GET www3.blueoceanbrain.com/g/carlyle-okta/aca92c0a/saml/login?np=%2Fg%2Fcarlyle-okta%2Faca92c0a%2Fliving-library%2F39e56c00ac1e00ba49d0ac2fed629967%2Ffd07b969ac1e00ba0601bab3b67de0af
302 Found 25 kB URL User Request GET www3.blueoceanbrain.com/g/carlyle-okta/aca92c0a/saml/login?np=%2Fg%2Fcarlyle-okta%2Faca92c0a%2Fliving-library%2F39e56c00ac1e00ba49d0ac2fed629967%2Ffd07b969ac1e00ba0601bab3b67de0af
IP
Certificate IssuerAmazon
Subject*.blueoceanbrain.com
Fingerprint00:16:C6:49:B4:4F:E8:B3:E2:4B:17:B6:7F:59:16:8B:67:98:AF:CA
ValidityThu, 06 Mar 2025 00:00:00 GMT - Sat, 04 Apr 2026 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /g/carlyle-okta/aca92c0a/saml/login?np=%2Fg%2Fcarlyle-okta%2Faca92c0a%2Fliving-library%2F39e56c00ac1e00ba49d0ac2fed629967%2Ffd07b969ac1e00ba0601bab3b67de0af HTTP/1.1
Host: www3.blueoceanbrain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: SESSIONID=q0cdm7ijnt7glgqaui1j72pufg; bob-guest-lang=9ca21166fe9b9a730f633248f372c7d67aa3698774091f58ce2d87b62ec2e3fda%3A2%3A%7Bi%3A0%3Bs%3A14%3A%22bob-guest-lang%22%3Bi%3A1%3Bs%3A24%3A%22nrXW7Hc5H%2FxF0L8K8TC%2BVA%3D%3D%22%3B%7D; ca=c1a4b104f5471cf90a89ebc32e9a57e650d6fbb56aa8a62b25baa69b2fb7a6d4a%3A2%3A%7Bi%3A0%3Bs%3A2%3A%22ca%22%3Bi%3A1%3Bs%3A32%3A%223d753b648a584afa5c073ef6b11693ea%22%3B%7D
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Wed, 25 Jun 2025 13:23:34 GMT
content-type: text/html; charset=UTF-8
location: https://sso.carlyle.com/app/blueoceanbrain/exk7rvrqrdRgz5FBb697/sso/saml?SAMLRequest=hZJfb9owFMXf%2BRSV3xPnD4FgARIt64bEAAHdw14mx7lprTp26uuUdp9%2BwenWdtI6v%2Fn6%2Fo7OOfIUea0atmjdnd7DQwvoBhfdeaqVRuYfZ6S1mhmOEpnmNSBzgh0WX9csCSPWWOOMMIr8hX1McUSwThrdY6vljGw3n9bbz6vNDy6yPB9GEwFVlSVFMRpXeQliEsfDNErzZFSKaJyncY9%2BA4udzox0smTQqyG2sNLouHbdPEqyIBoFSXaMU5akLB1%2B79FlF1Zq7jx%2B51yDjFJEEwpu1bOCUJia8qahhWrBCOC6sFxqCk%2F3Y%2FtoH2y5v%2F2ZXV8Wo8n4zNFz7l5699LKpdSl1Lcfl1H0S8i%2BHI%2B7YLc9HHuRxe%2BSrozGtgZ7APsoBdzs169%2BT6dTGr436H0L%2BpIiMPeOe2uUCyRzLz0935kvys7%2FIzWlb5df8YZtuiir5c4oKZ79%2FHyuja25%2B3fiOIz9RJZB5VdZq7EBISsJJfkjs1DKnK4scAcz4mwL5ILOB72X9%2F91%2Fgs%3D&RelayState=https%3A%2F%2Fwww3.blueoceanbrain.com%2Fsaml%2Flogin
server: nginx/1.25.5
expires: Thu, 19 Nov 1981 08:52:00 GMT
pragma: no-cache
cache-control: no-cache, must-revalidate
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
content-security-policy: default-src * 'unsafe-eval' 'unsafe-inline'; img-src * data:; font-src * data:;
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
permissions-policy: accelerometer=(),autoplay=(),camera=(),display-capture=(),document-domain=(),encrypted-media=(self),fullscreen=(self "https://www.youtube.com" "https://player.vimeo.com" "https://embed.ted.com"),geolocation=(),gyroscope=(),magnetometer=(),microphone=(),midi=(),payment=(),picture-in-picture=(),publickey-credentials-get=(),screen-wake-lock=(),sync-xhr=(self),usb=(),web-share=(),xr-spatial-tracking=()
x-cache: MISS
X-Firefox-Spdy: h2
GET ok14static.oktacdn.com/assets/js/sdk/okta-signin-widget/7.32.0/js/okta-sign-in.min.js
200 OK 1.8 MB URL GET ok14static.oktacdn.com/assets/js/sdk/okta-signin-widget/7.32.0/js/okta-sign-in.min.js
IP
Requested by https://sso.carlyle.com/app/blueoceanbrain/exk7rvrqrdRgz5FBb697/sso/saml?SAMLRequest=hZJfb9owFMXf%2BRSV3xPnD4FgARIt64bEAAHdw14mx7lprTp26uuUdp9%2BwenWdtI6v%2Fn6%2Fo7OOfIUea0atmjdnd7DQwvoBhfdeaqVRuYfZ6S1mhmOEpnmNSBzgh0WX9csCSPWWOOMMIr8hX1McUSwThrdY6vljGw3n9bbz6vNDy6yPB9GEwFVlSVFMRpXeQliEsfDNErzZFSKaJyncY9%2BA4udzox0smTQqyG2sNLouHbdPEqyIBoFSXaMU5akLB1%2B79FlF1Zq7jx%2B51yDjFJEEwpu1bOCUJia8qahhWrBCOC6sFxqCk%2F3Y%2FtoH2y5v%2F2ZXV8Wo8n4zNFz7l5699LKpdSl1Lcfl1H0S8i%2BHI%2B7YLc9HHuRxe%2BSrozGtgZ7APsoBdzs169%2BT6dTGr436H0L%2BpIiMPeOe2uUCyRzLz0935kvys7%2FIzWlb5df8YZtuiir5c4oKZ79%2FHyuja25%2B3fiOIz9RJZB5VdZq7EBISsJJfkjs1DKnK4scAcz4mwL5ILOB72X9%2F91%2Fgs%3D&RelayState=https%3A%2F%2Fwww3.blueoceanbrain.com%2Fsaml%2Flogin
Certificate IssuerDigiCert Inc
Subject*.oktacdn.com
Fingerprint3E:D7:C7:A6:35:70:74:E4:BF:45:2E:A1:D5:A3:25:88:24:76:B3:B5
ValidityMon, 02 Dec 2024 00:00:00 GMT - Fri, 02 Jan 2026 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (40099)
Size 1.8 MB (1822736 bytes)
Hash dee9a8c2677792d4fa5c46c4ed8f5259
bd7ad88d729ce43adcba2b2bc66ab814f319b9f0
c6d159a1298946d5595e61fc521fe12c7c8bc529ec581bf26d59970a1487b50e
GET /assets/js/sdk/okta-signin-widget/7.32.0/js/okta-sign-in.min.js HTTP/1.1
Host: ok14static.oktacdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://sso.carlyle.com/
Origin: https://sso.carlyle.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
date: Wed, 11 Jun 2025 00:28:08 GMT
server: nginx
last-modified: Tue, 10 Jun 2025 23:10:10 GMT
etag: W/"dee9a8c2677792d4fa5c46c4ed8f5259"
x-amz-meta-sha1sum: bd7ad88d729ce43adcba2b2bc66ab814f319b9f0
expires: Thu, 11 Jun 2026 00:28:08 GMT
cache-control: max-age=31536000, public,max-age=31536000,s-maxage=1814400
strict-transport-security: max-age=315360000; includeSubDomains
access-control-allow-origin: *
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 50a19afbefe1a01ca6a87078a2b119c2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P2
x-amz-cf-id: t8abl9ptL45a0ujuHD36cXtYtGx6d-IRIp7MdDe6RR2pQ2Ip1Y-g4w==
age: 1256127
X-Firefox-Spdy: h2
GET login.okta.com/lib/discoveryIframe-0722375bd7a46ac7cf9c.min.js
200 OK 4.8 kB URL GET login.okta.com/lib/discoveryIframe-0722375bd7a46ac7cf9c.min.js
IP
Requested by https://login.okta.com/discovery/iframe.html
Certificate IssuerAmazon
Subjectaccounts.okta.com
Fingerprint15:07:32:90:8F:E6:80:36:96:23:81:78:AE:C4:70:65:92:17:62:A7
ValidityTue, 17 Jun 2025 00:00:00 GMT - Thu, 16 Jul 2026 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (4676)
Hash 9e792a369a0c098197a067c972d3e410
42ff6791b37b9f05a021495336971d704c965ff9
85bb3fbb22f194ed380323307fdac4a74b4f41fe2fa8992765b40728ed75918b
GET /lib/discoveryIframe-0722375bd7a46ac7cf9c.min.js HTTP/1.1
Host: login.okta.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://login.okta.com/discovery/iframe.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Length: 4839
Connection: keep-alive
Last-Modified: Mon, 21 Apr 2025 21:25:48 GMT
Server: AmazonS3
Date: Wed, 25 Jun 2025 05:50:58 GMT
ETag: "9e792a369a0c098197a067c972d3e410"
X-Cache: Hit from cloudfront
Via: 1.1 bac2c08263be93278e77355a3ca67ff6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P2
X-Amz-Cf-Id: kBQttp3p9N-rhzE5JPFATatxcmjl-r1-7GVGSIRKjlfZVVLBnApEeQ==
Age: 27159
Strict-Transport-Security: max-age=31536000; includeSubDomains
OPTIONS 127.0.0.1:65111/probe
0 B IP
Requested by https://sso.carlyle.com/app/blueoceanbrain/exk7rvrqrdRgz5FBb697/sso/saml?SAMLRequest=hZJfb9owFMXf%2BRSV3xPnD4FgARIt64bEAAHdw14mx7lprTp26uuUdp9%2BwenWdtI6v%2Fn6%2Fo7OOfIUea0atmjdnd7DQwvoBhfdeaqVRuYfZ6S1mhmOEpnmNSBzgh0WX9csCSPWWOOMMIr8hX1McUSwThrdY6vljGw3n9bbz6vNDy6yPB9GEwFVlSVFMRpXeQliEsfDNErzZFSKaJyncY9%2BA4udzox0smTQqyG2sNLouHbdPEqyIBoFSXaMU5akLB1%2B79FlF1Zq7jx%2B51yDjFJEEwpu1bOCUJia8qahhWrBCOC6sFxqCk%2F3Y%2FtoH2y5v%2F2ZXV8Wo8n4zNFz7l5699LKpdSl1Lcfl1H0S8i%2BHI%2B7YLc9HHuRxe%2BSrozGtgZ7APsoBdzs169%2BT6dTGr436H0L%2BpIiMPeOe2uUCyRzLz0935kvys7%2FIzWlb5df8YZtuiir5c4oKZ79%2FHyuja25%2B3fiOIz9RJZB5VdZq7EBISsJJfkjs1DKnK4scAcz4mwL5ILOB72X9%2F91%2Fgs%3D&RelayState=https%3A%2F%2Fwww3.blueoceanbrain.com%2Fsaml%2Flogin
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
OPTIONS /probe HTTP/1.1
Host: 127.0.0.1:65111
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: content-type,x-okta-xsrftoken
Origin: https://sso.carlyle.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
GET sso.carlyle.com/app/blueoceanbrain/exk7rvrqrdRgz5FBb697/sso/saml?SAMLRequest=hZJfb9owFMXf%2BRSV3xPnD4FgARIt64bEAAHdw14mx7lprTp26uuUdp9%2BwenWdtI6v%2Fn6%2Fo7OOfIUea0atmjdnd7DQwvoBhfdeaqVRuYfZ6S1mhmOEpnmNSBzgh0WX9csCSPWWOOMMIr8hX1McUSwThrdY6vljGw3n9bbz6vNDy6yPB9GEwFVlSVFMRpXeQliEsfDNErzZFSKaJyncY9%2BA4udzox0smTQqyG2sNLouHbdPEqyIBoFSXaMU5akLB1%2B79FlF1Zq7jx%2B51yDjFJEEwpu1bOCUJia8qahhWrBCOC6sFxqCk%2F3Y%2FtoH2y5v%2F2ZXV8Wo8n4zNFz7l5699LKpdSl1Lcfl1H0S8i%2BHI%2B7YLc9HHuRxe%2BSrozGtgZ7APsoBdzs169%2BT6dTGr436H0L%2BpIiMPeOe2uUCyRzLz0935kvys7%2FIzWlb5df8YZtuiir5c4oKZ79%2FHyuja25%2B3fiOIz9RJZB5VdZq7EBISsJJfkjs1DKnK4scAcz4mwL5ILOB72X9%2F91%2Fgs%3D&RelayState=https%3A%2F%2Fwww3.blueoceanbrain.com%2Fsaml%2Flogin
200 OK 25 kB URL User Request GET sso.carlyle.com/app/blueoceanbrain/exk7rvrqrdRgz5FBb697/sso/saml?SAMLRequest=hZJfb9owFMXf%2BRSV3xPnD4FgARIt64bEAAHdw14mx7lprTp26uuUdp9%2BwenWdtI6v%2Fn6%2Fo7OOfIUea0atmjdnd7DQwvoBhfdeaqVRuYfZ6S1mhmOEpnmNSBzgh0WX9csCSPWWOOMMIr8hX1McUSwThrdY6vljGw3n9bbz6vNDy6yPB9GEwFVlSVFMRpXeQliEsfDNErzZFSKaJyncY9%2BA4udzox0smTQqyG2sNLouHbdPEqyIBoFSXaMU5akLB1%2B79FlF1Zq7jx%2B51yDjFJEEwpu1bOCUJia8qahhWrBCOC6sFxqCk%2F3Y%2FtoH2y5v%2F2ZXV8Wo8n4zNFz7l5699LKpdSl1Lcfl1H0S8i%2BHI%2B7YLc9HHuRxe%2BSrozGtgZ7APsoBdzs169%2BT6dTGr436H0L%2BpIiMPeOe2uUCyRzLz0935kvys7%2FIzWlb5df8YZtuiir5c4oKZ79%2FHyuja25%2B3fiOIz9RJZB5VdZq7EBISsJJfkjs1DKnK4scAcz4mwL5ILOB72X9%2F91%2Fgs%3D&RelayState=https%3A%2F%2Fwww3.blueoceanbrain.com%2Fsaml%2Flogin
IP
Certificate IssuerLet's Encrypt
Subjectsso.carlyle.com
FingerprintD2:2F:06:80:85:41:6B:08:2B:2E:F3:F1:27:B8:05:72:77:E8:DE:32
ValidityMon, 26 May 2025 15:48:07 GMT - Sun, 24 Aug 2025 15:48:06 GMT
File type HTML document, ASCII text, with very long lines (17079)
Hash a72f1ce632d3f565189f33aea583aebc
f445a82700681d834652d80579648e15cace3919
b1e37d154d013ad841eb42df05133e7b0e5485573ae8b4f2a234c8f86f386927
GET /app/blueoceanbrain/exk7rvrqrdRgz5FBb697/sso/saml?SAMLRequest=hZJfb9owFMXf%2BRSV3xPnD4FgARIt64bEAAHdw14mx7lprTp26uuUdp9%2BwenWdtI6v%2Fn6%2Fo7OOfIUea0atmjdnd7DQwvoBhfdeaqVRuYfZ6S1mhmOEpnmNSBzgh0WX9csCSPWWOOMMIr8hX1McUSwThrdY6vljGw3n9bbz6vNDy6yPB9GEwFVlSVFMRpXeQliEsfDNErzZFSKaJyncY9%2BA4udzox0smTQqyG2sNLouHbdPEqyIBoFSXaMU5akLB1%2B79FlF1Zq7jx%2B51yDjFJEEwpu1bOCUJia8qahhWrBCOC6sFxqCk%2F3Y%2FtoH2y5v%2F2ZXV8Wo8n4zNFz7l5699LKpdSl1Lcfl1H0S8i%2BHI%2B7YLc9HHuRxe%2BSrozGtgZ7APsoBdzs169%2BT6dTGr436H0L%2BpIiMPeOe2uUCyRzLz0935kvys7%2FIzWlb5df8YZtuiir5c4oKZ79%2FHyuja25%2B3fiOIz9RJZB5VdZq7EBISsJJfkjs1DKnK4scAcz4mwL5ILOB72X9%2F91%2Fgs%3D&RelayState=https%3A%2F%2Fwww3.blueoceanbrain.com%2Fsaml%2Flogin HTTP/1.1
Host: sso.carlyle.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 25 Jun 2025 13:23:35 GMT
server: nginx
content-type: text/html;charset=utf-8
vary: Accept-Encoding
x-okta-request-id: aFv4V_4lqLV0VzrMNHJm3QANlhw
accept-ch: Sec-CH-UA-Platform-Version
x-xss-protection: 0
p3p: CP="HONK"
content-security-policy: frame-ancestors 'self'
x-rate-limit-limit: 60
x-rate-limit-remaining: 56
x-rate-limit-reset: 1750857844
referrer-policy: strict-origin-when-cross-origin
cache-control: no-cache, no-store
pragma: no-cache
expires: 0
content-security-policy-report-only: default-src 'self' carlyle.okta.com sso.carlyle.com *.oktacdn.com; connect-src 'self' carlyle.okta.com carlyle-admin.okta.com sso.carlyle.com *.oktacdn.com *.mixpanel.com *.mapbox.com carlyle.kerberos.okta.com carlyle.mtls.okta.com *.authenticatorlocalprod.com:8769 http://localhost:8769 http://127.0.0.1:8769 *.authenticatorlocalprod.com:65111 http://localhost:65111 http://127.0.0.1:65111 *.authenticatorlocalprod.com:65121 http://localhost:65121 http://127.0.0.1:65121 *.authenticatorlocalprod.com:65131 http://localhost:65131 http://127.0.0.1:65131 *.authenticatorlocalprod.com:65141 http://localhost:65141 http://127.0.0.1:65141 *.authenticatorlocalprod.com:65151 http://localhost:65151 http://127.0.0.1:65151 https://oinmanager.okta.com data:; script-src 'unsafe-inline' 'unsafe-eval' 'self' 'report-sample' carlyle.okta.com sso.carlyle.com *.oktacdn.com; style-src 'unsafe-inline' 'self' 'report-sample' carlyle.okta.com sso.carlyle.com *.oktacdn.com; frame-src 'self' carlyle.okta.com carlyle-admin.okta.com sso.carlyle.com login.okta.com *.vidyard.com com-okta-authenticator: api-695f43c8.duosecurity.com; img-src 'self' carlyle.okta.com sso.carlyle.com *.oktacdn.com *.tiles.mapbox.com *.mapbox.com *.vidyard.com data: blob:; font-src 'self' carlyle.okta.com sso.carlyle.com data: *.oktacdn.com fonts.gstatic.com; frame-ancestors 'self'
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-ua-compatible: IE=edge
content-language: en
strict-transport-security: max-age=315360000; includeSubDomains
x-robots-tag: noindex,nofollow
content-encoding: gzip
set-cookie: xids="";Version=1;Path=/;Max-Age=0
sid="";Version=1;Path=/;Max-Age=0
autolaunch_triggered=""; Expires=Thu, 01 Jan 1970 00:00:10 GMT; Path=/
activate_ca_modal_triggered=""; Expires=Thu, 01 Jan 1970 00:00:10 GMT; Path=/
JSESSIONID=EB6717B384CE0775FB37B633C88000C7; Path=/; Secure; HttpOnly
t=""; Expires=Thu, 01 Jan 1970 00:00:10 GMT; Path=/
DT=DI1vSfYDOXASten5ccPVYbbrQ;Version=1;Path=/;Max-Age=63072000;Secure;Expires=Fri, 25 Jun 2027 13:23:35 GMT;HttpOnly;SameSite=None
X-Firefox-Spdy: h2
OPTIONS 127.0.0.1:65131/probe
0 B IP
Requested by https://sso.carlyle.com/app/blueoceanbrain/exk7rvrqrdRgz5FBb697/sso/saml?SAMLRequest=hZJfb9owFMXf%2BRSV3xPnD4FgARIt64bEAAHdw14mx7lprTp26uuUdp9%2BwenWdtI6v%2Fn6%2Fo7OOfIUea0atmjdnd7DQwvoBhfdeaqVRuYfZ6S1mhmOEpnmNSBzgh0WX9csCSPWWOOMMIr8hX1McUSwThrdY6vljGw3n9bbz6vNDy6yPB9GEwFVlSVFMRpXeQliEsfDNErzZFSKaJyncY9%2BA4udzox0smTQqyG2sNLouHbdPEqyIBoFSXaMU5akLB1%2B79FlF1Zq7jx%2B51yDjFJEEwpu1bOCUJia8qahhWrBCOC6sFxqCk%2F3Y%2FtoH2y5v%2F2ZXV8Wo8n4zNFz7l5699LKpdSl1Lcfl1H0S8i%2BHI%2B7YLc9HHuRxe%2BSrozGtgZ7APsoBdzs169%2BT6dTGr436H0L%2BpIiMPeOe2uUCyRzLz0935kvys7%2FIzWlb5df8YZtuiir5c4oKZ79%2FHyuja25%2B3fiOIz9RJZB5VdZq7EBISsJJfkjs1DKnK4scAcz4mwL5ILOB72X9%2F91%2Fgs%3D&RelayState=https%3A%2F%2Fwww3.blueoceanbrain.com%2Fsaml%2Flogin
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
OPTIONS /probe HTTP/1.1
Host: 127.0.0.1:65131
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: content-type,x-okta-xsrftoken
Origin: https://sso.carlyle.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
OPTIONS 127.0.0.1:65151/probe
0 B IP
Requested by https://sso.carlyle.com/app/blueoceanbrain/exk7rvrqrdRgz5FBb697/sso/saml?SAMLRequest=hZJfb9owFMXf%2BRSV3xPnD4FgARIt64bEAAHdw14mx7lprTp26uuUdp9%2BwenWdtI6v%2Fn6%2Fo7OOfIUea0atmjdnd7DQwvoBhfdeaqVRuYfZ6S1mhmOEpnmNSBzgh0WX9csCSPWWOOMMIr8hX1McUSwThrdY6vljGw3n9bbz6vNDy6yPB9GEwFVlSVFMRpXeQliEsfDNErzZFSKaJyncY9%2BA4udzox0smTQqyG2sNLouHbdPEqyIBoFSXaMU5akLB1%2B79FlF1Zq7jx%2B51yDjFJEEwpu1bOCUJia8qahhWrBCOC6sFxqCk%2F3Y%2FtoH2y5v%2F2ZXV8Wo8n4zNFz7l5699LKpdSl1Lcfl1H0S8i%2BHI%2B7YLc9HHuRxe%2BSrozGtgZ7APsoBdzs169%2BT6dTGr436H0L%2BpIiMPeOe2uUCyRzLz0935kvys7%2FIzWlb5df8YZtuiir5c4oKZ79%2FHyuja25%2B3fiOIz9RJZB5VdZq7EBISsJJfkjs1DKnK4scAcz4mwL5ILOB72X9%2F91%2Fgs%3D&RelayState=https%3A%2F%2Fwww3.blueoceanbrain.com%2Fsaml%2Flogin
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
OPTIONS /probe HTTP/1.1
Host: 127.0.0.1:65151
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: content-type,x-okta-xsrftoken
Origin: https://sso.carlyle.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
GET ok14static.oktacdn.com/assets/js/sdk/okta-signin-widget/7.32.0/css/okta-sign-in.min.css
200 OK 224 kB URL GET ok14static.oktacdn.com/assets/js/sdk/okta-signin-widget/7.32.0/css/okta-sign-in.min.css
IP
Requested by https://sso.carlyle.com/app/blueoceanbrain/exk7rvrqrdRgz5FBb697/sso/saml?SAMLRequest=hZJfb9owFMXf%2BRSV3xPnD4FgARIt64bEAAHdw14mx7lprTp26uuUdp9%2BwenWdtI6v%2Fn6%2Fo7OOfIUea0atmjdnd7DQwvoBhfdeaqVRuYfZ6S1mhmOEpnmNSBzgh0WX9csCSPWWOOMMIr8hX1McUSwThrdY6vljGw3n9bbz6vNDy6yPB9GEwFVlSVFMRpXeQliEsfDNErzZFSKaJyncY9%2BA4udzox0smTQqyG2sNLouHbdPEqyIBoFSXaMU5akLB1%2B79FlF1Zq7jx%2B51yDjFJEEwpu1bOCUJia8qahhWrBCOC6sFxqCk%2F3Y%2FtoH2y5v%2F2ZXV8Wo8n4zNFz7l5699LKpdSl1Lcfl1H0S8i%2BHI%2B7YLc9HHuRxe%2BSrozGtgZ7APsoBdzs169%2BT6dTGr436H0L%2BpIiMPeOe2uUCyRzLz0935kvys7%2FIzWlb5df8YZtuiir5c4oKZ79%2FHyuja25%2B3fiOIz9RJZB5VdZq7EBISsJJfkjs1DKnK4scAcz4mwL5ILOB72X9%2F91%2Fgs%3D&RelayState=https%3A%2F%2Fwww3.blueoceanbrain.com%2Fsaml%2Flogin
Certificate IssuerDigiCert Inc
Subject*.oktacdn.com
Fingerprint3E:D7:C7:A6:35:70:74:E4:BF:45:2E:A1:D5:A3:25:88:24:76:B3:B5
ValidityMon, 02 Dec 2024 00:00:00 GMT - Fri, 02 Jan 2026 23:59:59 GMT
File type ASCII text, with very long lines (51741)
Size 224 kB (224528 bytes)
Hash 43051e060e9fde59a9ac8f57cf70383b
68b63de52f77516aab8af3cc015e91eb9edd8d1b
b496be920d4fb36f6f6f7a18606a6a93ec25d127f48932b1ef36be37e25e343a
GET /assets/js/sdk/okta-signin-widget/7.32.0/css/okta-sign-in.min.css HTTP/1.1
Host: ok14static.oktacdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://sso.carlyle.com/
Origin: https://sso.carlyle.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css
date: Wed, 11 Jun 2025 00:28:08 GMT
server: nginx
last-modified: Tue, 10 Jun 2025 23:09:19 GMT
etag: W/"43051e060e9fde59a9ac8f57cf70383b"
x-amz-meta-sha1sum: 68b63de52f77516aab8af3cc015e91eb9edd8d1b
expires: Thu, 11 Jun 2026 00:28:08 GMT
cache-control: max-age=31536000, public,max-age=31536000,s-maxage=1814400
strict-transport-security: max-age=315360000; includeSubDomains
access-control-allow-origin: *
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 50a19afbefe1a01ca6a87078a2b119c2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P2
x-amz-cf-id: cLGPXnvA8rqAM_IsTjngrMumGkZhVWLlee8fRnDajLsEqbPJoXYCEg==
age: 1256127
X-Firefox-Spdy: h2
GET ok14static.oktacdn.com/assets/js/mvc/loginpage/initLoginPage.pack.58de3be0c9b511a0fdfd7ea4f69b56fc.js
200 OK 209 kB URL GET ok14static.oktacdn.com/assets/js/mvc/loginpage/initLoginPage.pack.58de3be0c9b511a0fdfd7ea4f69b56fc.js
IP
Requested by https://sso.carlyle.com/app/blueoceanbrain/exk7rvrqrdRgz5FBb697/sso/saml?SAMLRequest=hZJfb9owFMXf%2BRSV3xPnD4FgARIt64bEAAHdw14mx7lprTp26uuUdp9%2BwenWdtI6v%2Fn6%2Fo7OOfIUea0atmjdnd7DQwvoBhfdeaqVRuYfZ6S1mhmOEpnmNSBzgh0WX9csCSPWWOOMMIr8hX1McUSwThrdY6vljGw3n9bbz6vNDy6yPB9GEwFVlSVFMRpXeQliEsfDNErzZFSKaJyncY9%2BA4udzox0smTQqyG2sNLouHbdPEqyIBoFSXaMU5akLB1%2B79FlF1Zq7jx%2B51yDjFJEEwpu1bOCUJia8qahhWrBCOC6sFxqCk%2F3Y%2FtoH2y5v%2F2ZXV8Wo8n4zNFz7l5699LKpdSl1Lcfl1H0S8i%2BHI%2B7YLc9HHuRxe%2BSrozGtgZ7APsoBdzs169%2BT6dTGr436H0L%2BpIiMPeOe2uUCyRzLz0935kvys7%2FIzWlb5df8YZtuiir5c4oKZ79%2FHyuja25%2B3fiOIz9RJZB5VdZq7EBISsJJfkjs1DKnK4scAcz4mwL5ILOB72X9%2F91%2Fgs%3D&RelayState=https%3A%2F%2Fwww3.blueoceanbrain.com%2Fsaml%2Flogin
Certificate IssuerDigiCert Inc
Subject*.oktacdn.com
Fingerprint3E:D7:C7:A6:35:70:74:E4:BF:45:2E:A1:D5:A3:25:88:24:76:B3:B5
ValidityMon, 02 Dec 2024 00:00:00 GMT - Fri, 02 Jan 2026 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (65460)
Size 209 kB (209381 bytes)
Hash 58de3be0c9b511a0fdfd7ea4f69b56fc
91eca02abf11239ec4af7a30b1da6e2610f1b9a6
6a6c595fcf3a6c74bf3509f160ba34b78a8a3eb92ecaf290412c46679576d3ed
GET /assets/js/mvc/loginpage/initLoginPage.pack.58de3be0c9b511a0fdfd7ea4f69b56fc.js HTTP/1.1
Host: ok14static.oktacdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://sso.carlyle.com/
Origin: https://sso.carlyle.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
server: nginx
last-modified: Thu, 09 Nov 2023 01:10:29 GMT
x-amz-meta-sha1sum: 91eca02abf11239ec4af7a30b1da6e2610f1b9a6
strict-transport-security: max-age=315360000; includeSubDomains
access-control-allow-origin: *
content-encoding: gzip
date: Thu, 12 Jun 2025 05:20:49 GMT
expires: Fri, 12 Jun 2026 05:18:26 GMT
cache-control: max-age=31536000, public,max-age=31536000,s-maxage=1814400
etag: W/"58de3be0c9b511a0fdfd7ea4f69b56fc"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 50a19afbefe1a01ca6a87078a2b119c2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P2
x-amz-cf-id: TBA5rgYfJG6jwsdQr8z5GWXa6lnFT9J3RDxQRY0LMb9IFfRhUXGt4Q==
age: 1152310
X-Firefox-Spdy: h2
POST sso.carlyle.com/idp/idx/introspect
200 OK 32 kB URL POST sso.carlyle.com/idp/idx/introspect
IP
Requested by https://sso.carlyle.com/app/blueoceanbrain/exk7rvrqrdRgz5FBb697/sso/saml?SAMLRequest=hZJfb9owFMXf%2BRSV3xPnD4FgARIt64bEAAHdw14mx7lprTp26uuUdp9%2BwenWdtI6v%2Fn6%2Fo7OOfIUea0atmjdnd7DQwvoBhfdeaqVRuYfZ6S1mhmOEpnmNSBzgh0WX9csCSPWWOOMMIr8hX1McUSwThrdY6vljGw3n9bbz6vNDy6yPB9GEwFVlSVFMRpXeQliEsfDNErzZFSKaJyncY9%2BA4udzox0smTQqyG2sNLouHbdPEqyIBoFSXaMU5akLB1%2B79FlF1Zq7jx%2B51yDjFJEEwpu1bOCUJia8qahhWrBCOC6sFxqCk%2F3Y%2FtoH2y5v%2F2ZXV8Wo8n4zNFz7l5699LKpdSl1Lcfl1H0S8i%2BHI%2B7YLc9HHuRxe%2BSrozGtgZ7APsoBdzs169%2BT6dTGr436H0L%2BpIiMPeOe2uUCyRzLz0935kvys7%2FIzWlb5df8YZtuiir5c4oKZ79%2FHyuja25%2B3fiOIz9RJZB5VdZq7EBISsJJfkjs1DKnK4scAcz4mwL5ILOB72X9%2F91%2Fgs%3D&RelayState=https%3A%2F%2Fwww3.blueoceanbrain.com%2Fsaml%2Flogin
Certificate IssuerLet's Encrypt
Subjectsso.carlyle.com
FingerprintD2:2F:06:80:85:41:6B:08:2B:2E:F3:F1:27:B8:05:72:77:E8:DE:32
ValidityMon, 26 May 2025 15:48:07 GMT - Sun, 24 Aug 2025 15:48:06 GMT
Hash 1f6e9e72348059b24d19529f8d43d317
00b1e7b182fd499012ce1d9123e35ac539cf66ac
e1f972e30703ba543cdd650d74383202499915319b71c9137cdd6556a3e74cfd
POST /idp/idx/introspect HTTP/1.1
Host: sso.carlyle.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/ion+json; okta-version=1.0.0
Accept-Language: en
Accept-Encoding: gzip, deflate, br
Referer: https://sso.carlyle.com/app/blueoceanbrain/exk7rvrqrdRgz5FBb697/sso/saml?SAMLRequest=hZJfb9owFMXf%2BRSV3xPnD4FgARIt64bEAAHdw14mx7lprTp26uuUdp9%2BwenWdtI6v%2Fn6%2Fo7OOfIUea0atmjdnd7DQwvoBhfdeaqVRuYfZ6S1mhmOEpnmNSBzgh0WX9csCSPWWOOMMIr8hX1McUSwThrdY6vljGw3n9bbz6vNDy6yPB9GEwFVlSVFMRpXeQliEsfDNErzZFSKaJyncY9%2BA4udzox0smTQqyG2sNLouHbdPEqyIBoFSXaMU5akLB1%2B79FlF1Zq7jx%2B51yDjFJEEwpu1bOCUJia8qahhWrBCOC6sFxqCk%2F3Y%2FtoH2y5v%2F2ZXV8Wo8n4zNFz7l5699LKpdSl1Lcfl1H0S8i%2BHI%2B7YLc9HHuRxe%2BSrozGtgZ7APsoBdzs169%2BT6dTGr436H0L%2BpIiMPeOe2uUCyRzLz0935kvys7%2FIzWlb5df8YZtuiir5c4oKZ79%2FHyuja25%2B3fiOIz9RJZB5VdZq7EBISsJJfkjs1DKnK4scAcz4mwL5ILOB72X9%2F91%2Fgs%3D&RelayState=https%3A%2F%2Fwww3.blueoceanbrain.com%2Fsaml%2Flogin
Content-Type: application/ion+json; okta-version=1.0.0
X-Okta-User-Agent-Extended: okta-auth-js/7.11.0 okta-signin-widget-7.32.0
Content-Length: 6853
Origin: https://sso.carlyle.com
DNT: 1
Connection: keep-alive
Cookie: JSESSIONID=73AF13A47E8ECCF38F01081EE7026877; DT=DI1vSfYDOXASten5ccPVYbbrQ
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 25 Jun 2025 13:23:37 GMT
server: nginx
content-type: application/ion+json;okta-version=1.0.0
x-okta-request-id: aFv4Wf4lqLV0VzrMNHJm_AANljI
accept-ch: Sec-CH-UA-Platform-Version
x-xss-protection: 0
p3p: CP="HONK"
content-security-policy: default-src 'self' carlyle.okta.com sso.carlyle.com *.oktacdn.com; connect-src 'self' carlyle.okta.com carlyle-admin.okta.com sso.carlyle.com *.oktacdn.com *.mixpanel.com *.mapbox.com carlyle.kerberos.okta.com carlyle.mtls.okta.com *.authenticatorlocalprod.com:8769 http://localhost:8769 http://127.0.0.1:8769 *.authenticatorlocalprod.com:65111 http://localhost:65111 http://127.0.0.1:65111 *.authenticatorlocalprod.com:65121 http://localhost:65121 http://127.0.0.1:65121 *.authenticatorlocalprod.com:65131 http://localhost:65131 http://127.0.0.1:65131 *.authenticatorlocalprod.com:65141 http://localhost:65141 http://127.0.0.1:65141 *.authenticatorlocalprod.com:65151 http://localhost:65151 http://127.0.0.1:65151 https://oinmanager.okta.com data:; script-src 'unsafe-inline' 'unsafe-eval' 'self' 'report-sample' carlyle.okta.com sso.carlyle.com *.oktacdn.com; style-src 'unsafe-inline' 'self' 'report-sample' carlyle.okta.com sso.carlyle.com *.oktacdn.com; frame-src 'self' carlyle.okta.com carlyle-admin.okta.com sso.carlyle.com login.okta.com *.vidyard.com com-okta-authenticator: api-695f43c8.duosecurity.com; img-src 'self' carlyle.okta.com sso.carlyle.com *.oktacdn.com *.tiles.mapbox.com *.mapbox.com *.vidyard.com data: blob:; font-src 'self' carlyle.okta.com sso.carlyle.com data: *.oktacdn.com fonts.gstatic.com; frame-ancestors 'self'
x-rate-limit-limit: 2000
x-rate-limit-remaining: 1974
x-rate-limit-reset: 1750857825
access-control-allow-origin: https://sso.carlyle.com
access-control-allow-credentials: true
vary: Origin
cache-control: no-cache, no-store
pragma: no-cache
expires: 0
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=315360000; includeSubDomains
x-robots-tag: noindex,nofollow
set-cookie: sid="";Version=1;Path=/;Max-Age=0
xids="";Version=1;Path=/;Max-Age=0
autolaunch_triggered=""; Expires=Thu, 01 Jan 1970 00:00:10 GMT; Path=/
activate_ca_modal_triggered=""; Expires=Thu, 01 Jan 1970 00:00:10 GMT; Path=/
JSESSIONID=96EB9B7F9A11856B3415B331B9F68086; Path=/; Secure; HttpOnly
X-Firefox-Spdy: h2
GET ok14static.oktacdn.com/assets/loginpage/font/assets/Inter-Regular.c8ba52b05a9ef10f4758.woff2
200 OK 99 kB URL GET ok14static.oktacdn.com/assets/loginpage/font/assets/Inter-Regular.c8ba52b05a9ef10f4758.woff2
IP
Requested by https://sso.carlyle.com/app/blueoceanbrain/exk7rvrqrdRgz5FBb697/sso/saml?SAMLRequest=hZJfb9owFMXf%2BRSV3xPnD4FgARIt64bEAAHdw14mx7lprTp26uuUdp9%2BwenWdtI6v%2Fn6%2Fo7OOfIUea0atmjdnd7DQwvoBhfdeaqVRuYfZ6S1mhmOEpnmNSBzgh0WX9csCSPWWOOMMIr8hX1McUSwThrdY6vljGw3n9bbz6vNDy6yPB9GEwFVlSVFMRpXeQliEsfDNErzZFSKaJyncY9%2BA4udzox0smTQqyG2sNLouHbdPEqyIBoFSXaMU5akLB1%2B79FlF1Zq7jx%2B51yDjFJEEwpu1bOCUJia8qahhWrBCOC6sFxqCk%2F3Y%2FtoH2y5v%2F2ZXV8Wo8n4zNFz7l5699LKpdSl1Lcfl1H0S8i%2BHI%2B7YLc9HHuRxe%2BSrozGtgZ7APsoBdzs169%2BT6dTGr436H0L%2BpIiMPeOe2uUCyRzLz0935kvys7%2FIzWlb5df8YZtuiir5c4oKZ79%2FHyuja25%2B3fiOIz9RJZB5VdZq7EBISsJJfkjs1DKnK4scAcz4mwL5ILOB72X9%2F91%2Fgs%3D&RelayState=https%3A%2F%2Fwww3.blueoceanbrain.com%2Fsaml%2Flogin
Certificate IssuerDigiCert Inc
Subject*.oktacdn.com
Fingerprint3E:D7:C7:A6:35:70:74:E4:BF:45:2E:A1:D5:A3:25:88:24:76:B3:B5
ValidityMon, 02 Dec 2024 00:00:00 GMT - Fri, 02 Jan 2026 23:59:59 GMT
File type Web Open Font Format (Version 2), TrueType, length 98868, version 1.0
Hash dc131113894217b5031000575d9de002
f96348260751ea78b1d23e9557db297290bdaf28
d612f1212b452af07f1a5defb2b672e76a91f7139e7499fa48bb9b2b985c22d6
GET /assets/loginpage/font/assets/Inter-Regular.c8ba52b05a9ef10f4758.woff2 HTTP/1.1
Host: ok14static.oktacdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://sso.carlyle.com
DNT: 1
Connection: keep-alive
Referer: https://ok14static.oktacdn.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/font-woff2
content-length: 98868
date: Mon, 09 Jun 2025 06:38:38 GMT
server: nginx
last-modified: Thu, 09 Nov 2023 01:14:14 GMT
etag: "dc131113894217b5031000575d9de002"
x-amz-meta-sha1sum: f96348260751ea78b1d23e9557db297290bdaf28
expires: Tue, 09 Jun 2026 06:38:38 GMT
cache-control: max-age=31536000, public,max-age=31536000,s-maxage=1814400
strict-transport-security: max-age=315360000; includeSubDomains
access-control-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 50a19afbefe1a01ca6a87078a2b119c2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P2
x-amz-cf-id: EWczzjfIJqYxpHYZjy1arsmaAGj1mO9KNPd81ECY8l17dgiCNfmCyQ==
age: 1406699
X-Firefox-Spdy: h2
GET ok14static.oktacdn.com/assets/js/sdk/okta-signin-widget/7.32.0/img/icons/mfa/oktaVerify_70x70.png
200 OK 2.4 kB URL GET ok14static.oktacdn.com/assets/js/sdk/okta-signin-widget/7.32.0/img/icons/mfa/oktaVerify_70x70.png
IP
Requested by https://sso.carlyle.com/app/blueoceanbrain/exk7rvrqrdRgz5FBb697/sso/saml?SAMLRequest=hZJfb9owFMXf%2BRSV3xPnD4FgARIt64bEAAHdw14mx7lprTp26uuUdp9%2BwenWdtI6v%2Fn6%2Fo7OOfIUea0atmjdnd7DQwvoBhfdeaqVRuYfZ6S1mhmOEpnmNSBzgh0WX9csCSPWWOOMMIr8hX1McUSwThrdY6vljGw3n9bbz6vNDy6yPB9GEwFVlSVFMRpXeQliEsfDNErzZFSKaJyncY9%2BA4udzox0smTQqyG2sNLouHbdPEqyIBoFSXaMU5akLB1%2B79FlF1Zq7jx%2B51yDjFJEEwpu1bOCUJia8qahhWrBCOC6sFxqCk%2F3Y%2FtoH2y5v%2F2ZXV8Wo8n4zNFz7l5699LKpdSl1Lcfl1H0S8i%2BHI%2B7YLc9HHuRxe%2BSrozGtgZ7APsoBdzs169%2BT6dTGr436H0L%2BpIiMPeOe2uUCyRzLz0935kvys7%2FIzWlb5df8YZtuiir5c4oKZ79%2FHyuja25%2B3fiOIz9RJZB5VdZq7EBISsJJfkjs1DKnK4scAcz4mwL5ILOB72X9%2F91%2Fgs%3D&RelayState=https%3A%2F%2Fwww3.blueoceanbrain.com%2Fsaml%2Flogin
Certificate IssuerDigiCert Inc
Subject*.oktacdn.com
Fingerprint3E:D7:C7:A6:35:70:74:E4:BF:45:2E:A1:D5:A3:25:88:24:76:B3:B5
ValidityMon, 02 Dec 2024 00:00:00 GMT - Fri, 02 Jan 2026 23:59:59 GMT
File type PNG image data, 140 x 140, 8-bit/color RGBA, non-interlaced
Hash 8146a7091eda20534f86ceadfb34a1fa
c429e1305e5dff0f7cb60b5e9dc3420a58b5e9b0
d434b33b7d0382d89cd488dd964f27e395eb03cf34b51d822d45912d96e75c64
GET /assets/js/sdk/okta-signin-widget/7.32.0/img/icons/mfa/oktaVerify_70x70.png HTTP/1.1
Host: ok14static.oktacdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ok14static.oktacdn.com/assets/js/sdk/okta-signin-widget/7.32.0/css/okta-sign-in.min.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/png
content-length: 2411
date: Wed, 11 Jun 2025 00:32:09 GMT
server: nginx
last-modified: Tue, 10 Jun 2025 23:10:05 GMT
etag: "8146a7091eda20534f86ceadfb34a1fa"
x-amz-meta-sha1sum: c429e1305e5dff0f7cb60b5e9dc3420a58b5e9b0
expires: Thu, 11 Jun 2026 00:32:09 GMT
cache-control: max-age=31536000, public,max-age=31536000,s-maxage=1814400
strict-transport-security: max-age=315360000; includeSubDomains
access-control-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 50a19afbefe1a01ca6a87078a2b119c2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P2
x-amz-cf-id: eFfjkIertbGmWXgR-_nTcZ_dtW725Whil2X08HGQE9EUBB7tPOSJ5A==
age: 1255888
X-Firefox-Spdy: h2
OPTIONS 127.0.0.1:65141/probe
0 B IP
Requested by https://sso.carlyle.com/app/blueoceanbrain/exk7rvrqrdRgz5FBb697/sso/saml?SAMLRequest=hZJfb9owFMXf%2BRSV3xPnD4FgARIt64bEAAHdw14mx7lprTp26uuUdp9%2BwenWdtI6v%2Fn6%2Fo7OOfIUea0atmjdnd7DQwvoBhfdeaqVRuYfZ6S1mhmOEpnmNSBzgh0WX9csCSPWWOOMMIr8hX1McUSwThrdY6vljGw3n9bbz6vNDy6yPB9GEwFVlSVFMRpXeQliEsfDNErzZFSKaJyncY9%2BA4udzox0smTQqyG2sNLouHbdPEqyIBoFSXaMU5akLB1%2B79FlF1Zq7jx%2B51yDjFJEEwpu1bOCUJia8qahhWrBCOC6sFxqCk%2F3Y%2FtoH2y5v%2F2ZXV8Wo8n4zNFz7l5699LKpdSl1Lcfl1H0S8i%2BHI%2B7YLc9HHuRxe%2BSrozGtgZ7APsoBdzs169%2BT6dTGr436H0L%2BpIiMPeOe2uUCyRzLz0935kvys7%2FIzWlb5df8YZtuiir5c4oKZ79%2FHyuja25%2B3fiOIz9RJZB5VdZq7EBISsJJfkjs1DKnK4scAcz4mwL5ILOB72X9%2F91%2Fgs%3D&RelayState=https%3A%2F%2Fwww3.blueoceanbrain.com%2Fsaml%2Flogin
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
OPTIONS /probe HTTP/1.1
Host: 127.0.0.1:65141
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: content-type,x-okta-xsrftoken
Origin: https://sso.carlyle.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
GET ok14static.oktacdn.com/fs/bco/1/fs07is8m7clhUhn5s697
200 OK 35 kB URL GET ok14static.oktacdn.com/fs/bco/1/fs07is8m7clhUhn5s697
IP
Requested by https://sso.carlyle.com/app/blueoceanbrain/exk7rvrqrdRgz5FBb697/sso/saml?SAMLRequest=hZJfb9owFMXf%2BRSV3xPnD4FgARIt64bEAAHdw14mx7lprTp26uuUdp9%2BwenWdtI6v%2Fn6%2Fo7OOfIUea0atmjdnd7DQwvoBhfdeaqVRuYfZ6S1mhmOEpnmNSBzgh0WX9csCSPWWOOMMIr8hX1McUSwThrdY6vljGw3n9bbz6vNDy6yPB9GEwFVlSVFMRpXeQliEsfDNErzZFSKaJyncY9%2BA4udzox0smTQqyG2sNLouHbdPEqyIBoFSXaMU5akLB1%2B79FlF1Zq7jx%2B51yDjFJEEwpu1bOCUJia8qahhWrBCOC6sFxqCk%2F3Y%2FtoH2y5v%2F2ZXV8Wo8n4zNFz7l5699LKpdSl1Lcfl1H0S8i%2BHI%2B7YLc9HHuRxe%2BSrozGtgZ7APsoBdzs169%2BT6dTGr436H0L%2BpIiMPeOe2uUCyRzLz0935kvys7%2FIzWlb5df8YZtuiir5c4oKZ79%2FHyuja25%2B3fiOIz9RJZB5VdZq7EBISsJJfkjs1DKnK4scAcz4mwL5ILOB72X9%2F91%2Fgs%3D&RelayState=https%3A%2F%2Fwww3.blueoceanbrain.com%2Fsaml%2Flogin
Certificate IssuerDigiCert Inc
Subject*.oktacdn.com
Fingerprint3E:D7:C7:A6:35:70:74:E4:BF:45:2E:A1:D5:A3:25:88:24:76:B3:B5
ValidityMon, 02 Dec 2024 00:00:00 GMT - Fri, 02 Jan 2026 23:59:59 GMT
File type PNG image data, 420 x 108, 8-bit/color RGBA, non-interlaced
Hash f595b01ed1b1e6edffbcd9fce7220323
4a52e6139b3bea6f4b47c40125e63724bd6107be
767073513c2864cd3e57316cca291507f04282ae7aa3a330a14840b41c4f6f15
GET /fs/bco/1/fs07is8m7clhUhn5s697 HTTP/1.1
Host: ok14static.oktacdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://sso.carlyle.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/png
content-length: 35348
date: Mon, 23 Jun 2025 22:16:59 GMT
server: nginx
last-modified: Thu, 14 Sep 2023 15:47:38 GMT
etag: "f595b01ed1b1e6edffbcd9fce7220323"
expires: Tue, 23 Jun 2026 22:16:59 GMT
cache-control: max-age=31536000, public,max-age=31536000,s-maxage=1814400
strict-transport-security: max-age=315360000; includeSubDomains
access-control-allow-origin: *
content-security-policy: default-src 'none'; img-src 'self'; require-trusted-types-for 'script'; report-uri https://oktacsp.report-uri.com/r/t/csp/enforce
x-content-type-options: nosniff
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 50a19afbefe1a01ca6a87078a2b119c2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P2
x-amz-cf-id: IUBNZ1DU1xO2J25JRRVUoht3kJHiY5qx3X3e1y6Qh-mjDsfhNxAGgQ==
age: 140797
X-Firefox-Spdy: h2
POST sso.carlyle.com/idp/idx/authenticators/poll/cancel
200 OK 12 kB URL POST sso.carlyle.com/idp/idx/authenticators/poll/cancel
IP
Requested by https://sso.carlyle.com/app/blueoceanbrain/exk7rvrqrdRgz5FBb697/sso/saml?SAMLRequest=hZJfb9owFMXf%2BRSV3xPnD4FgARIt64bEAAHdw14mx7lprTp26uuUdp9%2BwenWdtI6v%2Fn6%2Fo7OOfIUea0atmjdnd7DQwvoBhfdeaqVRuYfZ6S1mhmOEpnmNSBzgh0WX9csCSPWWOOMMIr8hX1McUSwThrdY6vljGw3n9bbz6vNDy6yPB9GEwFVlSVFMRpXeQliEsfDNErzZFSKaJyncY9%2BA4udzox0smTQqyG2sNLouHbdPEqyIBoFSXaMU5akLB1%2B79FlF1Zq7jx%2B51yDjFJEEwpu1bOCUJia8qahhWrBCOC6sFxqCk%2F3Y%2FtoH2y5v%2F2ZXV8Wo8n4zNFz7l5699LKpdSl1Lcfl1H0S8i%2BHI%2B7YLc9HHuRxe%2BSrozGtgZ7APsoBdzs169%2BT6dTGr436H0L%2BpIiMPeOe2uUCyRzLz0935kvys7%2FIzWlb5df8YZtuiir5c4oKZ79%2FHyuja25%2B3fiOIz9RJZB5VdZq7EBISsJJfkjs1DKnK4scAcz4mwL5ILOB72X9%2F91%2Fgs%3D&RelayState=https%3A%2F%2Fwww3.blueoceanbrain.com%2Fsaml%2Flogin
Certificate IssuerLet's Encrypt
Subjectsso.carlyle.com
FingerprintD2:2F:06:80:85:41:6B:08:2B:2E:F3:F1:27:B8:05:72:77:E8:DE:32
ValidityMon, 26 May 2025 15:48:07 GMT - Sun, 24 Aug 2025 15:48:06 GMT
Hash c07a61f3c1cd768de70f5da53c082d4b
05cf20a77e6ab2f83053133e4ca0ddc3c284d76a
82767e9b9a8d6b7eb869386ccde90abe5585fcff446e73834aacc501cbba258b
POST /idp/idx/authenticators/poll/cancel HTTP/1.1
Host: sso.carlyle.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/json; okta-version=1.0.0
Accept-Language: en
Accept-Encoding: gzip, deflate, br
Referer: https://sso.carlyle.com/app/blueoceanbrain/exk7rvrqrdRgz5FBb697/sso/saml?SAMLRequest=hZJfb9owFMXf%2BRSV3xPnD4FgARIt64bEAAHdw14mx7lprTp26uuUdp9%2BwenWdtI6v%2Fn6%2Fo7OOfIUea0atmjdnd7DQwvoBhfdeaqVRuYfZ6S1mhmOEpnmNSBzgh0WX9csCSPWWOOMMIr8hX1McUSwThrdY6vljGw3n9bbz6vNDy6yPB9GEwFVlSVFMRpXeQliEsfDNErzZFSKaJyncY9%2BA4udzox0smTQqyG2sNLouHbdPEqyIBoFSXaMU5akLB1%2B79FlF1Zq7jx%2B51yDjFJEEwpu1bOCUJia8qahhWrBCOC6sFxqCk%2F3Y%2FtoH2y5v%2F2ZXV8Wo8n4zNFz7l5699LKpdSl1Lcfl1H0S8i%2BHI%2B7YLc9HHuRxe%2BSrozGtgZ7APsoBdzs169%2BT6dTGr436H0L%2BpIiMPeOe2uUCyRzLz0935kvys7%2FIzWlb5df8YZtuiir5c4oKZ79%2FHyuja25%2B3fiOIz9RJZB5VdZq7EBISsJJfkjs1DKnK4scAcz4mwL5ILOB72X9%2F91%2Fgs%3D&RelayState=https%3A%2F%2Fwww3.blueoceanbrain.com%2Fsaml%2Flogin
Content-Type: application/json
X-Okta-User-Agent-Extended: okta-auth-js/7.11.0 okta-signin-widget-7.32.0
Content-Length: 6910
Origin: https://sso.carlyle.com
DNT: 1
Connection: keep-alive
Cookie: JSESSIONID=96EB9B7F9A11856B3415B331B9F68086; DT=DI1vSfYDOXASten5ccPVYbbrQ
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 25 Jun 2025 13:23:37 GMT
server: nginx
content-type: application/json;okta-version=1.0.0
x-okta-request-id: aFv4Wf4lqLV0VzrMNHJnCAANlhM
accept-ch: Sec-CH-UA-Platform-Version
x-xss-protection: 0
p3p: CP="HONK"
content-security-policy: default-src 'self' carlyle.okta.com sso.carlyle.com *.oktacdn.com; connect-src 'self' carlyle.okta.com carlyle-admin.okta.com sso.carlyle.com *.oktacdn.com *.mixpanel.com *.mapbox.com carlyle.kerberos.okta.com carlyle.mtls.okta.com *.authenticatorlocalprod.com:8769 http://localhost:8769 http://127.0.0.1:8769 *.authenticatorlocalprod.com:65111 http://localhost:65111 http://127.0.0.1:65111 *.authenticatorlocalprod.com:65121 http://localhost:65121 http://127.0.0.1:65121 *.authenticatorlocalprod.com:65131 http://localhost:65131 http://127.0.0.1:65131 *.authenticatorlocalprod.com:65141 http://localhost:65141 http://127.0.0.1:65141 *.authenticatorlocalprod.com:65151 http://localhost:65151 http://127.0.0.1:65151 https://oinmanager.okta.com data:; script-src 'unsafe-inline' 'unsafe-eval' 'self' 'report-sample' carlyle.okta.com sso.carlyle.com *.oktacdn.com; style-src 'unsafe-inline' 'self' 'report-sample' carlyle.okta.com sso.carlyle.com *.oktacdn.com; frame-src 'self' carlyle.okta.com carlyle-admin.okta.com sso.carlyle.com login.okta.com *.vidyard.com com-okta-authenticator: api-695f43c8.duosecurity.com; img-src 'self' carlyle.okta.com sso.carlyle.com *.oktacdn.com *.tiles.mapbox.com *.mapbox.com *.vidyard.com data: blob:; font-src 'self' carlyle.okta.com sso.carlyle.com data: *.oktacdn.com fonts.gstatic.com; frame-ancestors 'self'
x-rate-limit-limit: 1000
x-rate-limit-remaining: 985
x-rate-limit-reset: 1750857831
access-control-allow-origin: https://sso.carlyle.com
access-control-allow-credentials: true
access-control-allow-headers: Content-Type
vary: Origin
cache-control: no-cache, no-store
pragma: no-cache
expires: 0
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=315360000; includeSubDomains
x-robots-tag: noindex,nofollow
set-cookie: sid="";Version=1;Path=/;Max-Age=0
xids="";Version=1;Path=/;Max-Age=0
autolaunch_triggered=""; Expires=Thu, 01 Jan 1970 00:00:10 GMT; Path=/
activate_ca_modal_triggered=""; Expires=Thu, 01 Jan 1970 00:00:10 GMT; Path=/
JSESSIONID=402D339031BDF4DA408EF1E1B0C86F35; Path=/; Secure; HttpOnly
X-Firefox-Spdy: h2
GET www3.blueoceanbrain.com/g/carlyle-okta/aca92c0a/site/login?np=%2Fg%2Fcarlyle-okta%2Faca92c0a%2Fliving-library%2F39e56c00ac1e00ba49d0ac2fed629967%2Ffd07b969ac1e00ba0601bab3b67de0af
302 Found 25 kB URL User Request GET www3.blueoceanbrain.com/g/carlyle-okta/aca92c0a/site/login?np=%2Fg%2Fcarlyle-okta%2Faca92c0a%2Fliving-library%2F39e56c00ac1e00ba49d0ac2fed629967%2Ffd07b969ac1e00ba0601bab3b67de0af
IP
Certificate IssuerAmazon
Subject*.blueoceanbrain.com
Fingerprint00:16:C6:49:B4:4F:E8:B3:E2:4B:17:B6:7F:59:16:8B:67:98:AF:CA
ValidityThu, 06 Mar 2025 00:00:00 GMT - Sat, 04 Apr 2026 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /g/carlyle-okta/aca92c0a/site/login?np=%2Fg%2Fcarlyle-okta%2Faca92c0a%2Fliving-library%2F39e56c00ac1e00ba49d0ac2fed629967%2Ffd07b969ac1e00ba0601bab3b67de0af HTTP/1.1
Host: www3.blueoceanbrain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: SESSIONID=q0cdm7ijnt7glgqaui1j72pufg; bob-guest-lang=9ca21166fe9b9a730f633248f372c7d67aa3698774091f58ce2d87b62ec2e3fda%3A2%3A%7Bi%3A0%3Bs%3A14%3A%22bob-guest-lang%22%3Bi%3A1%3Bs%3A24%3A%22nrXW7Hc5H%2FxF0L8K8TC%2BVA%3D%3D%22%3B%7D
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Wed, 25 Jun 2025 13:23:34 GMT
content-type: text/html; charset=UTF-8
location: https://www3.blueoceanbrain.com/g/carlyle-okta/aca92c0a/saml/login?np=%2Fg%2Fcarlyle-okta%2Faca92c0a%2Fliving-library%2F39e56c00ac1e00ba49d0ac2fed629967%2Ffd07b969ac1e00ba0601bab3b67de0af
server: nginx/1.25.5
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
x-frame-options: SAMEORIGIN
set-cookie: bob-guest-lang=9ca21166fe9b9a730f633248f372c7d67aa3698774091f58ce2d87b62ec2e3fda%3A2%3A%7Bi%3A0%3Bs%3A14%3A%22bob-guest-lang%22%3Bi%3A1%3Bs%3A24%3A%22nrXW7Hc5H%2FxF0L8K8TC%2BVA%3D%3D%22%3B%7D; expires=Thu, 25 Jun 2026 13:23:34 GMT; Max-Age=31536000; path=/; secure; HttpOnly; SameSite=None
ca=c1a4b104f5471cf90a89ebc32e9a57e650d6fbb56aa8a62b25baa69b2fb7a6d4a%3A2%3A%7Bi%3A0%3Bs%3A2%3A%22ca%22%3Bi%3A1%3Bs%3A32%3A%223d753b648a584afa5c073ef6b11693ea%22%3B%7D; path=/; secure; HttpOnly; SameSite=None
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
content-security-policy: default-src * 'unsafe-eval' 'unsafe-inline'; img-src * data:; font-src * data:;
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
permissions-policy: accelerometer=(),autoplay=(),camera=(),display-capture=(),document-domain=(),encrypted-media=(self),fullscreen=(self "https://www.youtube.com" "https://player.vimeo.com" "https://embed.ted.com"),geolocation=(),gyroscope=(),magnetometer=(),microphone=(),midi=(),payment=(),picture-in-picture=(),publickey-credentials-get=(),screen-wake-lock=(),sync-xhr=(self),usb=(),web-share=(),xr-spatial-tracking=()
x-cache: MISS
X-Firefox-Spdy: h2
GET login.okta.com/discovery/iframe.html
200 OK 451 B URL GET login.okta.com/discovery/iframe.html
IP
Requested by https://sso.carlyle.com/app/blueoceanbrain/exk7rvrqrdRgz5FBb697/sso/saml?SAMLRequest=hZJfb9owFMXf%2BRSV3xPnD4FgARIt64bEAAHdw14mx7lprTp26uuUdp9%2BwenWdtI6v%2Fn6%2Fo7OOfIUea0atmjdnd7DQwvoBhfdeaqVRuYfZ6S1mhmOEpnmNSBzgh0WX9csCSPWWOOMMIr8hX1McUSwThrdY6vljGw3n9bbz6vNDy6yPB9GEwFVlSVFMRpXeQliEsfDNErzZFSKaJyncY9%2BA4udzox0smTQqyG2sNLouHbdPEqyIBoFSXaMU5akLB1%2B79FlF1Zq7jx%2B51yDjFJEEwpu1bOCUJia8qahhWrBCOC6sFxqCk%2F3Y%2FtoH2y5v%2F2ZXV8Wo8n4zNFz7l5699LKpdSl1Lcfl1H0S8i%2BHI%2B7YLc9HHuRxe%2BSrozGtgZ7APsoBdzs169%2BT6dTGr436H0L%2BpIiMPeOe2uUCyRzLz0935kvys7%2FIzWlb5df8YZtuiir5c4oKZ79%2FHyuja25%2B3fiOIz9RJZB5VdZq7EBISsJJfkjs1DKnK4scAcz4mwL5ILOB72X9%2F91%2Fgs%3D&RelayState=https%3A%2F%2Fwww3.blueoceanbrain.com%2Fsaml%2Flogin
Certificate IssuerAmazon
Subjectaccounts.okta.com
Fingerprint15:07:32:90:8F:E6:80:36:96:23:81:78:AE:C4:70:65:92:17:62:A7
ValidityTue, 17 Jun 2025 00:00:00 GMT - Thu, 16 Jul 2026 23:59:59 GMT
File type HTML document, ASCII text, with very long lines (451), with no line terminators
Hash f27d968039067aa40bec4a4bced981b6
081298703e75c56af38276d680a01b3cf3b5b6e2
349d1426735d9203d547b601ee16fde8fce260fea4f096f5ccd44387c5fa3b45
GET /discovery/iframe.html HTTP/1.1
Host: login.okta.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://sso.carlyle.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 451
Connection: keep-alive
Last-Modified: Mon, 21 Apr 2025 21:25:47 GMT
Server: AmazonS3
Date: Wed, 25 Jun 2025 01:12:05 GMT
ETag: "f27d968039067aa40bec4a4bced981b6"
X-Cache: Hit from cloudfront
Via: 1.1 bac2c08263be93278e77355a3ca67ff6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P2
X-Amz-Cf-Id: Tdsb5yI8qqWUHa1rXWV6kqMLYIZR8uR7dLuTBB0v3ERX_ahvoAoLGA==
Age: 43893
Strict-Transport-Security: max-age=31536000; includeSubDomains
OPTIONS 127.0.0.1:65121/probe
0 B IP
Requested by https://sso.carlyle.com/app/blueoceanbrain/exk7rvrqrdRgz5FBb697/sso/saml?SAMLRequest=hZJfb9owFMXf%2BRSV3xPnD4FgARIt64bEAAHdw14mx7lprTp26uuUdp9%2BwenWdtI6v%2Fn6%2Fo7OOfIUea0atmjdnd7DQwvoBhfdeaqVRuYfZ6S1mhmOEpnmNSBzgh0WX9csCSPWWOOMMIr8hX1McUSwThrdY6vljGw3n9bbz6vNDy6yPB9GEwFVlSVFMRpXeQliEsfDNErzZFSKaJyncY9%2BA4udzox0smTQqyG2sNLouHbdPEqyIBoFSXaMU5akLB1%2B79FlF1Zq7jx%2B51yDjFJEEwpu1bOCUJia8qahhWrBCOC6sFxqCk%2F3Y%2FtoH2y5v%2F2ZXV8Wo8n4zNFz7l5699LKpdSl1Lcfl1H0S8i%2BHI%2B7YLc9HHuRxe%2BSrozGtgZ7APsoBdzs169%2BT6dTGr436H0L%2BpIiMPeOe2uUCyRzLz0935kvys7%2FIzWlb5df8YZtuiir5c4oKZ79%2FHyuja25%2B3fiOIz9RJZB5VdZq7EBISsJJfkjs1DKnK4scAcz4mwL5ILOB72X9%2F91%2Fgs%3D&RelayState=https%3A%2F%2Fwww3.blueoceanbrain.com%2Fsaml%2Flogin
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
OPTIONS /probe HTTP/1.1
Host: 127.0.0.1:65121
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: content-type,x-okta-xsrftoken
Origin: https://sso.carlyle.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
GET ok14static.oktacdn.com/assets/js/sdk/okta-signin-widget/7.32.0/img/icons/login/default_logo.png
200 OK 342 B URL GET ok14static.oktacdn.com/assets/js/sdk/okta-signin-widget/7.32.0/img/icons/login/default_logo.png
IP
Requested by https://sso.carlyle.com/app/blueoceanbrain/exk7rvrqrdRgz5FBb697/sso/saml?SAMLRequest=hZJfb9owFMXf%2BRSV3xPnD4FgARIt64bEAAHdw14mx7lprTp26uuUdp9%2BwenWdtI6v%2Fn6%2Fo7OOfIUea0atmjdnd7DQwvoBhfdeaqVRuYfZ6S1mhmOEpnmNSBzgh0WX9csCSPWWOOMMIr8hX1McUSwThrdY6vljGw3n9bbz6vNDy6yPB9GEwFVlSVFMRpXeQliEsfDNErzZFSKaJyncY9%2BA4udzox0smTQqyG2sNLouHbdPEqyIBoFSXaMU5akLB1%2B79FlF1Zq7jx%2B51yDjFJEEwpu1bOCUJia8qahhWrBCOC6sFxqCk%2F3Y%2FtoH2y5v%2F2ZXV8Wo8n4zNFz7l5699LKpdSl1Lcfl1H0S8i%2BHI%2B7YLc9HHuRxe%2BSrozGtgZ7APsoBdzs169%2BT6dTGr436H0L%2BpIiMPeOe2uUCyRzLz0935kvys7%2FIzWlb5df8YZtuiir5c4oKZ79%2FHyuja25%2B3fiOIz9RJZB5VdZq7EBISsJJfkjs1DKnK4scAcz4mwL5ILOB72X9%2F91%2Fgs%3D&RelayState=https%3A%2F%2Fwww3.blueoceanbrain.com%2Fsaml%2Flogin
Certificate IssuerDigiCert Inc
Subject*.oktacdn.com
Fingerprint3E:D7:C7:A6:35:70:74:E4:BF:45:2E:A1:D5:A3:25:88:24:76:B3:B5
ValidityMon, 02 Dec 2024 00:00:00 GMT - Fri, 02 Jan 2026 23:59:59 GMT
File type PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Hash bb90d64a28a3b80f03d419e8fff374bb
49f77410c8435892c50fe72060af3d6eb488e129
dd2eae4d92f3e6a8ad2ef61c80f6318166b0a45f81a501fb1e7d7a637413e7a7
GET /assets/js/sdk/okta-signin-widget/7.32.0/img/icons/login/default_logo.png HTTP/1.1
Host: ok14static.oktacdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ok14static.oktacdn.com/assets/js/sdk/okta-signin-widget/7.32.0/css/okta-sign-in.min.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/png
content-length: 342
date: Wed, 11 Jun 2025 01:09:42 GMT
server: nginx
last-modified: Tue, 10 Jun 2025 23:10:02 GMT
etag: "bb90d64a28a3b80f03d419e8fff374bb"
x-amz-meta-sha1sum: 49f77410c8435892c50fe72060af3d6eb488e129
expires: Thu, 11 Jun 2026 01:09:42 GMT
cache-control: max-age=31536000, public,max-age=31536000,s-maxage=1814400
strict-transport-security: max-age=315360000; includeSubDomains
access-control-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 50a19afbefe1a01ca6a87078a2b119c2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P2
x-amz-cf-id: 2q3XNXxkMlc5IloxPie__V2J9bUjfAqC50cqyGyIT2BKgnaNk6eADg==
age: 1253635
X-Firefox-Spdy: h2
GET www3.blueoceanbrain.com/g/carlyle-okta/aca92c0a/living-library/39e56c00ac1e00ba49d0ac2fed629967/fd07b969ac1e00ba0601bab3b67de0af
302 Found 25 kB URL User Request GET www3.blueoceanbrain.com/g/carlyle-okta/aca92c0a/living-library/39e56c00ac1e00ba49d0ac2fed629967/fd07b969ac1e00ba0601bab3b67de0af
IP
Certificate IssuerAmazon
Subject*.blueoceanbrain.com
Fingerprint00:16:C6:49:B4:4F:E8:B3:E2:4B:17:B6:7F:59:16:8B:67:98:AF:CA
ValidityThu, 06 Mar 2025 00:00:00 GMT - Sat, 04 Apr 2026 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /g/carlyle-okta/aca92c0a/living-library/39e56c00ac1e00ba49d0ac2fed629967/fd07b969ac1e00ba0601bab3b67de0af HTTP/1.1
Host: www3.blueoceanbrain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Wed, 25 Jun 2025 13:23:34 GMT
content-type: text/html; charset=UTF-8
location: https://www3.blueoceanbrain.com/g/carlyle-okta/aca92c0a/site/login?np=%2Fg%2Fcarlyle-okta%2Faca92c0a%2Fliving-library%2F39e56c00ac1e00ba49d0ac2fed629967%2Ffd07b969ac1e00ba0601bab3b67de0af
server: nginx/1.25.5
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
set-cookie: SESSIONID=q0cdm7ijnt7glgqaui1j72pufg; path=/; domain=.blueoceanbrain.com; secure; HttpOnly; SameSite=none
bob-guest-lang=9ca21166fe9b9a730f633248f372c7d67aa3698774091f58ce2d87b62ec2e3fda%3A2%3A%7Bi%3A0%3Bs%3A14%3A%22bob-guest-lang%22%3Bi%3A1%3Bs%3A24%3A%22nrXW7Hc5H%2FxF0L8K8TC%2BVA%3D%3D%22%3B%7D; expires=Thu, 25 Jun 2026 13:23:34 GMT; Max-Age=31536000; path=/; secure; HttpOnly; SameSite=None
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-origin: *
content-security-policy: default-src * 'unsafe-eval' 'unsafe-inline'; img-src * data:; font-src * data:;
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
permissions-policy: accelerometer=(),autoplay=(),camera=(),display-capture=(),document-domain=(),encrypted-media=(self),fullscreen=(self "https://www.youtube.com" "https://player.vimeo.com" "https://embed.ted.com"),geolocation=(),gyroscope=(),magnetometer=(),microphone=(),midi=(),payment=(),picture-in-picture=(),publickey-credentials-get=(),screen-wake-lock=(),sync-xhr=(self),usb=(),web-share=(),xr-spatial-tracking=()
x-cache: MISS
X-Firefox-Spdy: h2
OPTIONS 127.0.0.1:8769/probe
0 B IP
Requested by https://sso.carlyle.com/app/blueoceanbrain/exk7rvrqrdRgz5FBb697/sso/saml?SAMLRequest=hZJfb9owFMXf%2BRSV3xPnD4FgARIt64bEAAHdw14mx7lprTp26uuUdp9%2BwenWdtI6v%2Fn6%2Fo7OOfIUea0atmjdnd7DQwvoBhfdeaqVRuYfZ6S1mhmOEpnmNSBzgh0WX9csCSPWWOOMMIr8hX1McUSwThrdY6vljGw3n9bbz6vNDy6yPB9GEwFVlSVFMRpXeQliEsfDNErzZFSKaJyncY9%2BA4udzox0smTQqyG2sNLouHbdPEqyIBoFSXaMU5akLB1%2B79FlF1Zq7jx%2B51yDjFJEEwpu1bOCUJia8qahhWrBCOC6sFxqCk%2F3Y%2FtoH2y5v%2F2ZXV8Wo8n4zNFz7l5699LKpdSl1Lcfl1H0S8i%2BHI%2B7YLc9HHuRxe%2BSrozGtgZ7APsoBdzs169%2BT6dTGr436H0L%2BpIiMPeOe2uUCyRzLz0935kvys7%2FIzWlb5df8YZtuiir5c4oKZ79%2FHyuja25%2B3fiOIz9RJZB5VdZq7EBISsJJfkjs1DKnK4scAcz4mwL5ILOB72X9%2F91%2Fgs%3D&RelayState=https%3A%2F%2Fwww3.blueoceanbrain.com%2Fsaml%2Flogin
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
OPTIONS /probe HTTP/1.1
Host: 127.0.0.1:8769
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: content-type,x-okta-xsrftoken
Origin: https://sso.carlyle.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
GET ok14static.oktacdn.com/assets/js/sdk/okta-signin-widget/7.32.0/img/ui/indicators/loader@1x.gif
200 OK 10 kB URL GET ok14static.oktacdn.com/assets/js/sdk/okta-signin-widget/7.32.0/img/ui/indicators/loader@1x.gif
IP
Requested by https://sso.carlyle.com/app/blueoceanbrain/exk7rvrqrdRgz5FBb697/sso/saml?SAMLRequest=hZJfb9owFMXf%2BRSV3xPnD4FgARIt64bEAAHdw14mx7lprTp26uuUdp9%2BwenWdtI6v%2Fn6%2Fo7OOfIUea0atmjdnd7DQwvoBhfdeaqVRuYfZ6S1mhmOEpnmNSBzgh0WX9csCSPWWOOMMIr8hX1McUSwThrdY6vljGw3n9bbz6vNDy6yPB9GEwFVlSVFMRpXeQliEsfDNErzZFSKaJyncY9%2BA4udzox0smTQqyG2sNLouHbdPEqyIBoFSXaMU5akLB1%2B79FlF1Zq7jx%2B51yDjFJEEwpu1bOCUJia8qahhWrBCOC6sFxqCk%2F3Y%2FtoH2y5v%2F2ZXV8Wo8n4zNFz7l5699LKpdSl1Lcfl1H0S8i%2BHI%2B7YLc9HHuRxe%2BSrozGtgZ7APsoBdzs169%2BT6dTGr436H0L%2BpIiMPeOe2uUCyRzLz0935kvys7%2FIzWlb5df8YZtuiir5c4oKZ79%2FHyuja25%2B3fiOIz9RJZB5VdZq7EBISsJJfkjs1DKnK4scAcz4mwL5ILOB72X9%2F91%2Fgs%3D&RelayState=https%3A%2F%2Fwww3.blueoceanbrain.com%2Fsaml%2Flogin
Certificate IssuerDigiCert Inc
Subject*.oktacdn.com
Fingerprint3E:D7:C7:A6:35:70:74:E4:BF:45:2E:A1:D5:A3:25:88:24:76:B3:B5
ValidityMon, 02 Dec 2024 00:00:00 GMT - Fri, 02 Jan 2026 23:59:59 GMT
File type GIF image data, version 89a, 38 x 38
Hash da5afed58d4a7ab9e44a16ee5387707b
ce2bac88d718f974add007d55ef0e9314d0f4b61
2d0840961e9d93f813811d90c3ed7537149172e1bb0fa92762ab0e0a72af054f
GET /assets/js/sdk/okta-signin-widget/7.32.0/img/ui/indicators/loader@1x.gif HTTP/1.1
Host: ok14static.oktacdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ok14static.oktacdn.com/assets/js/sdk/okta-signin-widget/7.32.0/css/okta-sign-in.min.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/gif
content-length: 10274
date: Wed, 11 Jun 2025 00:30:14 GMT
server: nginx
last-modified: Tue, 10 Jun 2025 23:10:08 GMT
etag: "da5afed58d4a7ab9e44a16ee5387707b"
x-amz-meta-sha1sum: ce2bac88d718f974add007d55ef0e9314d0f4b61
expires: Thu, 11 Jun 2026 00:30:14 GMT
cache-control: max-age=31536000, public,max-age=31536000,s-maxage=1814400
strict-transport-security: max-age=315360000; includeSubDomains
access-control-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 50a19afbefe1a01ca6a87078a2b119c2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P2
x-amz-cf-id: mD9V-dYVQrbFjMR_7JxfSFaKD0XQu-N6fSeAuRfUYn119mb77tuiug==
age: 1256003
X-Firefox-Spdy: h2
GET ok14static.oktacdn.com/assets/loginpage/font/assets/Inter-SemiBold.b5f0f109bc88052d4000.woff2
200 OK 106 kB URL GET ok14static.oktacdn.com/assets/loginpage/font/assets/Inter-SemiBold.b5f0f109bc88052d4000.woff2
IP
Requested by https://sso.carlyle.com/app/blueoceanbrain/exk7rvrqrdRgz5FBb697/sso/saml?SAMLRequest=hZJfb9owFMXf%2BRSV3xPnD4FgARIt64bEAAHdw14mx7lprTp26uuUdp9%2BwenWdtI6v%2Fn6%2Fo7OOfIUea0atmjdnd7DQwvoBhfdeaqVRuYfZ6S1mhmOEpnmNSBzgh0WX9csCSPWWOOMMIr8hX1McUSwThrdY6vljGw3n9bbz6vNDy6yPB9GEwFVlSVFMRpXeQliEsfDNErzZFSKaJyncY9%2BA4udzox0smTQqyG2sNLouHbdPEqyIBoFSXaMU5akLB1%2B79FlF1Zq7jx%2B51yDjFJEEwpu1bOCUJia8qahhWrBCOC6sFxqCk%2F3Y%2FtoH2y5v%2F2ZXV8Wo8n4zNFz7l5699LKpdSl1Lcfl1H0S8i%2BHI%2B7YLc9HHuRxe%2BSrozGtgZ7APsoBdzs169%2BT6dTGr436H0L%2BpIiMPeOe2uUCyRzLz0935kvys7%2FIzWlb5df8YZtuiir5c4oKZ79%2FHyuja25%2B3fiOIz9RJZB5VdZq7EBISsJJfkjs1DKnK4scAcz4mwL5ILOB72X9%2F91%2Fgs%3D&RelayState=https%3A%2F%2Fwww3.blueoceanbrain.com%2Fsaml%2Flogin
Certificate IssuerDigiCert Inc
Subject*.oktacdn.com
Fingerprint3E:D7:C7:A6:35:70:74:E4:BF:45:2E:A1:D5:A3:25:88:24:76:B3:B5
ValidityMon, 02 Dec 2024 00:00:00 GMT - Fri, 02 Jan 2026 23:59:59 GMT
File type Web Open Font Format (Version 2), TrueType, length 105804, version 1.0
Size 106 kB (105804 bytes)
Hash 007ad31a53f4ab3f58ee74f2308482ce
dfa9f8f3d79bf8a0001fe72eeadad0490cba59cc
152261291c938aa5aad6a56d52b47ffcb893d1c0387e76d7f270a7382ff786d5
GET /assets/loginpage/font/assets/Inter-SemiBold.b5f0f109bc88052d4000.woff2 HTTP/1.1
Host: ok14static.oktacdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://sso.carlyle.com
DNT: 1
Connection: keep-alive
Referer: https://ok14static.oktacdn.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/font-woff2
content-length: 105804
date: Tue, 10 Jun 2025 05:59:41 GMT
server: nginx
last-modified: Thu, 09 Nov 2023 01:13:25 GMT
etag: "007ad31a53f4ab3f58ee74f2308482ce"
x-amz-meta-sha1sum: dfa9f8f3d79bf8a0001fe72eeadad0490cba59cc
expires: Wed, 10 Jun 2026 05:59:41 GMT
cache-control: max-age=31536000, public,max-age=31536000,s-maxage=1814400
strict-transport-security: max-age=315360000; includeSubDomains
access-control-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 50a19afbefe1a01ca6a87078a2b119c2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P2
x-amz-cf-id: 9UA-gtZJF21zIcXha-sybSozSZJgTYhsH4APmxCYPm7saBDYVvNURQ==
age: 1322636
X-Firefox-Spdy: h2
GET ok14static.oktacdn.com/assets/loginpage/css/custom-signin.a91af2abfd04662e499bd3e151150dbf.css
200 OK 6.0 kB URL GET ok14static.oktacdn.com/assets/loginpage/css/custom-signin.a91af2abfd04662e499bd3e151150dbf.css
IP
Requested by https://sso.carlyle.com/app/blueoceanbrain/exk7rvrqrdRgz5FBb697/sso/saml?SAMLRequest=hZJfb9owFMXf%2BRSV3xPnD4FgARIt64bEAAHdw14mx7lprTp26uuUdp9%2BwenWdtI6v%2Fn6%2Fo7OOfIUea0atmjdnd7DQwvoBhfdeaqVRuYfZ6S1mhmOEpnmNSBzgh0WX9csCSPWWOOMMIr8hX1McUSwThrdY6vljGw3n9bbz6vNDy6yPB9GEwFVlSVFMRpXeQliEsfDNErzZFSKaJyncY9%2BA4udzox0smTQqyG2sNLouHbdPEqyIBoFSXaMU5akLB1%2B79FlF1Zq7jx%2B51yDjFJEEwpu1bOCUJia8qahhWrBCOC6sFxqCk%2F3Y%2FtoH2y5v%2F2ZXV8Wo8n4zNFz7l5699LKpdSl1Lcfl1H0S8i%2BHI%2B7YLc9HHuRxe%2BSrozGtgZ7APsoBdzs169%2BT6dTGr436H0L%2BpIiMPeOe2uUCyRzLz0935kvys7%2FIzWlb5df8YZtuiir5c4oKZ79%2FHyuja25%2B3fiOIz9RJZB5VdZq7EBISsJJfkjs1DKnK4scAcz4mwL5ILOB72X9%2F91%2Fgs%3D&RelayState=https%3A%2F%2Fwww3.blueoceanbrain.com%2Fsaml%2Flogin
Certificate IssuerDigiCert Inc
Subject*.oktacdn.com
Fingerprint3E:D7:C7:A6:35:70:74:E4:BF:45:2E:A1:D5:A3:25:88:24:76:B3:B5
ValidityMon, 02 Dec 2024 00:00:00 GMT - Fri, 02 Jan 2026 23:59:59 GMT
File type ASCII text, with very long lines (5994)
Hash a91af2abfd04662e499bd3e151150dbf
411f2a1669354e6e50ec0fe8def6481fd6ca8daf
a1566688dd7e6e7cdce8dd2634ac42a7d939f0f9ee471a8d79b9a9e7f956e4d0
GET /assets/loginpage/css/custom-signin.a91af2abfd04662e499bd3e151150dbf.css HTTP/1.1
Host: ok14static.oktacdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://sso.carlyle.com/
Origin: https://sso.carlyle.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css
date: Fri, 06 Jun 2025 22:16:57 GMT
server: nginx
last-modified: Tue, 06 Aug 2024 23:36:25 GMT
etag: W/"a91af2abfd04662e499bd3e151150dbf"
x-amz-meta-sha1sum: 411f2a1669354e6e50ec0fe8def6481fd6ca8daf
expires: Sat, 06 Jun 2026 22:16:57 GMT
cache-control: max-age=31536000, public,max-age=31536000,s-maxage=1814400
strict-transport-security: max-age=315360000; includeSubDomains
access-control-allow-origin: *
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 50a19afbefe1a01ca6a87078a2b119c2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P2
x-amz-cf-id: WSKDhi9N2nkL7iwY7k4FXnIvokEINuxnDeRFMv8V2sCTPff_6v8ZzQ==
age: 1609599
X-Firefox-Spdy: h2
GET sso.carlyle.com/api/internal/brand/theme/style-sheet?touch-point=SIGN_IN_PAGE&v=765671722058fd11e8ea8c165b080c6257cc23c918701bf3033c3d701f70c60326b01225651f3cef23b4628adc844146
200 OK 556 B URL GET sso.carlyle.com/api/internal/brand/theme/style-sheet?touch-point=SIGN_IN_PAGE&v=765671722058fd11e8ea8c165b080c6257cc23c918701bf3033c3d701f70c60326b01225651f3cef23b4628adc844146
IP
Requested by https://sso.carlyle.com/app/blueoceanbrain/exk7rvrqrdRgz5FBb697/sso/saml?SAMLRequest=hZJfb9owFMXf%2BRSV3xPnD4FgARIt64bEAAHdw14mx7lprTp26uuUdp9%2BwenWdtI6v%2Fn6%2Fo7OOfIUea0atmjdnd7DQwvoBhfdeaqVRuYfZ6S1mhmOEpnmNSBzgh0WX9csCSPWWOOMMIr8hX1McUSwThrdY6vljGw3n9bbz6vNDy6yPB9GEwFVlSVFMRpXeQliEsfDNErzZFSKaJyncY9%2BA4udzox0smTQqyG2sNLouHbdPEqyIBoFSXaMU5akLB1%2B79FlF1Zq7jx%2B51yDjFJEEwpu1bOCUJia8qahhWrBCOC6sFxqCk%2F3Y%2FtoH2y5v%2F2ZXV8Wo8n4zNFz7l5699LKpdSl1Lcfl1H0S8i%2BHI%2B7YLc9HHuRxe%2BSrozGtgZ7APsoBdzs169%2BT6dTGr436H0L%2BpIiMPeOe2uUCyRzLz0935kvys7%2FIzWlb5df8YZtuiir5c4oKZ79%2FHyuja25%2B3fiOIz9RJZB5VdZq7EBISsJJfkjs1DKnK4scAcz4mwL5ILOB72X9%2F91%2Fgs%3D&RelayState=https%3A%2F%2Fwww3.blueoceanbrain.com%2Fsaml%2Flogin
Certificate IssuerLet's Encrypt
Subjectsso.carlyle.com
FingerprintD2:2F:06:80:85:41:6B:08:2B:2E:F3:F1:27:B8:05:72:77:E8:DE:32
ValidityMon, 26 May 2025 15:48:07 GMT - Sun, 24 Aug 2025 15:48:06 GMT
Hash 0baf3b13c6e21a40c8b6786a847bb42f
b3e9f00f896361d1f0fc705306b619100505e169
0dfd30f321e5709ea29732bc2d487f60076821fcd6022efaac5a59bfb97c1892
GET /api/internal/brand/theme/style-sheet?touch-point=SIGN_IN_PAGE&v=765671722058fd11e8ea8c165b080c6257cc23c918701bf3033c3d701f70c60326b01225651f3cef23b4628adc844146 HTTP/1.1
Host: sso.carlyle.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://sso.carlyle.com/app/blueoceanbrain/exk7rvrqrdRgz5FBb697/sso/saml?SAMLRequest=hZJfb9owFMXf%2BRSV3xPnD4FgARIt64bEAAHdw14mx7lprTp26uuUdp9%2BwenWdtI6v%2Fn6%2Fo7OOfIUea0atmjdnd7DQwvoBhfdeaqVRuYfZ6S1mhmOEpnmNSBzgh0WX9csCSPWWOOMMIr8hX1McUSwThrdY6vljGw3n9bbz6vNDy6yPB9GEwFVlSVFMRpXeQliEsfDNErzZFSKaJyncY9%2BA4udzox0smTQqyG2sNLouHbdPEqyIBoFSXaMU5akLB1%2B79FlF1Zq7jx%2B51yDjFJEEwpu1bOCUJia8qahhWrBCOC6sFxqCk%2F3Y%2FtoH2y5v%2F2ZXV8Wo8n4zNFz7l5699LKpdSl1Lcfl1H0S8i%2BHI%2B7YLc9HHuRxe%2BSrozGtgZ7APsoBdzs169%2BT6dTGr436H0L%2BpIiMPeOe2uUCyRzLz0935kvys7%2FIzWlb5df8YZtuiir5c4oKZ79%2FHyuja25%2B3fiOIz9RJZB5VdZq7EBISsJJfkjs1DKnK4scAcz4mwL5ILOB72X9%2F91%2Fgs%3D&RelayState=https%3A%2F%2Fwww3.blueoceanbrain.com%2Fsaml%2Flogin
DNT: 1
Connection: keep-alive
Cookie: JSESSIONID=EB6717B384CE0775FB37B633C88000C7; DT=DI1vSfYDOXASten5ccPVYbbrQ
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 25 Jun 2025 13:23:36 GMT
server: nginx
content-type: text/css
vary: Accept-Encoding
x-okta-request-id: aFv4WP4lqLV0VzrMNHJm7QANlhw
accept-ch: Sec-CH-UA-Platform-Version
x-xss-protection: 0
p3p: CP="HONK"
content-security-policy: default-src 'self' carlyle.okta.com sso.carlyle.com *.oktacdn.com; connect-src 'self' carlyle.okta.com carlyle-admin.okta.com sso.carlyle.com *.oktacdn.com *.mixpanel.com *.mapbox.com carlyle.kerberos.okta.com carlyle.mtls.okta.com *.authenticatorlocalprod.com:8769 http://localhost:8769 http://127.0.0.1:8769 *.authenticatorlocalprod.com:65111 http://localhost:65111 http://127.0.0.1:65111 *.authenticatorlocalprod.com:65121 http://localhost:65121 http://127.0.0.1:65121 *.authenticatorlocalprod.com:65131 http://localhost:65131 http://127.0.0.1:65131 *.authenticatorlocalprod.com:65141 http://localhost:65141 http://127.0.0.1:65141 *.authenticatorlocalprod.com:65151 http://localhost:65151 http://127.0.0.1:65151 https://oinmanager.okta.com data:; script-src 'unsafe-inline' 'unsafe-eval' 'self' 'report-sample' carlyle.okta.com sso.carlyle.com *.oktacdn.com; style-src 'unsafe-inline' 'self' 'report-sample' carlyle.okta.com sso.carlyle.com *.oktacdn.com; frame-src 'self' carlyle.okta.com carlyle-admin.okta.com sso.carlyle.com login.okta.com *.vidyard.com com-okta-authenticator: api-695f43c8.duosecurity.com; img-src 'self' carlyle.okta.com sso.carlyle.com *.oktacdn.com *.tiles.mapbox.com *.mapbox.com *.vidyard.com data: blob:; font-src 'self' carlyle.okta.com sso.carlyle.com data: *.oktacdn.com fonts.gstatic.com; frame-ancestors 'self'
x-rate-limit-limit: 2400
x-rate-limit-remaining: 2387
x-rate-limit-reset: 1750857816
referrer-policy: strict-origin-when-cross-origin
cache-control: max-age=31536000, must-revalidate
expires: Thu, 25 Jun 2026 13:23:36 GMT
x-content-type-options: nosniff
strict-transport-security: max-age=315360000; includeSubDomains
content-encoding: gzip
set-cookie: sid="";Version=1;Path=/;Max-Age=0
xids="";Version=1;Path=/;Max-Age=0
autolaunch_triggered=""; Expires=Thu, 01 Jan 1970 00:00:10 GMT; Path=/
activate_ca_modal_triggered=""; Expires=Thu, 01 Jan 1970 00:00:10 GMT; Path=/
JSESSIONID=73AF13A47E8ECCF38F01081EE7026877; Path=/; Secure; HttpOnly
X-Firefox-Spdy: h2
GET sso.carlyle.com/favicon.ico
200 OK 5.4 kB URL GET sso.carlyle.com/favicon.ico
IP
Requested by https://sso.carlyle.com/app/blueoceanbrain/exk7rvrqrdRgz5FBb697/sso/saml?SAMLRequest=hZJfb9owFMXf%2BRSV3xPnD4FgARIt64bEAAHdw14mx7lprTp26uuUdp9%2BwenWdtI6v%2Fn6%2Fo7OOfIUea0atmjdnd7DQwvoBhfdeaqVRuYfZ6S1mhmOEpnmNSBzgh0WX9csCSPWWOOMMIr8hX1McUSwThrdY6vljGw3n9bbz6vNDy6yPB9GEwFVlSVFMRpXeQliEsfDNErzZFSKaJyncY9%2BA4udzox0smTQqyG2sNLouHbdPEqyIBoFSXaMU5akLB1%2B79FlF1Zq7jx%2B51yDjFJEEwpu1bOCUJia8qahhWrBCOC6sFxqCk%2F3Y%2FtoH2y5v%2F2ZXV8Wo8n4zNFz7l5699LKpdSl1Lcfl1H0S8i%2BHI%2B7YLc9HHuRxe%2BSrozGtgZ7APsoBdzs169%2BT6dTGr436H0L%2BpIiMPeOe2uUCyRzLz0935kvys7%2FIzWlb5df8YZtuiir5c4oKZ79%2FHyuja25%2B3fiOIz9RJZB5VdZq7EBISsJJfkjs1DKnK4scAcz4mwL5ILOB72X9%2F91%2Fgs%3D&RelayState=https%3A%2F%2Fwww3.blueoceanbrain.com%2Fsaml%2Flogin
Certificate IssuerLet's Encrypt
Subjectsso.carlyle.com
FingerprintD2:2F:06:80:85:41:6B:08:2B:2E:F3:F1:27:B8:05:72:77:E8:DE:32
ValidityMon, 26 May 2025 15:48:07 GMT - Sun, 24 Aug 2025 15:48:06 GMT
File type MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Hash 449c9dd651db589388b721eb2496f5b0
64f3b213a89a00f7b0940271576ecc72280236f7
f9e86fb363a05f75ab3b525439d46bf4911d4cd4ae94c656c0198206374002aa
GET /favicon.ico HTTP/1.1
Host: sso.carlyle.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://sso.carlyle.com/app/blueoceanbrain/exk7rvrqrdRgz5FBb697/sso/saml?SAMLRequest=hZJfb9owFMXf%2BRSV3xPnD4FgARIt64bEAAHdw14mx7lprTp26uuUdp9%2BwenWdtI6v%2Fn6%2Fo7OOfIUea0atmjdnd7DQwvoBhfdeaqVRuYfZ6S1mhmOEpnmNSBzgh0WX9csCSPWWOOMMIr8hX1McUSwThrdY6vljGw3n9bbz6vNDy6yPB9GEwFVlSVFMRpXeQliEsfDNErzZFSKaJyncY9%2BA4udzox0smTQqyG2sNLouHbdPEqyIBoFSXaMU5akLB1%2B79FlF1Zq7jx%2B51yDjFJEEwpu1bOCUJia8qahhWrBCOC6sFxqCk%2F3Y%2FtoH2y5v%2F2ZXV8Wo8n4zNFz7l5699LKpdSl1Lcfl1H0S8i%2BHI%2B7YLc9HHuRxe%2BSrozGtgZ7APsoBdzs169%2BT6dTGr436H0L%2BpIiMPeOe2uUCyRzLz0935kvys7%2FIzWlb5df8YZtuiir5c4oKZ79%2FHyuja25%2B3fiOIz9RJZB5VdZq7EBISsJJfkjs1DKnK4scAcz4mwL5ILOB72X9%2F91%2Fgs%3D&RelayState=https%3A%2F%2Fwww3.blueoceanbrain.com%2Fsaml%2Flogin
DNT: 1
Connection: keep-alive
Cookie: JSESSIONID=73AF13A47E8ECCF38F01081EE7026877; DT=DI1vSfYDOXASten5ccPVYbbrQ
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 25 Jun 2025 13:23:37 GMT
server: nginx
content-type: image/x-icon
content-length: 5430
accept-ranges: bytes
etag: W/"5430-1750443214000"
last-modified: Fri, 20 Jun 2025 18:13:34 GMT
x-content-type-options: nosniff
strict-transport-security: max-age=315360000; includeSubDomains
x-robots-tag: noindex,nofollow
X-Firefox-Spdy: h2
GET ok14static.oktacdn.com/assets/js/sdk/okta-signin-widget/7.32.0/img/ui/forms/checkbox-sign-in-widget.png
200 OK 3.1 kB URL GET ok14static.oktacdn.com/assets/js/sdk/okta-signin-widget/7.32.0/img/ui/forms/checkbox-sign-in-widget.png
IP
Requested by https://sso.carlyle.com/app/blueoceanbrain/exk7rvrqrdRgz5FBb697/sso/saml?SAMLRequest=hZJfb9owFMXf%2BRSV3xPnD4FgARIt64bEAAHdw14mx7lprTp26uuUdp9%2BwenWdtI6v%2Fn6%2Fo7OOfIUea0atmjdnd7DQwvoBhfdeaqVRuYfZ6S1mhmOEpnmNSBzgh0WX9csCSPWWOOMMIr8hX1McUSwThrdY6vljGw3n9bbz6vNDy6yPB9GEwFVlSVFMRpXeQliEsfDNErzZFSKaJyncY9%2BA4udzox0smTQqyG2sNLouHbdPEqyIBoFSXaMU5akLB1%2B79FlF1Zq7jx%2B51yDjFJEEwpu1bOCUJia8qahhWrBCOC6sFxqCk%2F3Y%2FtoH2y5v%2F2ZXV8Wo8n4zNFz7l5699LKpdSl1Lcfl1H0S8i%2BHI%2B7YLc9HHuRxe%2BSrozGtgZ7APsoBdzs169%2BT6dTGr436H0L%2BpIiMPeOe2uUCyRzLz0935kvys7%2FIzWlb5df8YZtuiir5c4oKZ79%2FHyuja25%2B3fiOIz9RJZB5VdZq7EBISsJJfkjs1DKnK4scAcz4mwL5ILOB72X9%2F91%2Fgs%3D&RelayState=https%3A%2F%2Fwww3.blueoceanbrain.com%2Fsaml%2Flogin
Certificate IssuerDigiCert Inc
Subject*.oktacdn.com
Fingerprint3E:D7:C7:A6:35:70:74:E4:BF:45:2E:A1:D5:A3:25:88:24:76:B3:B5
ValidityMon, 02 Dec 2024 00:00:00 GMT - Fri, 02 Jan 2026 23:59:59 GMT
File type PNG image data, 50 x 1155, 8-bit/color RGBA, non-interlaced
Hash 7846b2f8c6d0a7ca69fdd3d3c294e92d
e0bb021ffdf93c68fef44de2a3b08f378b6fb50a
40810b0318131f9ba52c83a17e633a0ac476ade66ea8a914d6c4980571397665
GET /assets/js/sdk/okta-signin-widget/7.32.0/img/ui/forms/checkbox-sign-in-widget.png HTTP/1.1
Host: ok14static.oktacdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ok14static.oktacdn.com/assets/js/sdk/okta-signin-widget/7.32.0/css/okta-sign-in.min.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/png
content-length: 3141
date: Wed, 11 Jun 2025 00:28:11 GMT
server: nginx
last-modified: Tue, 10 Jun 2025 23:10:08 GMT
etag: "7846b2f8c6d0a7ca69fdd3d3c294e92d"
x-amz-meta-sha1sum: e0bb021ffdf93c68fef44de2a3b08f378b6fb50a
expires: Thu, 11 Jun 2026 00:28:11 GMT
cache-control: max-age=31536000, public,max-age=31536000,s-maxage=1814400
strict-transport-security: max-age=315360000; includeSubDomains
access-control-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 50a19afbefe1a01ca6a87078a2b119c2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P2
x-amz-cf-id: b3Oiax-zoqKXKoAxAa3goCdm2OdE3IYhNZ-5YFT6GdrETuPc7BPknA==
age: 1256126
X-Firefox-Spdy: h2
3.227.165.189
0.0.0.0
0.0.0.0