ocsp.starfieldtech.com/
192.124.249.22 2.1 kB IP 192.124.249.22:0
Hash 170d2167af6311f7e6faf2d382731ba1
e8e7856c54862f9f7cfb5a992ed1f4ba25689e6c
1e78710554f00ab82cd0d474aa019ece778fa323e7c082c8ba549041fd8a2d8d
POST / HTTP/1.1
Host: ocsp.starfieldtech.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Wed, 08 May 2024 11:40:40 GMT
Content-Type: application/ocsp-response
Content-Length: 2149
Connection: keep-alive
X-Sucuri-ID: 19022
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Wed, 08 May 2024 01:49:17 GMT
Expires: Thu, 09 May 2024 01:49:17 GMT
ETag: "e8e7856c54862f9f7cfb5a992ed1f4ba25689e6c"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
verifiedwebpage.com/go?ehash=ec55f96bdbee115719939c545d55f6bb&product=22875&ar=55&cid=2617&lid=1610&slhash=ca3d1c910d8285fdc928a0b7af721c0c&mtaid=mpmta&cid2=[s8]
104.18.20.187302 Found 95 B URL User Request GET HTTP/2 verifiedwebpage.com/go?ehash=ec55f96bdbee115719939c545d55f6bb&product=22875&ar=55&cid=2617&lid=1610&slhash=ca3d1c910d8285fdc928a0b7af721c0c&mtaid=mpmta&cid2=[s8]
IP 104.18.20.187:443
Certificate IssuerGoogle Trust Services LLC
Subjectverifiedwebpage.com
FingerprintB6:7C:0D:93:CD:D6:56:A3:74:B9:46:38:F0:C7:A5:31:BC:5F:AF:56
ValidityWed, 10 Apr 2024 21:43:08 GMT - Tue, 09 Jul 2024 21:43:07 GMT
File type HTML document, ASCII text
Hash 7463fd6a7971695dc57ad702fb28ff2a
39df2364fba73ded8f4ccaf78d11defe55f63859
8741b98a16b83178e0c66a9f97b6f0d0171b442ded00d89f5293f0bea7cae122
GET /go?ehash=ec55f96bdbee115719939c545d55f6bb&product=22875&ar=55&cid=2617&lid=1610&slhash=ca3d1c910d8285fdc928a0b7af721c0c&mtaid=mpmta&cid2=[s8] HTTP/1.1
Host: verifiedwebpage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Wed, 08 May 2024 11:40:40 GMT
content-type: text/html; charset=UTF-8
location: https://www.p3lstrk.com/2MGNK7T/CXW7M6/?sub1=3415433504656332612
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
vary: User-Agent
cf-cache-status: DYNAMIC
set-cookie: PHPSESSID=e44d279620753722721626a2d4be126c; path=/
pixel_session_hash_22875=3415433504656332612; expires=Fri, 07-Jun-2024 11:40:39 GMT; Max-Age=2592000; path=/; secure; HttpOnly; SameSite=None
bt_tracking_product_22875=4580d5252777e7e4478a654863da9c06ab9db1f171406aaa0e282f2b3364f89a; expires=Fri, 10-May-2024 11:40:39 GMT; Max-Age=172800
__cf_bm=Q_f6lFcX1oJTFLU.VeRJlT3EFpc9geXlyn9ZNC6rDG4-1715168440-1.0.1.1-PpTEaDtuRufP5VJVLpVAKntYGAHJD87NKKaGl1hJ1CjYRAG.v0mNPTYvpyIcU18zjMEDYF9UhTg85Ddpm6Kd6w; path=/; expires=Wed, 08-May-24 12:10:40 GMT; domain=.verifiedwebpage.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 88092d1bfd665697-OSL
X-Firefox-Spdy: h2
pro.oxfordclub.com/m/2314530?s1=cee8e8e68744411fbedf3a15cf269ac8
192.135.136.168301 Moved Permanently 223 B URL User Request GET HTTP/1.1 pro.oxfordclub.com/m/2314530?s1=cee8e8e68744411fbedf3a15cf269ac8
IP 192.135.136.168:443
Certificate IssuerLet's Encrypt
Subjectordertracking2.pubsvs.com
Fingerprint3A:B9:2F:4C:6D:99:BE:5E:94:3F:BD:D3:C0:34:93:33:6D:CA:DC:6E
ValidityFri, 19 Apr 2024 17:28:36 GMT - Thu, 18 Jul 2024 17:28:35 GMT
File type HTML document, ASCII text, with CRLF line terminators
Hash 0fb358592ef37db6afa3c438c64d3be9
bdad3c074e7619c4fc6ee3a86aa7b3508a9b1d6f
dbdb709639b98497856ce528805314395182f88ef9362e2001665f757829cc28
GET /m/2314530?s1=cee8e8e68744411fbedf3a15cf269ac8 HTTP/1.1
Host: pro.oxfordclub.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Cache-Control: private
Content-Type: text/html; charset=utf-8
Location: https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=cee8e8e68744411fbedf3a15cf269ac8&h=true
Date: Wed, 08 May 2024 11:40:40 GMT
Content-Length: 223
Set-Cookie: 2314530=2743372; expires=Tue, 28-May-2024 11:40:41 GMT; path=/; HttpOnly
BIGipServerIRIS_PROD_HTTPS_POOL=!oLrLvRORFY+pvj80QCUGrw3uOK3bWToZZUVMrHBAdbY3uI01LkMOWYZSTtJ/kZpZD8dNAYaPhm0AeMA=; path=/; Httponly; Secure
Strict-Transport-Security: max-age=63072000; includeSubDomains
pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=cee8e8e68744411fbedf3a15cf269ac8&h=true
192.135.136.168200 OK 7.2 kB URL User Request GET HTTP/1.1 pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=cee8e8e68744411fbedf3a15cf269ac8&h=true
IP 192.135.136.168:443
Certificate IssuerLet's Encrypt
Subjectordertracking2.pubsvs.com
Fingerprint3A:B9:2F:4C:6D:99:BE:5E:94:3F:BD:D3:C0:34:93:33:6D:CA:DC:6E
ValidityFri, 19 Apr 2024 17:28:36 GMT - Thu, 18 Jul 2024 17:28:35 GMT
File type HTML document, Unicode text, UTF-8 text, with very long lines (1213), with CRLF, LF line terminators
Hash bb88f849fa35f4e72266000d1340beae
1e83c6c9bc95f34fac914949f1ba9a0e2328f010
cf8f5d1afeff919abd9ddab78fa4e6bc80fd33bb6a3b1e3fb391e33ab4a398db
GET /p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=cee8e8e68744411fbedf3a15cf269ac8&h=true HTTP/1.1
Host: pro.oxfordclub.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: 2314530=2743372; BIGipServerIRIS_PROD_HTTPS_POOL=!oLrLvRORFY+pvj80QCUGrw3uOK3bWToZZUVMrHBAdbY3uI01LkMOWYZSTtJ/kZpZD8dNAYaPhm0AeMA=
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: private
Content-Type: text/html; charset=utf-8
Content-Encoding: gzip
Vary: Accept-Encoding
Set-Cookie: NBRK4404=; expires=Fri, 31-Dec-9999 23:59:59 GMT; path=/; HttpOnly
Referrer-Policy: no-referrer-when-downgrade
Date: Wed, 08 May 2024 11:40:41 GMT
Content-Length: 7170
Strict-Transport-Security: max-age=63072000; includeSubDomains
cdnjs.cloudflare.com/ajax/libs/animate.css/4.0.0/animate.min.css
104.17.24.14200 OK 4.2 kB URL GET HTTP/2 cdnjs.cloudflare.com/ajax/libs/animate.css/4.0.0/animate.min.css
IP 104.17.24.14:443
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=cee8e8e68744411fbedf3a15cf269ac8&h=true
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File type ASCII text, with very long lines (65346)
Hash 39aca93cfd689b19cc6241e859642a92
5022a36b3d077c80b0b4a550ddfb280aae28dafe
eb2798553d86c6b1806d208320f645bd79eab0cebcf22176bddbc648e8f3ccd4
GET /ajax/libs/animate.css/4.0.0/animate.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 08 May 2024 11:40:42 GMT
content-type: text/css; charset=utf-8
content-length: 4216
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb436a8-11848"
last-modified: Thu, 07 May 2020 16:26:16 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 674557
expires: Mon, 28 Apr 2025 11:40:42 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qYv1wGA865LfXC0EFzC5TXlmbY0Wqhbvdn3EzUEk9iA%2FLEvnzsNse%2FzA9iTuQiTqFcbRn5ODz7cvAXuVYw9c%2BQ2X8B45nid%2B1HoWWIkF7e1UTpTrdVMArg2eWzgcyX9tSe45zH%2Fe"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 88092d2c7c8c56be-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
pro.oxfordclub.com/p/Scripts/Common.js
192.135.136.168200 OK 1.1 kB URL GET HTTP/1.1 pro.oxfordclub.com/p/Scripts/Common.js
IP 192.135.136.168:443
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=cee8e8e68744411fbedf3a15cf269ac8&h=true
Certificate IssuerLet's Encrypt
Subjectordertracking2.pubsvs.com
Fingerprint3A:B9:2F:4C:6D:99:BE:5E:94:3F:BD:D3:C0:34:93:33:6D:CA:DC:6E
ValidityFri, 19 Apr 2024 17:28:36 GMT - Thu, 18 Jul 2024 17:28:35 GMT
File type Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Hash 2fa1e7a35bfa376eff7f1426fc4a8afa
008b48dbd95a158542969743c18d0bc33e0a9384
857d94bd23b6437baa66255e1d507ad4a23d75ef9a271fb3e1303dc7dd0aced9
GET /p/Scripts/Common.js HTTP/1.1
Host: pro.oxfordclub.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=cee8e8e68744411fbedf3a15cf269ac8&h=true
DNT: 1
Connection: keep-alive
Cookie: 2314530=2743372; BIGipServerIRIS_PROD_HTTPS_POOL=!oLrLvRORFY+pvj80QCUGrw3uOK3bWToZZUVMrHBAdbY3uI01LkMOWYZSTtJ/kZpZD8dNAYaPhm0AeMA=; NBRK4404=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Thu, 01 Feb 2024 06:42:24 GMT
Accept-Ranges: bytes
ETag: "c49cbad0d954da1:0"
Vary: Accept-Encoding
Referrer-Policy: no-referrer-when-downgrade
Date: Wed, 08 May 2024 11:40:41 GMT
Content-Length: 1140
Strict-Transport-Security: max-age=63072000; includeSubDomains
fast.wistia.com/assets/external/E-v1.js
151.101.2.132200 OK 137 kB URL GET HTTP/2 fast.wistia.com/assets/external/E-v1.js
IP 151.101.2.132:443
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=cee8e8e68744411fbedf3a15cf269ac8&h=true
Certificate IssuerGlobalSign nv-sa
Subjectfast.wistia.com
Fingerprint75:69:0C:BF:54:26:59:0B:9A:83:E3:04:94:DE:EB:3F:E5:F6:6D:66
ValidityThu, 04 Apr 2024 00:50:10 GMT - Tue, 06 May 2025 00:50:09 GMT
File type JavaScript source, ASCII text, with very long lines (65474)
Size 137 kB (136901 bytes)
Hash 052600afd1ecbeb8e6a746d8cf9c3f52
5a3e3c163dcc90715b224b038e03b4a1ad3c1918
977e141ac40c89736da0671fe69d3a86f88e9b611794e2903776ad7cf885664f
GET /assets/external/E-v1.js HTTP/1.1
Host: fast.wistia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
last-modified: Mon, 06 May 2024 19:22:13 GMT
etag: "a03c52076e315125a988c69d823bee22"
x-amz-server-side-encryption: AES256
content-encoding: br
content-type: text/javascript
server: AmazonS3
via: 1.1 varnish, 1.1 varnish
cache-control: public, max-age=3600
access-control-allow-origin: *
timing-allow-origin: *
accept-ranges: bytes
date: Wed, 08 May 2024 11:40:42 GMT
age: 1040
x-served-by: cache-iad-kiad7000133-IAD, cache-hel1410024-HEL
x-cache: HIT, HIT
x-cache-hits: 61, 237
x-timer: S1715168442.346240,VS0,VE0
vary: Accept-Encoding
strict-transport-security: max-age=0
x-ecma-v: modern
x-browser: firefox
x-browser-version: 96
asset-version: 28e29ceb2b43efa40a2a9a4feeda1b13bcd24ac3
content-length: 136901
X-Firefox-Spdy: h2
code.jquery.com/jquery-3.3.1.min.js
151.101.66.137200 OK 30 kB URL GET HTTP/2 code.jquery.com/jquery-3.3.1.min.js
IP 151.101.66.137:443
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=cee8e8e68744411fbedf3a15cf269ac8&h=true
Certificate IssuerSectigo Limited
Subject*.jquery.com
FingerprintD2:19:0A:AD:CE:BB:9C:61:17:5D:29:4B:A2:54:E8:C6:91:B8:F9:8D
ValidityTue, 11 Jul 2023 00:00:00 GMT - Sun, 14 Jul 2024 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (65451)
Hash a09e13ee94d51c524b7e2a728c7d4039
0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae
160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef
GET /jquery-3.3.1.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pro.oxfordclub.com
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-1538f"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Wed, 08 May 2024 11:40:42 GMT
age: 20367839
x-served-by: cache-lga13622-LGA, cache-hel1410032-HEL
x-cache: HIT, HIT
x-cache-hits: 36, 264021
x-timer: S1715168442.394176,VS0,VE0
vary: Accept-Encoding
content-length: 30288
X-Firefox-Spdy: h2
pro.oxfordclub.com/p/Scripts/HideContent.js
192.135.136.168200 OK 466 B URL GET HTTP/1.1 pro.oxfordclub.com/p/Scripts/HideContent.js
IP 192.135.136.168:443
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=cee8e8e68744411fbedf3a15cf269ac8&h=true
Certificate IssuerLet's Encrypt
Subjectordertracking2.pubsvs.com
Fingerprint3A:B9:2F:4C:6D:99:BE:5E:94:3F:BD:D3:C0:34:93:33:6D:CA:DC:6E
ValidityFri, 19 Apr 2024 17:28:36 GMT - Thu, 18 Jul 2024 17:28:35 GMT
File type JavaScript source, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Hash cc54a637e514fddfe0be2e7c2d062e5b
a0f97813508d22d71f015b93cc8dfdcee65acdfd
580942b09dd77a53c0501f35a1d6c61cbcff1d504a6efb0dfa5d77cbdb1af741
GET /p/Scripts/HideContent.js HTTP/1.1
Host: pro.oxfordclub.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=cee8e8e68744411fbedf3a15cf269ac8&h=true
DNT: 1
Connection: keep-alive
Cookie: 2314530=2743372; BIGipServerIRIS_PROD_HTTPS_POOL=!oLrLvRORFY+pvj80QCUGrw3uOK3bWToZZUVMrHBAdbY3uI01LkMOWYZSTtJ/kZpZD8dNAYaPhm0AeMA=; NBRK4404=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Thu, 01 Feb 2024 06:42:24 GMT
Accept-Ranges: bytes
ETag: "c49cbad0d954da1:0"
Vary: Accept-Encoding
Referrer-Policy: no-referrer-when-downgrade
Date: Wed, 08 May 2024 11:40:41 GMT
Content-Length: 466
Strict-Transport-Security: max-age=63072000; includeSubDomains
use.typekit.net/myz0yns.css
23.33.119.19200 OK 723 B URL GET HTTP/2 use.typekit.net/myz0yns.css
IP 23.33.119.19:443
ASN #20940 Akamai International B.V.
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=cee8e8e68744411fbedf3a15cf269ac8&h=true
Certificate IssuerDigiCert Inc
Subjectuse.typekit.net
Fingerprint15:AD:3F:8A:55:B7:BC:20:D8:70:5B:06:E0:D2:92:7C:BE:C6:E0:56
ValidityThu, 01 Feb 2024 00:00:00 GMT - Mon, 03 Mar 2025 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (516)
Hash 2e7b43c19a9fef8e02459d18badd437a
eeb7ce8dda91f0c7aa5bd3f16a0a737f827d5158
0ae53ddd770100cf31ea14d22ee92b85050e48deb00d76e02ea6384edf30ee10
GET /myz0yns.css HTTP/1.1
Host: use.typekit.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: text/css;charset=utf-8
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains;
cache-control: private, max-age=600, stale-while-revalidate=604800
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
content-encoding: gzip
content-length: 723
date: Wed, 08 May 2024 11:40:42 GMT
X-Firefox-Spdy: h2
p.typekit.net/p.css?s=1&k=myz0yns&ht=tk&f=2007.2008.2011.2012&a=87036888&app=typekit&e=css
23.33.119.26200 OK 5 B URL GET HTTP/2 p.typekit.net/p.css?s=1&k=myz0yns&ht=tk&f=2007.2008.2011.2012&a=87036888&app=typekit&e=css
IP 23.33.119.26:443
ASN #20940 Akamai International B.V.
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=cee8e8e68744411fbedf3a15cf269ac8&h=true
Certificate IssuerDigiCert Inc
Subjectuse.typekit.net
Fingerprint15:AD:3F:8A:55:B7:BC:20:D8:70:5B:06:E0:D2:92:7C:BE:C6:E0:56
ValidityThu, 01 Feb 2024 00:00:00 GMT - Mon, 03 Mar 2025 23:59:59 GMT
Hash 83d24d4b43cc7eef2b61e66c95f3d158
f0cafc285ee23bb6c28c5166f305493c4331c84d
1c0ff118a4290c99f39c90abb38703a866e47251b23cca20266c69c812ccafeb
GET /p.css?s=1&k=myz0yns&ht=tk&f=2007.2008.2011.2012&a=87036888&app=typekit&e=css HTTP/1.1
Host: p.typekit.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://use.typekit.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: text/css
content-length: 5
last-modified: Tue, 07 Mar 2023 19:56:00 GMT
etag: "640796d0-5"
cache-control: public, max-age=604800
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
accept-ranges: bytes
date: Wed, 08 May 2024 11:40:42 GMT
X-Firefox-Spdy: h2
pro.oxfordclub.com/p/Scripts/exitsplash.js
192.135.136.168200 OK 2.7 kB URL GET HTTP/1.1 pro.oxfordclub.com/p/Scripts/exitsplash.js
IP 192.135.136.168:443
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=cee8e8e68744411fbedf3a15cf269ac8&h=true
Certificate IssuerLet's Encrypt
Subjectordertracking2.pubsvs.com
Fingerprint3A:B9:2F:4C:6D:99:BE:5E:94:3F:BD:D3:C0:34:93:33:6D:CA:DC:6E
ValidityFri, 19 Apr 2024 17:28:36 GMT - Thu, 18 Jul 2024 17:28:35 GMT
File type JavaScript source, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Hash 4be89f6e2195d99e7c63c983c053429f
f0bb7ae25fa74b28c6cabaddb65e4ddb3be87423
02e1862c23b8216b6e54326209b9698c756058974ce647a52b98e10317f86be1
GET /p/Scripts/exitsplash.js HTTP/1.1
Host: pro.oxfordclub.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=cee8e8e68744411fbedf3a15cf269ac8&h=true
DNT: 1
Connection: keep-alive
Cookie: 2314530=2743372; BIGipServerIRIS_PROD_HTTPS_POOL=!oLrLvRORFY+pvj80QCUGrw3uOK3bWToZZUVMrHBAdbY3uI01LkMOWYZSTtJ/kZpZD8dNAYaPhm0AeMA=; NBRK4404=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Thu, 01 Feb 2024 06:42:24 GMT
Accept-Ranges: bytes
ETag: "084ad0d954da1:0"
Vary: Accept-Encoding
Referrer-Policy: no-referrer-when-downgrade
Date: Wed, 08 May 2024 11:40:42 GMT
Content-Length: 2737
Strict-Transport-Security: max-age=63072000; includeSubDomains
s3.amazonaws.com/assets.oxfordclub.com/promo/brk/oil/styles.css
52.217.203.24200 OK 26 kB URL GET HTTP/1.1 s3.amazonaws.com/assets.oxfordclub.com/promo/brk/oil/styles.css
IP 52.217.203.24:443
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=cee8e8e68744411fbedf3a15cf269ac8&h=true
Certificate IssuerAmazon
Subjects3.amazonaws.com
Fingerprint82:A2:80:27:89:C3:32:0E:1E:77:2D:6F:F3:3D:19:D3:97:36:BC:7C
ValidityThu, 08 Feb 2024 00:00:00 GMT - Sat, 11 Jan 2025 23:59:59 GMT
Hash 2ca2bdfb68d8f3b7fef71af972cb74dc
7d7df1c9b92a4d2596fe31c33ffba65fa7cafd9b
9a36df90805efd3a97b8e302947477b8fdc1d3379d6e9892417c59135cf8ce71
GET /assets.oxfordclub.com/promo/brk/oil/styles.css HTTP/1.1
Host: s3.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: aMQGCgeb3yET7FnxxTqp/dLfJ/uUEILJWTfipJRH1vrU+daHcTrVE/G+mos9wUahfe5PqYijVvI=
x-amz-request-id: T6J0BB3296W82VH9
Date: Wed, 08 May 2024 11:40:43 GMT
Last-Modified: Thu, 25 Apr 2024 15:35:37 GMT
ETag: "2ca2bdfb68d8f3b7fef71af972cb74dc"
x-amz-server-side-encryption: AES256
x-amz-version-id: pG6X6kwIGpGpIxk6S.TqL0xqRXaSRTcJ
Accept-Ranges: bytes
Content-Type: text/css
Server: AmazonS3
Content-Length: 25644
portrait-tracker.s3.amazonaws.com/promo.js
16.182.96.97200 OK 26 kB URL GET HTTP/1.1 portrait-tracker.s3.amazonaws.com/promo.js
IP 16.182.96.97:443
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=cee8e8e68744411fbedf3a15cf269ac8&h=true
Certificate IssuerAmazon
Subject*.s3.amazonaws.com
FingerprintDC:41:A6:3E:EE:32:6F:36:76:5A:EF:9D:17:AF:14:13:E3:05:C6:D1
ValidityTue, 10 Oct 2023 00:00:00 GMT - Wed, 03 Jul 2024 23:59:59 GMT
File type JavaScript source, ASCII text
Hash 968945799d89c26299a62dc0339bde67
5cce6ec9ed0e06a085ad9313a133c49b2dca0f3d
8b8045007a32445a83e59d46d1e8237fb3a7a4bd62d3cfdd943ca853ba86e2b2
GET /promo.js HTTP/1.1
Host: portrait-tracker.s3.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: u/N+CL06rt2hQ4yqcKux3MWTtMt28JDUDpgWXr8FxgtJZRLdnkH/LkmYn/KCXiXCpzidiYa0svE=
x-amz-request-id: T6J8SG0TEW99DATF
Date: Wed, 08 May 2024 11:40:43 GMT
Last-Modified: Mon, 18 Mar 2024 16:37:29 GMT
ETag: "968945799d89c26299a62dc0339bde67"
x-amz-server-side-encryption: AES256
x-amz-version-id: Ea8sPnxc0hvQZiplzrNDZ20cACmxzdAR
Accept-Ranges: bytes
Content-Type: application/javascript
Server: AmazonS3
Content-Length: 25710
portrait-tracker.s3.amazonaws.com/all.js
16.182.96.97200 OK 38 kB URL GET HTTP/1.1 portrait-tracker.s3.amazonaws.com/all.js
IP 16.182.96.97:443
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=cee8e8e68744411fbedf3a15cf269ac8&h=true
Certificate IssuerAmazon
Subject*.s3.amazonaws.com
FingerprintDC:41:A6:3E:EE:32:6F:36:76:5A:EF:9D:17:AF:14:13:E3:05:C6:D1
ValidityTue, 10 Oct 2023 00:00:00 GMT - Wed, 03 Jul 2024 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (38527), with no line terminators
Hash 7a4866af82b3d9c4147211938ab5004d
b33f73f72aec3baf76b1a1b30e473e6b1e9ee3e1
0d442120d2b60deb30df02e017358ba9e8057e57af2a52aadaceb08200dc5118
GET /all.js HTTP/1.1
Host: portrait-tracker.s3.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: MY13xtof0gvPjI4YfyfslHCa9LeiPtZ+ZTnFPsLBr2eWfk7MCXlwcbi621ZifZrQl8r/EaXo7Qk=
x-amz-request-id: T6JEC9KVPMP9Z1DX
Date: Wed, 08 May 2024 11:40:43 GMT
Last-Modified: Tue, 12 Mar 2024 18:03:33 GMT
ETag: "7a4866af82b3d9c4147211938ab5004d"
x-amz-server-side-encryption: AES256
x-amz-version-id: DJTsKKAXZAjX88yytY8IZ9oo.cyFutLW
Accept-Ranges: bytes
Content-Type: application/javascript
Server: AmazonS3
Content-Length: 38527
cdn.getblueshift.com/blueshift.js
52.85.243.56200 OK 2.8 kB URL GET HTTP/1.1 cdn.getblueshift.com/blueshift.js
IP 52.85.243.56:443
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=cee8e8e68744411fbedf3a15cf269ac8&h=true
Certificate IssuerAmazon
Subject*.getblueshift.com
Fingerprint29:49:01:4C:AB:3A:C5:E4:F6:F2:67:75:BE:5B:FF:4B:F3:5C:EC:47
ValidityMon, 10 Jul 2023 00:00:00 GMT - Tue, 06 Aug 2024 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (6625), with no line terminators
Hash e70a08bd9e7ef156c1673f55ed87aa85
9dfa4cf582654332eb4e1ada9843594ca64bb0d2
a97c4e09767a155128f03c8a72efccc7d8e38e2e8e78daf14c8e5beaf72ff1a5
GET /blueshift.js HTTP/1.1
Host: cdn.getblueshift.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Length: 2826
Connection: keep-alive
Last-Modified: Wed, 24 Jan 2024 03:44:50 GMT
x-amz-server-side-encryption: AES256
Content-Encoding: gzip
Accept-Ranges: bytes
Server: AmazonS3
Date: Wed, 08 May 2024 10:59:54 GMT
Cache-Control: max-age=3600
ETag: "bd39fba69cd2745738daf44e0e350f6e"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 381415f9cd2a81e354df30a9d968048c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: ARN1-C1
X-Amz-Cf-Id: nchjJgeVoDSqp5BA72lqTQik5vT0TeIEvjxBwKrwhOfadJ5Fpp3UtA==
Age: 2449
fast.wistia.com/assets/external/E-v1.js
151.101.2.132200 OK 137 kB URL GET HTTP/2 fast.wistia.com/assets/external/E-v1.js
IP 151.101.2.132:443
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=cee8e8e68744411fbedf3a15cf269ac8&h=true
Certificate IssuerGlobalSign nv-sa
Subjectfast.wistia.com
Fingerprint75:69:0C:BF:54:26:59:0B:9A:83:E3:04:94:DE:EB:3F:E5:F6:6D:66
ValidityThu, 04 Apr 2024 00:50:10 GMT - Tue, 06 May 2025 00:50:09 GMT
File type JavaScript source, ASCII text, with very long lines (65474)
Size 137 kB (136901 bytes)
Hash 052600afd1ecbeb8e6a746d8cf9c3f52
5a3e3c163dcc90715b224b038e03b4a1ad3c1918
977e141ac40c89736da0671fe69d3a86f88e9b611794e2903776ad7cf885664f
GET /assets/external/E-v1.js HTTP/1.1
Host: fast.wistia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 06 May 2024 19:22:13 GMT
etag: "a03c52076e315125a988c69d823bee22"
x-amz-server-side-encryption: AES256
content-encoding: br
content-type: text/javascript
server: AmazonS3
via: 1.1 varnish, 1.1 varnish
cache-control: public, max-age=3600
access-control-allow-origin: *
timing-allow-origin: *
accept-ranges: bytes
date: Wed, 08 May 2024 11:40:42 GMT
age: 1041
x-served-by: cache-iad-kiad7000133-IAD, cache-hel1410024-HEL
x-cache: HIT, HIT
x-cache-hits: 61, 238
x-timer: S1715168443.906733,VS0,VE0
vary: Accept-Encoding
strict-transport-security: max-age=0
x-ecma-v: modern
x-browser: firefox
x-browser-version: 96
asset-version: 28e29ceb2b43efa40a2a9a4feeda1b13bcd24ac3
content-length: 136901
X-Firefox-Spdy: h2
use.typekit.net/af/9cf49e/00000000000000000000e807/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n9&v=3
23.33.119.19200 OK 17 kB URL GET HTTP/2 use.typekit.net/af/9cf49e/00000000000000000000e807/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n9&v=3
IP 23.33.119.19:443
ASN #20940 Akamai International B.V.
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=cee8e8e68744411fbedf3a15cf269ac8&h=true
Certificate IssuerDigiCert Inc
Subjectuse.typekit.net
Fingerprint15:AD:3F:8A:55:B7:BC:20:D8:70:5B:06:E0:D2:92:7C:BE:C6:E0:56
ValidityThu, 01 Feb 2024 00:00:00 GMT - Mon, 03 Mar 2025 23:59:59 GMT
File type Web Open Font Format (Version 2), TrueType, length 16728, version 1.0
Hash 994cc140824e4f41167b6a8f671c66b3
87410c73b2e269b136638b46eb888286ff93fdd2
c965b7e3bd43eceaf5c91309885ba7ee7bcb3b3d018a19c997faea37e30b3306
GET /af/9cf49e/00000000000000000000e807/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n9&v=3 HTTP/1.1
Host: use.typekit.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://pro.oxfordclub.com
DNT: 1
Connection: keep-alive
Referer: https://use.typekit.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: application/font-woff2
content-length: 16728
etag: "913296c9ffe9c1f97e163e531cc2022a12d91b5a"
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=31536000
date: Wed, 08 May 2024 11:40:42 GMT
X-Firefox-Spdy: h2
use.typekit.net/af/a28b50/00000000000000000000e803/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n5&v=3
23.33.119.19200 OK 17 kB URL GET HTTP/2 use.typekit.net/af/a28b50/00000000000000000000e803/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n5&v=3
IP 23.33.119.19:443
ASN #20940 Akamai International B.V.
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=cee8e8e68744411fbedf3a15cf269ac8&h=true
Certificate IssuerDigiCert Inc
Subjectuse.typekit.net
Fingerprint15:AD:3F:8A:55:B7:BC:20:D8:70:5B:06:E0:D2:92:7C:BE:C6:E0:56
ValidityThu, 01 Feb 2024 00:00:00 GMT - Mon, 03 Mar 2025 23:59:59 GMT
File type Web Open Font Format (Version 2), TrueType, length 16808, version 1.0
Hash e0ba364087ced101e98cb22c66a3de71
8a6fc598bf108239d94fabea4eb0fe686618a55a
09244974d9decf20f9cd3402621e4844a454f3ae43cdf509538f43c0456ba6c4
GET /af/a28b50/00000000000000000000e803/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n5&v=3 HTTP/1.1
Host: use.typekit.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://pro.oxfordclub.com
DNT: 1
Connection: keep-alive
Referer: https://use.typekit.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: application/font-woff2
content-length: 16808
etag: "a6c1fa20004e862da7c922781204c8a0ef8794a4"
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=31536000
date: Wed, 08 May 2024 11:40:42 GMT
X-Firefox-Spdy: h2
ocsp.starfieldtech.com/
192.124.249.36 2.1 kB IP 192.124.249.36:0
Hash 170d2167af6311f7e6faf2d382731ba1
e8e7856c54862f9f7cfb5a992ed1f4ba25689e6c
1e78710554f00ab82cd0d474aa019ece778fa323e7c082c8ba549041fd8a2d8d
POST / HTTP/1.1
Host: ocsp.starfieldtech.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Wed, 08 May 2024 11:40:42 GMT
Content-Type: application/ocsp-response
Content-Length: 2149
Connection: keep-alive
X-Sucuri-ID: 19036
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Wed, 08 May 2024 01:49:17 GMT
Expires: Thu, 09 May 2024 01:49:17 GMT
ETag: "e8e7856c54862f9f7cfb5a992ed1f4ba25689e6c"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
s3.amazonaws.com/assets.oxfordclub.com/promo/brk/oil/bkgd.jpg
52.217.203.24200 OK 100 kB URL GET HTTP/1.1 s3.amazonaws.com/assets.oxfordclub.com/promo/brk/oil/bkgd.jpg
IP 52.217.203.24:443
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=cee8e8e68744411fbedf3a15cf269ac8&h=true
Certificate IssuerAmazon
Subjects3.amazonaws.com
Fingerprint82:A2:80:27:89:C3:32:0E:1E:77:2D:6F:F3:3D:19:D3:97:36:BC:7C
ValidityThu, 08 Feb 2024 00:00:00 GMT - Sat, 11 Jan 2025 23:59:59 GMT
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, progressive, precision 8, 1276x1134, components 3
Size 100 kB (100140 bytes)
Hash 9b7b924d709aa47fdcbd499da85125ff
6d43cb6f3c9588055fb731d1925d3b0e3a713ef8
32968cead2c39de5de18fdf6483cd1032dce114ae4b060947bd7824b4d1eb9f9
GET /assets.oxfordclub.com/promo/brk/oil/bkgd.jpg HTTP/1.1
Host: s3.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://s3.amazonaws.com/assets.oxfordclub.com/promo/brk/oil/styles.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: gxUnmEWCvfUgmBmHPBdBu5VNMFe9ciliSOPucoL2wHEZ3jR1QQ5tUL7gtcaJsfJcgqFrr6wQxR8=
x-amz-request-id: T6J8Y97HNVCZMZ4X
Date: Wed, 08 May 2024 11:40:43 GMT
Last-Modified: Mon, 27 Feb 2023 22:17:15 GMT
ETag: "9b7b924d709aa47fdcbd499da85125ff"
x-amz-server-side-encryption: AES256
x-amz-version-id: CMlw7Lt3Rmny.r9msJHmKS9CHFdIc7iV
Accept-Ranges: bytes
Content-Type: image/jpeg
Server: AmazonS3
Content-Length: 100140
www.googletagmanager.com/gtm.js?id=GTM-KTM4C7C
142.250.74.168200 OK 106 kB URL GET HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-KTM4C7C
IP 142.250.74.168:443
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=cee8e8e68744411fbedf3a15cf269ac8&h=true
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint93:6B:D2:9D:92:BE:2D:D8:02:67:82:83:5E:EF:A3:F9:13:F3:26:AE
ValidityTue, 16 Apr 2024 03:18:45 GMT - Tue, 09 Jul 2024 03:18:44 GMT
File type JavaScript source, ASCII text, with very long lines (40765)
Size 106 kB (106258 bytes)
Hash cb67ac044cef0e15778a493a2fd26372
5af31f8fe0987303d5abfd9f4e5445bc9feea007
7846acaa0ccfdf005b1d87d98cc8947907efc7be487c69a39647ea3c2f01f19c
GET /gtm.js?id=GTM-KTM4C7C HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 08 May 2024 11:40:43 GMT
expires: Wed, 08 May 2024 11:40:43 GMT
cache-control: private, max-age=900
last-modified: Wed, 08 May 2024 09:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 106258
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
c.lytics.io/api/tag/9c32784e3cc4888a693a7988ad64c63d/latest.min.js
104.26.3.22200 OK 24 kB URL GET HTTP/2 c.lytics.io/api/tag/9c32784e3cc4888a693a7988ad64c63d/latest.min.js
IP 104.26.3.22:443
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=cee8e8e68744411fbedf3a15cf269ac8&h=true
Certificate IssuerLet's Encrypt
Subjectlytics.io
FingerprintB6:F8:34:ED:E4:C3:43:5C:FC:38:D0:CB:58:F7:80:C5:76:62:78:79
ValiditySat, 16 Mar 2024 02:39:35 GMT - Fri, 14 Jun 2024 02:39:34 GMT
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Hash 7a823e3b7bdd1dc0ede14452bc124040
bf707ab1b9859f343cf614416f9c18e72a000ea7
63c5498e6b566cbdce24d58c797661ae67e8dfb2d75f3d5592017a881f9b1762
GET /api/tag/9c32784e3cc4888a693a7988ad64c63d/latest.min.js HTTP/1.1
Host: c.lytics.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 08 May 2024 11:40:43 GMT
content-type: application/javascript
access-control-allow-origin: *
strict-transport-security: max-age=63072000;
x-lytics-trace: 8a4e84fcec85e4dd9bf793813c067a1b
via: 1.1 google
cache-control: max-age=7200
cf-cache-status: EXPIRED
last-modified: Wed, 08 May 2024 08:41:49 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vACud6iCSfz71kdGtsk9hLyQnBqMuGU%2B2tD8wPbJTbq7RCO60IoDxM7%2FjTDlyfUEf8YAM%2Bf2udzvsiiufrUkM1sQRKJUUwrgVDzzavUAZJm2U2Lo3y6QRUS5yDTP"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 88092d301b5c5688-OSL
content-encoding: br
X-Firefox-Spdy: h2
portrait-tracker.s3.amazonaws.com/index.html
16.182.96.97200 OK 2.4 kB URL GET HTTP/1.1 portrait-tracker.s3.amazonaws.com/index.html
IP 16.182.96.97:443
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=cee8e8e68744411fbedf3a15cf269ac8&h=true
Certificate IssuerAmazon
Subject*.s3.amazonaws.com
FingerprintDC:41:A6:3E:EE:32:6F:36:76:5A:EF:9D:17:AF:14:13:E3:05:C6:D1
ValidityTue, 10 Oct 2023 00:00:00 GMT - Wed, 03 Jul 2024 23:59:59 GMT
File type HTML document, ASCII text
Hash c029f674b13b082e9a03b16217c3f576
f8ac05a2a24d42c863275c8dfd7e94486a237d0b
9b6554e3dbe9e11702720eb95ef8808b4e1e307bbec908ab5e6d0e1da2294470
GET /index.html HTTP/1.1
Host: portrait-tracker.s3.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: WHGe3aI50ANpVAxGC+eHtwSVvosjIqhDUAd0RyhvAL07jRi6iOnKLR/XPLYTwRquVbmExVY4OKU=
x-amz-request-id: 9P4AJTW2JSPMSBJQ
Date: Wed, 08 May 2024 11:40:44 GMT
Last-Modified: Wed, 03 Nov 2021 21:10:09 GMT
ETag: "c029f674b13b082e9a03b16217c3f576"
x-amz-version-id: X1zblgbOV1d.Qkc55AyQidmgNGbabuW5
Accept-Ranges: bytes
Content-Type: text/html
Server: AmazonS3
Content-Length: 2371
fast.wistia.com/assets/external/wistia-mux.js
151.101.2.132200 OK 32 kB URL GET HTTP/2 fast.wistia.com/assets/external/wistia-mux.js
IP 151.101.2.132:443
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=cee8e8e68744411fbedf3a15cf269ac8&h=true
Certificate IssuerGlobalSign nv-sa
Subjectfast.wistia.com
Fingerprint75:69:0C:BF:54:26:59:0B:9A:83:E3:04:94:DE:EB:3F:E5:F6:6D:66
ValidityThu, 04 Apr 2024 00:50:10 GMT - Tue, 06 May 2025 00:50:09 GMT
File type JavaScript source, ASCII text, with very long lines (65468)
Hash 470da3a0ed8335c538fb2ac3f2463d57
9e9fd3439e56fe1f5dbd21e4d9c1b00ce21b0292
e6455274438944ccc7f0a97294e0f4586d62bbe4286f366ae11909b5b249d6af
GET /assets/external/wistia-mux.js HTTP/1.1
Host: fast.wistia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pro.oxfordclub.com
DNT: 1
Connection: keep-alive
Referer: https://fast.wistia.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-methods: GET, HEAD
last-modified: Mon, 06 May 2024 19:22:13 GMT
etag: "0614bdaf3567d98ac4cc6957404bf732"
x-amz-server-side-encryption: AES256
content-encoding: br
content-type: text/javascript
server: AmazonS3
via: 1.1 varnish, 1.1 varnish
cache-control: public, max-age=3600
access-control-allow-origin: *
timing-allow-origin: *
accept-ranges: bytes
date: Wed, 08 May 2024 11:40:43 GMT
age: 396
x-served-by: cache-iad-kjyo7100148-IAD, cache-hel1410024-HEL
x-cache: HIT, HIT
x-cache-hits: 2290, 4
x-timer: S1715168444.500086,VS0,VE0
vary: Accept-Encoding
strict-transport-security: max-age=0
x-ecma-v: modern
x-browser: firefox
x-browser-version: 96
asset-version: 28e29ceb2b43efa40a2a9a4feeda1b13bcd24ac3
content-length: 32007
X-Firefox-Spdy: h2
fast.wistia.com/embed/medias/sr8r36952j.json
151.101.2.132200 OK 1.7 kB URL GET HTTP/2 fast.wistia.com/embed/medias/sr8r36952j.json
IP 151.101.2.132:443
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=cee8e8e68744411fbedf3a15cf269ac8&h=true
Certificate IssuerGlobalSign nv-sa
Subjectfast.wistia.com
Fingerprint75:69:0C:BF:54:26:59:0B:9A:83:E3:04:94:DE:EB:3F:E5:F6:6D:66
ValidityThu, 04 Apr 2024 00:50:10 GMT - Tue, 06 May 2025 00:50:09 GMT
Hash 192578e50fc71a561f449bf4a5849178
29173a0fe54e15967abedc171d97e7c02d7a8f62
b34fa3bf1906d48a326d3804f07d09ad70dfb565f7ec345a9ff30bdfa20dfe97
GET /embed/medias/sr8r36952j.json HTTP/1.1
Host: fast.wistia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pro.oxfordclub.com
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
server: envoy
x-content-type-options: nosniff
x-permitted-cross-domain-policies: none
access-control-allow-origin: *
timing-allow-origin: *
cache-control: public, no-cache
etag: W/"b34fa3bf1906d48a326d3804f07d09ad"
x-request-id: 46be7aaa-8f95-4795-9179-e860e0540d63
x-runtime: 0.047087
content-encoding: br
x-envoy-upstream-service-time: 49
via: 1.1 1814689e6a53bd70e892d4abd59ed626.cloudfront.net (CloudFront), 1.1 varnish, 1.1 varnish
x-amz-cf-pop: IAD55-P5
x-amz-cf-id: lQNmptCNv8Z4raLRdd6vpY5-biqUzLt34pl5wSjDC-lXCu34xVg1tQ==
accept-ranges: bytes
age: 54798
date: Wed, 08 May 2024 11:40:43 GMT
x-served-by: cache-iad-kiad7000042-IAD, cache-hel1410024-HEL
x-cache: Miss from cloudfront, HIT, MISS
x-cache-hits: 193, 0
x-timer: S1715168443.497191,VS0,VE97
vary: Accept-Encoding,X-Forwarded-Proto,X-ECMA-Override
strict-transport-security: max-age=0
x-ecma-v: modern
x-browser: firefox
x-browser-version: 96
content-length: 1681
X-Firefox-Spdy: h2
c.lytics.io/c/9c32784e3cc4888a693a7988ad64c63d?_e=pv&_sesstart=1&_tz=0&_ul=en-US&_sz=1280x1024&_ts=1715168443499&_nmob=t&_device=desktop&url=pro.oxfordclub.com%2Fp%2FOILTO99BRKLT2YRDSTOT%2FNBRK4404%2F%3Fs1%3Dcee8e8e68744411fbedf3a15cf269ac8%26h%3Dtrue&_v=3.0.35&_uid=1a7f2710-2864-4691-b804-308d54307e52&_getid=t
104.26.3.22200 OK 35 B URL GET HTTP/2 c.lytics.io/c/9c32784e3cc4888a693a7988ad64c63d?_e=pv&_sesstart=1&_tz=0&_ul=en-US&_sz=1280x1024&_ts=1715168443499&_nmob=t&_device=desktop&url=pro.oxfordclub.com%2Fp%2FOILTO99BRKLT2YRDSTOT%2FNBRK4404%2F%3Fs1%3Dcee8e8e68744411fbedf3a15cf269ac8%26h%3Dtrue&_v=3.0.35&_uid=1a7f2710-2864-4691-b804-308d54307e52&_getid=t
IP 104.26.3.22:443
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=cee8e8e68744411fbedf3a15cf269ac8&h=true
Certificate IssuerLet's Encrypt
Subjectlytics.io
FingerprintB6:F8:34:ED:E4:C3:43:5C:FC:38:D0:CB:58:F7:80:C5:76:62:78:79
ValiditySat, 16 Mar 2024 02:39:35 GMT - Fri, 14 Jun 2024 02:39:34 GMT
File type GIF image data, version 89a, 1 x 1
Hash c2196de8ba412c60c22ab491af7b1409
5fbd472222feb8a22cf5b8aa5dc5b8e13af88e2b
6adc3d4c1056996e4e8b765a62604c78b1f867cceb3b15d0b9bedb7c4857f992
GET /c/9c32784e3cc4888a693a7988ad64c63d?_e=pv&_sesstart=1&_tz=0&_ul=en-US&_sz=1280x1024&_ts=1715168443499&_nmob=t&_device=desktop&url=pro.oxfordclub.com%2Fp%2FOILTO99BRKLT2YRDSTOT%2FNBRK4404%2F%3Fs1%3Dcee8e8e68744411fbedf3a15cf269ac8%26h%3Dtrue&_v=3.0.35&_uid=1a7f2710-2864-4691-b804-308d54307e52&_getid=t HTTP/1.1
Host: c.lytics.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 08 May 2024 11:40:43 GMT
content-type: image/gif
content-length: 35
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Cookie, *
access-control-allow-methods: GET, POST
access-control-allow-origin: *
cache-control: no-cache, no-store, must-revalidate
expires: 0
pragma: no-cache
set-cookie: seerid=1a7f2710-2864-4691-b804-308d54307e52; Path=/; Domain=lytics.io; Max-Age=77760000; Secure; SameSite=None
strict-transport-security: max-age=63072000;
x-lytics-trace: a5156849b9ea505dcdfa95fadc65bbe3
via: 1.1 google
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=C1oFSpqu5cEGDFLV2DugBB51IdgeaEDQgTwUFo8%2FyKBI3TSz0BUZ%2BblO8OLOau6MqJlpwKNTsmczaf0a3aNLE%2BnZ7N8%2FpM%2B4JBXGw1%2BmE7qA%2FeNQDzkoG%2BebtmCZ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 88092d3458605688-OSL
X-Firefox-Spdy: h2
pro.oxfordclub.com/p/effortattributes/extractEffortattributes/NBRK4404
192.135.136.168200 OK 771 B URL GET HTTP/1.1 pro.oxfordclub.com/p/effortattributes/extractEffortattributes/NBRK4404
IP 192.135.136.168:443
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=cee8e8e68744411fbedf3a15cf269ac8&h=true
Certificate IssuerLet's Encrypt
Subjectordertracking2.pubsvs.com
Fingerprint3A:B9:2F:4C:6D:99:BE:5E:94:3F:BD:D3:C0:34:93:33:6D:CA:DC:6E
ValidityFri, 19 Apr 2024 17:28:36 GMT - Thu, 18 Jul 2024 17:28:35 GMT
Hash 6ba0e609f7bf4c7ae77630ca1442f163
c83eea31ebb06712e3a422757a778c146e8bfbbd
87806a128e1cfb32c55c63ffd02ea9c8ed8243eb7726964600ff7f4859a5f3f6
GET /p/effortattributes/extractEffortattributes/NBRK4404 HTTP/1.1
Host: pro.oxfordclub.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=cee8e8e68744411fbedf3a15cf269ac8&h=true
DNT: 1
Connection: keep-alive
Cookie: 2314530=2743372; BIGipServerIRIS_PROD_HTTPS_POOL=!oLrLvRORFY+pvj80QCUGrw3uOK3bWToZZUVMrHBAdbY3uI01LkMOWYZSTtJ/kZpZD8dNAYaPhm0AeMA=; NBRK4404=; seerses=e; seerid=1a7f2710-2864-4691-b804-308d54307e52
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: private
Content-Type: application/json; charset=utf-8
Access-Control-Allow-Origin: *
Referrer-Policy: no-referrer-when-downgrade
Date: Wed, 08 May 2024 11:40:43 GMT
Content-Length: 771
Strict-Transport-Security: max-age=63072000; includeSubDomains
fast.wistia.com/assets/external/playPauseLoadingControl.js
151.101.2.132200 OK 22 kB URL GET HTTP/2 fast.wistia.com/assets/external/playPauseLoadingControl.js
IP 151.101.2.132:443
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=cee8e8e68744411fbedf3a15cf269ac8&h=true
Certificate IssuerGlobalSign nv-sa
Subjectfast.wistia.com
Fingerprint75:69:0C:BF:54:26:59:0B:9A:83:E3:04:94:DE:EB:3F:E5:F6:6D:66
ValidityThu, 04 Apr 2024 00:50:10 GMT - Tue, 06 May 2025 00:50:09 GMT
File type JavaScript source, ASCII text, with very long lines (65455)
Hash 57ef473620b86e6720d97151a9b5b2e8
296a18394a55a04318b85fad31b22302a4619758
d8bf6863841796511dadc6251051459b0871f896d2158d4ddf13656d4d9e77d5
GET /assets/external/playPauseLoadingControl.js HTTP/1.1
Host: fast.wistia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pro.oxfordclub.com
DNT: 1
Connection: keep-alive
Referer: https://fast.wistia.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-methods: GET, HEAD
last-modified: Mon, 06 May 2024 19:22:13 GMT
etag: "80f32a247115f34c6f04fe858a90895a"
x-amz-server-side-encryption: AES256
content-encoding: br
content-type: text/javascript
server: AmazonS3
via: 1.1 varnish, 1.1 varnish
cache-control: public, max-age=3600
access-control-allow-origin: *
timing-allow-origin: *
accept-ranges: bytes
date: Wed, 08 May 2024 11:40:43 GMT
age: 849
x-served-by: cache-iad-kcgs7200156-IAD, cache-hel1410024-HEL
x-cache: HIT, HIT
x-cache-hits: 66, 69
x-timer: S1715168444.819362,VS0,VE0
vary: Accept-Encoding
strict-transport-security: max-age=0
x-ecma-v: modern
x-browser: firefox
x-browser-version: 96
asset-version: 28e29ceb2b43efa40a2a9a4feeda1b13bcd24ac3
content-length: 21598
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=G-BBMPM3EJHQ&l=dataLayer&cx=c
142.250.74.168200 OK 104 kB URL GET HTTP/3 www.googletagmanager.com/gtag/js?id=G-BBMPM3EJHQ&l=dataLayer&cx=c
IP 142.250.74.168:443
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=cee8e8e68744411fbedf3a15cf269ac8&h=true
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint93:6B:D2:9D:92:BE:2D:D8:02:67:82:83:5E:EF:A3:F9:13:F3:26:AE
ValidityTue, 16 Apr 2024 03:18:45 GMT - Tue, 09 Jul 2024 03:18:44 GMT
File type JavaScript source, ASCII text, with very long lines (7711)
Size 104 kB (103876 bytes)
Hash 8f6c37728b85d4bf222dddb311f044ca
e3087c23c379beb430fbcaa878e7bcf81612b76f
8795fd1e2df4042442fce4ec6b26846258cc742e19a915670627c77010c8d2f8
GET /gtag/js?id=G-BBMPM3EJHQ&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 08 May 2024 11:40:43 GMT
expires: Wed, 08 May 2024 11:40:43 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 103876
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
ocsp.r2m03.amazontrust.com/
143.204.53.97 471 B URL ocsp.r2m03.amazontrust.com/
IP 143.204.53.97:0
Hash ef28e15113ee13fd765708b375e313b7
2dcc01bd972be20e7b33273323a0d2629140b153
96758c69d8c2a656e382b9df4189622f0c0d50675eea786e37e458b11a17c234
POST / HTTP/1.1
Host: ocsp.r2m03.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Cache-Control: max-age=7200
Date: Wed, 08 May 2024 11:40:43 GMT
Server: ECAcc (amb/6B66)
X-Cache: Miss from cloudfront
Via: 1.1 8e6dce34fd223e0c9d89fd938d1784a2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: JJxVVYffkLDRJ2O9EWV1huM4qb77-v68F6rY0Q6WPa1yUpyBKr3b1A==
www.googletagmanager.com/gtm.js?id=GTM-WP5R8BX
142.250.74.168200 OK 100 kB URL GET HTTP/3 www.googletagmanager.com/gtm.js?id=GTM-WP5R8BX
IP 142.250.74.168:443
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=cee8e8e68744411fbedf3a15cf269ac8&h=true
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint93:6B:D2:9D:92:BE:2D:D8:02:67:82:83:5E:EF:A3:F9:13:F3:26:AE
ValidityTue, 16 Apr 2024 03:18:45 GMT - Tue, 09 Jul 2024 03:18:44 GMT
File type JavaScript source, ASCII text, with very long lines (30186)
Hash c31cf8ffc93260e98062a9f6af40968e
9e97b16787130b0f20ba0a03f6765402a8b789c4
f30a85ec4c2146582583a323493d481023ca6b400fefb12f465c35b5607c492d
GET /gtm.js?id=GTM-WP5R8BX HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 08 May 2024 11:40:44 GMT
expires: Wed, 08 May 2024 11:40:44 GMT
cache-control: private, max-age=900
last-modified: Wed, 08 May 2024 09:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 99547
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.googletagmanager.com/gtm.js?id=GTM-NKXCSCL
142.250.74.168200 OK 104 kB URL GET HTTP/3 www.googletagmanager.com/gtm.js?id=GTM-NKXCSCL
IP 142.250.74.168:443
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=cee8e8e68744411fbedf3a15cf269ac8&h=true
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint93:6B:D2:9D:92:BE:2D:D8:02:67:82:83:5E:EF:A3:F9:13:F3:26:AE
ValidityTue, 16 Apr 2024 03:18:45 GMT - Tue, 09 Jul 2024 03:18:44 GMT
File type JavaScript source, ASCII text, with very long lines (63244)
Size 104 kB (104099 bytes)
Hash 192d8f4e286ec55a8337a282dd9971eb
0fcad26f94afd7359d42a7061a3da146d9ca57e8
1ba350fce2c1855675b70c7c6cbef82b12289a20754b9fba825258f040b735a7
GET /gtm.js?id=GTM-NKXCSCL HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 08 May 2024 11:40:44 GMT
expires: Wed, 08 May 2024 11:40:44 GMT
cache-control: private, max-age=900
last-modified: Wed, 08 May 2024 09:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 104099
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
fast.wistia.com/assets/external/engines/hls_video.js
151.101.2.132200 OK 118 kB URL GET HTTP/2 fast.wistia.com/assets/external/engines/hls_video.js
IP 151.101.2.132:443
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=cee8e8e68744411fbedf3a15cf269ac8&h=true
Certificate IssuerGlobalSign nv-sa
Subjectfast.wistia.com
Fingerprint75:69:0C:BF:54:26:59:0B:9A:83:E3:04:94:DE:EB:3F:E5:F6:6D:66
ValidityThu, 04 Apr 2024 00:50:10 GMT - Tue, 06 May 2025 00:50:09 GMT
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size 118 kB (118171 bytes)
Hash 2ed1a7682194a224b571d657a69ef595
11f7ca3fef0170693bf51c8e444371d2506164d1
3edaf39750e5132be42f5f6cfde22321a3f45adc4e81a5dcd97e82795e633684
GET /assets/external/engines/hls_video.js HTTP/1.1
Host: fast.wistia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pro.oxfordclub.com
DNT: 1
Connection: keep-alive
Referer: https://fast.wistia.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-methods: GET, HEAD
last-modified: Mon, 06 May 2024 19:22:13 GMT
etag: "0befaf540af2e2f55805ba00bf5485aa"
x-amz-server-side-encryption: AES256
content-encoding: br
content-type: text/javascript
server: AmazonS3
via: 1.1 varnish, 1.1 varnish
cache-control: public, max-age=3600
access-control-allow-origin: *
timing-allow-origin: *
accept-ranges: bytes
date: Wed, 08 May 2024 11:40:44 GMT
age: 1099
x-served-by: cache-iad-kiad7000034-IAD, cache-hel1410024-HEL
x-cache: HIT, HIT
x-cache-hits: 51, 80
x-timer: S1715168444.110546,VS0,VE0
vary: Accept-Encoding
strict-transport-security: max-age=0
x-ecma-v: modern
x-browser: firefox
x-browser-version: 96
asset-version: 28e29ceb2b43efa40a2a9a4feeda1b13bcd24ac3
content-length: 118171
X-Firefox-Spdy: h2
ocsp.r2m03.amazontrust.com/
143.204.53.97 471 B URL ocsp.r2m03.amazontrust.com/
IP 143.204.53.97:0
Hash ef28e15113ee13fd765708b375e313b7
2dcc01bd972be20e7b33273323a0d2629140b153
96758c69d8c2a656e382b9df4189622f0c0d50675eea786e37e458b11a17c234
POST / HTTP/1.1
Host: ocsp.r2m03.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Cache-Control: max-age=7200
Date: Wed, 08 May 2024 11:40:43 GMT
Server: ECAcc (amb/6AE9)
X-Cache: Miss from cloudfront
Via: 1.1 185768229530368be94556dcab1c486a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: fi5ewIeHsvBrD0jjlNUL0opa8F7tcx-nNy-cQmhcJ8lTx_q011RbKQ==
fast.wistia.com/assets/external/E-v1.js
151.101.2.132200 OK 137 kB URL GET HTTP/2 fast.wistia.com/assets/external/E-v1.js
IP 151.101.2.132:443
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=cee8e8e68744411fbedf3a15cf269ac8&h=true
Certificate IssuerGlobalSign nv-sa
Subjectfast.wistia.com
Fingerprint75:69:0C:BF:54:26:59:0B:9A:83:E3:04:94:DE:EB:3F:E5:F6:6D:66
ValidityThu, 04 Apr 2024 00:50:10 GMT - Tue, 06 May 2025 00:50:09 GMT
File type JavaScript source, ASCII text, with very long lines (65474)
Size 137 kB (136901 bytes)
Hash 052600afd1ecbeb8e6a746d8cf9c3f52
5a3e3c163dcc90715b224b038e03b4a1ad3c1918
977e141ac40c89736da0671fe69d3a86f88e9b611794e2903776ad7cf885664f
GET /assets/external/E-v1.js HTTP/1.1
Host: fast.wistia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 06 May 2024 19:22:13 GMT
etag: "a03c52076e315125a988c69d823bee22"
x-amz-server-side-encryption: AES256
content-encoding: br
content-type: text/javascript
server: AmazonS3
via: 1.1 varnish, 1.1 varnish
cache-control: public, max-age=3600
access-control-allow-origin: *
timing-allow-origin: *
accept-ranges: bytes
date: Wed, 08 May 2024 11:40:44 GMT
age: 1042
x-served-by: cache-iad-kiad7000133-IAD, cache-hel1410024-HEL
x-cache: HIT, HIT
x-cache-hits: 61, 239
x-timer: S1715168444.366351,VS0,VE0
vary: Accept-Encoding
strict-transport-security: max-age=0
x-ecma-v: modern
x-browser: firefox
x-browser-version: 96
asset-version: 28e29ceb2b43efa40a2a9a4feeda1b13bcd24ac3
content-length: 136901
X-Firefox-Spdy: h2
cdn.mediago.io/js/pixel.js
54.230.111.126200 OK 92 kB URL GET HTTP/2 cdn.mediago.io/js/pixel.js
IP 54.230.111.126:443
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=cee8e8e68744411fbedf3a15cf269ac8&h=true
Certificate IssuerAmazon
Subject*.mediago.io
FingerprintD4:6D:29:DE:0A:B4:82:54:F2:27:37:C3:E6:0A:2E:B9:B5:BC:A1:C5
ValidityMon, 07 Aug 2023 00:00:00 GMT - Wed, 04 Sep 2024 23:59:59 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (65532), with no line terminators
Hash 0586bb55e87c7d9894960ddc7909f7aa
d5357122aed927725bd0ff2b1412ede94afcfdf4
4c1e05799065b4c2ca77145bc0367164d2ecaf9a90c2ff476a5b4ae005394f9b
GET /js/pixel.js HTTP/1.1
Host: cdn.mediago.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/javascript
content-length: 92454
date: Wed, 08 May 2024 01:42:24 GMT
last-modified: Sun, 28 Apr 2024 07:08:42 GMT
etag: "0586bb55e87c7d9894960ddc7909f7aa"
x-amz-server-side-encryption: AES256
x-amz-version-id: 2ScvmyMIhHc8ebWNP3OEt23vl3g.9crH
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 98794c1dec0d4e7b10ddf0faa094cf94.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Ou904b0HE1w3l3N7XZH99Ii6XHhb9kYbuF02eOBbamtDZqWf7nmGdw==
age: 35901
vary: Origin
X-Firefox-Spdy: h2
siteimproveanalytics.com/js/siteanalyze_6255350.js
104.21.50.150200 OK 68 B URL GET HTTP/2 siteimproveanalytics.com/js/siteanalyze_6255350.js
IP 104.21.50.150:443
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=cee8e8e68744411fbedf3a15cf269ac8&h=true
Certificate IssuerGoogle Trust Services LLC
Subjectsiteimproveanalytics.com
FingerprintAF:D6:9C:F7:A0:DC:1A:1D:90:B8:5F:FF:5B:F3:8A:31:24:E2:E3:2B
ValidityTue, 23 Apr 2024 07:22:16 GMT - Mon, 22 Jul 2024 07:22:15 GMT
File type ASCII text, with no line terminators
Hash 8452ae713340916635198c94e9c13359
8f8bd309c51274fcbc6eb1b99805f947cdd50a69
8708150ed307463ea1670f6644f73ec82e3b6e8d6ff95be629b1ba4727f31ac7
GET /js/siteanalyze_6255350.js HTTP/1.1
Host: siteimproveanalytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 08 May 2024 11:40:44 GMT
content-type: application/javascript; charset=utf-8
content-length: 68
x-amz-id-2: ruIDl7JfagyJNDFoZpoxEXkc5AW1HlBRNdkSVNd0f2GXeovAAwwn4Scx2O6eU5WAU6V61T+0McmMxYjyWYTjXA==
x-amz-request-id: T0SJ2ARX1XYS2HST
cache-control: max-age=86400, no-transform
content-encoding: gzip
last-modified: Fri, 23 Aug 2019 22:14:39 GMT
etag: "6ef42917cbd55a82896411683d106194"
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wbhWZvX94WoEiL0T94hGQhKKGG8qim8Y6dmJ57oVFUmiD6aPnFU937LcAL4Demtv3yTde8I%2FR7mEfI5HvIBBMOcCWuDNHOTnJPzzkox8PD3T9F3culrFvAYzLxyq%2FoeNbwCoukOflkJLzno%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 88092d397d415690-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
dnzkifeab6.execute-api.us-east-1.amazonaws.com/Prod/GetLyticsUserData
143.204.55.5200 OK 3 B URL POST HTTP/2 dnzkifeab6.execute-api.us-east-1.amazonaws.com/Prod/GetLyticsUserData
IP 143.204.55.5:443
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=cee8e8e68744411fbedf3a15cf269ac8&h=true
Certificate IssuerAmazon
Subject*.execute-api.us-east-1.amazonaws.com
Fingerprint85:1D:9B:37:86:17:AA:A6:C5:3C:48:6E:1F:0C:1C:74:E8:35:81:5E
ValidityMon, 08 Jan 2024 00:00:00 GMT - Tue, 04 Feb 2025 23:59:59 GMT
Hash 8a80554c91d9fca8acb82f023de02f11
5f36b2ea290645ee34d943220a14b54ee5ea5be5
ca3d163bab055381827226140568f3bef7eaac187cebd76878e0b63e9e442356
OPTIONS /Prod/GetLyticsUserData HTTP/1.1
Host: dnzkifeab6.execute-api.us-east-1.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://pro.oxfordclub.com/
Origin: https://pro.oxfordclub.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/json
content-length: 3
date: Wed, 08 May 2024 11:40:44 GMT
x-amzn-requestid: 9c54b607-9ec5-4a4e-ae1a-dfd27b71756c
access-control-allow-origin: *
access-control-allow-headers: Content-Type,X-Amz-Date,Authorization,X-Api-Key,X-Amz-Security-Token
x-amz-apigw-id: XcytgHi8oAMEN1g=
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
x-cache: Miss from cloudfront
via: 1.1 095562e8748e634f880ee3c4ada2b6d0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 0eg8wh1wd-e6gYX0pAEXCJr8-Y0DhTfnqMWZzdn9kB1Q6VyxUnfb5w==
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/destination?id=AW-780266039&l=dataLayer&cx=c
142.250.74.168200 OK 79 kB URL GET HTTP/3 www.googletagmanager.com/gtag/destination?id=AW-780266039&l=dataLayer&cx=c
IP 142.250.74.168:443
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=cee8e8e68744411fbedf3a15cf269ac8&h=true
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint93:6B:D2:9D:92:BE:2D:D8:02:67:82:83:5E:EF:A3:F9:13:F3:26:AE
ValidityTue, 16 Apr 2024 03:18:45 GMT - Tue, 09 Jul 2024 03:18:44 GMT
File type JavaScript source, ASCII text, with very long lines (1822)
Hash 9104586bddd0440f3570306155d6d067
266b4967aabb5081466d0c9c0975e3f50b866d4e
78645d511d0220e0c25527c9a41ce83bbd80fe23df4fbe9c425036831a50ced3
GET /gtag/destination?id=AW-780266039&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 08 May 2024 11:40:44 GMT
expires: Wed, 08 May 2024 11:40:44 GMT
cache-control: private, max-age=900
last-modified: Wed, 08 May 2024 09:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 79072
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.googletagmanager.com/gtag/destination?id=AW-707706541&l=dataLayer&cx=c
142.250.74.168200 OK 79 kB URL GET HTTP/3 www.googletagmanager.com/gtag/destination?id=AW-707706541&l=dataLayer&cx=c
IP 142.250.74.168:443
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=cee8e8e68744411fbedf3a15cf269ac8&h=true
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint93:6B:D2:9D:92:BE:2D:D8:02:67:82:83:5E:EF:A3:F9:13:F3:26:AE
ValidityTue, 16 Apr 2024 03:18:45 GMT - Tue, 09 Jul 2024 03:18:44 GMT
File type JavaScript source, ASCII text, with very long lines (1822)
Hash 23cfbf38e6a53ba110a34c991e0222d3
d72e89a483636ab2d9eb5780b12b0d7882c4534f
2263c5c07c694223eceaf950a94641708ef1e77f8602a885f4e3d106c382efd2
GET /gtag/destination?id=AW-707706541&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 08 May 2024 11:40:44 GMT
expires: Wed, 08 May 2024 11:40:44 GMT
cache-control: private, max-age=900
last-modified: Wed, 08 May 2024 09:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 79071
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.googletagmanager.com/gtag/destination?id=AW-780296261&l=dataLayer&cx=c
142.250.74.168200 OK 89 kB URL GET HTTP/3 www.googletagmanager.com/gtag/destination?id=AW-780296261&l=dataLayer&cx=c
IP 142.250.74.168:443
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=cee8e8e68744411fbedf3a15cf269ac8&h=true
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint93:6B:D2:9D:92:BE:2D:D8:02:67:82:83:5E:EF:A3:F9:13:F3:26:AE
ValidityTue, 16 Apr 2024 03:18:45 GMT - Tue, 09 Jul 2024 03:18:44 GMT
File type JavaScript source, ASCII text, with very long lines (4179)
Hash 3df7552bdc21b3ca202c252cd149d94a
24d335db65f8a8b66a9e71472d3d80d5a156659c
81bcdf5e6a39d7fff11f99d5a07ab02367869e62437df2701068aa4c0112e969
GET /gtag/destination?id=AW-780296261&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 08 May 2024 11:40:44 GMT
expires: Wed, 08 May 2024 11:40:44 GMT
cache-control: private, max-age=900
last-modified: Wed, 08 May 2024 09:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 88550
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.googletagmanager.com/gtag/destination?id=AW-757445324&l=dataLayer&cx=c
142.250.74.168200 OK 82 kB URL GET HTTP/3 www.googletagmanager.com/gtag/destination?id=AW-757445324&l=dataLayer&cx=c
IP 142.250.74.168:443
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=cee8e8e68744411fbedf3a15cf269ac8&h=true
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint93:6B:D2:9D:92:BE:2D:D8:02:67:82:83:5E:EF:A3:F9:13:F3:26:AE
ValidityTue, 16 Apr 2024 03:18:45 GMT - Tue, 09 Jul 2024 03:18:44 GMT
File type JavaScript source, ASCII text, with very long lines (4179)
Hash 6b7d4395996094c136ea9d78413565d9
98610e19dd98f3601e351ba52e1a76d9a57f4d25
07aa8a6dd46a205de6c3fd28787b5af1c09fcbaa802171ac9568eeae3665cfe7
GET /gtag/destination?id=AW-757445324&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 08 May 2024 11:40:44 GMT
expires: Wed, 08 May 2024 11:40:44 GMT
cache-control: private, max-age=900
last-modified: Wed, 08 May 2024 09:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 82109
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
c.lytics.io/api/personalize/9c32784e3cc4888a693a7988ad64c63d/user/_uid/1a7f2710-2864-4691-b804-308d54307e52?segments=true&mergestate=true&state=%7B%22_uid%22%3A%221a7f2710-2864-4691-b804-308d54307e52%22%2C%22_sesstart%22%3A%221%22%2C%22_tz%22%3A0%2C%22_ul%22%3A%22en-US%22%2C%22_sz%22%3A%221280x1024%22%2C%22_nmob%22%3A%22t%22%2C%22_device%22%3A%22desktop%22%2C%22url%22%3A%22pro.oxfordclub.com%2Fp%2FOILTO99BRKLT2YRDSTOT%2FNBRK4404%2F%3Fs1%3Dcee8e8e68744411fbedf3a15cf269ac8%26h%3Dtrue%22%2C%22_v%22%3A%223.0.35%22%7D&ts=1715168443565&callback=u_11687937807303484
104.26.3.22 94 kB URL GET c.lytics.io/api/personalize/9c32784e3cc4888a693a7988ad64c63d/user/_uid/1a7f2710-2864-4691-b804-308d54307e52?segments=true&mergestate=true&state=%7B%22_uid%22%3A%221a7f2710-2864-4691-b804-308d54307e52%22%2C%22_sesstart%22%3A%221%22%2C%22_tz%22%3A0%2C%22_ul%22%3A%22en-US%22%2C%22_sz%22%3A%221280x1024%22%2C%22_nmob%22%3A%22t%22%2C%22_device%22%3A%22desktop%22%2C%22url%22%3A%22pro.oxfordclub.com%2Fp%2FOILTO99BRKLT2YRDSTOT%2FNBRK4404%2F%3Fs1%3Dcee8e8e68744411fbedf3a15cf269ac8%26h%3Dtrue%22%2C%22_v%22%3A%223.0.35%22%7D&ts=1715168443565&callback=u_11687937807303484
IP 104.26.3.22:0
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=cee8e8e68744411fbedf3a15cf269ac8&h=true
Certificate IssuerLet's Encrypt
Subjectlytics.io
FingerprintB6:F8:34:ED:E4:C3:43:5C:FC:38:D0:CB:58:F7:80:C5:76:62:78:79
ValiditySat, 16 Mar 2024 02:39:35 GMT - Fri, 14 Jun 2024 02:39:34 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash e20672c579f7d2d0daea1f1d8c2d928d
f20d998a6ad4cc0ed80b0ba46ef2a5edb7e451c7
3ce7165bed6a6b99f50cf4d29c09a6b218284bc7db1d711b3e507e6dab4b9918
GET /api/personalize/9c32784e3cc4888a693a7988ad64c63d/user/_uid/1a7f2710-2864-4691-b804-308d54307e52?segments=true&mergestate=true&state=%7B%22_uid%22%3A%221a7f2710-2864-4691-b804-308d54307e52%22%2C%22_sesstart%22%3A%221%22%2C%22_tz%22%3A0%2C%22_ul%22%3A%22en-US%22%2C%22_sz%22%3A%221280x1024%22%2C%22_nmob%22%3A%22t%22%2C%22_device%22%3A%22desktop%22%2C%22url%22%3A%22pro.oxfordclub.com%2Fp%2FOILTO99BRKLT2YRDSTOT%2FNBRK4404%2F%3Fs1%3Dcee8e8e68744411fbedf3a15cf269ac8%26h%3Dtrue%22%2C%22_v%22%3A%223.0.35%22%7D&ts=1715168443565&callback=u_11687937807303484 HTTP/1.1
Host: c.lytics.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 08 May 2024 11:40:43 GMT
content-type: application/json
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, Cookie, *
access-control-allow-methods: GET
access-control-allow-origin:
strict-transport-security: max-age=63072000;
x-lytics-trace: da46d1e3a6feccd22be9bc3844da2769
via: 1.1 google
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1BXc424Xh1FW4nXbt3F409j%2FAqsL4A5lu8dF1Z38wcriVryDD1Xzm%2F0vwEKZlPkkLx6As%2F12mOg66%2FMYW%2FAbHblvgnrojne2Nvv6qKZEt20WBLcF9ZSIETU%2Bf7rI"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 88092d3458645688-OSL
content-encoding: br
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/destination?id=AW-665056240&l=dataLayer&cx=c
142.250.74.168200 OK 82 kB URL GET HTTP/3 www.googletagmanager.com/gtag/destination?id=AW-665056240&l=dataLayer&cx=c
IP 142.250.74.168:443
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=cee8e8e68744411fbedf3a15cf269ac8&h=true
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint93:6B:D2:9D:92:BE:2D:D8:02:67:82:83:5E:EF:A3:F9:13:F3:26:AE
ValidityTue, 16 Apr 2024 03:18:45 GMT - Tue, 09 Jul 2024 03:18:44 GMT
File type JavaScript source, ASCII text, with very long lines (4179)
Hash 33302f5c4f927bb9972318246425f17f
878f3cf2cdfb1dafb7decf50c73e075330821095
9e9f5f7387053e634b005ebe64b92c71ac1d51742cca984fd9709e9cc744f99a
GET /gtag/destination?id=AW-665056240&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 08 May 2024 11:40:44 GMT
expires: Wed, 08 May 2024 11:40:44 GMT
cache-control: private, max-age=900
last-modified: Wed, 08 May 2024 09:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 81764
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
fast.wistia.com/assets/images/blank.gif
151.101.2.132200 OK 1.2 kB URL GET HTTP/2 fast.wistia.com/assets/images/blank.gif
IP 151.101.2.132:443
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=cee8e8e68744411fbedf3a15cf269ac8&h=true
Certificate IssuerGlobalSign nv-sa
Subjectfast.wistia.com
Fingerprint75:69:0C:BF:54:26:59:0B:9A:83:E3:04:94:DE:EB:3F:E5:F6:6D:66
ValidityThu, 04 Apr 2024 00:50:10 GMT - Tue, 06 May 2025 00:50:09 GMT
File type GIF image data, version 89a, 100 x 100
Hash fbdc4ed9a1e2ee4917a265306927bcf1
6d177725d8230df0457e72004080f712e26fe624
a78759ea185fd0fa42ca9be1fc5bca4d3167a2836dc6c85e479a19dbf57fe2c2
GET /assets/images/blank.gif HTTP/1.1
Host: fast.wistia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-methods: GET, HEAD
last-modified: Wed, 10 May 2023 19:48:54 GMT
etag: "fbdc4ed9a1e2ee4917a265306927bcf1"
x-amz-server-side-encryption: AES256
content-type: image/gif
server: AmazonS3
via: 1.1 varnish, 1.1 varnish
cache-control: public, max-age=3600
access-control-allow-origin: *
timing-allow-origin: *
accept-ranges: bytes
date: Wed, 08 May 2024 11:40:44 GMT
age: 2034
x-served-by: cache-iad-kcgs7200077-IAD, cache-hel1410024-HEL
x-cache: HIT, HIT
x-cache-hits: 25, 143
x-timer: S1715168445.849722,VS0,VE0
vary: Accept-Encoding
strict-transport-security: max-age=0
x-ecma-v: modern
x-browser: firefox
x-browser-version: 96
content-length: 1214
X-Firefox-Spdy: h2
fast.wistia.com/embed/medias/sr8r36952j.m3u8
151.101.2.132200 OK 757 B URL GET HTTP/2 fast.wistia.com/embed/medias/sr8r36952j.m3u8
IP 151.101.2.132:443
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=cee8e8e68744411fbedf3a15cf269ac8&h=true
Certificate IssuerGlobalSign nv-sa
Subjectfast.wistia.com
Fingerprint75:69:0C:BF:54:26:59:0B:9A:83:E3:04:94:DE:EB:3F:E5:F6:6D:66
ValidityThu, 04 Apr 2024 00:50:10 GMT - Tue, 06 May 2025 00:50:09 GMT
Hash 56f02a07f87baef2b88ce74a81bd955a
7046211269cb8f47bded7987cd89e720b47a695b
c000771054153c7ee49a23043fd4bb666b8683e027d8b3ffdbd12f0eb4cff7f1
GET /embed/medias/sr8r36952j.m3u8 HTTP/1.1
Host: fast.wistia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pro.oxfordclub.com
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/x-mpegURL
server: envoy
x-content-type-options: nosniff
x-permitted-cross-domain-policies: none
access-control-allow-origin: *
timing-allow-origin: *
cache-control: public, no-cache
etag: W/"c000771054153c7ee49a23043fd4bb66"
x-request-id: 41870f8c-87e3-4d0b-be40-ce0d119e9951
x-runtime: 0.023375
x-envoy-upstream-service-time: 24
via: 1.1 38ecebcaa39c8742da2b6336935bb446.cloudfront.net (CloudFront), 1.1 varnish, 1.1 varnish
x-amz-cf-pop: IAD89-C3
x-amz-cf-id: L8e9lVopFpa5NMhjqxmX12j0_PI1zoHH_HqHciW8IJ4UIKW7dVf5YQ==
accept-ranges: bytes
age: 82832
date: Wed, 08 May 2024 11:40:44 GMT
x-served-by: cache-iad-kiad7000030-IAD, cache-hel1410024-HEL
x-cache: Miss from cloudfront, HIT, HIT
x-cache-hits: 20302, 0
x-timer: S1715168445.849291,VS0,VE1
vary: Accept-Encoding,X-Forwarded-Proto,X-ECMA-Override
strict-transport-security: max-age=0
x-ecma-v: modern
x-browser: firefox
x-browser-version: 96
content-length: 757
X-Firefox-Spdy: h2
cdn.mediago.io/js/h/val.html?postM=1&trackingid=
54.230.111.126200 OK 9.6 kB URL GET HTTP/2 cdn.mediago.io/js/h/val.html?postM=1&trackingid=
IP 54.230.111.126:443
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=cee8e8e68744411fbedf3a15cf269ac8&h=true
Certificate IssuerAmazon
Subject*.mediago.io
FingerprintD4:6D:29:DE:0A:B4:82:54:F2:27:37:C3:E6:0A:2E:B9:B5:BC:A1:C5
ValidityMon, 07 Aug 2023 00:00:00 GMT - Wed, 04 Sep 2024 23:59:59 GMT
File type HTML document, ASCII text, with very long lines (9570), with no line terminators
Hash cc530b920ecf958bf8c179d0c09f309c
71ad0d2891ee53fe380fd1426da9f952639fc51d
392c4b91f12f7d3c5d84636f11883a871840ba815f286e637dcae30ed255d2c7
GET /js/h/val.html?postM=1&trackingid= HTTP/1.1
Host: cdn.mediago.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/html
content-length: 9570
date: Wed, 08 May 2024 07:02:52 GMT
last-modified: Wed, 08 May 2024 07:02:48 GMT
etag: "cc530b920ecf958bf8c179d0c09f309c"
x-amz-server-side-encryption: AES256
x-amz-version-id: .hfAylJSPwNCTPYOApUz8EpAStYVYpOw
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 98794c1dec0d4e7b10ddf0faa094cf94.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 0wzE_JBoBvO0zd3X-17zwOCQnJ3EeLmcdZWBuINIvdy4OeFLBzNAIg==
age: 16673
vary: Origin
X-Firefox-Spdy: h2
region1.analytics.google.com/g/collect?v=2&tid=G-BBMPM3EJHQ>m=45je4510v9106739609z8813057436za200&_p=1715168442849&_gaz=1&gcd=13l3l3l2l1&npa=1&dma_cps=sypham&dma=1&cid=1632723510.1715168444&ul=en-us&sr=1280x1024&frm=0&pscdl=noapi&_s=1&sid=1715168444&sct=1&seg=0&dl=https%3A%2F%2Fpro.oxfordclub.com%2Fp%2FOILTO99BRKLT2YRDSTOT%2FNBRK4404%2F%3Fs1%3Dcee8e8e68744411fbedf3a15cf269ac8%26h%3Dtrue&dt=The%20Oxford%20Club&en=page_view&_fv=1&_nsi=1&_ss=1&ep.promocode=NBRK4404&ep.device_width=large&ep.iris_campaign_name=BRK%20Oil&ep.media_channel=N%20-%20Agora%20Swap%20Website&ep.placement_name=Dedicated&ep.acquisition_method=UX%20-%20Web%2FEmail%20Promo%20External&ep.list_name=8020%20Publishing&ep.item_type=Subscription&ep.page_type=promo%20page&ep.iris_tree_name=NLOilAltLeadNoBookTO99%20(Video)%20No%20Abandon&ep.iris_page_1=NLOilAltLeadNoBookTO49%20(Video)&ep.template_type=video&ep.effort_type=Dedicated&ep.item_code=BRK&ep.item_subscription_type=FrontEnd&tfd=5341
216.239.34.36204 No Content 0 B URL POST HTTP/2 region1.analytics.google.com/g/collect?v=2&tid=G-BBMPM3EJHQ>m=45je4510v9106739609z8813057436za200&_p=1715168442849&_gaz=1&gcd=13l3l3l2l1&npa=1&dma_cps=sypham&dma=1&cid=1632723510.1715168444&ul=en-us&sr=1280x1024&frm=0&pscdl=noapi&_s=1&sid=1715168444&sct=1&seg=0&dl=https%3A%2F%2Fpro.oxfordclub.com%2Fp%2FOILTO99BRKLT2YRDSTOT%2FNBRK4404%2F%3Fs1%3Dcee8e8e68744411fbedf3a15cf269ac8%26h%3Dtrue&dt=The%20Oxford%20Club&en=page_view&_fv=1&_nsi=1&_ss=1&ep.promocode=NBRK4404&ep.device_width=large&ep.iris_campaign_name=BRK%20Oil&ep.media_channel=N%20-%20Agora%20Swap%20Website&ep.placement_name=Dedicated&ep.acquisition_method=UX%20-%20Web%2FEmail%20Promo%20External&ep.list_name=8020%20Publishing&ep.item_type=Subscription&ep.page_type=promo%20page&ep.iris_tree_name=NLOilAltLeadNoBookTO99%20(Video)%20No%20Abandon&ep.iris_page_1=NLOilAltLeadNoBookTO49%20(Video)&ep.template_type=video&ep.effort_type=Dedicated&ep.item_code=BRK&ep.item_subscription_type=FrontEnd&tfd=5341
IP 216.239.34.36:443
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=cee8e8e68744411fbedf3a15cf269ac8&h=true
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint93:6B:D2:9D:92:BE:2D:D8:02:67:82:83:5E:EF:A3:F9:13:F3:26:AE
ValidityTue, 16 Apr 2024 03:18:45 GMT - Tue, 09 Jul 2024 03:18:44 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-BBMPM3EJHQ>m=45je4510v9106739609z8813057436za200&_p=1715168442849&_gaz=1&gcd=13l3l3l2l1&npa=1&dma_cps=sypham&dma=1&cid=1632723510.1715168444&ul=en-us&sr=1280x1024&frm=0&pscdl=noapi&_s=1&sid=1715168444&sct=1&seg=0&dl=https%3A%2F%2Fpro.oxfordclub.com%2Fp%2FOILTO99BRKLT2YRDSTOT%2FNBRK4404%2F%3Fs1%3Dcee8e8e68744411fbedf3a15cf269ac8%26h%3Dtrue&dt=The%20Oxford%20Club&en=page_view&_fv=1&_nsi=1&_ss=1&ep.promocode=NBRK4404&ep.device_width=large&ep.iris_campaign_name=BRK%20Oil&ep.media_channel=N%20-%20Agora%20Swap%20Website&ep.placement_name=Dedicated&ep.acquisition_method=UX%20-%20Web%2FEmail%20Promo%20External&ep.list_name=8020%20Publishing&ep.item_type=Subscription&ep.page_type=promo%20page&ep.iris_tree_name=NLOilAltLeadNoBookTO99%20(Video)%20No%20Abandon&ep.iris_page_1=NLOilAltLeadNoBookTO49%20(Video)&ep.template_type=video&ep.effort_type=Dedicated&ep.item_code=BRK&ep.item_subscription_type=FrontEnd&tfd=5341 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pro.oxfordclub.com
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://pro.oxfordclub.com
date: Wed, 08 May 2024 11:40:44 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
dnzkifeab6.execute-api.us-east-1.amazonaws.com/Prod/GetLyticsUserData
143.204.55.5200 OK 76 B URL POST HTTP/2 dnzkifeab6.execute-api.us-east-1.amazonaws.com/Prod/GetLyticsUserData
IP 143.204.55.5:443
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=cee8e8e68744411fbedf3a15cf269ac8&h=true
Certificate IssuerAmazon
Subject*.execute-api.us-east-1.amazonaws.com
Fingerprint85:1D:9B:37:86:17:AA:A6:C5:3C:48:6E:1F:0C:1C:74:E8:35:81:5E
ValidityMon, 08 Jan 2024 00:00:00 GMT - Tue, 04 Feb 2025 23:59:59 GMT
Hash 74cd2ce4def6577d2db4502c943c3289
c5ac742f41f7052834573a7f11ec085cc8506d55
674d1ff7419bdf7f1dafd4a41db01a4feb1d802122213ecc456dd43f72791984
POST /Prod/GetLyticsUserData HTTP/1.1
Host: dnzkifeab6.execute-api.us-east-1.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 22
Origin: https://pro.oxfordclub.com
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/json
content-length: 76
date: Wed, 08 May 2024 11:40:44 GMT
x-amzn-requestid: 918a5a1d-342d-4b3a-92a6-09af98e5bf10
access-control-allow-origin: *
access-control-allow-headers: Content-Type,X-Amz-Date,Authorization,X-Api-Key,X-Amz-Security-Token
x-amz-apigw-id: XcytjE2jIAMEaIw=
access-control-allow-methods: DELETE, GET, HEAD, OPTIONS, PATCH, POST, PUT
x-amzn-trace-id: Root=1-663b64bc-47d1bd2f0e78a18e58819e75;Parent=1878b53f7bdddcfc;Sampled=0;lineage=17be0e8a:0
x-cache: Miss from cloudfront
via: 1.1 095562e8748e634f880ee3c4ada2b6d0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: c8Wl9OTpyIRytB3_dkPUFT6UiWUDb8iNIZTAto4EOGEOCBOLC6OrFg==
X-Firefox-Spdy: h2
embed-cloudfront.wistia.com/deliveries/72c73c76f447d30de486b20dfb9bb339e8f61c6c.m3u8
143.204.55.51200 OK 77 kB URL GET HTTP/2 embed-cloudfront.wistia.com/deliveries/72c73c76f447d30de486b20dfb9bb339e8f61c6c.m3u8
IP 143.204.55.51:443
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=cee8e8e68744411fbedf3a15cf269ac8&h=true
Certificate IssuerAmazon
Subject*.wistia.com
Fingerprint44:FA:DB:AB:41:36:F5:96:F7:BF:3A:E7:D8:61:50:5C:26:80:3D:D2
ValidityMon, 01 Jan 2024 00:00:00 GMT - Tue, 28 Jan 2025 23:59:59 GMT
Hash 7f746bbd8437c11abda75462175cc003
b20652de0877480b02633a65586525b6847a4a38
a2914a76607431e4d17193f94f434524740bca6ca76ced7c9dfa2584b1a4cb20
GET /deliveries/72c73c76f447d30de486b20dfb9bb339e8f61c6c.m3u8 HTTP/1.1
Host: embed-cloudfront.wistia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pro.oxfordclub.com
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/vnd.apple.mpegurl
content-length: 77338
server: envoy
date: Wed, 08 May 2024 06:30:38 GMT
expires: Thu, 08 May 2025 06:30:38 GMT
cache-control: max-age=31536000
last-modified: Mon, 05 Nov 2018 10:11:00 GMT
edge-cache-tag: 72c73c76f447d30de486b20dfb9bb339e8f61c6c-hls-segment
surrogate-key: 72c73c76f447d30de486b20dfb9bb339e8f61c6c-hls-segment
accept-ranges: bytes
x-envoy-upstream-service-time: 209
x-cache: Hit from cloudfront
via: 1.1 41dc61beb3fe8e8c2c299a2522d8330c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: CcdoIuwRBMFN90bJNjKRKsMrqOjccCicaUeSjaXDdR5LmscFLDIQhQ==
age: 18607
x-cdn: cloudfront
access-control-allow-origin: *
access-control-expose-headers: Server,range,Content-Length,Content-Range,x-cdn
X-Firefox-Spdy: h2
embed-cloudfront.wistia.com/deliveries/72c73c76f447d30de486b20dfb9bb339e8f61c6c.m3u8/seg-1-v1-a1.ts
143.204.55.51200 OK 557 kB URL GET HTTP/2 embed-cloudfront.wistia.com/deliveries/72c73c76f447d30de486b20dfb9bb339e8f61c6c.m3u8/seg-1-v1-a1.ts
IP 143.204.55.51:443
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=cee8e8e68744411fbedf3a15cf269ac8&h=true
Certificate IssuerAmazon
Subject*.wistia.com
Fingerprint44:FA:DB:AB:41:36:F5:96:F7:BF:3A:E7:D8:61:50:5C:26:80:3D:D2
ValidityMon, 01 Jan 2024 00:00:00 GMT - Tue, 28 Jan 2025 23:59:59 GMT
File type MPEG transport stream data
Size 557 kB (556856 bytes)
Hash 702204fabf55d966f3384836d3a5491d
35a6899a732d867f92a1a664f76ea7c7df3fc467
d6169904e700805b4a88360cbc4e62aa7503a016d21e3e68a12620364b227a39
GET /deliveries/72c73c76f447d30de486b20dfb9bb339e8f61c6c.m3u8/seg-1-v1-a1.ts HTTP/1.1
Host: embed-cloudfront.wistia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pro.oxfordclub.com
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: video/MP2T
content-length: 556856
server: envoy
date: Wed, 01 May 2024 13:33:21 GMT
expires: Thu, 01 May 2025 13:33:21 GMT
cache-control: max-age=31536000
last-modified: Mon, 05 Nov 2018 10:11:00 GMT
edge-cache-tag: 72c73c76f447d30de486b20dfb9bb339e8f61c6c-hls-segment
surrogate-key: 72c73c76f447d30de486b20dfb9bb339e8f61c6c-hls-segment
accept-ranges: bytes
x-envoy-upstream-service-time: 165
x-cache: Hit from cloudfront
via: 1.1 41dc61beb3fe8e8c2c299a2522d8330c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 3Ik0LiqdqYPgW_p_w_x44HFeSJBMaCLP-wgL1ncEMvtFMgJ3AuqwVw==
age: 598043
x-cdn: cloudfront
access-control-allow-origin: *
access-control-expose-headers: Server,range,Content-Length,Content-Range,x-cdn
X-Firefox-Spdy: h2
pipedream.wistia.com/mput?topic=metrics
143.204.55.51200 OK 2 B URL POST HTTP/2 pipedream.wistia.com/mput?topic=metrics
IP 143.204.55.51:443
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=cee8e8e68744411fbedf3a15cf269ac8&h=true
Certificate IssuerAmazon
Subject*.wistia.com
Fingerprint44:FA:DB:AB:41:36:F5:96:F7:BF:3A:E7:D8:61:50:5C:26:80:3D:D2
ValidityMon, 01 Jan 2024 00:00:00 GMT - Tue, 28 Jan 2025 23:59:59 GMT
File type ASCII text, with no line terminators
Hash e0aa021e21dddbd6d8cecec71e9cf564
9ce3bd4224c8c1780db56b4125ecf3f24bf748b7
565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3
POST /mput?topic=metrics HTTP/1.1
Host: pipedream.wistia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 754
Origin: https://pro.oxfordclub.com
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/plain; charset=utf-8
content-length: 2
date: Wed, 08 May 2024 11:40:45 GMT
access-control-allow-methods: POST, OPTIONS
access-control-allow-origin: *
x-envoy-upstream-service-time: 1
server: envoy
x-cache: Miss from cloudfront
via: 1.1 41dc61beb3fe8e8c2c299a2522d8330c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 8blAYtNdWstv3a-m15hvTSBKWPBFpwHYW36ZdI1R97iWa4hB3nlezw==
X-Firefox-Spdy: h2
distillery.wistia.com/x
54.230.111.55204 No Content 0 B IP 54.230.111.55:443
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=cee8e8e68744411fbedf3a15cf269ac8&h=true
Certificate IssuerAmazon
Subjectstats-tap-production-cloudfront-app-cname.wistia.com
Fingerprint37:C6:AB:79:1C:DF:9B:5E:3A:B8:3E:F1:0C:1D:48:BF:89:2D:1F:40
ValidityWed, 13 Sep 2023 00:00:00 GMT - Fri, 11 Oct 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /x HTTP/1.1
Host: distillery.wistia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 1768
Origin: https://pro.oxfordclub.com
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Wed, 08 May 2024 11:40:45 GMT
access-control-allow-origin: *
cache-control: max-age=0, private, must-revalidate
server: envoy
x-envoy-upstream-service-time: 1
x-cache: Miss from cloudfront
via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: rHJXWZejyCUN3hOIzdFV_NpYAHdHKFoe2jMRLx1usKuv4rpWPyD1Qg==
X-Firefox-Spdy: h2
fast.wistia.com/assets/external/allIntegrations.js
151.101.2.132200 OK 5.8 kB URL GET HTTP/2 fast.wistia.com/assets/external/allIntegrations.js
IP 151.101.2.132:443
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=cee8e8e68744411fbedf3a15cf269ac8&h=true
Certificate IssuerGlobalSign nv-sa
Subjectfast.wistia.com
Fingerprint75:69:0C:BF:54:26:59:0B:9A:83:E3:04:94:DE:EB:3F:E5:F6:6D:66
ValidityThu, 04 Apr 2024 00:50:10 GMT - Tue, 06 May 2025 00:50:09 GMT
File type JavaScript source, ASCII text, with very long lines (23371)
Hash 43cd782e5591ad905087f5f3d4288c42
993ecd55d09f2b5e2cd7bcfd4cf81ce136a8b619
a5197605dd449d181a09f99451492699833ffc5577dea5d2192e5e59b52f97b4
GET /assets/external/allIntegrations.js HTTP/1.1
Host: fast.wistia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pro.oxfordclub.com
DNT: 1
Connection: keep-alive
Referer: https://fast.wistia.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-methods: GET, HEAD
last-modified: Mon, 06 May 2024 19:22:13 GMT
etag: "224be5fca75a43afb668d422f2d5e05a"
x-amz-server-side-encryption: AES256
content-encoding: br
content-type: text/javascript
server: AmazonS3
via: 1.1 varnish, 1.1 varnish
cache-control: public, max-age=3600
access-control-allow-origin: *
timing-allow-origin: *
accept-ranges: bytes
date: Wed, 08 May 2024 11:40:45 GMT
age: 1219
x-served-by: cache-iad-kjyo7100090-IAD, cache-hel1410024-HEL
x-cache: HIT, HIT
x-cache-hits: 52, 66
x-timer: S1715168445.198484,VS0,VE0
vary: Accept-Encoding
strict-transport-security: max-age=0
x-ecma-v: modern
x-browser: firefox
x-browser-version: 96
asset-version: 28e29ceb2b43efa40a2a9a4feeda1b13bcd24ac3
content-length: 5775
X-Firefox-Spdy: h2
protect-us.mimecast.com/s/d4IGCAD74Js25qJyi9o4Az?domain=cdn1.decide.dev
205.139.111.113307 Temporary Redirect 0 B URL GET HTTP/1.1 protect-us.mimecast.com/s/d4IGCAD74Js25qJyi9o4Az?domain=cdn1.decide.dev
IP 205.139.111.113:443
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=cee8e8e68744411fbedf3a15cf269ac8&h=true
Certificate IssuerDigiCert Inc
Subject*.mimecast.com
FingerprintCD:B1:F9:53:BD:55:54:E8:D2:14:46:80:DE:6B:50:27:E1:24:DC:F8
ValidityTue, 30 Jan 2024 00:00:00 GMT - Tue, 25 Feb 2025 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /s/d4IGCAD74Js25qJyi9o4Az?domain=cdn1.decide.dev HTTP/1.1
Host: protect-us.mimecast.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 307 Temporary Redirect
Date: Wed, 08 May 2024 11:40:45 GMT
Content-Length: 0
Connection: keep-alive
Location: https://protect-us.mimecast.com/r/KrpwNc6Py8pASOytvMygnBE9MffFobwEWKmoANEc65SV1F38LTJjnCdYFBmPWP8j90cqTpy1BAczii4-QaSgFIXSsSSnGXWWKiJ6ONSh6heBI2XXaIyq5x26b-P3z6T4Z1IbQ13gJ69ah44qU7nxdBd6lQ3oOLcIq2cjiuRSmK3J9tV7qVANn3ogy1xIzzc6qaFzxwRRtIHZjXS9Dkpzme8v76NeeXL3hqBIYtxZ-6zNR19NNT_WJ_8K86H7QisS8vhaz5WnhFQzWb4eceZOuQ06hAW2W0po4ebrwcUz4qppPIp33YE1nRFPVFt1Wi5Yqi9BtwdwKOgBQhEwFqz9Vgr1o2hbYm0lg23z5-odbHiZCtcyPxr7r7bpHHSBUrD3SM3t66Oh753YGC_QD70WRTDCb3abwCKSknJVDObbn3nefJxXPuFnY3Ca0p5OQ72CCMOXBQFkWvwTT6lbR5zk7LxHM0Qnm1tzG3O7Lbo5MvbLuFQMVCCOXfgrGOqV2wYzOFtJ7od56MKGvLRvLNhh__OLbMimfImKR1yvsgTIDRUAd9_6S5RWqNaZmdJDSgwkyBKPZnp23rlNWnFpTpp8HWdjlcvqg773fZtt22bEk-YAjEGXIXgZy7X-4EamZXuyErPnHneFaaQ8eXNZCf86tKu3m8MdDju_SjZmQ38E3iX9f0Hy3dgDymy6yeP0Gw2M3drWQ97C5VEsWKgHpyWdZyUjrwjJkOq-UrO4awNvP1F6_cxuz9QiQG-qDRSaOQTG-QDI9KOcsXSMrfqRYNgR0laQJbqjh-TpQgIEoHz1TIGcsBraiKaK3jdGuUXM2RL5B5EuHr5bbwpHcQ0g3slG4Yc0bnnTgpWepOcX7F2Sl21KArnLXlRBJVyJe3FsuoVWqydtVLxc2WaN4ePVq_SSN2qpY2SZNYPAgMD3EDX0AOzah1Veglj-AgZIgANipmfirrAq5ShOXGNJflB9ap71yjBeuKWb68kvHRcPKR2qGUfBvo9qYOx5DZhUm89itEJZ3B9ujF0GkGoSrEUn6xolk6hzKh_4nRXEVtI34PApRxrehlV7qSyFVTvkUVkbLCVZ401z_8JhoZ9owPOcYXXQwB_UF_o6jZVn9aVhJa4A6fv2R-uelzLFVC_wUQ9ZTASVLGRuClAki4UjLVt-4tHDLcXlV74eG4sZAf3VOk9xP2ijhwBPfcIetMdZ9gdaHJbtXIrJX4nVE60djABgziRlocFKDhmID2SGFgdXQwXE8YOFIKVIvEk_w_S0ynIqoaso7AI-XErnf2sCzYPGL1jfUsr3pdwN980zIQ5GqNnZvTIQ2zAvYOvZIza567Q9JjGEimypPZvh8vNyZmHdiBReFtk3UClq-HPtFX7TJqnN4D2YKK1_iVXgJoBusm_Z7sfJ2_jBVKBXEOpn9vCgd20lxpOd2LiNtnGdCFbbxiLdPxjVPVKbOJPUbbt4tvyYV7DGczCbLY-4qrGKnWzjqW9C62RWmh0mm13035O4uuLhCCKlwrfwvg7AMsum15FAaCvu8FO-ty1aUJXprUP3thWitKfavTS53t-EeXOsB9SkpH1W2b5flguMEXMZM6G04brDpVwB84TShq5R9kLR2MYdL7x0oumx6X8KXPkZwP046Szy0m4ZBKKqWGZK-PH6AabiaqgSfyyGO9FPzy8cIuExzvXW5T3DCDy-jzV5UeFZuaNVsPDWTeIGuJfKMIHnKdY46HiizbNXnigZq7GJoLCpziCl6sZlDr4WJBLA5YfWU7oNWs2LkQHJTGNm9D6Nh_wNyI1moEXoZzRc7R0p9HNZ9GVgRP5h8jNUqlkzbeT0fkcOSBOGvMMj-TbN-o-ocKQDX5f-hqXxATdsC7OHEdnxOVdyWO0z5vtW2IDRUi-UuWuGFtFjL1bTx5RGdvvNklG1qNSZvM39AvF452r9TKX0XrBbEpkDqN1zxP9Wr1f6JwjLEDU_8nxsWfYX7-32sEqOvezJhlvbA6EOVM_j1CHUuGUjzNJ9lxMWAoKakU5tcnlzjC4OSA-DfLuwdFnM3u5f7MsQsfzuwovzyBGmPCCVDY9dIh_yooJ9GOehtma76hI
Cache-control: no-store
Pragma: no-cache
X-Robots-Tag: noindex, nofollow
embed-cloudfront.wistia.com/deliveries/295bd86807b7c50fc99149048c79bb3fa085e56e.m3u8
143.204.55.51200 OK 77 kB URL GET HTTP/2 embed-cloudfront.wistia.com/deliveries/295bd86807b7c50fc99149048c79bb3fa085e56e.m3u8
IP 143.204.55.51:443
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=cee8e8e68744411fbedf3a15cf269ac8&h=true
Certificate IssuerAmazon
Subject*.wistia.com
Fingerprint44:FA:DB:AB:41:36:F5:96:F7:BF:3A:E7:D8:61:50:5C:26:80:3D:D2
ValidityMon, 01 Jan 2024 00:00:00 GMT - Tue, 28 Jan 2025 23:59:59 GMT
Hash 13a7c8e5f3849add622c18cd60650714
6b03548c75227c8019fa266c0485eb45968ea171
5c5f9a6bd23a6d1c6d76b58c957936f8f3665be944a34bbda213823c70b91d41
GET /deliveries/295bd86807b7c50fc99149048c79bb3fa085e56e.m3u8 HTTP/1.1
Host: embed-cloudfront.wistia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pro.oxfordclub.com
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/vnd.apple.mpegurl
content-length: 77338
server: envoy
last-modified: Mon, 05 Nov 2018 10:11:00 GMT
edge-cache-tag: 295bd86807b7c50fc99149048c79bb3fa085e56e-hls-segment
surrogate-key: 295bd86807b7c50fc99149048c79bb3fa085e56e-hls-segment
accept-ranges: bytes
x-envoy-upstream-service-time: 182
date: Mon, 06 May 2024 04:45:24 GMT
expires: Tue, 06 May 2025 04:45:24 GMT
cache-control: max-age=31536000
x-cache: Hit from cloudfront
via: 1.1 41dc61beb3fe8e8c2c299a2522d8330c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: RqKj8YnLSEpcKMrnVja9_A_W3Av0S3LBT4yqiaJ7HWLdo7m52bt6fA==
age: 197721
x-cdn: cloudfront
access-control-allow-origin: *
access-control-expose-headers: Server,range,Content-Length,Content-Range,x-cdn
X-Firefox-Spdy: h2
protect-us.mimecast.com/r/KrpwNc6Py8pASOytvMygnBE9MffFobwEWKmoANEc65SV1F38LTJjnCdYFBmPWP8j90cqTpy1BAczii4-QaSgFIXSsSSnGXWWKiJ6ONSh6heBI2XXaIyq5x26b-P3z6T4Z1IbQ13gJ69ah44qU7nxdBd6lQ3oOLcIq2cjiuRSmK3J9tV7qVANn3ogy1xIzzc6qaFzxwRRtIHZjXS9Dkpzme8v76NeeXL3hqBIYtxZ-6zNR19NNT_WJ_8K86H7QisS8vhaz5WnhFQzWb4eceZOuQ06hAW2W0po4ebrwcUz4qppPIp33YE1nRFPVFt1Wi5Yqi9BtwdwKOgBQhEwFqz9Vgr1o2hbYm0lg23z5-odbHiZCtcyPxr7r7bpHHSBUrD3SM3t66Oh753YGC_QD70WRTDCb3abwCKSknJVDObbn3nefJxXPuFnY3Ca0p5OQ72CCMOXBQFkWvwTT6lbR5zk7LxHM0Qnm1tzG3O7Lbo5MvbLuFQMVCCOXfgrGOqV2wYzOFtJ7od56MKGvLRvLNhh__OLbMimfImKR1yvsgTIDRUAd9_6S5RWqNaZmdJDSgwkyBKPZnp23rlNWnFpTpp8HWdjlcvqg773fZtt22bEk-YAjEGXIXgZy7X-4EamZXuyErPnHneFaaQ8eXNZCf86tKu3m8MdDju_SjZmQ38E3iX9f0Hy3dgDymy6yeP0Gw2M3drWQ97C5VEsWKgHpyWdZyUjrwjJkOq-UrO4awNvP1F6_cxuz9QiQG-qDRSaOQTG-QDI9KOcsXSMrfqRYNgR0laQJbqjh-TpQgIEoHz1TIGcsBraiKaK3jdGuUXM2RL5B5EuHr5bbwpHcQ0g3slG4Yc0bnnTgpWepOcX7F2Sl21KArnLXlRBJVyJe3FsuoVWqydtVLxc2WaN4ePVq_SSN2qpY2SZNYPAgMD3EDX0AOzah1Veglj-AgZIgANipmfirrAq5ShOXGNJflB9ap71yjBeuKWb68kvHRcPKR2qGUfBvo9qYOx5DZhUm89itEJZ3B9ujF0GkGoSrEUn6xolk6hzKh_4nRXEVtI34PApRxrehlV7qSyFVTvkUVkbLCVZ401z_8JhoZ9owPOcYXXQwB_UF_o6jZVn9aVhJa4A6fv2R-uelzLFVC_wUQ9ZTASVLGRuClAki4UjLVt-4tHDLcXlV74eG4sZAf3VOk9xP2ijhwBPfcIetMdZ9gdaHJbtXIrJX4nVE60djABgziRlocFKDhmID2SGFgdXQwXE8YOFIKVIvEk_w_S0ynIqoaso7AI-XErnf2sCzYPGL1jfUsr3pdwN980zIQ5GqNnZvTIQ2zAvYOvZIza567Q9JjGEimypPZvh8vNyZmHdiBReFtk3UClq-HPtFX7TJqnN4D2YKK1_iVXgJoBusm_Z7sfJ2_jBVKBXEOpn9vCgd20lxpOd2LiNtnGdCFbbxiLdPxjVPVKbOJPUbbt4tvyYV7DGczCbLY-4qrGKnWzjqW9C62RWmh0mm13035O4uuLhCCKlwrfwvg7AMsum15FAaCvu8FO-ty1aUJXprUP3thWitKfavTS53t-EeXOsB9SkpH1W2b5flguMEXMZM6G04brDpVwB84TShq5R9kLR2MYdL7x0oumx6X8KXPkZwP046Szy0m4ZBKKqWGZK-PH6AabiaqgSfyyGO9FPzy8cIuExzvXW5T3DCDy-jzV5UeFZuaNVsPDWTeIGuJfKMIHnKdY46HiizbNXnigZq7GJoLCpziCl6sZlDr4WJBLA5YfWU7oNWs2LkQHJTGNm9D6Nh_wNyI1moEXoZzRc7R0p9HNZ9GVgRP5h8jNUqlkzbeT0fkcOSBOGvMMj-TbN-o-ocKQDX5f-hqXxATdsC7OHEdnxOVdyWO0z5vtW2IDRUi-UuWuGFtFjL1bTx5RGdvvNklG1qNSZvM39AvF452r9TKX0XrBbEpkDqN1zxP9Wr1f6JwjLEDU_8nxsWfYX7-32sEqOvezJhlvbA6EOVM_j1CHUuGUjzNJ9lxMWAoKakU5tcnlzjC4OSA-DfLuwdFnM3u5f7MsQsfzuwovzyBGmPCCVDY9dIh_yooJ9GOehtma76hI
205.139.111.113307 Temporary Redirect 0 B URL GET HTTP/1.1 protect-us.mimecast.com/r/KrpwNc6Py8pASOytvMygnBE9MffFobwEWKmoANEc65SV1F38LTJjnCdYFBmPWP8j90cqTpy1BAczii4-QaSgFIXSsSSnGXWWKiJ6ONSh6heBI2XXaIyq5x26b-P3z6T4Z1IbQ13gJ69ah44qU7nxdBd6lQ3oOLcIq2cjiuRSmK3J9tV7qVANn3ogy1xIzzc6qaFzxwRRtIHZjXS9Dkpzme8v76NeeXL3hqBIYtxZ-6zNR19NNT_WJ_8K86H7QisS8vhaz5WnhFQzWb4eceZOuQ06hAW2W0po4ebrwcUz4qppPIp33YE1nRFPVFt1Wi5Yqi9BtwdwKOgBQhEwFqz9Vgr1o2hbYm0lg23z5-odbHiZCtcyPxr7r7bpHHSBUrD3SM3t66Oh753YGC_QD70WRTDCb3abwCKSknJVDObbn3nefJxXPuFnY3Ca0p5OQ72CCMOXBQFkWvwTT6lbR5zk7LxHM0Qnm1tzG3O7Lbo5MvbLuFQMVCCOXfgrGOqV2wYzOFtJ7od56MKGvLRvLNhh__OLbMimfImKR1yvsgTIDRUAd9_6S5RWqNaZmdJDSgwkyBKPZnp23rlNWnFpTpp8HWdjlcvqg773fZtt22bEk-YAjEGXIXgZy7X-4EamZXuyErPnHneFaaQ8eXNZCf86tKu3m8MdDju_SjZmQ38E3iX9f0Hy3dgDymy6yeP0Gw2M3drWQ97C5VEsWKgHpyWdZyUjrwjJkOq-UrO4awNvP1F6_cxuz9QiQG-qDRSaOQTG-QDI9KOcsXSMrfqRYNgR0laQJbqjh-TpQgIEoHz1TIGcsBraiKaK3jdGuUXM2RL5B5EuHr5bbwpHcQ0g3slG4Yc0bnnTgpWepOcX7F2Sl21KArnLXlRBJVyJe3FsuoVWqydtVLxc2WaN4ePVq_SSN2qpY2SZNYPAgMD3EDX0AOzah1Veglj-AgZIgANipmfirrAq5ShOXGNJflB9ap71yjBeuKWb68kvHRcPKR2qGUfBvo9qYOx5DZhUm89itEJZ3B9ujF0GkGoSrEUn6xolk6hzKh_4nRXEVtI34PApRxrehlV7qSyFVTvkUVkbLCVZ401z_8JhoZ9owPOcYXXQwB_UF_o6jZVn9aVhJa4A6fv2R-uelzLFVC_wUQ9ZTASVLGRuClAki4UjLVt-4tHDLcXlV74eG4sZAf3VOk9xP2ijhwBPfcIetMdZ9gdaHJbtXIrJX4nVE60djABgziRlocFKDhmID2SGFgdXQwXE8YOFIKVIvEk_w_S0ynIqoaso7AI-XErnf2sCzYPGL1jfUsr3pdwN980zIQ5GqNnZvTIQ2zAvYOvZIza567Q9JjGEimypPZvh8vNyZmHdiBReFtk3UClq-HPtFX7TJqnN4D2YKK1_iVXgJoBusm_Z7sfJ2_jBVKBXEOpn9vCgd20lxpOd2LiNtnGdCFbbxiLdPxjVPVKbOJPUbbt4tvyYV7DGczCbLY-4qrGKnWzjqW9C62RWmh0mm13035O4uuLhCCKlwrfwvg7AMsum15FAaCvu8FO-ty1aUJXprUP3thWitKfavTS53t-EeXOsB9SkpH1W2b5flguMEXMZM6G04brDpVwB84TShq5R9kLR2MYdL7x0oumx6X8KXPkZwP046Szy0m4ZBKKqWGZK-PH6AabiaqgSfyyGO9FPzy8cIuExzvXW5T3DCDy-jzV5UeFZuaNVsPDWTeIGuJfKMIHnKdY46HiizbNXnigZq7GJoLCpziCl6sZlDr4WJBLA5YfWU7oNWs2LkQHJTGNm9D6Nh_wNyI1moEXoZzRc7R0p9HNZ9GVgRP5h8jNUqlkzbeT0fkcOSBOGvMMj-TbN-o-ocKQDX5f-hqXxATdsC7OHEdnxOVdyWO0z5vtW2IDRUi-UuWuGFtFjL1bTx5RGdvvNklG1qNSZvM39AvF452r9TKX0XrBbEpkDqN1zxP9Wr1f6JwjLEDU_8nxsWfYX7-32sEqOvezJhlvbA6EOVM_j1CHUuGUjzNJ9lxMWAoKakU5tcnlzjC4OSA-DfLuwdFnM3u5f7MsQsfzuwovzyBGmPCCVDY9dIh_yooJ9GOehtma76hI
IP 205.139.111.113:443
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=cee8e8e68744411fbedf3a15cf269ac8&h=true
Certificate IssuerDigiCert Inc
Subject*.mimecast.com
FingerprintCD:B1:F9:53:BD:55:54:E8:D2:14:46:80:DE:6B:50:27:E1:24:DC:F8
ValidityTue, 30 Jan 2024 00:00:00 GMT - Tue, 25 Feb 2025 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /r/KrpwNc6Py8pASOytvMygnBE9MffFobwEWKmoANEc65SV1F38LTJjnCdYFBmPWP8j90cqTpy1BAczii4-QaSgFIXSsSSnGXWWKiJ6ONSh6heBI2XXaIyq5x26b-P3z6T4Z1IbQ13gJ69ah44qU7nxdBd6lQ3oOLcIq2cjiuRSmK3J9tV7qVANn3ogy1xIzzc6qaFzxwRRtIHZjXS9Dkpzme8v76NeeXL3hqBIYtxZ-6zNR19NNT_WJ_8K86H7QisS8vhaz5WnhFQzWb4eceZOuQ06hAW2W0po4ebrwcUz4qppPIp33YE1nRFPVFt1Wi5Yqi9BtwdwKOgBQhEwFqz9Vgr1o2hbYm0lg23z5-odbHiZCtcyPxr7r7bpHHSBUrD3SM3t66Oh753YGC_QD70WRTDCb3abwCKSknJVDObbn3nefJxXPuFnY3Ca0p5OQ72CCMOXBQFkWvwTT6lbR5zk7LxHM0Qnm1tzG3O7Lbo5MvbLuFQMVCCOXfgrGOqV2wYzOFtJ7od56MKGvLRvLNhh__OLbMimfImKR1yvsgTIDRUAd9_6S5RWqNaZmdJDSgwkyBKPZnp23rlNWnFpTpp8HWdjlcvqg773fZtt22bEk-YAjEGXIXgZy7X-4EamZXuyErPnHneFaaQ8eXNZCf86tKu3m8MdDju_SjZmQ38E3iX9f0Hy3dgDymy6yeP0Gw2M3drWQ97C5VEsWKgHpyWdZyUjrwjJkOq-UrO4awNvP1F6_cxuz9QiQG-qDRSaOQTG-QDI9KOcsXSMrfqRYNgR0laQJbqjh-TpQgIEoHz1TIGcsBraiKaK3jdGuUXM2RL5B5EuHr5bbwpHcQ0g3slG4Yc0bnnTgpWepOcX7F2Sl21KArnLXlRBJVyJe3FsuoVWqydtVLxc2WaN4ePVq_SSN2qpY2SZNYPAgMD3EDX0AOzah1Veglj-AgZIgANipmfirrAq5ShOXGNJflB9ap71yjBeuKWb68kvHRcPKR2qGUfBvo9qYOx5DZhUm89itEJZ3B9ujF0GkGoSrEUn6xolk6hzKh_4nRXEVtI34PApRxrehlV7qSyFVTvkUVkbLCVZ401z_8JhoZ9owPOcYXXQwB_UF_o6jZVn9aVhJa4A6fv2R-uelzLFVC_wUQ9ZTASVLGRuClAki4UjLVt-4tHDLcXlV74eG4sZAf3VOk9xP2ijhwBPfcIetMdZ9gdaHJbtXIrJX4nVE60djABgziRlocFKDhmID2SGFgdXQwXE8YOFIKVIvEk_w_S0ynIqoaso7AI-XErnf2sCzYPGL1jfUsr3pdwN980zIQ5GqNnZvTIQ2zAvYOvZIza567Q9JjGEimypPZvh8vNyZmHdiBReFtk3UClq-HPtFX7TJqnN4D2YKK1_iVXgJoBusm_Z7sfJ2_jBVKBXEOpn9vCgd20lxpOd2LiNtnGdCFbbxiLdPxjVPVKbOJPUbbt4tvyYV7DGczCbLY-4qrGKnWzjqW9C62RWmh0mm13035O4uuLhCCKlwrfwvg7AMsum15FAaCvu8FO-ty1aUJXprUP3thWitKfavTS53t-EeXOsB9SkpH1W2b5flguMEXMZM6G04brDpVwB84TShq5R9kLR2MYdL7x0oumx6X8KXPkZwP046Szy0m4ZBKKqWGZK-PH6AabiaqgSfyyGO9FPzy8cIuExzvXW5T3DCDy-jzV5UeFZuaNVsPDWTeIGuJfKMIHnKdY46HiizbNXnigZq7GJoLCpziCl6sZlDr4WJBLA5YfWU7oNWs2LkQHJTGNm9D6Nh_wNyI1moEXoZzRc7R0p9HNZ9GVgRP5h8jNUqlkzbeT0fkcOSBOGvMMj-TbN-o-ocKQDX5f-hqXxATdsC7OHEdnxOVdyWO0z5vtW2IDRUi-UuWuGFtFjL1bTx5RGdvvNklG1qNSZvM39AvF452r9TKX0XrBbEpkDqN1zxP9Wr1f6JwjLEDU_8nxsWfYX7-32sEqOvezJhlvbA6EOVM_j1CHUuGUjzNJ9lxMWAoKakU5tcnlzjC4OSA-DfLuwdFnM3u5f7MsQsfzuwovzyBGmPCCVDY9dIh_yooJ9GOehtma76hI HTTP/1.1
Host: protect-us.mimecast.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 307 Temporary Redirect
Date: Wed, 08 May 2024 11:40:45 GMT
Content-Length: 0
Connection: keep-alive
Location: https://cdn1.decide.dev/tracking/theoxfordclub_lander.js
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
Cache-control: no-store
Pragma: no-cache
X-Robots-Tag: noindex, nofollow
storage.googleapis.com/lioservices/2470-oxford-club/lytics_overrides.min.css
216.58.207.219200 OK 602 B URL GET HTTP/2 storage.googleapis.com/lioservices/2470-oxford-club/lytics_overrides.min.css
IP 216.58.207.219:443
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=cee8e8e68744411fbedf3a15cf269ac8&h=true
Certificate IssuerGoogle Trust Services LLC
Subjectstorage.googleapis.com
Fingerprint20:06:F0:40:84:A5:B3:5B:B0:13:3B:BF:C4:47:06:7C:D2:41:90:3A
ValidityTue, 16 Apr 2024 04:35:37 GMT - Tue, 09 Jul 2024 04:35:36 GMT
File type ASCII text, with very long lines (602), with no line terminators
Hash 9df2d5ae6031369aa6e0f3685608cd8c
cdf5ad44e5e1e9bf2b0413e046189830a1921e17
0efd1a0f2f52ed3d1bbd90257616b1f3f057163e50e3ed7d36af06ffa10b7b06
GET /lioservices/2470-oxford-club/lytics_overrides.min.css HTTP/1.1
Host: storage.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
x-goog-generation: 1538689646128559
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 602
x-goog-hash: crc32c=VZEimQ==, md5=nfLVrmAxNpqm4PNoVgjNjA==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 602
access-control-allow-origin: *
access-control-expose-headers: Content-Type
x-guploader-uploadid: ABPtcPr14CgcbJi4fRHEsSYAGVeK6itqtSEzUH41IsCorMX61ve1CjqifE7HY5qyuo5upXPlkBsZt6YctA
server: UploadServer
date: Wed, 08 May 2024 11:40:45 GMT
expires: Wed, 08 May 2024 12:40:45 GMT
cache-control: public, max-age=3600
last-modified: Thu, 04 Oct 2018 21:47:26 GMT
etag: "9df2d5ae6031369aa6e0f3685608cd8c"
content-type: text/css
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
buildawealthyretirement.com/split-test-for-elementor/v1/tests/47/track-conversion/
18.233.27.104200 OK 43 B URL GET HTTP/1.1 buildawealthyretirement.com/split-test-for-elementor/v1/tests/47/track-conversion/
IP 18.233.27.104:443
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=cee8e8e68744411fbedf3a15cf269ac8&h=true
Certificate IssuerLet's Encrypt
Subjectleadgen.oxfordclub.com
FingerprintE2:D4:E7:E5:AF:7E:F3:75:BD:8D:38:DA:BE:37:EA:DE:E2:5C:44:B4
ValidityTue, 12 Mar 2024 14:41:49 GMT - Mon, 10 Jun 2024 14:41:48 GMT
File type GIF image data, version 89a, 1 x 1
Hash 57f187c7a868faeac558007a8eb6cb2e
11ab10ab109fdb53d91d444ac781101f5a6360c6
aa03dc59bdca72631d2301e4297cfa030bd31b907dc138e7b973d12311c90a22
GET /split-test-for-elementor/v1/tests/47/track-conversion/ HTTP/1.1
Host: buildawealthyretirement.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 08 May 2024 11:40:45 GMT
Content-Type: image/gif
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Set-Cookie: elementor_split_test_client_id=320f0d96a-223affde-b93e-461d-b04f-0c88c0dea8cc; expires=Thu, 08-May-2025 11:40:45 GMT; Max-Age=31536000; path=/; domain=buildawealthyretirement.com
Referrer-Policy: unsafe-url
buildawealthyretirement.com/split-test-for-elementor/v1/tests/38/track-conversion/
18.233.27.104200 OK 43 B URL GET HTTP/1.1 buildawealthyretirement.com/split-test-for-elementor/v1/tests/38/track-conversion/
IP 18.233.27.104:443
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=cee8e8e68744411fbedf3a15cf269ac8&h=true
Certificate IssuerLet's Encrypt
Subjectleadgen.oxfordclub.com
FingerprintE2:D4:E7:E5:AF:7E:F3:75:BD:8D:38:DA:BE:37:EA:DE:E2:5C:44:B4
ValidityTue, 12 Mar 2024 14:41:49 GMT - Mon, 10 Jun 2024 14:41:48 GMT
File type GIF image data, version 89a, 1 x 1
Hash 57f187c7a868faeac558007a8eb6cb2e
11ab10ab109fdb53d91d444ac781101f5a6360c6
aa03dc59bdca72631d2301e4297cfa030bd31b907dc138e7b973d12311c90a22
GET /split-test-for-elementor/v1/tests/38/track-conversion/ HTTP/1.1
Host: buildawealthyretirement.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 08 May 2024 11:40:45 GMT
Content-Type: image/gif
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Set-Cookie: elementor_split_test_client_id=320f0d96a-f138948e-2707-4329-a494-88fafdbc182a; expires=Thu, 08-May-2025 11:40:45 GMT; Max-Age=31536000; path=/; domain=buildawealthyretirement.com
Referrer-Policy: unsafe-url
buildawealthyretirement.com/split-test-for-elementor/v1/tests/46/track-conversion/
18.233.27.104200 OK 43 B URL GET HTTP/1.1 buildawealthyretirement.com/split-test-for-elementor/v1/tests/46/track-conversion/
IP 18.233.27.104:443
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=cee8e8e68744411fbedf3a15cf269ac8&h=true
Certificate IssuerLet's Encrypt
Subjectleadgen.oxfordclub.com
FingerprintE2:D4:E7:E5:AF:7E:F3:75:BD:8D:38:DA:BE:37:EA:DE:E2:5C:44:B4
ValidityTue, 12 Mar 2024 14:41:49 GMT - Mon, 10 Jun 2024 14:41:48 GMT
File type GIF image data, version 89a, 1 x 1
Hash 57f187c7a868faeac558007a8eb6cb2e
11ab10ab109fdb53d91d444ac781101f5a6360c6
aa03dc59bdca72631d2301e4297cfa030bd31b907dc138e7b973d12311c90a22
GET /split-test-for-elementor/v1/tests/46/track-conversion/ HTTP/1.1
Host: buildawealthyretirement.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 08 May 2024 11:40:45 GMT
Content-Type: image/gif
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Set-Cookie: elementor_split_test_client_id=320f0d96a-b654cfe1-5abb-4b19-80ff-4ea30ffe06ef; expires=Thu, 08-May-2025 11:40:45 GMT; Max-Age=31536000; path=/; domain=buildawealthyretirement.com
Referrer-Policy: unsafe-url
leadgen.oxfordclub.com/split-test-for-elementor/v1/tests//track-conversion/
18.233.27.104301 Moved Permanently 0 B URL GET HTTP/1.1 leadgen.oxfordclub.com/split-test-for-elementor/v1/tests//track-conversion/
IP 18.233.27.104:443
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=cee8e8e68744411fbedf3a15cf269ac8&h=true
Certificate IssuerLet's Encrypt
Subjectleadgen.oxfordclub.com
FingerprintE2:D4:E7:E5:AF:7E:F3:75:BD:8D:38:DA:BE:37:EA:DE:E2:5C:44:B4
ValidityTue, 12 Mar 2024 14:41:49 GMT - Mon, 10 Jun 2024 14:41:48 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /split-test-for-elementor/v1/tests//track-conversion/ HTTP/1.1
Host: leadgen.oxfordclub.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=cee8e8e68744411fbedf3a15cf269ac8&h=true
DNT: 1
Connection: keep-alive
Cookie: _ga_BBMPM3EJHQ=GS1.1.1715168444.1.0.1715168444.60.0.0; _ga=GA1.1.1632723510.1715168444; _gcl_au=1.1.305110386.1715168444
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Wed, 08 May 2024 11:40:45 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Redirect-By: WordPress
Set-Cookie: elementor_split_test_client_id=320f0d96a-4911deaa-c338-4469-922c-76464b8a9e09; expires=Thu, 08-May-2025 11:40:45 GMT; Max-Age=31536000; path=/; domain=leadgen.oxfordclub.com
Location: https://leadgen.oxfordclub.com/split-test-for-elementor/v1/tests/track-conversion/
Referrer-Policy: unsafe-url
buildawealthyretirement.com/split-test-for-elementor/v1/tests/45/track-conversion/
18.233.27.104200 OK 43 B URL GET HTTP/1.1 buildawealthyretirement.com/split-test-for-elementor/v1/tests/45/track-conversion/
IP 18.233.27.104:443
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=cee8e8e68744411fbedf3a15cf269ac8&h=true
Certificate IssuerLet's Encrypt
Subjectleadgen.oxfordclub.com
FingerprintE2:D4:E7:E5:AF:7E:F3:75:BD:8D:38:DA:BE:37:EA:DE:E2:5C:44:B4
ValidityTue, 12 Mar 2024 14:41:49 GMT - Mon, 10 Jun 2024 14:41:48 GMT
File type GIF image data, version 89a, 1 x 1
Hash 57f187c7a868faeac558007a8eb6cb2e
11ab10ab109fdb53d91d444ac781101f5a6360c6
aa03dc59bdca72631d2301e4297cfa030bd31b907dc138e7b973d12311c90a22
GET /split-test-for-elementor/v1/tests/45/track-conversion/ HTTP/1.1
Host: buildawealthyretirement.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 08 May 2024 11:40:45 GMT
Content-Type: image/gif
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Set-Cookie: elementor_split_test_client_id=320f0d96a-60718059-bc81-447e-b063-33424d8f6f8a; expires=Thu, 08-May-2025 11:40:45 GMT; Max-Age=31536000; path=/; domain=buildawealthyretirement.com
Referrer-Policy: unsafe-url
ocsp.r2m03.amazontrust.com/
143.204.53.97 471 B URL ocsp.r2m03.amazontrust.com/
IP 143.204.53.97:0
Hash 7103f3d813fab59587b64059f1197c6b
32fafd0e59973396f3d84662db45d87910c27e5b
004fe38669f25512aa5d372b7ab059aae95716c15e65df04d1e163f304fcba7d
POST / HTTP/1.1
Host: ocsp.r2m03.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=7200
Date: Wed, 08 May 2024 11:40:45 GMT
Last-Modified: Wed, 08 May 2024 11:12:14 GMT
Server: ECAcc (ska/F6E3)
X-Cache: Miss from cloudfront
Via: 1.1 8e6dce34fd223e0c9d89fd938d1784a2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: qDauK6UQ1i_-zlEn28SStMFtfpgI1wjX_zeEDhi55zZTEaBg6t7SeQ==
Age: 1711
c.lytics.io/c/9c32784e3cc4888a693a7988ad64c63d/portrait
104.26.3.22200 OK 5.4 kB URL POST HTTP/2 c.lytics.io/c/9c32784e3cc4888a693a7988ad64c63d/portrait
IP 104.26.3.22:443
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=cee8e8e68744411fbedf3a15cf269ac8&h=true
Certificate IssuerLet's Encrypt
Subjectlytics.io
FingerprintB6:F8:34:ED:E4:C3:43:5C:FC:38:D0:CB:58:F7:80:C5:76:62:78:79
ValiditySat, 16 Mar 2024 02:39:35 GMT - Fri, 14 Jun 2024 02:39:34 GMT
Hash 3c5dc2b4ac237fc865cd25257ae2aa34
0f7ecb30677d3a026e2d2ab051f3c29e43d97e87
7ee5b8f62f0a7b2ea3bb1cf02aa1d3899a22e1e2c0de42698e43802cc1669f28
POST /c/9c32784e3cc4888a693a7988ad64c63d/portrait HTTP/1.1
Host: c.lytics.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 2303
Origin: https://pro.oxfordclub.com
DNT: 1
Connection: keep-alive
Cookie: seerid=1a7f2710-2864-4691-b804-308d54307e52
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 08 May 2024 11:40:44 GMT
content-type: text/html
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Cookie, *
access-control-allow-methods: GET, POST
access-control-allow-origin: *
cache-control: no-cache, no-store, must-revalidate
expires: 0
pragma: no-cache
strict-transport-security: max-age=63072000;
x-lytics-trace: 5fdb59d3ceb47173dce098e4968ba926
via: 1.1 google
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YoT81AZ0EBonxVvZXKRCk6Ox9jmxKFYt7%2Fs0rSOg%2FIC1%2FnBLWb7%2FdC67fVASL64JqI%2BjFb0FHutk7QK9fR0RiIBnRX%2FCfX%2B2DkvIyCAhIEWHGcD%2BhYHqL4YoTj%2BW"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 88092d36fc205688-OSL
content-encoding: br
X-Firefox-Spdy: h2
libertythroughwealthnews.com/split-test-for-elementor/v1/tests//track-conversion/
18.233.27.104301 Moved Permanently 0 B URL GET HTTP/1.1 libertythroughwealthnews.com/split-test-for-elementor/v1/tests//track-conversion/
IP 18.233.27.104:443
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=cee8e8e68744411fbedf3a15cf269ac8&h=true
Certificate IssuerLet's Encrypt
Subjectleadgen.oxfordclub.com
FingerprintE2:D4:E7:E5:AF:7E:F3:75:BD:8D:38:DA:BE:37:EA:DE:E2:5C:44:B4
ValidityTue, 12 Mar 2024 14:41:49 GMT - Mon, 10 Jun 2024 14:41:48 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /split-test-for-elementor/v1/tests//track-conversion/ HTTP/1.1
Host: libertythroughwealthnews.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Wed, 08 May 2024 11:40:45 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Redirect-By: WordPress
Set-Cookie: elementor_split_test_client_id=320f0d96a-710a2e50-9acc-43a7-8c38-a54daa7b3812; expires=Thu, 08-May-2025 11:40:45 GMT; Max-Age=31536000; path=/; domain=libertythroughwealthnews.com
Location: https://libertythroughwealthnews.com/split-test-for-elementor/v1/tests/track-conversion/
Referrer-Policy: unsafe-url
pipedream.wistia.com/mput?topic=metrics
143.204.55.51200 OK 2 B URL POST HTTP/2 pipedream.wistia.com/mput?topic=metrics
IP 143.204.55.51:443
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=cee8e8e68744411fbedf3a15cf269ac8&h=true
Certificate IssuerAmazon
Subject*.wistia.com
Fingerprint44:FA:DB:AB:41:36:F5:96:F7:BF:3A:E7:D8:61:50:5C:26:80:3D:D2
ValidityMon, 01 Jan 2024 00:00:00 GMT - Tue, 28 Jan 2025 23:59:59 GMT
File type ASCII text, with no line terminators
Hash e0aa021e21dddbd6d8cecec71e9cf564
9ce3bd4224c8c1780db56b4125ecf3f24bf748b7
565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3
POST /mput?topic=metrics HTTP/1.1
Host: pipedream.wistia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 2195
Origin: https://pro.oxfordclub.com
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/plain; charset=utf-8
content-length: 2
date: Wed, 08 May 2024 11:40:45 GMT
access-control-allow-methods: POST, OPTIONS
access-control-allow-origin: *
x-envoy-upstream-service-time: 1
server: envoy
x-cache: Miss from cloudfront
via: 1.1 41dc61beb3fe8e8c2c299a2522d8330c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: aQCtZgu2ws6TBcnfmB0-EBT3teeUOodMUs8xkyKkbE2yJl099BpZ8w==
X-Firefox-Spdy: h2
cdn1.decide.dev/tracking/theoxfordclub_lander.js
143.204.55.20200 OK 834 B URL GET HTTP/2 cdn1.decide.dev/tracking/theoxfordclub_lander.js
IP 143.204.55.20:443
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=cee8e8e68744411fbedf3a15cf269ac8&h=true
Certificate IssuerAmazon
Subject*.decide.dev
Fingerprint55:47:DD:D7:EE:11:C6:32:7C:43:A8:63:D1:78:CA:39:D6:A8:A1:34
ValiditySun, 26 Nov 2023 00:00:00 GMT - Wed, 25 Dec 2024 23:59:59 GMT
File type JavaScript source, ASCII text
Hash b1cbc790e84a45c80719c25350afbe93
791fad5f544492d979cf7043794afda21e99cca0
1ba64776e363ce48a44800790b7d1d35618e472a05c4d0d2e86ac8e81320af02
GET /tracking/theoxfordclub_lander.js HTTP/1.1
Host: cdn1.decide.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
content-length: 834
last-modified: Wed, 05 Oct 2022 22:05:01 GMT
x-amz-version-id: .IqB6vnfPtu.ANgAywev0qNgFahOe7Ox
accept-ranges: bytes
server: AmazonS3
date: Wed, 08 May 2024 01:21:08 GMT
etag: "b1cbc790e84a45c80719c25350afbe93"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 142be88a35733307a5e7de05da0a20b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: VG3t6idB_MmsTMwP1KieT0IAP09i6Ax3vLocO041kMzMI4BI_JYUSQ==
age: 37178
X-Firefox-Spdy: h2
fg8vvsvnieiv3ej16jby.litix.io/
54.196.227.84200 OK 0 B URL POST HTTP/1.1 fg8vvsvnieiv3ej16jby.litix.io/
IP 54.196.227.84:443
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=cee8e8e68744411fbedf3a15cf269ac8&h=true
Certificate IssuerAmazon
Subject*.litix.io
Fingerprint4E:E4:65:84:18:ED:3D:B2:6C:A5:E8:DD:7D:D5:90:13:9B:17:8C:F3
ValidityMon, 24 Jul 2023 00:00:00 GMT - Wed, 21 Aug 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1
Host: fg8vvsvnieiv3ej16jby.litix.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 1665
Origin: https://pro.oxfordclub.com
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
access-control-allow-methods: POST, GET
access-control-allow-origin: *
date: Wed, 08 May 2024 11:40:45 GMT
content-length: 0
x-envoy-upstream-service-time: 0
server: envoy
a.mgid.com/1x1.gif?id=444673&type=c&tg=&r=https%3A%2F%2Fpro.oxfordclub.com%2Fp%2FOILTO99BRKLT2YRDSTOT%2FNBRK4404%2F%3Fs1%3Dcee8e8e68744411fbedf3a15cf269ac8%26h%3Dtrue&nv=1&clid=&d=1715168445673
104.19.133.76200 OK 43 B URL GET HTTP/3 a.mgid.com/1x1.gif?id=444673&type=c&tg=&r=https%3A%2F%2Fpro.oxfordclub.com%2Fp%2FOILTO99BRKLT2YRDSTOT%2FNBRK4404%2F%3Fs1%3Dcee8e8e68744411fbedf3a15cf269ac8%26h%3Dtrue&nv=1&clid=&d=1715168445673
IP 104.19.133.76:443
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=cee8e8e68744411fbedf3a15cf269ac8&h=true
Certificate IssuerLet's Encrypt
Subjectmgid.com
Fingerprint9C:6C:5A:48:88:44:CB:C2:F4:76:D3:2E:DC:07:0D:D4:CA:6A:25:F5
ValiditySun, 10 Mar 2024 23:31:34 GMT - Sat, 08 Jun 2024 23:31:33 GMT
File type GIF image data, version 89a, 1 x 1
Hash 57f187c7a868faeac558007a8eb6cb2e
11ab10ab109fdb53d91d444ac781101f5a6360c6
aa03dc59bdca72631d2301e4297cfa030bd31b907dc138e7b973d12311c90a22
GET /1x1.gif?id=444673&type=c&tg=&r=https%3A%2F%2Fpro.oxfordclub.com%2Fp%2FOILTO99BRKLT2YRDSTOT%2FNBRK4404%2F%3Fs1%3Dcee8e8e68744411fbedf3a15cf269ac8%26h%3Dtrue&nv=1&clid=&d=1715168445673 HTTP/1.1
Host: a.mgid.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Cookie: __cf_bm=JnGb29YZNoGRkmRWY22tDKxZeGsVv5uebrtZhFNM0Gk-1715168444-1.0.1.1-jt0dV0jKYefdzWtGxWVVehc_XUtms0TCr323YhHscewuffPxCA3eHEaBBA38hnzbrzCseGGvBsdJwF05hHYDDw
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 11:40:45 GMT
content-type: image/gif
content-length: 43
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 88092d41bcedb524-OSL
alt-svc: h3=":443"; ma=86400
c.pmsrv.co/v2/acvr3?a=50bbcf39-5fab-4416-a13c-acc35b621b86&event=page-land&weight=0&dnt=false&_ible=1&ej=%7B%22dnt%22%3Afalse%7D&ord=7670860665130176&sid=c3592a6b-e65c-401e-8da9-9e0adc9b8170&pg=https%3A%2F%2Fpro.oxfordclub.com%2Fp%2FOILTO99BRKLT2YRDSTOT%2FNBRK4404%2F%3Fs1%3Dcee8e8e68744411fbedf3a15cf269ac8%26h%3Dtrue&_ii=0&ppg=&_tk=%7B%7D
143.204.55.85204 No Content 0 B URL GET HTTP/2 c.pmsrv.co/v2/acvr3?a=50bbcf39-5fab-4416-a13c-acc35b621b86&event=page-land&weight=0&dnt=false&_ible=1&ej=%7B%22dnt%22%3Afalse%7D&ord=7670860665130176&sid=c3592a6b-e65c-401e-8da9-9e0adc9b8170&pg=https%3A%2F%2Fpro.oxfordclub.com%2Fp%2FOILTO99BRKLT2YRDSTOT%2FNBRK4404%2F%3Fs1%3Dcee8e8e68744411fbedf3a15cf269ac8%26h%3Dtrue&_ii=0&ppg=&_tk=%7B%7D
IP 143.204.55.85:443
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=cee8e8e68744411fbedf3a15cf269ac8&h=true
Certificate IssuerAmazon
Subjectpmsrv.co
Fingerprint75:6B:BA:1B:09:1C:F0:09:3F:A7:0A:8D:BC:E2:85:28:5E:AF:4F:47
ValiditySat, 16 Sep 2023 00:00:00 GMT - Mon, 14 Oct 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v2/acvr3?a=50bbcf39-5fab-4416-a13c-acc35b621b86&event=page-land&weight=0&dnt=false&_ible=1&ej=%7B%22dnt%22%3Afalse%7D&ord=7670860665130176&sid=c3592a6b-e65c-401e-8da9-9e0adc9b8170&pg=https%3A%2F%2Fpro.oxfordclub.com%2Fp%2FOILTO99BRKLT2YRDSTOT%2FNBRK4404%2F%3Fs1%3Dcee8e8e68744411fbedf3a15cf269ac8%26h%3Dtrue&_ii=0&ppg=&_tk=%7B%7D HTTP/1.1
Host: c.pmsrv.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Cookie: tpc=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Wed, 08 May 2024 11:40:45 GMT
x-powered-by: Express
cache-control: private, no-cache, no-store, must-revalidate
expires: -1
pragma: no-cache
access-control-allow-origin: *
etag: W/"0-2jmj7l5rSw0yVb/vlWAYkK/YBwk"
x-cache: Miss from cloudfront
via: 1.1 475d4ecb64796af058573c6f1048e898.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: sVXT9_s9v1_IJWofurxYLApNN9UWvJMhtwOR7zGpbvDYLmFKICMfKg==
X-Firefox-Spdy: h2
gtrace.mediago.io/api/bidder/track/pixel/pageview?tn=f9f2b1ef23fe2759c2cad0953029a94b&spd=&mgd=ce5bff8cbf4c4696a7a4a2b6deddd343&ptd=&tkd=&acd=&cpid=&v=155126437
35.214.168.80200 OK 0 B URL POST HTTP/2 gtrace.mediago.io/api/bidder/track/pixel/pageview?tn=f9f2b1ef23fe2759c2cad0953029a94b&spd=&mgd=ce5bff8cbf4c4696a7a4a2b6deddd343&ptd=&tkd=&acd=&cpid=&v=155126437
IP 35.214.168.80:443
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=cee8e8e68744411fbedf3a15cf269ac8&h=true
Certificate IssuerDigiCert Inc
Subject*.mediago.io
Fingerprint13:26:8E:87:3E:6B:7D:C0:F9:32:B1:3B:53:DC:E6:2C:DF:3A:5D:C4
ValidityThu, 11 Jan 2024 00:00:00 GMT - Fri, 10 Jan 2025 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /api/bidder/track/pixel/pageview?tn=f9f2b1ef23fe2759c2cad0953029a94b&spd=&mgd=ce5bff8cbf4c4696a7a4a2b6deddd343&ptd=&tkd=&acd=&cpid=&v=155126437 HTTP/1.1
Host: gtrace.mediago.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pro.oxfordclub.com
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Cookie: dv0qai26lg6v2y6kl7yyc36brextd1p7n436xycz=ijufrvrh8k; dv0qai26lg6v2y6kl7yyc36brextda7ame1wtxcq=v8anicxc3ho; dv0qai26lg6v2y6kl7yyc36brextdv4zbh76adg=huppqfsxgav
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 200 OK
content-type: text/plain; charset=utf-8
date: Wed, 08 May 2024 11:40:45 GMT
content-length: 0
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
gtrace.mediago.io/ju/cs/eplist?acid=&gdpr_consent=&dm=https%253A%252F%252Fpro.oxfordclub.com&mcb=mmgg_1715168444896_382
35.214.168.80200 OK 44 B URL GET HTTP/2 gtrace.mediago.io/ju/cs/eplist?acid=&gdpr_consent=&dm=https%253A%252F%252Fpro.oxfordclub.com&mcb=mmgg_1715168444896_382
IP 35.214.168.80:443
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=cee8e8e68744411fbedf3a15cf269ac8&h=true
Certificate IssuerDigiCert Inc
Subject*.mediago.io
Fingerprint13:26:8E:87:3E:6B:7D:C0:F9:32:B1:3B:53:DC:E6:2C:DF:3A:5D:C4
ValidityThu, 11 Jan 2024 00:00:00 GMT - Fri, 10 Jan 2025 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 531258b544e8fe4abe692646c05cb6fa
653324577a828fe3673f4dc1be1f74df4f29682b
650f0f372fc6d98824f3621defd79c28300a35822e3a9c248306361dd0cce0ef
GET /ju/cs/eplist?acid=&gdpr_consent=&dm=https%253A%252F%252Fpro.oxfordclub.com&mcb=mmgg_1715168444896_382 HTTP/1.1
Host: gtrace.mediago.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-headers: Content-Type
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-origin: https%3A%2F%2Fpro.oxfordclub.com
content-length: 44
content-type: application/javascript; charset=utf-8
set-cookie: __mguid_=9df76ce145fd93512k6q8n00lvxr0asr; Path=/; Domain=mediago.io; Max-Age=31536000; Secure; SameSite=None
date: Wed, 08 May 2024 11:40:45 GMT
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
gtrace.mediago.io/api/bidder/track/pixel/pageview?tn=f9f2b1ef23fe2759c2cad0953029a94b&spd=&mgd=9346b7d74c8c43248821f425fdad2ec4&ptd=&tkd=&acd=&cpid=&v=155126437
35.214.168.80200 OK 0 B URL POST HTTP/2 gtrace.mediago.io/api/bidder/track/pixel/pageview?tn=f9f2b1ef23fe2759c2cad0953029a94b&spd=&mgd=9346b7d74c8c43248821f425fdad2ec4&ptd=&tkd=&acd=&cpid=&v=155126437
IP 35.214.168.80:443
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=cee8e8e68744411fbedf3a15cf269ac8&h=true
Certificate IssuerDigiCert Inc
Subject*.mediago.io
Fingerprint13:26:8E:87:3E:6B:7D:C0:F9:32:B1:3B:53:DC:E6:2C:DF:3A:5D:C4
ValidityThu, 11 Jan 2024 00:00:00 GMT - Fri, 10 Jan 2025 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /api/bidder/track/pixel/pageview?tn=f9f2b1ef23fe2759c2cad0953029a94b&spd=&mgd=9346b7d74c8c43248821f425fdad2ec4&ptd=&tkd=&acd=&cpid=&v=155126437 HTTP/1.1
Host: gtrace.mediago.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pro.oxfordclub.com
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Cookie: dv0qai26lg6v2y6kl7yyc36brextd1p7n436xycz=ijufrvrh8k; dv0qai26lg6v2y6kl7yyc36brextda7ame1wtxcq=v8anicxc3ho; dv0qai26lg6v2y6kl7yyc36brextdv4zbh76adg=huppqfsxgav
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 200 OK
content-type: text/plain; charset=utf-8
date: Wed, 08 May 2024 11:40:45 GMT
content-length: 0
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
api.getblueshift.com/unity.gif?t=1715168445&e=pageload&r=&z=797204&x=5475fa15fca6698857e67e2705849cfa&k=d3b4dd32-e7e4-71e5-1a59-bb4dc470318a&u=https%3A%2F%2Fpro.oxfordclub.com%2Fp%2FOILTO99BRKLT2YRDSTOT%2FNBRK4404%2F%3Fs1%3Dcee8e8e68744411fbedf3a15cf269ac8%26h%3Dtrue
35.164.220.20200 OK 42 B URL GET HTTP/2 api.getblueshift.com/unity.gif?t=1715168445&e=pageload&r=&z=797204&x=5475fa15fca6698857e67e2705849cfa&k=d3b4dd32-e7e4-71e5-1a59-bb4dc470318a&u=https%3A%2F%2Fpro.oxfordclub.com%2Fp%2FOILTO99BRKLT2YRDSTOT%2FNBRK4404%2F%3Fs1%3Dcee8e8e68744411fbedf3a15cf269ac8%26h%3Dtrue
IP 35.164.220.20:443
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=cee8e8e68744411fbedf3a15cf269ac8&h=true
Certificate IssuerAmazon
Subject*.getblueshift.com
FingerprintD1:61:A7:FF:D0:FD:A2:46:9B:FE:0C:A8:F1:8A:A9:24:9B:70:04:65
ValidityWed, 07 Feb 2024 00:00:00 GMT - Fri, 07 Mar 2025 23:59:59 GMT
File type GIF image data, version 89a, 1 x 1
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /unity.gif?t=1715168445&e=pageload&r=&z=797204&x=5475fa15fca6698857e67e2705849cfa&k=d3b4dd32-e7e4-71e5-1a59-bb4dc470318a&u=https%3A%2F%2Fpro.oxfordclub.com%2Fp%2FOILTO99BRKLT2YRDSTOT%2FNBRK4404%2F%3Fs1%3Dcee8e8e68744411fbedf3a15cf269ac8%26h%3Dtrue HTTP/1.1
Host: api.getblueshift.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pro.oxfordclub.com
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 08 May 2024 11:40:45 GMT
content-type: image/gif
content-length: 42
access-control-expose-headers: etag
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-origin: https://pro.oxfordclub.com
X-Firefox-Spdy: h2
s.yimg.com/wi/ytc.js
188.125.94.204200 OK 6.3 kB IP 188.125.94.204:443
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=cee8e8e68744411fbedf3a15cf269ac8&h=true
Certificate IssuerDigiCert Inc
Subject*.fantasysports.yahoo.com
FingerprintFB:A0:5A:E1:EC:89:4D:F2:05:92:12:26:0C:97:C8:C6:CF:19:2F:96
ValidityTue, 30 Apr 2024 00:00:00 GMT - Wed, 19 Jun 2024 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (18187), with no line terminators
Hash 5c6ed25dce803fd84288922b8928409e
3ccc10546ae12f160bacac1e9e422af091ea4a41
480b06b23e574b4bf386fde1a91145a4171f97aeb5ee800e4be1850f29b1ad91
GET /wi/ytc.js HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
x-amz-id-2: MPZc2NQ7Ad4Dh/nrISXV/grtWN1WSWkfVpuyZbCLINc4CN3Ao8oCa5YFj5feshTfEnAH4GBIirQ=
x-amz-request-id: NA9EVCEF2XYBSMZ6
date: Wed, 08 May 2024 10:53:48 GMT
last-modified: Mon, 26 Jun 2023 09:26:35 GMT
x-amz-expiration: expiry-date="Wed, 31 Jul 2024 00:00:00 GMT", rule-id="oath-standard-lifecycle"
x-amz-server-side-encryption: AES256
cache-control: public,max-age=3600
x-amz-version-id: xC6OTTJGIjCqkMTkbrZpmtbXHK5oaZhW
accept-ranges: bytes
content-type: application/javascript
server: ATS
referrer-policy: no-referrer-when-downgrade
vary: Origin, Accept-Encoding
etag: "5c6ed25dce803fd84288922b8928409e-df"
age: 2819
content-encoding: gzip
content-length: 6262
strict-transport-security: max-age=31536000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
ats-carp-promotion: 1, 1
X-Firefox-Spdy: h2
s.yimg.com/wi/ytc.js
188.125.94.204200 OK 6.3 kB IP 188.125.94.204:443
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=cee8e8e68744411fbedf3a15cf269ac8&h=true
Certificate IssuerDigiCert Inc
Subject*.fantasysports.yahoo.com
FingerprintFB:A0:5A:E1:EC:89:4D:F2:05:92:12:26:0C:97:C8:C6:CF:19:2F:96
ValidityTue, 30 Apr 2024 00:00:00 GMT - Wed, 19 Jun 2024 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (18187), with no line terminators
Hash 5c6ed25dce803fd84288922b8928409e
3ccc10546ae12f160bacac1e9e422af091ea4a41
480b06b23e574b4bf386fde1a91145a4171f97aeb5ee800e4be1850f29b1ad91
GET /wi/ytc.js HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
x-amz-id-2: MPZc2NQ7Ad4Dh/nrISXV/grtWN1WSWkfVpuyZbCLINc4CN3Ao8oCa5YFj5feshTfEnAH4GBIirQ=
x-amz-request-id: NA9EVCEF2XYBSMZ6
date: Wed, 08 May 2024 10:53:48 GMT
last-modified: Mon, 26 Jun 2023 09:26:35 GMT
x-amz-expiration: expiry-date="Wed, 31 Jul 2024 00:00:00 GMT", rule-id="oath-standard-lifecycle"
x-amz-server-side-encryption: AES256
cache-control: public,max-age=3600
x-amz-version-id: xC6OTTJGIjCqkMTkbrZpmtbXHK5oaZhW
accept-ranges: bytes
content-type: application/javascript
server: ATS
referrer-policy: no-referrer-when-downgrade
vary: Origin, Accept-Encoding
etag: "5c6ed25dce803fd84288922b8928409e-df"
age: 2819
content-encoding: gzip
content-length: 6262
strict-transport-security: max-age=31536000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
ats-carp-promotion: 1, 1
X-Firefox-Spdy: h2
bat.bing.com/bat.js
204.79.197.237200 OK 13 kB IP 204.79.197.237:443
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=cee8e8e68744411fbedf3a15cf269ac8&h=true
Certificate IssuerMicrosoft Corporation
Subjectwww.bing.com
Fingerprint02:83:27:F9:50:D8:BE:B9:5E:DF:1A:4A:45:3B:6D:3C:BC:30:F2:58
ValidityWed, 01 May 2024 01:58:25 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (46429), with no line terminators
Hash 72bca04fd669eb89fc65d59052d0fc00
27e60aef86f0cb1b2f6b6ed9df9a4e3ba88efd21
823804a7807864b44093a3843788f4cd076e89cf4a6fdeb8d153ae5c2c2df721
GET /bat.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: private,max-age=1800
content-length: 13261
content-type: application/javascript
content-encoding: gzip
last-modified: Thu, 29 Feb 2024 19:58:06 GMT
accept-ranges: bytes
etag: "01b4e9c496bda1:0"
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 77B1D06BACF346769B6EBB33BFF1AB57 Ref B: OSL30EDGE0510 Ref C: 2024-05-08T11:40:46Z
date: Wed, 08 May 2024 11:40:46 GMT
X-Firefox-Spdy: h2
bat.bing.com/bat.js
204.79.197.237200 OK 13 kB IP 204.79.197.237:443
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=cee8e8e68744411fbedf3a15cf269ac8&h=true
Certificate IssuerMicrosoft Corporation
Subjectwww.bing.com
Fingerprint02:83:27:F9:50:D8:BE:B9:5E:DF:1A:4A:45:3B:6D:3C:BC:30:F2:58
ValidityWed, 01 May 2024 01:58:25 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (46429), with no line terminators
Hash 72bca04fd669eb89fc65d59052d0fc00
27e60aef86f0cb1b2f6b6ed9df9a4e3ba88efd21
823804a7807864b44093a3843788f4cd076e89cf4a6fdeb8d153ae5c2c2df721
GET /bat.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: private,max-age=1800
content-length: 13261
content-type: application/javascript
content-encoding: gzip
last-modified: Thu, 29 Feb 2024 19:58:06 GMT
accept-ranges: bytes
etag: "01b4e9c496bda1:0"
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: FB92C8B339434589B192A0B1BC68F51E Ref B: OSL30EDGE0510 Ref C: 2024-05-08T11:40:46Z
date: Wed, 08 May 2024 11:40:46 GMT
X-Firefox-Spdy: h2
leadgen.oxfordclub.com/split-test-for-elementor/v1/tests/track-conversion/
18.233.27.104404 Not Found 10 kB URL GET HTTP/1.1 leadgen.oxfordclub.com/split-test-for-elementor/v1/tests/track-conversion/
IP 18.233.27.104:443
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=cee8e8e68744411fbedf3a15cf269ac8&h=true
Certificate IssuerLet's Encrypt
Subjectleadgen.oxfordclub.com
FingerprintE2:D4:E7:E5:AF:7E:F3:75:BD:8D:38:DA:BE:37:EA:DE:E2:5C:44:B4
ValidityTue, 12 Mar 2024 14:41:49 GMT - Mon, 10 Jun 2024 14:41:48 GMT
File type HTML document, Unicode text, UTF-8 text, with very long lines (5490)
Hash 624ba1c3cc349218172017f265045aa6
cdac6722b54e9f15af6a1d95902d84fd02ffc824
493147a2eed594ee70e207075ec6aa628ffac46d36362cd7e92e8964a06b6668
GET /split-test-for-elementor/v1/tests/track-conversion/ HTTP/1.1
Host: leadgen.oxfordclub.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=cee8e8e68744411fbedf3a15cf269ac8&h=true
DNT: 1
Connection: keep-alive
Cookie: _ga_BBMPM3EJHQ=GS1.1.1715168444.1.0.1715168444.60.0.0; _ga=GA1.1.1632723510.1715168444; _gcl_au=1.1.305110386.1715168444; _mg_ckp=eyJja1RrZERGIjoiIn0=; dv0qai26lg6v2y6kl7yyc36brextdsvqcygf8t4=dc5xfld3cjv; dv0qai26lg6v2y6kl7yyc36brextdtqp98ayit1c=e43ha0ju7q; __mguid_=9346b7d74c8c43248821f425fdad2ec4; dv0qai26lg6v2y6kl7yyc36brextdbcaxqc5c3xo=jh2mi4nig2; dv0qai26lg6v2y6kl7yyc36brextdqlw42pa9n1q=krj5ejvqna; dv0qai26lg6v2y6kl7yyc36brextd4php1jt1c5w=18ca1jsgtyp; dv0qai26lg6v2y6kl7yyc36brextde0lmq4u0zb=xrr192jy1w; dv0qai26lg6v2y6kl7yyc36brextdye5mf5j9p8p=l41pi78e69p; dv0qai26lg6v2y6kl7yyc36brextdr08fjxzfzl=1c9z1mxss0u; _pmedia_sid=c3592a6b-e65c-401e-8da9-9e0adc9b8170; elementor_split_test_client_id=320f0d96a-4911deaa-c338-4469-922c-76464b8a9e09
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Server: nginx
Date: Wed, 08 May 2024 11:40:46 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
Link: <https://leadgen.oxfordclub.com/wp-json/>; rel="https://api.w.org/"
Content-Encoding: br
libertythroughwealthnews.com/split-test-for-elementor/v1/tests/track-conversion/
18.233.27.104404 Not Found 10 kB URL GET HTTP/1.1 libertythroughwealthnews.com/split-test-for-elementor/v1/tests/track-conversion/
IP 18.233.27.104:443
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=cee8e8e68744411fbedf3a15cf269ac8&h=true
Certificate IssuerLet's Encrypt
Subjectleadgen.oxfordclub.com
FingerprintE2:D4:E7:E5:AF:7E:F3:75:BD:8D:38:DA:BE:37:EA:DE:E2:5C:44:B4
ValidityTue, 12 Mar 2024 14:41:49 GMT - Mon, 10 Jun 2024 14:41:48 GMT
File type HTML document, Unicode text, UTF-8 text, with very long lines (5490)
Hash 3f819119b83dcb9f1f8f34ba56b2f98d
116a32a71e313c6a186f4b033ad032ed9ad0d1f1
21566b9cbea0dc2e1fbf62abbbf502f7046a410e373af116ee6605213985c252
GET /split-test-for-elementor/v1/tests/track-conversion/ HTTP/1.1
Host: libertythroughwealthnews.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Server: nginx
Date: Wed, 08 May 2024 11:40:46 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
Link: <https://libertythroughwealthnews.com/wp-json/>; rel="https://api.w.org/"
Set-Cookie: elementor_split_test_client_id=320f0d96a-66d21a84-2d16-4d04-ac34-ca45b9cbc961; expires=Thu, 08-May-2025 11:40:45 GMT; Max-Age=31536000; path=/; domain=libertythroughwealthnews.com
Content-Encoding: br
www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-BBMPM3EJHQ&cid=1632723510.1715168444>m=45je4510v9106739609z8813057436za200&aip=1&dma=1&dma_cps=sypham&gcd=13l3l3l2l1&npa=1&frm=0&z=1499688278
142.250.74.163200 OK 42 B URL GET HTTP/2 www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-BBMPM3EJHQ&cid=1632723510.1715168444>m=45je4510v9106739609z8813057436za200&aip=1&dma=1&dma_cps=sypham&gcd=13l3l3l2l1&npa=1&frm=0&z=1499688278
IP 142.250.74.163:443
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=cee8e8e68744411fbedf3a15cf269ac8&h=true
Certificate IssuerGoogle Trust Services LLC
Subject*.google.no
Fingerprint7D:68:6D:B1:32:34:52:51:20:C9:53:FF:B9:B7:8F:7E:05:F9:F5:97
ValidityTue, 16 Apr 2024 04:31:00 GMT - Tue, 09 Jul 2024 04:30:59 GMT
File type GIF image data, version 89a, 1 x 1
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-BBMPM3EJHQ&cid=1632723510.1715168444>m=45je4510v9106739609z8813057436za200&aip=1&dma=1&dma_cps=sypham&gcd=13l3l3l2l1&npa=1&frm=0&z=1499688278 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 08 May 2024 11:40:46 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
bat.bing.com/p/action/15322609.js
204.79.197.237204 No Content 0 B URL GET HTTP/2 bat.bing.com/p/action/15322609.js
IP 204.79.197.237:443
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=cee8e8e68744411fbedf3a15cf269ac8&h=true
Certificate IssuerMicrosoft Corporation
Subjectwww.bing.com
Fingerprint02:83:27:F9:50:D8:BE:B9:5E:DF:1A:4A:45:3B:6D:3C:BC:30:F2:58
ValidityWed, 01 May 2024 01:58:25 GMT - Thu, 27 Jun 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /p/action/15322609.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
cache-control: private,max-age=1800
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 3308D4E44D7F4E57B682BF9F458A2A0D Ref B: OSL30EDGE0510 Ref C: 2024-05-08T11:40:46Z
date: Wed, 08 May 2024 11:40:46 GMT
X-Firefox-Spdy: h2
bat.bing.com/action/0?ti=15322609&Ver=2&mid=98b42e8a-994a-480e-9fa0-2995e1c0f3b7&sid=cf7ad1500d2f11efab1e619feaf2946a&vid=cf7b17f00d2f11ef9568e72d40ab86c8&vids=1&msclkid=N&pi=918639831&lg=en-US&sw=1280&sh=1024&sc=24&tl=The%20Oxford%20Club&p=https%3A%2F%2Fpro.oxfordclub.com%2Fp%2FOILTO99BRKLT2YRDSTOT%2FNBRK4404%2F%3Fs1%3Dcee8e8e68744411fbedf3a15cf269ac8%26h%3Dtrue&r=<=4904&evt=pageLoad&sv=1&rn=794648
204.79.197.237204 No Content 0 B URL GET HTTP/2 bat.bing.com/action/0?ti=15322609&Ver=2&mid=98b42e8a-994a-480e-9fa0-2995e1c0f3b7&sid=cf7ad1500d2f11efab1e619feaf2946a&vid=cf7b17f00d2f11ef9568e72d40ab86c8&vids=1&msclkid=N&pi=918639831&lg=en-US&sw=1280&sh=1024&sc=24&tl=The%20Oxford%20Club&p=https%3A%2F%2Fpro.oxfordclub.com%2Fp%2FOILTO99BRKLT2YRDSTOT%2FNBRK4404%2F%3Fs1%3Dcee8e8e68744411fbedf3a15cf269ac8%26h%3Dtrue&r=<=4904&evt=pageLoad&sv=1&rn=794648
IP 204.79.197.237:443
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=cee8e8e68744411fbedf3a15cf269ac8&h=true
Certificate IssuerMicrosoft Corporation
Subjectwww.bing.com
Fingerprint02:83:27:F9:50:D8:BE:B9:5E:DF:1A:4A:45:3B:6D:3C:BC:30:F2:58
ValidityWed, 01 May 2024 01:58:25 GMT - Thu, 27 Jun 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /action/0?ti=15322609&Ver=2&mid=98b42e8a-994a-480e-9fa0-2995e1c0f3b7&sid=cf7ad1500d2f11efab1e619feaf2946a&vid=cf7b17f00d2f11ef9568e72d40ab86c8&vids=1&msclkid=N&pi=918639831&lg=en-US&sw=1280&sh=1024&sc=24&tl=The%20Oxford%20Club&p=https%3A%2F%2Fpro.oxfordclub.com%2Fp%2FOILTO99BRKLT2YRDSTOT%2FNBRK4404%2F%3Fs1%3Dcee8e8e68744411fbedf3a15cf269ac8%26h%3Dtrue&r=<=4904&evt=pageLoad&sv=1&rn=794648 HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
cache-control: no-cache, must-revalidate
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
set-cookie: MUID=27137D1A3E7961D3163569633F8C6044; domain=.bing.com; expires=Mon, 02-Jun-2025 11:40:46 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 8E5765C5DC534FAD8F03D92756A1CBE7 Ref B: OSL30EDGE0510 Ref C: 2024-05-08T11:40:46Z
date: Wed, 08 May 2024 11:40:46 GMT
X-Firefox-Spdy: h2
c.lytics.io/api/experience/candidate/9c32784e3cc4888a693a7988ad64c63d/config.js
104.26.3.22200 OK 13 kB URL GET HTTP/2 c.lytics.io/api/experience/candidate/9c32784e3cc4888a693a7988ad64c63d/config.js
IP 104.26.3.22:443
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=cee8e8e68744411fbedf3a15cf269ac8&h=true
Certificate IssuerLet's Encrypt
Subjectlytics.io
FingerprintB6:F8:34:ED:E4:C3:43:5C:FC:38:D0:CB:58:F7:80:C5:76:62:78:79
ValiditySat, 16 Mar 2024 02:39:35 GMT - Fri, 14 Jun 2024 02:39:34 GMT
File type Unicode text, UTF-8 text, with very long lines (65526), with no line terminators
Hash 988d5e5d5d6873554e95798ff51de574
fdfa55e661eb7a504d2af63d6499b50dadc0717e
652bb880b9dcdeb171575736e1fe5cab2d080ca0f09416039200e60da3a52995
GET /api/experience/candidate/9c32784e3cc4888a693a7988ad64c63d/config.js HTTP/1.1
Host: c.lytics.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Cookie: seerid=1a7f2710-2864-4691-b804-308d54307e52
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 08 May 2024 11:40:46 GMT
content-type: application/javascript
access-control-allow-origin: *
strict-transport-security: max-age=63072000;
x-lytics-trace: 2e4bce61dd43bb55c9f9d91326d03417
via: 1.1 google
cache-control: max-age=7200
cf-cache-status: EXPIRED
last-modified: Wed, 08 May 2024 08:41:55 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2s5RlLbLzGA%2FkOrbKMWMTwnIoN%2Ffdd2aipH2OtJkluLMrHbWLu0pmJ2MuxOJITIfnHyJU8GBL1NAHodQsN5SHH1i2i7iMsBUSYHG%2FVS2DiY4TNW6DRWzVYgMNJoO"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 88092d41a8ac5688-OSL
content-encoding: br
X-Firefox-Spdy: h2
s.yimg.com/wi/config/10150636.json
188.125.94.204200 OK 46 B URL GET HTTP/2 s.yimg.com/wi/config/10150636.json
IP 188.125.94.204:443
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=cee8e8e68744411fbedf3a15cf269ac8&h=true
Certificate IssuerDigiCert Inc
Subject*.fantasysports.yahoo.com
FingerprintFB:A0:5A:E1:EC:89:4D:F2:05:92:12:26:0C:97:C8:C6:CF:19:2F:96
ValidityTue, 30 Apr 2024 00:00:00 GMT - Wed, 19 Jun 2024 23:59:59 GMT
Hash 19b8572021b9e0a07b89bf86a82652ee
44c278b022175472711a5571a8e6ee825cf435a2
49ab5900241048e3f52a32cf9cf405ec5403001dceef55eba1f128b7809cef2b
GET /wi/config/10150636.json HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pro.oxfordclub.com
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
x-amz-id-2: CFdYhOG99yaW5IHM/uL7OjscdosFz9sIJ2y0Q1KJo820Sa/l/Ef/l+CCxUXM2qnFw/4WGysfPUA=
x-amz-request-id: TH1K6H86HD821DPD
date: Wed, 08 May 2024 11:40:47 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method
last-modified: Wed, 08 May 2024 10:36:39 GMT
x-amz-expiration: expiry-date="Fri, 13 Jun 2025 00:00:00 GMT", rule-id="oath-standard-lifecycle"
x-amz-server-side-encryption: AES256
x-amz-version-id: CByXkB_9_v8QUFpkQOjlJcuRjUUS8AAc
accept-ranges: bytes
content-type: application/json
server: ATS
content-length: 46
referrer-policy: no-referrer-when-downgrade
etag: "19b8572021b9e0a07b89bf86a82652ee"
age: 2
strict-transport-security: max-age=31536000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
region1.analytics.google.com/g/collect?v=2&tid=G-BBMPM3EJHQ>m=45je4510v9106739609za200&_p=1715168442849&gcd=13l3l3l2l1&npa=1&dma_cps=sypham&dma=1&cid=1632723510.1715168444&ul=en-us&sr=1280x1024&frm=0&pscdl=noapi&_eu=AEA&_s=2&sid=1715168444&sct=1&seg=0&dl=https%3A%2F%2Fpro.oxfordclub.com%2Fp%2FOILTO99BRKLT2YRDSTOT%2FNBRK4404%2F%3Fs1%3Dcee8e8e68744411fbedf3a15cf269ac8%26h%3Dtrue&dt=The%20Oxford%20Club&en=scroll&ep.promocode=NBRK4404&ep.device_width=large&ep.iris_campaign_name=BRK%20Oil&ep.media_channel=N%20-%20Agora%20Swap%20Website&ep.placement_name=Dedicated&ep.acquisition_method=UX%20-%20Web%2FEmail%20Promo%20External&ep.list_name=8020%20Publishing&ep.item_type=Subscription&ep.page_type=promo%20page&ep.iris_tree_name=NLOilAltLeadNoBookTO99%20(Video)%20No%20Abandon&ep.iris_page_1=NLOilAltLeadNoBookTO49%20(Video)&ep.template_type=video&ep.effort_type=Dedicated&ep.item_code=BRK&ep.item_subscription_type=FrontEnd&epn.percent_scrolled=90&tfd=10359
216.239.34.36204 No Content 0 B URL POST HTTP/3 region1.analytics.google.com/g/collect?v=2&tid=G-BBMPM3EJHQ>m=45je4510v9106739609za200&_p=1715168442849&gcd=13l3l3l2l1&npa=1&dma_cps=sypham&dma=1&cid=1632723510.1715168444&ul=en-us&sr=1280x1024&frm=0&pscdl=noapi&_eu=AEA&_s=2&sid=1715168444&sct=1&seg=0&dl=https%3A%2F%2Fpro.oxfordclub.com%2Fp%2FOILTO99BRKLT2YRDSTOT%2FNBRK4404%2F%3Fs1%3Dcee8e8e68744411fbedf3a15cf269ac8%26h%3Dtrue&dt=The%20Oxford%20Club&en=scroll&ep.promocode=NBRK4404&ep.device_width=large&ep.iris_campaign_name=BRK%20Oil&ep.media_channel=N%20-%20Agora%20Swap%20Website&ep.placement_name=Dedicated&ep.acquisition_method=UX%20-%20Web%2FEmail%20Promo%20External&ep.list_name=8020%20Publishing&ep.item_type=Subscription&ep.page_type=promo%20page&ep.iris_tree_name=NLOilAltLeadNoBookTO99%20(Video)%20No%20Abandon&ep.iris_page_1=NLOilAltLeadNoBookTO49%20(Video)&ep.template_type=video&ep.effort_type=Dedicated&ep.item_code=BRK&ep.item_subscription_type=FrontEnd&epn.percent_scrolled=90&tfd=10359
IP 216.239.34.36:443
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=cee8e8e68744411fbedf3a15cf269ac8&h=true
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint93:6B:D2:9D:92:BE:2D:D8:02:67:82:83:5E:EF:A3:F9:13:F3:26:AE
ValidityTue, 16 Apr 2024 03:18:45 GMT - Tue, 09 Jul 2024 03:18:44 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-BBMPM3EJHQ>m=45je4510v9106739609za200&_p=1715168442849&gcd=13l3l3l2l1&npa=1&dma_cps=sypham&dma=1&cid=1632723510.1715168444&ul=en-us&sr=1280x1024&frm=0&pscdl=noapi&_eu=AEA&_s=2&sid=1715168444&sct=1&seg=0&dl=https%3A%2F%2Fpro.oxfordclub.com%2Fp%2FOILTO99BRKLT2YRDSTOT%2FNBRK4404%2F%3Fs1%3Dcee8e8e68744411fbedf3a15cf269ac8%26h%3Dtrue&dt=The%20Oxford%20Club&en=scroll&ep.promocode=NBRK4404&ep.device_width=large&ep.iris_campaign_name=BRK%20Oil&ep.media_channel=N%20-%20Agora%20Swap%20Website&ep.placement_name=Dedicated&ep.acquisition_method=UX%20-%20Web%2FEmail%20Promo%20External&ep.list_name=8020%20Publishing&ep.item_type=Subscription&ep.page_type=promo%20page&ep.iris_tree_name=NLOilAltLeadNoBookTO99%20(Video)%20No%20Abandon&ep.iris_page_1=NLOilAltLeadNoBookTO49%20(Video)&ep.template_type=video&ep.effort_type=Dedicated&ep.item_code=BRK&ep.item_subscription_type=FrontEnd&epn.percent_scrolled=90&tfd=10359 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pro.oxfordclub.com
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/3 204 No Content
access-control-allow-origin: https://pro.oxfordclub.com
date: Wed, 08 May 2024 11:40:49 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
analytics.pmsrv.co/v2/track?&a=50bbcf39-5fab-4416-a13c-acc35b621b86&event=s004&weight=0&_ible=1&sid=c3592a6b-e65c-401e-8da9-9e0adc9b8170&ord=1726559897588564.2&_ii=0&pg=https%3A%2F%2Fpro.oxfordclub.com%2Fp%2FOILTO99BRKLT2YRDSTOT%2FNBRK4404%2F%3Fs1%3Dcee8e8e68744411fbedf3a15cf269ac8%26h%3Dtrue&ppg=&_tk=%7B%7D
54.230.111.89204 No Content 0 B URL GET HTTP/2 analytics.pmsrv.co/v2/track?&a=50bbcf39-5fab-4416-a13c-acc35b621b86&event=s004&weight=0&_ible=1&sid=c3592a6b-e65c-401e-8da9-9e0adc9b8170&ord=1726559897588564.2&_ii=0&pg=https%3A%2F%2Fpro.oxfordclub.com%2Fp%2FOILTO99BRKLT2YRDSTOT%2FNBRK4404%2F%3Fs1%3Dcee8e8e68744411fbedf3a15cf269ac8%26h%3Dtrue&ppg=&_tk=%7B%7D
IP 54.230.111.89:443
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=cee8e8e68744411fbedf3a15cf269ac8&h=true
Certificate IssuerAmazon
Subjectpmsrv.co
Fingerprint75:6B:BA:1B:09:1C:F0:09:3F:A7:0A:8D:BC:E2:85:28:5E:AF:4F:47
ValiditySat, 16 Sep 2023 00:00:00 GMT - Mon, 14 Oct 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v2/track?&a=50bbcf39-5fab-4416-a13c-acc35b621b86&event=s004&weight=0&_ible=1&sid=c3592a6b-e65c-401e-8da9-9e0adc9b8170&ord=1726559897588564.2&_ii=0&pg=https%3A%2F%2Fpro.oxfordclub.com%2Fp%2FOILTO99BRKLT2YRDSTOT%2FNBRK4404%2F%3Fs1%3Dcee8e8e68744411fbedf3a15cf269ac8%26h%3Dtrue&ppg=&_tk=%7B%7D HTTP/1.1
Host: analytics.pmsrv.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Wed, 08 May 2024 10:17:32 GMT
x-powered-by: Express
cache-control: private, no-cache, no-store, must-revalidate
expires: -1
pragma: no-cache
access-control-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 98794c1dec0d4e7b10ddf0faa094cf94.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: tgClT6lo-l0z7CF77HHojSRuNQrr6gO-YQLqgc8FDJq6CDUNoYCCHQ==
age: 4998
X-Firefox-Spdy: h2
at-api.tribeos.io/a/5e554fee6b742527f85286135595/setup.js
104.21.87.161522 No Reason Phrase 7.1 kB URL GET HTTP/2 at-api.tribeos.io/a/5e554fee6b742527f85286135595/setup.js
IP 104.21.87.161:443
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=cee8e8e68744411fbedf3a15cf269ac8&h=true
Certificate IssuerLet's Encrypt
Subjecttribeos.io
Fingerprint3C:9F:EB:EE:51:87:EA:DD:3D:25:0E:04:6F:88:4C:DC:41:0F:6F:2A
ValidityThu, 02 May 2024 01:42:13 GMT - Wed, 31 Jul 2024 01:42:12 GMT
File type HTML document, ASCII text, with very long lines (460)
Hash 9d26e2af9e6511abb4e81ec3e30ecce6
b5e340fe5ef3d04070377a491ecf8f9c574d9c04
38e547c2974c606e1165cb3ea239089bff6b5f79b6e75f4aa6b8b6dbd57e97e9
GET /a/5e554fee6b742527f85286135595/setup.js HTTP/1.1
Host: at-api.tribeos.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 522 No Reason Phrase
date: Wed, 08 May 2024 11:41:00 GMT
content-type: text/html; charset=UTF-8
content-length: 7090
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Mc793w168g6yw9%2BZ4wituB%2FUrny%2BfxED3LyL2mZE3k9NflRkmy50td4erGeNjTFBzJxQ5pbI%2BW3Kqfe2PUo%2BxZwChAzHGPPeddRoeJKsPAuLbFuihn1h5Esb%2BnpDuiPw8f1E5w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
x-frame-options: SAMEORIGIN
referrer-policy: same-origin
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
server: cloudflare
cf-ray: 88092d3c98c85696-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
analytics.pmsrv.co/v2/track?&a=50bbcf39-5fab-4416-a13c-acc35b621b86&event=s000&weight=0&_ible=1&sid=c3592a6b-e65c-401e-8da9-9e0adc9b8170&ord=8608357735341547&_ii=0&pg=https%3A%2F%2Fpro.oxfordclub.com%2Fp%2FOILTO99BRKLT2YRDSTOT%2FNBRK4404%2F%3Fs1%3Dcee8e8e68744411fbedf3a15cf269ac8%26h%3Dtrue&ppg=&_tk=%7B%7D
54.230.111.89 0 B URL analytics.pmsrv.co/v2/track?&a=50bbcf39-5fab-4416-a13c-acc35b621b86&event=s000&weight=0&_ible=1&sid=c3592a6b-e65c-401e-8da9-9e0adc9b8170&ord=8608357735341547&_ii=0&pg=https%3A%2F%2Fpro.oxfordclub.com%2Fp%2FOILTO99BRKLT2YRDSTOT%2FNBRK4404%2F%3Fs1%3Dcee8e8e68744411fbedf3a15cf269ac8%26h%3Dtrue&ppg=&_tk=%7B%7D
IP 54.230.111.89:0
Certificate IssuerAmazon
Subjectpmsrv.co
Fingerprint75:6B:BA:1B:09:1C:F0:09:3F:A7:0A:8D:BC:E2:85:28:5E:AF:4F:47
ValiditySat, 16 Sep 2023 00:00:00 GMT - Mon, 14 Oct 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v2/track?&a=50bbcf39-5fab-4416-a13c-acc35b621b86&event=s000&weight=0&_ible=1&sid=c3592a6b-e65c-401e-8da9-9e0adc9b8170&ord=8608357735341547&_ii=0&pg=https%3A%2F%2Fpro.oxfordclub.com%2Fp%2FOILTO99BRKLT2YRDSTOT%2FNBRK4404%2F%3Fs1%3Dcee8e8e68744411fbedf3a15cf269ac8%26h%3Dtrue&ppg=&_tk=%7B%7D HTTP/1.1
Host: analytics.pmsrv.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Wed, 08 May 2024 10:17:32 GMT
x-powered-by: Express
cache-control: private, no-cache, no-store, must-revalidate
expires: -1
pragma: no-cache
access-control-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 98794c1dec0d4e7b10ddf0faa094cf94.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ipngg5za4YTEB9Urf9FrX-2ovzCJ-q1KBBxkBb4JRKRyUopZ8vIifA==
age: 5013
X-Firefox-Spdy: h2
go.goodlifestylenews.com/BRKOil0323/ec55f96bdbee115719939c545d55f6bb/55/leadsource/2617/1610/ca3d1c910d8285fdc928a0b7af721c0c/mpmta
172.67.172.49302 Found 17 kB URL User Request GET HTTP/2 go.goodlifestylenews.com/BRKOil0323/ec55f96bdbee115719939c545d55f6bb/55/leadsource/2617/1610/ca3d1c910d8285fdc928a0b7af721c0c/mpmta
IP 172.67.172.49:443
Certificate IssuerGoogle Trust Services LLC
Subjectgoodlifestylenews.com
FingerprintCF:D4:62:67:0B:FC:CB:36:EF:53:02:EB:06:FE:15:35:2F:53:53:40
ValidityThu, 21 Mar 2024 14:09:53 GMT - Wed, 19 Jun 2024 14:09:52 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /BRKOil0323/ec55f96bdbee115719939c545d55f6bb/55/leadsource/2617/1610/ca3d1c910d8285fdc928a0b7af721c0c/mpmta HTTP/1.1
Host: go.goodlifestylenews.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Wed, 08 May 2024 11:40:39 GMT
content-type: text/html; charset=UTF-8
location: https://verifiedwebpage.com/go?ehash=ec55f96bdbee115719939c545d55f6bb&product=22875&ar=55&cid=2617&lid=1610&slhash=ca3d1c910d8285fdc928a0b7af721c0c&mtaid=mpmta&cid2=[s8]
cache-control: max-age=600
expires: Wed, 08 May 2024 11:50:39 GMT
vary: User-Agent
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TZvZYroBTpQGGYaeG4moPckE%2FQdExEJlll3QxxIxMv11V6kL4nbN425E8WR5hd%2BTLxVrZ8%2Bt6FaXuxcNl8dF%2BUWh6ywIOLxlBf%2BqrR3%2FjE%2Bs92IBxn%2FZx%2B%2FOyeWn2sYDtdIJRkvrMbzWBwk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 88092d176c78b4ff-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
c.lytics.io/static/pathfora.min.css
104.26.3.22200 OK 21 kB URL GET HTTP/2 c.lytics.io/static/pathfora.min.css
IP 104.26.3.22:443
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=cee8e8e68744411fbedf3a15cf269ac8&h=true
Certificate IssuerLet's Encrypt
Subjectlytics.io
FingerprintB6:F8:34:ED:E4:C3:43:5C:FC:38:D0:CB:58:F7:80:C5:76:62:78:79
ValiditySat, 16 Mar 2024 02:39:35 GMT - Fri, 14 Jun 2024 02:39:34 GMT
File type ASCII text, with very long lines (20939), with no line terminators
Hash eecb9ff4af0757a947f791bc35393abc
2d23a8718b63c1cd96a10674bdc92ca61682e85b
464ad5d70f6d5fe4adef4d3057e1ae91e4983b02ef4ec9db0b067dcad4e53685
GET /static/pathfora.min.css HTTP/1.1
Host: c.lytics.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Cookie: seerid=1a7f2710-2864-4691-b804-308d54307e52
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 08 May 2024 11:40:45 GMT
content-type: text/css; charset=utf-8
strict-transport-security: max-age=63072000;
via: 1.1 google
cache-control: max-age=7200
cf-cache-status: HIT
age: 3847
last-modified: Wed, 08 May 2024 10:36:38 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=aW%2Bsvau9NdRTnFQXWkfJbJfiPAem4YtXRQVTTAArfEMZxg3hwLgdxqmkfG4yFvwtyMOpg9JgkcbUIVeX60zSqPz6guxU95x8UdL1tE%2FdkIcenaEYvGvdcXaBlc%2FP"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 88092d3eed0e5688-OSL
content-encoding: br
X-Firefox-Spdy: h2
a.mgid.com/mgsensor.js?d=1715168444296&source=gtm
104.19.133.76200 OK 17 kB URL GET HTTP/2 a.mgid.com/mgsensor.js?d=1715168444296&source=gtm
IP 104.19.133.76:443
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=cee8e8e68744411fbedf3a15cf269ac8&h=true
Certificate IssuerLet's Encrypt
Subjectmgid.com
Fingerprint9C:6C:5A:48:88:44:CB:C2:F4:76:D3:2E:DC:07:0D:D4:CA:6A:25:F5
ValiditySun, 10 Mar 2024 23:31:34 GMT - Sat, 08 Jun 2024 23:31:33 GMT
File type JavaScript source, ASCII text, with very long lines (16960), with no line terminators
Hash 55f2e03ea5c17124ec95ef6b177ffce2
07a2522117e2b756ae1eae210be12e7412083e48
45d2c055791d072ed388bb395f90aaebf2425189bbd03942b8f60855ba4f6988
GET /mgsensor.js?d=1715168444296&source=gtm HTTP/1.1
Host: a.mgid.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 08 May 2024 11:40:44 GMT
content-type: application/javascript
vary: Accept-Encoding
x-mg-request-uuid: 772ab2f9-a9b3-4b14-8711-50dfc9700aee
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
set-cookie: __cf_bm=JnGb29YZNoGRkmRWY22tDKxZeGsVv5uebrtZhFNM0Gk-1715168444-1.0.1.1-jt0dV0jKYefdzWtGxWVVehc_XUtms0TCr323YhHscewuffPxCA3eHEaBBA38hnzbrzCseGGvBsdJwF05hHYDDw; path=/; expires=Wed, 08-May-24 12:10:44 GMT; domain=.mgid.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 88092d398e5856c6-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css
104.18.11.207200 OK 160 kB URL GET HTTP/2 stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css
IP 104.18.11.207:443
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=cee8e8e68744411fbedf3a15cf269ac8&h=true
Certificate IssuerGoogle Trust Services LLC
Subjectbootstrapcdn.com
Fingerprint57:B4:25:B9:9C:88:A1:A3:3D:F7:31:74:02:E4:D1:E0:0A:F5:11:63
ValidityWed, 27 Mar 2024 00:22:09 GMT - Tue, 25 Jun 2024 00:22:08 GMT
File type ASCII text, with very long lines (65324)
Size 160 kB (160403 bytes)
Hash 3afe15e976734d9daac26310110c4594
4f14a09a606c99a11f8fda15564ef66f70402826
680af6669abc319f9803f0fa26d443df1b6bc29133d88a8e4bea560ffed7288c
GET /bootstrap/4.5.0/css/bootstrap.min.css HTTP/1.1
Host: stackpath.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pro.oxfordclub.com
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 08 May 2024 11:40:42 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
etag: W/"3afe15e976734d9daac26310110c4594"
last-modified: Mon, 25 Jan 2021 22:04:10 GMT
cdn-cachedat: 10/31/2023 18:50:52
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 865
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: c8fc23bbdd5ae140dc8cf7807c3ae033
cdn-cache: HIT
cf-cache-status: HIT
age: 672880
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 88092d2c785c56c5-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/destination?id=AW-780277278&l=dataLayer&cx=c
142.250.74.168200 OK 231 kB URL GET HTTP/3 www.googletagmanager.com/gtag/destination?id=AW-780277278&l=dataLayer&cx=c
IP 142.250.74.168:443
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=cee8e8e68744411fbedf3a15cf269ac8&h=true
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint93:6B:D2:9D:92:BE:2D:D8:02:67:82:83:5E:EF:A3:F9:13:F3:26:AE
ValidityTue, 16 Apr 2024 03:18:45 GMT - Tue, 09 Jul 2024 03:18:44 GMT
File type JavaScript source, ASCII text, with very long lines (4179)
Size 231 kB (230553 bytes)
Hash bb8bf7010ca28cc1b3b097d74fbc1305
3d887ea1b188007313913153280c2b9b37e94433
ed67721407419384da8b881cc84a2d79cf74a7e3a79d084cd289da5849ddfef2
GET /gtag/destination?id=AW-780277278&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 08 May 2024 11:40:44 GMT
expires: Wed, 08 May 2024 11:40:44 GMT
cache-control: private, max-age=900
last-modified: Wed, 08 May 2024 09:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 81978
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
analytics.pmsrv.co/v1/tracking.js?d=pro.oxfordclub.com&a=50bbcf39-5fab-4416-a13c-acc35b621b86
54.230.111.89200 OK 3.0 kB URL GET HTTP/2 analytics.pmsrv.co/v1/tracking.js?d=pro.oxfordclub.com&a=50bbcf39-5fab-4416-a13c-acc35b621b86
IP 54.230.111.89:443
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=cee8e8e68744411fbedf3a15cf269ac8&h=true
Certificate IssuerAmazon
Subjectpmsrv.co
Fingerprint75:6B:BA:1B:09:1C:F0:09:3F:A7:0A:8D:BC:E2:85:28:5E:AF:4F:47
ValiditySat, 16 Sep 2023 00:00:00 GMT - Mon, 14 Oct 2024 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (3099), with no line terminators
Hash e67eeb0a5fde100a9a9b8218be6ff7b7
900455bf5702428b4260ae17a16226e8f730896a
1ac534d6bbb2bfc01317c298911ee45cd0199cadebe1b7d8cf43dd178ec2a49d
GET /v1/tracking.js?d=pro.oxfordclub.com&a=50bbcf39-5fab-4416-a13c-acc35b621b86 HTTP/1.1
Host: analytics.pmsrv.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
date: Wed, 08 May 2024 11:39:55 GMT
x-powered-by: Express
cache-control: private, no-cache, no-store, must-revalidate
expires: -1
pragma: no-cache
content-encoding: gzip
etag: W/"bc8-CwjlEyZMeJT2T4gdzys39D9fgms"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 98794c1dec0d4e7b10ddf0faa094cf94.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: pKZ8C02-tNOSZpJbOzkvGPcF4fsfklddMSoGI4TQxclPLzGMP0ofbg==
age: 50
X-Firefox-Spdy: h2
libertythroughwealthnews.com/split-test-for-elementor/v1/tests/39/track-conversion/
18.233.27.104200 OK 43 B URL GET HTTP/1.1 libertythroughwealthnews.com/split-test-for-elementor/v1/tests/39/track-conversion/
IP 18.233.27.104:443
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=cee8e8e68744411fbedf3a15cf269ac8&h=true
Certificate IssuerLet's Encrypt
Subjectleadgen.oxfordclub.com
FingerprintE2:D4:E7:E5:AF:7E:F3:75:BD:8D:38:DA:BE:37:EA:DE:E2:5C:44:B4
ValidityTue, 12 Mar 2024 14:41:49 GMT - Mon, 10 Jun 2024 14:41:48 GMT
File type GIF image data, version 89a, 1 x 1
Hash 57f187c7a868faeac558007a8eb6cb2e
11ab10ab109fdb53d91d444ac781101f5a6360c6
aa03dc59bdca72631d2301e4297cfa030bd31b907dc138e7b973d12311c90a22
GET /split-test-for-elementor/v1/tests/39/track-conversion/ HTTP/1.1
Host: libertythroughwealthnews.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 08 May 2024 11:40:45 GMT
Content-Type: image/gif
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Set-Cookie: elementor_split_test_client_id=320f0d96a-5dd657e4-8159-44c8-8de3-90f4370b1674; expires=Thu, 08-May-2025 11:40:45 GMT; Max-Age=31536000; path=/; domain=libertythroughwealthnews.com
Referrer-Policy: unsafe-url
s3.amazonaws.com/assets.oxfordclub.com/css/global/lytics-styles.css
52.217.203.24200 OK 415 kB URL GET HTTP/1.1 s3.amazonaws.com/assets.oxfordclub.com/css/global/lytics-styles.css
IP 52.217.203.24:443
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=cee8e8e68744411fbedf3a15cf269ac8&h=true
Certificate IssuerAmazon
Subjects3.amazonaws.com
Fingerprint82:A2:80:27:89:C3:32:0E:1E:77:2D:6F:F3:3D:19:D3:97:36:BC:7C
ValidityThu, 08 Feb 2024 00:00:00 GMT - Sat, 11 Jan 2025 23:59:59 GMT
Size 415 kB (414945 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /assets.oxfordclub.com/css/global/lytics-styles.css HTTP/1.1
Host: s3.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: kS4Z11WFzkiYDhzgfQrK+yfr8HByxXvRGP3EdVTfWohXZI5I3M8q7H3mPG2J2dvH3dnjri24Kxc=
x-amz-request-id: 41NYTJZSZVYSAG6G
Date: Wed, 08 May 2024 11:40:45 GMT
Last-Modified: Wed, 08 May 2024 01:16:47 GMT
ETag: "3ef4dda36afd5956bd477c7a8c793f61"
x-amz-server-side-encryption: AES256
x-amz-version-id: OvD6H_V5fiSjNDoilzH12waTpYJqdjNW
Accept-Ranges: bytes
Content-Type: text/css
Server: AmazonS3
Content-Length: 414945
www.p3lstrk.com/2MGNK7T/CXW7M6/?sub1=3415433504656332612
35.241.49.11302 Found 17 kB URL User Request GET HTTP/2 www.p3lstrk.com/2MGNK7T/CXW7M6/?sub1=3415433504656332612
IP 35.241.49.11:443
ASN #396982 GOOGLE-CLOUD-PLATFORM
Certificate IssuerStarfield Technologies, Inc.
Subjectof59trk.com
Fingerprint7C:22:67:15:07:7A:A8:A1:66:C3:A0:CD:C5:3A:BA:6B:FF:2A:61:81
ValidityFri, 23 Feb 2024 15:04:31 GMT - Tue, 11 Feb 2025 14:26:38 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /2MGNK7T/CXW7M6/?sub1=3415433504656332612 HTTP/1.1
Host: www.p3lstrk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx
date: Wed, 08 May 2024 11:40:40 GMT
content-type: text/html; charset=utf-8
content-length: 95
accept-ch: Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Model
location: https://pro.oxfordclub.com/m/2314530?s1=cee8e8e68744411fbedf3a15cf269ac8
set-cookie: uniqueClick_CXW7M6=78a5ed7f-8e12-4845-a1ad-9f53df57c5dd:1715168440; Path=/; Expires=Wed, 05 Jun 2024 11:40:40 GMT; Secure; SameSite=None
transaction_id=cee8e8e68744411fbedf3a15cf269ac8; Path=/; Expires=Tue, 06 Aug 2024 11:40:40 GMT; Secure; SameSite=None
vary: Origin
x-eflow-request-id: 0db41e7b-e5cf-48ca-981e-13e8e9e474d7
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
embed-ssl.wistia.com/deliveries/ad4b9b62ceff289d06520fdb00b932cc.webp?image_crop_resized=1280x720
143.204.55.103200 OK 54 kB URL GET HTTP/2 embed-ssl.wistia.com/deliveries/ad4b9b62ceff289d06520fdb00b932cc.webp?image_crop_resized=1280x720
IP 143.204.55.103:443
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=cee8e8e68744411fbedf3a15cf269ac8&h=true
Certificate IssuerAmazon
Subject*.wistia.com
Fingerprint44:FA:DB:AB:41:36:F5:96:F7:BF:3A:E7:D8:61:50:5C:26:80:3D:D2
ValidityMon, 01 Jan 2024 00:00:00 GMT - Tue, 28 Jan 2025 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 1280x720, Scaling: [none]x[none], YUV color, decoders should clamp
Hash b9a4c28a08292016647210b642b4b454
c3e26044d75539279b1e8fcdb22430758d753633
2156d9f017881cce64c07374c57e7984de81dc473afe49ac975949a4c13785b4
GET /deliveries/ad4b9b62ceff289d06520fdb00b932cc.webp?image_crop_resized=1280x720 HTTP/1.1
Host: embed-ssl.wistia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/webp
accept-ranges: none
access-control-request-method: *
cache-control: max-age=31536000
content-disposition: inline
edge-cache-tag: ad4b9b62ceff289d06520fdb00b932cc
etag: kGg1mbUfolTJdhz7jevqLB7fGbg=
last-modified: Tue, 28 Nov 2023 14:39:32 UTC
surrogate-key: ad4b9b62ceff289d06520fdb00b932cc thumbnail-delivery
date: Sat, 04 May 2024 05:53:23 GMT
x-envoy-upstream-service-time: 226
server: envoy
x-cache: Hit from cloudfront
via: 1.1 80d21802b1b80c40e55ccf83433b8eac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 7ogmcnf3QYK7ORzZ3J7ultR5zRIR-B2vqqpjFxvTq1xifAyGT4bXag==
age: 366439
x-cdn: cloudfront
vary: Origin
X-Firefox-Spdy: h2
s.yimg.com/wi/config/10090329.json
188.125.94.204200 OK 2 B URL GET HTTP/2 s.yimg.com/wi/config/10090329.json
IP 188.125.94.204:443
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=cee8e8e68744411fbedf3a15cf269ac8&h=true
Certificate IssuerDigiCert Inc
Subject*.fantasysports.yahoo.com
FingerprintFB:A0:5A:E1:EC:89:4D:F2:05:92:12:26:0C:97:C8:C6:CF:19:2F:96
ValidityTue, 30 Apr 2024 00:00:00 GMT - Wed, 19 Jun 2024 23:59:59 GMT
Hash 99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
GET /wi/config/10090329.json HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pro.oxfordclub.com
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
access-control-allow-methods: GET
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
x-amz-request-id: TH1M002ADTYRFRXT
x-amz-id-2: zbLl7u3kPQHGw7IR0XZWG6kpm0xo13tItQI1HyDmQPlP7JzP0hcwHm+A0DUHPyo/M/I676U2bkR0CMtN6lfBeQ==
content-type: application/json
date: Wed, 08 May 2024 11:40:46 GMT
server: ATS
referrer-policy: no-referrer-when-downgrade
cache-control: public,max-age=3600
age: 0
content-encoding: gzip
content-length: 22
strict-transport-security: max-age=31536000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
c.lytics.io/static/pathfora.min.js
104.26.3.22200 OK 105 kB URL GET HTTP/2 c.lytics.io/static/pathfora.min.js
IP 104.26.3.22:443
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=cee8e8e68744411fbedf3a15cf269ac8&h=true
Certificate IssuerLet's Encrypt
Subjectlytics.io
FingerprintB6:F8:34:ED:E4:C3:43:5C:FC:38:D0:CB:58:F7:80:C5:76:62:78:79
ValiditySat, 16 Mar 2024 02:39:35 GMT - Fri, 14 Jun 2024 02:39:34 GMT
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size 105 kB (105002 bytes)
Hash 1dda5c62f6d686fe449a9d217388da4b
a2cfd95511bd1a0f8ae3275e44d309c7279c4a69
1f6e70fc4337b6769a4c498cf721491cb1f31a14e342cb9c584ccea00fee9d1b
GET /static/pathfora.min.js HTTP/1.1
Host: c.lytics.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Cookie: seerid=1a7f2710-2864-4691-b804-308d54307e52
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 08 May 2024 11:40:45 GMT
content-type: text/javascript; charset=utf-8
strict-transport-security: max-age=63072000;
via: 1.1 google
cache-control: max-age=7200
cf-cache-status: HIT
age: 4201
last-modified: Wed, 08 May 2024 10:30:44 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OwM9q5FQhDG9ln1qPCpuk5PdLe6S%2BFp4xxJjKByNjl%2FbmMqSB7AybgWNXBQuavE33rp6lJ5z4jDIV188yuUOZvonwyATrkFDWUWt240OrA4jMXZwRnIyVFrMxMHk"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 88092d3e7c945688-OSL
content-encoding: br
X-Firefox-Spdy: h2
s3.amazonaws.com/assets.oxfordclub.com/oxford-favicon.png
52.217.203.24200 OK 1.5 kB URL GET HTTP/1.1 s3.amazonaws.com/assets.oxfordclub.com/oxford-favicon.png
IP 52.217.203.24:443
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=cee8e8e68744411fbedf3a15cf269ac8&h=true
Certificate IssuerAmazon
Subjects3.amazonaws.com
Fingerprint82:A2:80:27:89:C3:32:0E:1E:77:2D:6F:F3:3D:19:D3:97:36:BC:7C
ValidityThu, 08 Feb 2024 00:00:00 GMT - Sat, 11 Jan 2025 23:59:59 GMT
File type PNG image data, 35 x 35, 8-bit/color RGBA, non-interlaced
Hash 5ac49ec01d1cac718b2c4a4832d194c4
82a729b99d1363e89def3ece50ea7c0c07109a7a
77b961c58d38a7ae54fbd422c6388169b3f8b3932991f874326203fb1704f79a
GET /assets.oxfordclub.com/oxford-favicon.png HTTP/1.1
Host: s3.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: FUEpfe3sgHzWRUvthcnXjFG7XK6MWLsDSJFhlRrFu7+dYaFU9iJ2wVUrfi/IvkpaqQSZI0aaun0=
x-amz-request-id: 9P41DY10ZWD6C2C9
Date: Wed, 08 May 2024 11:40:44 GMT
Last-Modified: Wed, 22 Aug 2018 16:04:30 GMT
ETag: "5ac49ec01d1cac718b2c4a4832d194c4"
x-amz-version-id: null
Accept-Ranges: bytes
Content-Type: image/png
Server: AmazonS3
Content-Length: 1487
c.pmsrv.co/v1/analytics.js?d=pro.oxfordclub.com
143.204.55.85200 OK 9.7 kB URL GET HTTP/2 c.pmsrv.co/v1/analytics.js?d=pro.oxfordclub.com
IP 143.204.55.85:443
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=cee8e8e68744411fbedf3a15cf269ac8&h=true
Certificate IssuerAmazon
Subjectpmsrv.co
Fingerprint75:6B:BA:1B:09:1C:F0:09:3F:A7:0A:8D:BC:E2:85:28:5E:AF:4F:47
ValiditySat, 16 Sep 2023 00:00:00 GMT - Mon, 14 Oct 2024 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (10015), with no line terminators
Hash 5770d811d5c7b150913493ade2195adb
7e37f2f2989092bab262e862c63dd042997f7d17
af3e9d36faf85e71bb9c9bdbf74d0205225f7f5dcc9c3427ca50ac4443f3a730
GET /v1/analytics.js?d=pro.oxfordclub.com HTTP/1.1
Host: c.pmsrv.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
date: Tue, 07 May 2024 14:54:31 GMT
x-powered-by: Express
set-cookie: tpc=1; Domain=c.pmsrv.co; Path=/; Secure; SameSite=None
cache-control: private, no-cache, no-store, must-revalidate
expires: -1
pragma: no-cache
content-encoding: br
etag: W/"2608-ON79WHDBVOZGjekelYGZWI6GYLU"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 475d4ecb64796af058573c6f1048e898.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: e4_U2swtK_kBo3Kfmpee85kxsQIuMOXM-I1yg_AJAEmVzl1bHnxzQA==
age: 74774
X-Firefox-Spdy: h2