r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 2b424d8c01b211c56d5b44b92e4e4153
b1fdab18f23271eee58ae1482f8af25badc2ffda
1c82a5fd2bc3f16a66becb5e1924e8c9edd39386622dc2e5ed296442f4307b2b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1C82A5FD2BC3F16A66BECB5E1924E8C9EDD39386622DC2E5ED296442F4307B2B"
Last-Modified: Fri, 14 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6546
Expires: Sun, 16 Oct 2022 02:58:14 GMT
Date: Sun, 16 Oct 2022 01:09:08 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash c9df6b36bf16969ac566c1b798362e4a
e56eff34815153ae019a4bf63eb9746dd9ae2e5b
33c1175144ab2be42c9de383f7893a6e60cd1f21f282eacb413d546331db3fa0
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length, Retry-After, Alert, Content-Type, Backoff
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Sun, 16 Oct 2022 00:50:20 GMT
Expires: Sun, 16 Oct 2022 01:16:41 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 6cb1d4b545e7beb4ead790454f4807c6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: ULvkRXzjLD2PgQu7-acGjG34YJX5E-96225KWoTEgZUwVrTMnYoudA==
Age: 1128
toy.card-inventory.com/ga/click/2-347265171-1696-14517-28357-26245-f95802ec1a-pc1c8cca68
302 Found 114 B URL HTTP/1.1 toy.card-inventory.com/ga/click/2-347265171-1696-14517-28357-26245-f95802ec1a-pc1c8cca68
IP
File type HTML document text\012- HTML document, ASCII text, with no line terminators
Hash 5ef7e26a13dcb202e62b067674608b1c
12281635d8def01dd9de5363b9cb82720245e2fc
235ecac0b2a456db55018d353a2a7e202ff690aebe404525bf986752def5532e
GET /ga/click/2-347265171-1696-14517-28357-26245-f95802ec1a-pc1c8cca68 HTTP/1.1
Host: toy.card-inventory.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
Date: Sun, 16 Oct 2022 01:08:40 GMT
Server: Apache/2.4.51 (Unix) OpenSSL/1.0.2k-fips PHP/7.3.29
Status: 302 Found
X-Rack-Cache: miss
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Content-Type: text/html; charset=utf-8
X-Request-Id: afd527e45e005f9e27785b2f5b6d85d9
Location: https://mwebnice.com/7605/186/2/?subid=greensfaf
X-UA-Compatible: IE=Edge,chrome=1
X-Runtime: 0.020974
Expires: Mon, 01 Jan 1990 00:00:00 GMT
X-Powered-By: Phusion Passenger(R) 6.0.9
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a57d0f62d9bd29668b94a513fa45d18e
d7cb263502e21f9235b4523a596e2138d22042ec
df7acd4fe34cc9c4945a5d83ef538105a73dfc1a8b485bc7a62488c5406b1294
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DF7ACD4FE34CC9C4945A5D83EF538105A73DFC1A8B485BC7A62488C5406B1294"
Last-Modified: Sat, 15 Oct 2022 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20033
Expires: Sun, 16 Oct 2022 06:43:01 GMT
Date: Sun, 16 Oct 2022 01:09:08 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
IP
File type PEM certificate\012- , ASCII text
Hash 67d5a988edcda47bc3b3b3f65d32b4b6
d4f0e0da8b3690cc7da925026d3414b68c7d954f
55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: 4aiJD/G2X9WmOgN2QxKeo4g1+C7zENVk2hs/nIFeLmqBt7OOmxWNyJucMoI4OXl42bR8VKk/gz8=
x-amz-request-id: DYTVPXRW4JHXHBSR
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sun, 16 Oct 2022 00:34:50 GMT
age: 2058
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 16 Oct 2022 01:09:08 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600
Date: Sun, 16 Oct 2022 01:07:43 GMT
Expires: Sun, 16 Oct 2022 02:04:44 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 e49f22f18c16784c0f42291e768d1daa.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: KFTYiUgCvasKjauVm3WapBiRZjr5D_3ciHQtoOT0B339ejR_7_LjOQ==
Age: 85
ocsp.digicert.com/
200 OK 471 B IP
Hash 301aafc13bc66315321d9476df002258
e6bfd29899543fcd4d1b332623757bbad355306f
c64315afdfcf146b16942d981588ed912650472c5e2bba7b6f8dee396d820860
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3369
Cache-Control: max-age=114835
Content-Type: application/ocsp-response
Date: Sun, 16 Oct 2022 01:09:09 GMT
Etag: "634a6a1f-1d7"
Expires: Mon, 17 Oct 2022 09:03:04 GMT
Last-Modified: Sat, 15 Oct 2022 08:06:55 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: l8a2cO56S9r2S9s+eRsdug==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: fKg0R9u1Aw88d6UCg0XtC1kOJs8=
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 3d9744ecc3bbf617921f5a907a8079a8
aca5828b7d006eb70025514b2089632246a5bf45
15487ec1036f2f4b437fe81cce52534887027f85c850c85ff1ff50c030f7a41b
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=133449
Date: Sun, 16 Oct 2022 01:09:09 GMT
Etag: "634abffe-1d7"
Expires: Mon, 17 Oct 2022 14:13:18 GMT
Last-Modified: Sat, 15 Oct 2022 14:13:18 GMT
Server: nginx
X-Cache: Miss from cloudfront
Via: 1.1 aac54e3fe9825ce24d51e0204433c2c0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 9xK-nkUVUuF4ViY09oYQxzkB2g-SgELFd_8TyTbO0ghPnwFqDPz3rw==
gardn.ultracartstore.com/aff/D7CF04F5A0F2FB017FF5CD00FE1EF400/index.html?&utm_source=maxweb&utm_medium=email&utm_term=email&utm_content=fg_bowel&utm_campaign=fg_jerusalem&subid=7605_sessid20221016010930125
302 Found 197 B URL HTTP/1.1 gardn.ultracartstore.com/aff/D7CF04F5A0F2FB017FF5CD00FE1EF400/index.html?&utm_source=maxweb&utm_medium=email&utm_term=email&utm_content=fg_bowel&utm_campaign=fg_jerusalem&subid=7605_sessid20221016010930125
IP
File type HTML document, ASCII text
Hash 235c14b4b6128e52af4c2006d89dbfd4
42c98bdd197a469372671e1b6cbbaabc1fe7024b
57dd6a2934c81e02f267dc013ce03c49f1bd727ef5fcbb765369aaca4ff35d32
GET /aff/D7CF04F5A0F2FB017FF5CD00FE1EF400/index.html?&utm_source=maxweb&utm_medium=email&utm_term=email&utm_content=fg_bowel&utm_campaign=fg_jerusalem&subid=7605_sessid20221016010930125 HTTP/1.1
Host: gardn.ultracartstore.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 302 Found
Date: Sun, 16 Oct 2022 01:09:09 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 197
Connection: keep-alive
Set-Cookie: AWSALB=46uoeG6dsnTnMQbx+/x0mQ/tmzp48rxmb3JipZW0lIgDuJbgJ9a3RYkU+2rCLTD+ONBW+3oLCA+5hojNJhBhZQT5kVmcwt4oXmcKY75yO64bd8UtJuFTMEtL/142; Expires=Sun, 23 Oct 2022 01:09:09 GMT; Path=/
AWSALBCORS=46uoeG6dsnTnMQbx+/x0mQ/tmzp48rxmb3JipZW0lIgDuJbgJ9a3RYkU+2rCLTD+ONBW+3oLCA+5hojNJhBhZQT5kVmcwt4oXmcKY75yO64bd8UtJuFTMEtL/142; Expires=Sun, 23 Oct 2022 01:09:09 GMT; Path=/; SameSite=None; Secure
JSESSIONID=abcBP4yvLYDSvTogQ_-V4; path=/; HttpOnly
LBJSESSIONID=abcBP4yvLYDSvTogQ_-V4.n213; path=/; HttpOnly
Server: Apache
P3P: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Location: https://bartonnutrition.com/ptn/21?utm_campaign=fg_jerusalem&utm_medium=email&utm_content=fg_bowel&utm_source=maxweb&subid=7605_sessid20221016010930125&utm_term=email&AFFID=474832
Vary: Accept-Encoding
Content-Encoding: gzip
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a239968682150ba8fb61f7b2101edba3
35724b1e7f236cddd2e9c542a0da63d9e915c310
e2cb65724d3870506a1efcfd90f43c61f87bb694b0c2cb07568bf1aaea7d1d98
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E2CB65724D3870506A1EFCFD90F43C61F87BB694B0C2CB07568BF1AAEA7D1D98"
Last-Modified: Fri, 14 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3653
Expires: Sun, 16 Oct 2022 02:10:03 GMT
Date: Sun, 16 Oct 2022 01:09:10 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a239968682150ba8fb61f7b2101edba3
35724b1e7f236cddd2e9c542a0da63d9e915c310
e2cb65724d3870506a1efcfd90f43c61f87bb694b0c2cb07568bf1aaea7d1d98
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E2CB65724D3870506A1EFCFD90F43C61F87BB694B0C2CB07568BF1AAEA7D1D98"
Last-Modified: Fri, 14 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3653
Expires: Sun, 16 Oct 2022 02:10:03 GMT
Date: Sun, 16 Oct 2022 01:09:10 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a239968682150ba8fb61f7b2101edba3
35724b1e7f236cddd2e9c542a0da63d9e915c310
e2cb65724d3870506a1efcfd90f43c61f87bb694b0c2cb07568bf1aaea7d1d98
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E2CB65724D3870506A1EFCFD90F43C61F87BB694B0C2CB07568BF1AAEA7D1D98"
Last-Modified: Fri, 14 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3653
Expires: Sun, 16 Oct 2022 02:10:03 GMT
Date: Sun, 16 Oct 2022 01:09:10 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a239968682150ba8fb61f7b2101edba3
35724b1e7f236cddd2e9c542a0da63d9e915c310
e2cb65724d3870506a1efcfd90f43c61f87bb694b0c2cb07568bf1aaea7d1d98
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E2CB65724D3870506A1EFCFD90F43C61F87BB694B0C2CB07568BF1AAEA7D1D98"
Last-Modified: Fri, 14 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3653
Expires: Sun, 16 Oct 2022 02:10:03 GMT
Date: Sun, 16 Oct 2022 01:09:10 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a239968682150ba8fb61f7b2101edba3
35724b1e7f236cddd2e9c542a0da63d9e915c310
e2cb65724d3870506a1efcfd90f43c61f87bb694b0c2cb07568bf1aaea7d1d98
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E2CB65724D3870506A1EFCFD90F43C61F87BB694B0C2CB07568BF1AAEA7D1D98"
Last-Modified: Fri, 14 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3653
Expires: Sun, 16 Oct 2022 02:10:03 GMT
Date: Sun, 16 Oct 2022 01:09:10 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9cf0a31c-c85d-44f5-805c-d721336ee8be.jpeg
200 OK 9.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9cf0a31c-c85d-44f5-805c-d721336ee8be.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 8134d82ebf2ab56f6263871af7dddd04
04f84545a02a942336e70de3c4bf25dafcb8552b
e85d244c6a2aaa6fd45303d88a01ae8cacb1efa0f8cda21f2fe48b53d8ca3a97
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9cf0a31c-c85d-44f5-805c-d721336ee8be.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9524
x-amzn-requestid: 5bbf3c66-5b84-4783-884f-b5f677c834fe
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Z-WZKGQfIAMFbVA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6348d107-57a5d87b0a9b44842ca2808d;Sampled=0
x-amzn-remapped-date: Fri, 14 Oct 2022 03:01:27 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: TlCP-tVS6w3UjqI-z3QggnoUcZpexq8Jq-qJ4ti0XrHK5Pa_TF139Q==
via: 1.1 0cf6c59c77f0fff670ae085179adc458.cloudfront.net (CloudFront), 1.1 35575576af8067e30cfb17c6b9fde8e2.cloudfront.net (CloudFront), 1.1 google
date: Sat, 15 Oct 2022 03:57:10 GMT
age: 76320
etag: "04f84545a02a942336e70de3c4bf25dafcb8552b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6da0eaa5-24ec-42bb-8269-d235104e844f.jpeg
200 OK 9.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6da0eaa5-24ec-42bb-8269-d235104e844f.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 440811a19987ddee099df289d9b61e79
ce0f78803a81b1c6b3067c78b75bc6f1d5a7f7c1
1309e9dcb36858de70ef82900ec1ad429fbb795ddb9823fd1c290b18f4e2c1a3
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6da0eaa5-24ec-42bb-8269-d235104e844f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9623
x-amzn-requestid: b3d5bd8d-111b-4d50-9720-71f72c62f860
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Z7Q8oFLRIAMFrEw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6347951d-613e5e810f420e4c0ba3e6f6;Sampled=0
x-amzn-remapped-date: Thu, 13 Oct 2022 04:33:33 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: OA9iHADyiam26eo88jYDECifkqeBaTjsuoeHD2YOy0aZJZEGhG-xow==
via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 6396e88c437c096ef98930ce29f731a2.cloudfront.net (CloudFront), 1.1 google
date: Sat, 15 Oct 2022 21:36:56 GMT
age: 12734
etag: "ce0f78803a81b1c6b3067c78b75bc6f1d5a7f7c1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4cebbc75-2448-4faf-839b-c39ac6e47b98.jpeg
200 OK 7.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4cebbc75-2448-4faf-839b-c39ac6e47b98.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6432c2bf0bab32f918d931dd98a6e1e4
bba4f37b146e5aea2b6490f8f7da63fa61ffc849
bde0d98cb1dcd70f22cd2aee5860eb0cd824d1bb12ab18245ab8eed06a79cf1d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4cebbc75-2448-4faf-839b-c39ac6e47b98.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7337
x-amzn-requestid: 43a16c4d-c5b9-4d01-8ba4-e811b09e96b1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Z-WYqEwVoAMFe5A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6348d104-121eda8b7a73518849342e7a;Sampled=0
x-amzn-remapped-date: Fri, 14 Oct 2022 03:01:24 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: z8x5zYoU_lGHWGt8ZhQFB6G9gS1Q4YhG_AxOdLCqIpZkXp_-f45ExA==
via: 1.1 25b9a991f871f75614e7f92f97b136a4.cloudfront.net (CloudFront), 1.1 567b44ed19c8caed2570b7bcd8c70034.cloudfront.net (CloudFront), 1.1 google
date: Sat, 15 Oct 2022 03:51:32 GMT
age: 76658
etag: "bba4f37b146e5aea2b6490f8f7da63fa61ffc849"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
mwebnice.com/7605/186/2/?subid=greensfaf
302 Found 6.7 kB URL HTTP/2 mwebnice.com/7605/186/2/?subid=greensfaf
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1741327ab198a2decd032da4f0be91f9
3d9d9f0b0d64600e8b05301120393aaae04e0e6a
863e23e1f5ddb2cfbf19b76817ddb28f646fe53af97e9ca714bbd5d6078fc712
Analyzer Verdict Alert fortinet Phishing
GET /7605/186/2/?subid=greensfaf HTTP/1.1
Host: mwebnice.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 302 Found
date: Sun, 16 Oct 2022 01:09:09 GMT
content-type: text/html; charset=UTF-8
location: https://gardn.ultracartstore.com/aff/D7CF04F5A0F2FB017FF5CD00FE1EF400/index.html?&utm_source=maxweb&utm_medium=email&utm_term=email&utm_content=fg_bowel&utm_campaign=fg_jerusalem&subid=7605_sessid20221016010930125
cache-control: max-age=3600, private
pragma: no-cache
expires: Sun, 16 Oct 2022 02:09:09 GMT
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 75ace8482d340b55-OSL
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb25d7cce-c352-4b25-a8c5-aa8493d99e4c.jpeg
200 OK 9.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb25d7cce-c352-4b25-a8c5-aa8493d99e4c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e20daa74ab04b1b9859672acfc070f7e
d291947f161c928e6c6682a05835478b5f0cffc5
ebbe051930f46dd25de2a4c5795f3bdddf1513c0657cdc986c48f3dfdc90f575
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb25d7cce-c352-4b25-a8c5-aa8493d99e4c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9260
x-amzn-requestid: dfd8deb0-fc73-4321-b024-330b2a3d1759
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aENyFH9RoAMF24w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-634b29a6-0aaf75c43b51d5775bc48a95;Sampled=0
x-amzn-remapped-date: Sat, 15 Oct 2022 21:44:06 GMT
x-amz-cf-pop: SEA19-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: YVZ4EN-w7lmXTXKTy_A-9P0TW0zAqSa7j5_G2M1XnS-j3EfJSEFplw==
via: 1.1 ef6538ee7be7b17c84d06edb0f4c0a1a.cloudfront.net (CloudFront), 1.1 e95ec8f1dc02e32f0cb9e113963ceb4e.cloudfront.net (CloudFront), 1.1 google
date: Sat, 15 Oct 2022 21:58:49 GMT
age: 11421
etag: "d291947f161c928e6c6682a05835478b5f0cffc5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbdbc5b51-a9c2-4f99-ad40-8ab061924326.jpeg
200 OK 7.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbdbc5b51-a9c2-4f99-ad40-8ab061924326.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash cd94762992136ed2f4d24dd34a745154
2050cee63f8005c5d9ac1a817730ada51b323f34
4548836d8846da958f477e1df952f6da9b9640e204804a7c76194d3e061b90a4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbdbc5b51-a9c2-4f99-ad40-8ab061924326.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7082
x-amzn-requestid: 5e98988f-faad-4e52-a49f-28d5a77b15d4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aEL46HFloAMFSag=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-634b269f-6759e36c79241479181c1d05;Sampled=0
x-amzn-remapped-date: Sat, 15 Oct 2022 21:31:11 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: p2Ytir5IhFSnRKz3OJ3J6_SieMyoFAAysH8-jBf_Bh_xfKEDRGy18g==
via: 1.1 56c69262ecfa7873b40572ba8a323242.cloudfront.net (CloudFront), 1.1 31119c39c5a6dc62dfa1fe940afd7be2.cloudfront.net (CloudFront), 1.1 google
date: Sat, 15 Oct 2022 21:36:56 GMT
age: 12734
etag: "2050cee63f8005c5d9ac1a817730ada51b323f34"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
cdn.jsdelivr.net/npm/video.js@7.9.7/dist/video-js.min.css
200 OK 10 kB URL HTTP/2 cdn.jsdelivr.net/npm/video.js@7.9.7/dist/video-js.min.css
IP
File type Unicode text, UTF-8 text, with very long lines (40048), with no line terminators
Hash 71d51659d17feda35a3cf7b77c9a077d
58588e786a0394daa59fe992e3fd2b23a6485be3
1fe0f426d39d7360192b7b9d847210a202512b32da8e8e0ff38d13acb5e22e74
GET /npm/video.js@7.9.7/dist/video-js.min.css HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bartonnutrition.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: text/css; charset=utf-8
x-jsd-version: 7.9.7
x-jsd-version-type: version
etag: W/"9c74-gctcuC69YhaG/DD9GQ5wdLQgH0k"
content-encoding: gzip
accept-ranges: bytes
date: Sun, 16 Oct 2022 01:09:10 GMT
age: 4057179
x-served-by: cache-fra19138-FRA, cache-bma1641-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 10303
X-Firefox-Spdy: h2
cdn.jsdelivr.net/npm/bootstrap@4.5.3/dist/css/bootstrap.min.css
200 OK 24 kB URL HTTP/2 cdn.jsdelivr.net/npm/bootstrap@4.5.3/dist/css/bootstrap.min.css
IP
File type ASCII text, with very long lines (65326)
Hash 77348602be5574ea01c6e042f63a9b12
1a0d5e8fdf352f8e58351f85152be5d141547e11
57e4cabfd2685370ba747eb1216a753a389200451202efd886758debf0d33a2a
GET /npm/bootstrap@4.5.3/dist/css/bootstrap.min.css HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://bartonnutrition.com
Connection: keep-alive
Referer: https://bartonnutrition.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: text/css; charset=utf-8
x-jsd-version: 4.5.3
x-jsd-version-type: version
etag: W/"27288-jtLWNQ0j+FfZKAVzfQ+XxnXeZms"
content-encoding: gzip
accept-ranges: bytes
date: Sun, 16 Oct 2022 01:09:10 GMT
age: 17947504
x-served-by: cache-fra19178-FRA, cache-bma1626-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 23906
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 5f309b801fdcff49c832652cf9f67fed
f0b6a27d0995fd7fd40f23ee385f8fe1fd752c13
53663428a1b73aeee2fc68815b072ad9ced52bfd3726416aaab332c29eb3aab6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 16 Oct 2022 01:09:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 280 B IP
Hash 5fada94ec59c5b97b9510ed352eae4fe
50c92953754d931fd10d4789a2d3a651f042551e
71356493f95aaee7069bb3b06b02e9709a630276e702b9d0b418f9cc3817a367
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6587
Cache-Control: max-age=158737
Content-Type: application/ocsp-response
Date: Sun, 16 Oct 2022 01:09:10 GMT
Etag: "634b090c-118"
Expires: Mon, 17 Oct 2022 21:14:47 GMT
Last-Modified: Sat, 15 Oct 2022 19:25:00 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 280
cdn.jsdelivr.net/npm/videojs-youtube@2.6.1/dist/Youtube.min.js
200 OK 3.8 kB URL HTTP/2 cdn.jsdelivr.net/npm/videojs-youtube@2.6.1/dist/Youtube.min.js
IP
File type ASCII text, with very long lines (13944), with no line terminators
Hash 46bbf3de9ddd00713663cb35620ca495
52873697118219d31013516dc2bdd29117256d7f
fb1474ebffe51947aa8747b220f96c352242611135012603a4211314e60e4d4b
GET /npm/videojs-youtube@2.6.1/dist/Youtube.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bartonnutrition.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 2.6.1
x-jsd-version-type: version
etag: W/"3678-YVZMRnLb6HnSGpkW8sui0W2NjYk"
content-encoding: gzip
accept-ranges: bytes
date: Sun, 16 Oct 2022 01:09:10 GMT
age: 2141413
x-served-by: cache-fra19139-FRA, cache-bma1641-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 3833
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 280 B IP
Hash 5fada94ec59c5b97b9510ed352eae4fe
50c92953754d931fd10d4789a2d3a651f042551e
71356493f95aaee7069bb3b06b02e9709a630276e702b9d0b418f9cc3817a367
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6587
Cache-Control: max-age=158737
Content-Type: application/ocsp-response
Date: Sun, 16 Oct 2022 01:09:10 GMT
Etag: "634b090c-118"
Expires: Mon, 17 Oct 2022 21:14:47 GMT
Last-Modified: Sat, 15 Oct 2022 19:25:00 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 280
bartonnutrition.com/ptn/21?utm_campaign=fg_jerusalem&utm_medium=email&utm_content=fg_bowel&utm_source=maxweb&subid=7605_sessid20221016010930125&utm_term=email&AFFID=474832
200 OK 54 kB URL HTTP/2 bartonnutrition.com/ptn/21?utm_campaign=fg_jerusalem&utm_medium=email&utm_content=fg_bowel&utm_source=maxweb&subid=7605_sessid20221016010930125&utm_term=email&AFFID=474832
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (24212), with CRLF, LF line terminators
Hash 9804e3e6dda90559cbe98137e13ea50a
057b169c0450157f9e801cabc5d7fc1e354d64a8
931a6e5925069471c7820a5dfd27b0aa6e0f8dcc607d3fce2e1977946c2359ab
GET /ptn/21?utm_campaign=fg_jerusalem&utm_medium=email&utm_content=fg_bowel&utm_source=maxweb&subid=7605_sessid20221016010930125&utm_term=email&AFFID=474832 HTTP/1.1
Host: bartonnutrition.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Sun, 16 Oct 2022 01:09:10 GMT
content-type: text/html; charset=UTF-8
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
vary: Accept-Encoding
set-cookie: PHPSESSID=bf81df68caf9608c63a9473f658f549d; path=/
bp_dep=0; expires=Sat, 14-Jan-2023 01:09:10 GMT; Max-Age=7776000; path=/; domain=.bartonnutrition.com
bp_0=%7B%22client%22%3A%7B%22original_url%22%3A%22https%3A%5C%2F%5C%2Fbartonnutrition.com%5C%2Fptn%5C%2F21%3Fsubid%3D7605_sessid20221016010930125%26AFFID%3D474832%22%2C%22converting_referrer_url%22%3Anull%7D%2C%22session%22%3A%7B%22start_date%22%3A%222022-10-15T21%3A09%3A10-0400%22%2C%22session_id%22%3A%22BP-202210152109-104828%22%7D%2C%22internal%22%3A%7B%22upfront_offer%22%3Anull%2C%22upfront_creative%22%3Anull%7D%2C%22page%22%3A%7B%22traffic_source%22%3A%22MaxWeb%22%2C%22subid%22%3A%227605_sessid20221016010930125%22%2C%22facebook_pixel_id%22%3A%22368276591178798%22%2C%22lead_gen%22%3Atrue%2C%22exit-popup%22%3Afalse%2C%22double_exit-popup%22%3Afalse%2C%22web_engage%22%3Afalse%2C%22interstitial_redirect%22%3Afalse%7D%2C%22cart%22%3A%7B%22returnOnErrorUrl%22%3A%22https%3A%5C%2F%5C%2Fbartonnutrition.com%5C%2Fcheckout%22%2C%22redirectToUrl%22%3A%22https%3A%5C%2F%5C%2Fbartonnutrition.com%5C%2Fcheckout%3Ferror%3DSorry%252C%2520we%2520could%2520not%2520complete%2520your%2520order.%2520Please%2520try%2520again.%22%2C%22upsell_path%22%3A%22DEFAULT%22%2C%22items_taken%22%3A%7B%7D%2C%22items_rejected%22%3A%7B%7D%2C%22buysafe_wanted%22%3Anull%7D%2C%22order%22%3A%7B%22encrypted_hash%22%3Anull%7D%7D; path=/; domain=.bartonnutrition.com
bp_1=%7B%22returning_visitor%22%3Afalse%7D; expires=Sun, 23-Oct-2022 01:09:10 GMT; Max-Age=604800; path=/; domain=.bartonnutrition.com
bp_2=%7B%22page%22%3A%7B%22campaign_name%22%3A%22%22%2C%22campaign_medium%22%3A%22%22%2C%22campaign_source%22%3A%22%22%2C%22campaign_content%22%3A%22%22%2C%22campaign_term%22%3A%22%22%7D%7D; expires=Sat, 14-Jan-2023 01:09:10 GMT; Max-Age=7776000; path=/; domain=.bartonnutrition.com
bp_3=%7B%7D; expires=Mon, 16-Oct-2023 01:09:10 GMT; Max-Age=31536000; path=/; domain=.bartonnutrition.com
bp_c=1.0.0; expires=Mon, 16-Oct-2023 01:09:10 GMT; Max-Age=31536000; path=/; domain=.bartonnutrition.com
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lGpbPRaUQ%2FCfM3wRUVGqRYiORwyuXTiWv%2Fy5sh9t4YrWGFlKUPDP%2F8M8NrkqjSZXZ22FJvWzVlLmFw83VuQkSmHfa%2FnU3ayTdxO0AkSg3utaxH%2FrTzzRp7ujMRbpxA1c8hjTsoJ7"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 75ace8507af9b4fa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.jsdelivr.net/npm/bootstrap@4.5.3/dist/js/bootstrap.bundle.min.js
200 OK 22 kB URL HTTP/2 cdn.jsdelivr.net/npm/bootstrap@4.5.3/dist/js/bootstrap.bundle.min.js
IP
File type ASCII text, with very long lines (65299)
Hash 151629f36761d6fb6d0e0330239884a6
ebb9c30e5565793e2767735f0647bdf26fed4ab5
53c395dd774b12c572c9f1b453f7903c08de32f6958d974bc5db38634a6509d6
GET /npm/bootstrap@4.5.3/dist/js/bootstrap.bundle.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://bartonnutrition.com
Connection: keep-alive
Referer: https://bartonnutrition.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 4.5.3
x-jsd-version-type: version
etag: W/"148b8-qycDEVlyTiQh9v9ccPSOZXq+nTk"
content-encoding: gzip
accept-ranges: bytes
date: Sun, 16 Oct 2022 01:09:11 GMT
age: 15544015
x-served-by: cache-fra19179-FRA, cache-bma1626-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 21785
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/axios/0.17.1/axios.min.js
200 OK 4.2 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/axios/0.17.1/axios.min.js
IP
File type ASCII text, with very long lines (9720)
Hash a57d01890efbc29830aac21c0caeb280
92de0d4a380c9f93fb9a1d6d7abd8f24d7864c07
0f0c6980dc1e47e8abf9faa1429846bcad1cd857bcba4cebd1f0a2e958bd45b8
GET /ajax/libs/axios/0.17.1/axios.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bartonnutrition.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 16 Oct 2022 01:09:11 GMT
content-type: application/javascript; charset=utf-8
content-length: 4172
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03d6a-32b3"
last-modified: Mon, 04 May 2020 16:06:02 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
vary: Accept-Encoding
cf-cache-status: HIT
age: 11325465
expires: Fri, 06 Oct 2023 01:09:11 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=E6T%2FBB1CHLlRll6jJnpDblW2AxTvlunWJJ4ZldzlxU3c7yKL%2B7HCDTEpOdX6VD2x%2BWpEwQ0aCZGtoFkrLeu4mmEhB1LFmiKcqqjRPp3OlSJ21%2FbyYdS87DfrlBaxAhcFqoWLd42o"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 75ace857cd3c0b49-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.googleoptimize.com/optimize.js?id=OPT-PG67L8H
200 OK 43 kB URL HTTP/2 www.googleoptimize.com/optimize.js?id=OPT-PG67L8H
IP
File type ASCII text, with very long lines (2071)
Hash 2444b668819b298239457d7ec0c0c3a1
f45430df9bf026de57e445f08df8f57235bd4667
7067553be07244c5626e005e5fb3ab31cfa3121182d56152dbabae778405604c
GET /optimize.js?id=OPT-PG67L8H HTTP/1.1
Host: www.googleoptimize.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bartonnutrition.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 16 Oct 2022 01:09:11 GMT
expires: Sun, 16 Oct 2022 01:09:11 GMT
cache-control: private, max-age=900
last-modified: Sun, 16 Oct 2022 00:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 42715
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
d2zah9y47r7bi2.cloudfront.net/releases/current/tracker.js
200 OK 8.6 kB URL HTTP/1.1 d2zah9y47r7bi2.cloudfront.net/releases/current/tracker.js
IP
File type ASCII text, with very long lines (573)
Hash d301714b437040ca478343b9f2fc8cc0
cf2188c0ca0abd67d5ac40aafabf5491834bd6e0
739c8cb14055635534516232a03fa0014802a89e0adc74112aca9ffed4644bb5
GET /releases/current/tracker.js HTTP/1.1
Host: d2zah9y47r7bi2.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bartonnutrition.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 13 Sep 2018 19:10:28 GMT
x-amz-meta-cache-control: s-max-age=3600, max-age=604800, public
x-amz-meta-content-type: application/javascript
Server: AmazonS3
Content-Encoding: gzip
Date: Wed, 12 Oct 2022 18:54:25 GMT
Cache-Control: s-max-age=3600, max-age=604800, public
ETag: W/"160874c6a444216fd269e7e0e2370aa7"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 93SgzWm0UU90xcjjWT8JY45T7evR6qxOXOlpVhVHzpbE0HrHaM8bTA==
Age: 281687
cdnjs.cloudflare.com/ajax/libs/vue/2.6.11/vue.min.js
200 OK 31 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/vue/2.6.11/vue.min.js
IP
File type ASCII text, with very long lines (65449)
Hash 1a1bf25af8925cde90bdfe0d08d1a7ea
dfbbececde0b0f9da27c40fc1f55a808677ac735
e052553db93e43100ac9a938ed485ba3ddf9a24db1eba9a61a225a7947746b5a
GET /ajax/libs/vue/2.6.11/vue.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bartonnutrition.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 16 Oct 2022 01:09:11 GMT
content-type: application/javascript; charset=utf-8
content-length: 30730
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb0402c-16de6"
last-modified: Mon, 04 May 2020 16:17:48 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
vary: Accept-Encoding
cf-cache-status: HIT
age: 4599102
expires: Fri, 06 Oct 2023 01:09:11 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=J5vwyouHZn%2Bfd7NfBPAHz12YxNNydEA%2FTuSxbZ6XN0Rwnu4IYi8qDuG41U%2BVYYp21tBPKbg7cw2k%2BKCOaGc1GecIm0ChMQxAGccuQ4XrqeRNJNaJvTKUs5Ks6GP2aI07x6MdCbs9"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 75ace8581d590b49-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/webfont/1.6.28/webfontloader.js
200 OK 4.4 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/webfont/1.6.28/webfontloader.js
IP
File type ASCII text, with very long lines (2171)
Hash 44c72b9bddfecacc9114e84d685dd085
38f3ff57b9b64a38fc2153eb30564b7fc1c86349
c82afd4f2d89288b4b79244f0c24264810b11326670710ac8e28e7bfc87c7991
GET /ajax/libs/webfont/1.6.28/webfontloader.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bartonnutrition.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 16 Oct 2022 01:09:11 GMT
content-type: application/javascript; charset=utf-8
content-length: 4420
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb04030-30d9"
last-modified: Mon, 04 May 2020 16:17:52 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 277782
expires: Fri, 06 Oct 2023 01:09:11 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=OEDZ7L42yD5RAsQZCTEodP8q5OyLrKbfyAIISwXjNOb8rst9muYh6AETzSLpcavEiOWAdQzKGzSrxnT5aMn3Hlt%2FAIVWFOwBfsTmgr0Nd7RTURsEv2EbE6Q%2FgirnEOEUAq%2Ftsr%2Bh"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 75ace8581d560b49-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 280 B IP
Hash 5fada94ec59c5b97b9510ed352eae4fe
50c92953754d931fd10d4789a2d3a651f042551e
71356493f95aaee7069bb3b06b02e9709a630276e702b9d0b418f9cc3817a367
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6588
Cache-Control: max-age=158737
Content-Type: application/ocsp-response
Date: Sun, 16 Oct 2022 01:09:11 GMT
Etag: "634b090c-118"
Expires: Mon, 17 Oct 2022 21:14:48 GMT
Last-Modified: Sat, 15 Oct 2022 19:25:00 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 280
ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q1
200 OK 1.5 kB URL HTTP/1.1 ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q1
IP
Hash ac422684542b3f199d9ba8f09e20edae
1a677530d03b152060952cdb49d23060d84dfc54
7df1ed966ae7b5e4b24f0632782ac151e28d03defa1b3c1e36d38907a51d1730
POST /ca/gsatlasr3dvtlsca2022q1 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 16 Oct 2022 01:09:11 GMT
Content-Type: application/ocsp-response
Transfer-Encoding: chunked
Connection: keep-alive
Etag: "5E9A3BBCCF8EED27ABEF1593330EBA80A7BDCCCB"
Expires: Sun, 16 Oct 2022 11:00:00 GMT
Last-Modified: Sat, 15 Oct 2022 23:00:00 UTC
Cache-Control: s-maxage=3600, public, no-transform, must-revalidate
CF-Cache-Status: HIT
Age: 2945
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 75ace8584fb4b4fa-OSL
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 3039b3640f516724d3ec7e845c2f20d1
efa6a85767ab44afd629d1d82413770412abce0e
d454aa6e955985b5b78d1a190b7abc035a1e6dea0c3c5f06220bad3031717249
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 16 Oct 2022 01:09:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 8426ebc6ea5a8eff7341306307571213
c0572c10eacd7542aae1faec9dc72524b2945524
88f8774c213027ec95b18f8fa4549400b200d8921d63f219109513cdc99ed7e9
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=98131
Date: Sun, 16 Oct 2022 01:09:11 GMT
Etag: "634a360a-1d7"
Expires: Mon, 17 Oct 2022 04:24:42 GMT
Last-Modified: Sat, 15 Oct 2022 04:24:42 GMT
Server: nginx
X-Cache: Miss from cloudfront
Via: 1.1 aac54e3fe9825ce24d51e0204433c2c0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: qrgBx-thYxGfxDBDQwIMPZFadS8IR6MFgywVB_CqQu0c1d1UNC4jRw==
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 3d9744ecc3bbf617921f5a907a8079a8
aca5828b7d006eb70025514b2089632246a5bf45
15487ec1036f2f4b437fe81cce52534887027f85c850c85ff1ff50c030f7a41b
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=133447
Date: Sun, 16 Oct 2022 01:09:11 GMT
Etag: "634abffe-1d7"
Expires: Mon, 17 Oct 2022 14:13:18 GMT
Last-Modified: Sat, 15 Oct 2022 14:13:18 GMT
Server: nginx
X-Cache: Miss from cloudfront
Via: 1.1 aa34a836095df9de9d246a53dd63f1d6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: cRzLXvDTBimRp6c13Jhcdz7AUk51KiaQyHDBBaH9bWevUwtaMhp7-g==
gardn.ultracartstore.com/cgi-bin/UCAffiliateNetworkPixel
200 OK 745 B URL HTTP/1.1 gardn.ultracartstore.com/cgi-bin/UCAffiliateNetworkPixel
IP
File type ASCII text, with CRLF line terminators
Hash 8ae4d588cb35ce160ad38c4dcf486324
7a23c240725feaf4889bc7e1384cf579caf017ce
f7633cdf4d87ff4664876a24d6a6a12b43b9dfc7da681befc2fc334b41c59205
GET /cgi-bin/UCAffiliateNetworkPixel HTTP/1.1
Host: gardn.ultracartstore.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bartonnutrition.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sun, 16 Oct 2022 01:09:11 GMT
Content-Type: text/javascript; charset=utf-8
Content-Length: 745
Connection: keep-alive
Set-Cookie: AWSALB=5ATayPhuHyxjKOU9WI0ghvUTz/z2xkQ8VVX8Xwbr0vERneJIwI4gvGaXeQbDN0b8/oKn9rIVJFrQvqfyApOgLP6WaJjPxWB/xaJxJ2M98zGPMB/g+lJW4j30rLUJ; Expires=Sun, 23 Oct 2022 01:09:11 GMT; Path=/
AWSALBCORS=5ATayPhuHyxjKOU9WI0ghvUTz/z2xkQ8VVX8Xwbr0vERneJIwI4gvGaXeQbDN0b8/oKn9rIVJFrQvqfyApOgLP6WaJjPxWB/xaJxJ2M98zGPMB/g+lJW4j30rLUJ; Expires=Sun, 23 Oct 2022 01:09:11 GMT; Path=/; SameSite=None; Secure
Server: Apache
X-Content-Type-Options: nosniff
P3P: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Vary: Accept-Encoding
Content-Encoding: gzip
use.fortawesome.com/de183023.js
200 OK 4.0 kB URL HTTP/2 use.fortawesome.com/de183023.js
IP
File type ASCII text, with very long lines (9709)
Hash 26a4bec57cf6292e69e9c3b475a903a9
27300e38419d1a3312f5dc950b88a4fbcbf3397b
6d6a9ebe5af5da81cee0690cd4aa6682d2d4c84dca1c4c3e037f5fa4fe3299bf
GET /de183023.js HTTP/1.1
Host: use.fortawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bartonnutrition.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 16 Oct 2022 01:09:11 GMT
content-encoding: gzip
content-length: 3990
content-type: application/javascript
last-modified: Fri, 12 Nov 2021 23:03:10 GMT
accept-ranges: bytes
etag: "bfa45a60c2439cb5baf783a2c0243634"
x-hw: 1665882551.cds261.sk1.hn,1665882551.cds207.sk1.sc,1665882551.cds207.sk1.pr
cache-control: max-age=60, private, must-revalidate
vary: Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
access-control-allow-origin: *
X-Firefox-Spdy: h2
token.ultracart.com/checkout/checkout-hosted-fields-1.0.js
200 OK 17 kB URL HTTP/2 token.ultracart.com/checkout/checkout-hosted-fields-1.0.js
IP
File type Unicode text, UTF-8 text, with very long lines (4857), with CRLF, LF line terminators
Hash 75ec886825a58bdb4902a5d0ebdd58dd
3717b5eaa6da260850b8bd845f5612a3eeefab65
e6cc465a1b442c8892f84501758598af365119569f000e2daccbc6e137d2a44f
GET /checkout/checkout-hosted-fields-1.0.js HTTP/1.1
Host: token.ultracart.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bartonnutrition.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
last-modified: Fri, 17 Dec 2021 20:29:35 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: AIxokTMFSmFEihvG6rb8t6t1o2UdqKeo
server: AmazonS3
content-encoding: gzip
date: Sat, 15 Oct 2022 04:16:52 GMT
etag: W/"512dfa861970d35c07b14485ab52cf30"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a7d2a4ec2f50830f128dc406960aef9a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: U7Gi7OMcL8vvdcWOXjx8Zs_oS4nWx3sXHpGZjCuuKF5TboI2djXJqw==
age: 75140
X-Firefox-Spdy: h2
use.typekit.net/af/2555e1/00000000000000007735e603/30/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n7&v=3
200 OK 31 kB URL HTTP/2 use.typekit.net/af/2555e1/00000000000000007735e603/30/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n7&v=3
IP
ASN #20940 Akamai International B.V.
File type Web Open Font Format (Version 2), CFF, length 30704, version 1.0\012- data
Hash cbae49bae5cbc8469c1a53a6bfbd5b15
a9fd98171826997827d0d02dab92318be2d7d639
a33128c94dd3c425bc3f4a9ba389a1f3d7a75233e8cb788ea80f8f43a3d68423
GET /af/2555e1/00000000000000007735e603/30/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n7&v=3 HTTP/1.1
Host: use.typekit.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://bartonnutrition.com
Connection: keep-alive
Referer: https://bartonnutrition.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: application/font-woff2
content-length: 30704
etag: "09d1a94c81035c62708e0a513ee76d7886d15a25"
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=31536000
date: Sun, 16 Oct 2022 01:09:11 GMT
X-Firefox-Spdy: h2
use.typekit.net/af/f18587/00000000000000007735a07a/30/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n4&v=3
200 OK 18 kB URL HTTP/2 use.typekit.net/af/f18587/00000000000000007735a07a/30/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n4&v=3
IP
ASN #20940 Akamai International B.V.
File type Web Open Font Format (Version 2), TrueType, length 17756, version 1.0\012- data
Hash f3b736422e22b9dee8f42866c88c5ee8
d9ba953aec2fa2bd15443babb5c3f274b73847b8
c70be61ebf5ebc5fb158df7bcc05e1a645c16c863901eb8487fc3d14d2ac801a
GET /af/f18587/00000000000000007735a07a/30/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n4&v=3 HTTP/1.1
Host: use.typekit.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://bartonnutrition.com
Connection: keep-alive
Referer: https://bartonnutrition.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/font-woff2
content-length: 17756
etag: "ec65454125f52ade60a7a7dba7db35136a0a5833"
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=31536000
date: Sun, 16 Oct 2022 01:09:11 GMT
X-Firefox-Spdy: h2
use.typekit.net/af/50d55e/000000000000000000015235/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n9&v=3
200 OK 44 kB URL HTTP/2 use.typekit.net/af/50d55e/000000000000000000015235/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n9&v=3
IP
ASN #20940 Akamai International B.V.
File type Web Open Font Format (Version 2), TrueType, length 44180, version 1.0\012- data
Hash 2ac1a2bd891725b1d6dee608a7496d8e
a0d2e71feb35ca464a7575bdfed27a6f74d71b39
4a6594dd17666cfa2ff2c9d601abb32c39ca74fab27f7597b73c8b14743d97b6
GET /af/50d55e/000000000000000000015235/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n9&v=3 HTTP/1.1
Host: use.typekit.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://bartonnutrition.com
Connection: keep-alive
Referer: https://bartonnutrition.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/font-woff2
content-length: 44180
etag: "f9731f24cd8729a0a5a2f4087491704f5fbc583c"
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=31536000
date: Sun, 16 Oct 2022 01:09:11 GMT
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/jquery/3.5.1/jquery.min.js
200 OK 31 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/jquery/3.5.1/jquery.min.js
IP
Hash 7baff58fa66da9801e0d7ad90720f49a
4c21475b35157dd488a84ac4c9f305fa47142422
32ec14f75145c3ca954a2f2c4dad979f03fd605c51931f3c712bad2e4feb9633
GET /ajax/libs/jquery/3.5.1/jquery.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bartonnutrition.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 16 Oct 2022 01:09:11 GMT
content-type: application/javascript; charset=utf-8
content-length: 27958
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb09ed3-15d84"
last-modified: Mon, 04 May 2020 23:01:39 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
vary: Accept-Encoding
cf-cache-status: HIT
age: 11326255
expires: Fri, 06 Oct 2023 01:09:11 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7LjXsswwUiPrxm0Qzph3ZM2kA9%2BdRurbri7cxQLrknapVCLdXudzmuGUgslGXUXyRvyQ96Va3Y5MKicKh8HxU2B4givM5jfLY6KzWzJU7woSf1ki3cx1mVkbv%2BsJ8sk4DM%2BSQVdD"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 75ace857cd3a0b49-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
use.typekit.net/af/b1c445/00000000000000007735b72e/30/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n5&v=3
200 OK 26 kB URL HTTP/2 use.typekit.net/af/b1c445/00000000000000007735b72e/30/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n5&v=3
IP
ASN #20940 Akamai International B.V.
File type Web Open Font Format (Version 2), CFF, length 25960, version 1.0\012- data
Hash 065b4e1af4fa9aa7265af6b67406a6f2
a95be491948c619d61956c17f6fd24f1476827d8
9f5e83e263d393311f0c71497778255cf5b0c41e3d08007d38205eca84cf7e96
GET /af/b1c445/00000000000000007735b72e/30/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n5&v=3 HTTP/1.1
Host: use.typekit.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://bartonnutrition.com
Connection: keep-alive
Referer: https://bartonnutrition.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/font-woff2
content-length: 25960
etag: "a96a3358485f08484953b2f6f725bd680d120723"
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=31536000
date: Sun, 16 Oct 2022 01:09:11 GMT
X-Firefox-Spdy: h2
use.typekit.net/af/9e9765/00000000000000007735b72d/30/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n7&v=3
200 OK 21 kB URL HTTP/2 use.typekit.net/af/9e9765/00000000000000007735b72d/30/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n7&v=3
IP
ASN #20940 Akamai International B.V.
File type Web Open Font Format (Version 2), CFF, length 20836, version 1.0\012- data
Hash d71a4ad21bce7ec3071ca2618e705602
26854f587f0273903a726b38554a0299985ce02e
739a7067cd203d3d9eeabc9fe64ef96d40295deac0c5e69ca51548e2df655359
GET /af/9e9765/00000000000000007735b72d/30/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n7&v=3 HTTP/1.1
Host: use.typekit.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://bartonnutrition.com
Connection: keep-alive
Referer: https://bartonnutrition.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/font-woff2
content-length: 20836
etag: "5d4bca21abcabba77a7a254d0d364f5ddb118c23"
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=31536000
date: Sun, 16 Oct 2022 01:09:12 GMT
X-Firefox-Spdy: h2
use.typekit.net/af/faabc2/00000000000000007735b726/30/l?subset_id=2&fvd=n4&v=3
200 OK 17 kB URL HTTP/2 use.typekit.net/af/faabc2/00000000000000007735b726/30/l?subset_id=2&fvd=n4&v=3
IP
ASN #20940 Akamai International B.V.
File type Web Open Font Format (Version 2), CFF, length 17256, version 1.0\012- data
Hash 570222e92ed3a2f73d6efc7835142d28
18d59aceaeadafedd131f17c723970cd76514bd4
2619e993d17dca8366fb80df92ed4bf59845c3e9645e1a62aaa1e57f6d1aa34c
GET /af/faabc2/00000000000000007735b726/30/l?subset_id=2&fvd=n4&v=3 HTTP/1.1
Host: use.typekit.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://bartonnutrition.com
Connection: keep-alive
Referer: https://bartonnutrition.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/font-woff2
content-length: 17256
etag: "54ab60d8c7d01281aab7898d810568f1ea6226d1"
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=31536000
date: Sun, 16 Oct 2022 01:09:12 GMT
X-Firefox-Spdy: h2
use.fortawesome.com/kits/de183023/publications/116494/woff2.css
200 OK 35 kB URL HTTP/2 use.fortawesome.com/kits/de183023/publications/116494/woff2.css
IP
File type ASCII text, with very long lines (49777), with no line terminators
Hash fcc07140230b9e2bc629196b5a3d5129
013f1056b4b56d00acf1439d46bbe7363a8cb07a
77e8d42086baacd42d4d450090da35df949f195c79c28c4e6a129b8ba290e2ed
GET /kits/de183023/publications/116494/woff2.css HTTP/1.1
Host: use.fortawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bartonnutrition.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 16 Oct 2022 01:09:11 GMT
content-encoding: gzip
content-length: 34641
content-type: text/css
last-modified: Fri, 12 Nov 2021 23:03:11 GMT
accept-ranges: bytes
etag: "033f5b3ecc3d214b110cc7e899ac542a"
x-hw: 1665882551.cds261.sk1.hn,1665882551.cds072.sk1.sc,1665882551.cds072.sk1.pr
cache-control: max-age=31536000
vary: Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
access-control-allow-origin: *
X-Firefox-Spdy: h2
use.typekit.net/af/154cda/00000000000000007735e601/30/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n1&v=3
200 OK 29 kB URL HTTP/2 use.typekit.net/af/154cda/00000000000000007735e601/30/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n1&v=3
IP
ASN #20940 Akamai International B.V.
File type Web Open Font Format (Version 2), CFF, length 28764, version 1.0\012- data
Hash 46444d3011ed4d27a42c3c07da7cf343
e4aabfe359c882a3f66e7bcb8902c136fe35d438
c862e09dc14a6d0ba890b78cb2f57a6e1df993395106e91bf95d202fc33c4b60
GET /af/154cda/00000000000000007735e601/30/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n1&v=3 HTTP/1.1
Host: use.typekit.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://bartonnutrition.com
Connection: keep-alive
Referer: https://bartonnutrition.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: application/font-woff2
content-length: 28764
etag: "bb527db1d82be3f299f746453df8abe5f2b6ac67"
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=31536000
date: Sun, 16 Oct 2022 01:09:12 GMT
X-Firefox-Spdy: h2
use.typekit.net/af/706b32/00000000000000007735b733/30/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n5&v=3
200 OK 26 kB URL HTTP/2 use.typekit.net/af/706b32/00000000000000007735b733/30/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n5&v=3
IP
ASN #20940 Akamai International B.V.
File type Web Open Font Format (Version 2), CFF, length 26148, version 1.0\012- data
Hash 616853d604fd4c62b94d1ce5d4a27f9c
336a5b2d3737da2dc639e66dcdb621d877c0c2ed
7102361b3ac8d0b22bccee66b1e12789541ea8ef000b97d23966160a731393c1
GET /af/706b32/00000000000000007735b733/30/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n5&v=3 HTTP/1.1
Host: use.typekit.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://bartonnutrition.com
Connection: keep-alive
Referer: https://bartonnutrition.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/font-woff2
content-length: 26148
etag: "0191c40ab8a1566515b510a5fa8900ded567f877"
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=31536000
date: Sun, 16 Oct 2022 01:09:12 GMT
X-Firefox-Spdy: h2
use.typekit.net/af/8939f9/00000000000000007735a061/30/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n7&v=3
200 OK 19 kB URL HTTP/2 use.typekit.net/af/8939f9/00000000000000007735a061/30/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n7&v=3
IP
ASN #20940 Akamai International B.V.
File type Web Open Font Format (Version 2), TrueType, length 18584, version 1.0\012- data
Hash 0598affe7cfd67517aa67dd93804948d
7f9a53989ab0df5f7aa87946bbc39dd7214a19b6
fd8967417795f539dbb323ead019548f84a3875f7c2277db47d2d7ed630a48c1
GET /af/8939f9/00000000000000007735a061/30/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n7&v=3 HTTP/1.1
Host: use.typekit.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://bartonnutrition.com
Connection: keep-alive
Referer: https://bartonnutrition.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: application/font-woff2
content-length: 18584
etag: "688538e722636b5c39cb4cffbe6ad7c0119c9521"
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=31536000
date: Sun, 16 Oct 2022 01:09:12 GMT
X-Firefox-Spdy: h2
use.typekit.net/af/3322cc/00000000000000007735e616/30/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=i4&v=3
200 OK 32 kB URL HTTP/2 use.typekit.net/af/3322cc/00000000000000007735e616/30/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=i4&v=3
IP
ASN #20940 Akamai International B.V.
File type Web Open Font Format (Version 2), CFF, length 31620, version 1.0\012- data
Hash 76bb0b958a918b4d270df75ecf0be2fe
0144c98769bddbfd91ed23a0d0b1d5d86b6b6465
19be36b532c3147a005317cbc940c69b7137c7980a462525055393d3cfd20b30
GET /af/3322cc/00000000000000007735e616/30/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=i4&v=3 HTTP/1.1
Host: use.typekit.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://bartonnutrition.com
Connection: keep-alive
Referer: https://bartonnutrition.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: application/font-woff2
content-length: 31620
etag: "45b6acdd85bc39b5dfc108ace1ad2dbe5fca28ba"
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=31536000
date: Sun, 16 Oct 2022 01:09:12 GMT
X-Firefox-Spdy: h2
use.typekit.net/af/efe4a5/00000000000000007735e609/30/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n4&v=3
200 OK 30 kB URL HTTP/2 use.typekit.net/af/efe4a5/00000000000000007735e609/30/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n4&v=3
IP
ASN #20940 Akamai International B.V.
File type Web Open Font Format (Version 2), CFF, length 29820, version 1.0\012- data
Hash 22f210f896c47ca032dee5d32edfee1d
18a0f2b6d98fe442047fa2b232705b1587b407cd
c4d04d2b6a041dde11c80d8332f983a58c1031c663ab4f42230899cb82adf4a7
GET /af/efe4a5/00000000000000007735e609/30/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n4&v=3 HTTP/1.1
Host: use.typekit.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://bartonnutrition.com
Connection: keep-alive
Referer: https://bartonnutrition.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: application/font-woff2
content-length: 29820
etag: "6aeae62b893768150f3460329dc461358e8ab2f5"
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=31536000
date: Sun, 16 Oct 2022 01:09:12 GMT
X-Firefox-Spdy: h2
dndngvalp4jdj.cloudfront.net/bartonnutrition.com/scripts/global/script.min.js?v=1.14.11.21
200 OK 61 kB URL HTTP/2 dndngvalp4jdj.cloudfront.net/bartonnutrition.com/scripts/global/script.min.js?v=1.14.11.21
IP
Hash 4c54bcbe57742036116942fe05984e80
421cc06416b66634173aa115428242f272759abe
2a0df00c04fe7da0d704d6270b106698edb8e30e624b53ba8b5e2e98565b447d
GET /bartonnutrition.com/scripts/global/script.min.js?v=1.14.11.21 HTTP/1.1
Host: dndngvalp4jdj.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://bartonnutrition.com
Connection: keep-alive
Referer: https://bartonnutrition.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
access-control-allow-origin: https://bartonnutrition.com
access-control-allow-methods: GET, PUT, POST, DELETE, HEAD
access-control-max-age: 3000
access-control-allow-credentials: true
last-modified: Thu, 05 May 2022 04:04:54 GMT
x-amz-version-id: q41zcSHm9QaumlOJ9OKG_yFn877kF6R.
server: AmazonS3
content-encoding: gzip
date: Sun, 16 Oct 2022 01:09:12 GMT
cache-control: max-age=86400
etag: W/"1009c6ae604bca9005111f0e2b391377"
vary: Accept-Encoding,Origin
x-cache: RefreshHit from cloudfront
via: 1.1 814e8c24454087e83cd261a6cf477166.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 7Ktj5d_RZHwt2SWykKJ4nX7MGBUlKRYAhAUaUSyid1j3uingXBSNtA==
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e739f2dbc17223af8493197f7928a394
9a5de106bff2bb3b27f4cfaae46a27b08d464a75
2b68adc3318bbe55058a865a91b10267b308865ade76bc03f4168ba748ac7dd5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 16 Oct 2022 01:09:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
region1.analytics.google.com/g/collect?v=2&tid=G-8M5DP1FGCG>m=2oeaa0&_p=611388012&_gaz=1&cid=1635946776.1665882554&ul=en-us&sr=1280x1024&_s=1&sid=1665882553&sct=1&seg=0&dl=https%3A%2F%2Fbartonnutrition.com%2Fptn%2F21%3Futm_campaign%3Dfg_jerusalem%26utm_medium%3Demail%26utm_content%3Dfg_bowel%26utm_source%3Dmaxweb%26subid%3D7605_sessid20221016010930125%26utm_term%3Demail%26AFFID%3D474832&dt=Jerusalem%20Flower&en=page_view&_fv=1&_nsi=1&_ss=1
204 No Content 0 B URL HTTP/2 region1.analytics.google.com/g/collect?v=2&tid=G-8M5DP1FGCG>m=2oeaa0&_p=611388012&_gaz=1&cid=1635946776.1665882554&ul=en-us&sr=1280x1024&_s=1&sid=1665882553&sct=1&seg=0&dl=https%3A%2F%2Fbartonnutrition.com%2Fptn%2F21%3Futm_campaign%3Dfg_jerusalem%26utm_medium%3Demail%26utm_content%3Dfg_bowel%26utm_source%3Dmaxweb%26subid%3D7605_sessid20221016010930125%26utm_term%3Demail%26AFFID%3D474832&dt=Jerusalem%20Flower&en=page_view&_fv=1&_nsi=1&_ss=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-8M5DP1FGCG>m=2oeaa0&_p=611388012&_gaz=1&cid=1635946776.1665882554&ul=en-us&sr=1280x1024&_s=1&sid=1665882553&sct=1&seg=0&dl=https%3A%2F%2Fbartonnutrition.com%2Fptn%2F21%3Futm_campaign%3Dfg_jerusalem%26utm_medium%3Demail%26utm_content%3Dfg_bowel%26utm_source%3Dmaxweb%26subid%3D7605_sessid20221016010930125%26utm_term%3Demail%26AFFID%3D474832&dt=Jerusalem%20Flower&en=page_view&_fv=1&_nsi=1&_ss=1 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://bartonnutrition.com
Connection: keep-alive
Referer: https://bartonnutrition.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://bartonnutrition.com
date: Sun, 16 Oct 2022 01:09:12 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 5c64ced45088660f4e780756e5ca0968
7d1d4b389b65a679b01acd0e3a070da7f6760bf1
d266d13f4491fc184a1f031ed87a5af76d46c58bd8751cb92cbedba574139462
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 16 Oct 2022 01:09:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googleadservices.com/pagead/conversion/765746930/?url=https%3A%2F%2Fbartonnutrition.com%2F&guid=ON&script=0&data=
302 Found 42 B URL HTTP/2 www.googleadservices.com/pagead/conversion/765746930/?url=https%3A%2F%2Fbartonnutrition.com%2F&guid=ON&script=0&data=
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/conversion/765746930/?url=https%3A%2F%2Fbartonnutrition.com%2F&guid=ON&script=0&data= HTTP/1.1
Host: www.googleadservices.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.googletagmanager.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sun, 16 Oct 2022 01:09:12 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: image/gif
location: https://googleads.g.doubleclick.net/pagead/viewthroughconversion/765746930/?url=https%3A%2F%2Fbartonnutrition.com%2F&guid=ON&script=0&data=&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&ocp_id=uFlLY6mHDZeWZbSqmugK&random=1143209620&sscte=1&crd=CJqqsQI
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
d9i5ve8f04qxt.cloudfront.net/UC/62/uca/0.1.0/js/collect.js?mid=GARDN&channel=secure.bartonnutrition.com
200 OK 102 kB URL HTTP/2 d9i5ve8f04qxt.cloudfront.net/UC/62/uca/0.1.0/js/collect.js?mid=GARDN&channel=secure.bartonnutrition.com
IP
File type ASCII text, with very long lines (5690), with CRLF, LF line terminators
Size 102 kB (102338 bytes)
Hash 75c5061ff51ef5d73dad3de170f2d6f7
cabae81880764579a0da1656231508d8e6a69d6c
d0b87b3526d1b820e48befc3bf43385b76e0d6015c44afda51f63dcf1e451118
GET /UC/62/uca/0.1.0/js/collect.js?mid=GARDN&channel=secure.bartonnutrition.com HTTP/1.1
Host: d9i5ve8f04qxt.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bartonnutrition.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/x-javascript; charset=UTF-8
content-length: 102338
date: Thu, 13 Oct 2022 04:28:42 GMT
last-modified: Thu, 04 Aug 2022 13:40:23 GMT
etag: "75c5061ff51ef5d73dad3de170f2d6f7"
cache-control: max-age=604800,s-maxage=604800
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 410f51195842d9b592b15d6588c36654.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: FkOwBe_1nMMXVgKfVzQ-R3nzMDEIqzvAOyEViahVQFtBH7H5iKEKvQ==
age: 247231
X-Firefox-Spdy: h2
gardn.ultracartstore.com/cgi-bin/UCAffiliateNetworkPixel?t=0.9486176842893165&r=&u=https%3A%2F%2Fbartonnutrition.com%2Fptn%2F21%3Futm_campaign%3Dfg_jerusalem%26utm_medium%3Demail%26utm_content%3Dfg_bowel%26utm_source%3Dmaxweb%26subid%3D7605_sessid20221016010930125%26utm_term%3Demail%26AFFID%3D474832
200 OK 0 B URL HTTP/1.1 gardn.ultracartstore.com/cgi-bin/UCAffiliateNetworkPixel?t=0.9486176842893165&r=&u=https%3A%2F%2Fbartonnutrition.com%2Fptn%2F21%3Futm_campaign%3Dfg_jerusalem%26utm_medium%3Demail%26utm_content%3Dfg_bowel%26utm_source%3Dmaxweb%26subid%3D7605_sessid20221016010930125%26utm_term%3Demail%26AFFID%3D474832
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cgi-bin/UCAffiliateNetworkPixel?t=0.9486176842893165&r=&u=https%3A%2F%2Fbartonnutrition.com%2Fptn%2F21%3Futm_campaign%3Dfg_jerusalem%26utm_medium%3Demail%26utm_content%3Dfg_bowel%26utm_source%3Dmaxweb%26subid%3D7605_sessid20221016010930125%26utm_term%3Demail%26AFFID%3D474832 HTTP/1.1
Host: gardn.ultracartstore.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bartonnutrition.com/
Cookie: AWSALBCORS=5ATayPhuHyxjKOU9WI0ghvUTz/z2xkQ8VVX8Xwbr0vERneJIwI4gvGaXeQbDN0b8/oKn9rIVJFrQvqfyApOgLP6WaJjPxWB/xaJxJ2M98zGPMB/g+lJW4j30rLUJ
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sun, 16 Oct 2022 01:09:12 GMT
Content-Length: 0
Connection: keep-alive
Set-Cookie: AWSALB=6lAhJIqOs4euU1ZhO3sHOF5eZDpBqT4ixJ8d+b4b6mFkprk/XkXYhNq3s/niDm6VMCMoW5kurRjRbNSAzsgdCH20bncnFEeaQdEisFiEaoKRR3EJupOXvkTZPJa9; Expires=Sun, 23 Oct 2022 01:09:12 GMT; Path=/
AWSALBCORS=6lAhJIqOs4euU1ZhO3sHOF5eZDpBqT4ixJ8d+b4b6mFkprk/XkXYhNq3s/niDm6VMCMoW5kurRjRbNSAzsgdCH20bncnFEeaQdEisFiEaoKRR3EJupOXvkTZPJa9; Expires=Sun, 23 Oct 2022 01:09:12 GMT; Path=/; SameSite=None; Secure
Server: Apache
region1.google-analytics.com/g/collect?v=2&tid=G-XM17T9CF1F>m=2oeaa0&_p=611388012&cid=1635946776.1665882554&ul=en-us&sr=1280x1024&_s=1&sid=1665882553&sct=1&seg=0&dl=https%3A%2F%2Fbartonnutrition.com%2Fptn%2F21%3Futm_campaign%3Dfg_jerusalem%26utm_medium%3Demail%26utm_content%3Dfg_bowel%26utm_source%3Dmaxweb%26subid%3D7605_sessid20221016010930125%26utm_term%3Demail%26AFFID%3D474832&dt=Jerusalem%20Flower&en=page_view&_fv=1&_ss=1
204 No Content 0 B URL HTTP/2 region1.google-analytics.com/g/collect?v=2&tid=G-XM17T9CF1F>m=2oeaa0&_p=611388012&cid=1635946776.1665882554&ul=en-us&sr=1280x1024&_s=1&sid=1665882553&sct=1&seg=0&dl=https%3A%2F%2Fbartonnutrition.com%2Fptn%2F21%3Futm_campaign%3Dfg_jerusalem%26utm_medium%3Demail%26utm_content%3Dfg_bowel%26utm_source%3Dmaxweb%26subid%3D7605_sessid20221016010930125%26utm_term%3Demail%26AFFID%3D474832&dt=Jerusalem%20Flower&en=page_view&_fv=1&_ss=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-XM17T9CF1F>m=2oeaa0&_p=611388012&cid=1635946776.1665882554&ul=en-us&sr=1280x1024&_s=1&sid=1665882553&sct=1&seg=0&dl=https%3A%2F%2Fbartonnutrition.com%2Fptn%2F21%3Futm_campaign%3Dfg_jerusalem%26utm_medium%3Demail%26utm_content%3Dfg_bowel%26utm_source%3Dmaxweb%26subid%3D7605_sessid20221016010930125%26utm_term%3Demail%26AFFID%3D474832&dt=Jerusalem%20Flower&en=page_view&_fv=1&_ss=1 HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://bartonnutrition.com
Connection: keep-alive
Referer: https://bartonnutrition.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://bartonnutrition.com
date: Sun, 16 Oct 2022 01:09:12 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash dabc9909474f0f9c08eb8655c1bc19d6
21d8e9c482a94be79a802ec171820d90a4c4cddf
22c7da5a25fbbb3a98d52990c7717acbd270afdf977790993a775a1cd21d4b33
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5258
Cache-Control: max-age=135060
Content-Type: application/ocsp-response
Date: Sun, 16 Oct 2022 01:09:12 GMT
Etag: "634ab1c2-1d7"
Expires: Mon, 17 Oct 2022 14:40:12 GMT
Last-Modified: Sat, 15 Oct 2022 13:12:34 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 231a5834edd086a67640c2c0cc18c55c
3427d0baffebad62c95754da193be354ca2b270c
2533d2d520b731b0073fcd224375cdd6dc2fde77908f93dcb0c659ec6dc7501b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 16 Oct 2022 01:09:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
p.typekit.net/p.gif?s=1&k=but5bfb&ht=tk&h=bartonnutrition.com&f=139.171.175.176.14541.14546.14548.15700.15725.41697.41708.41710.41719&a=2068922&js=1.21.0&app=typekit&e=js&_=1665882554402
200 OK 35 B URL HTTP/2 p.typekit.net/p.gif?s=1&k=but5bfb&ht=tk&h=bartonnutrition.com&f=139.171.175.176.14541.14546.14548.15700.15725.41697.41708.41710.41719&a=2068922&js=1.21.0&app=typekit&e=js&_=1665882554402
IP
ASN #20940 Akamai International B.V.
File type GIF image data, version 89a, 1 x 1\012- data
Hash 81144d75b3e69e9aa2fa3e9d83a64d03
f0fbc60b50edf5b2a0b76e0aa0537b76bf346ffc
9b9265c69a5cc295d1ab0d04e0273b3677db1a6216ce2ccf4efc8c277ed84b39
GET /p.gif?s=1&k=but5bfb&ht=tk&h=bartonnutrition.com&f=139.171.175.176.14541.14546.14548.15700.15725.41697.41708.41710.41719&a=2068922&js=1.21.0&app=typekit&e=js&_=1665882554402 HTTP/1.1
Host: p.typekit.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bartonnutrition.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
cache-control: public, max-age=604800
content-type: image/gif
cross-origin-resource-policy: cross-origin
etag: "61c32ad2-23"
last-modified: Wed, 22 Dec 2021 13:40:34 GMT
server: nginx
content-length: 35
unused62: 8096267
date: Sun, 16 Oct 2022 01:09:12 GMT
X-Firefox-Spdy: h2
stats.g.doubleclick.net/g/collect?v=2&tid=G-8M5DP1FGCG&cid=1635946776.1665882554>m=2oeaa0&aip=1
204 No Content 0 B URL HTTP/2 stats.g.doubleclick.net/g/collect?v=2&tid=G-8M5DP1FGCG&cid=1635946776.1665882554>m=2oeaa0&aip=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-8M5DP1FGCG&cid=1635946776.1665882554>m=2oeaa0&aip=1 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://bartonnutrition.com
Connection: keep-alive
Referer: https://bartonnutrition.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://bartonnutrition.com
date: Sun, 16 Oct 2022 01:09:12 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
dw26xg4lubooo.cloudfront.net/seals/security/2593-small-gray.gif
200 OK 4.2 kB URL HTTP/1.1 dw26xg4lubooo.cloudfront.net/seals/security/2593-small-gray.gif
IP
File type GIF image data, version 89a, 100 x 69\012- data
Hash 365b97de868c7775620c20a02b2ff7f6
a036502e13738071257fb89bc4773688f52723fe
9df58a441ff709886aa882f8b736b4ebeeb775bbbd1ab999342f8ad619a66c0b
GET /seals/security/2593-small-gray.gif HTTP/1.1
Host: dw26xg4lubooo.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bartonnutrition.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/gif
Content-Length: 4183
Connection: keep-alive
Last-Modified: Sat, 15 Oct 2022 05:03:44 GMT
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID ADMa OPTa OUR NOR"
CF-Cache-Status: EXPIRED
Accept-Ranges: bytes
Server: cloudflare
CF-RAY: 75a6a27859b99b25-FRA
Date: Sun, 16 Oct 2022 01:09:12 GMT
Cache-Control: max-age=14400, must-revalidate
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 0e39dca74306d7aab723ed3d73dbfbb4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: TRn6JBXtI-MlvMyOf2lbHerw9liJ_tOyo7GhgFDR_F6K7YYBCMDkzA==
Age: 3968
dw26xg4lubooo.cloudfront.net/seals/security/2593-header-gray.gif
200 OK 4.0 kB URL HTTP/1.1 dw26xg4lubooo.cloudfront.net/seals/security/2593-header-gray.gif
IP
File type GIF image data, version 89a, 150 x 49\012- data
Hash 04c4d893a19246ac501312cf593de75e
3bbbffece0480d8a5e8130f66a9831ac96fda68b
f68fe2bca173182a29e8833f5b8c237f49063c3b5fd6a2e7aead5be9eb7a4bf1
GET /seals/security/2593-header-gray.gif HTTP/1.1
Host: dw26xg4lubooo.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bartonnutrition.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/gif
Content-Length: 4033
Connection: keep-alive
Last-Modified: Sat, 15 Oct 2022 05:03:44 GMT
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID ADMa OPTa OUR NOR"
CF-Cache-Status: EXPIRED
Accept-Ranges: bytes
Server: cloudflare
CF-RAY: 75a6575aa9119018-FRA
Date: Sun, 16 Oct 2022 01:09:12 GMT
Cache-Control: max-age=14400, must-revalidate
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 8ac66e1d6983a0f44cf391b1ec3b1cce.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 4yLJsFnQ7tJiGOyqH3XGk51q2aUZ93caGxCc3dfJGfCle60qGcaGmg==
Age: 529
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1325)
Hash 47e6f374ca946fddd5b59871b325736c
baa9282efc8785e84d247c3bff518eaa45f101c4
16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bartonnutrition.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Sun, 16 Oct 2022 00:41:09 GMT
expires: Sun, 16 Oct 2022 02:41:09 GMT
cache-control: public, max-age=7200
age: 1683
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
dw26xg4lubooo.cloudfront.net/seals/privacy/2593-header-gray.gif
200 OK 3.8 kB URL HTTP/1.1 dw26xg4lubooo.cloudfront.net/seals/privacy/2593-header-gray.gif
IP
File type GIF image data, version 89a, 150 x 49\012- data
Hash f92c9024acdd6ad1ba9715078bb33d1b
4a9c8731f267fcba26a0bf4026d1d34ff19a8613
bcece6e76759ec0d71bc07130817b6702aca4b275b7e07059c8223ca6c035802
GET /seals/privacy/2593-header-gray.gif HTTP/1.1
Host: dw26xg4lubooo.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bartonnutrition.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/gif
Content-Length: 3793
Connection: keep-alive
Last-Modified: Sat, 15 Oct 2022 05:03:43 GMT
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID ADMa OPTa OUR NOR"
CF-Cache-Status: EXPIRED
Accept-Ranges: bytes
Server: cloudflare
CF-RAY: 75a703a8ded19b7d-FRA
Date: Sun, 16 Oct 2022 01:09:12 GMT
Cache-Control: max-age=14400, must-revalidate
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: XR4K4Hay9S4PchuIV0ayq6E2iBdMTkG9gtw078Q2GsOW1q_vWWe75Q==
Age: 3962
dw26xg4lubooo.cloudfront.net/seals/business/2593-small-gray.gif
200 OK 4.4 kB URL HTTP/1.1 dw26xg4lubooo.cloudfront.net/seals/business/2593-small-gray.gif
IP
File type GIF image data, version 89a, 100 x 69\012- data
Hash 99bd1113a0ce7a988bc9450f5343c6cf
9a9831f47d7d300dc269194b1a2d419a8111d4d2
7debf2fcaf07afab83c33fa4f84d3a779d6b279a2f1ce09fb5c2dce78ef142b7
GET /seals/business/2593-small-gray.gif HTTP/1.1
Host: dw26xg4lubooo.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bartonnutrition.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/gif
Content-Length: 4362
Connection: keep-alive
Last-Modified: Sat, 15 Oct 2022 05:03:43 GMT
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID ADMa OPTa OUR NOR"
CF-Cache-Status: EXPIRED
Accept-Ranges: bytes
Server: cloudflare
CF-RAY: 75a757816e6a9156-FRA
Date: Sun, 16 Oct 2022 01:09:12 GMT
Cache-Control: max-age=14400, must-revalidate
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: rgg5lrffLAGzxNQXQA1h6XDNZ5rYXou9H2uwDIzgATn9G6J3rFoe6Q==
Age: 13967
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash b71c1dfe563720287179a76edf29c680
6096cc371998151d37a2f7698b0fe0371bb43269
7472e945b0ae9b967b68ec85dc8a005c74c2f5c63c68a9de142be69983062a90
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 16 Oct 2022 01:09:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
dw26xg4lubooo.cloudfront.net/seals/privacy/2593-small-gray.gif
200 OK 4.2 kB URL HTTP/1.1 dw26xg4lubooo.cloudfront.net/seals/privacy/2593-small-gray.gif
IP
File type GIF image data, version 89a, 100 x 69\012- data
Hash 647ef60659aab310faa7efbbfd1cd34a
d1a1d4907af967a551bce5ebba657d02e8b47210
2fc4309f567b7d76b2a0080d33f3a9d743bd3eb446e4dc67c02c39a37e3ee48f
GET /seals/privacy/2593-small-gray.gif HTTP/1.1
Host: dw26xg4lubooo.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bartonnutrition.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/gif
Content-Length: 4195
Connection: keep-alive
Last-Modified: Sat, 15 Oct 2022 05:03:43 GMT
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID ADMa OPTa OUR NOR"
CF-Cache-Status: EXPIRED
Accept-Ranges: bytes
Server: cloudflare
CF-RAY: 75a703a528e49954-FRA
Date: Sun, 16 Oct 2022 01:09:12 GMT
Cache-Control: max-age=14400, must-revalidate
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: OHl9wnRg7gMMT8HpNkP0b4--xXTb-KAVsrPkuAWBNf1XJDgKCJUYLA==
Age: 3968
www.google.com/pagead/conversion_async.js
200 OK 15 kB URL HTTP/2 www.google.com/pagead/conversion_async.js
IP
File type ASCII text, with very long lines (1654)
Hash 8766c5a801f08afceca9b66ff9097e6a
ce7640d1d166eddeb9d40be642ec34652f790713
f448f99b4ad9a9b50daa9c38054cf16ab2b9fcb5d83ddad60571fb6a8a432a99
GET /pagead/conversion_async.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bartonnutrition.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
date: Sun, 16 Oct 2022 01:09:12 GMT
expires: Sun, 16 Oct 2022 01:09:12 GMT
cache-control: private, max-age=3600
content-type: text/javascript; charset=UTF-8
etag: 17557423932572341828
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 15187
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
dw26xg4lubooo.cloudfront.net/seals/certified/2593-header-gray.gif
200 OK 3.7 kB URL HTTP/1.1 dw26xg4lubooo.cloudfront.net/seals/certified/2593-header-gray.gif
IP
File type GIF image data, version 89a, 150 x 49\012- data
Hash dacc2e4ab8b3f4f36bf835007e4e0be7
47dc8e07d708aaed0feb93400d3788d9e32548cf
108adafd8070ebd2dab4fe19a95bde2ac726fd80c42b68a85dd3260ba9145875
GET /seals/certified/2593-header-gray.gif HTTP/1.1
Host: dw26xg4lubooo.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bartonnutrition.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/gif
Content-Length: 3717
Connection: keep-alive
Last-Modified: Sat, 15 Oct 2022 05:03:43 GMT
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID ADMa OPTa OUR NOR"
CF-Cache-Status: EXPIRED
Accept-Ranges: bytes
Server: cloudflare
CF-RAY: 75a757909c485c8c-FRA
Date: Sun, 16 Oct 2022 01:09:12 GMT
Cache-Control: max-age=14400, must-revalidate
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 8ac66e1d6983a0f44cf391b1ec3b1cce.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 5HThnjSICha-UqX1FUuF_4phoNB2pYLSGp-cE7AmBySFyAAD0s8xWw==
Age: 530
dw26xg4lubooo.cloudfront.net/seals/certified/2593-small-gray.gif
200 OK 4.1 kB URL HTTP/1.1 dw26xg4lubooo.cloudfront.net/seals/certified/2593-small-gray.gif
IP
File type GIF image data, version 89a, 100 x 69\012- data
Hash a1bf7ac22177a9d232e1da96c645ee54
4d5dde6d843404179d52636782cb265f3a80e531
a6384ba3a65cf0ddd5e6e5b563c4fdc447b13c6dfce248a4862ffe715f87b7bd
GET /seals/certified/2593-small-gray.gif HTTP/1.1
Host: dw26xg4lubooo.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bartonnutrition.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/gif
Content-Length: 4123
Connection: keep-alive
Last-Modified: Sat, 15 Oct 2022 05:03:43 GMT
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID ADMa OPTa OUR NOR"
CF-Cache-Status: EXPIRED
Accept-Ranges: bytes
Server: cloudflare
CF-RAY: 75a75785684e5c8c-FRA
Date: Sun, 16 Oct 2022 01:09:12 GMT
Cache-Control: max-age=14400, must-revalidate
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: yCS8rzFtyi9XeVdrzA2MORq2SMzv8_l5qOas2DkwrMmEJQreq2IjBA==
Age: 13967
dw26xg4lubooo.cloudfront.net/seals/business/2593-header-gray.gif
200 OK 4.0 kB URL HTTP/1.1 dw26xg4lubooo.cloudfront.net/seals/business/2593-header-gray.gif
IP
File type GIF image data, version 89a, 150 x 49\012- data
Hash 0eea362c2985add549ab6bde3cd7400a
29568e16c62b7f66defe8957dadbd00e2d07947a
50e417e565b1db88d2db6026570274adbce429e2cbddd9e724ef23377fea1987
GET /seals/business/2593-header-gray.gif HTTP/1.1
Host: dw26xg4lubooo.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bartonnutrition.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/gif
Content-Length: 3961
Connection: keep-alive
Last-Modified: Sat, 15 Oct 2022 05:03:43 GMT
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID ADMa OPTa OUR NOR"
CF-Cache-Status: EXPIRED
Accept-Ranges: bytes
Server: cloudflare
CF-RAY: 75a7578bec005c8c-FRA
Date: Sun, 16 Oct 2022 01:09:12 GMT
Cache-Control: max-age=14400, must-revalidate
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 0e39dca74306d7aab723ed3d73dbfbb4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: xd8XRl1uqnaDkuEKTb8H0AmtQzjgYJpmjQvA2qio6KuTm3ZLuyp2Hg==
Age: 13967
connect.facebook.net/en_US/fbevents.js
200 OK 27 kB URL HTTP/2 connect.facebook.net/en_US/fbevents.js
IP
File type ASCII text, with very long lines (64348)
Hash 24e72797c2387d3949fd48bff0869138
9987f23f7289affffb99587c703c95d4448f0d3c
ff6231326f473d1d8e7999bde0bb9c34aedd5e47aefdceb94629c75c771984f1
GET /en_US/fbevents.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bartonnutrition.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: application/x-javascript; charset=utf-8
content-security-policy: default-src * data: blob: 'self';script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.google.com 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.whatsapp.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self';block-all-mixed-content;upgrade-insecure-requests;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: M3WNbe4RTadhvzoitROd+4ly/gCbAE02RXhd2urhTbkJhyX0KBgN7WsSvcO3XejTeyyK/Dvl2S/hUbT8aV+yrQ==
priority: u=3,i
content-length: 27029
x-fb-trip-id: 1904183273
date: Sun, 16 Oct 2022 01:09:12 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 0847763c339012de0d95777e8a4272d4
e232ee250caca9221381b2f05458c2da636d52c1
d52ffd5ea2345dd6b4af061313663024e1fd2f621266a445d52e6def91d87a10
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 16 Oct 2022 01:09:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google-analytics.com/j/collect?v=1&_v=j98&a=611388012&t=pageview&_s=1&dl=https%3A%2F%2Fbartonnutrition.com%2Fptn%2F21%3Futm_campaign%3Dfg_jerusalem%26utm_medium%3Demail%26utm_content%3Dfg_bowel%26utm_source%3Dmaxweb%26subid%3D7605_sessid20221016010930125%26utm_term%3Demail%26AFFID%3D474832&ul=en-us&de=UTF-8&dt=Jerusalem%20Flower&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_utma=145224231.1635946776.1665882554.1665882554.1665882554.1&_utmz=145224231.1665882554.1.1.utmcsr%3Dmaxweb%7Cutmccn%3Dfg_jerusalem%7Cutmcmd%3Demail%7Cutmctr%3Demail%7Cutmcct%3Dfg_bowel&_utmht=1665882554663&_u=YCDCCEABDAAAACAAI~&jid=2123887637&gjid=1511315438&cid=1635946776.1665882554&tid=UA-131678445-1&_gid=1520702084.1665882555&_r=1>m=2wgaa057P4T5X&cd3=Diabetes&cd13=Unknown&cd20=%2F&z=192436258
200 OK 2 B URL HTTP/2 www.google-analytics.com/j/collect?v=1&_v=j98&a=611388012&t=pageview&_s=1&dl=https%3A%2F%2Fbartonnutrition.com%2Fptn%2F21%3Futm_campaign%3Dfg_jerusalem%26utm_medium%3Demail%26utm_content%3Dfg_bowel%26utm_source%3Dmaxweb%26subid%3D7605_sessid20221016010930125%26utm_term%3Demail%26AFFID%3D474832&ul=en-us&de=UTF-8&dt=Jerusalem%20Flower&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_utma=145224231.1635946776.1665882554.1665882554.1665882554.1&_utmz=145224231.1665882554.1.1.utmcsr%3Dmaxweb%7Cutmccn%3Dfg_jerusalem%7Cutmcmd%3Demail%7Cutmctr%3Demail%7Cutmcct%3Dfg_bowel&_utmht=1665882554663&_u=YCDCCEABDAAAACAAI~&jid=2123887637&gjid=1511315438&cid=1635946776.1665882554&tid=UA-131678445-1&_gid=1520702084.1665882555&_r=1>m=2wgaa057P4T5X&cd3=Diabetes&cd13=Unknown&cd20=%2F&z=192436258
IP
File type ASCII text, with no line terminators
Hash cc7a1e792bca8ccb1946b7a07f6dbc03
11a2757082428311f587b7664fa9840376137f80
de3246094525b21a870fc7d2a67490d0132535c6fa5993755c549f1a9d1bd8af
POST /j/collect?v=1&_v=j98&a=611388012&t=pageview&_s=1&dl=https%3A%2F%2Fbartonnutrition.com%2Fptn%2F21%3Futm_campaign%3Dfg_jerusalem%26utm_medium%3Demail%26utm_content%3Dfg_bowel%26utm_source%3Dmaxweb%26subid%3D7605_sessid20221016010930125%26utm_term%3Demail%26AFFID%3D474832&ul=en-us&de=UTF-8&dt=Jerusalem%20Flower&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_utma=145224231.1635946776.1665882554.1665882554.1665882554.1&_utmz=145224231.1665882554.1.1.utmcsr%3Dmaxweb%7Cutmccn%3Dfg_jerusalem%7Cutmcmd%3Demail%7Cutmctr%3Demail%7Cutmcct%3Dfg_bowel&_utmht=1665882554663&_u=YCDCCEABDAAAACAAI~&jid=2123887637&gjid=1511315438&cid=1635946776.1665882554&tid=UA-131678445-1&_gid=1520702084.1665882555&_r=1>m=2wgaa057P4T5X&cd3=Diabetes&cd13=Unknown&cd20=%2F&z=192436258 HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://bartonnutrition.com
Connection: keep-alive
Referer: https://bartonnutrition.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://bartonnutrition.com
date: Sun, 16 Oct 2022 01:09:12 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/viewthroughconversion/765746930/?url=https%3A%2F%2Fbartonnutrition.com%2F&guid=ON&script=0&data=&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&ocp_id=uFlLY6mHDZeWZbSqmugK&random=1143209620&sscte=1&crd=CJqqsQI
302 Found 42 B URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/765746930/?url=https%3A%2F%2Fbartonnutrition.com%2F&guid=ON&script=0&data=&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&ocp_id=uFlLY6mHDZeWZbSqmugK&random=1143209620&sscte=1&crd=CJqqsQI
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/viewthroughconversion/765746930/?url=https%3A%2F%2Fbartonnutrition.com%2F&guid=ON&script=0&data=&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&ocp_id=uFlLY6mHDZeWZbSqmugK&random=1143209620&sscte=1&crd=CJqqsQI HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.googletagmanager.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sun, 16 Oct 2022 01:09:12 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
location: https://www.google.com/pagead/1p-conversion/765746930/?url=https%3A%2F%2Fbartonnutrition.com%2F&guid=ON&script=0&data=&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&random=1143209620&sscte=1&crd=CJqqsQI&is_vtc=1&ocp_id=uFlLY6mHDZeWZbSqmugK&random=1189350597
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Sun, 16-Oct-2022 01:24:12 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash dc745cc6cabb7bcda110c74aa6bbdc4b
ee85567f8a368e63dc4ffad272f514df5b600b76
fd3befeac747605b265309554c748c5de2a5e4ca07f69889090e87639937846d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 16 Oct 2022 01:09:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 0cfb45c58ae6844172835b500657be8b
6922085e8a6a9483d3bc224f4a3605a04a4282b7
70209a588a2ba440e73f8cecc576fcfe2b883b138c25097c567facca498ba0f6
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=164336
Date: Sun, 16 Oct 2022 01:09:12 GMT
Etag: "634b20f7-1d7"
Expires: Mon, 17 Oct 2022 22:48:08 GMT
Last-Modified: Sat, 15 Oct 2022 21:07:03 GMT
Server: ECS (nyb/1D12)
X-Cache: Miss from cloudfront
Via: 1.1 aac54e3fe9825ce24d51e0204433c2c0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 0RIT6pQNXgTxqHQHXHoqZ9JJofdR7LAvSvIyAnfBL-Znf_bpTa_Jvw==
Age: 6065
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 5c64ced45088660f4e780756e5ca0968
7d1d4b389b65a679b01acd0e3a070da7f6760bf1
d266d13f4491fc184a1f031ed87a5af76d46c58bd8751cb92cbedba574139462
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 16 Oct 2022 01:09:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.youtube.com/s/player/1f77e565/www-widgetapi.vflset/www-widgetapi.js
200 OK 53 kB URL HTTP/2 www.youtube.com/s/player/1f77e565/www-widgetapi.vflset/www-widgetapi.js
IP
File type ASCII text, with very long lines (817)
Hash 214c4949af3c765b1238601da833b0b9
826f8fd13676ee9403922604974a071454c544ad
7578772be7daa0b4c59cf4d725e24c70ed5c6447a80d140b806c57a5680a8f5d
GET /s/player/1f77e565/www-widgetapi.vflset/www-widgetapi.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bartonnutrition.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding, Origin
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 52749
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 15 Oct 2022 11:08:07 GMT
expires: Sun, 15 Oct 2023 11:08:07 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 13 Oct 2022 00:21:58 GMT
content-type: text/javascript
age: 50465
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/viewthroughconversion/765746930/?random=1665882554717&cv=9&fst=1665882554717&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2wgaa0&sendb=1&ig=0&frm=0&url=https%3A%2F%2Fbartonnutrition.com%2Fptn%2F21%3Futm_campaign%3Dfg_jerusalem%26utm_medium%3Demail%26utm_content%3Dfg_bowel%26utm_source%3Dmaxweb%26subid%3D7605_sessid20221016010930125%26utm_term%3Demail%26AFFID%3D474832&tiba=Jerusalem%20Flower&auid=1254100519.1665882554&hn=www.google.com&async=1&rfmt=3&fmt=4
200 OK 1.1 kB URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/765746930/?random=1665882554717&cv=9&fst=1665882554717&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2wgaa0&sendb=1&ig=0&frm=0&url=https%3A%2F%2Fbartonnutrition.com%2Fptn%2F21%3Futm_campaign%3Dfg_jerusalem%26utm_medium%3Demail%26utm_content%3Dfg_bowel%26utm_source%3Dmaxweb%26subid%3D7605_sessid20221016010930125%26utm_term%3Demail%26AFFID%3D474832&tiba=Jerusalem%20Flower&auid=1254100519.1665882554&hn=www.google.com&async=1&rfmt=3&fmt=4
IP
File type ASCII text, with very long lines (2540), with no line terminators
Hash 30efec833772becc8858de690e9cb463
42900b18a5cc0bb65ce3a71e71a69788a3615fa2
390e3f5540ac34fc1de25f25ccbc1717095e5f8b001a0591a4c5949412f71ea4
GET /pagead/viewthroughconversion/765746930/?random=1665882554717&cv=9&fst=1665882554717&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2wgaa0&sendb=1&ig=0&frm=0&url=https%3A%2F%2Fbartonnutrition.com%2Fptn%2F21%3Futm_campaign%3Dfg_jerusalem%26utm_medium%3Demail%26utm_content%3Dfg_bowel%26utm_source%3Dmaxweb%26subid%3D7605_sessid20221016010930125%26utm_term%3Demail%26AFFID%3D474832&tiba=Jerusalem%20Flower&auid=1254100519.1665882554&hn=www.google.com&async=1&rfmt=3&fmt=4 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bartonnutrition.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sun, 16 Oct 2022 01:09:12 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 1117
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Sun, 16-Oct-2022 01:24:12 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-8M5DP1FGCG&cid=1635946776.1665882554>m=2oeaa0&aip=1&z=997678342
200 OK 42 B URL HTTP/2 www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-8M5DP1FGCG&cid=1635946776.1665882554>m=2oeaa0&aip=1&z=997678342
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-8M5DP1FGCG&cid=1635946776.1665882554>m=2oeaa0&aip=1&z=997678342 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bartonnutrition.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sun, 16 Oct 2022 01:09:12 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash dabc9909474f0f9c08eb8655c1bc19d6
21d8e9c482a94be79a802ec171820d90a4c4cddf
22c7da5a25fbbb3a98d52990c7717acbd270afdf977790993a775a1cd21d4b33
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5258
Cache-Control: max-age=135060
Content-Type: application/ocsp-response
Date: Sun, 16 Oct 2022 01:09:12 GMT
Etag: "634ab1c2-1d7"
Expires: Mon, 17 Oct 2022 14:40:12 GMT
Last-Modified: Sat, 15 Oct 2022 13:12:34 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash b71c1dfe563720287179a76edf29c680
6096cc371998151d37a2f7698b0fe0371bb43269
7472e945b0ae9b967b68ec85dc8a005c74c2f5c63c68a9de142be69983062a90
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 16 Oct 2022 01:09:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
d1pqvb2h9xgm7r.cloudfront.net/v1/rt
204 No Content 0 B URL HTTP/2 d1pqvb2h9xgm7r.cloudfront.net/v1/rt
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /v1/rt HTTP/1.1
Host: d1pqvb2h9xgm7r.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://bartonnutrition.com/
Origin: https://bartonnutrition.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Sat, 15 Oct 2022 03:44:31 GMT
access-control-allow-origin: *
access-control-allow-methods: *
access-control-allow-headers: *
access-control-max-age: 300
apigw-requestid: aBvpAjZioAMEMpQ=
x-cache: Hit from cloudfront
via: 1.1 76c917e0bb0ba45eb834d25d76ee125e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: LbI11mSiDTymahA6tUbKB7lIetE6LNhHVLSXy7rn-Y6hCFI1QuZPgw==
age: 77081
X-Firefox-Spdy: h2
d1pqvb2h9xgm7r.cloudfront.net/v1/rt
204 No Content 0 B URL HTTP/2 d1pqvb2h9xgm7r.cloudfront.net/v1/rt
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /v1/rt HTTP/1.1
Host: d1pqvb2h9xgm7r.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://bartonnutrition.com/
Origin: https://bartonnutrition.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Sat, 15 Oct 2022 03:44:31 GMT
access-control-allow-origin: *
access-control-allow-methods: *
access-control-allow-headers: *
access-control-max-age: 300
apigw-requestid: aBvpAjZioAMEMpQ=
x-cache: Hit from cloudfront
via: 1.1 76c917e0bb0ba45eb834d25d76ee125e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: VxOx_detJij7AQ6rrKUDzXIR6jK1GbZTdGw-zY2DfRfY5pVzVBKagA==
age: 77081
X-Firefox-Spdy: h2
www.google.no/pagead/1p-user-list/765746930/?random=1665882554717&cv=9&fst=1665882000000&num=1&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2wgaa0&sendb=1&frm=0&url=https%3A%2F%2Fbartonnutrition.com%2Fptn%2F21%3Futm_campaign%3Dfg_jerusalem%26utm_medium%3Demail%26utm_content%3Dfg_bowel%26utm_source%3Dmaxweb%26subid%3D7605_sessid20221016010930125%26utm_term%3Demail%26AFFID%3D474832&tiba=Jerusalem%20Flower&async=1&fmt=3&is_vtc=1&random=1606688671&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y
200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-user-list/765746930/?random=1665882554717&cv=9&fst=1665882000000&num=1&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2wgaa0&sendb=1&frm=0&url=https%3A%2F%2Fbartonnutrition.com%2Fptn%2F21%3Futm_campaign%3Dfg_jerusalem%26utm_medium%3Demail%26utm_content%3Dfg_bowel%26utm_source%3Dmaxweb%26subid%3D7605_sessid20221016010930125%26utm_term%3Demail%26AFFID%3D474832&tiba=Jerusalem%20Flower&async=1&fmt=3&is_vtc=1&random=1606688671&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/765746930/?random=1665882554717&cv=9&fst=1665882000000&num=1&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2wgaa0&sendb=1&frm=0&url=https%3A%2F%2Fbartonnutrition.com%2Fptn%2F21%3Futm_campaign%3Dfg_jerusalem%26utm_medium%3Demail%26utm_content%3Dfg_bowel%26utm_source%3Dmaxweb%26subid%3D7605_sessid20221016010930125%26utm_term%3Demail%26AFFID%3D474832&tiba=Jerusalem%20Flower&async=1&fmt=3&is_vtc=1&random=1606688671&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bartonnutrition.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sun, 16 Oct 2022 01:09:12 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.com/pagead/1p-user-list/765746930/?random=1665882554717&cv=9&fst=1665882000000&num=1&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2wgaa0&sendb=1&frm=0&url=https%3A%2F%2Fbartonnutrition.com%2Fptn%2F21%3Futm_campaign%3Dfg_jerusalem%26utm_medium%3Demail%26utm_content%3Dfg_bowel%26utm_source%3Dmaxweb%26subid%3D7605_sessid20221016010930125%26utm_term%3Demail%26AFFID%3D474832&tiba=Jerusalem%20Flower&async=1&fmt=3&is_vtc=1&random=1606688671&resp=GooglemKTybQhCsO&rmt_tld=0&ipr=y
200 OK 42 B URL HTTP/2 www.google.com/pagead/1p-user-list/765746930/?random=1665882554717&cv=9&fst=1665882000000&num=1&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2wgaa0&sendb=1&frm=0&url=https%3A%2F%2Fbartonnutrition.com%2Fptn%2F21%3Futm_campaign%3Dfg_jerusalem%26utm_medium%3Demail%26utm_content%3Dfg_bowel%26utm_source%3Dmaxweb%26subid%3D7605_sessid20221016010930125%26utm_term%3Demail%26AFFID%3D474832&tiba=Jerusalem%20Flower&async=1&fmt=3&is_vtc=1&random=1606688671&resp=GooglemKTybQhCsO&rmt_tld=0&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/765746930/?random=1665882554717&cv=9&fst=1665882000000&num=1&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2wgaa0&sendb=1&frm=0&url=https%3A%2F%2Fbartonnutrition.com%2Fptn%2F21%3Futm_campaign%3Dfg_jerusalem%26utm_medium%3Demail%26utm_content%3Dfg_bowel%26utm_source%3Dmaxweb%26subid%3D7605_sessid20221016010930125%26utm_term%3Demail%26AFFID%3D474832&tiba=Jerusalem%20Flower&async=1&fmt=3&is_vtc=1&random=1606688671&resp=GooglemKTybQhCsO&rmt_tld=0&ipr=y HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bartonnutrition.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sun, 16 Oct 2022 01:09:12 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
dndngvalp4jdj.cloudfront.net/bartonnutrition.com/images/global/pixel.gif
200 OK 43 B URL HTTP/2 dndngvalp4jdj.cloudfront.net/bartonnutrition.com/images/global/pixel.gif
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash db04c7b378cb2db912c3ba8a5a774ee3
dee34bd86c3484d31002182aa2b7caa4699126b8
98b3d9d20e032f90aca49e9b116225d539ff6fbdb7e42c3c363f63896ac03d2a
GET /bartonnutrition.com/images/global/pixel.gif HTTP/1.1
Host: dndngvalp4jdj.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bartonnutrition.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/gif
content-length: 43
last-modified: Wed, 22 Jul 2020 19:54:59 GMT
x-amz-version-id: JPKws933XpaeoKWY679SblCsuAqb808s
accept-ranges: bytes
server: AmazonS3
date: Sun, 16 Oct 2022 01:09:13 GMT
cache-control: max-age=2600000
etag: "db04c7b378cb2db912c3ba8a5a774ee3"
vary: Accept-Encoding
x-cache: RefreshHit from cloudfront
via: 1.1 814e8c24454087e83cd261a6cf477166.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: Xa0u5Mtf7FmnUYL158m7H0ztDwfNpfQYA6wQRXBk4bnjKl9CzFWjnA==
X-Firefox-Spdy: h2
dndngvalp4jdj.cloudfront.net/bartonnutrition.com/images/video/012/02-offer.jpg
200 OK 38 kB URL HTTP/2 dndngvalp4jdj.cloudfront.net/bartonnutrition.com/images/video/012/02-offer.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 500x350, components 3\012- data
Hash 721d978a326f3c45fde8f006ea52144a
bc5925c2114fcb9225aa3b707206a074c1254139
990c38230ea2b29e4856e299283f7fb07464af249b91da857c545266b6f604aa
GET /bartonnutrition.com/images/video/012/02-offer.jpg HTTP/1.1
Host: dndngvalp4jdj.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bartonnutrition.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 38066
last-modified: Tue, 22 Mar 2022 20:37:37 GMT
x-amz-version-id: aqJAnRbpXdWBCcjsOT2UKDgz66jHDwv6
accept-ranges: bytes
server: AmazonS3
date: Sun, 16 Oct 2022 01:09:13 GMT
cache-control: max-age=2600000
etag: "721d978a326f3c45fde8f006ea52144a"
vary: Accept-Encoding
x-cache: RefreshHit from cloudfront
via: 1.1 814e8c24454087e83cd261a6cf477166.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: Lej4WnwdhzLPtSwoGjk13dPbzeyql-XGG6zEsf1wx26s2kn3oi9jig==
X-Firefox-Spdy: h2
www.google.no/pagead/1p-conversion/765746930/?url=https%3A%2F%2Fbartonnutrition.com%2F&guid=ON&script=0&data=&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&random=1143209620&sscte=1&crd=CJqqsQI&is_vtc=1&ocp_id=uFlLY6mHDZeWZbSqmugK&random=1189350597&ipr=y&prhg=0
200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-conversion/765746930/?url=https%3A%2F%2Fbartonnutrition.com%2F&guid=ON&script=0&data=&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&random=1143209620&sscte=1&crd=CJqqsQI&is_vtc=1&ocp_id=uFlLY6mHDZeWZbSqmugK&random=1189350597&ipr=y&prhg=0
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-conversion/765746930/?url=https%3A%2F%2Fbartonnutrition.com%2F&guid=ON&script=0&data=&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&random=1143209620&sscte=1&crd=CJqqsQI&is_vtc=1&ocp_id=uFlLY6mHDZeWZbSqmugK&random=1189350597&ipr=y&prhg=0 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.googletagmanager.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sun, 16 Oct 2022 01:09:12 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
dndngvalp4jdj.cloudfront.net/bartonnutrition.com/images/global/flower-placeholder.jpg
200 OK 208 kB URL HTTP/2 dndngvalp4jdj.cloudfront.net/bartonnutrition.com/images/global/flower-placeholder.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x1080, components 3\012- data
Size 208 kB (208233 bytes)
Hash 9ccac4c439cfce2fabcad73d5862bf56
9c86a3c4c54373c5e50e54d9751f30db71b12596
5fc4a7c962748b9658631aa7817a76a84dfe2a25d5f6271e72fbc8ec80a1b841
GET /bartonnutrition.com/images/global/flower-placeholder.jpg HTTP/1.1
Host: dndngvalp4jdj.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bartonnutrition.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 208233
last-modified: Tue, 22 Mar 2022 20:37:38 GMT
x-amz-version-id: EEuPIRa9R_yQja8sVMf5ncpxY7.144iL
accept-ranges: bytes
server: AmazonS3
date: Sun, 16 Oct 2022 01:09:13 GMT
cache-control: max-age=2600000
etag: "9ccac4c439cfce2fabcad73d5862bf56"
vary: Accept-Encoding
x-cache: RefreshHit from cloudfront
via: 1.1 814e8c24454087e83cd261a6cf477166.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 2wtvUOTf5sXXiBoYa5SJ1h-rpOgFKUiNG8SzVzW-iSlCx0ypHOrayA==
X-Firefox-Spdy: h2
dndngvalp4jdj.cloudfront.net/bartonnutrition.com/images/video/012/03-offer.jpg
200 OK 31 kB URL HTTP/2 dndngvalp4jdj.cloudfront.net/bartonnutrition.com/images/video/012/03-offer.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 500x350, components 3\012- data
Hash eb9acb7344612425f061123762f158fe
911ccfb0b7e29fd6969e5f275d3fac1afcceb044
4d191ccc3933ee02fc2200cb39367f969f125918b9e3876d1e237b19665912cf
GET /bartonnutrition.com/images/video/012/03-offer.jpg HTTP/1.1
Host: dndngvalp4jdj.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bartonnutrition.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 31446
last-modified: Tue, 15 Mar 2022 21:43:04 GMT
x-amz-version-id: sUgpwiJG_U7tsh08wP1b2xl3xExRUJwm
accept-ranges: bytes
server: AmazonS3
date: Sun, 16 Oct 2022 01:09:13 GMT
cache-control: max-age=2600000
etag: "eb9acb7344612425f061123762f158fe"
vary: Accept-Encoding
x-cache: RefreshHit from cloudfront
via: 1.1 814e8c24454087e83cd261a6cf477166.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: OCm18qR459qyxuqhK4xLA8n_LgSZafZdvaPqD-UecOc7_V9ImNFXEQ==
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 727 B IP
Hash 5c25b75040ab80b69e2318345978a95a
accd38c42ca5c5953d0da7ab6235cbffa439fc68
d607602b7565e87d2adc4a9330add66cb785ad1c45b55d16716ab1652acedd63
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6296
Cache-Control: max-age=159135
Content-Type: application/ocsp-response
Date: Sun, 16 Oct 2022 01:09:12 GMT
Etag: "634b0bbf-2d7"
Expires: Mon, 17 Oct 2022 21:21:27 GMT
Last-Modified: Sat, 15 Oct 2022 19:36:31 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 727
ocsp.digicert.com/
200 OK 727 B IP
Hash 5c25b75040ab80b69e2318345978a95a
accd38c42ca5c5953d0da7ab6235cbffa439fc68
d607602b7565e87d2adc4a9330add66cb785ad1c45b55d16716ab1652acedd63
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4748
Cache-Control: max-age=157586
Content-Type: application/ocsp-response
Date: Sun, 16 Oct 2022 01:09:12 GMT
Etag: "634b0bbf-2d7"
Expires: Mon, 17 Oct 2022 20:55:38 GMT
Last-Modified: Sat, 15 Oct 2022 19:36:31 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 727
dndngvalp4jdj.cloudfront.net/bartonnutrition.com/images/video/012/01-offer.jpg
200 OK 20 kB URL HTTP/2 dndngvalp4jdj.cloudfront.net/bartonnutrition.com/images/video/012/01-offer.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 500x350, components 3\012- data
Hash d8575e86b99a7ccbff9420ca92cd1233
8b5dacf3b2b1f15689fe1a1ffc0c532ca1e6d657
e8051a857b34ea5baa4680d9e1b302faf41bf5f437b03cfc66d31bafbb050fa9
GET /bartonnutrition.com/images/video/012/01-offer.jpg HTTP/1.1
Host: dndngvalp4jdj.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bartonnutrition.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 20312
date: Sun, 16 Oct 2022 01:09:13 GMT
last-modified: Tue, 15 Mar 2022 21:43:04 GMT
etag: "d8575e86b99a7ccbff9420ca92cd1233"
cache-control: max-age=2600000
x-amz-version-id: N22ZvpbkjCF2HABjfZwgM00qCMnYnqkX
accept-ranges: bytes
server: AmazonS3
x-cache: Miss from cloudfront
via: 1.1 814e8c24454087e83cd261a6cf477166.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: ooDQLImZQasCRxH6YMdfBDRwQgc14n4n_n3pCwruvCTls9Y0gPdYsQ==
X-Firefox-Spdy: h2
www.facebook.com/tr/?id=368276591178798&ev=PageView&dl=https%3A%2F%2Fbartonnutrition.com%2Fptn%2F21%3Futm_campaign%3Dfg_jerusalem%26utm_medium%3Demail%26utm_content%3Dfg_bowel%26utm_source%3Dmaxweb%26subid%3D7605_sessid20221016010930125%26utm_term%3Demail%26AFFID%3D474832&rl=&if=false&ts=1665882554990&sw=1280&sh=1024&v=2.9.85&r=stable&ec=0&o=30&fbp=fb.1.1665882554988.1549088365&it=1665882554728&coo=false&rqm=GET
200 OK 0 B URL HTTP/2 www.facebook.com/tr/?id=368276591178798&ev=PageView&dl=https%3A%2F%2Fbartonnutrition.com%2Fptn%2F21%3Futm_campaign%3Dfg_jerusalem%26utm_medium%3Demail%26utm_content%3Dfg_bowel%26utm_source%3Dmaxweb%26subid%3D7605_sessid20221016010930125%26utm_term%3Demail%26AFFID%3D474832&rl=&if=false&ts=1665882554990&sw=1280&sh=1024&v=2.9.85&r=stable&ec=0&o=30&fbp=fb.1.1665882554988.1549088365&it=1665882554728&coo=false&rqm=GET
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=368276591178798&ev=PageView&dl=https%3A%2F%2Fbartonnutrition.com%2Fptn%2F21%3Futm_campaign%3Dfg_jerusalem%26utm_medium%3Demail%26utm_content%3Dfg_bowel%26utm_source%3Dmaxweb%26subid%3D7605_sessid20221016010930125%26utm_term%3Demail%26AFFID%3D474832&rl=&if=false&ts=1665882554990&sw=1280&sh=1024&v=2.9.85&r=stable&ec=0&o=30&fbp=fb.1.1665882554988.1549088365&it=1665882554728&coo=false&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bartonnutrition.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
date: Sun, 16 Oct 2022 01:09:12 GMT
X-Firefox-Spdy: h2
capture.trackjs.com/capture?token=5a697d58eec24ae599b030cf7cc56ebd
200 OK 0 B URL HTTP/2 capture.trackjs.com/capture?token=5a697d58eec24ae599b030cf7cc56ebd
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /capture?token=5a697d58eec24ae599b030cf7cc56ebd HTTP/1.1
Host: capture.trackjs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 2222
Origin: https://bartonnutrition.com
Connection: keep-alive
Referer: https://bartonnutrition.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 16 Oct 2022 01:09:12 GMT
content-length: 0
access-control-allow-methods: POST, OPTIONS
access-control-allow-origin: *
access-control-expose-headers: Content-Length,Content-Range
access-control-max-age: 86400
X-Firefox-Spdy: h2
capture.trackjs.com/capture?token=5a697d58eec24ae599b030cf7cc56ebd
200 OK 0 B URL HTTP/2 capture.trackjs.com/capture?token=5a697d58eec24ae599b030cf7cc56ebd
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /capture?token=5a697d58eec24ae599b030cf7cc56ebd HTTP/1.1
Host: capture.trackjs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 3682
Origin: https://bartonnutrition.com
Connection: keep-alive
Referer: https://bartonnutrition.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 16 Oct 2022 01:09:12 GMT
content-length: 0
access-control-allow-methods: POST, OPTIONS
access-control-allow-origin: *
access-control-expose-headers: Content-Length,Content-Range
access-control-max-age: 86400
X-Firefox-Spdy: h2
dndngvalp4jdj.cloudfront.net/bartonnutrition.com/images/global/favicon.png?v=1.14.11.21
200 OK 4.7 kB URL HTTP/2 dndngvalp4jdj.cloudfront.net/bartonnutrition.com/images/global/favicon.png?v=1.14.11.21
IP
File type PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced\012- data
Hash 85bc409ab592d7fb22bb7f82b72f6fef
7a60d2766ed2b9e5a1bed449cd4361a3a6fc4579
d0dc73e92a9d3d78d882cf77c7fdc915f8fea96255e901120ef3cd3f53a1e556
GET /bartonnutrition.com/images/global/favicon.png?v=1.14.11.21 HTTP/1.1
Host: dndngvalp4jdj.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bartonnutrition.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 4730
last-modified: Thu, 29 Oct 2020 21:08:25 GMT
x-amz-version-id: O.Zm8vNYb0ZIYzww17ZJK98TAm8.GflO
accept-ranges: bytes
server: AmazonS3
date: Sun, 16 Oct 2022 01:09:13 GMT
cache-control: max-age=2600000
etag: "85bc409ab592d7fb22bb7f82b72f6fef"
vary: Accept-Encoding
x-cache: RefreshHit from cloudfront
via: 1.1 814e8c24454087e83cd261a6cf477166.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: MkwoCNGNlCmNI1c56ii9LsKN4AL28xcVsfRqiGWHNGnul9pt61aWHg==
X-Firefox-Spdy: h2
dndngvalp4jdj.cloudfront.net/bartonnutrition.com/images/video/012/add-to-cart.png
200 OK 74 kB URL HTTP/2 dndngvalp4jdj.cloudfront.net/bartonnutrition.com/images/video/012/add-to-cart.png
IP
File type PNG image data, 800 x 175, 8-bit/color RGBA, non-interlaced\012- data
Hash 86ad81bd78eceb2724ef77f9dadeb314
ee1fd3a99822889d4e446b1d51ccbffe24f7c7aa
236785a291323e5db370be614d7d3d048617c2f4cf9103b4688e0c682b4b36a1
GET /bartonnutrition.com/images/video/012/add-to-cart.png HTTP/1.1
Host: dndngvalp4jdj.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bartonnutrition.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 73562
date: Sun, 16 Oct 2022 01:09:13 GMT
last-modified: Tue, 15 Mar 2022 21:43:09 GMT
etag: "86ad81bd78eceb2724ef77f9dadeb314"
cache-control: max-age=2600000
x-amz-version-id: yZp4GPWfPCujsIUd3pW400SwQLMzNeCB
accept-ranges: bytes
server: AmazonS3
x-cache: Miss from cloudfront
via: 1.1 814e8c24454087e83cd261a6cf477166.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: i_7lTZWIvz_vNFjO90GSuzp3PlXSEPUvnLpKui2bY8txIP034FwxYA==
X-Firefox-Spdy: h2
d1pqvb2h9xgm7r.cloudfront.net/v1/rt
200 OK 30 B URL HTTP/2 d1pqvb2h9xgm7r.cloudfront.net/v1/rt
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 88162a743f3db43a7bd41526c46a477e
cb5f8c263ed8bee795c8fa7504a177d72cf66cba
81e42c3942defaf6bcb76f96b5b30cebc054427eca09930bec1614acaa828827
POST /v1/rt HTTP/1.1
Host: d1pqvb2h9xgm7r.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 492
Origin: https://bartonnutrition.com
Connection: keep-alive
Referer: https://bartonnutrition.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json
content-length: 30
date: Sun, 16 Oct 2022 01:09:12 GMT
server: Apache
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
access-control-expose-headers: date, x-api-id
apigw-requestid: aEr06galIAMEMNw=
x-cache: Miss from cloudfront
via: 1.1 76c917e0bb0ba45eb834d25d76ee125e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: M5C5Pbtxer-ymkiFCUngxgj-3sCXmNqop7xdXc5Phq7rO-8GRMpvag==
X-Firefox-Spdy: h2
d1pqvb2h9xgm7r.cloudfront.net/v1/rt
200 OK 30 B URL HTTP/2 d1pqvb2h9xgm7r.cloudfront.net/v1/rt
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 88162a743f3db43a7bd41526c46a477e
cb5f8c263ed8bee795c8fa7504a177d72cf66cba
81e42c3942defaf6bcb76f96b5b30cebc054427eca09930bec1614acaa828827
POST /v1/rt HTTP/1.1
Host: d1pqvb2h9xgm7r.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 476
Origin: https://bartonnutrition.com
Connection: keep-alive
Referer: https://bartonnutrition.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json
content-length: 30
date: Sun, 16 Oct 2022 01:09:12 GMT
server: Apache
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
access-control-expose-headers: date, x-api-id
apigw-requestid: aEr07h2JIAMEMXQ=
x-cache: Miss from cloudfront
via: 1.1 76c917e0bb0ba45eb834d25d76ee125e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: QIMghvSkRskWopn4zUSOn1L9c7LvibF55745zyhxcBIx-Thn8zEcTg==
X-Firefox-Spdy: h2
rp.liadm.com/j?dtstmp=1665882554840&aid=a-075m&se=e30&duid=9fdfca52ca67--01gff5d0a1btz765m9ermnxgxs&tna=v2.5.0&pu=https%3A%2F%2Fbartonnutrition.com%2Fptn%2F21%3Futm_campaign%3Dfg_jerusalem%26utm_medium%3Demail%26utm_content%3Dfg_bowel%26utm_source%3Dmaxweb%26subid%3D7605_sessid20221016010930125%26utm_term%3Demail%26AFFID%3D474832&wpn=lc-bundle&c=PHRpdGxlPkplcnVzYWxlbSBGbG93ZXI8L3RpdGxlPjxtZXRhIG5hbWU9ImRlc2NyaXB0aW9uIiBjb250ZW50PSJEaXNjb3ZlciBuYXR1cmFsIHdheXMgdG8gc3VwcG9ydCB5b3VyIGJvZHkncyBuYXR1cmFsIGhlYWxpbmcgcmVzcG9uc2Ugc3lzdGVtLiI-PGgxPkplcnVzYWxlbSdzICJNeXN0ZXJpb3VzIDExIiBTYWZlbHkgJmFtcDsgTmF0dXJhbGx5IENhbG1zIEVycmF0aWMgQmxvb2QgU3VnYXIgRm9yIFVwIFRvIDI0Jm5ic3A7SG91cnMuLi48L2gxPjxoMT5KZXJ1c2FsZW0ncyAiTXlzdGVyaW91cyAxMSIgU2FmZWx5ICZhbXA7IE5hdHVyYWxseSBDYWxtcyBFcnJhdGljIEJsb29kIFN1Z2FyIEZvciBVcCBUbyAyNCZuYnNwO0hvdXJzLi4uPC9oMT48aDEgY2xhc3M9ImNhcmQtdGl0bGUgcHJpY2luZy1jYXJkLXRpdGxlIj4kNTk8L2gxPjxoMSBjbGFzcz0iY2FyZC10aXRsZSBwcmljaW5nLWNhcmQtdGl0bGUiPiQzOSA8c21hbGw-cGVyIGNvbnRhaW5lcjwvc21hbGw-PC9oMT48aDEgY2xhc3M9ImNhcmQtdGl0bGUgcHJpY2luZy1jYXJkLXRpdGxlIj4kNDkgPHNtYWxsPnBlciBjb250YWluZXI8L3NtYWxsPjwvaDE-
302 Found 0 B URL HTTP/2 rp.liadm.com/j?dtstmp=1665882554840&aid=a-075m&se=e30&duid=9fdfca52ca67--01gff5d0a1btz765m9ermnxgxs&tna=v2.5.0&pu=https%3A%2F%2Fbartonnutrition.com%2Fptn%2F21%3Futm_campaign%3Dfg_jerusalem%26utm_medium%3Demail%26utm_content%3Dfg_bowel%26utm_source%3Dmaxweb%26subid%3D7605_sessid20221016010930125%26utm_term%3Demail%26AFFID%3D474832&wpn=lc-bundle&c=PHRpdGxlPkplcnVzYWxlbSBGbG93ZXI8L3RpdGxlPjxtZXRhIG5hbWU9ImRlc2NyaXB0aW9uIiBjb250ZW50PSJEaXNjb3ZlciBuYXR1cmFsIHdheXMgdG8gc3VwcG9ydCB5b3VyIGJvZHkncyBuYXR1cmFsIGhlYWxpbmcgcmVzcG9uc2Ugc3lzdGVtLiI-PGgxPkplcnVzYWxlbSdzICJNeXN0ZXJpb3VzIDExIiBTYWZlbHkgJmFtcDsgTmF0dXJhbGx5IENhbG1zIEVycmF0aWMgQmxvb2QgU3VnYXIgRm9yIFVwIFRvIDI0Jm5ic3A7SG91cnMuLi48L2gxPjxoMT5KZXJ1c2FsZW0ncyAiTXlzdGVyaW91cyAxMSIgU2FmZWx5ICZhbXA7IE5hdHVyYWxseSBDYWxtcyBFcnJhdGljIEJsb29kIFN1Z2FyIEZvciBVcCBUbyAyNCZuYnNwO0hvdXJzLi4uPC9oMT48aDEgY2xhc3M9ImNhcmQtdGl0bGUgcHJpY2luZy1jYXJkLXRpdGxlIj4kNTk8L2gxPjxoMSBjbGFzcz0iY2FyZC10aXRsZSBwcmljaW5nLWNhcmQtdGl0bGUiPiQzOSA8c21hbGw-cGVyIGNvbnRhaW5lcjwvc21hbGw-PC9oMT48aDEgY2xhc3M9ImNhcmQtdGl0bGUgcHJpY2luZy1jYXJkLXRpdGxlIj4kNDkgPHNtYWxsPnBlciBjb250YWluZXI8L3NtYWxsPjwvaDE-
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /j?dtstmp=1665882554840&aid=a-075m&se=e30&duid=9fdfca52ca67--01gff5d0a1btz765m9ermnxgxs&tna=v2.5.0&pu=https%3A%2F%2Fbartonnutrition.com%2Fptn%2F21%3Futm_campaign%3Dfg_jerusalem%26utm_medium%3Demail%26utm_content%3Dfg_bowel%26utm_source%3Dmaxweb%26subid%3D7605_sessid20221016010930125%26utm_term%3Demail%26AFFID%3D474832&wpn=lc-bundle&c=PHRpdGxlPkplcnVzYWxlbSBGbG93ZXI8L3RpdGxlPjxtZXRhIG5hbWU9ImRlc2NyaXB0aW9uIiBjb250ZW50PSJEaXNjb3ZlciBuYXR1cmFsIHdheXMgdG8gc3VwcG9ydCB5b3VyIGJvZHkncyBuYXR1cmFsIGhlYWxpbmcgcmVzcG9uc2Ugc3lzdGVtLiI-PGgxPkplcnVzYWxlbSdzICJNeXN0ZXJpb3VzIDExIiBTYWZlbHkgJmFtcDsgTmF0dXJhbGx5IENhbG1zIEVycmF0aWMgQmxvb2QgU3VnYXIgRm9yIFVwIFRvIDI0Jm5ic3A7SG91cnMuLi48L2gxPjxoMT5KZXJ1c2FsZW0ncyAiTXlzdGVyaW91cyAxMSIgU2FmZWx5ICZhbXA7IE5hdHVyYWxseSBDYWxtcyBFcnJhdGljIEJsb29kIFN1Z2FyIEZvciBVcCBUbyAyNCZuYnNwO0hvdXJzLi4uPC9oMT48aDEgY2xhc3M9ImNhcmQtdGl0bGUgcHJpY2luZy1jYXJkLXRpdGxlIj4kNTk8L2gxPjxoMSBjbGFzcz0iY2FyZC10aXRsZSBwcmljaW5nLWNhcmQtdGl0bGUiPiQzOSA8c21hbGw-cGVyIGNvbnRhaW5lcjwvc21hbGw-PC9oMT48aDEgY2xhc3M9ImNhcmQtdGl0bGUgcHJpY2luZy1jYXJkLXRpdGxlIj4kNDkgPHNtYWxsPnBlciBjb250YWluZXI8L3NtYWxsPjwvaDE- HTTP/1.1
Host: rp.liadm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://bartonnutrition.com
Connection: keep-alive
Referer: https://bartonnutrition.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Sun, 16 Oct 2022 01:09:13 GMT
content-length: 0
trace-id: 2455889dbb158a91
vary: Origin
location: /j?dtstmp=1665882554840&aid=a-075m&se=e30&duid=9fdfca52ca67--01gff5d0a1btz765m9ermnxgxs&tna=v2.5.0&pu=https%3A%2F%2Fbartonnutrition.com%2Fptn%2F21%3Futm_campaign%3Dfg_jerusalem%26utm_medium%3Demail%26utm_content%3Dfg_bowel%26utm_source%3Dmaxweb%26subid%3D7605_sessid20221016010930125%26utm_term%3Demail%26AFFID%3D474832&wpn=lc-bundle&c=PHRpdGxlPkplcnVzYWxlbSBGbG93ZXI8L3RpdGxlPjxtZXRhIG5hbWU9ImRlc2NyaXB0aW9uIiBjb250ZW50PSJEaXNjb3ZlciBuYXR1cmFsIHdheXMgdG8gc3VwcG9ydCB5b3VyIGJvZHkncyBuYXR1cmFsIGhlYWxpbmcgcmVzcG9uc2Ugc3lzdGVtLiI-PGgxPkplcnVzYWxlbSdzICJNeXN0ZXJpb3VzIDExIiBTYWZlbHkgJmFtcDsgTmF0dXJhbGx5IENhbG1zIEVycmF0aWMgQmxvb2QgU3VnYXIgRm9yIFVwIFRvIDI0Jm5ic3A7SG91cnMuLi48L2gxPjxoMT5KZXJ1c2FsZW0ncyAiTXlzdGVyaW91cyAxMSIgU2FmZWx5ICZhbXA7IE5hdHVyYWxseSBDYWxtcyBFcnJhdGljIEJsb29kIFN1Z2FyIEZvciBVcCBUbyAyNCZuYnNwO0hvdXJzLi4uPC9oMT48aDEgY2xhc3M9ImNhcmQtdGl0bGUgcHJpY2luZy1jYXJkLXRpdGxlIj4kNTk8L2gxPjxoMSBjbGFzcz0iY2FyZC10aXRsZSBwcmljaW5nLWNhcmQtdGl0bGUiPiQzOSA8c21hbGw-cGVyIGNvbnRhaW5lcjwvc21hbGw-PC9oMT48aDEgY2xhc3M9ImNhcmQtdGl0bGUgcHJpY2luZy1jYXJkLXRpdGxlIj4kNDkgPHNtYWxsPnBlciBjb250YWluZXI8L3NtYWxsPjwvaDE-&n3pc=true
set-cookie: lidid=e54125b3-bf98-46f3-ab04-60c9c79fb992; Max-Age=63072000; Expires=Tue, 15 Oct 2024 01:09:13 GMT; SameSite=None; Path=/; Domain=.liadm.com; Secure; HTTPOnly
request-time: 0
referrer-policy: origin-when-cross-origin, strict-origin-when-cross-origin
x-frame-options: DENY
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: https://bartonnutrition.com
access-control-allow-credentials: true
x-permitted-cross-domain-policies: master-only
X-Firefox-Spdy: h2
usage.trackjs.com/usage.gif?token=5a697d58eec24ae599b030cf7cc56ebd&correlationId=92a44f85-bf25-462c-a761-6eade43906c9&application=&x=c09f11cb-d4f0-4476-a54f-bbdf911a7205&
200 OK 43 B URL HTTP/1.1 usage.trackjs.com/usage.gif?token=5a697d58eec24ae599b030cf7cc56ebd&correlationId=92a44f85-bf25-462c-a761-6eade43906c9&application=&x=c09f11cb-d4f0-4476-a54f-bbdf911a7205&
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /usage.gif?token=5a697d58eec24ae599b030cf7cc56ebd&correlationId=92a44f85-bf25-462c-a761-6eade43906c9&application=&x=c09f11cb-d4f0-4476-a54f-bbdf911a7205& HTTP/1.1
Host: usage.trackjs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bartonnutrition.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 16 Oct 2022 01:09:13 GMT
Content-Type: image/gif
Content-Length: 43
Last-Modified: Mon, 28 Sep 1970 06:00:00 GMT
Connection: keep-alive
rp.liadm.com/j?dtstmp=1665882554840&aid=a-075m&se=e30&duid=9fdfca52ca67--01gff5d0a1btz765m9ermnxgxs&tna=v2.5.0&pu=https%3A%2F%2Fbartonnutrition.com%2Fptn%2F21%3Futm_campaign%3Dfg_jerusalem%26utm_medium%3Demail%26utm_content%3Dfg_bowel%26utm_source%3Dmaxweb%26subid%3D7605_sessid20221016010930125%26utm_term%3Demail%26AFFID%3D474832&wpn=lc-bundle&c=PHRpdGxlPkplcnVzYWxlbSBGbG93ZXI8L3RpdGxlPjxtZXRhIG5hbWU9ImRlc2NyaXB0aW9uIiBjb250ZW50PSJEaXNjb3ZlciBuYXR1cmFsIHdheXMgdG8gc3VwcG9ydCB5b3VyIGJvZHkncyBuYXR1cmFsIGhlYWxpbmcgcmVzcG9uc2Ugc3lzdGVtLiI-PGgxPkplcnVzYWxlbSdzICJNeXN0ZXJpb3VzIDExIiBTYWZlbHkgJmFtcDsgTmF0dXJhbGx5IENhbG1zIEVycmF0aWMgQmxvb2QgU3VnYXIgRm9yIFVwIFRvIDI0Jm5ic3A7SG91cnMuLi48L2gxPjxoMT5KZXJ1c2FsZW0ncyAiTXlzdGVyaW91cyAxMSIgU2FmZWx5ICZhbXA7IE5hdHVyYWxseSBDYWxtcyBFcnJhdGljIEJsb29kIFN1Z2FyIEZvciBVcCBUbyAyNCZuYnNwO0hvdXJzLi4uPC9oMT48aDEgY2xhc3M9ImNhcmQtdGl0bGUgcHJpY2luZy1jYXJkLXRpdGxlIj4kNTk8L2gxPjxoMSBjbGFzcz0iY2FyZC10aXRsZSBwcmljaW5nLWNhcmQtdGl0bGUiPiQzOSA8c21hbGw-cGVyIGNvbnRhaW5lcjwvc21hbGw-PC9oMT48aDEgY2xhc3M9ImNhcmQtdGl0bGUgcHJpY2luZy1jYXJkLXRpdGxlIj4kNDkgPHNtYWxsPnBlciBjb250YWluZXI8L3NtYWxsPjwvaDE-&n3pc=true
200 OK 13 B URL HTTP/2 rp.liadm.com/j?dtstmp=1665882554840&aid=a-075m&se=e30&duid=9fdfca52ca67--01gff5d0a1btz765m9ermnxgxs&tna=v2.5.0&pu=https%3A%2F%2Fbartonnutrition.com%2Fptn%2F21%3Futm_campaign%3Dfg_jerusalem%26utm_medium%3Demail%26utm_content%3Dfg_bowel%26utm_source%3Dmaxweb%26subid%3D7605_sessid20221016010930125%26utm_term%3Demail%26AFFID%3D474832&wpn=lc-bundle&c=PHRpdGxlPkplcnVzYWxlbSBGbG93ZXI8L3RpdGxlPjxtZXRhIG5hbWU9ImRlc2NyaXB0aW9uIiBjb250ZW50PSJEaXNjb3ZlciBuYXR1cmFsIHdheXMgdG8gc3VwcG9ydCB5b3VyIGJvZHkncyBuYXR1cmFsIGhlYWxpbmcgcmVzcG9uc2Ugc3lzdGVtLiI-PGgxPkplcnVzYWxlbSdzICJNeXN0ZXJpb3VzIDExIiBTYWZlbHkgJmFtcDsgTmF0dXJhbGx5IENhbG1zIEVycmF0aWMgQmxvb2QgU3VnYXIgRm9yIFVwIFRvIDI0Jm5ic3A7SG91cnMuLi48L2gxPjxoMT5KZXJ1c2FsZW0ncyAiTXlzdGVyaW91cyAxMSIgU2FmZWx5ICZhbXA7IE5hdHVyYWxseSBDYWxtcyBFcnJhdGljIEJsb29kIFN1Z2FyIEZvciBVcCBUbyAyNCZuYnNwO0hvdXJzLi4uPC9oMT48aDEgY2xhc3M9ImNhcmQtdGl0bGUgcHJpY2luZy1jYXJkLXRpdGxlIj4kNTk8L2gxPjxoMSBjbGFzcz0iY2FyZC10aXRsZSBwcmljaW5nLWNhcmQtdGl0bGUiPiQzOSA8c21hbGw-cGVyIGNvbnRhaW5lcjwvc21hbGw-PC9oMT48aDEgY2xhc3M9ImNhcmQtdGl0bGUgcHJpY2luZy1jYXJkLXRpdGxlIj4kNDkgPHNtYWxsPnBlciBjb250YWluZXI8L3NtYWxsPjwvaDE-&n3pc=true
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 97efe0b7ee61e154d57e80758bb797d8
810b4e115fe9f5ae697666febf2a9abf0b21c9ec
efabba3678b85fcab831b778ea2ddaad1e2a1e952584d3566bc39b7ccb3429d9
GET /j?dtstmp=1665882554840&aid=a-075m&se=e30&duid=9fdfca52ca67--01gff5d0a1btz765m9ermnxgxs&tna=v2.5.0&pu=https%3A%2F%2Fbartonnutrition.com%2Fptn%2F21%3Futm_campaign%3Dfg_jerusalem%26utm_medium%3Demail%26utm_content%3Dfg_bowel%26utm_source%3Dmaxweb%26subid%3D7605_sessid20221016010930125%26utm_term%3Demail%26AFFID%3D474832&wpn=lc-bundle&c=PHRpdGxlPkplcnVzYWxlbSBGbG93ZXI8L3RpdGxlPjxtZXRhIG5hbWU9ImRlc2NyaXB0aW9uIiBjb250ZW50PSJEaXNjb3ZlciBuYXR1cmFsIHdheXMgdG8gc3VwcG9ydCB5b3VyIGJvZHkncyBuYXR1cmFsIGhlYWxpbmcgcmVzcG9uc2Ugc3lzdGVtLiI-PGgxPkplcnVzYWxlbSdzICJNeXN0ZXJpb3VzIDExIiBTYWZlbHkgJmFtcDsgTmF0dXJhbGx5IENhbG1zIEVycmF0aWMgQmxvb2QgU3VnYXIgRm9yIFVwIFRvIDI0Jm5ic3A7SG91cnMuLi48L2gxPjxoMT5KZXJ1c2FsZW0ncyAiTXlzdGVyaW91cyAxMSIgU2FmZWx5ICZhbXA7IE5hdHVyYWxseSBDYWxtcyBFcnJhdGljIEJsb29kIFN1Z2FyIEZvciBVcCBUbyAyNCZuYnNwO0hvdXJzLi4uPC9oMT48aDEgY2xhc3M9ImNhcmQtdGl0bGUgcHJpY2luZy1jYXJkLXRpdGxlIj4kNTk8L2gxPjxoMSBjbGFzcz0iY2FyZC10aXRsZSBwcmljaW5nLWNhcmQtdGl0bGUiPiQzOSA8c21hbGw-cGVyIGNvbnRhaW5lcjwvc21hbGw-PC9oMT48aDEgY2xhc3M9ImNhcmQtdGl0bGUgcHJpY2luZy1jYXJkLXRpdGxlIj4kNDkgPHNtYWxsPnBlciBjb250YWluZXI8L3NtYWxsPjwvaDE-&n3pc=true HTTP/1.1
Host: rp.liadm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://bartonnutrition.com
Referer: https://bartonnutrition.com/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 16 Oct 2022 01:09:13 GMT
content-type: application/json
content-length: 13
trace-id: db59d59e83364c76
vary: Origin
request-time: 0
referrer-policy: origin-when-cross-origin, strict-origin-when-cross-origin
x-frame-options: DENY
x-pixel-event-id: 147be14e-9247-489a-ab52-395fcb92d037
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: https://bartonnutrition.com
access-control-allow-credentials: true
x-permitted-cross-domain-policies: master-only
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 960756695064807bf730e383483d3725
6ce95dcddde59ddd07da1f84cf0d78a1b08a85ea
07b7d0e6e1340401e62088aea39603b57012a04298a671e93ae28c1bc8ee8614
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=170687
Date: Sun, 16 Oct 2022 01:09:15 GMT
Etag: "634b49ae-1d7"
Expires: Tue, 18 Oct 2022 00:34:02 GMT
Last-Modified: Sun, 16 Oct 2022 00:00:46 GMT
Server: ECS (dcb/7EEC)
X-Cache: Miss from cloudfront
Via: 1.1 aac54e3fe9825ce24d51e0204433c2c0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: fB6dqvJ8xNF7Q0t__-s2T5Aq0jXcghw2t5H9ax-CYr6_kRzfg0IUKA==
Age: 1996
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 960756695064807bf730e383483d3725
6ce95dcddde59ddd07da1f84cf0d78a1b08a85ea
07b7d0e6e1340401e62088aea39603b57012a04298a671e93ae28c1bc8ee8614
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=168691
Date: Sun, 16 Oct 2022 01:09:15 GMT
Etag: "634b49ae-1d7"
Expires: Tue, 18 Oct 2022 00:00:46 GMT
Last-Modified: Sun, 16 Oct 2022 00:00:46 GMT
Server: nginx
X-Cache: Miss from cloudfront
Via: 1.1 aa34a836095df9de9d246a53dd63f1d6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: WNiik7Y6wspAHFQ4pTzXilUbjkYxpMvIjPqUnYNYswedXXFFpypwYQ==
secure.ultracart.com/rest/v2/checkout/allowedCountries
200 OK 0 B URL HTTP/1.1 secure.ultracart.com/rest/v2/checkout/allowedCountries
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /rest/v2/checkout/allowedCountries HTTP/1.1
Host: secure.ultracart.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: x-ultracart-api-version,x-ultracart-browser-key
Referer: https://bartonnutrition.com/
Origin: https://bartonnutrition.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sun, 16 Oct 2022 01:09:15 GMT
Content-Length: 0
Connection: keep-alive
Set-Cookie: AWSALB=EWMpsPsVjVDmOT68sCIfCLzc3bVHLNJ4WHkZzFdFWFq3t38UMs2zkkj8KlmCMFijlyUDbFYSCHfVpWimvZIuspU6PiP3x27CUwvvOYbwxxr1IfP5qYBy0d4wYiFp; Expires=Sun, 23 Oct 2022 01:09:15 GMT; Path=/
AWSALBCORS=EWMpsPsVjVDmOT68sCIfCLzc3bVHLNJ4WHkZzFdFWFq3t38UMs2zkkj8KlmCMFijlyUDbFYSCHfVpWimvZIuspU6PiP3x27CUwvvOYbwxxr1IfP5qYBy0d4wYiFp; Expires=Sun, 23 Oct 2022 01:09:15 GMT; Path=/; SameSite=None; Secure
Server: Apache
Access-Control-Allow-Origin: https://bartonnutrition.com
Access-Control-Allow-Credentials: true
Vary: Origin
Access-Control-Max-Age: 3600
Access-Control-Allow-Methods: HEAD, DELETE, POST, GET, PUT
Access-Control-Allow-Headers: x-ultracart-api-version,x-ultracart-browser-key
secure.ultracart.com/rest/v2/checkout/allowedCountries
200 OK 2.3 kB URL HTTP/1.1 secure.ultracart.com/rest/v2/checkout/allowedCountries
IP
File type JSON data\012- , ASCII text, with very long lines (10213), with no line terminators
Hash e0e9bde93990686f27319ac1c32e168f
39b1cefa8f6c2760f271558f57ff2da6e23e5895
e98235bbbaa22bcee4010356d7a3602d2b69b677a0dc2cb2ee03546208a7f172
POST /rest/v2/checkout/allowedCountries HTTP/1.1
Host: secure.ultracart.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-UltraCart-Api-Version: 2017-03-01
x-ultracart-browser-key: 1f9e61a3106e7e017ae9d55bf21fb400
Origin: https://bartonnutrition.com
Connection: keep-alive
Referer: https://bartonnutrition.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/1.1 200 OK
Date: Sun, 16 Oct 2022 01:09:15 GMT
Content-Type: application/json; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: AWSALB=TKjkU4L8yAA16ios49IRKxPvcAVbnDKbtw+PVFdBi5MjrLiVrKypfEJBvhSsQr0ruPAUe137RyRIsKO6x8WwOkGeXoFVkA9Z/J6nQ06vuOA1KnpEQG120I4eVmar; Expires=Sun, 23 Oct 2022 01:09:15 GMT; Path=/
AWSALBCORS=TKjkU4L8yAA16ios49IRKxPvcAVbnDKbtw+PVFdBi5MjrLiVrKypfEJBvhSsQr0ruPAUe137RyRIsKO6x8WwOkGeXoFVkA9Z/J6nQ06vuOA1KnpEQG120I4eVmar; Expires=Sun, 23 Oct 2022 01:09:15 GMT; Path=/; SameSite=None; Secure
Server: Apache
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://bartonnutrition.com
Vary: Origin,Accept-Encoding
X-UltraCart-Request-Id: 268BF4F7A6687C0183DE5685272E19213
Content-Encoding: gzip
secure.ultracart.com/rest/v2/checkout/cart?_expand=affiliate,billing,checkout,coupons,customer_profile,gift,gift_certificate,items,items.attributes,items.multimedia,items.multimedia.thumbnails,items.physical,marketing,payment,shipping,summary,taxes,upsell_after,settings.shipping.ship_on_date,settings.billing.provinces,settings.shipping.provinces,settings.gift,settings.shipping.deliver_on_date,settings.terms,settings.taxes
200 OK 0 B URL HTTP/1.1 secure.ultracart.com/rest/v2/checkout/cart?_expand=affiliate,billing,checkout,coupons,customer_profile,gift,gift_certificate,items,items.attributes,items.multimedia,items.multimedia.thumbnails,items.physical,marketing,payment,shipping,summary,taxes,upsell_after,settings.shipping.ship_on_date,settings.billing.provinces,settings.shipping.provinces,settings.gift,settings.shipping.deliver_on_date,settings.terms,settings.taxes
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /rest/v2/checkout/cart?_expand=affiliate,billing,checkout,coupons,customer_profile,gift,gift_certificate,items,items.attributes,items.multimedia,items.multimedia.thumbnails,items.physical,marketing,payment,shipping,summary,taxes,upsell_after,settings.shipping.ship_on_date,settings.billing.provinces,settings.shipping.provinces,settings.gift,settings.shipping.deliver_on_date,settings.terms,settings.taxes HTTP/1.1
Host: secure.ultracart.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: x-ultracart-api-version,x-ultracart-browser-key
Referer: https://bartonnutrition.com/
Origin: https://bartonnutrition.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sun, 16 Oct 2022 01:09:15 GMT
Content-Length: 0
Connection: keep-alive
Set-Cookie: AWSALB=zabEHs++jrde+JlXgd4ngZDHzUUOAV9WEBfGdny+nTwGk/zdBMSrkYDfFwqbwrRiYQkHrdGYCX8cmsC9ixl5+XzPZg8Q9pL3sZpBCFkJB+Yu9MaFeoLguUYo1az7; Expires=Sun, 23 Oct 2022 01:09:15 GMT; Path=/
AWSALBCORS=zabEHs++jrde+JlXgd4ngZDHzUUOAV9WEBfGdny+nTwGk/zdBMSrkYDfFwqbwrRiYQkHrdGYCX8cmsC9ixl5+XzPZg8Q9pL3sZpBCFkJB+Yu9MaFeoLguUYo1az7; Expires=Sun, 23 Oct 2022 01:09:15 GMT; Path=/; SameSite=None; Secure
Server: Apache
Access-Control-Allow-Origin: https://bartonnutrition.com
Access-Control-Allow-Credentials: true
Vary: Origin
Access-Control-Max-Age: 3600
Access-Control-Allow-Methods: HEAD, DELETE, POST, GET, PUT
Access-Control-Allow-Headers: x-ultracart-api-version,x-ultracart-browser-key
secure.ultracart.com/rest/v2/checkout/cart?_expand=affiliate,billing,checkout,coupons,customer_profile,gift,gift_certificate,items,items.attributes,items.multimedia,items.multimedia.thumbnails,items.physical,marketing,payment,shipping,summary,taxes,upsell_after,settings.shipping.ship_on_date,settings.billing.provinces,settings.shipping.provinces,settings.gift,settings.shipping.deliver_on_date,settings.terms,settings.taxes
200 OK 1.1 kB URL HTTP/1.1 secure.ultracart.com/rest/v2/checkout/cart?_expand=affiliate,billing,checkout,coupons,customer_profile,gift,gift_certificate,items,items.attributes,items.multimedia,items.multimedia.thumbnails,items.physical,marketing,payment,shipping,summary,taxes,upsell_after,settings.shipping.ship_on_date,settings.billing.provinces,settings.shipping.provinces,settings.gift,settings.shipping.deliver_on_date,settings.terms,settings.taxes
IP
File type JSON data\012- , ASCII text, with very long lines (4123), with no line terminators
Hash cbcb6c6a8258f4d8495c39cc2e057166
56b8b2aa541be2420d0868cbad082068ae53a1a5
690e84b6c744f80719a640ccab7e74f6f0489962dc2c05b709812a6a12d00677
GET /rest/v2/checkout/cart?_expand=affiliate,billing,checkout,coupons,customer_profile,gift,gift_certificate,items,items.attributes,items.multimedia,items.multimedia.thumbnails,items.physical,marketing,payment,shipping,summary,taxes,upsell_after,settings.shipping.ship_on_date,settings.billing.provinces,settings.shipping.provinces,settings.gift,settings.shipping.deliver_on_date,settings.terms,settings.taxes HTTP/1.1
Host: secure.ultracart.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-UltraCart-Api-Version: 2017-03-01
x-ultracart-browser-key: 1f9e61a3106e7e017ae9d55bf21fb400
Origin: https://bartonnutrition.com
Connection: keep-alive
Referer: https://bartonnutrition.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sun, 16 Oct 2022 01:09:15 GMT
Content-Type: application/json; charset=UTF-8
Content-Length: 1133
Connection: keep-alive
Set-Cookie: AWSALB=e1LhY0BUexDuFa+1XfSnq/qOalCwPYvnwUZLwgrJPtrp2Y/vMZVdvxdeGu7t2RU6zasTNqk06QwghRYZGydykJ5gHiNUk3T1gVdN/oLQC/fcBOcgk4YQxdTEpi8N; Expires=Sun, 23 Oct 2022 01:09:15 GMT; Path=/
AWSALBCORS=e1LhY0BUexDuFa+1XfSnq/qOalCwPYvnwUZLwgrJPtrp2Y/vMZVdvxdeGu7t2RU6zasTNqk06QwghRYZGydykJ5gHiNUk3T1gVdN/oLQC/fcBOcgk4YQxdTEpi8N; Expires=Sun, 23 Oct 2022 01:09:15 GMT; Path=/; SameSite=None; Secure
Server: Apache
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://bartonnutrition.com
Vary: Origin,Accept-Encoding
X-UltraCart-Request-Id: 2FC54B59E3BFC80183DE5686252DFA208
Content-Encoding: gzip
cdn.jsdelivr.net/npm/video.js@7.9.7/dist/video.min.js
200 OK 0 B URL HTTP/2 cdn.jsdelivr.net/npm/video.js@7.9.7/dist/video.min.js
IP
GET /npm/video.js@7.9.7/dist/video.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bartonnutrition.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 7.9.7
x-jsd-version-type: version
etag: W/"7a051-Prh+H8MqxYTMZU+QRu+/Td5IA9w"
content-encoding: gzip
accept-ranges: bytes
date: Sun, 16 Oct 2022 01:09:10 GMT
age: 2247116
x-served-by: cache-fra19183-FRA, cache-bma1641-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 139802
X-Firefox-Spdy: h2
dndngvalp4jdj.cloudfront.net/vendor/modernizr3.6.0.min.js
200 OK 0 B URL HTTP/2 dndngvalp4jdj.cloudfront.net/vendor/modernizr3.6.0.min.js
IP
GET /vendor/modernizr3.6.0.min.js HTTP/1.1
Host: dndngvalp4jdj.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bartonnutrition.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
last-modified: Wed, 25 Apr 2018 21:12:10 GMT
x-amz-version-id: hPrDidzn7AonSL1912mDwx7NrAMCc39r
server: AmazonS3
content-encoding: gzip
date: Sun, 16 Oct 2022 01:09:10 GMT
etag: W/"f4631027c55199d5f09d1eb1091474ba"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 814e8c24454087e83cd261a6cf477166.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: GUT42ca2njQ5gQyf2vDkVcc3eDQE4pWws2aur100nC9AUTguvFC74g==
age: 1123
X-Firefox-Spdy: h2
connect.facebook.net/signals/config/368276591178798?v=2.9.85&r=stable
200 OK 0 B URL HTTP/2 connect.facebook.net/signals/config/368276591178798?v=2.9.85&r=stable
IP
GET /signals/config/368276591178798?v=2.9.85&r=stable HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bartonnutrition.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: application/x-javascript; charset=utf-8
content-security-policy: default-src facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com data: blob: 'self';script-src *.fbcdn.net *.facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com;connect-src *.fbcdn.net *.facebook.net wss://*.fbcdn.net attachment.fbsbx.com blob: 'self';block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: UYyTVSKPRCW1GyQTML6+h9FmXnnQ+IAt2a+2CexHoL/5ZVBNwdwCbUKecBYDFlG7riNlffSv1wNaMmUNL457Kg==
priority: u=3,i
x-fb-trip-id: 1904183273
date: Sun, 16 Oct 2022 01:09:12 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
www.youtube.com/iframe_api
200 OK 0 B URL HTTP/2 www.youtube.com/iframe_api
IP
GET /iframe_api HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bartonnutrition.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
x-content-type-options: nosniff
expires: Sun, 16 Oct 2022 01:09:12 GMT
date: Sun, 16 Oct 2022 01:09:12 GMT
cache-control: private, max-age=0
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=31536000
cross-origin-resource-policy: cross-origin
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-platform=*, ch-ua-platform-version=*
report-to: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]}
cross-origin-opener-policy-report-only: same-origin; report-to="youtube_main"
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info."
content-encoding: br
server: ESF
x-xss-protection: 0
set-cookie: YSC=ptj8k9V55mw; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none
VISITOR_INFO1_LIVE=R4ZLQJfTEnI; Domain=.youtube.com; Expires=Fri, 14-Apr-2023 01:09:12 GMT; Path=/; Secure; HttpOnly; SameSite=none
CONSENT=PENDING+002; expires=Tue, 15-Oct-2024 01:09:12 GMT; path=/; domain=.youtube.com; Secure
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
b-code.liadm.com/a-075m.min.js
200 OK 0 B URL HTTP/2 b-code.liadm.com/a-075m.min.js
IP
GET /a-075m.min.js HTTP/1.1
Host: b-code.liadm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bartonnutrition.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
date: Sat, 15 Oct 2022 16:03:20 GMT
cache-control: public, max-age=86400
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 bcd5dadccb0831729969c938747ff79a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: kHVNjum6OK0t_OHhqxFHQm2yz8_mOOs0uJIzaSlYuew4Du7VsfIVlw==
age: 32752
X-Firefox-Spdy: h2
dndngvalp4jdj.cloudfront.net/bartonnutrition.com/styles/global/styles.min.css?v=1.14.11.21
200 OK 0 B URL HTTP/2 dndngvalp4jdj.cloudfront.net/bartonnutrition.com/styles/global/styles.min.css?v=1.14.11.21
IP
GET /bartonnutrition.com/styles/global/styles.min.css?v=1.14.11.21 HTTP/1.1
Host: dndngvalp4jdj.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bartonnutrition.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css
last-modified: Wed, 22 Jul 2020 19:57:24 GMT
x-amz-version-id: 1COcJ3NcnAvCPIOgzXXkzOyXVkVmXLk8
server: AmazonS3
content-encoding: gzip
date: Sun, 16 Oct 2022 01:09:12 GMT
cache-control: max-age=2600000
etag: W/"ec5e832fc9f734bc601dd3e4065eab2a"
vary: Accept-Encoding
x-cache: RefreshHit from cloudfront
via: 1.1 814e8c24454087e83cd261a6cf477166.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: uqe079lZI2cQ7RmA7n51mcdsyjGd5EDb66kP1nyccdTHGmXsBCW2TA==
X-Firefox-Spdy: h2
154.38.164.90
104.17.24.14
31.13.72.36
23.36.76.186
93.184.220.29
15.235.54.6