| www2.unitedbenefits.com/e/860683/2024-05-07/2j1kmb/1043983455/h/BafBL-pGe5XPaGgQveZxJe5kVb7kOMkD5-fKXGT5RDk |  18.208.125.13 | 301 Moved Permanently | 103 B |
URL User Request GET HTTP/1.1www2.unitedbenefits.com/e/860683/2024-05-07/2j1kmb/1043983455/h/BafBL-pGe5XPaGgQveZxJe5kVb7kOMkD5-fKXGT5RDk IP18.208.125.13:443
CertificateIssuerLet's Encrypt Subjectwww2.unitedbenefits.com FingerprintBA:D3:99:4E:CA:FE:E0:C7:DA:21:66:93:AF:C8:D9:88:8C:B3:C1:08 ValiditySun, 31 Mar 2024 18:34:24 GMT - Sat, 29 Jun 2024 18:34:23 GMT
File typeHTML document, ASCII text, with no line terminators Hashef66da89ba1e073617a3b4b26df24edc 43baa16db9cb6bb4affc5ce5e20e522ecc297528 421b9facb11c27f4f0ba88c096afceed11505b1090626067c64ddd61db62594a
GET /e/860683/2024-05-07/2j1kmb/1043983455/h/BafBL-pGe5XPaGgQveZxJe5kVb7kOMkD5-fKXGT5RDk HTTP/1.1
Host: www2.unitedbenefits.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Tue, 07 May 2024 16:10:39 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 103
Connection: keep-alive
location: https://www.unitedbenefits.com
p3p: CP="NOI DSP COR CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT", policyref="/w3c/p3p.xml"
set-cookie: pardot=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0
visitor_id860683=611525928; expires=Fri, 05-May-2034 16:10:38 GMT; Max-Age=315359999; path=/; secure; SameSite=None
visitor_id860683-hash=7c96a3b38c55b72a59161cb0e062e049baf416dfba5c213acb36be42762062d6c3d44fb28a08dc3cd7f27d07ce11e8a5fd724474; expires=Fri, 05-May-2034 16:10:38 GMT; Max-Age=315359999; path=/; secure; SameSite=None
cache-control: max-age=63072000
expires: Thu, 07 May 2026 16:10:38 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
X-Pardot-Route: e8229a0ff18ebffc83a98010d2521dd5
|
|
| | 141.193.213.11 | 301 Moved Permanently | 0 B |
URL User Request GET HTTP/2IP141.193.213.11:443 ASN#209242 Cloudflare London, LLC
CertificateIssuerLet's Encrypt Subjectwww.unitedbenefits.com FingerprintB4:BE:CD:2E:98:93:2B:DB:B8:F3:86:A5:4E:AE:A9:87:10:96:9D:52 ValidityThu, 28 Mar 2024 00:18:04 GMT - Wed, 26 Jun 2024 00:18:03 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: www.unitedbenefits.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
date: Tue, 07 May 2024 16:10:39 GMT
content-type: text/html; charset=UTF-8
content-length: 0
location: https://unitedbenefits.com/
expires: Tue, 07 May 2024 17:01:28 GMT
pragma: no-cache
x-redirect-by: WordPress
x-powered-by: WP Engine
x-cacheable: non200
cache-control: max-age=600, must-revalidate
x-cache: HIT: 45
x-cache-group: normal
cf-cache-status: DYNAMIC
set-cookie: __cf_bm=qCiwFjdCrTRJmePVYJuRXL2_1fYPPDjs58KqPTLCloQ-1715098239-1.0.1.1-Le.s0yRoP_e2ki5W9MTp_E8i6SrSIVQ7KEq_cb.r7ZvbRAt.cWz30TjMhCf2jgIW9cM3ljWQTrynoJRe7Ngcqg; path=/; expires=Tue, 07-May-24 16:40:39 GMT; domain=.www.unitedbenefits.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 88027b3b7fc756bf-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| unitedbenefits.com/wp-content/uploads/2020/04/118059271_m-980x653.jpg | 141.193.213.10 | 200 OK | 85 kB |
URL GET HTTP/3unitedbenefits.com/wp-content/uploads/2020/04/118059271_m-980x653.jpg IP141.193.213.10:443 ASN#209242 Cloudflare London, LLC
Requested byhttps://unitedbenefits.com/ CertificateIssuerLet's Encrypt Subjectunitedbenefits.com Fingerprint26:39:73:63:03:87:F7:66:F2:C7:22:5E:F8:90:40:9A:C6:23:5E:D1 ValiditySat, 30 Mar 2024 10:02:56 GMT - Fri, 28 Jun 2024 10:02:55 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, progressive, precision 8, 980x653, components 3 Hash82042ba748f04665db34dce8d2cac327 74327c370843a0ce07c55847e55c35281834cc42 c9a7635815543133f6780cf26dfa1b6a34d41ae145a50b329d9e352069a4f9d5
GET /wp-content/uploads/2020/04/118059271_m-980x653.jpg HTTP/1.1
Host: unitedbenefits.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://unitedbenefits.com/
Cookie: __cf_bm=d0s7idUUipeRdKaN7lTE6Nz02euD_p1e.OxmR.f8jtA-1715098240-1.0.1.1-l_E5nccixmpAo6y0Y0jQEgXx2opc7JyTo5UHr4_gm7OFB5v7xugW7fapG_qRSj5nRtcyMKHA5FShOdrZVcHI8w
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 16:10:40 GMT
content-type: image/jpeg
content-length: 85295
access-control-allow-origin: *
cache-control: public, max-age=31536000
cf-bgj: imgq:100,h2pri
cf-polished: origSize=87215
etag: "608c710b-154af"
last-modified: Fri, 30 Apr 2021 21:05:15 GMT
vary: Accept-Encoding
cf-cache-status: HIT
accept-ranges: bytes
server: cloudflare
cf-ray: 88027b45ec3d56c3-OSL
alt-svc: h3=":443"; ma=86400
|
|
| unitedbenefits.com/wp-content/et-cache/8/et-core-unified-deferred-8.min.css?ver=1714591258 | 141.193.213.10 | 200 OK | 1.6 kB |
URL GET HTTP/3unitedbenefits.com/wp-content/et-cache/8/et-core-unified-deferred-8.min.css?ver=1714591258 IP141.193.213.10:443 ASN#209242 Cloudflare London, LLC
Requested byhttps://unitedbenefits.com/ CertificateIssuerLet's Encrypt Subjectunitedbenefits.com Fingerprint26:39:73:63:03:87:F7:66:F2:C7:22:5E:F8:90:40:9A:C6:23:5E:D1 ValiditySat, 30 Mar 2024 10:02:56 GMT - Fri, 28 Jun 2024 10:02:55 GMT
File typeASCII text, with very long lines (6935), with no line terminators Hashf5e16e3488ab5c0819774c1931aed190 e9bddb60181c633c1e4518aebcfa8ec3e974f4d2 d3dbdb8cf09dc0e93e74cbb30f9bc795948f322d0bc0e886077be37f2af37e9a
GET /wp-content/et-cache/8/et-core-unified-deferred-8.min.css?ver=1714591258 HTTP/1.1
Host: unitedbenefits.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://unitedbenefits.com/
Cookie: __cf_bm=d0s7idUUipeRdKaN7lTE6Nz02euD_p1e.OxmR.f8jtA-1715098240-1.0.1.1-l_E5nccixmpAo6y0Y0jQEgXx2opc7JyTo5UHr4_gm7OFB5v7xugW7fapG_qRSj5nRtcyMKHA5FShOdrZVcHI8w
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 16:10:40 GMT
content-type: text/css
vary: Accept-Encoding, Accept-Encoding, Accept-Encoding, Accept-Encoding
last-modified: Wed, 01 May 2024 19:20:58 GMT
etag: W/"6632961a-1b17"
cache-control: public, max-age=31536000
access-control-allow-origin: *
content-encoding: br
cf-cache-status: HIT
server: cloudflare
cf-ray: 88027b45ec3956c3-OSL
alt-svc: h3=":443"; ma=86400
|
|
| unitedbenefits.com/wp-content/plugins/widget-google-reviews/assets/css/public-main.css?ver=3.6.1 | 141.193.213.10 | 200 OK | 4.1 kB |
URL GET HTTP/3unitedbenefits.com/wp-content/plugins/widget-google-reviews/assets/css/public-main.css?ver=3.6.1 IP141.193.213.10:443 ASN#209242 Cloudflare London, LLC
Requested byhttps://unitedbenefits.com/ CertificateIssuerLet's Encrypt Subjectunitedbenefits.com Fingerprint26:39:73:63:03:87:F7:66:F2:C7:22:5E:F8:90:40:9A:C6:23:5E:D1 ValiditySat, 30 Mar 2024 10:02:56 GMT - Fri, 28 Jun 2024 10:02:55 GMT
File typeASCII text, with very long lines (17732), with no line terminators Hashdded4782f538771df6d3b264fc28c80e 8ae8c09edf45e1981e1c112fb590a857766f9ff3 f708fd1f41ca4f13cb9ee7f915e836ff2f68b6eff2eefce439b59ad04f818cbd
GET /wp-content/plugins/widget-google-reviews/assets/css/public-main.css?ver=3.6.1 HTTP/1.1
Host: unitedbenefits.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://unitedbenefits.com/
Cookie: __cf_bm=d0s7idUUipeRdKaN7lTE6Nz02euD_p1e.OxmR.f8jtA-1715098240-1.0.1.1-l_E5nccixmpAo6y0Y0jQEgXx2opc7JyTo5UHr4_gm7OFB5v7xugW7fapG_qRSj5nRtcyMKHA5FShOdrZVcHI8w
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 16:10:40 GMT
content-type: text/css
vary: Accept-Encoding, Accept-Encoding, Accept-Encoding, Accept-Encoding
last-modified: Mon, 25 Mar 2024 15:31:50 GMT
etag: W/"660198e6-4544"
cache-control: public, max-age=31536000
access-control-allow-origin: *
content-encoding: br
cf-cache-status: HIT
server: cloudflare
cf-ray: 88027b45dc1456c3-OSL
alt-svc: h3=":443"; ma=86400
|
|
| www.googletagmanager.com/gtag/js?id=UA-118134885-1 | 142.250.74.168 | 200 OK | 75 kB |
URL GET HTTP/2www.googletagmanager.com/gtag/js?id=UA-118134885-1 IP142.250.74.168:443
Requested byhttps://unitedbenefits.com/ CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com Fingerprint93:6B:D2:9D:92:BE:2D:D8:02:67:82:83:5E:EF:A3:F9:13:F3:26:AE ValidityTue, 16 Apr 2024 03:18:45 GMT - Tue, 09 Jul 2024 03:18:44 GMT
File typeJavaScript source, ASCII text, with very long lines (4179) Hash89981a095b8074e4e5dd8140757a19b6 07ba7eee644f57a73d0a2ef65a5771b0fcb71d04 9a111f183f5abaa7507edcc638cbad69d0bb30f28eb7e2e3af2e3682c588f744
GET /gtag/js?id=UA-118134885-1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://unitedbenefits.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 07 May 2024 16:10:41 GMT
expires: Tue, 07 May 2024 16:10:41 GMT
cache-control: private, max-age=900
last-modified: Tue, 07 May 2024 15:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 74692
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/gtag/js?id=UA-163864488-1 | 142.250.74.168 | 200 OK | 75 kB |
URL GET HTTP/2www.googletagmanager.com/gtag/js?id=UA-163864488-1 IP142.250.74.168:443
Requested byhttps://unitedbenefits.com/ CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com Fingerprint93:6B:D2:9D:92:BE:2D:D8:02:67:82:83:5E:EF:A3:F9:13:F3:26:AE ValidityTue, 16 Apr 2024 03:18:45 GMT - Tue, 09 Jul 2024 03:18:44 GMT
File typeJavaScript source, ASCII text, with very long lines (4179) Hashc8f06ca3309f4b3ada7c33de8edbd741 009ea12ca1ba651ad82f76c269ddd1d295c162f9 f1f54f1ec987a7c320416fb600dc860790bafcbcc7bcc807b1b52801f817741f
GET /gtag/js?id=UA-163864488-1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://unitedbenefits.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 07 May 2024 16:10:41 GMT
expires: Tue, 07 May 2024 16:10:41 GMT
cache-control: private, max-age=900
last-modified: Tue, 07 May 2024 15:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 74690
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css?family=Open+Sans:400,700 | 142.250.74.106 | 200 OK | 2.1 kB |
URL GET HTTP/2fonts.googleapis.com/css?family=Open+Sans:400,700 IP142.250.74.106:443
Requested byhttps://unitedbenefits.com/ CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79 ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT
File typegzip compressed data, max compression Hashffa85443e9413a560ff3948677961f5d 9e071db03ed65e5b6bb066994064b128f3b7d1a2 218189f841baa0f91f6d45fbfa0e046794d4eb4c0edbbae3909adfcec7019c5d
GET /css?family=Open+Sans:400,700 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://unitedbenefits.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 07 May 2024 16:10:41 GMT
date: Tue, 07 May 2024 16:10:41 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css?family=Suwannaphum:100,300,regular,700,900&subset=latin&display=swap | 142.250.74.106 | 200 OK | 915 B |
URL GET HTTP/2fonts.googleapis.com/css?family=Suwannaphum:100,300,regular,700,900&subset=latin&display=swap IP142.250.74.106:443
Requested byhttps://unitedbenefits.com/ CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79 ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT
File typegzip compressed data, max compression Hashacd5200076b59c7bf6f4e4bc7f15cbd7 424bae13c82f5e409a385165fdf106da5c088863 607caec9ffe1c741c034eb79f53bdc768d56eec48d7788f194d74d2cf52b66d0
GET /css?family=Suwannaphum:100,300,regular,700,900&subset=latin&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://unitedbenefits.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 07 May 2024 16:10:41 GMT
date: Tue, 07 May 2024 16:10:41 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/gtag/js?id=G-XPQN3GXXDM&l=dataLayer&cx=c | 142.250.74.168 | 200 OK | 90 kB |
URL GET HTTP/2www.googletagmanager.com/gtag/js?id=G-XPQN3GXXDM&l=dataLayer&cx=c IP142.250.74.168:443
Requested byhttps://unitedbenefits.com/ CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com Fingerprint93:6B:D2:9D:92:BE:2D:D8:02:67:82:83:5E:EF:A3:F9:13:F3:26:AE ValidityTue, 16 Apr 2024 03:18:45 GMT - Tue, 09 Jul 2024 03:18:44 GMT
File typeJavaScript source, ASCII text, with very long lines (5955) Hashd3777986a4776581bb30c61b4202631d 0757b5b86e27b3e3526e7fe13109805b6c7e1ad5 78cb5648caf07ce04846c7c7fdc9902505db386cf993fd2e006ca8af88b6589a
GET /gtag/js?id=G-XPQN3GXXDM&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://unitedbenefits.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 07 May 2024 16:10:41 GMT
expires: Tue, 07 May 2024 16:10:41 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 89723
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/gtag/js?id=UA-118134885-1&l=dataLayer&cx=c | 142.250.74.168 | 200 OK | 75 kB |
URL GET HTTP/2www.googletagmanager.com/gtag/js?id=UA-118134885-1&l=dataLayer&cx=c IP142.250.74.168:443
Requested byhttps://unitedbenefits.com/ CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com Fingerprint93:6B:D2:9D:92:BE:2D:D8:02:67:82:83:5E:EF:A3:F9:13:F3:26:AE ValidityTue, 16 Apr 2024 03:18:45 GMT - Tue, 09 Jul 2024 03:18:44 GMT
File typeJavaScript source, ASCII text, with very long lines (4179) Hash8e172b1e15fd63b8202e77b9f93b3393 ca3e407eb48a5aafdf0d1deac8df0a0dffc8cbc8 b2ac90214c4ca6a2ff6f5d0f43591159515b5318feb92e044c8ff694a5b367f3
GET /gtag/js?id=UA-118134885-1&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://unitedbenefits.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 07 May 2024 16:10:41 GMT
expires: Tue, 07 May 2024 16:10:41 GMT
cache-control: private, max-age=900
last-modified: Tue, 07 May 2024 15:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 74704
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/gtag/js?id=G-L91K8YPXHK&l=dataLayer&cx=c | 142.250.74.168 | 200 OK | 90 kB |
URL GET HTTP/3www.googletagmanager.com/gtag/js?id=G-L91K8YPXHK&l=dataLayer&cx=c IP142.250.74.168:443
Requested byhttps://unitedbenefits.com/ CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com Fingerprint93:6B:D2:9D:92:BE:2D:D8:02:67:82:83:5E:EF:A3:F9:13:F3:26:AE ValidityTue, 16 Apr 2024 03:18:45 GMT - Tue, 09 Jul 2024 03:18:44 GMT
File typeJavaScript source, ASCII text, with very long lines (5955) Hash07b3754fe326b87147075957a8f0da28 adcdd8f76d7e931d24f5f373f660184782bee41e 3822f6b77beea8dc9d9f0199bdbb82f5cb930873ff5e773d169e62d6ac0338f4
GET /gtag/js?id=G-L91K8YPXHK&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://unitedbenefits.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 07 May 2024 16:10:41 GMT
expires: Tue, 07 May 2024 16:10:41 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 89796
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.google.com/recaptcha/api.js?onload=frmRecaptcha&render=explicit&ver=3 | 142.250.74.132 | 200 OK | 1.0 kB |
URL GET HTTP/2www.google.com/recaptcha/api.js?onload=frmRecaptcha&render=explicit&ver=3 IP142.250.74.132:443
Requested byhttps://unitedbenefits.com/ CertificateIssuerGoogle Trust Services LLC Subjectwww.google.com FingerprintC6:A2:DC:31:5A:53:FA:DD:55:71:A3:F4:DD:43:3D:16:71:B8:B3:99 ValidityTue, 16 Apr 2024 04:20:32 GMT - Tue, 09 Jul 2024 04:20:31 GMT
Hash6158e89e032f4c7a5afc750a1f435eb3 4650870725f8fa838c5f5614f2ca9cba2978f1be 2a248256b309bde6f7b71db62b474e17f5e932c504bdaba38507c9f839b908ff
GET /recaptcha/api.js?onload=frmRecaptcha&render=explicit&ver=3 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://unitedbenefits.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
expires: Tue, 07 May 2024 16:10:41 GMT
date: Tue, 07 May 2024 16:10:41 GMT
cache-control: private, max-age=300
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| unitedbenefits.com/wp-content/plugins/formidable/css/formidableforms.css?ver=3251533 | 141.193.213.10 | 200 OK | 1.6 MB |
URL GET HTTP/3unitedbenefits.com/wp-content/plugins/formidable/css/formidableforms.css?ver=3251533 IP141.193.213.10:443 ASN#209242 Cloudflare London, LLC
Requested byhttps://unitedbenefits.com/ CertificateIssuerLet's Encrypt Subjectunitedbenefits.com Fingerprint26:39:73:63:03:87:F7:66:F2:C7:22:5E:F8:90:40:9A:C6:23:5E:D1 ValiditySat, 30 Mar 2024 10:02:56 GMT - Fri, 28 Jun 2024 10:02:55 GMT
File typeASCII text, with very long lines (65436) Size1.6 MB (1616873 bytes) Hash22a7991177d0c44a281fc622d4607968 f0be26da73196d53d11cf92cbcccdf3fa15a6616 1e3a69539f6cb326a629a644ff790ab7328068e12631d89ceded0ad4b5149ec8
GET /wp-content/plugins/formidable/css/formidableforms.css?ver=3251533 HTTP/1.1
Host: unitedbenefits.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://unitedbenefits.com/
Cookie: __cf_bm=d0s7idUUipeRdKaN7lTE6Nz02euD_p1e.OxmR.f8jtA-1715098240-1.0.1.1-l_E5nccixmpAo6y0Y0jQEgXx2opc7JyTo5UHr4_gm7OFB5v7xugW7fapG_qRSj5nRtcyMKHA5FShOdrZVcHI8w
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 16:10:41 GMT
content-type: text/css
vary: Accept-Encoding, Accept-Encoding, Accept-Encoding, Accept-Encoding
last-modified: Mon, 25 Mar 2024 15:33:41 GMT
etag: W/"66019955-21826"
cache-control: public, max-age=31536000
access-control-allow-origin: *
content-encoding: br
cf-cache-status: MISS
server: cloudflare
cf-ray: 88027b45cc0856c3-OSL
alt-svc: h3=":443"; ma=86400
|
|
| unitedbenefits.com/wp-content/plugins/monarch/js/custom.js?ver=1.4.14 | 141.193.213.10 | 200 OK | 6.3 kB |
URL GET HTTP/3unitedbenefits.com/wp-content/plugins/monarch/js/custom.js?ver=1.4.14 IP141.193.213.10:443 ASN#209242 Cloudflare London, LLC
Requested byhttps://unitedbenefits.com/ CertificateIssuerLet's Encrypt Subjectunitedbenefits.com Fingerprint26:39:73:63:03:87:F7:66:F2:C7:22:5E:F8:90:40:9A:C6:23:5E:D1 ValiditySat, 30 Mar 2024 10:02:56 GMT - Fri, 28 Jun 2024 10:02:55 GMT
File typeJavaScript source, ASCII text, with very long lines (351) Hashe707ec1abd4ca9c8fd45bd6fdd4b4224 086db688c9c66f930e166e59c4d6ec3eee90449f 43b5c9ad80f0a5d1c63568583e9cf6cd5ca8454a680f4ee80d5d63d00b15a360
GET /wp-content/plugins/monarch/js/custom.js?ver=1.4.14 HTTP/1.1
Host: unitedbenefits.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://unitedbenefits.com/
Cookie: __cf_bm=d0s7idUUipeRdKaN7lTE6Nz02euD_p1e.OxmR.f8jtA-1715098240-1.0.1.1-l_E5nccixmpAo6y0Y0jQEgXx2opc7JyTo5UHr4_gm7OFB5v7xugW7fapG_qRSj5nRtcyMKHA5FShOdrZVcHI8w
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 16:10:41 GMT
content-type: application/javascript
vary: Accept-Encoding, Accept-Encoding, Accept-Encoding, Accept-Encoding
last-modified: Tue, 13 Jun 2023 20:40:29 GMT
etag: W/"6488d43d-6855"
cache-control: public, max-age=31536000
access-control-allow-origin: *
content-encoding: br
cf-cache-status: MISS
server: cloudflare
cf-ray: 88027b45fc5956c3-OSL
alt-svc: h3=":443"; ma=86400
|
|
| unitedbenefits.com/wp-content/uploads/2020/04/ublogo.png | 141.193.213.10 | 200 OK | 50 kB |
URL GET HTTP/3unitedbenefits.com/wp-content/uploads/2020/04/ublogo.png IP141.193.213.10:443 ASN#209242 Cloudflare London, LLC
Requested byhttps://unitedbenefits.com/ CertificateIssuerLet's Encrypt Subjectunitedbenefits.com Fingerprint26:39:73:63:03:87:F7:66:F2:C7:22:5E:F8:90:40:9A:C6:23:5E:D1 ValiditySat, 30 Mar 2024 10:02:56 GMT - Fri, 28 Jun 2024 10:02:55 GMT
File typePNG image data, 550 x 155, 8-bit/color RGBA, non-interlaced Hash2712feaaebe812999c69da7e82baf7ea b9938af9c858fddc3f93daefb6fc9b7d3e7fdf32 a67bbe015362ed0c9b7d6a9e3e9b0a18a1683176b09eb346759475d8bf3e856f
GET /wp-content/uploads/2020/04/ublogo.png HTTP/1.1
Host: unitedbenefits.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://unitedbenefits.com/
Cookie: __cf_bm=d0s7idUUipeRdKaN7lTE6Nz02euD_p1e.OxmR.f8jtA-1715098240-1.0.1.1-l_E5nccixmpAo6y0Y0jQEgXx2opc7JyTo5UHr4_gm7OFB5v7xugW7fapG_qRSj5nRtcyMKHA5FShOdrZVcHI8w
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 16:10:42 GMT
content-type: image/png
content-length: 49903
last-modified: Fri, 30 Apr 2021 20:59:29 GMT
etag: "608c6fb1-c2ef"
cache-control: public, max-age=31536000
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
server: cloudflare
cf-ray: 88027b45ec3a56c3-OSL
alt-svc: h3=":443"; ma=86400
|
|
| fonts.gstatic.com/s/suwannaphum/v31/jAnfgHV7GtDvc8jbe8hXXL0Z0NS7exA.woff2 | 216.58.207.227 | 200 OK | 11 kB |
URL GET HTTP/2fonts.gstatic.com/s/suwannaphum/v31/jAnfgHV7GtDvc8jbe8hXXL0Z0NS7exA.woff2 IP216.58.207.227:443
Requested byhttps://unitedbenefits.com/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 11436, version 1.0 Hash6caa54307c2dc73f5db12309c0f780f5 09f306f4b0938bc8892cb94b59e0821fdcbfc3cf d313fcc7463774cebc36fa82fe64cb1189481983e22e2a4802bb5b9752808bb2
GET /s/suwannaphum/v31/jAnfgHV7GtDvc8jbe8hXXL0Z0NS7exA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://unitedbenefits.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 11436
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 06 May 2024 11:47:45 GMT
expires: Tue, 06 May 2025 11:47:45 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 24 Aug 2023 20:57:29 GMT
content-type: font/woff2
age: 102177
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 | 216.58.207.227 | 200 OK | 48 kB |
URL GET HTTP/2fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 IP216.58.207.227:443
Requested byhttps://unitedbenefits.com/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 48236, version 1.0 Hash015c126a3520c9a8f6a27979d0266e96 2acf956561d44434a6d84204670cf849d3215d5f 3c4d6a1421c7ddb7e404521fe8c4cd5be5af446d7689cd880be26612eaad3cfa
GET /s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://unitedbenefits.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48236
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 02:35:00 GMT
expires: Fri, 02 May 2025 02:35:00 GMT
cache-control: public, max-age=31536000
age: 480942
last-modified: Thu, 14 Dec 2023 02:08:40 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| unitedbenefits.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 | 141.193.213.10 | 200 OK | 53 kB |
URL GET HTTP/3unitedbenefits.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 IP141.193.213.10:443 ASN#209242 Cloudflare London, LLC
Requested byhttps://unitedbenefits.com/ CertificateIssuerLet's Encrypt Subjectunitedbenefits.com Fingerprint26:39:73:63:03:87:F7:66:F2:C7:22:5E:F8:90:40:9A:C6:23:5E:D1 ValiditySat, 30 Mar 2024 10:02:56 GMT - Fri, 28 Jun 2024 10:02:55 GMT
File typeJavaScript source, ASCII text, with very long lines (13479) Hash9ffeb32e2d9efbf8f70caabded242267 3ad0c10e501ac2a9bfa18f9cd7e700219b378738 5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1
Host: unitedbenefits.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://unitedbenefits.com/
Cookie: __cf_bm=d0s7idUUipeRdKaN7lTE6Nz02euD_p1e.OxmR.f8jtA-1715098240-1.0.1.1-l_E5nccixmpAo6y0Y0jQEgXx2opc7JyTo5UHr4_gm7OFB5v7xugW7fapG_qRSj5nRtcyMKHA5FShOdrZVcHI8w
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 16:10:41 GMT
content-type: application/javascript
vary: Accept-Encoding, Accept-Encoding, Accept-Encoding, Accept-Encoding
last-modified: Fri, 09 Jun 2023 05:49:24 GMT
etag: W/"6482bd64-3509"
cache-control: public, max-age=31536000
access-control-allow-origin: *
content-encoding: br
cf-cache-status: MISS
server: cloudflare
cf-ray: 88027b45fc5456c3-OSL
alt-svc: h3=":443"; ma=86400
|
|
| fonts.googleapis.com/css?family=Open+Sans:300italic,400italic,600italic,700italic,800italic,400,300,600,700,800&subset=latin,latin-ext&display=swap | 142.250.74.106 | 200 OK | 50 kB |
URL GET HTTP/2fonts.googleapis.com/css?family=Open+Sans:300italic,400italic,600italic,700italic,800italic,400,300,600,700,800&subset=latin,latin-ext&display=swap IP142.250.74.106:443
Requested byhttps://unitedbenefits.com/ CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79 ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT
File typegzip compressed data, max compression Hashdfb405952799806d213c76e6b892e08d 7396e14db0103e4940d006704b9473600a264e15 f2d58d6b04d2379000a06790e7e71e7b990b016cb9b885395f2f06fee3386cae
GET /css?family=Open+Sans:300italic,400italic,600italic,700italic,800italic,400,300,600,700,800&subset=latin,latin-ext&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://unitedbenefits.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 07 May 2024 16:10:41 GMT
date: Tue, 07 May 2024 16:10:41 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www2.unitedbenefits.com/l/860683/2022-10-27/24f2wm | 18.208.125.13 | 200 OK | 2.3 kB |
URL GET HTTP/1.1www2.unitedbenefits.com/l/860683/2022-10-27/24f2wm IP18.208.125.13:443
Requested byhttps://unitedbenefits.com/ CertificateIssuerLet's Encrypt Subjectwww2.unitedbenefits.com FingerprintBA:D3:99:4E:CA:FE:E0:C7:DA:21:66:93:AF:C8:D9:88:8C:B3:C1:08 ValiditySun, 31 Mar 2024 18:34:24 GMT - Sat, 29 Jun 2024 18:34:23 GMT
File typeHTML document, ASCII text Hashf022eb27e6c356831d53ae34885a3aef 587514ed8c5808f2e7e09ca0f92f931f031d3f43 f291a84cfffde08ba759e938b620e57bdf3c3ec91e92b48589a0e73fe8e4f29f
GET /l/860683/2022-10-27/24f2wm HTTP/1.1
Host: www2.unitedbenefits.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://unitedbenefits.com/
Cookie: visitor_id860683=611525928; visitor_id860683-hash=7c96a3b38c55b72a59161cb0e062e049baf416dfba5c213acb36be42762062d6c3d44fb28a08dc3cd7f27d07ce11e8a5fd724474; __cf_bm=d0s7idUUipeRdKaN7lTE6Nz02euD_p1e.OxmR.f8jtA-1715098240-1.0.1.1-l_E5nccixmpAo6y0Y0jQEgXx2opc7JyTo5UHr4_gm7OFB5v7xugW7fapG_qRSj5nRtcyMKHA5FShOdrZVcHI8w; _ga_XPQN3GXXDM=GS1.1.1715098241.1.0.1715098241.0.0.0; _ga=GA1.1.105795692.1715098241; _ga_L91K8YPXHK=GS1.1.1715098241.1.0.1715098241.60.0.0
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 16:10:42 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 2304
Connection: keep-alive
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
x-pardot-rsp: 0/0/1
p3p: CP="NOI DSP COR CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT", policyref="/w3c/p3p.xml", CP="NOI DSP COR CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT", policyref="/w3c/p3p.xml"
set-cookie: pardot=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0
visitor_id860683=611525928; expires=Fri, 05-May-2034 16:10:42 GMT; Max-Age=315360000; path=/; secure; SameSite=None
visitor_id860683-hash=7c96a3b38c55b72a59161cb0e062e049baf416dfba5c213acb36be42762062d6c3d44fb28a08dc3cd7f27d07ce11e8a5fd724474; expires=Fri, 05-May-2034 16:10:42 GMT; Max-Age=315360000; path=/; secure; SameSite=None
vary: Accept-Encoding,User-Agent
content-encoding: gzip
X-Pardot-Route: e8229a0ff18ebffc83a98010d2521dd5
|
|
| fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 | 216.58.207.227 | 200 OK | 48 kB |
URL GET HTTP/2fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 IP216.58.207.227:443
Requested byhttps://unitedbenefits.com/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 48236, version 1.0 Hash015c126a3520c9a8f6a27979d0266e96 2acf956561d44434a6d84204670cf849d3215d5f 3c4d6a1421c7ddb7e404521fe8c4cd5be5af446d7689cd880be26612eaad3cfa
GET /s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://unitedbenefits.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48236
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 02:35:00 GMT
expires: Fri, 02 May 2025 02:35:00 GMT
cache-control: public, max-age=31536000
age: 480942
last-modified: Thu, 14 Dec 2023 02:08:40 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| region1.analytics.google.com/g/collect?v=2&tid=G-L91K8YPXHK>m=45je4510v9118794201za200&_p=1715098240910&_gaz=1&gcd=13l3l3l2l1&npa=1&dma_cps=sypham&dma=1&cid=105795692.1715098241&ul=en-us&sr=1280x1024&ir=1&pscdl=noapi&_eu=EAAI&_s=1&sid=1715098241&sct=1&seg=0&dl=https%3A%2F%2Funitedbenefits.com%2F&dt=United%20Benefits%20-%20United%20Benefits&en=page_view&_fv=1&_ss=1&tfd=3639 | 216.239.34.36 | 204 No Content | 0 B |
URL POST HTTP/2region1.analytics.google.com/g/collect?v=2&tid=G-L91K8YPXHK>m=45je4510v9118794201za200&_p=1715098240910&_gaz=1&gcd=13l3l3l2l1&npa=1&dma_cps=sypham&dma=1&cid=105795692.1715098241&ul=en-us&sr=1280x1024&ir=1&pscdl=noapi&_eu=EAAI&_s=1&sid=1715098241&sct=1&seg=0&dl=https%3A%2F%2Funitedbenefits.com%2F&dt=United%20Benefits%20-%20United%20Benefits&en=page_view&_fv=1&_ss=1&tfd=3639 IP216.239.34.36:443
Requested byhttps://unitedbenefits.com/ CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com Fingerprint93:6B:D2:9D:92:BE:2D:D8:02:67:82:83:5E:EF:A3:F9:13:F3:26:AE ValidityTue, 16 Apr 2024 03:18:45 GMT - Tue, 09 Jul 2024 03:18:44 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-L91K8YPXHK>m=45je4510v9118794201za200&_p=1715098240910&_gaz=1&gcd=13l3l3l2l1&npa=1&dma_cps=sypham&dma=1&cid=105795692.1715098241&ul=en-us&sr=1280x1024&ir=1&pscdl=noapi&_eu=EAAI&_s=1&sid=1715098241&sct=1&seg=0&dl=https%3A%2F%2Funitedbenefits.com%2F&dt=United%20Benefits%20-%20United%20Benefits&en=page_view&_fv=1&_ss=1&tfd=3639 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://unitedbenefits.com
DNT: 1
Connection: keep-alive
Referer: https://unitedbenefits.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://unitedbenefits.com
date: Tue, 07 May 2024 16:10:42 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| unitedbenefits.com/wp-content/themes/Divi/core/admin/fonts/fontawesome/fa-solid-900.woff2 | 141.193.213.10 | 200 OK | 80 kB |
URL GET HTTP/3unitedbenefits.com/wp-content/themes/Divi/core/admin/fonts/fontawesome/fa-solid-900.woff2 IP141.193.213.10:443 ASN#209242 Cloudflare London, LLC
Requested byhttps://unitedbenefits.com/ CertificateIssuerLet's Encrypt Subjectunitedbenefits.com Fingerprint26:39:73:63:03:87:F7:66:F2:C7:22:5E:F8:90:40:9A:C6:23:5E:D1 ValiditySat, 30 Mar 2024 10:02:56 GMT - Fri, 28 Jun 2024 10:02:55 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 80300, version 331.-31392 Hash8e1ed89b6ccb8ce41faf5cb672677105 9b592048b9062b00f0b2dd782d70a95b7dc69b83 6b555920e358f8a25a422988b448615c33bcccb4f932e8331cebfc8e2a737fc7
GET /wp-content/themes/Divi/core/admin/fonts/fontawesome/fa-solid-900.woff2 HTTP/1.1
Host: unitedbenefits.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://unitedbenefits.com/
Cookie: __cf_bm=d0s7idUUipeRdKaN7lTE6Nz02euD_p1e.OxmR.f8jtA-1715098240-1.0.1.1-l_E5nccixmpAo6y0Y0jQEgXx2opc7JyTo5UHr4_gm7OFB5v7xugW7fapG_qRSj5nRtcyMKHA5FShOdrZVcHI8w; _ga_XPQN3GXXDM=GS1.1.1715098241.1.0.1715098241.0.0.0; _ga=GA1.1.105795692.1715098241; _ga_L91K8YPXHK=GS1.1.1715098241.1.0.1715098241.60.0.0
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 16:10:42 GMT
content-type: font/woff2
content-length: 80300
last-modified: Fri, 19 Apr 2024 07:14:39 GMT
etag: "662219df-139ac"
cache-control: public, max-age=31536000
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
server: cloudflare
cf-ray: 88027b4c1fd956c3-OSL
alt-svc: h3=":443"; ma=86400
|
|
| unitedbenefits.com/wp-content/et-cache/8/et-divi-dynamic-8.css?ver=1714591257 | 141.193.213.10 | 200 OK | 94 kB |
URL GET HTTP/3unitedbenefits.com/wp-content/et-cache/8/et-divi-dynamic-8.css?ver=1714591257 IP141.193.213.10:443 ASN#209242 Cloudflare London, LLC
Requested byhttps://unitedbenefits.com/ CertificateIssuerLet's Encrypt Subjectunitedbenefits.com Fingerprint26:39:73:63:03:87:F7:66:F2:C7:22:5E:F8:90:40:9A:C6:23:5E:D1 ValiditySat, 30 Mar 2024 10:02:56 GMT - Fri, 28 Jun 2024 10:02:55 GMT
File typeASCII text, with very long lines (6697) Hashac9e8b56a5cf7a2c10003ad556bb770b b1d3e08945aef5f87e0c1c51bf3f513617b06504 9b90ec66e2fa1c9e6620b3a8e46a9718e44fd948cad635139d94e8b000663806
GET /wp-content/et-cache/8/et-divi-dynamic-8.css?ver=1714591257 HTTP/1.1
Host: unitedbenefits.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://unitedbenefits.com/
Cookie: __cf_bm=d0s7idUUipeRdKaN7lTE6Nz02euD_p1e.OxmR.f8jtA-1715098240-1.0.1.1-l_E5nccixmpAo6y0Y0jQEgXx2opc7JyTo5UHr4_gm7OFB5v7xugW7fapG_qRSj5nRtcyMKHA5FShOdrZVcHI8w
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 16:10:40 GMT
content-type: text/css
vary: Accept-Encoding, Accept-Encoding, Accept-Encoding, Accept-Encoding
last-modified: Wed, 01 May 2024 19:20:57 GMT
etag: W/"66329619-27cf"
cache-control: public, max-age=31536000
access-control-allow-origin: *
content-encoding: br
cf-cache-status: HIT
server: cloudflare
cf-ray: 88027b45dc1956c3-OSL
alt-svc: h3=":443"; ma=86400
|
|
| www2.unitedbenefits.com/js/piUtils.js?ver=2021-09-20 | 18.208.125.13 | 200 OK | 102 kB |
URL GET HTTP/1.1www2.unitedbenefits.com/js/piUtils.js?ver=2021-09-20 IP18.208.125.13:443
Requested byhttps://www2.unitedbenefits.com/l/860683/2022-10-27/24f2wm CertificateIssuerLet's Encrypt Subjectwww2.unitedbenefits.com FingerprintBA:D3:99:4E:CA:FE:E0:C7:DA:21:66:93:AF:C8:D9:88:8C:B3:C1:08 ValiditySun, 31 Mar 2024 18:34:24 GMT - Sat, 29 Jun 2024 18:34:23 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (65507) Size102 kB (101753 bytes) Hash36539cfff48d4c328a82c8ae5cc0e77f 5c3d8c5a740db35d84da856feec60011c1223990 87fbc6477d07c0b9eb56d8839da504fcaf1cdbb8bec3e7f6581cfe92f4abdfce
GET /js/piUtils.js?ver=2021-09-20 HTTP/1.1
Host: www2.unitedbenefits.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www2.unitedbenefits.com/l/860683/2022-10-27/24f2wm
Cookie: visitor_id860683=611525928; visitor_id860683-hash=7c96a3b38c55b72a59161cb0e062e049baf416dfba5c213acb36be42762062d6c3d44fb28a08dc3cd7f27d07ce11e8a5fd724474; __cf_bm=d0s7idUUipeRdKaN7lTE6Nz02euD_p1e.OxmR.f8jtA-1715098240-1.0.1.1-l_E5nccixmpAo6y0Y0jQEgXx2opc7JyTo5UHr4_gm7OFB5v7xugW7fapG_qRSj5nRtcyMKHA5FShOdrZVcHI8w; _ga_XPQN3GXXDM=GS1.1.1715098241.1.0.1715098241.0.0.0; _ga=GA1.1.105795692.1715098241; _ga_L91K8YPXHK=GS1.1.1715098241.1.0.1715098241.60.0.0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 16:10:42 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
last-modified: Tue, 07 May 2024 05:28:15 GMT
etag: "55cc5-gzip"
accept-ranges: bytes
cache-control: max-age=63072000
expires: Thu, 07 May 2026 16:10:42 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
X-Pardot-Route: e8229a0ff18ebffc83a98010d2521dd5
|
|
| fonts.gstatic.com/s/montserrat/v26/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCtr6Hw5aXo.woff2 | 216.58.207.227 | 200 OK | 15 kB |
URL GET HTTP/2fonts.gstatic.com/s/montserrat/v26/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCtr6Hw5aXo.woff2 IP216.58.207.227:443
Requested byhttps://www2.unitedbenefits.com/l/860683/2022-10-27/24f2wm CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 14940, version 1.0 Hasha46fb7aae99225fdfd9d64b2b8b1063f 1ee50bf5985c1956dde1c06d9b1cec4645ddb92b 4b5816bbfc52587979139951355fe4048da02ce60e40cef8e4a1efb6cd396281
GET /s/montserrat/v26/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCtr6Hw5aXo.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www2.unitedbenefits.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14940
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 01:57:59 GMT
expires: Fri, 02 May 2025 01:57:59 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 13 Sep 2023 22:46:07 GMT
content-type: font/woff2
age: 483164
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| unitedbenefits.com/wp-content/uploads/2023/05/Understanding-How-IRMAAs-Impact-Medicare-Blog-1280x853.jpg | 141.193.213.10 | 200 OK | 97 kB |
URL GET HTTP/3unitedbenefits.com/wp-content/uploads/2023/05/Understanding-How-IRMAAs-Impact-Medicare-Blog-1280x853.jpg IP141.193.213.10:443 ASN#209242 Cloudflare London, LLC
Requested byhttps://unitedbenefits.com/ CertificateIssuerLet's Encrypt Subjectunitedbenefits.com Fingerprint26:39:73:63:03:87:F7:66:F2:C7:22:5E:F8:90:40:9A:C6:23:5E:D1 ValiditySat, 30 Mar 2024 10:02:56 GMT - Fri, 28 Jun 2024 10:02:55 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=6, xresolution=86, yresolution=94, resolutionunit=2, copyright=(c) Fizkes | Dreamstime.com], baseline, precision 8, 1280x853, components 3 Hash4eb46ed0cd0b7e8ffdb9684849395e23 619156f9551fcd3a8f4173ef183ecb841c89c833 a7b93ca30e708778329034cb85bc509b6c2652f7dd5a26d1a8a27e81fa113fa4
GET /wp-content/uploads/2023/05/Understanding-How-IRMAAs-Impact-Medicare-Blog-1280x853.jpg HTTP/1.1
Host: unitedbenefits.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://unitedbenefits.com/
Cookie: __cf_bm=d0s7idUUipeRdKaN7lTE6Nz02euD_p1e.OxmR.f8jtA-1715098240-1.0.1.1-l_E5nccixmpAo6y0Y0jQEgXx2opc7JyTo5UHr4_gm7OFB5v7xugW7fapG_qRSj5nRtcyMKHA5FShOdrZVcHI8w; _ga_XPQN3GXXDM=GS1.1.1715098241.1.0.1715098241.0.0.0; _ga=GA1.1.105795692.1715098241; _ga_L91K8YPXHK=GS1.1.1715098241.1.0.1715098241.60.0.0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 16:10:43 GMT
content-type: image/jpeg
content-length: 96669
last-modified: Mon, 30 Jan 2023 17:34:03 GMT
etag: "63d7ff8b-1799d"
cache-control: public, max-age=31536000
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
server: cloudflare
cf-ray: 88027b4cd91f56c3-OSL
alt-svc: h3=":443"; ma=86400
|
|
| unitedbenefits.com/wp-content/uploads/2023/04/dreamstime_xxl_63028076-1280x853.jpg | 141.193.213.10 | 200 OK | 136 kB |
URL GET HTTP/3unitedbenefits.com/wp-content/uploads/2023/04/dreamstime_xxl_63028076-1280x853.jpg IP141.193.213.10:443 ASN#209242 Cloudflare London, LLC
Requested byhttps://unitedbenefits.com/ CertificateIssuerLet's Encrypt Subjectunitedbenefits.com Fingerprint26:39:73:63:03:87:F7:66:F2:C7:22:5E:F8:90:40:9A:C6:23:5E:D1 ValiditySat, 30 Mar 2024 10:02:56 GMT - Fri, 28 Jun 2024 10:02:55 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=6, xresolution=86, yresolution=94, resolutionunit=2, copyright=(c) Epicstock | Dreamstime.com], baseline, precision 8, 1280x853, components 3 Size136 kB (136161 bytes) Hash6aefa03d35304664b6a276e6520df7fb e94a2c42af827384f392211831c549606f1739ed e433e1a7534ea6c90c3440ef1cb81f18b57c5e8964a220ee893c8b42bf0989d2
GET /wp-content/uploads/2023/04/dreamstime_xxl_63028076-1280x853.jpg HTTP/1.1
Host: unitedbenefits.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://unitedbenefits.com/
Cookie: __cf_bm=d0s7idUUipeRdKaN7lTE6Nz02euD_p1e.OxmR.f8jtA-1715098240-1.0.1.1-l_E5nccixmpAo6y0Y0jQEgXx2opc7JyTo5UHr4_gm7OFB5v7xugW7fapG_qRSj5nRtcyMKHA5FShOdrZVcHI8w; _ga_XPQN3GXXDM=GS1.1.1715098241.1.0.1715098241.0.0.0; _ga=GA1.1.105795692.1715098241; _ga_L91K8YPXHK=GS1.1.1715098241.1.0.1715098241.60.0.0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 16:10:43 GMT
content-type: image/jpeg
content-length: 136161
last-modified: Wed, 26 Apr 2023 21:18:36 GMT
etag: "6449952c-213e1"
cache-control: public, max-age=31536000
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
server: cloudflare
cf-ray: 88027b4cd91d56c3-OSL
alt-svc: h3=":443"; ma=86400
|
|
| unitedbenefits.com/wp-content/uploads/2023/04/Webinar-1280x853.png | 141.193.213.10 | 200 OK | 1.4 MB |
URL GET HTTP/3unitedbenefits.com/wp-content/uploads/2023/04/Webinar-1280x853.png IP141.193.213.10:443 ASN#209242 Cloudflare London, LLC
Requested byhttps://unitedbenefits.com/ CertificateIssuerLet's Encrypt Subjectunitedbenefits.com Fingerprint26:39:73:63:03:87:F7:66:F2:C7:22:5E:F8:90:40:9A:C6:23:5E:D1 ValiditySat, 30 Mar 2024 10:02:56 GMT - Fri, 28 Jun 2024 10:02:55 GMT
File typePNG image data, 1280 x 853, 8-bit/color RGBA, non-interlaced Size1.4 MB (1436621 bytes) Hashc963a6bad4392946f32bf34d60e692f9 9f023a5fa798684ab6c26bc4786e6608f7ca3638 06816ee781cb40326f8b6d8ced091897ba93e406ba97b76149835228ecfeed73
GET /wp-content/uploads/2023/04/Webinar-1280x853.png HTTP/1.1
Host: unitedbenefits.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://unitedbenefits.com/
Cookie: __cf_bm=d0s7idUUipeRdKaN7lTE6Nz02euD_p1e.OxmR.f8jtA-1715098240-1.0.1.1-l_E5nccixmpAo6y0Y0jQEgXx2opc7JyTo5UHr4_gm7OFB5v7xugW7fapG_qRSj5nRtcyMKHA5FShOdrZVcHI8w; _ga_XPQN3GXXDM=GS1.1.1715098241.1.0.1715098241.0.0.0; _ga=GA1.1.105795692.1715098241; _ga_L91K8YPXHK=GS1.1.1715098241.1.0.1715098241.60.0.0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 16:10:42 GMT
content-type: image/png
content-length: 1436621
last-modified: Wed, 26 Apr 2023 21:22:17 GMT
etag: "64499609-15ebcd"
cache-control: public, max-age=31536000
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
server: cloudflare
cf-ray: 88027b4cd92156c3-OSL
alt-svc: h3=":443"; ma=86400
|
|
| unitedbenefits.com/wp-content/uploads/2020/04/united-benefits-background-2.png | 141.193.213.10 | 200 OK | 159 kB |
URL GET HTTP/3unitedbenefits.com/wp-content/uploads/2020/04/united-benefits-background-2.png IP141.193.213.10:443 ASN#209242 Cloudflare London, LLC
Requested byhttps://unitedbenefits.com/ CertificateIssuerLet's Encrypt Subjectunitedbenefits.com Fingerprint26:39:73:63:03:87:F7:66:F2:C7:22:5E:F8:90:40:9A:C6:23:5E:D1 ValiditySat, 30 Mar 2024 10:02:56 GMT - Fri, 28 Jun 2024 10:02:55 GMT
File typePNG image data, 5851 x 1884, 8-bit/color RGB, non-interlaced Size159 kB (159307 bytes) Hash8e9cde970fac529098d4668812efddf8 e24677b057859e5f9434968be54aef82e42115da 162d41c827e7b35c3556fa5bba2029e6ba325468729d8f982830f7f2cf35c87f
GET /wp-content/uploads/2020/04/united-benefits-background-2.png HTTP/1.1
Host: unitedbenefits.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://unitedbenefits.com/wp-content/et-cache/8/et-core-unified-deferred-8.min.css?ver=1714591258
Cookie: __cf_bm=d0s7idUUipeRdKaN7lTE6Nz02euD_p1e.OxmR.f8jtA-1715098240-1.0.1.1-l_E5nccixmpAo6y0Y0jQEgXx2opc7JyTo5UHr4_gm7OFB5v7xugW7fapG_qRSj5nRtcyMKHA5FShOdrZVcHI8w; _ga_XPQN3GXXDM=GS1.1.1715098241.1.0.1715098241.0.0.0; _ga=GA1.1.105795692.1715098241; _ga_L91K8YPXHK=GS1.1.1715098241.1.0.1715098241.60.0.0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 16:10:43 GMT
content-type: image/png
content-length: 159307
last-modified: Fri, 30 Apr 2021 21:04:50 GMT
etag: "608c70f2-26e4b"
cache-control: public, max-age=31536000
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
server: cloudflare
cf-ray: 88027b4e9ce056c3-OSL
alt-svc: h3=":443"; ma=86400
|
|
| pi.pardot.com/pd.js | 34.237.219.119 | 200 OK | 2.0 kB |
IP34.237.219.119:443
Requested byhttps://www2.unitedbenefits.com/l/860683/2022-10-27/24f2wm CertificateIssuerDigiCert Inc Subjectpi.pardot.com FingerprintC7:79:07:0B:D2:B5:18:84:AA:DB:FD:FB:90:47:D7:13:63:AB:D3:B1 ValidityTue, 25 Jul 2023 00:00:00 GMT - Tue, 23 Jul 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (5453) Hash0c0335550002dc4c4db0de1d9dcf043d 0bd0357faa46e9ff78d939b196d43ed47c701160 41402adfc915ad6dfd6328c06c8038763d25fe603e63beba4a2638a2bbc03136
GET /pd.js HTTP/1.1
Host: pi.pardot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www2.unitedbenefits.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 16:10:43 GMT
Content-Type: application/javascript
Content-Length: 1988
Connection: keep-alive
last-modified: Tue, 07 May 2024 05:28:15 GMT
etag: "15f4-gzip"
accept-ranges: bytes
cache-control: max-age=63072000
expires: Thu, 07 May 2026 16:10:43 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
X-Pardot-Route: 16b0ab393667a33fe86adedc3141e88c
|
|
| www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js | 142.250.74.35 | 200 OK | 206 kB |
URL GET HTTP/3www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js IP142.250.74.35:443
Requested byhttps://www.google.com/recaptcha/api2/webworker.js?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeJavaScript source, ASCII text, with very long lines (631) Size206 kB (205803 bytes) Hashe2e79d6b927169d9e0e57e3baecc0993 1299473950b2999ba0b7f39bd5e4a60eafd1819d 231336ed913a5ebd4445b85486e053caf2b81cab91318241375f3f7a245b6c6b
GET /recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://unitedbenefits.com
DNT: 1
Connection: keep-alive
Referer: https://unitedbenefits.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 205803
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 01:56:11 GMT
expires: Fri, 02 May 2025 01:56:11 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 22 Apr 2024 21:03:35 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 483272
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-L91K8YPXHK&cid=105795692.1715098241>m=45je4510v9118794201za200&aip=1&dma=1&dma_cps=sypham&gcd=13l3l3l2l1&npa=1&z=1077522111 | 142.250.74.163 | 200 OK | 42 B |
URL GET HTTP/2www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-L91K8YPXHK&cid=105795692.1715098241>m=45je4510v9118794201za200&aip=1&dma=1&dma_cps=sypham&gcd=13l3l3l2l1&npa=1&z=1077522111 IP142.250.74.163:443
Requested byhttps://unitedbenefits.com/ CertificateIssuerGoogle Trust Services LLC Subject*.google.no Fingerprint7D:68:6D:B1:32:34:52:51:20:C9:53:FF:B9:B7:8F:7E:05:F9:F5:97 ValidityTue, 16 Apr 2024 04:31:00 GMT - Tue, 09 Jul 2024 04:30:59 GMT
File typeGIF image data, version 89a, 1 x 1 Hashd89746888da2d9510b64a9f031eaecd5 d5fceb6532643d0d84ffe09c40c481ecdf59e15a ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-L91K8YPXHK&cid=105795692.1715098241>m=45je4510v9118794201za200&aip=1&dma=1&dma_cps=sypham&gcd=13l3l3l2l1&npa=1&z=1077522111 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://unitedbenefits.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 07 May 2024 16:10:43 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| pi.pardot.com/analytics?ver=3&pi_form=true&visitor_id=611525928&visitor_id_sign=7c96a3b38c55b72a59161cb0e062e049baf416dfba5c213acb36be42762062d6c3d44fb28a08dc3cd7f27d07ce11e8a5fd724474&pi_opt_in=&campaign_id=185344&account_id=861683&title=&url=https%3A%2F%2Fwww2.unitedbenefits.com%2Fl%2F860683%2F2022-10-27%2F24f2wm&referrer=https%3A%2F%2Funitedbenefits.com%2F | 34.237.219.119 | 200 OK | 541 B |
URL GET HTTP/1.1pi.pardot.com/analytics?ver=3&pi_form=true&visitor_id=611525928&visitor_id_sign=7c96a3b38c55b72a59161cb0e062e049baf416dfba5c213acb36be42762062d6c3d44fb28a08dc3cd7f27d07ce11e8a5fd724474&pi_opt_in=&campaign_id=185344&account_id=861683&title=&url=https%3A%2F%2Fwww2.unitedbenefits.com%2Fl%2F860683%2F2022-10-27%2F24f2wm&referrer=https%3A%2F%2Funitedbenefits.com%2F IP34.237.219.119:443
Requested byhttps://www2.unitedbenefits.com/l/860683/2022-10-27/24f2wm CertificateIssuerDigiCert Inc Subjectpi.pardot.com FingerprintC7:79:07:0B:D2:B5:18:84:AA:DB:FD:FB:90:47:D7:13:63:AB:D3:B1 ValidityTue, 25 Jul 2023 00:00:00 GMT - Tue, 23 Jul 2024 23:59:59 GMT
Hash1c6c4aa0b20bf642a8e8c8cf199b8c2c b7ed2ca2aa5eaf43e6193e69f6dd6cb45321b89d a126138a3b55b38f6b2b126fe4ac5ceed40b66c4b285111aa16da5e843a8b3e0
GET /analytics?ver=3&pi_form=true&visitor_id=611525928&visitor_id_sign=7c96a3b38c55b72a59161cb0e062e049baf416dfba5c213acb36be42762062d6c3d44fb28a08dc3cd7f27d07ce11e8a5fd724474&pi_opt_in=&campaign_id=185344&account_id=861683&title=&url=https%3A%2F%2Fwww2.unitedbenefits.com%2Fl%2F860683%2F2022-10-27%2F24f2wm&referrer=https%3A%2F%2Funitedbenefits.com%2F HTTP/1.1
Host: pi.pardot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www2.unitedbenefits.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 16:10:43 GMT
Content-Type: text/javascript; charset=utf-8
Content-Length: 541
Connection: keep-alive
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
x-pardot-rsp: 0/0/1
strict-transport-security: max-age=31536000; includeSubDomains
p3p: CP="NOI DSP COR CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT", policyref="/w3c/p3p.xml", CP="NOI DSP COR CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT", policyref="/w3c/p3p.xml"
set-cookie: pardot=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0
visitor_id860683=611525928; expires=Fri, 05-May-2034 16:10:43 GMT; Max-Age=315360000; path=/; domain=.pardot.com; secure; SameSite=None
visitor_id860683-hash=7c96a3b38c55b72a59161cb0e062e049baf416dfba5c213acb36be42762062d6c3d44fb28a08dc3cd7f27d07ce11e8a5fd724474; expires=Fri, 05-May-2034 16:10:43 GMT; Max-Age=315360000; path=/; domain=.pardot.com; secure; SameSite=None
vary: Accept-Encoding,User-Agent
content-encoding: gzip
X-Pardot-Route: 9b06e8e2308c32c7bf9ba8adfb7be2e1
|
|
| www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/styles__ltr.css | 142.250.74.35 | 200 OK | 25 kB |
URL GET HTTP/3www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/styles__ltr.css IP142.250.74.35:443
Requested byhttps://www.google.com/recaptcha/api2/anchor?ar=1&k=6Ldny74hAAAAAA5sBrnF3yVnmGAHZfgUsgdFw2VO&co=aHR0cHM6Ly91bml0ZWRiZW5lZml0cy5jb206NDQz&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&theme=light&size=invisible&cb=bwlyhlnlmuwd CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeASCII text, with very long lines (56412), with no line terminators Hash2c00b9f417b688224937053cd0c284a5 17b4c18ebc129055dd25f214c3f11e03e9df2d82 1e754b107428162c65a26d399b66db3daaea09616bf8620d9de4bc689ce48eed
GET /recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/styles__ltr.css HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 24617
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 03 May 2024 01:09:29 GMT
expires: Sat, 03 May 2025 01:09:29 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 22 Apr 2024 21:03:35 GMT
content-type: text/css
vary: Accept-Encoding
age: 399674
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js | 142.250.74.35 | 200 OK | 206 kB |
URL GET HTTP/3www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js IP142.250.74.35:443
Requested byhttps://www.google.com/recaptcha/api2/webworker.js?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeJavaScript source, ASCII text, with very long lines (631) Size206 kB (205803 bytes) Hashe2e79d6b927169d9e0e57e3baecc0993 1299473950b2999ba0b7f39bd5e4a60eafd1819d 231336ed913a5ebd4445b85486e053caf2b81cab91318241375f3f7a245b6c6b
GET /recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 205803
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 01:56:11 GMT
expires: Fri, 02 May 2025 01:56:11 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 22 Apr 2024 21:03:35 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 483272
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www2.unitedbenefits.com/analytics?conly=true&pi_form=true&visitor_id=611525928&visitor_id_sign=7c96a3b38c55b72a59161cb0e062e049baf416dfba5c213acb36be42762062d6c3d44fb28a08dc3cd7f27d07ce11e8a5fd724474&pi_opt_in=&campaign_id=185344&account_id=861683&title=&url=https://www2.unitedbenefits.com/l/860683/2022-10-27/24f2wm&referrer=https://unitedbenefits.com/ | 18.208.125.13 | 200 OK | 50 B |
URL GET HTTP/1.1www2.unitedbenefits.com/analytics?conly=true&pi_form=true&visitor_id=611525928&visitor_id_sign=7c96a3b38c55b72a59161cb0e062e049baf416dfba5c213acb36be42762062d6c3d44fb28a08dc3cd7f27d07ce11e8a5fd724474&pi_opt_in=&campaign_id=185344&account_id=861683&title=&url=https://www2.unitedbenefits.com/l/860683/2022-10-27/24f2wm&referrer=https://unitedbenefits.com/ IP18.208.125.13:443
Requested byhttps://www2.unitedbenefits.com/l/860683/2022-10-27/24f2wm CertificateIssuerLet's Encrypt Subjectwww2.unitedbenefits.com FingerprintBA:D3:99:4E:CA:FE:E0:C7:DA:21:66:93:AF:C8:D9:88:8C:B3:C1:08 ValiditySun, 31 Mar 2024 18:34:24 GMT - Sat, 29 Jun 2024 18:34:23 GMT
Hash6b8e0bfbea5feca6911b8e14e1921e9d ea3e8e6051154a2a83278000909577c7c6e013fa dcf430710cdd1359115293f45d5023b2a560aef8a2c1e59d578b8b1e10a216d3
GET /analytics?conly=true&pi_form=true&visitor_id=611525928&visitor_id_sign=7c96a3b38c55b72a59161cb0e062e049baf416dfba5c213acb36be42762062d6c3d44fb28a08dc3cd7f27d07ce11e8a5fd724474&pi_opt_in=&campaign_id=185344&account_id=861683&title=&url=https://www2.unitedbenefits.com/l/860683/2022-10-27/24f2wm&referrer=https://unitedbenefits.com/ HTTP/1.1
Host: www2.unitedbenefits.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www2.unitedbenefits.com/l/860683/2022-10-27/24f2wm
Cookie: visitor_id860683=611525928; visitor_id860683-hash=7c96a3b38c55b72a59161cb0e062e049baf416dfba5c213acb36be42762062d6c3d44fb28a08dc3cd7f27d07ce11e8a5fd724474; __cf_bm=d0s7idUUipeRdKaN7lTE6Nz02euD_p1e.OxmR.f8jtA-1715098240-1.0.1.1-l_E5nccixmpAo6y0Y0jQEgXx2opc7JyTo5UHr4_gm7OFB5v7xugW7fapG_qRSj5nRtcyMKHA5FShOdrZVcHI8w; _ga_XPQN3GXXDM=GS1.1.1715098241.1.0.1715098241.0.0.0; _ga=GA1.1.105795692.1715098241; _ga_L91K8YPXHK=GS1.1.1715098241.1.0.1715098241.60.0.0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 16:10:44 GMT
Content-Type: text/javascript; charset=utf-8
Content-Length: 50
Connection: keep-alive
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
x-pardot-rsp: 0/0/1
p3p: CP="CAO DSP AND SO ON" policyref="/w3c/p3p.xml", CP="NOI DSP COR CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT", policyref="/w3c/p3p.xml"
set-cookie: pardot=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0
visitor_id860683=611525928; expires=Fri, 05-May-2034 16:10:44 GMT; Max-Age=315360000; path=/; secure; SameSite=None
visitor_id860683-hash=7c96a3b38c55b72a59161cb0e062e049baf416dfba5c213acb36be42762062d6c3d44fb28a08dc3cd7f27d07ce11e8a5fd724474; expires=Fri, 05-May-2034 16:10:44 GMT; Max-Age=315360000; path=/; secure; SameSite=None
vary: User-Agent
X-Pardot-Route: 9b06e8e2308c32c7bf9ba8adfb7be2e1
|
|
| unitedbenefits.com/wp-content/uploads/2020/04/cropped-ub-favicon-192x192.png | 141.193.213.10 | 200 OK | 18 kB |
URL GET HTTP/3unitedbenefits.com/wp-content/uploads/2020/04/cropped-ub-favicon-192x192.png IP141.193.213.10:443 ASN#209242 Cloudflare London, LLC
Requested byhttps://unitedbenefits.com/ CertificateIssuerLet's Encrypt Subjectunitedbenefits.com Fingerprint26:39:73:63:03:87:F7:66:F2:C7:22:5E:F8:90:40:9A:C6:23:5E:D1 ValiditySat, 30 Mar 2024 10:02:56 GMT - Fri, 28 Jun 2024 10:02:55 GMT
File typePNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced Hash604f6e1049e824c68e105b7155372f02 e16fbd38b3aa6c17ba3de05f117a17222c0228d2 f1eca27807404ff7bf60548a710169a51ac6689903b6f61361b3c7d628a2218c
GET /wp-content/uploads/2020/04/cropped-ub-favicon-192x192.png HTTP/1.1
Host: unitedbenefits.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://unitedbenefits.com/
Cookie: __cf_bm=d0s7idUUipeRdKaN7lTE6Nz02euD_p1e.OxmR.f8jtA-1715098240-1.0.1.1-l_E5nccixmpAo6y0Y0jQEgXx2opc7JyTo5UHr4_gm7OFB5v7xugW7fapG_qRSj5nRtcyMKHA5FShOdrZVcHI8w; _ga_XPQN3GXXDM=GS1.1.1715098241.1.0.1715098241.0.0.0; _ga=GA1.1.105795692.1715098241; _ga_L91K8YPXHK=GS1.1.1715098241.1.0.1715098241.60.0.0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 16:10:44 GMT
content-type: image/png
content-length: 18465
last-modified: Fri, 30 Apr 2021 21:03:01 GMT
etag: "608c7085-4821"
cache-control: public, max-age=31536000
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
server: cloudflare
cf-ray: 88027b5578bd56c3-OSL
alt-svc: h3=":443"; ma=86400
|
|
| fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 | 216.58.207.227 | 200 OK | 15 kB |
URL GET HTTP/3fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 IP216.58.207.227:443
Requested byhttps://www.google.com/recaptcha/api2/anchor?ar=1&k=6Ldny74hAAAAAA5sBrnF3yVnmGAHZfgUsgdFw2VO&co=aHR0cHM6Ly91bml0ZWRiZW5lZml0cy5jb206NDQz&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&theme=light&size=invisible&cb=bwlyhlnlmuwd CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15344, version 1.0 Hash5d4aeb4e5f5ef754e307d7ffaef688bd 06db651cdf354c64a7383ea9c77024ef4fb4cef8 3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 03 May 2024 16:31:04 GMT
expires: Sat, 03 May 2025 16:31:04 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
age: 344380
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 | 216.58.207.227 | 200 OK | 16 kB |
URL GET HTTP/3fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 IP216.58.207.227:443
Requested byhttps://www.google.com/recaptcha/api2/anchor?ar=1&k=6Ldny74hAAAAAA5sBrnF3yVnmGAHZfgUsgdFw2VO&co=aHR0cHM6Ly91bml0ZWRiZW5lZml0cy5jb206NDQz&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&theme=light&size=invisible&cb=bwlyhlnlmuwd CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15552, version 1.0 Hash285467176f7fe6bb6a9c6873b3dad2cc ea04e4ff5142ddd69307c183def721a160e0a64e 5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 01:50:52 GMT
expires: Fri, 02 May 2025 01:50:52 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
age: 483592
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.google.com/js/bg/pAY4Jgi82uSAEr2jIgpI2fcbEoZ0MRbNANtMr9BudIc.js | 142.250.74.132 | 200 OK | 7.5 kB |
URL GET HTTP/3www.google.com/js/bg/pAY4Jgi82uSAEr2jIgpI2fcbEoZ0MRbNANtMr9BudIc.js IP142.250.74.132:443
Requested byhttps://www.google.com/recaptcha/api2/anchor?ar=1&k=6Ldny74hAAAAAA5sBrnF3yVnmGAHZfgUsgdFw2VO&co=aHR0cHM6Ly91bml0ZWRiZW5lZml0cy5jb206NDQz&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&theme=light&size=invisible&cb=bwlyhlnlmuwd CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint7C:B7:E1:97:03:6E:82:B6:52:F8:EC:C6:C6:50:D9:DD:80:47:E6:A0 ValidityTue, 16 Apr 2024 03:18:53 GMT - Tue, 09 Jul 2024 03:18:52 GMT
File typeJavaScript source, ASCII text, with very long lines (17588) Hash81965d03d416a0601f29281d353056f3 e3d92db7e0287b8cc16ef71877d276e7ee0030d6 a406382608bcdae48012bda3220a48d9f71b1286743116cd00db4cafd06e7487
GET /js/bg/pAY4Jgi82uSAEr2jIgpI2fcbEoZ0MRbNANtMr9BudIc.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Ldny74hAAAAAA5sBrnF3yVnmGAHZfgUsgdFw2VO&co=aHR0cHM6Ly91bml0ZWRiZW5lZml0cy5jb206NDQz&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&theme=light&size=invisible&cb=bwlyhlnlmuwd
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="botguard-scs"
report-to: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]}
content-length: 7452
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 02:15:50 GMT
expires: Fri, 02 May 2025 02:15:50 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 29 Apr 2024 11:30:00 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 482094
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.google.com/recaptcha/api2/webworker.js?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m | 142.250.74.132 | 200 OK | 2.3 kB |
URL GET HTTP/3www.google.com/recaptcha/api2/webworker.js?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m IP142.250.74.132:443
Requested byhttps://www.google.com/recaptcha/api2/anchor?ar=1&k=6Ldny74hAAAAAA5sBrnF3yVnmGAHZfgUsgdFw2VO&co=aHR0cHM6Ly91bml0ZWRiZW5lZml0cy5jb206NDQz&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&theme=light&size=invisible&cb=bwlyhlnlmuwd CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint7C:B7:E1:97:03:6E:82:B6:52:F8:EC:C6:C6:50:D9:DD:80:47:E6:A0 ValidityTue, 16 Apr 2024 03:18:53 GMT - Tue, 09 Jul 2024 03:18:52 GMT
Hash318383482baab4f7d17507373bd8a84f 8804baca752ff3c292113e637e66a770af980145 791703d6d03807b8efb032a6d6d512f21e878c701bd25e218bedac25bb79a8e2
GET /recaptcha/api2/webworker.js?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Ldny74hAAAAAA5sBrnF3yVnmGAHZfgUsgdFw2VO&co=aHR0cHM6Ly91bml0ZWRiZW5lZml0cy5jb206NDQz&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&theme=light&size=invisible&cb=bwlyhlnlmuwd
Sec-Fetch-Dest: worker
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/javascript; charset=utf-8
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
expires: Tue, 07 May 2024 16:10:44 GMT
date: Tue, 07 May 2024 16:10:44 GMT
cache-control: private, max-age=300
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| unitedbenefits.com/wp-content/uploads/2020/04/cropped-ub-favicon-32x32.png | 141.193.213.10 | 200 OK | 1.2 kB |
URL GET HTTP/3unitedbenefits.com/wp-content/uploads/2020/04/cropped-ub-favicon-32x32.png IP141.193.213.10:443 ASN#209242 Cloudflare London, LLC
Requested byhttps://unitedbenefits.com/ CertificateIssuerLet's Encrypt Subjectunitedbenefits.com Fingerprint26:39:73:63:03:87:F7:66:F2:C7:22:5E:F8:90:40:9A:C6:23:5E:D1 ValiditySat, 30 Mar 2024 10:02:56 GMT - Fri, 28 Jun 2024 10:02:55 GMT
File typePNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced Hash97d1f62b5a63bee257cc7ba001cdd9a1 3a81fb483eefff9193515d9cea2d0832cbd0d1c3 b78d763081855539d4ccf31187bf1fbcf47ef9708f556e5423726575cd5fd348
GET /wp-content/uploads/2020/04/cropped-ub-favicon-32x32.png HTTP/1.1
Host: unitedbenefits.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://unitedbenefits.com/
Cookie: __cf_bm=d0s7idUUipeRdKaN7lTE6Nz02euD_p1e.OxmR.f8jtA-1715098240-1.0.1.1-l_E5nccixmpAo6y0Y0jQEgXx2opc7JyTo5UHr4_gm7OFB5v7xugW7fapG_qRSj5nRtcyMKHA5FShOdrZVcHI8w; _ga_XPQN3GXXDM=GS1.1.1715098241.1.0.1715098241.0.0.0; _ga=GA1.1.105795692.1715098241; _ga_L91K8YPXHK=GS1.1.1715098241.1.0.1715098241.60.0.0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 16:10:44 GMT
content-type: image/png
content-length: 1246
last-modified: Fri, 30 Apr 2021 21:04:30 GMT
etag: "608c70de-4de"
cache-control: public, max-age=31536000
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
server: cloudflare
cf-ray: 88027b5578c756c3-OSL
alt-svc: h3=":443"; ma=86400
|
|
| pi.pardot.com/pd.js | 34.237.219.119 | 200 OK | 2.0 kB |
IP34.237.219.119:443
Requested byhttps://www2.unitedbenefits.com/l/860683/2022-10-27/24f2wm CertificateIssuerDigiCert Inc Subjectpi.pardot.com FingerprintC7:79:07:0B:D2:B5:18:84:AA:DB:FD:FB:90:47:D7:13:63:AB:D3:B1 ValidityTue, 25 Jul 2023 00:00:00 GMT - Tue, 23 Jul 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (5453) Hash0c0335550002dc4c4db0de1d9dcf043d 0bd0357faa46e9ff78d939b196d43ed47c701160 41402adfc915ad6dfd6328c06c8038763d25fe603e63beba4a2638a2bbc03136
GET /pd.js HTTP/1.1
Host: pi.pardot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://unitedbenefits.com/
Cookie: visitor_id860683=611525928; visitor_id860683-hash=7c96a3b38c55b72a59161cb0e062e049baf416dfba5c213acb36be42762062d6c3d44fb28a08dc3cd7f27d07ce11e8a5fd724474
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 16:10:44 GMT
Content-Type: application/javascript
Content-Length: 1988
Connection: keep-alive
last-modified: Tue, 07 May 2024 05:28:15 GMT
etag: "15f4-gzip"
accept-ranges: bytes
cache-control: max-age=63072000
expires: Thu, 07 May 2026 16:10:44 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
X-Pardot-Route: 16b0ab393667a33fe86adedc3141e88c
|
|
| pi.pardot.com/analytics?ver=3&visitor_id=&visitor_id_sign=&pi_opt_in=&campaign_id=9402&account_id=861683&title=United%20Benefits%20-%20United%20Benefits&url=https%3A%2F%2Funitedbenefits.com%2F&referrer= | 34.237.219.119 | 200 OK | 541 B |
URL GET HTTP/1.1pi.pardot.com/analytics?ver=3&visitor_id=&visitor_id_sign=&pi_opt_in=&campaign_id=9402&account_id=861683&title=United%20Benefits%20-%20United%20Benefits&url=https%3A%2F%2Funitedbenefits.com%2F&referrer= IP34.237.219.119:443
Requested byhttps://unitedbenefits.com/ CertificateIssuerDigiCert Inc Subjectpi.pardot.com FingerprintC7:79:07:0B:D2:B5:18:84:AA:DB:FD:FB:90:47:D7:13:63:AB:D3:B1 ValidityTue, 25 Jul 2023 00:00:00 GMT - Tue, 23 Jul 2024 23:59:59 GMT
Hash5d9f7d414cc1d7da1ac7af7da18a3ef5 43b14569f12824c8a6ef309240ca648b3a5dfb98 39aa6db9cf50758cfbfb2fbd6972e429f6a4802b71e3efa0a6c8c40427d94146
GET /analytics?ver=3&visitor_id=&visitor_id_sign=&pi_opt_in=&campaign_id=9402&account_id=861683&title=United%20Benefits%20-%20United%20Benefits&url=https%3A%2F%2Funitedbenefits.com%2F&referrer= HTTP/1.1
Host: pi.pardot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://unitedbenefits.com/
Cookie: visitor_id860683=611525928; visitor_id860683-hash=7c96a3b38c55b72a59161cb0e062e049baf416dfba5c213acb36be42762062d6c3d44fb28a08dc3cd7f27d07ce11e8a5fd724474
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 16:10:44 GMT
Content-Type: text/javascript; charset=utf-8
Content-Length: 541
Connection: keep-alive
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
x-pardot-rsp: 0/0/1
strict-transport-security: max-age=31536000; includeSubDomains
p3p: CP="NOI DSP COR CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT", policyref="/w3c/p3p.xml", CP="NOI DSP COR CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT", policyref="/w3c/p3p.xml"
set-cookie: pardot=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0
visitor_id860683=611525928; expires=Fri, 05-May-2034 16:10:44 GMT; Max-Age=315360000; path=/; domain=.pardot.com; secure; SameSite=None
visitor_id860683-hash=7c96a3b38c55b72a59161cb0e062e049baf416dfba5c213acb36be42762062d6c3d44fb28a08dc3cd7f27d07ce11e8a5fd724474; expires=Fri, 05-May-2034 16:10:44 GMT; Max-Age=315360000; path=/; domain=.pardot.com; secure; SameSite=None
lpv860683=aHR0cHM6Ly91bml0ZWRiZW5lZml0cy5jb20v; expires=Tue, 07-May-2024 16:40:44 GMT; Max-Age=1800; path=/; secure; SameSite=None
vary: Accept-Encoding,User-Agent
content-encoding: gzip
X-Pardot-Route: 9b06e8e2308c32c7bf9ba8adfb7be2e1
|
|
| unitedbenefits.com/wp-content/plugins/monarch/css/style.css?ver=1.4.14 | 141.193.213.10 | 200 OK | 50 B |
URL GET HTTP/3unitedbenefits.com/wp-content/plugins/monarch/css/style.css?ver=1.4.14 IP141.193.213.10:443 ASN#209242 Cloudflare London, LLC
Requested byhttps://unitedbenefits.com/ CertificateIssuerLet's Encrypt Subjectunitedbenefits.com Fingerprint26:39:73:63:03:87:F7:66:F2:C7:22:5E:F8:90:40:9A:C6:23:5E:D1 ValiditySat, 30 Mar 2024 10:02:56 GMT - Fri, 28 Jun 2024 10:02:55 GMT
Hash6b8e0bfbea5feca6911b8e14e1921e9d ea3e8e6051154a2a83278000909577c7c6e013fa dcf430710cdd1359115293f45d5023b2a560aef8a2c1e59d578b8b1e10a216d3
GET /wp-content/plugins/monarch/css/style.css?ver=1.4.14 HTTP/1.1
Host: unitedbenefits.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://unitedbenefits.com/
Cookie: __cf_bm=d0s7idUUipeRdKaN7lTE6Nz02euD_p1e.OxmR.f8jtA-1715098240-1.0.1.1-l_E5nccixmpAo6y0Y0jQEgXx2opc7JyTo5UHr4_gm7OFB5v7xugW7fapG_qRSj5nRtcyMKHA5FShOdrZVcHI8w
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 16:10:41 GMT
content-type: text/css
vary: Accept-Encoding, Accept-Encoding, Accept-Encoding, Accept-Encoding
last-modified: Tue, 13 Jun 2023 20:40:29 GMT
etag: W/"6488d43d-1c56d"
cache-control: public, max-age=31536000
access-control-allow-origin: *
content-encoding: br
cf-cache-status: MISS
server: cloudflare
cf-ray: 88027b45cc0e56c3-OSL
alt-svc: h3=":443"; ma=86400
|
|
| unitedbenefits.com/wp-content/themes/Divi/js/scripts.min.js?ver=4.25.0 | 141.193.213.10 | 200 OK | 274 kB |
URL GET HTTP/3unitedbenefits.com/wp-content/themes/Divi/js/scripts.min.js?ver=4.25.0 IP141.193.213.10:443 ASN#209242 Cloudflare London, LLC
Requested byhttps://unitedbenefits.com/ CertificateIssuerLet's Encrypt Subjectunitedbenefits.com Fingerprint26:39:73:63:03:87:F7:66:F2:C7:22:5E:F8:90:40:9A:C6:23:5E:D1 ValiditySat, 30 Mar 2024 10:02:56 GMT - Fri, 28 Jun 2024 10:02:55 GMT
File typeJavaScript source, ASCII text, with very long lines (65467) Size274 kB (274331 bytes) Hasha6c12c80997a7d9442fa53ea547df2e1 3ba1392d0cecdb97873d29b94a8ad6a564a03655 fdbc96b3ba67411276777a3f05e0cae61cbaf58daa6c9eb620dc0f0d7300c7b2
GET /wp-content/themes/Divi/js/scripts.min.js?ver=4.25.0 HTTP/1.1
Host: unitedbenefits.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://unitedbenefits.com/
Cookie: __cf_bm=d0s7idUUipeRdKaN7lTE6Nz02euD_p1e.OxmR.f8jtA-1715098240-1.0.1.1-l_E5nccixmpAo6y0Y0jQEgXx2opc7JyTo5UHr4_gm7OFB5v7xugW7fapG_qRSj5nRtcyMKHA5FShOdrZVcHI8w
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 07 May 2024 16:10:42 GMT
content-type: application/javascript
vary: Accept-Encoding, Accept-Encoding, Accept-Encoding, Accept-Encoding
last-modified: Fri, 19 Apr 2024 07:14:39 GMT
etag: W/"662219df-42f9b"
cache-control: public, max-age=31536000
access-control-allow-origin: *
content-encoding: br
cf-cache-status: MISS
server: cloudflare
cf-ray: 88027b45fc5b56c3-OSL
alt-svc: h3=":443"; ma=86400
|
|
| unitedbenefits.com/wp-content/themes/united-benefits/style.css?ver=4.3.2.1584991335 | 141.193.213.10 | 200 OK | 568 B |
URL GET HTTP/3unitedbenefits.com/wp-content/themes/united-benefits/style.css?ver=4.3.2.1584991335 IP141.193.213.10:443 ASN#209242 Cloudflare London, LLC
Requested byhttps://unitedbenefits.com/ CertificateIssuerLet's Encrypt Subjectunitedbenefits.com Fingerprint26:39:73:63:03:87:F7:66:F2:C7:22:5E:F8:90:40:9A:C6:23:5E:D1 ValiditySat, 30 Mar 2024 10:02:56 GMT - Fri, 28 Jun 2024 10:02:55 GMT
File typeASCII text, with very long lines (580), with no line terminators Hash7cc7b50ee281c4010540a006028a217c 729e2ee4f69fd2e05042fe2de7d50ebc116d433a 999ec60daaad8d46040ef25337395c9b783e7c5ad9f3278e4d47547f98d174a1
GET /wp-content/themes/united-benefits/style.css?ver=4.3.2.1584991335 HTTP/1.1
Host: unitedbenefits.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://unitedbenefits.com/
Cookie: __cf_bm=d0s7idUUipeRdKaN7lTE6Nz02euD_p1e.OxmR.f8jtA-1715098240-1.0.1.1-l_E5nccixmpAo6y0Y0jQEgXx2opc7JyTo5UHr4_gm7OFB5v7xugW7fapG_qRSj5nRtcyMKHA5FShOdrZVcHI8w
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 07 May 2024 16:10:41 GMT
content-type: text/css
vary: Accept-Encoding, Accept-Encoding, Accept-Encoding, Accept-Encoding
last-modified: Thu, 03 Mar 2022 00:30:12 GMT
etag: W/"62200c14-238"
cache-control: public, max-age=31536000
access-control-allow-origin: *
content-encoding: br
cf-cache-status: MISS
server: cloudflare
cf-ray: 88027b45ec3456c3-OSL
alt-svc: h3=":443"; ma=86400
|
|
| unitedbenefits.com/wp-content/themes/Divi/core/admin/js/common.js?ver=4.25.0 | 141.193.213.10 | 200 OK | 1.3 kB |
URL GET HTTP/3unitedbenefits.com/wp-content/themes/Divi/core/admin/js/common.js?ver=4.25.0 IP141.193.213.10:443 ASN#209242 Cloudflare London, LLC
Requested byhttps://unitedbenefits.com/ CertificateIssuerLet's Encrypt Subjectunitedbenefits.com Fingerprint26:39:73:63:03:87:F7:66:F2:C7:22:5E:F8:90:40:9A:C6:23:5E:D1 ValiditySat, 30 Mar 2024 10:02:56 GMT - Fri, 28 Jun 2024 10:02:55 GMT
File typeJavaScript source, ASCII text, with very long lines (1504), with no line terminators Hash7bc5428fa6437f2a1b20b414aae17df4 7856b096ba35f489bdc69190bdd86b6790e661af 1331301ce99cbb52f3a8e865c343d84ebb43664acb79339230e008ba4488f1da
GET /wp-content/themes/Divi/core/admin/js/common.js?ver=4.25.0 HTTP/1.1
Host: unitedbenefits.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://unitedbenefits.com/
Cookie: __cf_bm=d0s7idUUipeRdKaN7lTE6Nz02euD_p1e.OxmR.f8jtA-1715098240-1.0.1.1-l_E5nccixmpAo6y0Y0jQEgXx2opc7JyTo5UHr4_gm7OFB5v7xugW7fapG_qRSj5nRtcyMKHA5FShOdrZVcHI8w
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 07 May 2024 16:10:41 GMT
content-type: application/javascript
vary: Accept-Encoding, Accept-Encoding, Accept-Encoding, Accept-Encoding
last-modified: Fri, 19 Apr 2024 07:14:39 GMT
etag: W/"662219df-53f"
cache-control: public, max-age=31536000
access-control-allow-origin: *
content-encoding: br
cf-cache-status: HIT
server: cloudflare
cf-ray: 88027b45fc5e56c3-OSL
alt-svc: h3=":443"; ma=86400
|
|
| unitedbenefits.com/wp-content/themes/Divi/includes/builder/feature/dynamic-assets/assets/js/jquery.fitvids.js?ver=4.25.0 | 141.193.213.10 | 200 OK | 3.3 kB |
URL GET HTTP/3unitedbenefits.com/wp-content/themes/Divi/includes/builder/feature/dynamic-assets/assets/js/jquery.fitvids.js?ver=4.25.0 IP141.193.213.10:443 ASN#209242 Cloudflare London, LLC
Requested byhttps://unitedbenefits.com/ CertificateIssuerLet's Encrypt Subjectunitedbenefits.com Fingerprint26:39:73:63:03:87:F7:66:F2:C7:22:5E:F8:90:40:9A:C6:23:5E:D1 ValiditySat, 30 Mar 2024 10:02:56 GMT - Fri, 28 Jun 2024 10:02:55 GMT
File typeJavaScript source, ASCII text, with very long lines (3451), with no line terminators Hashf00fd1e052b687c1a604336c5e7215bc fc6395e0ed79402eafcc09fa98e05389b95f5efc a46d9604f1bd7a00e6419d464b6d9fa94838102bea4b3a3b3ce0f08257587866
GET /wp-content/themes/Divi/includes/builder/feature/dynamic-assets/assets/js/jquery.fitvids.js?ver=4.25.0 HTTP/1.1
Host: unitedbenefits.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://unitedbenefits.com/
Cookie: __cf_bm=d0s7idUUipeRdKaN7lTE6Nz02euD_p1e.OxmR.f8jtA-1715098240-1.0.1.1-l_E5nccixmpAo6y0Y0jQEgXx2opc7JyTo5UHr4_gm7OFB5v7xugW7fapG_qRSj5nRtcyMKHA5FShOdrZVcHI8w
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 07 May 2024 16:10:41 GMT
content-type: application/javascript
vary: Accept-Encoding, Accept-Encoding, Accept-Encoding, Accept-Encoding
last-modified: Fri, 19 Apr 2024 07:14:39 GMT
etag: W/"662219df-d15"
cache-control: public, max-age=31536000
access-control-allow-origin: *
content-encoding: br
cf-cache-status: MISS
server: cloudflare
cf-ray: 88027b45fc5c56c3-OSL
alt-svc: h3=":443"; ma=86400
|
|
| unitedbenefits.com/wp-content/plugins/formidable-pro/js/frm.min.js?ver=6.8.3 | 141.193.213.10 | 200 OK | 336 kB |
URL GET HTTP/3unitedbenefits.com/wp-content/plugins/formidable-pro/js/frm.min.js?ver=6.8.3 IP141.193.213.10:443 ASN#209242 Cloudflare London, LLC
Requested byhttps://unitedbenefits.com/ CertificateIssuerLet's Encrypt Subjectunitedbenefits.com Fingerprint26:39:73:63:03:87:F7:66:F2:C7:22:5E:F8:90:40:9A:C6:23:5E:D1 ValiditySat, 30 Mar 2024 10:02:56 GMT - Fri, 28 Jun 2024 10:02:55 GMT
Size336 kB (335534 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /wp-content/plugins/formidable-pro/js/frm.min.js?ver=6.8.3 HTTP/1.1
Host: unitedbenefits.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://unitedbenefits.com/
Cookie: __cf_bm=d0s7idUUipeRdKaN7lTE6Nz02euD_p1e.OxmR.f8jtA-1715098240-1.0.1.1-l_E5nccixmpAo6y0Y0jQEgXx2opc7JyTo5UHr4_gm7OFB5v7xugW7fapG_qRSj5nRtcyMKHA5FShOdrZVcHI8w
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 07 May 2024 16:10:41 GMT
content-type: application/javascript
vary: Accept-Encoding, Accept-Encoding, Accept-Encoding, Accept-Encoding
last-modified: Mon, 25 Mar 2024 15:33:41 GMT
etag: W/"66019955-51eae"
cache-control: public, max-age=31536000
access-control-allow-origin: *
content-encoding: br
cf-cache-status: MISS
server: cloudflare
cf-ray: 88027b45fc6256c3-OSL
alt-svc: h3=":443"; ma=86400
|
|
| unitedbenefits.com/wp-content/themes/Divi/core/admin/fonts/modules/all/modules.woff | 141.193.213.10 | 200 OK | 92 kB |
URL GET HTTP/3unitedbenefits.com/wp-content/themes/Divi/core/admin/fonts/modules/all/modules.woff IP141.193.213.10:443 ASN#209242 Cloudflare London, LLC
Requested byhttps://unitedbenefits.com/ CertificateIssuerLet's Encrypt Subjectunitedbenefits.com Fingerprint26:39:73:63:03:87:F7:66:F2:C7:22:5E:F8:90:40:9A:C6:23:5E:D1 ValiditySat, 30 Mar 2024 10:02:56 GMT - Fri, 28 Jun 2024 10:02:55 GMT
File typeWeb Open Font Format, TrueType, length 92084, version 2.4 Hash4f7c51948ce1b802a13ebbccec151d0c 5b1d3cd0929108da4b6334c4a487db08c9520f1d fe67b77ac7e0ef4b482dafb86adfa403db1b89a2f337d2dc8bd1278cfe975196
GET /wp-content/themes/Divi/core/admin/fonts/modules/all/modules.woff HTTP/1.1
Host: unitedbenefits.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://unitedbenefits.com/
Cookie: __cf_bm=d0s7idUUipeRdKaN7lTE6Nz02euD_p1e.OxmR.f8jtA-1715098240-1.0.1.1-l_E5nccixmpAo6y0Y0jQEgXx2opc7JyTo5UHr4_gm7OFB5v7xugW7fapG_qRSj5nRtcyMKHA5FShOdrZVcHI8w; _ga_XPQN3GXXDM=GS1.1.1715098241.1.0.1715098241.0.0.0; _ga=GA1.1.105795692.1715098241; _ga_L91K8YPXHK=GS1.1.1715098241.1.0.1715098241.60.0.0
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 07 May 2024 16:10:42 GMT
content-type: font/woff
content-length: 92084
last-modified: Fri, 19 Apr 2024 07:14:39 GMT
etag: "662219df-167b4"
cache-control: public, max-age=31536000
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
server: cloudflare
cf-ray: 88027b4c380756c3-OSL
alt-svc: h3=":443"; ma=86400
|
|
| www.gstatic.com/recaptcha/api2/logo_48.png | 142.250.74.35 | 200 OK | 2.2 kB |
URL GET HTTP/3www.gstatic.com/recaptcha/api2/logo_48.png IP142.250.74.35:443
Requested byhttps://www.google.com/recaptcha/api2/anchor?ar=1&k=6Ldny74hAAAAAA5sBrnF3yVnmGAHZfgUsgdFw2VO&co=aHR0cHM6Ly91bml0ZWRiZW5lZml0cy5jb206NDQz&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&theme=light&size=invisible&cb=bwlyhlnlmuwd CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typePNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced Hashef9941290c50cd3866e2ba6b793f010d 4736508c795667dcea21f8d864233031223b7832 1b9efb22c938500971aac2b2130a475fa23684dd69e43103894968df83145b8a
GET /recaptcha/api2/logo_48.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/styles__ltr.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
accept-ranges: bytes
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 2228
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 02:54:07 GMT
expires: Thu, 09 May 2024 02:54:07 GMT
cache-control: public, max-age=604800
age: 479797
last-modified: Tue, 03 Mar 2020 20:15:00 GMT
content-type: image/png
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www2.unitedbenefits.com/analytics?conly=true&visitor_id=611525928&visitor_id_sign=7c96a3b38c55b72a59161cb0e062e049baf416dfba5c213acb36be42762062d6c3d44fb28a08dc3cd7f27d07ce11e8a5fd724474&pi_opt_in=&campaign_id=9402&account_id=861683&title=United%20Benefits%20-%20United%20Benefits&url=https://unitedbenefits.com/&referrer= | 18.208.125.13 | 200 OK | 50 B |
URL GET HTTP/1.1www2.unitedbenefits.com/analytics?conly=true&visitor_id=611525928&visitor_id_sign=7c96a3b38c55b72a59161cb0e062e049baf416dfba5c213acb36be42762062d6c3d44fb28a08dc3cd7f27d07ce11e8a5fd724474&pi_opt_in=&campaign_id=9402&account_id=861683&title=United%20Benefits%20-%20United%20Benefits&url=https://unitedbenefits.com/&referrer= IP18.208.125.13:443
Requested byhttps://unitedbenefits.com/ CertificateIssuerLet's Encrypt Subjectwww2.unitedbenefits.com FingerprintBA:D3:99:4E:CA:FE:E0:C7:DA:21:66:93:AF:C8:D9:88:8C:B3:C1:08 ValiditySun, 31 Mar 2024 18:34:24 GMT - Sat, 29 Jun 2024 18:34:23 GMT
File typeASCII text, with no line terminators Hashecedd9867442dbd540672d650ad30963 7fe8cb9d097860fe9694f19f90946dededee10b8 73ba177529cdb7feb6e52099f10e0cea2f9308f349a7ff990b9bdb7e1e4a76c3
GET /analytics?conly=true&visitor_id=611525928&visitor_id_sign=7c96a3b38c55b72a59161cb0e062e049baf416dfba5c213acb36be42762062d6c3d44fb28a08dc3cd7f27d07ce11e8a5fd724474&pi_opt_in=&campaign_id=9402&account_id=861683&title=United%20Benefits%20-%20United%20Benefits&url=https://unitedbenefits.com/&referrer= HTTP/1.1
Host: www2.unitedbenefits.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://unitedbenefits.com/
Cookie: visitor_id860683=611525928; visitor_id860683-hash=7c96a3b38c55b72a59161cb0e062e049baf416dfba5c213acb36be42762062d6c3d44fb28a08dc3cd7f27d07ce11e8a5fd724474; __cf_bm=d0s7idUUipeRdKaN7lTE6Nz02euD_p1e.OxmR.f8jtA-1715098240-1.0.1.1-l_E5nccixmpAo6y0Y0jQEgXx2opc7JyTo5UHr4_gm7OFB5v7xugW7fapG_qRSj5nRtcyMKHA5FShOdrZVcHI8w; _ga_XPQN3GXXDM=GS1.1.1715098241.1.0.1715098241.0.0.0; _ga=GA1.1.105795692.1715098241; _ga_L91K8YPXHK=GS1.1.1715098241.1.0.1715098241.60.0.0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 16:10:44 GMT
Content-Type: text/javascript; charset=utf-8
Content-Length: 50
Connection: keep-alive
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
x-pardot-rsp: 0/0/1
p3p: CP="CAO DSP AND SO ON" policyref="/w3c/p3p.xml", CP="NOI DSP COR CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT", policyref="/w3c/p3p.xml"
set-cookie: pardot=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0
visitor_id860683=611525928; expires=Fri, 05-May-2034 16:10:44 GMT; Max-Age=315360000; path=/; secure; SameSite=None
visitor_id860683-hash=7c96a3b38c55b72a59161cb0e062e049baf416dfba5c213acb36be42762062d6c3d44fb28a08dc3cd7f27d07ce11e8a5fd724474; expires=Fri, 05-May-2034 16:10:44 GMT; Max-Age=315360000; path=/; secure; SameSite=None
vary: User-Agent
X-Pardot-Route: 9b06e8e2308c32c7bf9ba8adfb7be2e1
|
|
| www.google.com/recaptcha/api2/anchor?ar=1&k=6Ldny74hAAAAAA5sBrnF3yVnmGAHZfgUsgdFw2VO&co=aHR0cHM6Ly91bml0ZWRiZW5lZml0cy5jb206NDQz&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&theme=light&size=invisible&cb=bwlyhlnlmuwd | 142.250.74.132 | 200 OK | 45 kB |
URL GET HTTP/3www.google.com/recaptcha/api2/anchor?ar=1&k=6Ldny74hAAAAAA5sBrnF3yVnmGAHZfgUsgdFw2VO&co=aHR0cHM6Ly91bml0ZWRiZW5lZml0cy5jb206NDQz&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&theme=light&size=invisible&cb=bwlyhlnlmuwd IP142.250.74.132:443
Requested byhttps://unitedbenefits.com/ CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint7C:B7:E1:97:03:6E:82:B6:52:F8:EC:C6:C6:50:D9:DD:80:47:E6:A0 ValidityTue, 16 Apr 2024 03:18:53 GMT - Tue, 09 Jul 2024 03:18:52 GMT
File typeHTML document, ASCII text, with very long lines (36029) Hashe4be0459e64865570a3f5b2f26798633 672814479ab6a6d16d76fbee4f67ef0755dfc4e2 d2a12ad299f6578e9b6820793dba25c1151a265d17c7ff33e1ed4d1125498f36
GET /recaptcha/api2/anchor?ar=1&k=6Ldny74hAAAAAA5sBrnF3yVnmGAHZfgUsgdFw2VO&co=aHR0cHM6Ly91bml0ZWRiZW5lZml0cy5jb206NDQz&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&theme=light&size=invisible&cb=bwlyhlnlmuwd HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://unitedbenefits.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/html; charset=utf-8
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Tue, 07 May 2024 16:10:43 GMT
content-security-policy: script-src 'nonce-CshupSxru9GUvcWlTHEKgQ' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| | 141.193.213.10 | 200 OK | 197 kB |
URL User Request GET HTTP/2IP141.193.213.10:443 ASN#209242 Cloudflare London, LLC
CertificateIssuerLet's Encrypt Subjectunitedbenefits.com Fingerprint26:39:73:63:03:87:F7:66:F2:C7:22:5E:F8:90:40:9A:C6:23:5E:D1 ValiditySat, 30 Mar 2024 10:02:56 GMT - Fri, 28 Jun 2024 10:02:55 GMT
Size197 kB (197080 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: unitedbenefits.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 07 May 2024 16:10:40 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding, Accept-Encoding, Accept-Encoding, Accept-Encoding,Cookie
expires: Thu, 19 Nov 1981 08:52:00 GMT
pragma: no-cache
link: <https://unitedbenefits.com/wp-json/>; rel="https://api.w.org/", <https://unitedbenefits.com/wp-json/wp/v2/pages/8>; rel="alternate"; type="application/json", <https://unitedbenefits.com/>; rel=shortlink
x-powered-by: WP Engine
x-cacheable: SHORT
cache-control: max-age=600, must-revalidate
x-cache: HIT: 1
x-cache-group: normal
content-encoding: br
cf-cache-status: DYNAMIC
set-cookie: __cf_bm=d0s7idUUipeRdKaN7lTE6Nz02euD_p1e.OxmR.f8jtA-1715098240-1.0.1.1-l_E5nccixmpAo6y0Y0jQEgXx2opc7JyTo5UHr4_gm7OFB5v7xugW7fapG_qRSj5nRtcyMKHA5FShOdrZVcHI8w; path=/; expires=Tue, 07-May-24 16:40:40 GMT; domain=.unitedbenefits.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 88027b403c55b517-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| unitedbenefits.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1 | 141.193.213.10 | 200 OK | 88 kB |
URL GET HTTP/3unitedbenefits.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1 IP141.193.213.10:443 ASN#209242 Cloudflare London, LLC
Requested byhttps://unitedbenefits.com/ CertificateIssuerLet's Encrypt Subjectunitedbenefits.com Fingerprint26:39:73:63:03:87:F7:66:F2:C7:22:5E:F8:90:40:9A:C6:23:5E:D1 ValiditySat, 30 Mar 2024 10:02:56 GMT - Fri, 28 Jun 2024 10:02:55 GMT
File typeJavaScript source, ASCII text, with very long lines (65447) Hash826eb77e86b02ab7724fe3d0141ff87c 79cd3587d565afe290076a8d36c31c305a573d18 cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf
GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1
Host: unitedbenefits.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://unitedbenefits.com/
Cookie: __cf_bm=d0s7idUUipeRdKaN7lTE6Nz02euD_p1e.OxmR.f8jtA-1715098240-1.0.1.1-l_E5nccixmpAo6y0Y0jQEgXx2opc7JyTo5UHr4_gm7OFB5v7xugW7fapG_qRSj5nRtcyMKHA5FShOdrZVcHI8w
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 07 May 2024 16:10:41 GMT
content-type: application/javascript
vary: Accept-Encoding, Accept-Encoding, Accept-Encoding, Accept-Encoding
last-modified: Mon, 28 Aug 2023 17:14:23 GMT
etag: W/"64ecd5ef-15601"
cache-control: public, max-age=31536000
access-control-allow-origin: *
content-encoding: br
cf-cache-status: MISS
server: cloudflare
cf-ray: 88027b45ec4256c3-OSL
alt-svc: h3=":443"; ma=86400
|
|
| unitedbenefits.com/wp-content/plugins/widget-google-reviews/assets/js/public-main.js?ver=3.6.1 | 141.193.213.10 | 200 OK | 36 kB |
URL GET HTTP/3unitedbenefits.com/wp-content/plugins/widget-google-reviews/assets/js/public-main.js?ver=3.6.1 IP141.193.213.10:443 ASN#209242 Cloudflare London, LLC
Requested byhttps://unitedbenefits.com/ CertificateIssuerLet's Encrypt Subjectunitedbenefits.com Fingerprint26:39:73:63:03:87:F7:66:F2:C7:22:5E:F8:90:40:9A:C6:23:5E:D1 ValiditySat, 30 Mar 2024 10:02:56 GMT - Fri, 28 Jun 2024 10:02:55 GMT
File typeJavaScript source, ASCII text, with very long lines (566) Hash7fa39e0d21e13195096dcaae7482ab00 ce51d92a0d6bc1097813d6ccb9b6f83d13b07599 4cf3005ef1260617e7ca0e3c26acb67ccc5a09cdde30e3b832ef2293c44703f4
GET /wp-content/plugins/widget-google-reviews/assets/js/public-main.js?ver=3.6.1 HTTP/1.1
Host: unitedbenefits.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://unitedbenefits.com/
Cookie: __cf_bm=d0s7idUUipeRdKaN7lTE6Nz02euD_p1e.OxmR.f8jtA-1715098240-1.0.1.1-l_E5nccixmpAo6y0Y0jQEgXx2opc7JyTo5UHr4_gm7OFB5v7xugW7fapG_qRSj5nRtcyMKHA5FShOdrZVcHI8w
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 07 May 2024 16:10:41 GMT
content-type: application/javascript
vary: Accept-Encoding, Accept-Encoding, Accept-Encoding, Accept-Encoding
last-modified: Mon, 25 Mar 2024 15:31:50 GMT
etag: W/"660198e6-8a95"
cache-control: public, max-age=31536000
access-control-allow-origin: *
content-encoding: br
cf-cache-status: MISS
server: cloudflare
cf-ray: 88027b45ec3656c3-OSL
alt-svc: h3=":443"; ma=86400
|
|
| unitedbenefits.com/wp-includes/css/dist/block-library/style.min.css?ver=6.4.3 | 141.193.213.10 | 200 OK | 110 kB |
URL GET HTTP/3unitedbenefits.com/wp-includes/css/dist/block-library/style.min.css?ver=6.4.3 IP141.193.213.10:443 ASN#209242 Cloudflare London, LLC
Requested byhttps://unitedbenefits.com/ CertificateIssuerLet's Encrypt Subjectunitedbenefits.com Fingerprint26:39:73:63:03:87:F7:66:F2:C7:22:5E:F8:90:40:9A:C6:23:5E:D1 ValiditySat, 30 Mar 2024 10:02:56 GMT - Fri, 28 Jun 2024 10:02:55 GMT
Size110 kB (110147 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /wp-includes/css/dist/block-library/style.min.css?ver=6.4.3 HTTP/1.1
Host: unitedbenefits.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://unitedbenefits.com/
Cookie: __cf_bm=d0s7idUUipeRdKaN7lTE6Nz02euD_p1e.OxmR.f8jtA-1715098240-1.0.1.1-l_E5nccixmpAo6y0Y0jQEgXx2opc7JyTo5UHr4_gm7OFB5v7xugW7fapG_qRSj5nRtcyMKHA5FShOdrZVcHI8w; _ga_XPQN3GXXDM=GS1.1.1715098241.1.0.1715098241.0.0.0; _ga=GA1.1.105795692.1715098241; _ga_L91K8YPXHK=GS1.1.1715098241.1.0.1715098241.60.0.0
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 07 May 2024 16:10:42 GMT
content-type: text/css
vary: Accept-Encoding, Accept-Encoding, Accept-Encoding, Accept-Encoding
last-modified: Wed, 24 Jan 2024 19:02:28 GMT
etag: W/"65b15ec4-1ae43"
cache-control: public, max-age=31536000
access-control-allow-origin: *
content-encoding: br
cf-cache-status: MISS
server: cloudflare
cf-ray: 88027b4bdf4d56c3-OSL
alt-svc: h3=":443"; ma=86400
|
|
| unitedbenefits.com/wp-content/plugins/monarch/js/idle-timer.min.js?ver=1.4.14 | 141.193.213.10 | 200 OK | 2.6 kB |
URL GET HTTP/3unitedbenefits.com/wp-content/plugins/monarch/js/idle-timer.min.js?ver=1.4.14 IP141.193.213.10:443 ASN#209242 Cloudflare London, LLC
Requested byhttps://unitedbenefits.com/ CertificateIssuerLet's Encrypt Subjectunitedbenefits.com Fingerprint26:39:73:63:03:87:F7:66:F2:C7:22:5E:F8:90:40:9A:C6:23:5E:D1 ValiditySat, 30 Mar 2024 10:02:56 GMT - Fri, 28 Jun 2024 10:02:55 GMT
File typeJavaScript source, ASCII text, with very long lines (2703), with no line terminators Hash9061aa7f72eb02994c7d02b0a7db904f 8b1da5d9a444f842403cd7e2bb5c9409b28132d9 e6a9ca699b75134a14c7af8c59d122625095714a3c31fa75140f83e1b3cbc8ea
GET /wp-content/plugins/monarch/js/idle-timer.min.js?ver=1.4.14 HTTP/1.1
Host: unitedbenefits.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://unitedbenefits.com/
Cookie: __cf_bm=d0s7idUUipeRdKaN7lTE6Nz02euD_p1e.OxmR.f8jtA-1715098240-1.0.1.1-l_E5nccixmpAo6y0Y0jQEgXx2opc7JyTo5UHr4_gm7OFB5v7xugW7fapG_qRSj5nRtcyMKHA5FShOdrZVcHI8w
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 07 May 2024 16:10:41 GMT
content-type: application/javascript
vary: Accept-Encoding, Accept-Encoding, Accept-Encoding, Accept-Encoding
last-modified: Tue, 13 Jun 2023 20:40:29 GMT
etag: W/"6488d43d-a4b"
cache-control: public, max-age=31536000
access-control-allow-origin: *
content-encoding: br
cf-cache-status: MISS
server: cloudflare
cf-ray: 88027b45fc5656c3-OSL
alt-svc: h3=":443"; ma=86400
|
|
| fonts.googleapis.com/css2?family=Montserrat&display=swap | 142.250.74.106 | 200 OK | 1.9 kB |
URL GET HTTP/3fonts.googleapis.com/css2?family=Montserrat&display=swap IP142.250.74.106:443
Requested byhttps://www2.unitedbenefits.com/l/860683/2022-10-27/24f2wm CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79 ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT
File typeASCII text, with very long lines (1964), with no line terminators Hash239a618ffafef4ef52b8420e3a840889 eb3c9591cf15cfbc0708770f3680d7ecf7a2029b 1a65d1c5600a83400ac4e08ed56f140e81590a6761a6cdc03187da69555196aa
GET /css2?family=Montserrat&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www2.unitedbenefits.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 07 May 2024 16:10:42 GMT
date: Tue, 07 May 2024 16:10:42 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| unitedbenefits.com/wp-content/uploads/2023/10/Website-Header-Handshake.jpg | 141.193.213.10 | 200 OK | 1.6 MB |
URL GET HTTP/3unitedbenefits.com/wp-content/uploads/2023/10/Website-Header-Handshake.jpg IP141.193.213.10:443 ASN#209242 Cloudflare London, LLC
Requested byhttps://unitedbenefits.com/ CertificateIssuerLet's Encrypt Subjectunitedbenefits.com Fingerprint26:39:73:63:03:87:F7:66:F2:C7:22:5E:F8:90:40:9A:C6:23:5E:D1 ValiditySat, 30 Mar 2024 10:02:56 GMT - Fri, 28 Jun 2024 10:02:55 GMT
Size1.6 MB (1594364 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /wp-content/uploads/2023/10/Website-Header-Handshake.jpg HTTP/1.1
Host: unitedbenefits.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://unitedbenefits.com/
Cookie: __cf_bm=d0s7idUUipeRdKaN7lTE6Nz02euD_p1e.OxmR.f8jtA-1715098240-1.0.1.1-l_E5nccixmpAo6y0Y0jQEgXx2opc7JyTo5UHr4_gm7OFB5v7xugW7fapG_qRSj5nRtcyMKHA5FShOdrZVcHI8w; _ga_XPQN3GXXDM=GS1.1.1715098241.1.0.1715098241.0.0.0; _ga=GA1.1.105795692.1715098241; _ga_L91K8YPXHK=GS1.1.1715098241.1.0.1715098241.60.0.0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 07 May 2024 16:10:41 GMT
content-type: image/jpeg
content-length: 1594364
access-control-allow-origin: *
cache-control: public, max-age=31536000
cf-bgj: imgq:100,h2pri
cf-polished: origSize=1796105
etag: "651ad79d-1b6809"
last-modified: Mon, 02 Oct 2023 14:45:49 GMT
vary: Accept-Encoding
cf-cache-status: HIT
accept-ranges: bytes
server: cloudflare
cf-ray: 88027b4bef5956c3-OSL
alt-svc: h3=":443"; ma=86400
|
|
0.0.0.0