Sha1:   0caaab7704d6221abc5e0342909a4928cee50b1c
Sha256: 63b592179b1e9a528344ce1d430b9479fc55f43420a468ec35aaeaa9dff911cf
                                        
                                            GET /css?family=Roboto+Condensed:300,400,700|Roboto:300,400,700 HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://singlesignon.secured-login.net/login

                                         
                                         172.217.20.42
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
                                        
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Expires: Sun, 18 Mar 2018 07:25:15 GMT
Date: Sun, 18 Mar 2018 07:25:15 GMT
Cache-Control: private, max-age=86400
Content-Encoding: gzip
Server: ESF
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303335,quic=":443"; ma=2592000; v="41,39,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   351
Md5:    c7bb9490625cc154a1d40386e0f4b77f
Sha1:   01bacfe57fe9b17d81534048a593a42a3f898136
Sha256: 2ed36a40d1bd44553ebcfd0324ea19e274f8546be63beac591e5a7d2af3c39a5
                                        
                                            GET /assets/modernizr-654222debe8018b12f1993ceddff30dc163a7d5008d79869c399d6d167321f97.js HTTP/1.1 
Host: singlesignon.secured-login.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://singlesignon.secured-login.net/login
Cookie: _knowbe4_session=STJCcVIzT2luWDVqU1FqamZ2SFFpc0xFZlpWVlR2Zi96RTdMQmRpWS9RNWV2RDFMWjZFWHRpWXFKeHJMUmN1NHZNSTJwSXllbjVNTFFhcmxidk1oTWVwOGZ0a2RyRC9ta2Y5U3JZSXVLZlJBNzF3REtVOExNWGxDYTh3eUhyNUg3UW5oNGEzRXNZTllMSHk1SHNwMlowK0NGWk5OdFl2N3lDU0lDK1dOUHlxWUo4dWswRk55TXFUWWdVYjUrQlYrbW1VZ2FuZWxZNFY1d1VDenNvVlM1SVVQL2RvY0ZSdmF5RVNHampBa3FHS3JTOWhkQXEzdGFoREZOSzN0bFB3RWJ0c09RV0cwb2wwWWtWaUx6OExkOUJZMU1XMG80UUh3bXYrazN5NWQrclJMOS9qeXpBTUJ6bU5VK2xOQzlFcmpkWU5OTXV5QWdDdWJHWkpwWTVmeHpBPT0tLVZVTGJmUnp5Nkx1U2RwUW4zYzVHQUE9PQ%3D%3D--94bb08136f2a680b4e0852f85b9c3d02065a0848

                                         
                                         52.4.77.110
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Date: Sun, 18 Mar 2018 07:25:15 GMT
Content-Length: 15721
Connection: keep-alive
Server: nginx/1.4.6 (Ubuntu)
Last-Modified: Thu, 15 Mar 2018 21:09:46 GMT
Vary: Accept-Encoding
Etag: "5aaae11a-3d69"
Content-Encoding: gzip
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000, public


--- Additional Info ---
Magic:  gzip compressed data, from Unix, last modified: Thu Nov 09 20:28:13 2017, max compression
Size:   15721
Md5:    8a163b6beaa5998b991a8f02d94146fd
Sha1:   236def284000e8dd9bbf3d214252ba1097fd3c7d
Sha256: 630b66afa88059370eb42955252da571013a057011bd9a6353fc64a29ca1d354

Alerts:
  Blacklists:
    - fortinet: Phishing
                                        
                                            GET /assets/application-8d94872e891768230900d1ed98e2200a0c469a6f5935b31e55f52140823aab02.css HTTP/1.1 
Host: singlesignon.secured-login.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://singlesignon.secured-login.net/login
Cookie: _knowbe4_session=STJCcVIzT2luWDVqU1FqamZ2SFFpc0xFZlpWVlR2Zi96RTdMQmRpWS9RNWV2RDFMWjZFWHRpWXFKeHJMUmN1NHZNSTJwSXllbjVNTFFhcmxidk1oTWVwOGZ0a2RyRC9ta2Y5U3JZSXVLZlJBNzF3REtVOExNWGxDYTh3eUhyNUg3UW5oNGEzRXNZTllMSHk1SHNwMlowK0NGWk5OdFl2N3lDU0lDK1dOUHlxWUo4dWswRk55TXFUWWdVYjUrQlYrbW1VZ2FuZWxZNFY1d1VDenNvVlM1SVVQL2RvY0ZSdmF5RVNHampBa3FHS3JTOWhkQXEzdGFoREZOSzN0bFB3RWJ0c09RV0cwb2wwWWtWaUx6OExkOUJZMU1XMG80UUh3bXYrazN5NWQrclJMOS9qeXpBTUJ6bU5VK2xOQzlFcmpkWU5OTXV5QWdDdWJHWkpwWTVmeHpBPT0tLVZVTGJmUnp5Nkx1U2RwUW4zYzVHQUE9PQ%3D%3D--94bb08136f2a680b4e0852f85b9c3d02065a0848

                                         
                                         52.4.77.110
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Sun, 18 Mar 2018 07:25:15 GMT
Content-Length: 113731
Connection: keep-alive
Server: nginx/1.4.6 (Ubuntu)
Last-Modified: Thu, 15 Mar 2018 21:09:18 GMT
Vary: Accept-Encoding
Etag: "5aaae0fe-1bc43"
Content-Encoding: gzip
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000, public


--- Additional Info ---
Magic:  gzip compressed data, from Unix, last modified: Thu Mar 15 22:09:18 2018, max compression
Size:   113731
Md5:    5c0ffb54979c35d62a5e32aaf0149ea1
Sha1:   68c229bba35fa77cd46285932458373dce62a4b3
Sha256: 36532ba1fea129099579bd64db74da0daa13b09175e383076648dc375d904bbb
                                        
                                            GET /assets/application-1038ec4180cfacc81f87b7231d99ef9771e78050f16949e01bc1ac2ad9b37a98.js HTTP/1.1 
Host: singlesignon.secured-login.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://singlesignon.secured-login.net/login
Cookie: _knowbe4_session=STJCcVIzT2luWDVqU1FqamZ2SFFpc0xFZlpWVlR2Zi96RTdMQmRpWS9RNWV2RDFMWjZFWHRpWXFKeHJMUmN1NHZNSTJwSXllbjVNTFFhcmxidk1oTWVwOGZ0a2RyRC9ta2Y5U3JZSXVLZlJBNzF3REtVOExNWGxDYTh3eUhyNUg3UW5oNGEzRXNZTllMSHk1SHNwMlowK0NGWk5OdFl2N3lDU0lDK1dOUHlxWUo4dWswRk55TXFUWWdVYjUrQlYrbW1VZ2FuZWxZNFY1d1VDenNvVlM1SVVQL2RvY0ZSdmF5RVNHampBa3FHS3JTOWhkQXEzdGFoREZOSzN0bFB3RWJ0c09RV0cwb2wwWWtWaUx6OExkOUJZMU1XMG80UUh3bXYrazN5NWQrclJMOS9qeXpBTUJ6bU5VK2xOQzlFcmpkWU5OTXV5QWdDdWJHWkpwWTVmeHpBPT0tLVZVTGJmUnp5Nkx1U2RwUW4zYzVHQUE9PQ%3D%3D--94bb08136f2a680b4e0852f85b9c3d02065a0848

                                         
                                         52.4.77.110
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Date: Sun, 18 Mar 2018 07:25:15 GMT
Content-Length: 877333
Connection: keep-alive
Server: nginx/1.4.6 (Ubuntu)
Last-Modified: Thu, 15 Mar 2018 21:09:47 GMT
Vary: Accept-Encoding
Etag: "5aaae11b-d6315"
Content-Encoding: gzip
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000, public


--- Additional Info ---
Magic:  gzip compressed data, from Unix, last modified: Thu Jan 18 16:47:32 2018, max compression
Size:   877333
Md5:    7bfceac4936c7b067b02d98a280fd8ab
Sha1:   bf21fb21a42576e2b58a4ba218c7362c7d2a6bb6
Sha256: ef54d104a55119d6573070641c0b26cb80f142658d334aa8cb580e02ff920952

Alerts:
  Blacklists:
    - fortinet: Phishing
                                        
                                            GET /assets/logo-c8a438bd8312463bbd56ad52a0010a57a0a67a15e31d15c44228e1bfa8e525a5.png HTTP/1.1 
Host: singlesignon.secured-login.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://singlesignon.secured-login.net/assets/application-8d94872e891768230900d1ed98e2200a0c469a6f5935b31e55f52140823aab02.css
Cookie: _knowbe4_session=STJCcVIzT2luWDVqU1FqamZ2SFFpc0xFZlpWVlR2Zi96RTdMQmRpWS9RNWV2RDFMWjZFWHRpWXFKeHJMUmN1NHZNSTJwSXllbjVNTFFhcmxidk1oTWVwOGZ0a2RyRC9ta2Y5U3JZSXVLZlJBNzF3REtVOExNWGxDYTh3eUhyNUg3UW5oNGEzRXNZTllMSHk1SHNwMlowK0NGWk5OdFl2N3lDU0lDK1dOUHlxWUo4dWswRk55TXFUWWdVYjUrQlYrbW1VZ2FuZWxZNFY1d1VDenNvVlM1SVVQL2RvY0ZSdmF5RVNHampBa3FHS3JTOWhkQXEzdGFoREZOSzN0bFB3RWJ0c09RV0cwb2wwWWtWaUx6OExkOUJZMU1XMG80UUh3bXYrazN5NWQrclJMOS9qeXpBTUJ6bU5VK2xOQzlFcmpkWU5OTXV5QWdDdWJHWkpwWTVmeHpBPT0tLVZVTGJmUnp5Nkx1U2RwUW4zYzVHQUE9PQ%3D%3D--94bb08136f2a680b4e0852f85b9c3d02065a0848

                                         
                                         52.4.77.110
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Sun, 18 Mar 2018 07:25:19 GMT
Content-Length: 7905
Connection: keep-alive
Server: nginx/1.4.6 (Ubuntu)
Last-Modified: Thu, 15 Mar 2018 21:09:47 GMT
Etag: "5aaae11b-1ee1"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000, public
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image, 166 x 46, 8-bit/color RGBA, non-interlaced
Size:   7905
Md5:    612a7ae2262fa532170c854d0f84f2c9
Sha1:   40324127207fd35d1f94a69d74c94a910d0ec9a7
Sha256: c8a438bd8312463bbd56ad52a0010a57a0a67a15e31d15c44228e1bfa8e525a5
                                        
                                            GET /assets/favicon-af6643024af4ecfc57b7e5358608edc94ccd3042dc4849ccdc5befa304b79bf1.ico HTTP/1.1 
Host: singlesignon.secured-login.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: _knowbe4_session=STJCcVIzT2luWDVqU1FqamZ2SFFpc0xFZlpWVlR2Zi96RTdMQmRpWS9RNWV2RDFMWjZFWHRpWXFKeHJMUmN1NHZNSTJwSXllbjVNTFFhcmxidk1oTWVwOGZ0a2RyRC9ta2Y5U3JZSXVLZlJBNzF3REtVOExNWGxDYTh3eUhyNUg3UW5oNGEzRXNZTllMSHk1SHNwMlowK0NGWk5OdFl2N3lDU0lDK1dOUHlxWUo4dWswRk55TXFUWWdVYjUrQlYrbW1VZ2FuZWxZNFY1d1VDenNvVlM1SVVQL2RvY0ZSdmF5RVNHampBa3FHS3JTOWhkQXEzdGFoREZOSzN0bFB3RWJ0c09RV0cwb2wwWWtWaUx6OExkOUJZMU1XMG80UUh3bXYrazN5NWQrclJMOS9qeXpBTUJ6bU5VK2xOQzlFcmpkWU5OTXV5QWdDdWJHWkpwWTVmeHpBPT0tLVZVTGJmUnp5Nkx1U2RwUW4zYzVHQUE9PQ%3D%3D--94bb08136f2a680b4e0852f85b9c3d02065a0848

                                         
                                         52.4.77.110
HTTP/1.1 200 OK
Content-Type: image/x-icon
                                        
Date: Sun, 18 Mar 2018 07:25:19 GMT
Content-Length: 364
Connection: keep-alive
Server: nginx/1.4.6 (Ubuntu)
Last-Modified: Thu, 15 Mar 2018 21:09:47 GMT
Vary: Accept-Encoding
Etag: "5aaae11b-16c"
Content-Encoding: gzip
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000, public


--- Additional Info ---
Magic:  gzip compressed data, from Unix, last modified: Thu Nov 09 20:26:03 2017, max compression
Size:   364
Md5:    1fdae002d1b71898c3e3509f105cbb62
Sha1:   82a533fc49503a95b5efafdf8f96837e0b9c4bce
Sha256: 3978bed26cd29feaf4a077fe1d756d8ecc808731cb9d57690f81ce1a9199599a

Alerts:
  Blacklists:
    - fortinet: Phishing
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         216.58.211.14
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 18 Mar 2018 07:25:20 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    7032f4955d13b2b7e7eb281ee095062b
Sha1:   538a9d68ed2ad2ae1523a61cea52c36e2e48794f
Sha256: 31942cd38cca0732d1513463328e734cfdc38fcc446950469bfd6d7e295ea75e
                                        
                                            GET /gtm.js?id=GTM-N7W93L8 HTTP/1.1 
Host: www.googletagmanager.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://singlesignon.secured-login.net/login

                                         
                                         216.58.211.8
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
                                        
Access-Control-Allow-Origin: http://www.googletagmanager.com
Access-Control-Allow-Headers: Cache-Control
Access-Control-Allow-Credentials: true
Content-Encoding: gzip
Vary: Accept-Encoding
Date: Sun, 18 Mar 2018 07:25:20 GMT
Expires: Sun, 18 Mar 2018 07:25:20 GMT
Cache-Control: private, max-age=900
Server: Google Tag Manager (scaffolding)
X-XSS-Protection: 1; mode=block
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303335,quic=":443"; ma=2592000; v="41,39,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   31464
Md5:    06e855fe3a88d03b33b239e4c20840dd
Sha1:   e758eba2ded0b1b9739f4ad57650dffe47c17160
Sha256: af78ecee9a54c2b89cc477c7c543ca5eedae2ca5c16fed00d3ebac7ab224457c
                                        
                                            GET /uwt.js HTTP/1.1 
Host: static.ads-twitter.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://singlesignon.secured-login.net/login

                                         
                                         104.244.43.112
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                        
Last-Modified: Tue, 23 Jan 2018 19:05:33 GMT
Cache-Control: no-cache
Etag: "b7b33882a4f3ffd5cbf07434f3137166+gzip"
Content-Encoding: gzip
Content-Length: 1954
Accept-Ranges: bytes
Date: Sun, 18 Mar 2018 07:25:20 GMT
Via: 1.1 varnish
Age: 26767
Connection: keep-alive
X-Served-By: cache-tw-sto1-3-TWSTO1
X-Cache: HIT
X-Timer: S1521357920.276077,VS0,VE0
Vary: Accept-Encoding,Host
P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT"


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   1954
Md5:    fcfa33c210453d814f32dc2d8276fc5d
Sha1:   bfc5ce6f8698bbbe39699431ce20f98008dd1d16
Sha256: 5604f61a0723e3bb46034e667766bfc287a65fc7233095ef6b9f573f3e3c7b67
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=172800
Date: Sun, 18 Mar 2018 07:25:20 GMT
Etag: "5aadba17-1d7"
Expires: Tue, 20 Mar 2018 07:25:20 GMT
Last-Modified: Sun, 18 Mar 2018 01:00:07 GMT
Server: ECS (arn/459B)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    d1c2fe23cc34659f6c2ea0a3e199ebb5
Sha1:   9b8cbaa7f43be73041809077d0b67c3e9fd3ec6a
Sha256: d295a1762ec2f5baff27a1806ac39d86b7d58bd162e532cb2420aca8a03eb9ab
                                        
                                            GET /px/3tam?gtmcb=1894389432 HTTP/1.1 
Host: px.spiceworks.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://singlesignon.secured-login.net/login

                                         
                                         192.230.77.92
HTTP/1.1 301 Moved Permanently
                                        
Location: https://px.spiceworks.com/px/3tam?gtmcb=1894389432
Content-Length: 0
Connection: close


--- Additional Info ---
                                        
                                            GET /px.js?gtmcb=897672987 HTTP/1.1 
Host: px.spiceworks.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://singlesignon.secured-login.net/login

                                         
                                         192.230.77.92
HTTP/1.1 301 Moved Permanently
                                        
Location: https://px.spiceworks.com/px.js?gtmcb=897672987
Content-Length: 0
Connection: close


--- Additional Info ---
                                        
                                            GET /px.js HTTP/1.1 
Host: px.spiceworks.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://singlesignon.secured-login.net/login

                                         
                                         192.230.77.92
HTTP/1.1 301 Moved Permanently
                                        
Location: https://px.spiceworks.com/px.js
Content-Length: 0
Connection: close


--- Additional Info ---
                                        
                                            GET /pagead/js/adsbygoogle.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://singlesignon.secured-login.net/login

                                         
                                         216.58.207.226
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="http://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Sun, 18 Mar 2018 07:25:20 GMT
Expires: Sun, 18 Mar 2018 07:25:20 GMT
Cache-Control: private, max-age=3600
Etag: 613761559229449182
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 26737
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   26737
Md5:    5d55783b180a4d3731bb97f4bffec2de
Sha1:   223fbe261dd911a0d348ba84243a44122871b593
Sha256: b58eeb55628d30d90ee3234e385f1d380380ef04d6bd07195762dc601dacf084
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=172800
Date: Sun, 18 Mar 2018 07:25:20 GMT
Etag: "5aadb1e2-1d7"
Expires: Tue, 20 Mar 2018 07:25:20 GMT
Last-Modified: Sun, 18 Mar 2018 00:25:06 GMT
Server: ECS (arn/45E2)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    adc0022408ab6018fd04d7da4e5e7da7
Sha1:   b770e1070a6b0b353f50a91522c1e28c61e1c5f9
Sha256: 057edc0f9d7bbc354737b47a50f8fed6e070363d65dfbf01b049311288128320
                                        
                                            GET /j/roundtrip.js HTTP/1.1 
Host: s.adroll.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://singlesignon.secured-login.net/login

                                         
                                         104.123.119.232
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
x-amz-id-2: Scy5ybCu07lYmp23F4xYzl146OetVy1JOTewXZc3j0xRbjh7Ca4tFn/30Ujghp9b73U4ozEzw0U=
x-amz-request-id: 00A00079CFDF0A34
Last-Modified: Thu, 01 Mar 2018 22:44:14 GMT
Etag: "374d4a57654c36728181a57b0ad40d44"
Cache-Control: max-age=300, must-revalidate
x-amz-version-id: iuzQDTIetciOryzskMd6m5vKtWNLU2xn
Accept-Ranges: bytes
Server: AmazonS3
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Sun, 18 Mar 2018 07:25:20 GMT
Content-Length: 8709
Connection: keep-alive
Access-Control-Max-Age: 600
Access-Control-Allow-Credentials: false
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: GET
Access-Control-Allow-Origin: *


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   8709
Md5:    3b5c8f59d73403c8fdc1e0df0aff077f
Sha1:   633beec0b5504886865cf6a4e9a38531eb086b5e
Sha256: 219ee6e0f262146e903e26d6443af1159b95edc816be83cdd7b27bd1fb5f8357
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sca1b.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         52.85.177.133
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=172800
Date: Sun, 18 Mar 2018 07:25:20 GMT
Etag: "5aad8a19-1d7"
Expires: Tue, 20 Mar 2018 07:25:20 GMT
Last-Modified: Sat, 17 Mar 2018 21:35:21 GMT
Server: ECS (lga/13A4)
X-Cache: Miss from cloudfront
Via: 1.1 16a8156bb9e085b1e79a6bf5cb89d49e.cloudfront.net (CloudFront)
X-Amz-Cf-Id: j0YnPCS5h_3252QzxoDp7jWAsG4hPYLBwzVMq0_j2eimc2Op0kWJnQ==


--- Additional Info ---
Magic:  data
Size:   471
Md5:    0aec2c894e6f16e1b17dc2889d2dd3c7
Sha1:   c3ec039a01542ca9a5739222eec426206558a9fb
Sha256: 739dbd6aa0189e95c80e15c7161ace4b548700f30203556ae6bbc0daad399ab1
                                        
                                            GET /i/adsct?p_id=Twitter&p_user_id=0&txn_id=nvbf0&events=%5B%5B%22pageview%22%2Cnull%5D%5D&tw_sale_amount=0&tw_order_quantity=0&tw_iframe_status=0 HTTP/1.1 
Host: t.co
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://singlesignon.secured-login.net/login

                                         
                                         199.16.156.75
HTTP/1.1 200 OK
Content-Type: image/gif;charset=utf-8
                                        
Cache-Control: no-cache, no-store, must-revalidate, pre-check=0, post-check=0
Content-Encoding: gzip
Content-Length: 65
Date: Sun, 18 Mar 2018 07:25:20 GMT
Expires: Tue, 31 Mar 1981 05:00:00 GMT
Last-Modified: Sun, 18 Mar 2018 07:25:20 GMT
Pragma: no-cache
Server: tsa_b
Status: 200 OK
x-connection-hash: 3c36f242bc958ac6c40928937aaad64e
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
x-response-time: 7
x-transaction: 00d2e8a000680928
x-twitter-response-tags: BouncerCompliant
X-XSS-Protection: 1; mode=block; report=https://twitter.com/i/xss_report


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   65
Md5:    2627dd381327831be501962f01cb45a3
Sha1:   91ada0ee3df9d93cfdd195477d1ed3f86a798997
Sha256: bb5a836235f4765af8072f2021f06871fc1926ef66eb9a5e7dbe124eca13fef8
                                        
                                            POST / HTTP/1.1 
Host: ocsp.rootca1.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 118
Content-Type: application/ocsp-request

                                         
                                         52.85.177.89
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Length: 1426
Connection: keep-alive
Date: Sun, 18 Mar 2018 07:25:20 GMT
Server: WEBrick/1.3.1 (Ruby/2.3.6/2017-12-14)
X-Cache: Miss from cloudfront
Via: 1.1 54430e3a116fc3eedb9a0318cb1ee1e9.cloudfront.net (CloudFront)
X-Amz-Cf-Id: 7lU165GoBIHxa9ybBu2V6iL9IPhAMYgdTicH0KxphWqpERhkZyboyg==


--- Additional Info ---
Magic:  data
Size:   1426
Md5:    225f5301a3d63facc2bc4f83d559a258
Sha1:   afc32e2a341be8916d3210b23ed9c2ff198ef933
Sha256: 47750255a17ce61ce8abbf52fa94c97496754f530ec1db6316b85387b18bb0c0
                                        
                                            GET /analytics.js HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://singlesignon.secured-login.net/login

                                         
                                         216.58.211.14
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
Timing-Allow-Origin: *
Date: Sun, 18 Mar 2018 05:48:21 GMT
Expires: Sun, 18 Mar 2018 07:48:21 GMT
Last-Modified: Mon, 13 Nov 2017 20:19:12 GMT
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Content-Encoding: gzip
Server: Golfe2
Content-Length: 14597
Age: 5819
Cache-Control: public, max-age=7200
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303335,quic=":443"; ma=2592000; v="41,39,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   14597
Md5:    6199bd5ef36ff16dd8c35a2abdb5991c
Sha1:   beb16561dd55ab5896b230c5a116a5d819e86b34
Sha256: a3d61ef9e80a01a794fd7c2769720f2fd0e15d0458236e8e0edd411560171879
                                        
                                            POST /cloudsslsha2g3 HTTP/1.1 
Host: ocsp2.globalsign.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 111
Content-Type: application/ocsp-request

                                         
                                         104.31.74.124
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 18 Mar 2018 07:25:21 GMT
Content-Length: 1539
Connection: keep-alive
Set-Cookie: __cfduid=d126176d9dc745dce24aa7bc1e1750a421521357921; expires=Mon, 18-Mar-19 07:25:21 GMT; path=/; domain=.globalsign.com; HttpOnly
Last-Modified: Sun, 18 Mar 2018 07:19:33 GMT
Expires: Thu, 22 Mar 2018 07:19:33 GMT
Etag: "7fc753d2e4123a22c35b93d9d9d7b15231c651b9"
Cache-Control: public, no-transform, must-revalidate
CF-Cache-Status: HIT
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 3fd5f701013242c1-OSL


--- Additional Info ---
Magic:  data
Size:   1539
Md5:    b5381d2c65e497163fca2663f7593b29
Sha1:   7fc753d2e4123a22c35b93d9d9d7b15231c651b9
Sha256: 1d45d150296c3471bda3e0d9e55e0c34e4ddb33a235365f143d4f1e32773ba3b
                                        
                                            POST / HTTP/1.1 
Host: ocsp.godaddy.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         50.63.243.230
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 18 Mar 2018 07:25:21 GMT
Server: Apache
Content-Transfer-Encoding: Binary
Cache-Control: max-age=121598, public, no-transform, must-revalidate
Last-Modified: Sun, 18 Mar 2018 06:58:39 GMT
Expires: Mon, 19 Mar 2018 18:58:39 GMT
Etag: "484212531ebf248ea340ee6b7227f5d6e7a3e9d2"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
Content-Length: 1776
Connection: close


--- Additional Info ---
Magic:  data
Size:   1776
Md5:    cdb6278ccaed68597e3362aa8cef49ea
Sha1:   484212531ebf248ea340ee6b7227f5d6e7a3e9d2
Sha256: 7e0b49ae24b1675163c36ce107078392a173d0aec075d618e359ddee4ae2b9d0
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=172800
Date: Sun, 18 Mar 2018 07:25:28 GMT
Etag: "5aadd75e-1d7"
Expires: Tue, 20 Mar 2018 07:25:28 GMT
Last-Modified: Sun, 18 Mar 2018 03:05:02 GMT
Server: ECS (arn/46A2)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    a1393062f6436f93260d7879908f8ec8
Sha1:   6534bd8b9daeda20192d7ac89a0038ff09b6934c
Sha256: e7040b13c4ca6e62c585058f91921a61dbfb7be41c9f379e020b75cc5eae8424
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=172800
Date: Sun, 18 Mar 2018 07:25:28 GMT
Etag: "5aadeda5-1d7"
Expires: Tue, 20 Mar 2018 07:25:28 GMT
Last-Modified: Sun, 18 Mar 2018 04:40:05 GMT
Server: ECS (arn/467B)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    52fc177ba13a5df305091e56cb0dd95b
Sha1:   f7effe397ef86a7aa414ee3984525fb913fd9b8c
Sha256: 379226491ea09b5caeeb6d3fde72618a587da4507c47ad4c7c07bb1bcb913773
                                        
                                            GET /r/collect?v=1&_v=j66&a=1013464081&t=pageview&_s=1&dl=http%3A%2F%2Fsinglesignon.secured-login.net%2Flogin&dp=%2Flogin&ul=en-us&de=UTF-8&dt=Get%20Started&sd=24-bit&sr=1176x885&vp=1176x754&je=1&fl=10.0%20r45&_u=YEBAAEQ~&jid=1170717318&gjid=1054057221&cid=388872527.1521357921&tid=UA-21999915-1&_gid=526884128.1521357921&_r=1&gtm=G32N7W93L8&z=1481671213 HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://singlesignon.secured-login.net/login

                                         
                                         216.58.211.14
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                        
Location: https://stats.g.doubleclick.net/r/collect?v=1&aip=1&t=dc&_r=3&tid=UA-21999915-1&cid=388872527.1521357921&jid=1170717318&_gid=526884128.1521357921&gjid=1054057221&_v=j66&z=1481671213
Access-Control-Allow-Origin: *
Date: Sun, 18 Mar 2018 07:25:28 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
Last-Modified: Sun, 17 May 1998 03:00:00 GMT
Server: Golfe2
Content-Length: 418
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303335,quic=":443"; ma=2592000; v="41,39,35"


--- Additional Info ---
Magic:  HTML document text
Size:   418
Md5:    d8b9e494776bd1193eb86e19ea23f6e1
Sha1:   b41469605f2b5f4b8e99ba70fd4cdf64e7eef2ca
Sha256: 0ba7d923c4d4952d566686266114f1c3a767b407fafb2f641bc6f3944266d82d
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sca1b.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         52.85.177.133
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=172800
Date: Sun, 18 Mar 2018 07:25:28 GMT
Etag: "5aadbffa-1d7"
Expires: Tue, 20 Mar 2018 07:25:28 GMT
Last-Modified: Sun, 18 Mar 2018 01:25:14 GMT
Server: ECS (lga/1385)
X-Cache: Miss from cloudfront
Via: 1.1 16a8156bb9e085b1e79a6bf5cb89d49e.cloudfront.net (CloudFront)
X-Amz-Cf-Id: wXxWiN4pGQV2Um7_-D-vJDhY7HwkPI19kKLvm3rIhU9LbgffMM3GwA==


--- Additional Info ---
Magic:  data
Size:   471
Md5:    8a4518e97cb27bfd9f6db9be0d4a0766
Sha1:   574fc1cf72bfde63dd787f3c842abcb5e4973c9b
Sha256: 781b9c1bbe2c515a116f640724d7e2b6094cd3e1b17e931b2189d7b31ae4dbc9
                                        
                                            GET /insight.min.js HTTP/1.1 
Host: sjs.bizographics.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://singlesignon.secured-login.net/login

                                         
                                         54.240.162.50
HTTP/1.1 301 Moved Permanently
                                        
Content-Length: 0
Connection: keep-alive
Date: Sat, 17 Mar 2018 15:40:44 GMT
Location: https://snap.licdn.com/li.lms-analytics/insight.min.js
Server: AmazonS3
Age: 56685
X-Cache: Hit from cloudfront
Via: 1.1 0991a4b934302d120a32dada6513dc35.cloudfront.net (CloudFront)
X-Amz-Cf-Id: PS3JBlYaSMJ_k38o2Ns_Gvg0e0s6jw6vZDU9GDjK6L4YIlwzbAEXlw==


--- Additional Info ---
                                        
                                            GET /px.js HTTP/1.1 
Host: px.spiceworks.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://singlesignon.secured-login.net/login

                                         
                                         192.230.77.92
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Date: Sun, 18 Mar 2018 07:25:28 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: visid_incap_1145931=1Sn6xkHDTWK1Mad8qXeDm2cUrloAAAAAQUIPAAAAAADHKumu+idP0Dmto4W7SKjV; expires=Sun, 17 Mar 2019 12:21:16 GMT; path=/; Domain=.spiceworks.com incap_ses_728_1145931=FllsUySpal6sW2PCc2AaCmcUrloAAAAAGs8n1+0QfxjjE/YhvRJc9w==; path=/; Domain=.spiceworks.com ___utmvmXyuvZMZB=GGoXfiMYrnD; path=/; Max-Age=900 ___utmvaXyuvZMZB=TJpejQD; path=/; Max-Age=900 ___utmvbXyuvZMZB=IZd XPpOKalh: wtc; path=/; Max-Age=900
X-Iinfo: 13-86375989-86376062 PNNN RT(1521357919454 8290) q(0 0 0 -1) r(0 0) U5
X-CDN: Incapsula
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data
Size:   6429
Md5:    283d2d4f4b59dedd853910d7940e22ca
Sha1:   6987eeefcd02c584e1817dff7f237ab644865d25
Sha256: d0a8bcff2c019fb1f402a4a1c6ba644741257ad3afb632b2f698246d99eead30
                                        
                                            GET /f4935317-e9e8-4e02-9867-78a1d38ed93e/t.js HTTP/1.1 
Host: vidassets.terminus.services
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://singlesignon.secured-login.net/login

                                         
                                         52.85.173.138
HTTP/1.1 200 OK
Content-Type: application/javascript;charset=utf-8
                                        
Content-Length: 2652
Connection: keep-alive
Server: nginx/1.10.3 (Ubuntu)
Date: Tue, 06 Mar 2018 19:14:51 GMT
Cache-Control: public, s-maxage=600
Last-Modified: Tue, 06 Mar 2018 18:58:00 GMT
X-Content-Type-Options: nosniff
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range,Authorization
Access-Control-Expose-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range,Authorization
Age: 448
X-Cache: Hit from cloudfront
Via: 1.1 f735992a47971208bce91329a45dbeca.cloudfront.net (CloudFront)
X-Amz-Cf-Id: CrKtdBffhS4IH73dHi2vmEMBbTy9gcpURImMnxxfA7YDAYIoSXNJ8A==


--- Additional Info ---
Magic:  ASCII text, with very long lines, with no line terminators
Size:   2652
Md5:    a0106d4ee7c6a3f56f04cfb630eaa83e
Sha1:   615e7b45b98418157baea88a5a86ff26e661c8ea
Sha256: 852d6ef7e1f541e29805a611f49b52f6ecb7a47679e966c9264db3c177234ba6
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=172800
Date: Sun, 18 Mar 2018 07:25:28 GMT
Etag: "5aadbc73-1d7"
Expires: Tue, 20 Mar 2018 07:25:28 GMT
Last-Modified: Sun, 18 Mar 2018 01:10:11 GMT
Server: ECS (arn/45C7)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    d01358a2d4a2988f78930a01693597ee
Sha1:   0b6295a578877d6a7d71ae65cd09576b0add8371
Sha256: e2cebbdea7007001a6e1d221380ba132079c4cf06ebfeae7a7eb6f8cc1bdee20
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         216.58.211.14
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 18 Mar 2018 07:25:28 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    01941ba8839dfeb595d8fb865dfacc2a
Sha1:   0a1591509ba7a4f3390f4e8a9642ae701bf07f11
Sha256: b3b0a648ac5a8ef00b72b3a9341c6adc136ce380c438e10aa43d2d71f3eab81f
                                        
                                            GET /px/05re?buster=12015&pxref=&_fpv=2.4&_fpt=30&_fp2=ebf8174296b05d1b30ebf14d492d66b1 HTTP/1.1 
Host: px.spiceworks.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://singlesignon.secured-login.net/login
Cookie: visid_incap_1145931=1Sn6xkHDTWK1Mad8qXeDm2cUrloAAAAAQUIPAAAAAADHKumu+idP0Dmto4W7SKjV; incap_ses_728_1145931=FllsUySpal6sW2PCc2AaCmcUrloAAAAAGs8n1+0QfxjjE/YhvRJc9w==; ___utmvmXyuvZMZB=GGoXfiMYrnD; ___utmvaXyuvZMZB=TJpejQD; ___utmvbXyuvZMZB=IZd XPpOKalh: wtc

                                         
                                         192.230.77.92
HTTP/1.1 301 Moved Permanently
                                        
Location: https://px.spiceworks.com/px/05re?buster=12015&pxref=&_fpv=2.4&_fpt=30&_fp2=ebf8174296b05d1b30ebf14d492d66b1
Content-Length: 0
Connection: close


--- Additional Info ---
                                        
                                            GET /px/3tam?buster=51969&pxref=&_fpv=2.4&_fpt=28&_fp2=ebf8174296b05d1b30ebf14d492d66b1 HTTP/1.1 
Host: px.spiceworks.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://singlesignon.secured-login.net/login
Cookie: visid_incap_1145931=1Sn6xkHDTWK1Mad8qXeDm2cUrloAAAAAQUIPAAAAAADHKumu+idP0Dmto4W7SKjV; incap_ses_728_1145931=FllsUySpal6sW2PCc2AaCmcUrloAAAAAGs8n1+0QfxjjE/YhvRJc9w==; ___utmvmXyuvZMZB=GGoXfiMYrnD; ___utmvaXyuvZMZB=TJpejQD; ___utmvbXyuvZMZB=IZd XPpOKalh: wtc

                                         
                                         192.230.77.92
HTTP/1.1 301 Moved Permanently
                                        
Location: https://px.spiceworks.com/px/3tam?buster=51969&pxref=&_fpv=2.4&_fpt=28&_fp2=ebf8174296b05d1b30ebf14d492d66b1
Content-Length: 0
Connection: close


--- Additional Info ---
                                        
                                            GET /i/adsct?p_id=Twitter&p_user_id=0&txn_id=nvbf0&events=%5B%5B%22pageview%22%2Cnull%5D%5D&tw_sale_amount=0&tw_order_quantity=0&tw_iframe_status=0&tpx_cb=twttr.conversion.loadPixels&tw_document_href=http%3A%2F%2Fsinglesignon.secured-login.net%2Flogin HTTP/1.1 
Host: analytics.twitter.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://singlesignon.secured-login.net/login

                                         
                                         199.16.156.9
HTTP/1.1 200 OK
Content-Type: application/javascript;charset=utf-8
                                        
Cache-Control: no-cache, no-store, must-revalidate, pre-check=0, post-check=0
Content-Encoding: gzip
Content-Length: 57
Date: Sun, 18 Mar 2018 07:25:28 GMT
Expires: Tue, 31 Mar 1981 05:00:00 GMT
Last-Modified: Sun, 18 Mar 2018 07:25:28 GMT
P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT"
Pragma: no-cache
Server: tsa_b
Set-Cookie: personalization_id="v1_vdLhfOdjX2GoIdPjrDo+Qw=="; Expires=Tue, 17 Mar 2020 07:25:28 UTC; Path=/; Domain=.twitter.com guest_id=v1%3A152135792884871717; Expires=Tue, 17 Mar 2020 07:25:28 UTC; Path=/; Domain=.twitter.com
Status: 200 OK
Strict-Transport-Security: max-age=631138519
x-connection-hash: 1662981cfe5b2c180d70f645c46cddfb
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
x-response-time: 8
x-transaction: 00ffa656005f5abf
x-twitter-response-tags: BouncerCompliant
X-XSS-Protection: 1; mode=block; report=https://twitter.com/i/xss_report


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   57
Md5:    d6cff1cc2ef6dbf2da25fade3bab8c65
Sha1:   c96e2822fd1459b7f171d86d88dcd76bc167c113
Sha256: 8d5b13815d3883037c78495a28abfe1815bfc702cade0cd8a7592be793e72996
                                        
                                            GET /px/3tam?gtmcb=1894389432 HTTP/1.1 
Host: px.spiceworks.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://singlesignon.secured-login.net/login

                                         
                                         192.230.77.92
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Sun, 18 Mar 2018 07:25:28 GMT
Content-Length: 42
Connection: keep-alive
Set-Cookie: _swnid=n1w6w029gCZ6; Path=/; Domain=spiceworks.com; Expires=Tue, 02 Mar 2021 07:25:28 GMT _swauth=N; Path=/; Domain=spiceworks.com; Expires=Tue, 02 Mar 2021 07:25:28 GMT visid_incap_1145931=NTfc4O6/S3yIte9LjEPKZGcUrloAAAAAQUIPAAAAAADWb6XI3AcEpwI2VfH8kVuV; expires=Sun, 17 Mar 2019 12:21:16 GMT; path=/; Domain=.spiceworks.com incap_ses_728_1145931=QLfZT5eKPlTNW2PCc2AaCmcUrloAAAAAEtPiLNeKob5CYFtQINwKZw==; path=/; Domain=.spiceworks.com ___utmvmXyuvZMZB=BEQLzIZYxPT; path=/; Max-Age=900 ___utmvaXyuvZMZB=rWqNTJD; path=/; Max-Age=900 ___utmvbXyuvZMZB=WZP XvQOhalt: ctc; path=/; Max-Age=900
X-Iinfo: 13-86375987-86377464 NNNN CT(21 21 0) RT(1521357919446 8443) q(0 0 1 -1) r(1 1) U5
X-CDN: Incapsula


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /li.lms-analytics/insight.min.js HTTP/1.1 
Host: snap.licdn.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://singlesignon.secured-login.net/login

                                         
                                         104.122.220.249
HTTP/1.1 200 OK
Content-Type: application/x-javascript;charset=utf-8
                                        
Last-Modified: Wed, 07 Feb 2018 22:09:38 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=18600
Date: Sun, 18 Mar 2018 07:25:28 GMT
Content-Length: 7730
Connection: keep-alive
X-CDN: AKAM


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   7730
Md5:    03fe5ba59ee5690fadc5b86df9f3de28
Sha1:   904dd0b0ffe4b0b946718d54e48e98a41d74c5aa
Sha256: d64300e57d5c6139dda85115d1209bed1e4adfe2673a4d09d8798174ec173806
                                        
                                            GET /f4935317-e9e8-4e02-9867-78a1d38ed93e/t.gif?d=61c00ce5-20ef-4a9f-92ab-336b6502bae5&s=90716ecf-581d-4c07-8331-6807f4772b47&cb=1521357928798 HTTP/1.1 
Host: vidassets.terminus.services
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://singlesignon.secured-login.net/login

                                         
                                         52.85.173.138
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Content-Length: 42
Connection: keep-alive
Server: nginx/1.10.3 (Ubuntu)
Date: Tue, 06 Mar 2018 19:14:51 GMT
Cache-Control: public, s-maxage=600
Last-Modified: Tue, 06 Mar 2018 18:50:15 GMT
X-Content-Type-Options: nosniff
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range,Authorization
Access-Control-Expose-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range,Authorization
Age: 455
X-Cache: Hit from cloudfront
Via: 1.1 f735992a47971208bce91329a45dbeca.cloudfront.net (CloudFront)
X-Amz-Cf-Id: Ic6ep9kD8GTlL3VmLCslIh-p8Kzhc7SUIC_ILmLpV5KnEK8dnx6Nvg==


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /pixel/XXBT3QZSIFDL5JK7GEVLKL/I62X5LT6ZZDNNGP6CLAQZT?pv=16584629556.926256&cookie=&adroll_s_ref=&keyw=&arrfrr=http%3A%2F%2Fsinglesignon.secured-login.net%2Flogin HTTP/1.1 
Host: d.adroll.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://singlesignon.secured-login.net/login

                                         
                                         54.246.116.149
HTTP/1.1 302 Moved Temporarily
                                        
Cache-Control: no-store, no-cache, must-revalidate
Date: Sun, 18 Mar 2018 07:25:28 GMT
Location: https://s.adroll.com/pixel/XXBT3QZSIFDL5JK7GEVLKL/I62X5LT6ZZDNNGP6CLAQZT/FZRK66WJZBGG7IXLKRC4HL.js
P3P: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA"
Pragma: no-cache
Server: nginx/1.12.1
Set-Cookie: __adroll=46c95ac3238e4637a0fdb0b8eb74a6f9; Version=1; Expires=Wed, 17-Apr-2019 07:25:28 GMT; Max-Age=34128000; Path=/; HttpOnly
X-Advertisable-Eid: XXBT3QZSIFDL5JK7GEVLKL
X-Conversion-Value: 0.0
X-Pixel-Eid: I62X5LT6ZZDNNGP6CLAQZT
X-Rule: *
X-Segment-Eid: FZRK66WJZBGG7IXLKRC4HL
X-Segment-Name: *
Content-Length: 0
Connection: keep-alive


--- Additional Info ---
                                        
                                            GET /r/collect?v=1&aip=1&t=dc&_r=3&tid=UA-21999915-1&cid=388872527.1521357921&jid=1170717318&_gid=526884128.1521357921&gjid=1054057221&_v=j66&z=1481671213 HTTP/1.1 
Host: stats.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://singlesignon.secured-login.net/login

                                         
                                         173.194.222.155
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                        
Location: https://www.google.com/ads/ga-audiences?v=1&aip=1&t=sr&_r=4&tid=UA-21999915-1&cid=388872527.1521357921&jid=1170717318&_v=j66&z=1481671213
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
Date: Sun, 18 Mar 2018 07:25:29 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
Last-Modified: Sun, 17 May 1998 03:00:00 GMT
Server: Golfe2
Content-Length: 366
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303335,quic=":443"; ma=2592000; v="41,39,35"


--- Additional Info ---
Magic:  HTML document text
Size:   366
Md5:    3bac44e70b418cd9568406e16b2d0e76
Sha1:   5527fdb01a5e881359076cc68c54c2e5fb864a6c
Sha256: f0980a64a2bd4cf9a91f742a9baf87acc4de98ccd2c9f758702f0f11da08b671
                                        
                                            GET /pixel/XXBT3QZSIFDL5JK7GEVLKL/I62X5LT6ZZDNNGP6CLAQZT/FZRK66WJZBGG7IXLKRC4HL.js HTTP/1.1 
Host: s.adroll.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://singlesignon.secured-login.net/login

                                         
                                         104.123.119.232
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=utf-8
                                        
x-amz-id-2: DRb1NT/Bt3uuANUuzFzNDSWRoERrMx3O0NLM6fLRv42OBh8MMzmbzYoQogSt+V908v9cPCxp0Vk=
x-amz-request-id: E25CBE00EDA81C8C
Last-Modified: Wed, 14 Mar 2018 20:28:16 GMT
Etag: "501b9b8e9438498f268fac726b710bba"
Cache-Control: max-age=300, must-revalidate
x-amz-version-id: EO54R0g_4aHNFG.DgJA0ROfnf1tqxOvs
Accept-Ranges: bytes
Server: AmazonS3
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Sun, 18 Mar 2018 07:25:29 GMT
Content-Length: 1343
Connection: keep-alive
Access-Control-Max-Age: 600
Access-Control-Allow-Credentials: false
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: GET
Access-Control-Allow-Origin: *


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   1343
Md5:    f13dac925f84c3e716d9320aaea883ce
Sha1:   73dc235a2269c01be21f83ed9ff8f0351c762779
Sha256: 5b68534e51b66b4e01e1998f7f5bc8bfdfb320540a5af57b9076ae5d9b9d2ee9
                                        
                                            GET /en_US/fbevents.js HTTP/1.1 
Host: connect.facebook.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://singlesignon.secured-login.net/login

                                         
                                         31.13.72.12
HTTP/1.1 200 OK
Content-Type: application/x-javascript; charset=utf-8
                                        
content-security-policy: default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self';
X-Frame-Options: DENY
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://connect.facebook.net
Access-Control-Expose-Headers: X-FB-Debug, X-Loader-Length
Pragma: public
Vary: Origin, Accept-Encoding
Access-Control-Allow-Methods: OPTIONS
Strict-Transport-Security: max-age=31536000; preload; includeSubDomains
X-Content-Type-Options: nosniff
Expires: Sat, 01 Jan 2000 00:00:00 GMT
Cache-Control: public, max-age=1200
Content-Encoding: gzip
X-FB-Debug: 5Z1CWnqgEM2DsWyVb9RzLk0UJqXE/OF5BM+WnTtf+UVmuTK9fIikmfD5tNSqcueJCPw0NJ+/tGwyIgmTJk8jMg==
Date: Sun, 18 Mar 2018 07:25:29 GMT
Connection: keep-alive
Content-Length: 12439


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   12439
Md5:    89a5134a1a71fd31713943930b3f3e2a
Sha1:   7f8e3cfe21fa6410d894ae20644df3b380cfb146
Sha256: 04269fc9a8957e0fb3d4e95a4f9a2b1c845ee3bdedabfc911dae9d66ad3d720f
                                        
                                            POST /ocsp HTTP/1.1 
Host: clients1.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         216.58.211.14
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 18 Mar 2018 07:25:29 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    6651deda46c2e1cb34aa8d465a55bbfa
Sha1:   59e135fec11cda56e19f3c17ea199619f696bfa8
Sha256: 7612f6c2db12532481e4472a7583d4b91822c31b31ae0f5a3835350d25735d6f
                                        
                                            POST / HTTP/1.1 
Host: g.symcd.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         23.43.139.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx/1.12.2
Content-Length: 1391
Content-Transfer-Encoding: binary
Cache-Control: max-age=437608, public, no-transform, must-revalidate
Last-Modified: Fri, 16 Mar 2018 08:56:16 GMT
Expires: Fri, 23 Mar 2018 08:56:16 GMT
Date: Sun, 18 Mar 2018 07:25:29 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   1391
Md5:    61229c0f710cb55d96922c8f89c6d6a6
Sha1:   71b21b2db195cc1feabd1b4449b5c83bd3062a72
Sha256: 1d3d244515bbebd05fe4fbdc36554ee8d37be87be6f57819f76e3425c881ecd1
                                        
                                            GET /px/05re?buster=12015&pxref=&_fpv=2.4&_fpt=30&_fp2=ebf8174296b05d1b30ebf14d492d66b1 HTTP/1.1 
Host: px.spiceworks.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://singlesignon.secured-login.net/login
Cookie: visid_incap_1145931=1Sn6xkHDTWK1Mad8qXeDm2cUrloAAAAAQUIPAAAAAADHKumu+idP0Dmto4W7SKjV; incap_ses_728_1145931=FllsUySpal6sW2PCc2AaCmcUrloAAAAAGs8n1+0QfxjjE/YhvRJc9w==; ___utmvmXyuvZMZB=GGoXfiMYrnD; ___utmvaXyuvZMZB=TJpejQD; ___utmvbXyuvZMZB=IZd XPpOKalh: wtc

                                         
                                         192.230.77.92
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Sun, 18 Mar 2018 07:25:29 GMT
Content-Length: 42
Connection: keep-alive
Set-Cookie: _swnid=n1w6w029gCZ6; Path=/; Domain=spiceworks.com; Expires=Tue, 02 Mar 2021 07:25:29 GMT _swauth=n; Path=/; Domain=spiceworks.com; Expires=Tue, 02 Mar 2021 07:25:29 GMT visid_incap_1145931=1Sn6xkHDTWK1Mad8qXeDm2cUrloAAAAAQUIPAAAAAADHKumu+idP0Dmto4W7SKjV; expires=Sun, 17 Mar 2019 12:21:16 GMT; path=/; Domain=.spiceworks.com incap_ses_728_1145931=FllsUySpal6sW2PCc2AaCmcUrloAAAAAGs8n1+0QfxjjE/YhvRJc9w==; path=/; Domain=.spiceworks.com ___utmvbXyuvZMZB=a; Max-Age=0; path=/; expires=Sun, 11 Mar 2018 12:18:18 GMT ___utmvaXyuvZMZB=a; Max-Age=0; path=/; expires=Sun, 11 Mar 2018 12:18:18 GMT ___utmvmXyuvZMZB=a; Max-Age=0; path=/; expires=Sun, 11 Mar 2018 12:18:18 GMT
X-Iinfo: 13-86377504-86377464 PNNN RT(1521357928091 51) q(0 0 0 2) r(0 0) U5
X-CDN: Incapsula


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /px/3tam?buster=51969&pxref=&_fpv=2.4&_fpt=28&_fp2=ebf8174296b05d1b30ebf14d492d66b1 HTTP/1.1 
Host: px.spiceworks.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://singlesignon.secured-login.net/login
Cookie: visid_incap_1145931=1Sn6xkHDTWK1Mad8qXeDm2cUrloAAAAAQUIPAAAAAADHKumu+idP0Dmto4W7SKjV; incap_ses_728_1145931=FllsUySpal6sW2PCc2AaCmcUrloAAAAAGs8n1+0QfxjjE/YhvRJc9w==; ___utmvmXyuvZMZB=GGoXfiMYrnD; ___utmvaXyuvZMZB=TJpejQD; ___utmvbXyuvZMZB=IZd XPpOKalh: wtc

                                         
                                         192.230.77.92
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Sun, 18 Mar 2018 07:25:29 GMT
Content-Length: 42
Connection: keep-alive
Set-Cookie: _swnid=n1w6w029gCZ6; Path=/; Domain=spiceworks.com; Expires=Tue, 02 Mar 2021 07:25:29 GMT _swauth=n; Path=/; Domain=spiceworks.com; Expires=Tue, 02 Mar 2021 07:25:29 GMT visid_incap_1145931=1Sn6xkHDTWK1Mad8qXeDm2cUrloAAAAAQUIPAAAAAADHKumu+idP0Dmto4W7SKjV; expires=Sun, 17 Mar 2019 12:21:47 GMT; path=/; Domain=.spiceworks.com incap_ses_728_1145931=FllsUySpal6sW2PCc2AaCmcUrloAAAAAGs8n1+0QfxjjE/YhvRJc9w==; path=/; Domain=.spiceworks.com ___utmvbXyuvZMZB=a; Max-Age=0; path=/; expires=Sun, 11 Mar 2018 12:18:18 GMT ___utmvaXyuvZMZB=a; Max-Age=0; path=/; expires=Sun, 11 Mar 2018 12:18:18 GMT ___utmvmXyuvZMZB=a; Max-Age=0; path=/; expires=Sun, 11 Mar 2018 12:18:18 GMT
X-Iinfo: 3-13166742-13166743 NNNN CT(0 0 0) RT(1521357928091 54) q(0 0 0 -1) r(0 0) U5
X-CDN: Incapsula


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=172800
Date: Sun, 18 Mar 2018 07:25:29 GMT
Etag: "5aade1f3-1d7"
Expires: Tue, 20 Mar 2018 07:25:29 GMT
Last-Modified: Sun, 18 Mar 2018 03:50:11 GMT
Server: ECS (arn/45DF)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    9d04a38cd6aebc9b21e2c3d2cfc8d045
Sha1:   ae26825f1d91e20ac63494b13b4244d9d5ab1f4d
Sha256: 9507ebbb5523aebe0e6eae1e20d2ed7fad0204eef429442b5227836c86b5531a
                                        
                                            GET /px.js HTTP/1.1 
Host: px.spiceworks.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://singlesignon.secured-login.net/login

                                         
                                         192.230.77.92
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Date: Sun, 18 Mar 2018 07:25:29 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: visid_incap_1145931=Q2S2BJmZToOwgf6XLjVWwmgUrloAAAAAQUIPAAAAAABuaea/gXnRhXrHX9aFxx/D; expires=Sun, 17 Mar 2019 12:21:16 GMT; path=/; Domain=.spiceworks.com incap_ses_728_1145931=ogGdWfvc6SXbW2PCc2AaCmgUrloAAAAARwFIveHowDG1Lmh3CZb7RQ==; path=/; Domain=.spiceworks.com ___utmvmXyuvZMZB=WLkJpUqwZWe; path=/; Max-Age=900 ___utmvaXyuvZMZB=gFXVqQS; path=/; Max-Age=900 ___utmvbXyuvZMZB=oZp XkgOdali: otZ; path=/; Max-Age=900
X-Iinfo: 13-86375989-86376062 SNNN RT(1521357919454 8619) q(0 0 0 -1) r(1 1) U5
X-CDN: Incapsula
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data
Size:   6441
Md5:    e8ed4d2cd8aee96f41d052832fb46942
Sha1:   3d53cb266a61a6e7d216ca19ea15e64166618908
Sha256: a439eae63f95cf5f2862750d6e3f2cdcb57813aa5e07c4ef2a098cfca83255a1
                                        
                                            GET /cm/aol/out HTTP/1.1 
Host: d.adroll.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://singlesignon.secured-login.net/login
Cookie: __adroll=46c95ac3238e4637a0fdb0b8eb74a6f9

                                         
                                         54.246.116.149
HTTP/1.1 302 Moved Temporarily
                                        
Cache-Control: no-store, no-cache, must-revalidate
Date: Sun, 18 Mar 2018 07:25:29 GMT
Location: https://pixel.advertising.com/ups/55980/sync?uid=NDZjOTVhYzMyMzhlNDYzN2EwZmRiMGI4ZWI3NGE2Zjk&_origin=1
P3P: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA"
Pragma: no-cache
Server: nginx/1.12.1
Set-Cookie: __adroll=46c95ac3238e4637a0fdb0b8eb74a6f9; Version=1; Expires=Wed, 17-Apr-2019 07:25:28 GMT; Max-Age=34128000; Path=/; HttpOnly
Content-Length: 108
Connection: keep-alive


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   108
Md5:    abd1ed78febe442b851f1b6a3c07ccd1
Sha1:   92af16250dce80d812f942b48a49be4b42b252d0
Sha256: 2e9d18b8bd1285c73d8c17946dfe2b41fece54cc96b272d891fcc495df1464b2
                                        
                                            GET /ads/ga-audiences?v=1&aip=1&t=sr&_r=4&tid=UA-21999915-1&cid=388872527.1521357921&jid=1170717318&_v=j66&z=1481671213 HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://singlesignon.secured-login.net/login

                                         
                                         216.58.211.4
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Sun, 18 Mar 2018 07:25:29 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
Location: https://www.google.no/ads/ga-audiences?v=1&aip=1&t=sr&_r=4&tid=UA-21999915-1&cid=388872527.1521357921&jid=1170717318&_v=j66&z=1481671213&slf_rd=1&random=2333592363
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 0
X-XSS-Protection: 1; mode=block
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303335,quic=":443"; ma=2592000; v="41,39,35"


--- Additional Info ---
                                        
                                            POST /ocsp HTTP/1.1 
Host: clients1.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         216.58.211.14
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 18 Mar 2018 07:25:29 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    e7d42539cc38400a60cb95578221fed6
Sha1:   ab76b2189a6272aadf73a73ac93825fb90f01301
Sha256: 1130891454f1c1ed75a5e0430f69af714e614677e8e94c6c24ea5dde56cbe59a
                                        
                                            GET /cm/pubmatic/out HTTP/1.1 
Host: d.adroll.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://singlesignon.secured-login.net/login
Cookie: __adroll=46c95ac3238e4637a0fdb0b8eb74a6f9

                                         
                                         54.246.116.149
HTTP/1.1 302 Moved Temporarily
                                        
Cache-Control: no-store, no-cache, must-revalidate
Date: Sun, 18 Mar 2018 07:25:29 GMT
Location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MzMwNiZ0bD01MjU2MDA&piggybackCookie=NDZjOTVhYzMyMzhlNDYzN2EwZmRiMGI4ZWI3NGE2Zjk
P3P: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA"
Pragma: no-cache
Server: nginx/1.12.1
Set-Cookie: __adroll=46c95ac3238e4637a0fdb0b8eb74a6f9; Version=1; Expires=Wed, 17-Apr-2019 07:25:28 GMT; Max-Age=34128000; Path=/; HttpOnly
Content-Length: 161
Connection: keep-alive


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   161
Md5:    e9cb8bbb69892a655ea34837fcd49191
Sha1:   d85708caad731152369b113e6ca538f8e8f6d1c0
Sha256: 3cc1adb1712d3e13b1b2c2d46846d6cfaf9b764778bf399a8c197d11e9450176
                                        
                                            GET /cm/outbrain/out HTTP/1.1 
Host: d.adroll.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://singlesignon.secured-login.net/login
Cookie: __adroll=46c95ac3238e4637a0fdb0b8eb74a6f9

                                         
                                         54.246.116.149
HTTP/1.1 302 Moved Temporarily
                                        
Cache-Control: no-store, no-cache, must-revalidate
Date: Sun, 18 Mar 2018 07:25:29 GMT
Location: https://sync.outbrain.com/adroll/pixel?user_id=NDZjOTVhYzMyMzhlNDYzN2EwZmRiMGI4ZWI3NGE2Zjk
P3P: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA"
Pragma: no-cache
Server: nginx/1.12.1
Set-Cookie: __adroll=46c95ac3238e4637a0fdb0b8eb74a6f9; Version=1; Expires=Wed, 17-Apr-2019 07:25:28 GMT; Max-Age=34128000; Path=/; HttpOnly
Content-Length: 96
Connection: keep-alive


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   96
Md5:    8ef81f8fc0318d68eafaa132015514ef
Sha1:   3f16d3e0a174eb77d5c4edce99871efe3a360a7c
Sha256: b49453ec9f0342d971408d59f2675df7651d15152b77ac853298f18fe1cdbc5a
                                        
                                            GET /cm/n/out HTTP/1.1 
Host: d.adroll.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://singlesignon.secured-login.net/login
Cookie: __adroll=46c95ac3238e4637a0fdb0b8eb74a6f9

                                         
                                         54.246.116.149
HTTP/1.1 302 Moved Temporarily
                                        
Cache-Control: no-store, no-cache, must-revalidate
Date: Sun, 18 Mar 2018 07:25:29 GMT
Location: https://pixel.rubiconproject.com/tap.php?v=194538&nid=3644&put=NDZjOTVhYzMyMzhlNDYzN2EwZmRiMGI4ZWI3NGE2Zjk&expires=365
P3P: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA"
Pragma: no-cache
Server: nginx/1.12.1
Set-Cookie: __adroll=46c95ac3238e4637a0fdb0b8eb74a6f9; Version=1; Expires=Wed, 17-Apr-2019 07:25:28 GMT; Max-Age=34128000; Path=/; HttpOnly
Content-Length: 124
Connection: keep-alive


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   124
Md5:    da7117f8e8a00d4cc59452b6068dbc92
Sha1:   46b07b0b830608de1aa7e39c712e4225be176126
Sha256: 00ba790a623efefa245cc1bead881ded167f19c9a020f99c09dea8059a067857
                                        
                                            POST / HTTP/1.1 
Host: ocsp.usertrust.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 116
Content-Type: application/ocsp-request

                                         
                                         178.255.83.1
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 18 Mar 2018 07:25:29 GMT
Server: Apache
Last-Modified: Sat, 17 Mar 2018 18:06:34 GMT
Expires: Sat, 24 Mar 2018 18:06:34 GMT
Etag: 4652F9AEC066A3CF17054959FAE8824ED9F28DC1
Cache-Control: max-age=556264,public,no-transform,must-revalidate
X-OCSP-Responder-ID: rmdccaocsp35
Content-Length: 491
Connection: close


--- Additional Info ---
Magic:  data
Size:   491
Md5:    7c5b738acac80e5fdb8896649ed86acc
Sha1:   4652f9aec066a3cf17054959fae8824ed9f28dc1
Sha256: d99648fc7042a28317c490a09004f3783ac7004bebd4925223731d8a01bd278a
                                        
                                            POST / HTTP/1.1 
Host: ocsp.usertrust.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         178.255.83.1
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 18 Mar 2018 07:25:29 GMT
Server: Apache
Last-Modified: Fri, 16 Mar 2018 23:02:22 GMT
Expires: Fri, 23 Mar 2018 23:02:22 GMT
Etag: 1454B2156D97EB8361DDC1E19B90548AB83E0FC1
Cache-Control: max-age=487612,public,no-transform,must-revalidate
X-OCSP-Responder-ID: rmdccaocsp35
Content-Length: 727
Connection: close


--- Additional Info ---
Magic:  data
Size:   727
Md5:    3cbb31c2b8c6f5f97c1217df3167a870
Sha1:   1454b2156d97eb8361ddc1e19b90548ab83e0fc1
Sha256: c466d5cf913dd252179fa0e5622f2e315c20cc7055708085884f0639cdced8ae
                                        
                                            POST / HTTP/1.1 
Host: ocsp.usertrust.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         178.255.83.1
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 18 Mar 2018 07:25:29 GMT
Server: Apache
Last-Modified: Fri, 16 Mar 2018 23:02:22 GMT
Expires: Fri, 23 Mar 2018 23:02:22 GMT
Etag: A98EDB9FE1D139BF6629FCCCB9D174D0495F7381
Cache-Control: max-age=487612,public,no-transform,must-revalidate
X-OCSP-Responder-ID: rmdccaocsp27
Content-Length: 471
Connection: close


--- Additional Info ---
Magic:  data
Size:   471
Md5:    8f6d9a0389135e9786272774b9bc3535
Sha1:   a98edb9fe1d139bf6629fcccb9d174d0495f7381
Sha256: f7bbf69959d527cb11b9009b9888fabe6e8367e9fd99cb045409bc235411344b
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         216.58.211.14
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 18 Mar 2018 07:25:29 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    1057357c6e6a653d46d2a07bfc3c0428
Sha1:   df12316e513bfb8b262172cc9425050cd58c9554
Sha256: 4a9b2545c2cced25afc108c732a15c8e9c5a8fef6c27d97b8c0ec8a2a253b2b0
                                        
                                            GET /cm/b/out HTTP/1.1 
Host: d.adroll.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://singlesignon.secured-login.net/login
Cookie: __adroll=46c95ac3238e4637a0fdb0b8eb74a6f9

                                         
                                         54.246.116.149
HTTP/1.1 302 Moved Temporarily
                                        
Cache-Control: no-store, no-cache, must-revalidate
Date: Sun, 18 Mar 2018 07:25:29 GMT
Location: https://x.bidswitch.net/sync?dsp_id=44&user_id=NDZjOTVhYzMyMzhlNDYzN2EwZmRiMGI4ZWI3NGE2Zjk
P3P: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA"
Pragma: no-cache
Server: nginx/1.12.1
Set-Cookie: __adroll=46c95ac3238e4637a0fdb0b8eb74a6f9; Version=1; Expires=Wed, 17-Apr-2019 07:25:28 GMT; Max-Age=34128000; Path=/; HttpOnly
Content-Length: 96
Connection: keep-alive


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   96
Md5:    3fe0e039e944fbbb3cbfd65c4486c936
Sha1:   107233f6f8b1cafb58d247698b244a6b33a4cf41
Sha256: 866e31094ca2f5108ea5356bdd5d9e951cfdac834f3b9b999c4f4d7c25e31402
                                        
                                            GET /collect/?time=1521357928997&pid=21322&url=http%3A%2F%2Fsinglesignon.secured-login.net%2Flogin&pageUrl=http%3A%2F%2Fsinglesignon.secured-login.net%2Flogin&ref=&fmt=js&s=1 HTTP/1.1 
Host: px.ads.linkedin.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://singlesignon.secured-login.net/login

                                         
                                         185.63.144.5
HTTP/1.1 302 Found
                                        
Vary: Accept-Encoding
Server: Play
Location: /collect/?time=1521357928997&pid=21322&url=http%3A%2F%2Fsinglesignon.secured-login.net%2Flogin&pageUrl=http%3A%2F%2Fsinglesignon.secured-login.net%2Flogin&ref=&fmt=js&s=1&cookiesTest=true
Set-Cookie: BizoID=934e74e3-6195-4f01-a885-2ec727658ece; Max-Age=15552000; Expires=Fri, 14 Sep 2018 07:25:29 GMT; Path=/; Domain=ads.linkedin.com; Secure lang=v=2&lang=en-us; Path=/; Domain=ads.linkedin.com lidc="b=OGST08:g=504:u=1:i=1521357929:t=1521444329:s=AQGjknoCwOpnSX5pr8oPJ8EVd6OErwdZ"; Expires=Mon, 19 Mar 2018 07:25:29 GMT; domain=.linkedin.com; Path=/
Content-Length: 20
Content-Encoding: gzip
Date: Sun, 18 Mar 2018 07:25:29 GMT
X-Li-Fabric: prod-lor1
Connection: keep-alive
X-Li-Pop: prod-tln1
X-LI-Proto: http/1.1
X-LI-UUID: 3AYe6fnyHBUA9R+pkSsAAA==


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   20
Md5:    3970e82605c7d109bb348fc94e9eecc0
Sha1:   e03849ea786b9f7b28a35c17949e85a93eb1cff1
Sha256: f5d031af01f137ae07fa71720fab94d16cc8a2a59868766002918b7c240f3967
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=172800
Date: Sun, 18 Mar 2018 07:25:29 GMT
Etag: "5aadeb4d-1d7"
Expires: Tue, 20 Mar 2018 07:25:29 GMT
Last-Modified: Sun, 18 Mar 2018 04:30:05 GMT
Server: ECS (arn/4691)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    5393fa6286a500b3352b95e1a08af14c
Sha1:   89a0209771be4d0c596b058a834293a6fafcb2a8
Sha256: cc166e99f6dfd6be9b71115f6dd6d4b5ca29e624a9055ef0ed0360b2fa0104fa
                                        
                                            GET /ads/ga-audiences?v=1&aip=1&t=sr&_r=4&tid=UA-21999915-1&cid=388872527.1521357921&jid=1170717318&_v=j66&z=1481671213&slf_rd=1&random=2333592363 HTTP/1.1 
Host: www.google.no
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://singlesignon.secured-login.net/login

                                         
                                         216.58.211.3
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Sun, 18 Mar 2018 07:25:29 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 42
X-XSS-Protection: 1; mode=block
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303335,quic=":443"; ma=2592000; v="41,39,35"


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /cm/o/out HTTP/1.1 
Host: d.adroll.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://singlesignon.secured-login.net/login
Cookie: __adroll=46c95ac3238e4637a0fdb0b8eb74a6f9

                                         
                                         54.246.116.149
HTTP/1.1 302 Moved Temporarily
                                        
Cache-Control: no-store, no-cache, must-revalidate
Date: Sun, 18 Mar 2018 07:25:29 GMT
Location: https://us-u.openx.net/w/1.0/sd?id=537103138&val=46c95ac3238e4637a0fdb0b8eb74a6f9
P3P: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA"
Pragma: no-cache
Server: nginx/1.12.1
Set-Cookie: __adroll=46c95ac3238e4637a0fdb0b8eb74a6f9; Version=1; Expires=Wed, 17-Apr-2019 07:25:29 GMT; Max-Age=34128000; Path=/; HttpOnly
Content-Length: 87
Connection: keep-alive


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   87
Md5:    9c1239aee92fe829450db26942e94e3a
Sha1:   e044385488c1de9a18ddfe3652deebffc2d2e7e9
Sha256: a210df7dc6e9edd6a5e674f7b6bc4c266f455ecf75fbf5b17fd3eb084876c69d
                                        
                                            POST /cloudsslsha2g3 HTTP/1.1 
Host: ocsp2.globalsign.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 111
Content-Type: application/ocsp-request
Cookie: __cfduid=d126176d9dc745dce24aa7bc1e1750a421521357921

                                         
                                         104.31.74.124
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 18 Mar 2018 07:25:29 GMT
Content-Length: 1539
Connection: keep-alive
Last-Modified: Sun, 18 Mar 2018 05:24:33 GMT
Expires: Thu, 22 Mar 2018 05:24:33 GMT
Etag: "ffc641581513ccf62fbc3b51d3dc4c3899609163"
Cache-Control: public, no-transform, must-revalidate
CF-Cache-Status: HIT
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 3fd5f73521a042c1-OSL


--- Additional Info ---
Magic:  data
Size:   1539
Md5:    ee2dad20212651d5d87d8ac7b5279871
Sha1:   ffc641581513ccf62fbc3b51d3dc4c3899609163
Sha256: d19d7f892e7e02ddd47641084f5aea80c241593505594b2a6d99998753addbf0
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 116
Content-Type: application/ocsp-request

                                         
                                         178.255.83.1
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 18 Mar 2018 07:25:29 GMT
Server: Apache
Last-Modified: Thu, 15 Mar 2018 13:45:35 GMT
Expires: Thu, 22 Mar 2018 13:45:35 GMT
Etag: 0D933FCDD0897E980A1A392F2366F85B98DAF399
Cache-Control: max-age=367805,public,no-transform,must-revalidate
X-OCSP-Responder-ID: rmdccaocsp27
Content-Length: 472
Connection: close


--- Additional Info ---
Magic:  data
Size:   472
Md5:    4fe3ff1d5949033554ca40b8af07e2f3
Sha1:   0d933fcdd0897e980a1a392f2366f85b98daf399
Sha256: 08651181411eda1671fdc1c51691940e6433b918c711d88cb905b53aca038f41
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         178.255.83.1
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 18 Mar 2018 07:25:29 GMT
Server: Apache
Last-Modified: Fri, 16 Mar 2018 23:02:22 GMT
Expires: Fri, 23 Mar 2018 23:02:22 GMT
Etag: 3140F8195F40A684D2F866E09EBCFC69AA7E64B6
Cache-Control: max-age=487612,public,no-transform,must-revalidate
X-OCSP-Responder-ID: rmdccaocsp35
Content-Length: 727
Connection: close


--- Additional Info ---
Magic:  data
Size:   727
Md5:    1e6b7ff354d4b1466628f41b950055ab
Sha1:   3140f8195f40a684d2f866e09ebcfc69aa7e64b6
Sha256: 7a0900bb632fbf83f0e6b7ab2aef8f9e562278e0520e62e93117056b254cb52e
                                        
                                            POST / HTTP/1.1 
Host: ocsp.usertrust.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         178.255.83.1
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 18 Mar 2018 07:25:30 GMT
Server: Apache
Last-Modified: Fri, 16 Mar 2018 23:02:22 GMT
Expires: Fri, 23 Mar 2018 23:02:22 GMT
Etag: 80054470B49755E53EE7DD1D4F5C2938C746A338
Cache-Control: max-age=487611,public,no-transform,must-revalidate
X-OCSP-Responder-ID: rmdccaocsp35
Content-Length: 471
Connection: close


--- Additional Info ---
Magic:  data
Size:   471
Md5:    0ee7a98213b8353e408661ac8678d8b8
Sha1:   80054470b49755e53ee7dd1d4f5c2938c746a338
Sha256: f8715616333147c4ae373c5e01a5bb1852c39987ed57e42f534d98d050183455
                                        
                                            GET /collect/?time=1521357928997&pid=21322&url=http%3A%2F%2Fsinglesignon.secured-login.net%2Flogin&pageUrl=http%3A%2F%2Fsinglesignon.secured-login.net%2Flogin&ref=&fmt=js&s=1&cookiesTest=true HTTP/1.1 
Host: px.ads.linkedin.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://singlesignon.secured-login.net/login
Cookie: BizoID=934e74e3-6195-4f01-a885-2ec727658ece; lang=v=2&lang=en-us; lidc="b=OGST08:g=504:u=1:i=1521357929:t=1521444329:s=AQGjknoCwOpnSX5pr8oPJ8EVd6OErwdZ"

                                         
                                         185.63.144.5
HTTP/1.1 302 Found
                                        
Vary: Accept-Encoding
Server: Play
Location: https://www.linkedin.com/csp/dtag?_x=%2526s%253D1%2526url%253Dhttp%25253A%25252F%25252Fsinglesignon.secured-login.net%25252Flogin%2526pageUrl%253Dhttp%25253A%25252F%25252Fsinglesignon.secured-login.net%25252Flogin%2526ref%253D%2526cookiesTest%253Dtrue%2526opid%253D21322%2526fmt%253Djs%2526time%253D1521357928997&p=9
Set-Cookie: UserMatchHistory=AQHSPX9GN7QpLAAAAWI3_72NPx8zmZovggOzG-cNuf0S3FtP9G8ne60nTvGkbq1608-KBV9oz_lw; Max-Age=15552000; Expires=Fri, 14 Sep 2018 07:25:29 GMT; Path=/; Domain=ads.linkedin.com; Secure
Content-Length: 20
Content-Encoding: gzip
Date: Sun, 18 Mar 2018 07:25:29 GMT
X-Li-Fabric: prod-lor1
Connection: keep-alive
X-Li-Pop: prod-tln1
X-LI-Proto: http/1.1
X-LI-UUID: Gn2IBfryHBWAXh76kCsAAA==


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   20
Md5:    3970e82605c7d109bb348fc94e9eecc0
Sha1:   e03849ea786b9f7b28a35c17949e85a93eb1cff1
Sha256: f5d031af01f137ae07fa71720fab94d16cc8a2a59868766002918b7c240f3967
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 116
Content-Type: application/ocsp-request

                                         
                                         178.255.83.1
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 18 Mar 2018 07:25:30 GMT
Server: Apache
Last-Modified: Sat, 17 Mar 2018 09:25:37 GMT
Expires: Sat, 24 Mar 2018 09:25:37 GMT
Etag: B19F15D735107467EF12CE26C003C7DD3CA79C1F
Cache-Control: max-age=525006,public,no-transform,must-revalidate
X-OCSP-Responder-ID: rmdccaocsp35
Content-Length: 472
Connection: close


--- Additional Info ---
Magic:  data
Size:   472
Md5:    652732fbe276ea4740084956980d5fee
Sha1:   b19f15d735107467ef12ce26c003c7dd3ca79c1f
Sha256: b604bbf5b570980369a53bd16b8368405c5666db81b1dfe791ac1dcd13d2e85b
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         178.255.83.1
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 18 Mar 2018 07:25:30 GMT
Server: Apache
Last-Modified: Fri, 16 Mar 2018 23:02:22 GMT
Expires: Fri, 23 Mar 2018 23:02:22 GMT
Etag: 775908E9222CF1F6468260836E1F165234DF1F82
Cache-Control: max-age=487611,public,no-transform,must-revalidate
X-OCSP-Responder-ID: rmdccaocsp27
Content-Length: 727
Connection: close


--- Additional Info ---
Magic:  data
Size:   727
Md5:    72b8129455d8b187a5af472100783dd4
Sha1:   775908e9222cf1f6468260836e1f165234df1f82
Sha256: 3f94c69c74ca09f68ae5302f178bc1ca7ad6d0a2ae4b7ef96efd1267b02815f8
                                        
                                            POST / HTTP/1.1 
Host: status.geotrust.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=172800
Date: Sun, 18 Mar 2018 07:25:30 GMT
Etag: "5aad9cc9-1d7"
Expires: Tue, 20 Mar 2018 07:25:30 GMT
Last-Modified: Sat, 17 Mar 2018 22:55:05 GMT
Server: ECS (arn/45C7)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    58b20e4d6b23fd6282dd24ce25f505d7
Sha1:   e8143bced86bbfe83f003471344c4747be895c5e
Sha256: 6cbdee7be3f937dbd29fc5e8ef2ed4048c06ab98fd0d2816df8cb858d8d5f54a
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=172800
Date: Sun, 18 Mar 2018 07:25:30 GMT
Etag: "5aadd059-1d7"
Expires: Tue, 20 Mar 2018 07:25:30 GMT
Last-Modified: Sun, 18 Mar 2018 02:35:05 GMT
Server: ECS (arn/45C7)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    fe11d201bcf52f0cbcd54d0a85bf1a45
Sha1:   aee46c98ef9e251cf89458d2bfa17cf83b72f870
Sha256: 26a3d138fec34cda74829fc6293bb43b1866c8ed53d75a39fbda0dc5d2c9d4af
                                        
                                            GET /sync?dsp_id=44&user_id=NDZjOTVhYzMyMzhlNDYzN2EwZmRiMGI4ZWI3NGE2Zjk HTTP/1.1 
Host: x.bidswitch.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://singlesignon.secured-login.net/login

                                         
                                         18.195.132.183
HTTP/1.1 302 Moved Temporarily
                                        
Server: nginx/1.12.0
Date: Sun, 18 Mar 2018 07:25:30 GMT
Content-Length: 0
Connection: keep-alive
Keep-Alive: timeout=10
Cache-Control: no-cache, no-store, must-revalidate
Location: https://x.bidswitch.net/ul_cb/sync?dsp_id=44&user_id=NDZjOTVhYzMyMzhlNDYzN2EwZmRiMGI4ZWI3NGE2Zjk
P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
Set-Cookie: tuuid=48e4e34f-5ca5-4b3f-92c9-a05d834a63db; path=/; expires=Mon, 18-Mar-2019 07:25:30 GMT; domain=.bidswitch.net tuuid_last_update=1521357930; path=/; expires=Mon, 18-Mar-2019 07:25:30 GMT; domain=.bidswitch.net c=1521357930; path=/; expires=Mon, 18-Mar-2019 07:25:30 GMT; domain=.bidswitch.net


--- Additional Info ---
                                        
                                            GET /adroll/pixel?user_id=NDZjOTVhYzMyMzhlNDYzN2EwZmRiMGI4ZWI3NGE2Zjk HTTP/1.1 
Host: sync.outbrain.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://singlesignon.secured-login.net/login

                                         
                                         151.101.130.2
HTTP/1.1 200 OK
                                        
Set-Cookie: adrl=NDZjOTVhYzMyMzhlNDYzN2EwZmRiMGI4ZWI3NGE2Zjk; Max-Age=7776000; Expires=Sat, 16 Jun 2018 07:25:30 GMT; Path=/; Domain=.outbrain.com
Content-Encoding: gzip
Strict-Transport-Security: max-age=0; includeSubDomains;
Accept-Ranges: bytes, bytes
Via: 1.1 varnish, 1.1 varnish
Backend-IP: 104.156.90.25
Transfer-Encoding: chunked
Date: Sun, 18 Mar 2018 07:25:30 GMT
Connection: keep-alive
X-Served-By: cache-jfk8125-JFK, cache-fra19139-FRA
X-Cache: MISS, MISS
X-Cache-Hits: 0, 0
X-Timer: S1521357930.141632,VS0,VE82
Traffic-Path: NYDC1, JFK, FRA, Europe1


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   122
Md5:    d75acbbd5d5579f45a734605d28133ae
Sha1:   0ec7554ac8d8a791cfcd9304e78e9df97d65867a
Sha256: 27a33a614a18464c58a30a064a51c2ce18df98d94e780f7aa76b95e17b5b652c
                                        
                                            GET /adsid/integrator.js?domain=singlesignon.secured-login.net HTTP/1.1 
Host: adservice.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://singlesignon.secured-login.net/login

                                         
                                         216.58.207.226
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
                                        
P3P: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
Timing-Allow-Origin: *
Cache-Control: private, no-cache, no-store
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Date: Sun, 18 Mar 2018 07:25:29 GMT
Server: cafe
X-XSS-Protection: 1; mode=block
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303335,quic=":443"; ma=2592000; v="41,39,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   105
Md5:    08d8ad1692c0573b7f6a93ce0e6c7492
Sha1:   cc6b5fa6bbf2aee1afd6fbaefa36b11285e9b049
Sha256: d647283fac1dab813b321a67948c61cac768f4aa61b660b56983fe0328b0f4d4
                                        
                                            GET /cm/taboola/out HTTP/1.1 
Host: d.adroll.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://singlesignon.secured-login.net/login
Cookie: __adroll=46c95ac3238e4637a0fdb0b8eb74a6f9

                                         
                                         54.246.116.149
HTTP/1.1 302 Moved Temporarily
                                        
Cache-Control: no-store, no-cache, must-revalidate
Date: Sun, 18 Mar 2018 07:25:29 GMT
Location: https://trc.taboola.com/sg/adroll-network/1/rtb-h/?taboola_hm=NDZjOTVhYzMyMzhlNDYzN2EwZmRiMGI4ZWI3NGE2Zjk
P3P: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA"
Pragma: no-cache
Server: nginx/1.12.1
Set-Cookie: __adroll=46c95ac3238e4637a0fdb0b8eb74a6f9; Version=1; Expires=Wed, 17-Apr-2019 07:25:28 GMT; Max-Age=34128000; Path=/; HttpOnly
Content-Length: 111
Connection: keep-alive


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   111
Md5:    d3b765aa88cdc3f78954cf71192ebbab
Sha1:   5431840b38dbe1485f9eae4c500107bae6be13e7
Sha256: 5f9b10feb70952d4772a99068fb05f0a54c7839b9088f73129f088f87b9967f3
                                        
                                            GET /cm/index/out HTTP/1.1 
Host: d.adroll.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://singlesignon.secured-login.net/login
Cookie: __adroll=46c95ac3238e4637a0fdb0b8eb74a6f9

                                         
                                         54.246.116.149
HTTP/1.1 302 Moved Temporarily
                                        
Cache-Control: no-store, no-cache, must-revalidate
Date: Sun, 18 Mar 2018 07:25:29 GMT
Location: https://dsum-sec.casalemedia.com/rum?cm_dsp_id=105&external_user_id=NDZjOTVhYzMyMzhlNDYzN2EwZmRiMGI4ZWI3NGE2Zjk&expiration=1552893929
P3P: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA"
Pragma: no-cache
Server: nginx/1.12.1
Set-Cookie: __adroll=46c95ac3238e4637a0fdb0b8eb74a6f9; Version=1; Expires=Wed, 17-Apr-2019 07:25:29 GMT; Max-Age=34128000; Path=/; HttpOnly
Content-Length: 139
Connection: keep-alive


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   139
Md5:    8d3cfc31817369b13a2780ad78e00a91
Sha1:   5b431b4bbb377b4e1f444ac0ac657444420d5c6f
Sha256: 932a38625bfd4523ef185a67a2bf8d80b2396c570731f603ce60b98cdb28d9f5
                                        
                                            GET /ul_cb/sync?dsp_id=44&user_id=NDZjOTVhYzMyMzhlNDYzN2EwZmRiMGI4ZWI3NGE2Zjk HTTP/1.1 
Host: x.bidswitch.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://singlesignon.secured-login.net/login
Cookie: tuuid=48e4e34f-5ca5-4b3f-92c9-a05d834a63db; tuuid_last_update=1521357930; c=1521357930

                                         
                                         18.195.132.183
HTTP/1.1 302 Moved Temporarily
                                        
Server: nginx/1.12.0
Date: Sun, 18 Mar 2018 07:25:30 GMT
Content-Length: 0
Connection: keep-alive
Keep-Alive: timeout=10
Cache-Control: no-cache, no-store, must-revalidate
Location: //pixel.rubiconproject.com/tap.php?v=15796&nid=2760&put=48e4e34f-5ca5-4b3f-92c9-a05d834a63db&expires=30
P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
Set-Cookie: tuuid=48e4e34f-5ca5-4b3f-92c9-a05d834a63db; path=/; expires=Mon, 18-Mar-2019 07:25:30 GMT; domain=.bidswitch.net tuuid_last_update=1521357930; path=/; expires=Mon, 18-Mar-2019 07:25:30 GMT; domain=.bidswitch.net


--- Additional Info ---
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=172800
Date: Sun, 18 Mar 2018 07:25:30 GMT
Etag: "5aadf003-1d7"
Expires: Tue, 20 Mar 2018 07:25:30 GMT
Last-Modified: Sun, 18 Mar 2018 04:50:11 GMT
Server: ECS (arn/45E2)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    b2ff18b71be401bf43ab74c2c8c8af67
Sha1:   577efb664c6b2af1fb9025c48917ac0b0ac83e2f
Sha256: 607a3835e28e3e3c7eebfc76e4c9fdfc81497839da26a171af1127483ae6ae78
                                        
                                            GET /w/1.0/sd?id=537103138&val=46c95ac3238e4637a0fdb0b8eb74a6f9 HTTP/1.1 
Host: us-u.openx.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://singlesignon.secured-login.net/login

                                         
                                         173.241.240.143
HTTP/1.1 302 Moved Temporarily
                                        
Set-Cookie: i=a044a847-9ae2-4905-90b8-45f6997e87f4|1521357930; Version=1; Expires=Mon, 18-Mar-2019 07:25:30 GMT; Max-Age=31536000; Domain=.openx.net; Path=/
Server: OXGW/15.0.0
P3P: CP="CUR ADM OUR NOR STA NID"
Location: https://us-u.openx.net/w/1.0/sd?cc=1&id=537103138&val=46c95ac3238e4637a0fdb0b8eb74a6f9
Date: Sun, 18 Mar 2018 07:25:30 GMT
Content-Length: 0


--- Additional Info ---
                                        
                                            GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MzMwNiZ0bD01MjU2MDA&piggybackCookie=NDZjOTVhYzMyMzhlNDYzN2EwZmRiMGI4ZWI3NGE2Zjk HTTP/1.1 
Host: simage2.pubmatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://singlesignon.secured-login.net/login

                                         
                                         198.47.127.15
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Date: Sun, 18 Mar 2018 07:25:30 GMT
Server: Apache/2.2.24 (Unix) mod_ssl/2.2.24 OpenSSL/1.0.1e-fips mod_fastcgi/2.4.6
Set-Cookie: KRTBCOOKIE_10=22808-NDZjOTVhYzMyMzhlNDYzN2EwZmRiMGI4ZWI3NGE2Zjk&KRTB&22883-NDZjOTVhYzMyMzhlNDYzN2EwZmRiMGI4ZWI3NGE2Zjk; domain=pubmatic.com; expires=Tue, 17-Apr-2018 07:25:30 GMT; path=/ PugT=1521357930; domain=pubmatic.com; expires=Tue, 17-Apr-2018 07:25:30 GMT; path=/ PUBRETARGET=dummy; domain=pubmatic.com; expires=Sun, 18-Mar-2018 07:25:30 GMT; path=/ PUBMDCID=3; domain=pubmatic.com; expires=Sat, 16-Jun-2018 07:25:30 GMT; path=/
X-lat: Pug22022:0:300
Content-Length: 1
P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC"
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Connection: close


--- Additional Info ---
Magic:  very short file (no magic)
Size:   1
Md5:    7215ee9c7d9dc229d2921a40e899ec5f
Sha1:   b858cb282617fb0956d960215c8e84d1ccf909c6
Sha256: 36a9e7f1c95b82ffb99743e0c5c4ce95d83c9a430aac59f84ef3cbfab6145068
                                        
                                            POST / HTTP/1.1 
Host: status.geotrust.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=172800
Date: Sun, 18 Mar 2018 07:25:30 GMT
Etag: "5aade1ee-1d7"
Expires: Tue, 20 Mar 2018 07:25:30 GMT
Last-Modified: Sun, 18 Mar 2018 03:50:06 GMT
Server: ECS (arn/45DF)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    e8e83a6c645058bb8df0534863804907
Sha1:   f030f4afddc23432f41bbfcb9fd52f0bea64f529
Sha256: 4f103106270e0cbb8b414dc66b4f2b723979f03ccbb5b6cb6a2644f982518234
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=172800
Date: Sun, 18 Mar 2018 07:25:30 GMT
Etag: "5aadbc6b-1d7"
Expires: Tue, 20 Mar 2018 07:25:30 GMT
Last-Modified: Sun, 18 Mar 2018 01:10:03 GMT
Server: ECS (arn/4692)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    73588f2fe2d5bd5908f6e2216e64a077
Sha1:   c78cd45a144ac0e74009e5fc5ae898d57b875d27
Sha256: 00608bdc172882c88ab375c1d71745c966ede09fb71b4b7cf8fae2b1b43e09c9
                                        
                                            GET /ups/55980/sync?uid=NDZjOTVhYzMyMzhlNDYzN2EwZmRiMGI4ZWI3NGE2Zjk&_origin=1 HTTP/1.1 
Host: pixel.advertising.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://singlesignon.secured-login.net/login

                                         
                                         52.57.13.0
HTTP/1.1 302 Found
                                        
Date: Sun, 18 Mar 2018 07:25:30 GMT
Content-Length: 0
Connection: keep-alive
Set-Cookie: APID=UP897513f3-2a7d-11e8-bd96-067f32916608;Version=1;Domain=.advertising.com;Path=/;Max-Age=31622400;Expires=Tue, 19-Mar-2019 07:25:30 GMT
P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV
Location: https://pixel.advertising.com/ups/55980/sync?uid=NDZjOTVhYzMyMzhlNDYzN2EwZmRiMGI4ZWI3NGE2Zjk&_origin=1&verify=true


--- Additional Info ---
                                        
                                            GET /cm/g/out?google_nid=adroll5 HTTP/1.1 
Host: d.adroll.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://singlesignon.secured-login.net/login
Cookie: __adroll=46c95ac3238e4637a0fdb0b8eb74a6f9

                                         
                                         54.246.116.149
HTTP/1.1 302 Moved Temporarily
                                        
Cache-Control: no-store, no-cache, must-revalidate
Date: Sun, 18 Mar 2018 07:25:30 GMT
Location: https://cm.g.doubleclick.net/pixel?google_sc&google_nid=artb&google_hm=RslawyOORjeg_bC463Sm-Q&google_ula=1535926
P3P: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA"
Pragma: no-cache
Server: nginx/1.12.1
Set-Cookie: __adroll=46c95ac3238e4637a0fdb0b8eb74a6f9; Version=1; Expires=Wed, 17-Apr-2019 07:25:29 GMT; Max-Age=34128000; Path=/; HttpOnly
Content-Length: 118
Connection: keep-alive


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   118
Md5:    b2b3a8a7d12909f473e5577f7a7755fd
Sha1:   39f62d137f48ecc4f2e9008b2fdc07a9faac5f65
Sha256: 16de585c27d359a5228556e03986c28756c4e8dd6b889bd6d78ec4ea1a7ad6e0
                                        
                                            GET /cm/r/out HTTP/1.1 
Host: d.adroll.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://singlesignon.secured-login.net/login
Cookie: __adroll=46c95ac3238e4637a0fdb0b8eb74a6f9

                                         
                                         54.246.116.149
HTTP/1.1 302 Moved Temporarily
                                        
Cache-Control: no-store, no-cache, must-revalidate
Date: Sun, 18 Mar 2018 07:25:29 GMT
Location: https://ads.yahoo.com/pixel?id=2498203&t=2&piggyback=https%3A%2F%2Fads.yahoo.com%2Fcms%2Fv1%3Fesig%3D1~bf4e7dc4546a90c08591652d78a230d3f2ef5733%26nwid%3D10001032567%26sigv%3D1
P3P: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA"
Pragma: no-cache
Server: nginx/1.12.1
Set-Cookie: __adroll=46c95ac3238e4637a0fdb0b8eb74a6f9; Version=1; Expires=Wed, 17-Apr-2019 07:25:28 GMT; Max-Age=34128000; Path=/; HttpOnly
Content-Length: 181
Connection: keep-alive


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   181
Md5:    a337d6eefc96a6a7e3c49729614293b7
Sha1:   d884b23791a9c66c3e6d30d3280430b2eaeb28c6
Sha256: 01928e639cb766d15e39dded419541a8953944e79cd475c0926d67654b8901f7
                                        
                                            GET /cm/l/out HTTP/1.1 
Host: d.adroll.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://singlesignon.secured-login.net/login
Cookie: __adroll=46c95ac3238e4637a0fdb0b8eb74a6f9

                                         
                                         54.246.116.149
HTTP/1.1 302 Moved Temporarily
                                        
Cache-Control: no-store, no-cache, must-revalidate
Date: Sun, 18 Mar 2018 07:25:30 GMT
Location: https://idsync.rlcdn.com/377928.gif?partner_uid=46c95ac3238e4637a0fdb0b8eb74a6f9
P3P: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA"
Pragma: no-cache
Server: nginx/1.12.1
Set-Cookie: __adroll=46c95ac3238e4637a0fdb0b8eb74a6f9; Version=1; Expires=Wed, 17-Apr-2019 07:25:29 GMT; Max-Age=34128000; Path=/; HttpOnly
Content-Length: 86
Connection: keep-alive


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   86
Md5:    49b287f60b7651ba89dec0afa70e3898
Sha1:   246f56bcfe9ce592fc3a3da9ed98b8bb1a20bc51
Sha256: b790c754c645158822b11c1659409830522b18709ce98968b58e683275c06b31
                                        
                                            GET /cm/x/out HTTP/1.1 
Host: d.adroll.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://singlesignon.secured-login.net/login
Cookie: __adroll=46c95ac3238e4637a0fdb0b8eb74a6f9

                                         
                                         54.246.116.149
HTTP/1.1 302 Moved Temporarily
                                        
Cache-Control: no-store, no-cache, must-revalidate
Date: Sun, 18 Mar 2018 07:25:30 GMT
Location: https://ib.adnxs.com/pxj?bidder=172&seg=802787&action=setuid('NDZjOTVhYzMyMzhlNDYzN2EwZmRiMGI4ZWI3NGE2Zjk')
P3P: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA"
Pragma: no-cache
Server: nginx/1.12.1
Set-Cookie: __adroll=46c95ac3238e4637a0fdb0b8eb74a6f9; Version=1; Expires=Wed, 17-Apr-2019 07:25:30 GMT; Max-Age=34128000; Path=/; HttpOnly
Content-Length: 113
Connection: keep-alive


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   113
Md5:    25cd8895140a7b12427152a1246ba829
Sha1:   a9e861242fac6e968cd8ca4410f9c2b43360a549
Sha256: 55d3fbeabe3d8ee72bc8995bfd94b46611502ecbe64988073b062d21c0101ded
                                        
                                            GET /w/1.0/sd?cc=1&id=537103138&val=46c95ac3238e4637a0fdb0b8eb74a6f9 HTTP/1.1 
Host: us-u.openx.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://singlesignon.secured-login.net/login
Cookie: i=a044a847-9ae2-4905-90b8-45f6997e87f4|1521357930

                                         
                                         173.241.240.143
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Vary: Accept
Server: OXGW/15.0.0
Pragma: no-cache
P3P: CP="CUR ADM OUR NOR STA NID"
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Date: Sun, 18 Mar 2018 07:25:30 GMT
Cache-Control: private, max-age=0, no-cache
Transfer-Encoding: chunked
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix, max speed
Size:   446
Md5:    a94399740f280bff3e53596c23a16aa0
Sha1:   c8288a42a2c24df5da34816c0d17a13c12a3858b
Sha256: bfb43618f88fe80f312232587952459a92ab6975b883552f773e847333d12663
                                        
                                            GET /ups/55980/sync?uid=NDZjOTVhYzMyMzhlNDYzN2EwZmRiMGI4ZWI3NGE2Zjk&_origin=1&verify=true HTTP/1.1 
Host: pixel.advertising.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://singlesignon.secured-login.net/login
Cookie: APID=UP897513f3-2a7d-11e8-bd96-067f32916608

                                         
                                         52.57.13.0
HTTP/1.1 204 No Content
                                        
Date: Sun, 18 Mar 2018 07:25:30 GMT
Content-Length: 0
Connection: keep-alive
Set-Cookie: IDSYNC=1770~1crj;Version=1;Domain=.advertising.com;Path=/;Max-Age=31622400;Expires=Tue, 19-Mar-2019 07:25:29 GMT APID=UP897513f3-2a7d-11e8-bd96-067f32916608;Version=1;Domain=.advertising.com;Path=/;Max-Age=31622400;Expires=Tue, 19-Mar-2019 07:25:29 GMT
P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV


--- Additional Info ---
                                        
                                            GET /adsid/integrator.js?domain=singlesignon.secured-login.net HTTP/1.1 
Host: adservice.google.no
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://singlesignon.secured-login.net/login

                                         
                                         216.58.207.226
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
                                        
P3P: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
Timing-Allow-Origin: *
Cache-Control: private, no-cache, no-store
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Date: Sun, 18 Mar 2018 07:25:30 GMT
Server: cafe
X-XSS-Protection: 1; mode=block
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303335,quic=":443"; ma=2592000; v="41,39,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   105
Md5:    08d8ad1692c0573b7f6a93ce0e6c7492
Sha1:   cc6b5fa6bbf2aee1afd6fbaefa36b11285e9b049
Sha256: d647283fac1dab813b321a67948c61cac768f4aa61b660b56983fe0328b0f4d4
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         216.58.211.14
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 18 Mar 2018 07:25:30 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    4411e436bcf4d32864109675a984ea2f
Sha1:   f12d941a7c6a577906f0627a29b2ba9077a47036
Sha256: dbdeb925e718d151a320ece862364bf3ebfce4eafa0115dc59fd26998fe1c2d9
                                        
                                            GET /tap.php?v=15796&nid=2760&put=48e4e34f-5ca5-4b3f-92c9-a05d834a63db&expires=30 HTTP/1.1 
Host: pixel.rubiconproject.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://singlesignon.secured-login.net/login

                                         
                                         62.67.193.85
HTTP/1.1 307 Temporary Redirect
                                        
Set-Cookie: c=1; Path=/
Location: /tap.php?cookie_redirect=1&v=15796&nid=2760&put=48e4e34f-5ca5-4b3f-92c9-a05d834a63db&expires=30
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
Pragma: no-cache
Cache-Control: no-cache, no-store, must-revalidate
Expires: 0
Content-Length: 0
Date: Sun, 18 Mar 2018 07:25:29 GMT
Server: Rubicon Project


--- Additional Info ---
                                        
                                            GET /rum?cm_dsp_id=105&external_user_id=NDZjOTVhYzMyMzhlNDYzN2EwZmRiMGI4ZWI3NGE2Zjk&expiration=1552893929 HTTP/1.1 
Host: dsum-sec.casalemedia.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://singlesignon.secured-login.net/login

                                         
                                         104.123.132.211
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html; charset=iso-8859-1
                                        
Server: Apache
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI"
Location: https://dsum-sec.casalemedia.com/rum?cm_dsp_id=105&external_user_id=NDZjOTVhYzMyMzhlNDYzN2EwZmRiMGI4ZWI3NGE2Zjk&expiration=1552893929&C=1
Content-Length: 333
Expires: Sun, 18 Mar 2018 07:25:30 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Sun, 18 Mar 2018 07:25:30 GMT
Connection: keep-alive
Set-Cookie: CMID=Wq4UarlQJuQAADlFqCoAAAAe;domain=casalemedia.com;path=/;expires=Mon, 18 Mar 2019 07:25:30 GMT CMPS=3259;domain=casalemedia.com;path=/;expires=Sat, 16 Jun 2018 07:25:30 GMT


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   333
Md5:    a9e307798c19954bc4989ed766029612
Sha1:   d2545b076675195901ee779879ef782ae70ebe87
Sha256: ee53310be81932c2fad40f848f4a598d2007a8186ae1a2b4f3a85c036ce7c463
                                        
                                            GET /tap.php?v=194538&nid=3644&put=NDZjOTVhYzMyMzhlNDYzN2EwZmRiMGI4ZWI3NGE2Zjk&expires=365 HTTP/1.1 
Host: pixel.rubiconproject.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://singlesignon.secured-login.net/login

                                         
                                         62.67.193.85
HTTP/1.1 307 Temporary Redirect
                                        
Set-Cookie: c=1; Path=/
Location: /tap.php?cookie_redirect=1&v=194538&nid=3644&put=NDZjOTVhYzMyMzhlNDYzN2EwZmRiMGI4ZWI3NGE2Zjk&expires=365
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
Pragma: no-cache
Cache-Control: no-cache, no-store, must-revalidate
Expires: 0
Content-Length: 0
Date: Sun, 18 Mar 2018 07:25:30 GMT
Server: Rubicon Project


--- Additional Info ---
                                        
                                            GET /pixel?google_sc&google_nid=artb&google_hm=RslawyOORjeg_bC463Sm-Q&google_ula=1535926 HTTP/1.1 
Host: cm.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://singlesignon.secured-login.net/login

                                         
                                         172.217.22.162
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Location: https://cm.g.doubleclick.net/pixel?google_sc=&google_nid=artb&google_hm=RslawyOORjeg_bC463Sm-Q&google_ula=1535926&google_tc=
Date: Sun, 18 Mar 2018 07:25:30 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
Server: HTTP server (unknown)
Content-Length: 337
X-XSS-Protection: 1; mode=block
Set-Cookie: test_cookie=CheckForPermission; expires=Sun, 18-Mar-2018 07:40:30 GMT; path=/; domain=.doubleclick.net
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303335,quic=":443"; ma=2592000; v="41,39,35"


--- Additional Info ---
Magic:  HTML document text
Size:   337
Md5:    8d1e3cbdf91bdef49ccda160c0a0dae0
Sha1:   8a5c7e63ac53bd6125c2736f0d4fc29b52b7aee0
Sha256: 65f1cd62855f64c6c8e8a0c3901ad39e16a562da2a6d304b2e104452e8794966
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=172800
Date: Sun, 18 Mar 2018 07:25:30 GMT
Etag: "5aadbff9-139"
Expires: Tue, 20 Mar 2018 07:25:30 GMT
Last-Modified: Sun, 18 Mar 2018 01:25:13 GMT
Server: ECS (arn/4667)
X-Cache: HIT
Content-Length: 313


--- Additional Info ---
Magic:  data
Size:   313
Md5:    82a0683b90112824020ac2d770e24b5c
Sha1:   7f42ea153e761fc73455204d84c60fbfb7c51618
Sha256: aabd10dc0e0d50a385abe8053a30540e6389907b04446f757ac8e7d3e9988ceb
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=172800
Date: Sun, 18 Mar 2018 07:25:30 GMT
Etag: "5aad9b9b-1d7"
Expires: Tue, 20 Mar 2018 07:25:30 GMT
Last-Modified: Sat, 17 Mar 2018 22:50:03 GMT
Server: ECS (arn/459B)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    801ecfb38b582e241d5a50d29cf59f1d
Sha1:   4e506090444eddf38682fcca32acb08eab575f43
Sha256: 0e113e4bae8dfec585f4974fe25cbc6ed85ac1f1bafe8c5c65d593636911d545
                                        
                                            GET /csp/dtag?_x=%2526s%253D1%2526url%253Dhttp%25253A%25252F%25252Fsinglesignon.secured-login.net%25252Flogin%2526pageUrl%253Dhttp%25253A%25252F%25252Fsinglesignon.secured-login.net%25252Flogin%2526ref%253D%2526cookiesTest%253Dtrue%2526opid%253D21322%2526fmt%253Djs%2526time%253D1521357928997&p=9 HTTP/1.1 
Host: www.linkedin.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://singlesignon.secured-login.net/login
Cookie: lidc="b=OGST08:g=504:u=1:i=1521357929:t=1521444329:s=AQGjknoCwOpnSX5pr8oPJ8EVd6OErwdZ"

                                         
                                         91.225.248.129
HTTP/1.1 302 Found
                                        
Server: Apache-Coyote/1.1
Cache-Control: no-store, private
Pragma: no-cache
Location: https://dc.ads.linkedin.com/collect/?pid=6883&s=1&url=http%3A%2F%2Fsinglesignon.secured-login.net%2Flogin&pageUrl=http%3A%2F%2Fsinglesignon.secured-login.net%2Flogin&ref=&cookiesTest=true&opid=21322&fmt=js&time=1521357928997
Content-Language: en-US
Content-Encoding: gzip
Vary: Accept-Encoding
Date: Sun, 18 Mar 2018 07:25:29 GMT
X-FS-UUID: fbea0231faf21c15401c078afb2a0000
Strict-Transport-Security: max-age=2592000
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
content-security-policy: default-src *; connect-src 'self' static.licdn.com media.licdn.com static-exp1.licdn.com static-exp2.licdn.com media-exp1.licdn.com media-exp2.licdn.com https://media-src.linkedin.com/media/ wss://*.linkedin.com; img-src data: blob: *; font-src data: *; style-src 'unsafe-inline' 'self' static-src.linkedin.com *.licdn.com; script-src 'report-sample' 'unsafe-inline' 'unsafe-eval' 'self' platform.linkedin.com spdy.linkedin.com static-src.linkedin.com *.ads.linkedin.com *.licdn.com; object-src 'none'; media-src blob: *; frame-ancestors http://*.adnxs.com https://*.adnxs.com http://*.linkedin.com https://*.linkedin.com http://*.slideshare.net https://*.slideshare.net https://*.msn.com http://*.msn.com http://*.outlook.com https://*.outlook.com translate.googleusercontent.com pemberly.www.linkedin.com:4443; report-uri https://www.linkedin.com/lite/contentsecurity?f=ad
X-Li-Fabric: prod-lor1
Set-Cookie: bcookie="v=2&4eb5e14f-8fb3-4abc-8e77-9b60dd09ec2c"; domain=.linkedin.com; Path=/; Expires=Tue, 17-Mar-2020 19:03:02 GMT bscookie="v=1&201803180725301c400370-c8da-4287-8f30-897f4cfca3ccAQHtGAmKsBhpAayKeb9_QWZCCNQeddy9"; domain=.www.linkedin.com; Path=/; Secure; Expires=Tue, 17-Mar-2020 19:03:02 GMT; HttpOnly
Transfer-Encoding: chunked
Connection: keep-alive
X-Li-Pop: PROD-IDB2
X-LI-Proto: http/1.1
X-LI-UUID: ++oCMfryHBVAHAeK+yoAAA==


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   20
Md5:    3970e82605c7d109bb348fc94e9eecc0
Sha1:   e03849ea786b9f7b28a35c17949e85a93eb1cff1
Sha256: f5d031af01f137ae07fa71720fab94d16cc8a2a59868766002918b7c240f3967
                                        
                                            GET /rum?cm_dsp_id=105&external_user_id=NDZjOTVhYzMyMzhlNDYzN2EwZmRiMGI4ZWI3NGE2Zjk&expiration=1552893929&C=1 HTTP/1.1 
Host: dsum-sec.casalemedia.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://singlesignon.secured-login.net/login
Cookie: CMID=Wq4UarlQJuQAADlFqCoAAAAe; CMPS=3259

                                         
                                         104.123.132.211
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: Apache
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI"
Expires: Sun, 18 Mar 2018 07:25:30 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Sun, 18 Mar 2018 07:25:30 GMT
Content-Length: 43
Connection: keep-alive
Set-Cookie: CMID=Wq4UarlQJuQAADlFqCoAAAAe;domain=casalemedia.com;path=/;expires=Mon, 18 Mar 2019 07:25:30 GMT CMPS=3259;domain=casalemedia.com;path=/;expires=Sat, 16 Jun 2018 07:25:30 GMT CMPRO=1136;domain=casalemedia.com;path=/;expires=Sat, 16 Jun 2018 07:25:30 GMT CMST=Wq4UalquFGoA;domain=casalemedia.com;path=/;expires=Mon, 19 Mar 2018 07:25:30 GMT CMDD=;domain=casalemedia.com;path=/;expires=Mon, 19 Mar 2018 07:25:30 GMT CMRUM3=695aae146a2760NDZjOTVhYzMyMzhlNDYzN2EwZmRiMGI4ZWI3NGE2Zjk;domain=casalemedia.com;path=/;expires=Mon, 18 Mar 2019 07:25:30 GMT CMSC=Wq4Uag**;domain=casalemedia.com;path=/;


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    325472601571f31e1bf00674c368d335
Sha1:   2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
Sha256: b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
                                        
                                            GET /tap.php?cookie_redirect=1&v=194538&nid=3644&put=NDZjOTVhYzMyMzhlNDYzN2EwZmRiMGI4ZWI3NGE2Zjk&expires=365 HTTP/1.1 
Host: pixel.rubiconproject.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://singlesignon.secured-login.net/login
Cookie: c=1

                                         
                                         62.67.193.85
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
X-RPHost: jJu22HPWeO2xXppXnXnxBw
Set-Cookie: rpb=194538%3D1; Domain=.rubiconproject.com; Expires=Tue, 17-Apr-2018 07:25:30 GMT; Path=/ put_3644=NDZjOTVhYzMyMzhlNDYzN2EwZmRiMGI4ZWI3NGE2Zjk; Domain=.rubiconproject.com; Expires=Mon, 18-Mar-2019 07:25:30 GMT; Path=/ rpx=194538%3D71951%2C0%2C1%2C%2C; Domain=.pixel.rubiconproject.com; Expires=Tue, 17-Apr-2018 07:25:30 GMT; Path=/ khaos=JEWH8C6A-X-MAJH; Domain=.rubiconproject.com; Expires=Sun, 16-Sep-2018 19:25:30 GMT; Path=/
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
Pragma: no-cache
Cache-Control: no-cache, no-store, must-revalidate
Expires: 0
Connection: keep-alive
Content-Length: 42
Date: Sun, 18 Mar 2018 07:25:30 GMT
Server: Rubicon Project


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /tap.php?cookie_redirect=1&v=15796&nid=2760&put=48e4e34f-5ca5-4b3f-92c9-a05d834a63db&expires=30 HTTP/1.1 
Host: pixel.rubiconproject.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://singlesignon.secured-login.net/login
Cookie: c=1

                                         
                                         62.67.193.85
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
X-RPHost: jJu22HPWeO2xXppXnXnxBw
Set-Cookie: rpb=15796%3D1; Domain=.rubiconproject.com; Expires=Tue, 17-Apr-2018 07:25:30 GMT; Path=/ put_2760=48e4e34f-5ca5-4b3f-92c9-a05d834a63db; Domain=.rubiconproject.com; Expires=Tue, 17-Apr-2018 07:25:30 GMT; Path=/ rpx=15796%3D71951%2C0%2C1%2C%2C; Domain=.pixel.rubiconproject.com; Expires=Tue, 17-Apr-2018 07:25:30 GMT; Path=/ khaos=JEWH8C5K-V-M93E; Domain=.rubiconproject.com; Expires=Sun, 16-Sep-2018 19:25:30 GMT; Path=/
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
Pragma: no-cache
Cache-Control: no-cache, no-store, must-revalidate
Expires: 0
Connection: keep-alive
Content-Length: 42
Date: Sun, 18 Mar 2018 07:25:30 GMT
Server: Rubicon Project


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /pixel?google_sc=&google_nid=artb&google_hm=RslawyOORjeg_bC463Sm-Q&google_ula=1535926&google_tc= HTTP/1.1 
Host: cm.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://singlesignon.secured-login.net/login
Cookie: test_cookie=CheckForPermission

                                         
                                         172.217.22.162
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Location: https://d.adroll.com/cm/g/in?google_ula=1535926,0
Date: Sun, 18 Mar 2018 07:25:30 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
Server: HTTP server (unknown)
Content-Length: 246
X-XSS-Protection: 1; mode=block
Set-Cookie: test_cookie=; domain=.doubleclick.net; path=/; expires=Mon, 21 Jul 2008 23:59:00 GMT IDE=AHWqTUnPx8ONvHI2ZcJ7FyD3LBfvj0LwZwF4t5j7aj_5XXl7IGjj_8JIVw; expires=Tue, 17-Mar-2020 07:25:30 GMT; path=/; domain=.doubleclick.net; HttpOnly
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303335,quic=":443"; ma=2592000; v="41,39,35"


--- Additional Info ---
Magic:  HTML document text
Size:   246
Md5:    40d2b36d5c31c32bab1a4a300077069f
Sha1:   e498c12f5e6e0ab107098d70415ab69182a33234
Sha256: 8694eb9d8b8b957e709c402ca82d70e0fc1c0f2003642b9d131a8ee5cc05e5b0
                                        
                                            GET /pxj?bidder=172&seg=802787&action=setuid(%27NDZjOTVhYzMyMzhlNDYzN2EwZmRiMGI4ZWI3NGE2Zjk%27) HTTP/1.1 
Host: ib.adnxs.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://singlesignon.secured-login.net/login

                                         
                                         185.33.223.209
HTTP/1.1 302 Found
Content-Type: text/html; charset=utf-8
                                        
Server: nginx/1.13.4
Date: Sun, 18 Mar 2018 07:25:32 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Location: https://ib.adnxs.com/bounce?%2Fpxj%3Fbidder%3D172%26seg%3D802787%26action%3Dsetuid%28%2527NDZjOTVhYzMyMzhlNDYzN2EwZmRiMGI4ZWI3NGE2Zjk%2527%29
AN-X-Request-Uuid: ac8c85c4-b761-43d5-a77a-1f591957b26b
Set-Cookie: sess=1; Path=/; Max-Age=86400; Expires=Mon, 19-Mar-2018 07:25:32 GMT; Domain=.adnxs.com; HttpOnly uuid2=3723413320434798446; Path=/; Max-Age=7776000; Expires=Sat, 16-Jun-2018 07:25:32 GMT; Domain=.adnxs.com; HttpOnly
X-Proxy-Origin: 77.40.129.123; 77.40.129.123; 314.bm-nginx-loadbalancer.mgmt.ams1; *.adnxs.com; 185.33.220.24:80


--- Additional Info ---
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=172800
Date: Sun, 18 Mar 2018 07:25:30 GMT
Etag: "5aaddf92-1d7"
Expires: Tue, 20 Mar 2018 07:25:30 GMT
Last-Modified: Sun, 18 Mar 2018 03:40:02 GMT
Server: ECS (arn/46BA)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    b2dd062436001ed6aa08d0515972c5ac
Sha1:   005602afcd4cea70e1abaf90bb8efd3c07416b43
Sha256: b4754bef4c6a2c6696e43ced86c5404f8e4dcf450d6ea0971f74a9ccd62b0f12
                                        
                                            GET /cm/g/in?google_ula=1535926,0 HTTP/1.1 
Host: d.adroll.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://singlesignon.secured-login.net/login
Cookie: __adroll=46c95ac3238e4637a0fdb0b8eb74a6f9

                                         
                                         54.246.116.149
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Cache-Control: no-store, no-cache, must-revalidate
Date: Sun, 18 Mar 2018 07:25:30 GMT
P3P: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA"
Pragma: no-cache
Server: nginx/1.12.1
Set-Cookie: __adroll=46c95ac3238e4637a0fdb0b8eb74a6f9-g_1521357930; Version=1; Expires=Wed, 17-Apr-2019 07:25:29 GMT; Max-Age=34128000; Path=/; HttpOnly
X-Result: g.-1.-1.1535926.0.-1
Content-Length: 35
Connection: keep-alive


--- Additional Info ---
Magic:  GIF image data, version 87a, 2 x 2
Size:   35
Md5:    d783ae3760db1e4d2c5b1599ebcf30be
Sha1:   be29fcfa80c518eeb93840ee42932c3663d59e1d
Sha256: ce4e964329e64bb7128c1c1d602433a744b48f6dbc1212e65b2b5184bd8c6617
                                        
                                            GET /bounce?%2Fpxj%3Fbidder%3D172%26seg%3D802787%26action%3Dsetuid%28%2527NDZjOTVhYzMyMzhlNDYzN2EwZmRiMGI4ZWI3NGE2Zjk%2527%29 HTTP/1.1 
Host: ib.adnxs.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://singlesignon.secured-login.net/login
Cookie: sess=1; uuid2=3723413320434798446

                                         
                                         185.33.223.209
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx/1.13.4
Date: Sun, 18 Mar 2018 07:25:32 GMT
Content-Length: 43
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
AN-X-Request-Uuid: f1f16123-a0d3-4bd5-ad21-405164a90d06
Set-Cookie: anj=dTM7k!M4/8DYRWSF']wIg2E?`njPSm!]tbPB*SQLOsH`E.g3VsUJD0[; Path=/; Max-Age=7776000; Expires=Sat, 16-Jun-2018 07:25:32 GMT; Domain=.adnxs.com; HttpOnly sess=1; Path=/; Max-Age=86400; Expires=Mon, 19-Mar-2018 07:25:32 GMT; Domain=.adnxs.com; HttpOnly uuid2=3723413320434798446; Path=/; Max-Age=7776000; Expires=Sat, 16-Jun-2018 07:25:32 GMT; Domain=.adnxs.com; HttpOnly
X-Proxy-Origin: 77.40.129.123; 77.40.129.123; 314.bm-nginx-loadbalancer.mgmt.ams1; *.adnxs.com; 185.33.223.248:80


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    592ebefc7104d681d57852665e9ad514
Sha1:   15cdf8df32aa251dd6dd590a60bf9cf74474e7c5
Sha256: 4b5b6b15c6255109e06720cce42a06d3aead8b7874423d9c52cb0303212c25ef
                                        
                                            GET /sg/adroll-network/1/rtb-h/?taboola_hm=NDZjOTVhYzMyMzhlNDYzN2EwZmRiMGI4ZWI3NGE2Zjk HTTP/1.1 
Host: trc.taboola.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://singlesignon.secured-login.net/login

                                         
                                         151.101.194.2
HTTP/1.1 204 No Content
                                        
Server: nginx
Set-Cookie: t_gid=38348325-e9df-45df-90c8-91b360b20748-tuct1a799ea;Path=/;Domain=.taboola.com;Expires=Mon, 18-Mar-2019 07:25:30 GMT taboola_usg=GgQQmc5A;Path=/;Domain=.taboola.com;Expires=Mon, 18-Mar-2019 07:25:30 GMT
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Accept-Ranges: bytes
Date: Sun, 18 Mar 2018 07:25:30 GMT
Via: 1.1 varnish
Connection: keep-alive
X-Served-By: cache-fra19127-FRA
X-Cache: MISS
X-Cache-Hits: 0
X-Timer: S1521357931.959489,VS0,VE8


--- Additional Info ---
                                        
                                            GET /collect/?pid=6883&s=1&url=http%3A%2F%2Fsinglesignon.secured-login.net%2Flogin&pageUrl=http%3A%2F%2Fsinglesignon.secured-login.net%2Flogin&ref=&cookiesTest=true&opid=21322&fmt=js&time=1521357928997 HTTP/1.1 
Host: dc.ads.linkedin.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://singlesignon.secured-login.net/login
Cookie: BizoID=934e74e3-6195-4f01-a885-2ec727658ece; lang=v=2&lang=en-us; lidc="b=OGST08:g=504:u=1:i=1521357929:t=1521444329:s=AQGjknoCwOpnSX5pr8oPJ8EVd6OErwdZ"; UserMatchHistory=AQHSPX9GN7QpLAAAAWI3_72NPx8zmZovggOzG-cNuf0S3FtP9G8ne60nTvGkbq1608-KBV9oz_lw; bcookie="v=2&4eb5e14f-8fb3-4abc-8e77-9b60dd09ec2c"

                                         
                                         185.63.144.5
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Vary: Accept-Encoding
Server: Play
Content-Length: 20
Content-Encoding: gzip
Date: Sun, 18 Mar 2018 07:25:30 GMT
X-Li-Fabric: prod-lor1
Connection: keep-alive
X-Li-Pop: prod-tln1
X-LI-Proto: http/1.1
X-LI-UUID: WKDRRfryHBXAFAqCkCsAAA==


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   20
Md5:    3970e82605c7d109bb348fc94e9eecc0
Sha1:   e03849ea786b9f7b28a35c17949e85a93eb1cff1
Sha256: f5d031af01f137ae07fa71720fab94d16cc8a2a59868766002918b7c240f3967
                                        
                                            GET /pub-config/r20160913/ca-pub-2333199711088866.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://singlesignon.secured-login.net/login

                                         
                                         216.58.207.226
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Length: 125
Date: Sun, 18 Mar 2018 07:23:09 GMT
Expires: Sun, 18 Mar 2018 19:23:09 GMT
Last-Modified: Sat, 17 Mar 2018 21:28:30 GMT
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=43200
Age: 142
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303335,quic=":443"; ma=2592000; v="41,39,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   125
Md5:    21aea2dae0239adff4f9f063cdacfc76
Sha1:   ce64c497ac1dd86393da79e8cea239de113c1de7
Sha256: a59ee78166b8467dd7dd8c7acb03d8df7d16cf4a04f45c8558366df1c33b868f
                                        
                                            GET /pagead/js/r20180312/r20170110/show_ads_impl.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://singlesignon.secured-login.net/login

                                         
                                         216.58.207.226
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="http://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Sun, 18 Mar 2018 07:25:31 GMT
Expires: Sun, 18 Mar 2018 07:25:31 GMT
Cache-Control: private, max-age=1209600
Etag: 14775448175836879520
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 67921
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   67921
Md5:    2e0dc3ce3af37474af395d852ccd92b2
Sha1:   fee24b24b5f9b8d96530f97c48098963063332ba
Sha256: cf91ff7efa473ad94c5dca193292b150ccc9239872038b87a341b6345850e6ce
                                        
                                            GET /pagead/html/r20180312/r20170110/zrt_lookup.html HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://singlesignon.secured-login.net/login
Cookie: IDE=AHWqTUnPx8ONvHI2ZcJ7FyD3LBfvj0LwZwF4t5j7aj_5XXl7IGjj_8JIVw

                                         
                                         216.58.207.226
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
Date: Mon, 12 Mar 2018 20:30:57 GMT
Expires: Mon, 26 Mar 2018 20:30:57 GMT
Etag: 7893540961313292660
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Server: cafe
Content-Length: 6819
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=1209600
Age: 471274
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303335,quic=":443"; ma=2592000; v="41,39,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   6819
Md5:    8caea4ee531aab9f5d9328f80b7b23f3
Sha1:   3c1b05353b141a9e742555def5993bee1ec31ecd
Sha256: 0c3ec59d66f4780431ae46c09d53fe92c858ea2f05c6a5e02a17ab56d4428ff4
                                        
                                            GET /pagead/js/r20180312/r20170110/osd.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://singlesignon.secured-login.net/login

                                         
                                         216.58.207.226
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Mon, 12 Mar 2018 20:52:04 GMT
Expires: Mon, 26 Mar 2018 20:52:04 GMT
Etag: 13992280071806881209
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 28091
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=1209600
Age: 470007
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303335,quic=":443"; ma=2592000; v="41,39,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   28091
Md5:    45284af7729f0fc6ed8dba9d9d36e393
Sha1:   eb277ba403bec121ac1769852559fa5b92c332a3
Sha256: 2498bc65eae86855da0b1b59b214f7bd06d4cdb6fbac8990c80543d5af938fff
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=172800
Date: Sun, 18 Mar 2018 07:25:31 GMT
Etag: "5aadeda2-1d7"
Expires: Tue, 20 Mar 2018 07:25:31 GMT
Last-Modified: Sun, 18 Mar 2018 04:40:02 GMT
Server: ECS (arn/4692)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    f7ab996a49f0235394c5c93d986ffd31
Sha1:   b495c3fce3d8f425178ec062efddfd42f67847d0
Sha256: 935f57cdb4d4a6ef28d3fda79b53530c3a2444c8102cbf6a97404fef6d73eb61
                                        
                                            GET /pagead/ads?client=ca-pub-2333199711088866&output=html&adk=3123021140&adf=807048394&lmt=1521357915&loeid=368226211%2C38893312&plat=1%3A1081352%2C2%3A1082376%2C8%3A32776%2C9%3A32776%2C16%3A8388608%2C26%3A32768&format=0x0&url=http%3A%2F%2Fsinglesignon.secured-login.net%2Flogin&ea=0&flash=10.0.45&pra=5&wgl=0&adsid=NT&dt=1521357931037&bpp=22&fdt=30&idt=197&shv=r20180312&cbv=r20170110&saldr=aa&correlator=3969860449930&frm=20&ga_vid=388872527.1521357921&ga_sid=1521357931&ga_hid=1013464081&ga_fc=0&pv=2&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=0&ady=0&biw=1176&bih=754&abxe=1&scr_x=0&scr_y=0&eid=368226201%2C38893302%2C21061122%2C191880502%2C33895413%2C20040069&oid=3&rx=0&eae=6&fc=784&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cr%7C&abl=CS&ppjl=f&fu=16&bc=1&ifi=0&dtd=220 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://singlesignon.secured-login.net/login
Cookie: IDE=AHWqTUnPx8ONvHI2ZcJ7FyD3LBfvj0LwZwF4t5j7aj_5XXl7IGjj_8JIVw

                                         
                                         216.58.207.226
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Date: Sun, 18 Mar 2018 07:25:31 GMT
Server: cafe
Cache-Control: private
X-XSS-Protection: 1; mode=block
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303335,quic=":443"; ma=2592000; v="41,39,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   64
Md5:    0781e865abae44cf8b10dc725d63f539
Sha1:   c9f5024f2a546880e819749c32e23830fef111cb
Sha256: 24a7e2c0a5b68aec6126a39465b792b761aab892d7060d78fbab1e14a4cf3363
                                        
                                            GET /pixel?id=2498203&t=2&piggyback=https%3A%2F%2Fads.yahoo.com%2Fcms%2Fv1%3Fesig%3D1~bf4e7dc4546a90c08591652d78a230d3f2ef5733%26nwid%3D10001032567%26sigv%3D1 HTTP/1.1 
Host: ads.yahoo.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://singlesignon.secured-login.net/login

                                         
                                         217.12.15.83
HTTP/1.1 200 OK
                                        
Date: Sun, 18 Mar 2018 07:25:31 GMT
Content-Length: 0
Server: ATS
Age: 0
Connection: keep-alive
Strict-Transport-Security: max-age=31536000
Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
Public-Key-Pins-Report-Only: max-age=2592000; pin-sha256="2fRAUXyxl4A1/XHrKNBmc8bTkzA7y4FB/GLJuNAzCqY="; pin-sha256="2oALgLKofTmeZvoZ1y/fSZg7R9jPMix8eVA6DH4o/q8="; pin-sha256="47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU="; pin-sha256="cAajgxHlj7GTSEIzIYIQxmEloOSoJq7VOaxWHfv72QM="; pin-sha256="Gtk3r1evlBrs0hG3fm3VoM19daHexDWP//OCmeeMr5M="; pin-sha256="i7WTqTvh0OioIruIfFR4kMPnBqrS2rdiVPl/s2uC/CY="; pin-sha256="iduNzFNKpwYZ3se/XV+hXcbUonlLw09QPa6AYUwpu4M="; pin-sha256="I/Lt/z7ekCWanjD0Cvj5EqXls2lOaThEA0H2Bg4BT/o="; pin-sha256="JbQbUG5JMJUoI6brnx0x3vZF6jilxsapbXGVfjhN8Fg="; pin-sha256="lnsM2T/O9/J84sJFdnrpsFp3awZJ+ZZbYpCWhGloaHI="; pin-sha256="r/mIkG3eEpVdm+u/ko/cwxzOMo1bk4TyHIlByibiA5E="; pin-sha256="SVqWumuteCQHvVIaALrOZXuzVVVeS7f4FGxxu6V+es4="; pin-sha256="uUwZgwDOxcBXrQcntwu+kYFpkiVkOaezL0WYEZ3anJc="; pin-sha256="UZJDjsNp1+4M5x9cbbdflB779y5YRBcV6Z6rBMLIrO4="; pin-sha256="Wd8xe/qfTwq3ylFNd3IpaqLHZbh2ZNCLluVzmeNkcpw="; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; includeSubdomains; report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-hpkp-report-only"


--- Additional Info ---
                                        
                                            GET /dashboard/index HTTP/1.1 
Host: singlesignon.secured-login.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         52.4.77.110
HTTP/1.1 302 Found
Content-Type: text/html; charset=utf-8
                                        
Date: Sun, 18 Mar 2018 07:25:15 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx/1.4.6 (Ubuntu)
Status: 302 Found
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Location: http://singlesignon.secured-login.net/login
Cache-Control: no-cache
Set-Cookie: _knowbe4_session=Ly9NZHJETkNGTHEvdXJkbXQ2ZUc5QndTT09iaDVjbDNOYStwTHVNRXZOaW1mZThqdHlBTGtYOFJPdkxJTUFWODF0dWtBcHJFZGJWRkpmeTgrZTNHYXVTT0R4UWZtdVh2cnl0UDk1S1VTaGluMFBHSTJtclVINkVhSmhkM1V4LzV6ZTJGaUJZT28xcHlNRE9FNzBPMFlRcFBZQUNUbDFhTDFidFJoMnM4ekVKRHp5aWxRdmNiU2txMGt3OHJKeXdQOGZPOGdmeVdaS2dpdU9yajdLS2JJWTJqK01IM3hGbkplbGVSRUhUR3NQSFFaU25lUnJCN3Bsc0tYS3NhdTFxOC0tdDlMcnEvWkpHYWVCWk0relcwU3FkQT09--262bac263eacc45dd2734ef1a04bff4c1e7092d3; path=/; HttpOnly
X-Request-Id: d6d9e44a-d0e6-4072-a267-55b36eb88ee1
X-Runtime: 0.003869


--- Additional Info ---

Alerts:
  Blacklists:
    - fortinet: Phishing
                                        
                                            GET /377928.gif?partner_uid=46c95ac3238e4637a0fdb0b8eb74a6f9 HTTP/1.1 
Host: idsync.rlcdn.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://singlesignon.secured-login.net/login

                                         
                                         0.0.0.0
                                        


--- Additional Info ---
                                        
                                            GET /px.js?gtmcb=897672987 HTTP/1.1 
Host: px.spiceworks.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://singlesignon.secured-login.net/login

                                         
                                         192.230.77.92
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Date: Sun, 18 Mar 2018 07:25:21 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: visid_incap_1145931=Tnlz/McUScGSfLDQeTmYJWAUrloAAAAAQUIPAAAAAAA6Zdj/e8BFievWwvq90CqR; expires=Sun, 17 Mar 2019 12:21:47 GMT; path=/; Domain=.spiceworks.com incap_ses_728_1145931=PYAKOTmQ53ZSWGPCc2AaCmAUrloAAAAAFeV7qjjxmPNfjx4uTXLZtg==; path=/; Domain=.spiceworks.com ___utmvmXyuvZMZB=twzNObjGiAo; path=/; Max-Age=900 ___utmvaXyuvZMZB=qulZpbz; path=/; Max-Age=900 ___utmvbXyuvZMZB=wZp XdaOgalu: xtl; path=/; Max-Age=900
X-Iinfo: 3-13166549-13166567 NNNN CT(0 0 0) RT(1521357919454 1136) q(0 0 0 -1) r(1 1) U5
X-CDN: Incapsula
Content-Encoding: gzip


--- Additional Info ---