www.agn4j0trk.com/63CFP/3QQG7/?sub1=superpower_daily&sub2=85646cd00c3208b7842ebe90c0ea0ca9&sub3=9941194b-31f9-4d71-b991-d4ee479e27b8&sub4=&_bhiiv=opp_eff89fc9-639d-4ab7-aa2f-6f6672e0bc52_627fe518
34.96.120.38302 Found 147 B URL User Request GET HTTP/2 www.agn4j0trk.com/63CFP/3QQG7/?sub1=superpower_daily&sub2=85646cd00c3208b7842ebe90c0ea0ca9&sub3=9941194b-31f9-4d71-b991-d4ee479e27b8&sub4=&_bhiiv=opp_eff89fc9-639d-4ab7-aa2f-6f6672e0bc52_627fe518
IP 34.96.120.38:443
Certificate IssuerStarfield Technologies, Inc.
Subjectagn4j0trk.com
Fingerprint3D:28:D7:D5:5F:9F:57:F5:0F:D0:AC:07:C3:CF:74:9E:B7:B3:4E:EA
ValidityMon, 02 Oct 2023 14:54:08 GMT - Sun, 14 Apr 2024 14:33:32 GMT
File type HTML document, ASCII text
Hash cd3408f8df79a87c8a9524689c28059b
45e9b742214d74f93db7c599da694cbfb14df4fc
5c17340275bada1c6b0f1bc21fb35b1cedf2864440cc1465b051fe12d65af015
GET /63CFP/3QQG7/?sub1=superpower_daily&sub2=85646cd00c3208b7842ebe90c0ea0ca9&sub3=9941194b-31f9-4d71-b991-d4ee479e27b8&sub4=&_bhiiv=opp_eff89fc9-639d-4ab7-aa2f-6f6672e0bc52_627fe518 HTTP/1.1
Host: www.agn4j0trk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx
date: Mon, 11 Dec 2023 09:00:05 GMT
content-type: text/html; charset=utf-8
content-length: 147
accept-ch: Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Model
location: https://auto.provide-insurance.com/?tid=2744&subid=4&subid2=superpower_daily&c1=3ea3f8c586fa407f820f28ef74fbb2ee
set-cookie: uniqueClick_3QQG7=8807f290-947d-456a-bd77-3b388b851068:1702285205; Path=/; Expires=Tue, 12 Dec 2023 09:00:05 GMT; Secure; SameSite=None
transaction_id=3ea3f8c586fa407f820f28ef74fbb2ee; Path=/; Expires=Sun, 10 Mar 2024 09:00:05 GMT; Secure; SameSite=None
vary: Origin
x-eflow-request-id: 6989f635-46e4-492e-a589-98e42694ff00
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.googleoptimize.com/optimize.js?id=OPT-PXT4274
142.250.74.78200 OK 68 kB URL GET HTTP/2 www.googleoptimize.com/optimize.js?id=OPT-PXT4274
IP 142.250.74.78:443
Requested by https://auto.provide-insurance.com/?tid=2744&subid=4&subid2=superpower_daily&c1=3ea3f8c586fa407f820f28ef74fbb2ee
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
FingerprintC1:58:7C:BF:5A:61:79:08:CB:C2:00:63:60:07:86:BD:EA:0A:45:8A
ValidityMon, 20 Nov 2023 08:02:50 GMT - Mon, 12 Feb 2024 08:02:49 GMT
File type ASCII text, with very long lines (3026)
Hash 7fb31681564ef5a365b55f57ce0b14f1
159fa89b8f2bae451f05d43595336fd05fc65678
50ed7a7dd1782d9c6fec65555dffd046068e05c3b6f38a5f8b13b519b216fdba
GET /optimize.js?id=OPT-PXT4274 HTTP/1.1
Host: www.googleoptimize.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://auto.provide-insurance.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 11 Dec 2023 09:00:06 GMT
expires: Mon, 11 Dec 2023 09:00:06 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 67458
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=G-JMN8P5NC9M
142.250.74.104200 OK 93 kB URL GET HTTP/2 www.googletagmanager.com/gtag/js?id=G-JMN8P5NC9M
IP 142.250.74.104:443
Requested by https://auto.provide-insurance.com/?tid=2744&subid=4&subid2=superpower_daily&c1=3ea3f8c586fa407f820f28ef74fbb2ee
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
FingerprintC1:58:7C:BF:5A:61:79:08:CB:C2:00:63:60:07:86:BD:EA:0A:45:8A
ValidityMon, 20 Nov 2023 08:02:50 GMT - Mon, 12 Feb 2024 08:02:49 GMT
File type ASCII text, with very long lines (7711)
Hash ec1e5dc543c79525efc736968bb00420
6a73322a0496747eefcd3569e0f640bdebb23c95
5896852b05250a6e7933c529b73efe4ba2a3f5922eac586c5715c42d380e5727
GET /gtag/js?id=G-JMN8P5NC9M HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://auto.provide-insurance.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 11 Dec 2023 09:00:06 GMT
expires: Mon, 11 Dec 2023 09:00:06 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 92897
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
auto.provide-insurance.com/_next/static/Photo_Ankica_144-136a77a430ddea610d222529b480dc35.webp
104.18.34.99200 OK 12 kB URL GET HTTP/2 auto.provide-insurance.com/_next/static/Photo_Ankica_144-136a77a430ddea610d222529b480dc35.webp
IP 104.18.34.99:443
Requested by https://auto.provide-insurance.com/?tid=2744&subid=4&subid2=superpower_daily&c1=3ea3f8c586fa407f820f28ef74fbb2ee
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintC3:EB:79:38:C2:A6:67:69:75:A6:30:20:D5:FA:93:F9:71:D1:51:D0
ValidityMon, 20 Mar 2023 00:00:00 GMT - Tue, 19 Mar 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image
- data
Hash 96f0eafa2e3df2505f1fb419476acd70
842e60c98199aedd4e2a18eb87a79b9120e12eeb
0c96c28275124d83661d8ee174481cc2effad2702cd20cfe63fa497c1c5a3056
GET /_next/static/Photo_Ankica_144-136a77a430ddea610d222529b480dc35.webp HTTP/1.1
Host: auto.provide-insurance.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://auto.provide-insurance.com/?tid=2744&subid=4&subid2=superpower_daily&c1=3ea3f8c586fa407f820f28ef74fbb2ee
Cookie: visitor.uuid=8cd34165-8481-43d8-a020-5d6389653725; session.uuid=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1dWlkIjoiZTNlZDdlYWUtZWYwNy00NTc3LThmYjQtNDA1M2YxMzkyODYzIn0.PyZv2C5QRL5gDK6fWeOx8t5cwdEKFPtCdamkIsDH_cI
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 11 Dec 2023 09:00:06 GMT
content-type: image/webp
content-length: 12098
cache-control: public, max-age=14400
etag: W/"2f42-18c1ab640e8"
last-modified: Wed, 29 Nov 2023 10:53:21 GMT
strict-transport-security: max-age=15552000
cf-cache-status: MISS
expires: Mon, 11 Dec 2023 13:00:06 GMT
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 833c890b094ab512-OSL
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=AW-1000357370
142.250.74.104200 OK 76 kB URL GET HTTP/2 www.googletagmanager.com/gtag/js?id=AW-1000357370
IP 142.250.74.104:443
Requested by https://auto.provide-insurance.com/?tid=2744&subid=4&subid2=superpower_daily&c1=3ea3f8c586fa407f820f28ef74fbb2ee
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
FingerprintC1:58:7C:BF:5A:61:79:08:CB:C2:00:63:60:07:86:BD:EA:0A:45:8A
ValidityMon, 20 Nov 2023 08:02:50 GMT - Mon, 12 Feb 2024 08:02:49 GMT
File type ASCII text, with very long lines (4179)
Hash 471cb219fce7a3a2339c4c0356cca850
fbe6b65f6a5921d20a74ec35f65cc1e741a563c2
4863ae11e01dc6b59b9e3a63ef44cc0a50c5e0c10a4622b546eb4dd337df75ca
GET /gtag/js?id=AW-1000357370 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://auto.provide-insurance.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 11 Dec 2023 09:00:06 GMT
expires: Mon, 11 Dec 2023 09:00:06 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 75473
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
auto.provide-insurance.com/_next/static/Photo_Jaymee_144-345b59538e845140ccca2ed99f3ccf08.webp
104.18.34.99200 OK 12 kB URL GET HTTP/2 auto.provide-insurance.com/_next/static/Photo_Jaymee_144-345b59538e845140ccca2ed99f3ccf08.webp
IP 104.18.34.99:443
Requested by https://auto.provide-insurance.com/?tid=2744&subid=4&subid2=superpower_daily&c1=3ea3f8c586fa407f820f28ef74fbb2ee
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintC3:EB:79:38:C2:A6:67:69:75:A6:30:20:D5:FA:93:F9:71:D1:51:D0
ValidityMon, 20 Mar 2023 00:00:00 GMT - Tue, 19 Mar 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image
- data
Hash 0fa63d1e70ceaec70ea3c11638d18a39
cc353a7617154816d295058d3f909f9dff6f229a
c6e97ce6d29bf59a45a603941a583b98653162d4ed95cb706b12544b9f58d090
GET /_next/static/Photo_Jaymee_144-345b59538e845140ccca2ed99f3ccf08.webp HTTP/1.1
Host: auto.provide-insurance.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://auto.provide-insurance.com/?tid=2744&subid=4&subid2=superpower_daily&c1=3ea3f8c586fa407f820f28ef74fbb2ee
Cookie: visitor.uuid=8cd34165-8481-43d8-a020-5d6389653725; session.uuid=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1dWlkIjoiZTNlZDdlYWUtZWYwNy00NTc3LThmYjQtNDA1M2YxMzkyODYzIn0.PyZv2C5QRL5gDK6fWeOx8t5cwdEKFPtCdamkIsDH_cI
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 11 Dec 2023 09:00:06 GMT
content-type: image/webp
content-length: 12022
cache-control: public, max-age=14400
etag: W/"2ef6-18c1ab640e8"
last-modified: Wed, 29 Nov 2023 10:53:21 GMT
strict-transport-security: max-age=15552000
cf-cache-status: MISS
expires: Mon, 11 Dec 2023 13:00:06 GMT
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 833c890b094cb512-OSL
X-Firefox-Spdy: h2
auto.provide-insurance.com/_next/static/Photo_Fernando_144-4582a8518a02223a7ce154385ab00cbb.webp
104.18.34.99200 OK 12 kB URL GET HTTP/2 auto.provide-insurance.com/_next/static/Photo_Fernando_144-4582a8518a02223a7ce154385ab00cbb.webp
IP 104.18.34.99:443
Requested by https://auto.provide-insurance.com/?tid=2744&subid=4&subid2=superpower_daily&c1=3ea3f8c586fa407f820f28ef74fbb2ee
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintC3:EB:79:38:C2:A6:67:69:75:A6:30:20:D5:FA:93:F9:71:D1:51:D0
ValidityMon, 20 Mar 2023 00:00:00 GMT - Tue, 19 Mar 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image
- data
Hash e59acf8f4ba7dac23e77b8b5cc608ef3
7d99decfb8285fbb3a046806af9081afbd5d8a3e
12f2246381eab88cb7a416daf031e6097a0e5ad571a5635a1e7cabaaec1cd00c
GET /_next/static/Photo_Fernando_144-4582a8518a02223a7ce154385ab00cbb.webp HTTP/1.1
Host: auto.provide-insurance.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://auto.provide-insurance.com/?tid=2744&subid=4&subid2=superpower_daily&c1=3ea3f8c586fa407f820f28ef74fbb2ee
Cookie: visitor.uuid=8cd34165-8481-43d8-a020-5d6389653725; session.uuid=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1dWlkIjoiZTNlZDdlYWUtZWYwNy00NTc3LThmYjQtNDA1M2YxMzkyODYzIn0.PyZv2C5QRL5gDK6fWeOx8t5cwdEKFPtCdamkIsDH_cI
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 11 Dec 2023 09:00:06 GMT
content-type: image/webp
content-length: 11810
cache-control: public, max-age=14400
etag: W/"2e22-18c1ab640e8"
last-modified: Wed, 29 Nov 2023 10:53:21 GMT
strict-transport-security: max-age=15552000
cf-cache-status: MISS
expires: Mon, 11 Dec 2023 13:00:06 GMT
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 833c890b093eb512-OSL
X-Firefox-Spdy: h2
opt-out-service.services.everquote.com/crossdomain?mode=get&arrivalUUID=e3ed7eae-ef07-4577-8fb4-4053f1392863
104.18.41.239200 OK 41 B URL GET HTTP/2 opt-out-service.services.everquote.com/crossdomain?mode=get&arrivalUUID=e3ed7eae-ef07-4577-8fb4-4053f1392863
IP 104.18.41.239:443
Requested by https://auto.provide-insurance.com/?tid=2744&subid=4&subid2=superpower_daily&c1=3ea3f8c586fa407f820f28ef74fbb2ee
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint89:C7:86:5F:F8:35:73:EC:3C:0B:10:5E:CA:91:18:DF:F0:AA:F2:FD
ValidityFri, 28 Apr 2023 00:00:00 GMT - Sat, 27 Apr 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 7bd249a389efdb366c104d37ededd404
53a2874606c3d94ecc405c2af6b095344e01e1aa
96303fcc34be5d01c2fb5f83c28de84e878809c4cc6bdc83514b26de63453efd
GET /crossdomain?mode=get&arrivalUUID=e3ed7eae-ef07-4577-8fb4-4053f1392863 HTTP/1.1
Host: opt-out-service.services.everquote.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://auto.provide-insurance.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 11 Dec 2023 09:00:06 GMT
content-type: text/javascript; charset=utf-8
content-length: 41
access-control-allow-origin: *
cache-control: no-cache
set-cookie: xdooToken=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1dWlkIjoiYWRlMDVkMGMtOTgwMy0xMWVlLWFjODAtNzJiODcxMTRiMmExIn0.A5h1AG0gwSqxYcxrIiIK-0mRdq3M-wAQ9P9HiYN_qUA; Path=/; Domain=opt-out-service.services.everquote.com; Max-Age=31536000; Secure; SameSite=None
strict-transport-security: max-age=15552000
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 833c890bdedcb527-OSL
X-Firefox-Spdy: h2
consumer-assets.everquote.com/static-assets/domains/auto/auto.provide-insurance.com/logo.png
104.16.235.120200 OK 22 kB URL GET HTTP/2 consumer-assets.everquote.com/static-assets/domains/auto/auto.provide-insurance.com/logo.png
IP 104.16.235.120:443
Requested by https://auto.provide-insurance.com/?tid=2744&subid=4&subid2=superpower_daily&c1=3ea3f8c586fa407f820f28ef74fbb2ee
Certificate IssuerCloudflare, Inc.
Subjecteverquote.com
Fingerprint01:DA:D1:FD:E7:E1:F9:66:F0:AA:F7:A9:8E:4D:15:01:A8:85:A0:91
ValidityMon, 10 Apr 2023 00:00:00 GMT - Tue, 09 Apr 2024 23:59:59 GMT
File type PNG image data, 314 x 81, 8-bit/color RGBA, non-interlaced
- data
Hash d1cdeadda92e39f1068dd991bff1c3c6
05595167834bad558db950b512b35b6748317588
feae71f2933e713c0885ac749a524e9cbea6ccbeca11196620de4731b8381ed2
GET /static-assets/domains/auto/auto.provide-insurance.com/logo.png HTTP/1.1
Host: consumer-assets.everquote.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://auto.provide-insurance.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 11 Dec 2023 09:00:07 GMT
content-type: image/png
content-length: 21991
last-modified: Fri, 04 Nov 2022 10:34:23 GMT
etag: "d1cdeadda92e39f1068dd991bff1c3c6"
vary: Accept-Encoding
x-cache: RefreshHit from cloudfront
via: 1.1 17c1b187a3afe016510e55151109cc30.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN56-P2
x-amz-cf-id: iKO-ULOjQKDT4WU3SqNRZ9tsDvgqwmtoKwJ8OkR21WMimDzza3ztuA==
cf-cache-status: REVALIDATED
expires: Mon, 11 Dec 2023 13:00:07 GMT
cache-control: public, max-age=14400
accept-ranges: bytes
strict-transport-security: max-age=15552000
server: cloudflare
cf-ray: 833c8910ee6bb50c-OSL
X-Firefox-Spdy: h2
consumer-assets.everquote.com/static-assets/tests-assets/auto/landings/EQSimpleDesignDesktop/blue-bg.webp
104.16.235.120200 OK 19 kB URL GET HTTP/2 consumer-assets.everquote.com/static-assets/tests-assets/auto/landings/EQSimpleDesignDesktop/blue-bg.webp
IP 104.16.235.120:443
Requested by https://auto.provide-insurance.com/?tid=2744&subid=4&subid2=superpower_daily&c1=3ea3f8c586fa407f820f28ef74fbb2ee
Certificate IssuerCloudflare, Inc.
Subjecteverquote.com
Fingerprint01:DA:D1:FD:E7:E1:F9:66:F0:AA:F7:A9:8E:4D:15:01:A8:85:A0:91
ValidityMon, 10 Apr 2023 00:00:00 GMT - Tue, 09 Apr 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 1600x736, Scaling: [none]x[none], YUV color, decoders should clamp
- data
Hash 0cbff27aa9a2fa2a50ab705d68d10c9a
fcb9ecf0baf1472f58e089e629e2bdd200cb6169
f90d44af1ba18c207f8254404de1bb6f80d4f2869215fc5eb34ad4d67b2883c5
GET /static-assets/tests-assets/auto/landings/EQSimpleDesignDesktop/blue-bg.webp HTTP/1.1
Host: consumer-assets.everquote.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://auto.provide-insurance.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 11 Dec 2023 09:00:07 GMT
content-type: image/webp
content-length: 18570
last-modified: Fri, 04 Nov 2022 10:35:43 GMT
etag: "0cbff27aa9a2fa2a50ab705d68d10c9a"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 45ff2040e09b26d7b6a62f48718e1406.cloudfront.net (CloudFront)
x-amz-cf-pop: HEL51-P1
x-amz-cf-id: Hqm5-9h8IgFXqh1P0lbaH9N4ATRbWJoUDur79MWZhurgqtXs7fXDDg==
cf-cache-status: REVALIDATED
expires: Mon, 11 Dec 2023 13:00:07 GMT
cache-control: public, max-age=14400
accept-ranges: bytes
strict-transport-security: max-age=15552000
server: cloudflare
cf-ray: 833c8910ee6cb50c-OSL
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=G-JMN8P5NC9M&l=dataLayer&cx=c
142.250.74.104200 OK 92 kB URL GET HTTP/3 www.googletagmanager.com/gtag/js?id=G-JMN8P5NC9M&l=dataLayer&cx=c
IP 142.250.74.104:443
Requested by https://auto.provide-insurance.com/?tid=2744&subid=4&subid2=superpower_daily&c1=3ea3f8c586fa407f820f28ef74fbb2ee
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
FingerprintC1:58:7C:BF:5A:61:79:08:CB:C2:00:63:60:07:86:BD:EA:0A:45:8A
ValidityMon, 20 Nov 2023 08:02:50 GMT - Mon, 12 Feb 2024 08:02:49 GMT
File type ASCII text, with very long lines (7711)
Hash bbeebceb446ff7d2724bb7f9ec0e68ed
86beabdc1819bd28897e3c1b64f34b39eb0c76c4
7508fc8ac0249e5ead0b2ca100bf30100131fd94e97b88cdf6bc0a802b7c821e
GET /gtag/js?id=G-JMN8P5NC9M&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://auto.provide-insurance.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 11 Dec 2023 09:00:07 GMT
expires: Mon, 11 Dec 2023 09:00:07 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 91863
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.googletagmanager.com/gtag/js?id=UA-218205978-2&l=dataLayer&cx=c
142.250.74.104200 OK 65 kB URL GET HTTP/3 www.googletagmanager.com/gtag/js?id=UA-218205978-2&l=dataLayer&cx=c
IP 142.250.74.104:443
Requested by https://auto.provide-insurance.com/?tid=2744&subid=4&subid2=superpower_daily&c1=3ea3f8c586fa407f820f28ef74fbb2ee
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
FingerprintC1:58:7C:BF:5A:61:79:08:CB:C2:00:63:60:07:86:BD:EA:0A:45:8A
ValidityMon, 20 Nov 2023 08:02:50 GMT - Mon, 12 Feb 2024 08:02:49 GMT
File type ASCII text, with very long lines (3026)
Hash 5bcfcc8c2b7a04f126d06766f1394f19
71f8ce213aba0cf31f9001f780f0a2cc24a6b259
813ee81d938482f5b4c84095e41ec715aef6213cc9538c416ad4b54fe8ce9228
GET /gtag/js?id=UA-218205978-2&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://auto.provide-insurance.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 11 Dec 2023 09:00:07 GMT
expires: Mon, 11 Dec 2023 09:00:07 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 64869
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.googletagmanager.com/gtag/js?id=AW-1000357370&l=dataLayer&cx=c
142.250.74.104200 OK 76 kB URL GET HTTP/3 www.googletagmanager.com/gtag/js?id=AW-1000357370&l=dataLayer&cx=c
IP 142.250.74.104:443
Requested by https://auto.provide-insurance.com/?tid=2744&subid=4&subid2=superpower_daily&c1=3ea3f8c586fa407f820f28ef74fbb2ee
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
FingerprintC1:58:7C:BF:5A:61:79:08:CB:C2:00:63:60:07:86:BD:EA:0A:45:8A
ValidityMon, 20 Nov 2023 08:02:50 GMT - Mon, 12 Feb 2024 08:02:49 GMT
File type ASCII text, with very long lines (4179)
Hash 7b1114e94e2395210b509028d1f26746
c045c315192c8e88f9699444558d56cceba04689
23d3746e6cb54fa3388a4c6b13f53fd447cc3b1381c2575d9aec3e4b8feedcd4
GET /gtag/js?id=AW-1000357370&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://auto.provide-insurance.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 11 Dec 2023 09:00:07 GMT
expires: Mon, 11 Dec 2023 09:00:07 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 75528
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
consumer-assets.everquote.com/static-assets/tests-assets/auto/landings/EQSimpleDesignDesktop/carrier-logos/general.svg
104.16.235.120200 OK 23 kB URL GET HTTP/2 consumer-assets.everquote.com/static-assets/tests-assets/auto/landings/EQSimpleDesignDesktop/carrier-logos/general.svg
IP 104.16.235.120:443
Requested by https://auto.provide-insurance.com/?tid=2744&subid=4&subid2=superpower_daily&c1=3ea3f8c586fa407f820f28ef74fbb2ee
Certificate IssuerCloudflare, Inc.
Subjecteverquote.com
Fingerprint01:DA:D1:FD:E7:E1:F9:66:F0:AA:F7:A9:8E:4D:15:01:A8:85:A0:91
ValidityMon, 10 Apr 2023 00:00:00 GMT - Tue, 09 Apr 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image
- , ASCII text, with very long lines (1920)
Hash 3495cd2ab20ca159df7fbf20dce2a9ec
bda067294cdc0e977235c288a844c256a53a18f9
bccf312247abfd4d5148027f51c506198c404c2bdfb28c66e420eb2b88f16d03
GET /static-assets/tests-assets/auto/landings/EQSimpleDesignDesktop/carrier-logos/general.svg HTTP/1.1
Host: consumer-assets.everquote.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://auto.provide-insurance.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 11 Dec 2023 09:00:06 GMT
content-type: image/svg+xml
last-modified: Tue, 22 Aug 2023 02:36:59 GMT
etag: W/"3495cd2ab20ca159df7fbf20dce2a9ec"
x-amz-server-side-encryption: AES256
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: uNvo0QU4BsiInER1t7laIKNcqTkq-TS1fIEZMQm97wO1-7RxQCnXqg==
cf-cache-status: REVALIDATED
expires: Mon, 11 Dec 2023 13:00:06 GMT
cache-control: public, max-age=14400
strict-transport-security: max-age=15552000
server: cloudflare
cf-ray: 833c890bba5fb50c-OSL
content-encoding: br
X-Firefox-Spdy: h2
www.googletagmanager.com/gtm.js?id=GTM-P8QQMPK&l=gtmDataLayer>m_auth=A2JgS0fhwfdhhNEmdMqw9w>m_preview=env-1>m_cookies_win=x
142.250.74.104200 OK 114 kB URL GET HTTP/3 www.googletagmanager.com/gtm.js?id=GTM-P8QQMPK&l=gtmDataLayer>m_auth=A2JgS0fhwfdhhNEmdMqw9w>m_preview=env-1>m_cookies_win=x
IP 142.250.74.104:443
Requested by https://auto.provide-insurance.com/?tid=2744&subid=4&subid2=superpower_daily&c1=3ea3f8c586fa407f820f28ef74fbb2ee
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
FingerprintC1:58:7C:BF:5A:61:79:08:CB:C2:00:63:60:07:86:BD:EA:0A:45:8A
ValidityMon, 20 Nov 2023 08:02:50 GMT - Mon, 12 Feb 2024 08:02:49 GMT
File type ASCII text, with very long lines (54658)
Size 114 kB (113578 bytes)
Hash 042ca060ad270a94d47824d6ec6bfb1f
fce5b9d82e4ab934eb6c367bfecce89c6502b9cb
6c1ad60b1c57683c7c6f512c8df0eaa16531dea9ec5edd451cbe7863ee4e1a34
GET /gtm.js?id=GTM-P8QQMPK&l=gtmDataLayer>m_auth=A2JgS0fhwfdhhNEmdMqw9w>m_preview=env-1>m_cookies_win=x HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://auto.provide-insurance.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: *
date: Mon, 11 Dec 2023 09:00:07 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 113578
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
fonts.gstatic.com/s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
142.250.74.163200 OK 48 kB URL GET HTTP/2 fonts.gstatic.com/s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP 142.250.74.163:443
Requested by https://auto.provide-insurance.com/?tid=2744&subid=4&subid2=superpower_daily&c1=3ea3f8c586fa407f820f28ef74fbb2ee
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint5F:60:69:C9:59:6D:F1:B5:87:82:8D:B0:57:3C:D9:24:10:FD:74:D1
ValidityMon, 20 Nov 2023 08:08:49 GMT - Mon, 12 Feb 2024 08:08:48 GMT
File type Web Open Font Format (Version 2), TrueType, length 48432, version 1.0
- data
Hash e2d74c5e631bc53a7240bbfe4be99c8f
eb513857bb01cc4f7249067fc7e969bef415fc90
9b1b9d7cb74a9923d83f36f0026f421940b861fd6e1a51b8f79af45492ed4ed5
GET /s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://auto.provide-insurance.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48432
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 07 Dec 2023 15:40:55 GMT
expires: Fri, 06 Dec 2024 15:40:55 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 14 Sep 2023 00:40:31 GMT
content-type: font/woff2
age: 321552
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
142.250.74.163200 OK 48 kB URL GET HTTP/2 fonts.gstatic.com/s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP 142.250.74.163:443
Requested by https://auto.provide-insurance.com/?tid=2744&subid=4&subid2=superpower_daily&c1=3ea3f8c586fa407f820f28ef74fbb2ee
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint5F:60:69:C9:59:6D:F1:B5:87:82:8D:B0:57:3C:D9:24:10:FD:74:D1
ValidityMon, 20 Nov 2023 08:08:49 GMT - Mon, 12 Feb 2024 08:08:48 GMT
File type Web Open Font Format (Version 2), TrueType, length 48432, version 1.0
- data
Hash e2d74c5e631bc53a7240bbfe4be99c8f
eb513857bb01cc4f7249067fc7e969bef415fc90
9b1b9d7cb74a9923d83f36f0026f421940b861fd6e1a51b8f79af45492ed4ed5
GET /s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://auto.provide-insurance.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48432
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 07 Dec 2023 15:40:55 GMT
expires: Fri, 06 Dec 2024 15:40:55 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 14 Sep 2023 00:40:31 GMT
content-type: font/woff2
age: 321552
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cep.services.everquote.com/publisher
104.18.41.239200 OK 0 B URL POST HTTP/2 cep.services.everquote.com/publisher
IP 104.18.41.239:443
Requested by https://auto.provide-insurance.com/?tid=2744&subid=4&subid2=superpower_daily&c1=3ea3f8c586fa407f820f28ef74fbb2ee
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint89:C7:86:5F:F8:35:73:EC:3C:0B:10:5E:CA:91:18:DF:F0:AA:F2:FD
ValidityFri, 28 Apr 2023 00:00:00 GMT - Sat, 27 Apr 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /publisher HTTP/1.1
Host: cep.services.everquote.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: authtoken,content-type
Referer: https://auto.provide-insurance.com/
Origin: https://auto.provide-insurance.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 11 Dec 2023 09:00:07 GMT
content-length: 0
access-control-allow-headers: Content-Type,Accept,AuthToken
access-control-allow-methods: HEAD,POST
access-control-allow-origin: https://auto.provide-insurance.com
strict-transport-security: max-age=15552000
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 833c89129aadb4f9-OSL
X-Firefox-Spdy: h2
cep.services.everquote.com/publisher
104.18.41.239200 OK 0 B URL POST HTTP/2 cep.services.everquote.com/publisher
IP 104.18.41.239:443
Requested by https://auto.provide-insurance.com/?tid=2744&subid=4&subid2=superpower_daily&c1=3ea3f8c586fa407f820f28ef74fbb2ee
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint89:C7:86:5F:F8:35:73:EC:3C:0B:10:5E:CA:91:18:DF:F0:AA:F2:FD
ValidityFri, 28 Apr 2023 00:00:00 GMT - Sat, 27 Apr 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /publisher HTTP/1.1
Host: cep.services.everquote.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: authtoken,content-type
Referer: https://auto.provide-insurance.com/
Origin: https://auto.provide-insurance.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 11 Dec 2023 09:00:07 GMT
content-length: 0
access-control-allow-headers: Content-Type,Accept,AuthToken
access-control-allow-methods: HEAD,POST
access-control-allow-origin: https://auto.provide-insurance.com
strict-transport-security: max-age=15552000
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 833c89129aa9b4f9-OSL
X-Firefox-Spdy: h2
auto.provide-insurance.com/_next/static/qXHavcoRGHkJjsJ2CCDFR/pages/_app.js
104.18.34.99200 OK 98 kB URL GET HTTP/2 auto.provide-insurance.com/_next/static/qXHavcoRGHkJjsJ2CCDFR/pages/_app.js
IP 104.18.34.99:443
Requested by https://auto.provide-insurance.com/?tid=2744&subid=4&subid2=superpower_daily&c1=3ea3f8c586fa407f820f28ef74fbb2ee
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintC3:EB:79:38:C2:A6:67:69:75:A6:30:20:D5:FA:93:F9:71:D1:51:D0
ValidityMon, 20 Mar 2023 00:00:00 GMT - Tue, 19 Mar 2024 23:59:59 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash 78d2400e2413395cf4d91d486d7f019a
889e2dbffb2ac7b6574f6555d0a2e2934403199c
f8f8bba0f8785ddf61f9849feff46a476c698fae6a3c69f11aa840470038992f
GET /_next/static/qXHavcoRGHkJjsJ2CCDFR/pages/_app.js HTTP/1.1
Host: auto.provide-insurance.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://auto.provide-insurance.com/?tid=2744&subid=4&subid2=superpower_daily&c1=3ea3f8c586fa407f820f28ef74fbb2ee
Cookie: visitor.uuid=8cd34165-8481-43d8-a020-5d6389653725; session.uuid=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1dWlkIjoiZTNlZDdlYWUtZWYwNy00NTc3LThmYjQtNDA1M2YxMzkyODYzIn0.PyZv2C5QRL5gDK6fWeOx8t5cwdEKFPtCdamkIsDH_cI
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 11 Dec 2023 09:00:06 GMT
content-type: text/javascript
cache-control: public, max-age=31536000
etag: W/"1aa09-18c1ab644d0"
last-modified: Wed, 29 Nov 2023 10:53:22 GMT
strict-transport-security: max-age=15552000
cf-cache-status: HIT
expires: Tue, 10 Dec 2024 09:00:06 GMT
vary: Accept-Encoding
server: cloudflare
cf-ray: 833c890ae90bb512-OSL
content-encoding: br
X-Firefox-Spdy: h2
auto.provide-insurance.com/_next/static/qXHavcoRGHkJjsJ2CCDFR/pages/auto/landings/EQSimpleDesignDesktop.js
104.18.34.99200 OK 72 kB URL GET HTTP/2 auto.provide-insurance.com/_next/static/qXHavcoRGHkJjsJ2CCDFR/pages/auto/landings/EQSimpleDesignDesktop.js
IP 104.18.34.99:443
Requested by https://auto.provide-insurance.com/?tid=2744&subid=4&subid2=superpower_daily&c1=3ea3f8c586fa407f820f28ef74fbb2ee
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintC3:EB:79:38:C2:A6:67:69:75:A6:30:20:D5:FA:93:F9:71:D1:51:D0
ValidityMon, 20 Mar 2023 00:00:00 GMT - Tue, 19 Mar 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (65500), with no line terminators
Hash 869c3d86793946827fb02a836200b154
f035cabb37e970a330a12a8cbd8d12859f999eb4
1f969c604084036a1a6757f2744076edb1ee8d8302e8f79c1888eba7bd49cecd
GET /_next/static/qXHavcoRGHkJjsJ2CCDFR/pages/auto/landings/EQSimpleDesignDesktop.js HTTP/1.1
Host: auto.provide-insurance.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://auto.provide-insurance.com/?tid=2744&subid=4&subid2=superpower_daily&c1=3ea3f8c586fa407f820f28ef74fbb2ee
Cookie: visitor.uuid=8cd34165-8481-43d8-a020-5d6389653725; session.uuid=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1dWlkIjoiZTNlZDdlYWUtZWYwNy00NTc3LThmYjQtNDA1M2YxMzkyODYzIn0.PyZv2C5QRL5gDK6fWeOx8t5cwdEKFPtCdamkIsDH_cI
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 11 Dec 2023 09:00:06 GMT
content-type: text/javascript
cache-control: public, max-age=31536000
etag: W/"129cc-18c1ab644d0"
last-modified: Wed, 29 Nov 2023 10:53:22 GMT
strict-transport-security: max-age=15552000
cf-cache-status: HIT
expires: Tue, 10 Dec 2024 09:00:06 GMT
vary: Accept-Encoding
server: cloudflare
cf-ray: 833c890ae909b512-OSL
content-encoding: br
X-Firefox-Spdy: h2
secure-track.everquote.com/f?mode=script&event=X50MA6DH94RS642&capture=landing&t=2744&auid=e3ed7eae-ef07-4577-8fb4-4053f1392863&arrival_id=
104.16.235.120200 OK 97 B URL GET HTTP/2 secure-track.everquote.com/f?mode=script&event=X50MA6DH94RS642&capture=landing&t=2744&auid=e3ed7eae-ef07-4577-8fb4-4053f1392863&arrival_id=
IP 104.16.235.120:443
Requested by https://auto.provide-insurance.com/?tid=2744&subid=4&subid2=superpower_daily&c1=3ea3f8c586fa407f820f28ef74fbb2ee
Certificate IssuerCloudflare, Inc.
Subjecteverquote.com
Fingerprint01:DA:D1:FD:E7:E1:F9:66:F0:AA:F7:A9:8E:4D:15:01:A8:85:A0:91
ValidityMon, 10 Apr 2023 00:00:00 GMT - Tue, 09 Apr 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash e3176bb4a90a65e422c3d39ee708132e
55f966334dc464c4396b736a8246d98ba0555a38
4866ce06d6c5f431c02dce193069f086aaecb6b57d2fffaf1889230c467d9de6
GET /f?mode=script&event=X50MA6DH94RS642&capture=landing&t=2744&auid=e3ed7eae-ef07-4577-8fb4-4053f1392863&arrival_id= HTTP/1.1
Host: secure-track.everquote.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://auto.provide-insurance.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 11 Dec 2023 09:00:07 GMT
content-type: application/javascript;charset=UTF-8
access-control-allow-credentials: true
set-cookie: secure_savings=C03AADD1-55D9-49CE-AD98-1C39C0E47A67; Max-Age=0; Expires=Thu, 01 Jan 1970 00:00:10 GMT
secure_savings=C03AADD1-55D9-49CE-AD98-1C39C0E47A67; Max-Age=0; Expires=Thu, 01 Jan 1970 00:00:10 GMT; Path=/
secure_savings=C03AADD1-55D9-49CE-AD98-1C39C0E47A67; Max-Age=0; Expires=Thu, 01 Jan 1970 00:00:10 GMT; Domain=everquote.com
secure_savings=C03AADD1-55D9-49CE-AD98-1C39C0E47A67; Max-Age=0; Expires=Thu, 01 Jan 1970 00:00:10 GMT; Domain=everquote.com; Path=/
secure_savings=C03AADD1-55D9-49CE-AD98-1C39C0E47A67; Max-Age=630720000; Expires=Sun, 06 Dec 2043 09:00:07 GMT; Domain=everquote.com; Path=/
secure_savings_x=D2B2262748C6EF7D84ED4EDFAA6F829169458D0DE04003DB; Max-Age=0; Expires=Thu, 01 Jan 1970 00:00:10 GMT
secure_savings_x=D2B2262748C6EF7D84ED4EDFAA6F829169458D0DE04003DB; Max-Age=0; Expires=Thu, 01 Jan 1970 00:00:10 GMT; Path=/
secure_savings_x=D2B2262748C6EF7D84ED4EDFAA6F829169458D0DE04003DB; Max-Age=0; Expires=Thu, 01 Jan 1970 00:00:10 GMT; Domain=everquote.com
secure_savings_x=D2B2262748C6EF7D84ED4EDFAA6F829169458D0DE04003DB; Max-Age=0; Expires=Thu, 01 Jan 1970 00:00:10 GMT; Domain=everquote.com; Path=/
secure_savings_x=D2B2262748C6EF7D84ED4EDFAA6F829169458D0DE04003DB; Max-Age=630720000; Expires=Sun, 06 Dec 2043 09:00:07 GMT; Domain=everquote.com; Path=/
strict-transport-security: max-age=15552000
vary: Accept-Encoding, Origin
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 833c89110e86b50c-OSL
content-encoding: br
X-Firefox-Spdy: h2
consumer-assets.everquote.com/static-assets/tests-assets/auto/landings/EQSimpleDesignDesktop/carrier-logos/toggle.svg
104.16.235.120200 OK 4.7 kB URL GET HTTP/2 consumer-assets.everquote.com/static-assets/tests-assets/auto/landings/EQSimpleDesignDesktop/carrier-logos/toggle.svg
IP 104.16.235.120:443
Requested by https://auto.provide-insurance.com/?tid=2744&subid=4&subid2=superpower_daily&c1=3ea3f8c586fa407f820f28ef74fbb2ee
Certificate IssuerCloudflare, Inc.
Subjecteverquote.com
Fingerprint01:DA:D1:FD:E7:E1:F9:66:F0:AA:F7:A9:8E:4D:15:01:A8:85:A0:91
ValidityMon, 10 Apr 2023 00:00:00 GMT - Tue, 09 Apr 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image
- , ASCII text, with very long lines (1129)
Hash 392694037b29bdc509815f62005024c8
235cd9a2317bac53c7ca22ad6bf69d29f6d1b3e0
734cb0cbda877ae769cf413381ebac2949e76ee4bbcb92600ae79246ed8a1692
GET /static-assets/tests-assets/auto/landings/EQSimpleDesignDesktop/carrier-logos/toggle.svg HTTP/1.1
Host: consumer-assets.everquote.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://auto.provide-insurance.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 11 Dec 2023 09:00:06 GMT
content-type: image/svg+xml
last-modified: Mon, 21 Aug 2023 19:41:38 GMT
etag: W/"392694037b29bdc509815f62005024c8"
x-amz-server-side-encryption: AES256
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 95ad0c949c0fe7e97075c6690b8574aa.cloudfront.net (CloudFront)
x-amz-cf-pop: HEL51-P1
x-amz-cf-id: LTdtEPDRHU_8IA-it4wEZEoUW9BHGebjfVJGGhOWI3FqbL9rH-oOvQ==
cf-cache-status: REVALIDATED
expires: Mon, 11 Dec 2023 13:00:06 GMT
cache-control: public, max-age=14400
strict-transport-security: max-age=15552000
server: cloudflare
cf-ray: 833c890bba57b50c-OSL
content-encoding: br
X-Firefox-Spdy: h2
cep.services.everquote.com/publisher
104.18.41.239200 OK 0 B URL POST HTTP/2 cep.services.everquote.com/publisher
IP 104.18.41.239:443
Requested by https://auto.provide-insurance.com/?tid=2744&subid=4&subid2=superpower_daily&c1=3ea3f8c586fa407f820f28ef74fbb2ee
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint89:C7:86:5F:F8:35:73:EC:3C:0B:10:5E:CA:91:18:DF:F0:AA:F2:FD
ValidityFri, 28 Apr 2023 00:00:00 GMT - Sat, 27 Apr 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /publisher HTTP/1.1
Host: cep.services.everquote.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: authtoken,content-type
Referer: https://auto.provide-insurance.com/
Origin: https://auto.provide-insurance.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 11 Dec 2023 09:00:07 GMT
content-length: 0
access-control-allow-headers: Content-Type,Accept,AuthToken
access-control-allow-methods: HEAD,POST
access-control-allow-origin: https://auto.provide-insurance.com
strict-transport-security: max-age=15552000
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 833c8912aac1b4f9-OSL
X-Firefox-Spdy: h2
cep.services.everquote.com/publisher
104.18.41.239200 OK 0 B URL POST HTTP/2 cep.services.everquote.com/publisher
IP 104.18.41.239:443
Requested by https://auto.provide-insurance.com/?tid=2744&subid=4&subid2=superpower_daily&c1=3ea3f8c586fa407f820f28ef74fbb2ee
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint89:C7:86:5F:F8:35:73:EC:3C:0B:10:5E:CA:91:18:DF:F0:AA:F2:FD
ValidityFri, 28 Apr 2023 00:00:00 GMT - Sat, 27 Apr 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /publisher HTTP/1.1
Host: cep.services.everquote.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: authtoken,content-type
Referer: https://auto.provide-insurance.com/
Origin: https://auto.provide-insurance.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 11 Dec 2023 09:00:07 GMT
content-length: 0
access-control-allow-headers: Content-Type,Accept,AuthToken
access-control-allow-methods: HEAD,POST
access-control-allow-origin: https://auto.provide-insurance.com
strict-transport-security: max-age=15552000
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 833c8912aacab4f9-OSL
X-Firefox-Spdy: h2
consumer-assets.everquote.com/static-assets/tests-assets/auto/landings/EQSimpleDesignDesktop/carrier-logos/mercury.svg
104.16.235.120200 OK 2.4 kB URL GET HTTP/2 consumer-assets.everquote.com/static-assets/tests-assets/auto/landings/EQSimpleDesignDesktop/carrier-logos/mercury.svg
IP 104.16.235.120:443
Requested by https://auto.provide-insurance.com/?tid=2744&subid=4&subid2=superpower_daily&c1=3ea3f8c586fa407f820f28ef74fbb2ee
Certificate IssuerCloudflare, Inc.
Subjecteverquote.com
Fingerprint01:DA:D1:FD:E7:E1:F9:66:F0:AA:F7:A9:8E:4D:15:01:A8:85:A0:91
ValidityMon, 10 Apr 2023 00:00:00 GMT - Tue, 09 Apr 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image
- , ASCII text, with very long lines (5278), with no line terminators
Hash 3d89174c6986ddf06c8a813e2e276673
ed7c86e33a62f3b6c49aa85a56e37f3c06e1814c
8e9a573c12a40420566055f5473212c62dc7f4f938a59fed11f3eaab7e2aa3c3
GET /static-assets/tests-assets/auto/landings/EQSimpleDesignDesktop/carrier-logos/mercury.svg HTTP/1.1
Host: consumer-assets.everquote.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://auto.provide-insurance.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 11 Dec 2023 09:00:06 GMT
content-type: image/svg+xml
last-modified: Fri, 04 Nov 2022 10:35:44 GMT
etag: W/"3d89174c6986ddf06c8a813e2e276673"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a9aab19bce91fc1e5018f2cb28f3cd7c.cloudfront.net (CloudFront)
x-amz-cf-pop: HEL51-P1
x-amz-cf-id: xIFpL7Twje8KmNiMCmwk5Xr_x_jOe_SPvZmULi8FZPg2nLUF-H75bg==
cf-cache-status: REVALIDATED
expires: Mon, 11 Dec 2023 13:00:06 GMT
cache-control: public, max-age=14400
strict-transport-security: max-age=15552000
server: cloudflare
cf-ray: 833c890bba5db50c-OSL
content-encoding: br
X-Firefox-Spdy: h2
cep.services.everquote.com/publisher
104.18.41.239200 OK 0 B URL POST HTTP/2 cep.services.everquote.com/publisher
IP 104.18.41.239:443
Requested by https://auto.provide-insurance.com/?tid=2744&subid=4&subid2=superpower_daily&c1=3ea3f8c586fa407f820f28ef74fbb2ee
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint89:C7:86:5F:F8:35:73:EC:3C:0B:10:5E:CA:91:18:DF:F0:AA:F2:FD
ValidityFri, 28 Apr 2023 00:00:00 GMT - Sat, 27 Apr 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /publisher HTTP/1.1
Host: cep.services.everquote.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: authtoken,content-type
Referer: https://auto.provide-insurance.com/
Origin: https://auto.provide-insurance.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 11 Dec 2023 09:00:07 GMT
content-length: 0
access-control-allow-headers: Content-Type,Accept,AuthToken
access-control-allow-methods: HEAD,POST
access-control-allow-origin: https://auto.provide-insurance.com
strict-transport-security: max-age=15552000
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 833c89129ab7b4f9-OSL
X-Firefox-Spdy: h2
consumer-assets.everquote.com/static-assets/tests-assets/auto/landings/EQSimpleDesignDesktop/carrier-logos/americanFamily.svg
104.16.235.120200 OK 1.9 kB URL GET HTTP/2 consumer-assets.everquote.com/static-assets/tests-assets/auto/landings/EQSimpleDesignDesktop/carrier-logos/americanFamily.svg
IP 104.16.235.120:443
Requested by https://auto.provide-insurance.com/?tid=2744&subid=4&subid2=superpower_daily&c1=3ea3f8c586fa407f820f28ef74fbb2ee
Certificate IssuerCloudflare, Inc.
Subjecteverquote.com
Fingerprint01:DA:D1:FD:E7:E1:F9:66:F0:AA:F7:A9:8E:4D:15:01:A8:85:A0:91
ValidityMon, 10 Apr 2023 00:00:00 GMT - Tue, 09 Apr 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image
- , ASCII text, with very long lines (4358), with no line terminators
Hash 9fa34d2962dbf19bb4a26073e9ec231a
4650e4312ecb3d0604cd6548dfa08c25b92f9cfa
b56a6a06b5401f6392ff61a10014dc1dcc8a6d8dcdec6406da2b5d611e9ae156
GET /static-assets/tests-assets/auto/landings/EQSimpleDesignDesktop/carrier-logos/americanFamily.svg HTTP/1.1
Host: consumer-assets.everquote.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://auto.provide-insurance.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 11 Dec 2023 09:00:06 GMT
content-type: image/svg+xml
last-modified: Fri, 04 Nov 2022 10:35:43 GMT
etag: W/"9fa34d2962dbf19bb4a26073e9ec231a"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 9c694f7b7cdbe801cfaa4c7ea0f762fc.cloudfront.net (CloudFront)
x-amz-cf-pop: HEL51-P1
x-amz-cf-id: RnoyXfHBioZnxS2qR46AfUHIQqKFNTRfouf1ofs-jutDPuLPVBBYaw==
cf-cache-status: REVALIDATED
expires: Mon, 11 Dec 2023 13:00:06 GMT
cache-control: public, max-age=14400
strict-transport-security: max-age=15552000
server: cloudflare
cf-ray: 833c890bda75b50c-OSL
content-encoding: br
X-Firefox-Spdy: h2
auto.provide-insurance.com/_next/static/runtime/webpack-58f61189b265af59ef9c.js
104.18.34.99200 OK 740 B URL GET HTTP/2 auto.provide-insurance.com/_next/static/runtime/webpack-58f61189b265af59ef9c.js
IP 104.18.34.99:443
Requested by https://auto.provide-insurance.com/?tid=2744&subid=4&subid2=superpower_daily&c1=3ea3f8c586fa407f820f28ef74fbb2ee
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintC3:EB:79:38:C2:A6:67:69:75:A6:30:20:D5:FA:93:F9:71:D1:51:D0
ValidityMon, 20 Mar 2023 00:00:00 GMT - Tue, 19 Mar 2024 23:59:59 GMT
File type ASCII text, with very long lines (1529), with no line terminators
Hash cd2fd60e3ac88cd6fc3ec7de07e7d50a
7dc6ffd7835614bc09ab8120194c698aeac2724d
18d6168808aef8ec04092413a7803bbbab133aabd72b6c27b2fab9d30b785b4c
GET /_next/static/runtime/webpack-58f61189b265af59ef9c.js HTTP/1.1
Host: auto.provide-insurance.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://auto.provide-insurance.com/?tid=2744&subid=4&subid2=superpower_daily&c1=3ea3f8c586fa407f820f28ef74fbb2ee
Cookie: visitor.uuid=8cd34165-8481-43d8-a020-5d6389653725; session.uuid=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1dWlkIjoiZTNlZDdlYWUtZWYwNy00NTc3LThmYjQtNDA1M2YxMzkyODYzIn0.PyZv2C5QRL5gDK6fWeOx8t5cwdEKFPtCdamkIsDH_cI
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 11 Dec 2023 09:00:06 GMT
content-type: text/javascript
cache-control: public, max-age=31536000
etag: W/"2e8-18c1ab644d0"
last-modified: Wed, 29 Nov 2023 10:53:22 GMT
strict-transport-security: max-age=15552000
cf-cache-status: HIT
expires: Tue, 10 Dec 2024 09:00:06 GMT
vary: Accept-Encoding
server: cloudflare
cf-ray: 833c890ae913b512-OSL
content-encoding: br
X-Firefox-Spdy: h2
cep.services.everquote.com/publisher
104.18.41.239200 OK 0 B URL POST HTTP/2 cep.services.everquote.com/publisher
IP 104.18.41.239:443
Requested by https://auto.provide-insurance.com/?tid=2744&subid=4&subid2=superpower_daily&c1=3ea3f8c586fa407f820f28ef74fbb2ee
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint89:C7:86:5F:F8:35:73:EC:3C:0B:10:5E:CA:91:18:DF:F0:AA:F2:FD
ValidityFri, 28 Apr 2023 00:00:00 GMT - Sat, 27 Apr 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /publisher HTTP/1.1
Host: cep.services.everquote.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: authtoken,content-type
Referer: https://auto.provide-insurance.com/
Origin: https://auto.provide-insurance.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 11 Dec 2023 09:00:07 GMT
content-length: 0
access-control-allow-headers: Content-Type,Accept,AuthToken
access-control-allow-methods: HEAD,POST
access-control-allow-origin: https://auto.provide-insurance.com
strict-transport-security: max-age=15552000
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 833c8912aac6b4f9-OSL
X-Firefox-Spdy: h2
cep.services.everquote.com/publisher
104.18.41.239200 OK 0 B URL POST HTTP/2 cep.services.everquote.com/publisher
IP 104.18.41.239:443
Requested by https://auto.provide-insurance.com/?tid=2744&subid=4&subid2=superpower_daily&c1=3ea3f8c586fa407f820f28ef74fbb2ee
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint89:C7:86:5F:F8:35:73:EC:3C:0B:10:5E:CA:91:18:DF:F0:AA:F2:FD
ValidityFri, 28 Apr 2023 00:00:00 GMT - Sat, 27 Apr 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /publisher HTTP/1.1
Host: cep.services.everquote.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: authtoken,content-type
Referer: https://auto.provide-insurance.com/
Origin: https://auto.provide-insurance.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 11 Dec 2023 09:00:07 GMT
content-length: 0
access-control-allow-headers: Content-Type,Accept,AuthToken
access-control-allow-methods: HEAD,POST
access-control-allow-origin: https://auto.provide-insurance.com
strict-transport-security: max-age=15552000
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 833c8912daf0b4f9-OSL
X-Firefox-Spdy: h2
cep.services.everquote.com/publisher
104.18.41.239200 OK 0 B URL POST HTTP/2 cep.services.everquote.com/publisher
IP 104.18.41.239:443
Requested by https://auto.provide-insurance.com/?tid=2744&subid=4&subid2=superpower_daily&c1=3ea3f8c586fa407f820f28ef74fbb2ee
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint89:C7:86:5F:F8:35:73:EC:3C:0B:10:5E:CA:91:18:DF:F0:AA:F2:FD
ValidityFri, 28 Apr 2023 00:00:00 GMT - Sat, 27 Apr 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /publisher HTTP/1.1
Host: cep.services.everquote.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: authtoken,content-type
Referer: https://auto.provide-insurance.com/
Origin: https://auto.provide-insurance.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 11 Dec 2023 09:00:07 GMT
content-length: 0
access-control-allow-headers: Content-Type,Accept,AuthToken
access-control-allow-methods: HEAD,POST
access-control-allow-origin: https://auto.provide-insurance.com
strict-transport-security: max-age=15552000
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 833c8912eaf6b4f9-OSL
X-Firefox-Spdy: h2
consumer-assets.everquote.com/static-assets/scripts/newrelic-prod.js
104.16.235.120200 OK 11 kB URL GET HTTP/2 consumer-assets.everquote.com/static-assets/scripts/newrelic-prod.js
IP 104.16.235.120:443
Requested by https://auto.provide-insurance.com/?tid=2744&subid=4&subid2=superpower_daily&c1=3ea3f8c586fa407f820f28ef74fbb2ee
Certificate IssuerCloudflare, Inc.
Subjecteverquote.com
Fingerprint01:DA:D1:FD:E7:E1:F9:66:F0:AA:F7:A9:8E:4D:15:01:A8:85:A0:91
ValidityMon, 10 Apr 2023 00:00:00 GMT - Tue, 09 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (30830)
Hash 710fcf991a03b0d936f9442207bba524
ff734eaa1fc2dba4f753672537d21eccd9be299d
320a7c404199e093522579ed5bec03e142179f0a04bbdc1b466b965c74383ec2
GET /static-assets/scripts/newrelic-prod.js HTTP/1.1
Host: consumer-assets.everquote.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://auto.provide-insurance.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 11 Dec 2023 09:00:06 GMT
content-type: application/javascript
last-modified: Fri, 04 Nov 2022 10:35:43 GMT
etag: W/"710fcf991a03b0d936f9442207bba524"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 2cbf148f6c14a1a6f56400dc9dc76f2a.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN56-P2
x-amz-cf-id: Kd_QTnpWvP9ecKZXI84PKQaiZafpiC_fpgBLkDXZnWR4m1MiKo380g==
cf-cache-status: HIT
expires: Mon, 11 Dec 2023 13:00:06 GMT
cache-control: public, max-age=14400
strict-transport-security: max-age=15552000
server: cloudflare
cf-ray: 833c890bda76b50c-OSL
content-encoding: br
X-Firefox-Spdy: h2
auto.provide-insurance.com/api/sessions/e3ed7eae-ef07-4577-8fb4-4053f1392863
104.18.34.99204 No Content 0 B URL PUT HTTP/2 auto.provide-insurance.com/api/sessions/e3ed7eae-ef07-4577-8fb4-4053f1392863
IP 104.18.34.99:443
Requested by https://auto.provide-insurance.com/?tid=2744&subid=4&subid2=superpower_daily&c1=3ea3f8c586fa407f820f28ef74fbb2ee
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintC3:EB:79:38:C2:A6:67:69:75:A6:30:20:D5:FA:93:F9:71:D1:51:D0
ValidityMon, 20 Mar 2023 00:00:00 GMT - Tue, 19 Mar 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
PUT /api/sessions/e3ed7eae-ef07-4577-8fb4-4053f1392863 HTTP/1.1
Host: auto.provide-insurance.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://auto.provide-insurance.com/?tid=2744&subid=4&subid2=superpower_daily&c1=3ea3f8c586fa407f820f28ef74fbb2ee
content-type: application/json
newrelic: eyJ2IjpbMCwxXSwiZCI6eyJ0eSI6IkJyb3dzZXIiLCJhYyI6IjM0MDc0NDYiLCJhcCI6IjExMDMxMjUxMDciLCJpZCI6ImE4ZGRkNzdhY2ZmYjRhY2QiLCJ0ciI6IjQyM2U5NjVlNTNmNTIxNzg5MWQ2NzE4NmNlOWJhMGQwIiwidGkiOjE3MDIyODUyMDc1Mjh9fQ==
traceparent: 00-423e965e53f5217891d67186ce9ba0d0-a8ddd77acffb4acd-01
tracestate: 3407446@nr=0-1-3407446-1103125107-a8ddd77acffb4acd----1702285207528
Content-Length: 12303
Origin: https://auto.provide-insurance.com
DNT: 1
Connection: keep-alive
Cookie: visitor.uuid=8cd34165-8481-43d8-a020-5d6389653725; session.uuid=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1dWlkIjoiZTNlZDdlYWUtZWYwNy00NTc3LThmYjQtNDA1M2YxMzkyODYzIn0.PyZv2C5QRL5gDK6fWeOx8t5cwdEKFPtCdamkIsDH_cI; _ga_JMN8P5NC9M=GS1.1.1702285207.1.0.1702285207.60.0.0; _ga=GA1.1.887551722.1702285207; _gcl_au=1.1.439448090.1702285207
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Mon, 11 Dec 2023 09:00:07 GMT
content-type: text/html; charset=utf-8
set-cookie: session.uuid=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1dWlkIjoiZTNlZDdlYWUtZWYwNy00NTc3LThmYjQtNDA1M2YxMzkyODYzIn0.PyZv2C5QRL5gDK6fWeOx8t5cwdEKFPtCdamkIsDH_cI; Path=/; Domain=auto.provide-insurance.com; Max-Age=86400; Secure
strict-transport-security: max-age=15552000
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 833c8913e92fb512-OSL
X-Firefox-Spdy: h2
maxcdn.bootstrapcdn.com/font-awesome/4.7.0/css/font-awesome.min.css
104.18.10.207200 OK 7.0 kB URL GET HTTP/2 maxcdn.bootstrapcdn.com/font-awesome/4.7.0/css/font-awesome.min.css
IP 104.18.10.207:443
Requested by https://auto.provide-insurance.com/?tid=2744&subid=4&subid2=superpower_daily&c1=3ea3f8c586fa407f820f28ef74fbb2ee
Certificate IssuerGoogle Trust Services LLC
Subjectbootstrapcdn.com
Fingerprint34:BC:91:5F:B9:EC:32:2C:D9:73:C7:88:C3:6C:FB:77:E7:70:8D:04
ValidityThu, 30 Nov 2023 00:15:17 GMT - Wed, 28 Feb 2024 00:15:16 GMT
File type ASCII text, with very long lines (30837)
Hash 269550530cc127b6aa5a35925a7de6ce
512c7d79033e3028a9be61b540cf1a6870c896f8
799aeb25cc0373fdee0e1b1db7ad6c2f6a0e058dfadaa3379689f583213190bd
GET /font-awesome/4.7.0/css/font-awesome.min.css HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://auto.provide-insurance.com
DNT: 1
Connection: keep-alive
Referer: https://auto.provide-insurance.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 11 Dec 2023 09:00:06 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
etag: W/"269550530cc127b6aa5a35925a7de6ce"
last-modified: Mon, 25 Jan 2021 22:04:55 GMT
cdn-cachedat: 10/31/2023 18:48:06
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 722
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: df0ee2e2cf17287490199f91575ba76e
cdn-cache: HIT
cf-cache-status: HIT
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 833c890bac6e56c5-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
auto.provide-insurance.com/?tid=2744&subid=4&subid2=superpower_daily&c1=3ea3f8c586fa407f820f28ef74fbb2ee
104.18.34.99200 OK 16 kB URL User Request GET HTTP/2 auto.provide-insurance.com/?tid=2744&subid=4&subid2=superpower_daily&c1=3ea3f8c586fa407f820f28ef74fbb2ee
IP 104.18.34.99:443
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintC3:EB:79:38:C2:A6:67:69:75:A6:30:20:D5:FA:93:F9:71:D1:51:D0
ValidityMon, 20 Mar 2023 00:00:00 GMT - Tue, 19 Mar 2024 23:59:59 GMT
File type HTML document text
- HTML document text
- HTML document text
- HTML document text
- HTML document text
- HTML document text
- exported SGML document, Unicode text, UTF-8 text, with very long lines (27175)
Hash 174e9bddba36c7773b613c86c5bc7bb9
067358d15f5777a2629476aac51b5b78d884cbe7
f0426578516e6fafe07fb6fc4dd96e69f5713d4abf330f62564d11c1337b1dde
GET /?tid=2744&subid=4&subid2=superpower_daily&c1=3ea3f8c586fa407f820f28ef74fbb2ee HTTP/1.1
Host: auto.provide-insurance.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 11 Dec 2023 09:00:05 GMT
content-type: text/html; charset=utf-8
cache-control: private
set-cookie: visitor.uuid=8cd34165-8481-43d8-a020-5d6389653725; Path=/; Domain=provide-insurance.com; Max-Age=315360000; Secure
session.uuid=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1dWlkIjoiZTNlZDdlYWUtZWYwNy00NTc3LThmYjQtNDA1M2YxMzkyODYzIn0.PyZv2C5QRL5gDK6fWeOx8t5cwdEKFPtCdamkIsDH_cI; Path=/; Domain=auto.provide-insurance.com; Max-Age=86400; Secure
x-powered-by: Next.js 7.0.3
strict-transport-security: max-age=15552000
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 833c89078d0eb512-OSL
content-encoding: br
X-Firefox-Spdy: h2
auto.provide-insurance.com/_next/static/chunks/commons.3c75e565b56efe47f0bc.js
104.18.34.99200 OK 210 kB URL GET HTTP/2 auto.provide-insurance.com/_next/static/chunks/commons.3c75e565b56efe47f0bc.js
IP 104.18.34.99:443
Requested by https://auto.provide-insurance.com/?tid=2744&subid=4&subid2=superpower_daily&c1=3ea3f8c586fa407f820f28ef74fbb2ee
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintC3:EB:79:38:C2:A6:67:69:75:A6:30:20:D5:FA:93:F9:71:D1:51:D0
ValidityMon, 20 Mar 2023 00:00:00 GMT - Tue, 19 Mar 2024 23:59:59 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Size 210 kB (209647 bytes)
Hash 7a20d49d11e052cc2b3568989878cd95
91db1ed300143d7b4097eb6e93375ba107a8dd53
e5aad889c9b3403cdb99fafcfa90b1c31fa2286514a53dd373c574d0dc6c9611
GET /_next/static/chunks/commons.3c75e565b56efe47f0bc.js HTTP/1.1
Host: auto.provide-insurance.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://auto.provide-insurance.com/?tid=2744&subid=4&subid2=superpower_daily&c1=3ea3f8c586fa407f820f28ef74fbb2ee
Cookie: visitor.uuid=8cd34165-8481-43d8-a020-5d6389653725; session.uuid=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1dWlkIjoiZTNlZDdlYWUtZWYwNy00NTc3LThmYjQtNDA1M2YxMzkyODYzIn0.PyZv2C5QRL5gDK6fWeOx8t5cwdEKFPtCdamkIsDH_cI
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 11 Dec 2023 09:00:06 GMT
content-type: text/javascript
cache-control: public, max-age=31536000
etag: W/"3565d-18c1ab644d0"
last-modified: Wed, 29 Nov 2023 10:53:22 GMT
strict-transport-security: max-age=15552000
cf-cache-status: HIT
expires: Tue, 10 Dec 2024 09:00:06 GMT
vary: Accept-Encoding
server: cloudflare
cf-ray: 833c890ae916b512-OSL
content-encoding: br
X-Firefox-Spdy: h2
cep.services.everquote.com/publisher
104.18.41.239200 OK 0 B URL POST HTTP/2 cep.services.everquote.com/publisher
IP 104.18.41.239:443
Requested by https://auto.provide-insurance.com/?tid=2744&subid=4&subid2=superpower_daily&c1=3ea3f8c586fa407f820f28ef74fbb2ee
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint89:C7:86:5F:F8:35:73:EC:3C:0B:10:5E:CA:91:18:DF:F0:AA:F2:FD
ValidityFri, 28 Apr 2023 00:00:00 GMT - Sat, 27 Apr 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /publisher HTTP/1.1
Host: cep.services.everquote.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: authtoken,content-type
Referer: https://auto.provide-insurance.com/
Origin: https://auto.provide-insurance.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 11 Dec 2023 09:00:07 GMT
content-length: 0
access-control-allow-headers: Content-Type,Accept,AuthToken
access-control-allow-methods: HEAD,POST
access-control-allow-origin: https://auto.provide-insurance.com
strict-transport-security: max-age=15552000
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 833c89145c6ab4f9-OSL
X-Firefox-Spdy: h2
auto.provide-insurance.com/_next/static/runtime/main-4cbe9c684a6c70c8b4a6.js
104.18.34.99200 OK 31 kB URL GET HTTP/2 auto.provide-insurance.com/_next/static/runtime/main-4cbe9c684a6c70c8b4a6.js
IP 104.18.34.99:443
Requested by https://auto.provide-insurance.com/?tid=2744&subid=4&subid2=superpower_daily&c1=3ea3f8c586fa407f820f28ef74fbb2ee
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintC3:EB:79:38:C2:A6:67:69:75:A6:30:20:D5:FA:93:F9:71:D1:51:D0
ValidityMon, 20 Mar 2023 00:00:00 GMT - Tue, 19 Mar 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (25648), with LF, NEL line terminators
Hash 3a63e9b2860067557abda87e2f00da26
cc5f93f3abd9a235de5b569f2328d60e9319f4dd
f5d066b592fc94c812e3d728a47c62a0cf0723222f6f79369f4187405061f01e
GET /_next/static/runtime/main-4cbe9c684a6c70c8b4a6.js HTTP/1.1
Host: auto.provide-insurance.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://auto.provide-insurance.com/?tid=2744&subid=4&subid2=superpower_daily&c1=3ea3f8c586fa407f820f28ef74fbb2ee
Cookie: visitor.uuid=8cd34165-8481-43d8-a020-5d6389653725; session.uuid=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1dWlkIjoiZTNlZDdlYWUtZWYwNy00NTc3LThmYjQtNDA1M2YxMzkyODYzIn0.PyZv2C5QRL5gDK6fWeOx8t5cwdEKFPtCdamkIsDH_cI
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 11 Dec 2023 09:00:06 GMT
content-type: text/javascript
cache-control: public, max-age=31536000
etag: W/"758c-18c1ab644d0"
last-modified: Wed, 29 Nov 2023 10:53:22 GMT
strict-transport-security: max-age=15552000
cf-cache-status: HIT
expires: Tue, 10 Dec 2024 09:00:06 GMT
vary: Accept-Encoding
server: cloudflare
cf-ray: 833c890ae91ab512-OSL
content-encoding: br
X-Firefox-Spdy: h2
cep.services.everquote.com/publisher
104.18.41.239200 OK 0 B URL POST HTTP/2 cep.services.everquote.com/publisher
IP 104.18.41.239:443
Requested by https://auto.provide-insurance.com/?tid=2744&subid=4&subid2=superpower_daily&c1=3ea3f8c586fa407f820f28ef74fbb2ee
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint89:C7:86:5F:F8:35:73:EC:3C:0B:10:5E:CA:91:18:DF:F0:AA:F2:FD
ValidityFri, 28 Apr 2023 00:00:00 GMT - Sat, 27 Apr 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /publisher HTTP/1.1
Host: cep.services.everquote.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: authtoken,content-type
Referer: https://auto.provide-insurance.com/
Origin: https://auto.provide-insurance.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 11 Dec 2023 09:00:07 GMT
content-length: 0
access-control-allow-headers: Content-Type,Accept,AuthToken
access-control-allow-methods: HEAD,POST
access-control-allow-origin: https://auto.provide-insurance.com
strict-transport-security: max-age=15552000
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 833c89147c85b4f9-OSL
X-Firefox-Spdy: h2
cep.services.everquote.com/publisher
104.18.41.239200 OK 0 B URL POST HTTP/2 cep.services.everquote.com/publisher
IP 104.18.41.239:443
Requested by https://auto.provide-insurance.com/?tid=2744&subid=4&subid2=superpower_daily&c1=3ea3f8c586fa407f820f28ef74fbb2ee
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint89:C7:86:5F:F8:35:73:EC:3C:0B:10:5E:CA:91:18:DF:F0:AA:F2:FD
ValidityFri, 28 Apr 2023 00:00:00 GMT - Sat, 27 Apr 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /publisher HTTP/1.1
Host: cep.services.everquote.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: authtoken,content-type
Referer: https://auto.provide-insurance.com/
Origin: https://auto.provide-insurance.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 11 Dec 2023 09:00:07 GMT
content-length: 0
access-control-allow-headers: Content-Type,Accept,AuthToken
access-control-allow-methods: HEAD,POST
access-control-allow-origin: https://auto.provide-insurance.com
strict-transport-security: max-age=15552000
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 833c89145c70b4f9-OSL
X-Firefox-Spdy: h2
cep.services.everquote.com/publisher
104.18.41.239200 OK 0 B URL POST HTTP/2 cep.services.everquote.com/publisher
IP 104.18.41.239:443
Requested by https://auto.provide-insurance.com/?tid=2744&subid=4&subid2=superpower_daily&c1=3ea3f8c586fa407f820f28ef74fbb2ee
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint89:C7:86:5F:F8:35:73:EC:3C:0B:10:5E:CA:91:18:DF:F0:AA:F2:FD
ValidityFri, 28 Apr 2023 00:00:00 GMT - Sat, 27 Apr 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /publisher HTTP/1.1
Host: cep.services.everquote.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: authtoken,content-type
Referer: https://auto.provide-insurance.com/
Origin: https://auto.provide-insurance.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 11 Dec 2023 09:00:07 GMT
content-length: 0
access-control-allow-headers: Content-Type,Accept,AuthToken
access-control-allow-methods: HEAD,POST
access-control-allow-origin: https://auto.provide-insurance.com
strict-transport-security: max-age=15552000
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 833c89147c86b4f9-OSL
X-Firefox-Spdy: h2
auto.provide-insurance.com/api/sessions/e3ed7eae-ef07-4577-8fb4-4053f1392863
104.18.34.99204 No Content 0 B URL PUT HTTP/2 auto.provide-insurance.com/api/sessions/e3ed7eae-ef07-4577-8fb4-4053f1392863
IP 104.18.34.99:443
Requested by https://auto.provide-insurance.com/?tid=2744&subid=4&subid2=superpower_daily&c1=3ea3f8c586fa407f820f28ef74fbb2ee
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintC3:EB:79:38:C2:A6:67:69:75:A6:30:20:D5:FA:93:F9:71:D1:51:D0
ValidityMon, 20 Mar 2023 00:00:00 GMT - Tue, 19 Mar 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
PUT /api/sessions/e3ed7eae-ef07-4577-8fb4-4053f1392863 HTTP/1.1
Host: auto.provide-insurance.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://auto.provide-insurance.com/?tid=2744&subid=4&subid2=superpower_daily&c1=3ea3f8c586fa407f820f28ef74fbb2ee
content-type: application/json
newrelic: eyJ2IjpbMCwxXSwiZCI6eyJ0eSI6IkJyb3dzZXIiLCJhYyI6IjM0MDc0NDYiLCJhcCI6IjExMDMxMjUxMDciLCJpZCI6ImE0MThjYmI2YjNkZGZlZTYiLCJ0ciI6ImVjYjg4MGYzZGNlYmFjMjE1MzE0ZGQ3MmY5ZjgzM2IwIiwidGkiOjE3MDIyODUyMDc1NTN9fQ==
traceparent: 00-ecb880f3dcebac215314dd72f9f833b0-a418cbb6b3ddfee6-01
tracestate: 3407446@nr=0-1-3407446-1103125107-a418cbb6b3ddfee6----1702285207553
Content-Length: 12349
Origin: https://auto.provide-insurance.com
DNT: 1
Connection: keep-alive
Cookie: visitor.uuid=8cd34165-8481-43d8-a020-5d6389653725; session.uuid=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1dWlkIjoiZTNlZDdlYWUtZWYwNy00NTc3LThmYjQtNDA1M2YxMzkyODYzIn0.PyZv2C5QRL5gDK6fWeOx8t5cwdEKFPtCdamkIsDH_cI; _ga_JMN8P5NC9M=GS1.1.1702285207.1.0.1702285207.60.0.0; _ga=GA1.1.887551722.1702285207; _gcl_au=1.1.439448090.1702285207
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Mon, 11 Dec 2023 09:00:07 GMT
content-type: text/html; charset=utf-8
set-cookie: session.uuid=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1dWlkIjoiZTNlZDdlYWUtZWYwNy00NTc3LThmYjQtNDA1M2YxMzkyODYzIn0.PyZv2C5QRL5gDK6fWeOx8t5cwdEKFPtCdamkIsDH_cI; Path=/; Domain=auto.provide-insurance.com; Max-Age=86400; Secure
strict-transport-security: max-age=15552000
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 833c891479b6b512-OSL
X-Firefox-Spdy: h2
auto.provide-insurance.com/api/sessions/e3ed7eae-ef07-4577-8fb4-4053f1392863
104.18.34.99204 No Content 0 B URL PUT HTTP/2 auto.provide-insurance.com/api/sessions/e3ed7eae-ef07-4577-8fb4-4053f1392863
IP 104.18.34.99:443
Requested by https://auto.provide-insurance.com/?tid=2744&subid=4&subid2=superpower_daily&c1=3ea3f8c586fa407f820f28ef74fbb2ee
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintC3:EB:79:38:C2:A6:67:69:75:A6:30:20:D5:FA:93:F9:71:D1:51:D0
ValidityMon, 20 Mar 2023 00:00:00 GMT - Tue, 19 Mar 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
PUT /api/sessions/e3ed7eae-ef07-4577-8fb4-4053f1392863 HTTP/1.1
Host: auto.provide-insurance.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://auto.provide-insurance.com/?tid=2744&subid=4&subid2=superpower_daily&c1=3ea3f8c586fa407f820f28ef74fbb2ee
content-type: application/json
newrelic: eyJ2IjpbMCwxXSwiZCI6eyJ0eSI6IkJyb3dzZXIiLCJhYyI6IjM0MDc0NDYiLCJhcCI6IjExMDMxMjUxMDciLCJpZCI6Ijc2Yjk5MmQ0OWJmMzc5MDUiLCJ0ciI6IjQ3OTU2YmZhZDkwOTZmOGNmMzgzNzk5OTBiMWY2N2QwIiwidGkiOjE3MDIyODUyMDc1NDl9fQ==
traceparent: 00-47956bfad9096f8cf38379990b1f67d0-76b992d49bf37905-01
tracestate: 3407446@nr=0-1-3407446-1103125107-76b992d49bf37905----1702285207549
Content-Length: 12328
Origin: https://auto.provide-insurance.com
DNT: 1
Connection: keep-alive
Cookie: visitor.uuid=8cd34165-8481-43d8-a020-5d6389653725; session.uuid=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1dWlkIjoiZTNlZDdlYWUtZWYwNy00NTc3LThmYjQtNDA1M2YxMzkyODYzIn0.PyZv2C5QRL5gDK6fWeOx8t5cwdEKFPtCdamkIsDH_cI; _ga_JMN8P5NC9M=GS1.1.1702285207.1.0.1702285207.60.0.0; _ga=GA1.1.887551722.1702285207; _gcl_au=1.1.439448090.1702285207
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Mon, 11 Dec 2023 09:00:07 GMT
content-type: text/html; charset=utf-8
set-cookie: session.uuid=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1dWlkIjoiZTNlZDdlYWUtZWYwNy00NTc3LThmYjQtNDA1M2YxMzkyODYzIn0.PyZv2C5QRL5gDK6fWeOx8t5cwdEKFPtCdamkIsDH_cI; Path=/; Domain=auto.provide-insurance.com; Max-Age=86400; Secure
strict-transport-security: max-age=15552000
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 833c891479b4b512-OSL
X-Firefox-Spdy: h2
cep.services.everquote.com/publisher
104.18.41.239200 OK 1 B URL POST HTTP/2 cep.services.everquote.com/publisher
IP 104.18.41.239:443
Requested by https://auto.provide-insurance.com/?tid=2744&subid=4&subid2=superpower_daily&c1=3ea3f8c586fa407f820f28ef74fbb2ee
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint89:C7:86:5F:F8:35:73:EC:3C:0B:10:5E:CA:91:18:DF:F0:AA:F2:FD
ValidityFri, 28 Apr 2023 00:00:00 GMT - Sat, 27 Apr 2024 23:59:59 GMT
File type very short file (no magic)
Hash eccbc87e4b5ce2fe28308fd9f2a7baf3
77de68daecd823babbb58edb1c8e14d7106e83bb
4e07408562bedb8b60ce05c1decfe3ad16b72230967de01f640b7e4729b49fce
POST /publisher HTTP/1.1
Host: cep.services.everquote.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://auto.provide-insurance.com/
AuthToken: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1dWlkIjoiZTNlZDdlYWUtZWYwNy00NTc3LThmYjQtNDA1M2YxMzkyODYzIn0.PyZv2C5QRL5gDK6fWeOx8t5cwdEKFPtCdamkIsDH_cI
Content-Type: application/json
Content-Length: 157
Origin: https://auto.provide-insurance.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 11 Dec 2023 09:00:07 GMT
content-type: text/html; charset=utf-8
access-control-allow-origin: https://auto.provide-insurance.com
strict-transport-security: max-age=15552000
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 833c8913dbc5b4f9-OSL
content-encoding: br
X-Firefox-Spdy: h2
consumer-assets.everquote.com/static-assets/tests-assets/auto/landings/EQSimpleDesignDesktop/carrier-logos/progressive.svg
104.16.235.120200 OK 1.6 kB URL GET HTTP/2 consumer-assets.everquote.com/static-assets/tests-assets/auto/landings/EQSimpleDesignDesktop/carrier-logos/progressive.svg
IP 104.16.235.120:443
Requested by https://auto.provide-insurance.com/?tid=2744&subid=4&subid2=superpower_daily&c1=3ea3f8c586fa407f820f28ef74fbb2ee
Certificate IssuerCloudflare, Inc.
Subjecteverquote.com
Fingerprint01:DA:D1:FD:E7:E1:F9:66:F0:AA:F7:A9:8E:4D:15:01:A8:85:A0:91
ValidityMon, 10 Apr 2023 00:00:00 GMT - Tue, 09 Apr 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image
- , ASCII text, with very long lines (3621), with no line terminators
Hash eb36ca4c57689afd91f1aff0d6d95852
9a104eef618f36baef785e2b4ee1f8cc39acf08a
e697cadb19785c0e918741b9c913362409cae44767e2bf4ba33a66ad8322a660
GET /static-assets/tests-assets/auto/landings/EQSimpleDesignDesktop/carrier-logos/progressive.svg HTTP/1.1
Host: consumer-assets.everquote.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://auto.provide-insurance.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 11 Dec 2023 09:00:06 GMT
content-type: image/svg+xml
last-modified: Fri, 04 Nov 2022 10:35:44 GMT
etag: W/"eb36ca4c57689afd91f1aff0d6d95852"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 45ff2040e09b26d7b6a62f48718e1406.cloudfront.net (CloudFront)
x-amz-cf-pop: HEL51-P1
x-amz-cf-id: al9JfzClMsDRm7BFz_ETEbrMqMIjtTuOk8FKul3oCFByaEQQKt443w==
cf-cache-status: REVALIDATED
expires: Mon, 11 Dec 2023 13:00:06 GMT
cache-control: public, max-age=14400
strict-transport-security: max-age=15552000
server: cloudflare
cf-ray: 833c890bba5ab50c-OSL
content-encoding: br
X-Firefox-Spdy: h2
consumer-assets.everquote.com/static-assets/tests-assets/auto/landings/EQSimpleDesignDesktop/carrier-logos/countryFinancial.svg
104.16.235.120200 OK 2.0 kB URL GET HTTP/2 consumer-assets.everquote.com/static-assets/tests-assets/auto/landings/EQSimpleDesignDesktop/carrier-logos/countryFinancial.svg
IP 104.16.235.120:443
Requested by https://auto.provide-insurance.com/?tid=2744&subid=4&subid2=superpower_daily&c1=3ea3f8c586fa407f820f28ef74fbb2ee
Certificate IssuerCloudflare, Inc.
Subjecteverquote.com
Fingerprint01:DA:D1:FD:E7:E1:F9:66:F0:AA:F7:A9:8E:4D:15:01:A8:85:A0:91
ValidityMon, 10 Apr 2023 00:00:00 GMT - Tue, 09 Apr 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image
- , ASCII text, with very long lines (4501), with no line terminators
Hash 4b3c014b3ceb888c13a64d11a5db43ab
3e6b11e22c1acad36382272848d79608e4dd5006
cfc76b19d48b4fefebc0e3eefae052e1654241e542322655c57b9d77eb860f37
GET /static-assets/tests-assets/auto/landings/EQSimpleDesignDesktop/carrier-logos/countryFinancial.svg HTTP/1.1
Host: consumer-assets.everquote.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://auto.provide-insurance.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 11 Dec 2023 09:00:06 GMT
content-type: image/svg+xml
last-modified: Fri, 04 Nov 2022 10:35:43 GMT
etag: W/"4b3c014b3ceb888c13a64d11a5db43ab"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 11b1425a6d4f554d768315c2301c82b2.cloudfront.net (CloudFront)
x-amz-cf-pop: HEL51-P1
x-amz-cf-id: _ucdXx0UaqQah7LhUGskFtzdkFn60JoDjv2sjP2EzuAeqYSoHvGRRg==
cf-cache-status: REVALIDATED
expires: Mon, 11 Dec 2023 13:00:06 GMT
cache-control: public, max-age=14400
strict-transport-security: max-age=15552000
server: cloudflare
cf-ray: 833c890bba58b50c-OSL
content-encoding: br
X-Firefox-Spdy: h2
auto.provide-insurance.com/api/sessions/e3ed7eae-ef07-4577-8fb4-4053f1392863
104.18.34.99204 No Content 0 B URL PUT HTTP/2 auto.provide-insurance.com/api/sessions/e3ed7eae-ef07-4577-8fb4-4053f1392863
IP 104.18.34.99:443
Requested by https://auto.provide-insurance.com/?tid=2744&subid=4&subid2=superpower_daily&c1=3ea3f8c586fa407f820f28ef74fbb2ee
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintC3:EB:79:38:C2:A6:67:69:75:A6:30:20:D5:FA:93:F9:71:D1:51:D0
ValidityMon, 20 Mar 2023 00:00:00 GMT - Tue, 19 Mar 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
PUT /api/sessions/e3ed7eae-ef07-4577-8fb4-4053f1392863 HTTP/1.1
Host: auto.provide-insurance.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://auto.provide-insurance.com/?tid=2744&subid=4&subid2=superpower_daily&c1=3ea3f8c586fa407f820f28ef74fbb2ee
content-type: application/json
newrelic: eyJ2IjpbMCwxXSwiZCI6eyJ0eSI6IkJyb3dzZXIiLCJhYyI6IjM0MDc0NDYiLCJhcCI6IjExMDMxMjUxMDciLCJpZCI6ImUzNGQ5M2Y1ODQwZDY3YWMiLCJ0ciI6IjFlZDYzY2M0MWVjNjBlMTMzZjhiNWFmZmFhNTIxODkwIiwidGkiOjE3MDIyODUyMDc3NTl9fQ==
traceparent: 00-1ed63cc41ec60e133f8b5affaa521890-e34d93f5840d67ac-01
tracestate: 3407446@nr=0-1-3407446-1103125107-e34d93f5840d67ac----1702285207759
Content-Length: 12394
Origin: https://auto.provide-insurance.com
DNT: 1
Connection: keep-alive
Cookie: visitor.uuid=8cd34165-8481-43d8-a020-5d6389653725; session.uuid=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1dWlkIjoiZTNlZDdlYWUtZWYwNy00NTc3LThmYjQtNDA1M2YxMzkyODYzIn0.PyZv2C5QRL5gDK6fWeOx8t5cwdEKFPtCdamkIsDH_cI; _ga_JMN8P5NC9M=GS1.1.1702285207.1.0.1702285207.60.0.0; _ga=GA1.1.887551722.1702285207; _gcl_au=1.1.439448090.1702285207
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Mon, 11 Dec 2023 09:00:07 GMT
content-type: text/html; charset=utf-8
set-cookie: session.uuid=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1dWlkIjoiZTNlZDdlYWUtZWYwNy00NTc3LThmYjQtNDA1M2YxMzkyODYzIn0.PyZv2C5QRL5gDK6fWeOx8t5cwdEKFPtCdamkIsDH_cI; Path=/; Domain=auto.provide-insurance.com; Max-Age=86400; Secure
strict-transport-security: max-age=15552000
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 833c8914fa45b512-OSL
X-Firefox-Spdy: h2
cep.services.everquote.com/publisher
104.18.41.239200 OK 1 B URL POST HTTP/2 cep.services.everquote.com/publisher
IP 104.18.41.239:443
Requested by https://auto.provide-insurance.com/?tid=2744&subid=4&subid2=superpower_daily&c1=3ea3f8c586fa407f820f28ef74fbb2ee
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint89:C7:86:5F:F8:35:73:EC:3C:0B:10:5E:CA:91:18:DF:F0:AA:F2:FD
ValidityFri, 28 Apr 2023 00:00:00 GMT - Sat, 27 Apr 2024 23:59:59 GMT
File type very short file (no magic)
Hash eccbc87e4b5ce2fe28308fd9f2a7baf3
77de68daecd823babbb58edb1c8e14d7106e83bb
4e07408562bedb8b60ce05c1decfe3ad16b72230967de01f640b7e4729b49fce
POST /publisher HTTP/1.1
Host: cep.services.everquote.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://auto.provide-insurance.com/
AuthToken: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1dWlkIjoiZTNlZDdlYWUtZWYwNy00NTc3LThmYjQtNDA1M2YxMzkyODYzIn0.PyZv2C5QRL5gDK6fWeOx8t5cwdEKFPtCdamkIsDH_cI
Content-Type: application/json
Content-Length: 176
Origin: https://auto.provide-insurance.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 11 Dec 2023 09:00:07 GMT
content-type: text/html; charset=utf-8
access-control-allow-origin: https://auto.provide-insurance.com
strict-transport-security: max-age=15552000
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 833c89141c22b4f9-OSL
content-encoding: br
X-Firefox-Spdy: h2
auto.provide-insurance.com/api/sessions/e3ed7eae-ef07-4577-8fb4-4053f1392863
104.18.34.99204 No Content 0 B URL PUT HTTP/2 auto.provide-insurance.com/api/sessions/e3ed7eae-ef07-4577-8fb4-4053f1392863
IP 104.18.34.99:443
Requested by https://auto.provide-insurance.com/?tid=2744&subid=4&subid2=superpower_daily&c1=3ea3f8c586fa407f820f28ef74fbb2ee
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintC3:EB:79:38:C2:A6:67:69:75:A6:30:20:D5:FA:93:F9:71:D1:51:D0
ValidityMon, 20 Mar 2023 00:00:00 GMT - Tue, 19 Mar 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
PUT /api/sessions/e3ed7eae-ef07-4577-8fb4-4053f1392863 HTTP/1.1
Host: auto.provide-insurance.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://auto.provide-insurance.com/?tid=2744&subid=4&subid2=superpower_daily&c1=3ea3f8c586fa407f820f28ef74fbb2ee
content-type: application/json
newrelic: eyJ2IjpbMCwxXSwiZCI6eyJ0eSI6IkJyb3dzZXIiLCJhYyI6IjM0MDc0NDYiLCJhcCI6IjExMDMxMjUxMDciLCJpZCI6ImM0YmFlNTJjOThjODMwYjciLCJ0ciI6IjU4ZjdjYjNkYTgzNzdmZWUwZjVjOGJlZTYzYTRhY2IwIiwidGkiOjE3MDIyODUyMDc3NDV9fQ==
traceparent: 00-58f7cb3da8377fee0f5c8bee63a4acb0-c4bae52c98c830b7-01
tracestate: 3407446@nr=0-1-3407446-1103125107-c4bae52c98c830b7----1702285207745
Content-Length: 12369
Origin: https://auto.provide-insurance.com
DNT: 1
Connection: keep-alive
Cookie: visitor.uuid=8cd34165-8481-43d8-a020-5d6389653725; session.uuid=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1dWlkIjoiZTNlZDdlYWUtZWYwNy00NTc3LThmYjQtNDA1M2YxMzkyODYzIn0.PyZv2C5QRL5gDK6fWeOx8t5cwdEKFPtCdamkIsDH_cI; _ga_JMN8P5NC9M=GS1.1.1702285207.1.0.1702285207.60.0.0; _ga=GA1.1.887551722.1702285207; _gcl_au=1.1.439448090.1702285207
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Mon, 11 Dec 2023 09:00:08 GMT
content-type: text/html; charset=utf-8
set-cookie: session.uuid=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1dWlkIjoiZTNlZDdlYWUtZWYwNy00NTc3LThmYjQtNDA1M2YxMzkyODYzIn0.PyZv2C5QRL5gDK6fWeOx8t5cwdEKFPtCdamkIsDH_cI; Path=/; Domain=auto.provide-insurance.com; Max-Age=86400; Secure
strict-transport-security: max-age=15552000
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 833c8914ea0cb512-OSL
X-Firefox-Spdy: h2
secure-track.everquote.com/f?mode=script&event=UXBX21FIH4WRAIV&arrival_id=e3ed7eae-ef07-4577-8fb4-4053f1392863&capture=landing&t=2744&auid=e3ed7eae-ef07-4577-8fb4-4053f1392863&srid=&initiator=
104.16.235.120200 OK 0 B URL GET HTTP/2 secure-track.everquote.com/f?mode=script&event=UXBX21FIH4WRAIV&arrival_id=e3ed7eae-ef07-4577-8fb4-4053f1392863&capture=landing&t=2744&auid=e3ed7eae-ef07-4577-8fb4-4053f1392863&srid=&initiator=
IP 104.16.235.120:443
Requested by https://auto.provide-insurance.com/api/pixels/e3ed7eae-ef07-4577-8fb4-4053f1392863?previous_page=¤t_page=Landing&zip_code=0191
Certificate IssuerCloudflare, Inc.
Subjecteverquote.com
Fingerprint01:DA:D1:FD:E7:E1:F9:66:F0:AA:F7:A9:8E:4D:15:01:A8:85:A0:91
ValidityMon, 10 Apr 2023 00:00:00 GMT - Tue, 09 Apr 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /f?mode=script&event=UXBX21FIH4WRAIV&arrival_id=e3ed7eae-ef07-4577-8fb4-4053f1392863&capture=landing&t=2744&auid=e3ed7eae-ef07-4577-8fb4-4053f1392863&srid=&initiator= HTTP/1.1
Host: secure-track.everquote.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://auto.provide-insurance.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 11 Dec 2023 09:00:08 GMT
content-type: text/javascript;charset=UTF-8
content-length: 0
access-control-allow-credentials: true
set-cookie: secure_savings=E3E45411-2E8D-4124-95F2-35A4F9CC1DEF; Max-Age=0; Expires=Thu, 01 Jan 1970 00:00:10 GMT
secure_savings=E3E45411-2E8D-4124-95F2-35A4F9CC1DEF; Max-Age=0; Expires=Thu, 01 Jan 1970 00:00:10 GMT; Path=/
secure_savings=E3E45411-2E8D-4124-95F2-35A4F9CC1DEF; Max-Age=0; Expires=Thu, 01 Jan 1970 00:00:10 GMT; Domain=everquote.com
secure_savings=E3E45411-2E8D-4124-95F2-35A4F9CC1DEF; Max-Age=0; Expires=Thu, 01 Jan 1970 00:00:10 GMT; Domain=everquote.com; Path=/
secure_savings=E3E45411-2E8D-4124-95F2-35A4F9CC1DEF; Max-Age=630720000; Expires=Sun, 06 Dec 2043 09:00:08 GMT; Domain=everquote.com; Path=/
secure_savings_x=AB33950D8B357E5EEEAA42B2F564045AB8FEAF29069F32; Max-Age=0; Expires=Thu, 01 Jan 1970 00:00:10 GMT
secure_savings_x=AB33950D8B357E5EEEAA42B2F564045AB8FEAF29069F32; Max-Age=0; Expires=Thu, 01 Jan 1970 00:00:10 GMT; Path=/
secure_savings_x=AB33950D8B357E5EEEAA42B2F564045AB8FEAF29069F32; Max-Age=0; Expires=Thu, 01 Jan 1970 00:00:10 GMT; Domain=everquote.com
secure_savings_x=AB33950D8B357E5EEEAA42B2F564045AB8FEAF29069F32; Max-Age=0; Expires=Thu, 01 Jan 1970 00:00:10 GMT; Domain=everquote.com; Path=/
secure_savings_x=AB33950D8B357E5EEEAA42B2F564045AB8FEAF29069F32; Max-Age=630720000; Expires=Sun, 06 Dec 2043 09:00:08 GMT; Domain=everquote.com; Path=/
strict-transport-security: max-age=15552000
vary: Accept-Encoding, Origin
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 833c89177c3cb50c-OSL
X-Firefox-Spdy: h2
cep.services.everquote.com/publisher
104.18.41.239200 OK 72 B URL POST HTTP/2 cep.services.everquote.com/publisher
IP 104.18.41.239:443
Requested by https://auto.provide-insurance.com/?tid=2744&subid=4&subid2=superpower_daily&c1=3ea3f8c586fa407f820f28ef74fbb2ee
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint89:C7:86:5F:F8:35:73:EC:3C:0B:10:5E:CA:91:18:DF:F0:AA:F2:FD
ValidityFri, 28 Apr 2023 00:00:00 GMT - Sat, 27 Apr 2024 23:59:59 GMT
Hash 3d34aa2246954857324502ee29b4f78d
b557ec94c1eb2aa5ae0e3ba190777726f26c3b89
8c6c7b14a0889f6e96a96196714b7d1b74b4b834822edb4355f05d9e60d729cc
POST /publisher HTTP/1.1
Host: cep.services.everquote.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://auto.provide-insurance.com/
AuthToken: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1dWlkIjoiZTNlZDdlYWUtZWYwNy00NTc3LThmYjQtNDA1M2YxMzkyODYzIn0.PyZv2C5QRL5gDK6fWeOx8t5cwdEKFPtCdamkIsDH_cI
Content-Type: application/json
Content-Length: 142
Origin: https://auto.provide-insurance.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 11 Dec 2023 09:00:07 GMT
content-type: text/html; charset=utf-8
access-control-allow-origin: https://auto.provide-insurance.com
strict-transport-security: max-age=15552000
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 833c8914ece6b4f9-OSL
content-encoding: br
X-Firefox-Spdy: h2
tpx.everquote.com/pix?oauid=e3ed7eae-ef07-4577-8fb4-4053f1392863&tid=2744&page=Any&vertical=auto
104.16.235.120200 OK 42 B URL GET HTTP/2 tpx.everquote.com/pix?oauid=e3ed7eae-ef07-4577-8fb4-4053f1392863&tid=2744&page=Any&vertical=auto
IP 104.16.235.120:443
Requested by https://auto.provide-insurance.com/api/pixels/e3ed7eae-ef07-4577-8fb4-4053f1392863?previous_page=¤t_page=Landing&zip_code=0191
Certificate IssuerCloudflare, Inc.
Subjecteverquote.com
Fingerprint01:DA:D1:FD:E7:E1:F9:66:F0:AA:F7:A9:8E:4D:15:01:A8:85:A0:91
ValidityMon, 10 Apr 2023 00:00:00 GMT - Tue, 09 Apr 2024 23:59:59 GMT
File type GIF image data, version 89a, 1 x 1
- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pix?oauid=e3ed7eae-ef07-4577-8fb4-4053f1392863&tid=2744&page=Any&vertical=auto HTTP/1.1
Host: tpx.everquote.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://auto.provide-insurance.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 11 Dec 2023 09:00:08 GMT
content-type: image/gif
content-length: 42
set-cookie: eq_tpuid=d28b0a9a-d5db-40be-8d06-666897fbd175.GFhhGA.NY_cj0UOM3j2rMP_LPUxMF9nXZ0; Path=/; expires=Sun, 30-Nov-2025 09:00:08 GMT; Domain=.everquote.com; HttpOnly
x-content-type-options: nosniff
strict-transport-security: max-age=15552000
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 833c8917cc83b50c-OSL
X-Firefox-Spdy: h2
www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-JMN8P5NC9M&cid=887551722.1702285207>m=45je3bt0v870089632&aip=1&dma=1&dma_cps=sypham&gcd=11l1l1l1l1&z=1881820267
142.250.74.163200 OK 42 B URL GET HTTP/2 www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-JMN8P5NC9M&cid=887551722.1702285207>m=45je3bt0v870089632&aip=1&dma=1&dma_cps=sypham&gcd=11l1l1l1l1&z=1881820267
IP 142.250.74.163:443
Requested by https://auto.provide-insurance.com/?tid=2744&subid=4&subid2=superpower_daily&c1=3ea3f8c586fa407f820f28ef74fbb2ee
Certificate IssuerGoogle Trust Services LLC
Subject*.google.no
FingerprintDB:33:6A:DD:DA:72:55:0D:55:09:60:6E:D1:5B:40:D8:2B:9B:4F:3C
ValidityMon, 20 Nov 2023 08:12:16 GMT - Mon, 12 Feb 2024 08:12:15 GMT
File type GIF image data, version 89a, 1 x 1
- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-JMN8P5NC9M&cid=887551722.1702285207>m=45je3bt0v870089632&aip=1&dma=1&dma_cps=sypham&gcd=11l1l1l1l1&z=1881820267 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://auto.provide-insurance.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Mon, 11 Dec 2023 09:00:08 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
bat.bing.com/bat.js
204.79.197.200200 OK 13 kB IP 204.79.197.200:443
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://auto.provide-insurance.com/?tid=2744&subid=4&subid2=superpower_daily&c1=3ea3f8c586fa407f820f28ef74fbb2ee
Certificate IssuerMicrosoft Corporation
Subjectwww.bing.com
FingerprintA5:EC:34:1F:AB:B3:69:71:54:88:69:BA:64:CC:E2:9B:32:B6:65:CD
ValidityTue, 24 Oct 2023 07:42:22 GMT - Sun, 21 Apr 2024 07:42:22 GMT
File type Unicode text, UTF-8 text, with very long lines (46103), with no line terminators
Hash 7f75f159026f3a2c8cccda487b43157b
021cf5c854db063cd79bf0394c24eb994e095640
5e319852607809336b2534ffeb96f6933f26994dd040f535302c84f59cc0a214
GET /bat.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://auto.provide-insurance.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: private,max-age=1800
content-length: 13175
content-type: application/javascript
content-encoding: gzip
last-modified: Fri, 10 Nov 2023 20:09:55 GMT
accept-ranges: bytes
etag: "80abcdf1114da1:0"
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: B80B7216406E4163931932DFC4523F3C Ref B: OSL30EDGE0313 Ref C: 2023-12-11T09:00:08Z
date: Mon, 11 Dec 2023 09:00:08 GMT
X-Firefox-Spdy: h2
bat.bing.com/p/action/4030807.js
204.79.197.200204 No Content 0 B URL GET HTTP/2 bat.bing.com/p/action/4030807.js
IP 204.79.197.200:443
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://auto.provide-insurance.com/?tid=2744&subid=4&subid2=superpower_daily&c1=3ea3f8c586fa407f820f28ef74fbb2ee
Certificate IssuerMicrosoft Corporation
Subjectwww.bing.com
FingerprintA5:EC:34:1F:AB:B3:69:71:54:88:69:BA:64:CC:E2:9B:32:B6:65:CD
ValidityTue, 24 Oct 2023 07:42:22 GMT - Sun, 21 Apr 2024 07:42:22 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /p/action/4030807.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://auto.provide-insurance.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
cache-control: private,max-age=1800
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: EAF3F7FFDF7B4CC8A139F735C30127D9 Ref B: OSL30EDGE0313 Ref C: 2023-12-11T09:00:08Z
date: Mon, 11 Dec 2023 09:00:08 GMT
X-Firefox-Spdy: h2
cep.services.everquote.com/publisher
104.18.41.239200 OK 1 B URL POST HTTP/2 cep.services.everquote.com/publisher
IP 104.18.41.239:443
Requested by https://auto.provide-insurance.com/?tid=2744&subid=4&subid2=superpower_daily&c1=3ea3f8c586fa407f820f28ef74fbb2ee
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint89:C7:86:5F:F8:35:73:EC:3C:0B:10:5E:CA:91:18:DF:F0:AA:F2:FD
ValidityFri, 28 Apr 2023 00:00:00 GMT - Sat, 27 Apr 2024 23:59:59 GMT
File type very short file (no magic)
Hash eccbc87e4b5ce2fe28308fd9f2a7baf3
77de68daecd823babbb58edb1c8e14d7106e83bb
4e07408562bedb8b60ce05c1decfe3ad16b72230967de01f640b7e4729b49fce
POST /publisher HTTP/1.1
Host: cep.services.everquote.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://auto.provide-insurance.com/
AuthToken: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1dWlkIjoiZTNlZDdlYWUtZWYwNy00NTc3LThmYjQtNDA1M2YxMzkyODYzIn0.PyZv2C5QRL5gDK6fWeOx8t5cwdEKFPtCdamkIsDH_cI
Content-Type: application/json
Content-Length: 148
Origin: https://auto.provide-insurance.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 11 Dec 2023 09:00:07 GMT
content-type: text/html; charset=utf-8
access-control-allow-origin: https://auto.provide-insurance.com
strict-transport-security: max-age=15552000
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 833c89152d4fb4f9-OSL
content-encoding: br
X-Firefox-Spdy: h2
auto.provide-insurance.com/api/sessions/e3ed7eae-ef07-4577-8fb4-4053f1392863
104.18.34.99204 No Content 0 B URL PUT HTTP/2 auto.provide-insurance.com/api/sessions/e3ed7eae-ef07-4577-8fb4-4053f1392863
IP 104.18.34.99:443
Requested by https://auto.provide-insurance.com/?tid=2744&subid=4&subid2=superpower_daily&c1=3ea3f8c586fa407f820f28ef74fbb2ee
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintC3:EB:79:38:C2:A6:67:69:75:A6:30:20:D5:FA:93:F9:71:D1:51:D0
ValidityMon, 20 Mar 2023 00:00:00 GMT - Tue, 19 Mar 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
PUT /api/sessions/e3ed7eae-ef07-4577-8fb4-4053f1392863 HTTP/1.1
Host: auto.provide-insurance.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://auto.provide-insurance.com/?tid=2744&subid=4&subid2=superpower_daily&c1=3ea3f8c586fa407f820f28ef74fbb2ee
content-type: application/json
newrelic: eyJ2IjpbMCwxXSwiZCI6eyJ0eSI6IkJyb3dzZXIiLCJhYyI6IjM0MDc0NDYiLCJhcCI6IjExMDMxMjUxMDciLCJpZCI6IjJiOTFlMGRlYWU0ZmNjZWEiLCJ0ciI6ImQzMjMzMzBiODc1Zjg5ODIyY2I3M2MyNTUyYzIyNTEwIiwidGkiOjE3MDIyODUyMDkzOTV9fQ==
traceparent: 00-d323330b875f89822cb73c2552c22510-2b91e0deae4fccea-01
tracestate: 3407446@nr=0-1-3407446-1103125107-2b91e0deae4fccea----1702285209395
Content-Length: 12445
Origin: https://auto.provide-insurance.com
DNT: 1
Connection: keep-alive
Cookie: visitor.uuid=8cd34165-8481-43d8-a020-5d6389653725; session.uuid=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1dWlkIjoiZTNlZDdlYWUtZWYwNy00NTc3LThmYjQtNDA1M2YxMzkyODYzIn0.PyZv2C5QRL5gDK6fWeOx8t5cwdEKFPtCdamkIsDH_cI; _ga_JMN8P5NC9M=GS1.1.1702285207.1.0.1702285207.60.0.0; _ga=GA1.1.887551722.1702285207; _gcl_au=1.1.439448090.1702285207; _uetsid=af4e6470980311ee86e5c927371d9f79; _uetvid=af4e48d0980311eeb709e994985c4ead
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Mon, 11 Dec 2023 09:00:09 GMT
content-type: text/html; charset=utf-8
set-cookie: session.uuid=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1dWlkIjoiZTNlZDdlYWUtZWYwNy00NTc3LThmYjQtNDA1M2YxMzkyODYzIn0.PyZv2C5QRL5gDK6fWeOx8t5cwdEKFPtCdamkIsDH_cI; Path=/; Domain=auto.provide-insurance.com; Max-Age=86400; Secure
strict-transport-security: max-age=15552000
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 833c891deaddb512-OSL
X-Firefox-Spdy: h2
cep.services.everquote.com/publisher
104.18.41.239200 OK 166 B URL POST HTTP/2 cep.services.everquote.com/publisher
IP 104.18.41.239:443
Requested by https://auto.provide-insurance.com/?tid=2744&subid=4&subid2=superpower_daily&c1=3ea3f8c586fa407f820f28ef74fbb2ee
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint89:C7:86:5F:F8:35:73:EC:3C:0B:10:5E:CA:91:18:DF:F0:AA:F2:FD
ValidityFri, 28 Apr 2023 00:00:00 GMT - Sat, 27 Apr 2024 23:59:59 GMT
Hash 89037cb31f5cc0c0e82e3b744e6222e4
52617dbf5ce7e9fd903c60349e3a19312264a51e
68cf7c192a8c53486c802b6c5873df13a3ca6d0dcee6f1bb0dd7898e46ed199e
POST /publisher HTTP/1.1
Host: cep.services.everquote.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://auto.provide-insurance.com/
AuthToken: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1dWlkIjoiZTNlZDdlYWUtZWYwNy00NTc3LThmYjQtNDA1M2YxMzkyODYzIn0.PyZv2C5QRL5gDK6fWeOx8t5cwdEKFPtCdamkIsDH_cI
Content-Type: application/json
Content-Length: 153
Origin: https://auto.provide-insurance.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 11 Dec 2023 09:00:08 GMT
content-type: text/html; charset=utf-8
access-control-allow-origin: https://auto.provide-insurance.com
strict-transport-security: max-age=15552000
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 833c8915ee1bb4f9-OSL
content-encoding: br
X-Firefox-Spdy: h2
cep.services.everquote.com/publisher
104.18.41.239200 OK 1 B URL POST HTTP/2 cep.services.everquote.com/publisher
IP 104.18.41.239:443
Requested by https://auto.provide-insurance.com/?tid=2744&subid=4&subid2=superpower_daily&c1=3ea3f8c586fa407f820f28ef74fbb2ee
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint89:C7:86:5F:F8:35:73:EC:3C:0B:10:5E:CA:91:18:DF:F0:AA:F2:FD
ValidityFri, 28 Apr 2023 00:00:00 GMT - Sat, 27 Apr 2024 23:59:59 GMT
File type very short file (no magic)
Hash eccbc87e4b5ce2fe28308fd9f2a7baf3
77de68daecd823babbb58edb1c8e14d7106e83bb
4e07408562bedb8b60ce05c1decfe3ad16b72230967de01f640b7e4729b49fce
POST /publisher HTTP/1.1
Host: cep.services.everquote.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://auto.provide-insurance.com/
AuthToken: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1dWlkIjoiZTNlZDdlYWUtZWYwNy00NTc3LThmYjQtNDA1M2YxMzkyODYzIn0.PyZv2C5QRL5gDK6fWeOx8t5cwdEKFPtCdamkIsDH_cI
Content-Type: application/json
Content-Length: 134
Origin: https://auto.provide-insurance.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 11 Dec 2023 09:00:07 GMT
content-type: text/html; charset=utf-8
access-control-allow-origin: https://auto.provide-insurance.com
strict-transport-security: max-age=15552000
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 833c8913ebcab4f9-OSL
content-encoding: br
X-Firefox-Spdy: h2
auto.provide-insurance.com/api/pixels/e3ed7eae-ef07-4577-8fb4-4053f1392863?previous_page=¤t_page=Landing&zip_code=0191
104.18.34.99200 OK 1.8 kB URL GET HTTP/2 auto.provide-insurance.com/api/pixels/e3ed7eae-ef07-4577-8fb4-4053f1392863?previous_page=¤t_page=Landing&zip_code=0191
IP 104.18.34.99:443
Requested by https://auto.provide-insurance.com/?tid=2744&subid=4&subid2=superpower_daily&c1=3ea3f8c586fa407f820f28ef74fbb2ee
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintC3:EB:79:38:C2:A6:67:69:75:A6:30:20:D5:FA:93:F9:71:D1:51:D0
ValidityMon, 20 Mar 2023 00:00:00 GMT - Tue, 19 Mar 2024 23:59:59 GMT
File type HTML document text
- HTML document text
- exported SGML document, ASCII text, with very long lines (1809), with no line terminators
Hash 695d41430cc3ba1d7c41c7cef6a3caf9
7a5d299a9dd1826d3a804ee7150d7cfbbd4169d2
39bde302daa667021d3381466999f5fcdd290350332ac2f149d592ad3d185c74
GET /api/pixels/e3ed7eae-ef07-4577-8fb4-4053f1392863?previous_page=¤t_page=Landing&zip_code=0191 HTTP/1.1
Host: auto.provide-insurance.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://auto.provide-insurance.com/?tid=2744&subid=4&subid2=superpower_daily&c1=3ea3f8c586fa407f820f28ef74fbb2ee
Cookie: visitor.uuid=8cd34165-8481-43d8-a020-5d6389653725; session.uuid=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1dWlkIjoiZTNlZDdlYWUtZWYwNy00NTc3LThmYjQtNDA1M2YxMzkyODYzIn0.PyZv2C5QRL5gDK6fWeOx8t5cwdEKFPtCdamkIsDH_cI; _ga_JMN8P5NC9M=GS1.1.1702285207.1.0.1702285207.60.0.0; _ga=GA1.1.887551722.1702285207; _gcl_au=1.1.439448090.1702285207
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 11 Dec 2023 09:00:07 GMT
content-type: text/html; charset=utf-8
set-cookie: session.uuid=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1dWlkIjoiZTNlZDdlYWUtZWYwNy00NTc3LThmYjQtNDA1M2YxMzkyODYzIn0.PyZv2C5QRL5gDK6fWeOx8t5cwdEKFPtCdamkIsDH_cI; Path=/; Domain=auto.provide-insurance.com; Max-Age=86400; Secure
strict-transport-security: max-age=15552000
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 833c89144995b512-OSL
content-encoding: br
X-Firefox-Spdy: h2
secure-track.everquote.com/f?mode=pixel&event=UXBX21FIH4WRAIV&arrival_id=e3ed7eae-ef07-4577-8fb4-4053f1392863&capture=landing&t=2744&auid=e3ed7eae-ef07-4577-8fb4-4053f1392863&srid=&initiator=&time=1702285208323
104.16.235.120200 OK 70 B URL GET HTTP/2 secure-track.everquote.com/f?mode=pixel&event=UXBX21FIH4WRAIV&arrival_id=e3ed7eae-ef07-4577-8fb4-4053f1392863&capture=landing&t=2744&auid=e3ed7eae-ef07-4577-8fb4-4053f1392863&srid=&initiator=&time=1702285208323
IP 104.16.235.120:443
Requested by https://auto.provide-insurance.com/api/pixels/e3ed7eae-ef07-4577-8fb4-4053f1392863?previous_page=¤t_page=Landing&zip_code=0191
Certificate IssuerCloudflare, Inc.
Subjecteverquote.com
Fingerprint01:DA:D1:FD:E7:E1:F9:66:F0:AA:F7:A9:8E:4D:15:01:A8:85:A0:91
ValidityMon, 10 Apr 2023 00:00:00 GMT - Tue, 09 Apr 2024 23:59:59 GMT
File type PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
- data
Hash bfbd8ddf9c846e1f985e44f63eaa3e57
e25c45af4a4592c2f7d8225dc305404ae8dd743b
18d840af2c50eff9a5241d4b50833a596e6b71af0cee87cf2b3435345f2f7aba
GET /f?mode=pixel&event=UXBX21FIH4WRAIV&arrival_id=e3ed7eae-ef07-4577-8fb4-4053f1392863&capture=landing&t=2744&auid=e3ed7eae-ef07-4577-8fb4-4053f1392863&srid=&initiator=&time=1702285208323 HTTP/1.1
Host: secure-track.everquote.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://auto.provide-insurance.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 11 Dec 2023 09:00:08 GMT
content-type: image/png
access-control-allow-credentials: true
set-cookie: secure_savings=84DB8C84-8965-4153-85E7-15A5DB8A2EE1; Max-Age=0; Expires=Thu, 01 Jan 1970 00:00:10 GMT
secure_savings=84DB8C84-8965-4153-85E7-15A5DB8A2EE1; Max-Age=0; Expires=Thu, 01 Jan 1970 00:00:10 GMT; Path=/
secure_savings=84DB8C84-8965-4153-85E7-15A5DB8A2EE1; Max-Age=0; Expires=Thu, 01 Jan 1970 00:00:10 GMT; Domain=everquote.com
secure_savings=84DB8C84-8965-4153-85E7-15A5DB8A2EE1; Max-Age=0; Expires=Thu, 01 Jan 1970 00:00:10 GMT; Domain=everquote.com; Path=/
secure_savings=84DB8C84-8965-4153-85E7-15A5DB8A2EE1; Max-Age=630720000; Expires=Sun, 06 Dec 2043 09:00:08 GMT; Domain=everquote.com; Path=/
secure_savings_x=59F4989ACD0FC6B82241A949B87F0A7F544A1420397382; Max-Age=0; Expires=Thu, 01 Jan 1970 00:00:10 GMT
secure_savings_x=59F4989ACD0FC6B82241A949B87F0A7F544A1420397382; Max-Age=0; Expires=Thu, 01 Jan 1970 00:00:10 GMT; Path=/
secure_savings_x=59F4989ACD0FC6B82241A949B87F0A7F544A1420397382; Max-Age=0; Expires=Thu, 01 Jan 1970 00:00:10 GMT; Domain=everquote.com
secure_savings_x=59F4989ACD0FC6B82241A949B87F0A7F544A1420397382; Max-Age=0; Expires=Thu, 01 Jan 1970 00:00:10 GMT; Domain=everquote.com; Path=/
secure_savings_x=59F4989ACD0FC6B82241A949B87F0A7F544A1420397382; Max-Age=630720000; Expires=Sun, 06 Dec 2043 09:00:08 GMT; Domain=everquote.com; Path=/
strict-transport-security: max-age=15552000
vary: Accept-Encoding, Origin
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 833c89178c49b50c-OSL
X-Firefox-Spdy: h2
auto.provide-insurance.com/_next/static/qXHavcoRGHkJjsJ2CCDFR/pages/wait-for-quote.js
104.18.34.99200 OK 16 kB URL GET HTTP/2 auto.provide-insurance.com/_next/static/qXHavcoRGHkJjsJ2CCDFR/pages/wait-for-quote.js
IP 104.18.34.99:443
Requested by https://auto.provide-insurance.com/?tid=2744&subid=4&subid2=superpower_daily&c1=3ea3f8c586fa407f820f28ef74fbb2ee
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintC3:EB:79:38:C2:A6:67:69:75:A6:30:20:D5:FA:93:F9:71:D1:51:D0
ValidityMon, 20 Mar 2023 00:00:00 GMT - Tue, 19 Mar 2024 23:59:59 GMT
File type ASCII text, with very long lines (15640), with no line terminators
Hash 19d6e5e541f02f1ef66c4709b0e0b75e
b8c95261bdbd589ce59887be5a215e4bd1e738bd
b729c6aac0ef883a0da21b6cb2f6c37d1abbb4251e948d5deec664e80bebdb3d
GET /_next/static/qXHavcoRGHkJjsJ2CCDFR/pages/wait-for-quote.js HTTP/1.1
Host: auto.provide-insurance.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://auto.provide-insurance.com/?tid=2744&subid=4&subid2=superpower_daily&c1=3ea3f8c586fa407f820f28ef74fbb2ee
Cookie: visitor.uuid=8cd34165-8481-43d8-a020-5d6389653725; session.uuid=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1dWlkIjoiZTNlZDdlYWUtZWYwNy00NTc3LThmYjQtNDA1M2YxMzkyODYzIn0.PyZv2C5QRL5gDK6fWeOx8t5cwdEKFPtCdamkIsDH_cI; _ga_JMN8P5NC9M=GS1.1.1702285207.1.0.1702285207.60.0.0; _ga=GA1.1.887551722.1702285207; _gcl_au=1.1.439448090.1702285207
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 11 Dec 2023 09:00:08 GMT
content-type: text/javascript
cache-control: public, max-age=31536000
etag: W/"2059-18c1ab644d0"
last-modified: Wed, 29 Nov 2023 10:53:22 GMT
strict-transport-security: max-age=15552000
cf-cache-status: HIT
expires: Tue, 10 Dec 2024 09:00:08 GMT
vary: Accept-Encoding
server: cloudflare
cf-ray: 833c89173c8db512-OSL
content-encoding: br
X-Firefox-Spdy: h2
script.anura.io/cnf.php
18.130.48.239200 OK 0 B IP 18.130.48.239:443
Requested by https://auto.provide-insurance.com/?tid=2744&subid=4&subid2=superpower_daily&c1=3ea3f8c586fa407f820f28ef74fbb2ee
Certificate IssuerAmazon
Subjectscript.anura.io
Fingerprint83:CF:23:67:0B:B9:DB:BB:65:3F:31:44:AD:06:8B:B2:7E:B4:E1:20
ValidityMon, 16 Oct 2023 00:00:00 GMT - Wed, 13 Nov 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cnf.php HTTP/1.1
Host: script.anura.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 15427
Origin: https://auto.provide-insurance.com
DNT: 1
Connection: keep-alive
Referer: https://auto.provide-insurance.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 11 Dec 2023 09:00:09 GMT
content-type: text/html; charset=UTF-8
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-methods: POST
expires: Sun, 28 Dec 1980 18:57:00 EST
cache-control: private, no-cache, no-store, must-revalidate, max-age=0, post-check=0, pre-check=0
pragma: no-cache
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Open+Sans:400,700|Roboto:400,700&display=swap
142.250.74.42200 OK 10 kB URL GET HTTP/2 fonts.googleapis.com/css?family=Open+Sans:400,700|Roboto:400,700&display=swap
IP 142.250.74.42:443
Requested by https://auto.provide-insurance.com/?tid=2744&subid=4&subid2=superpower_daily&c1=3ea3f8c586fa407f820f28ef74fbb2ee
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint10:D0:ED:9A:F4:53:C8:99:DE:B6:5E:5C:04:E6:20:0B:68:7D:46:EC
ValidityMon, 20 Nov 2023 08:08:50 GMT - Mon, 12 Feb 2024 08:08:49 GMT
Hash 9a00ff90678d8d3093b10c70a4abf32c
b019dc5688ae6e40861c21759d85ebb6a215fa06
b652537223da3131b5bc05b5487b63142e5f8e0dca47b75b0b5c335fee8c7f47
GET /css?family=Open+Sans:400,700|Roboto:400,700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://auto.provide-insurance.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Mon, 11 Dec 2023 09:00:06 GMT
date: Mon, 11 Dec 2023 09:00:06 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
script.anura.io/request.js?instance=3985751747&exid=e3ed7eae-ef07-4577-8fb4-4053f1392863&source=2744&callback=captureAnuraResponse&campaign=4&246856183296
18.130.48.239200 OK 56 kB URL GET HTTP/2 script.anura.io/request.js?instance=3985751747&exid=e3ed7eae-ef07-4577-8fb4-4053f1392863&source=2744&callback=captureAnuraResponse&campaign=4&246856183296
IP 18.130.48.239:443
Requested by https://auto.provide-insurance.com/?tid=2744&subid=4&subid2=superpower_daily&c1=3ea3f8c586fa407f820f28ef74fbb2ee
Certificate IssuerAmazon
Subjectscript.anura.io
Fingerprint83:CF:23:67:0B:B9:DB:BB:65:3F:31:44:AD:06:8B:B2:7E:B4:E1:20
ValidityMon, 16 Oct 2023 00:00:00 GMT - Wed, 13 Nov 2024 23:59:59 GMT
File type ASCII text, with very long lines (1912)
Hash 082853b9f842e0f90a3cb4405c5e9c24
c2f0de517b84d140edce989f6870966c37b5c564
f50c744e2676209b41d0600cd4bf4ea13272f688484ed58e22ecec7e37a290c7
GET /request.js?instance=3985751747&exid=e3ed7eae-ef07-4577-8fb4-4053f1392863&source=2744&callback=captureAnuraResponse&campaign=4&246856183296 HTTP/1.1
Host: script.anura.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://auto.provide-insurance.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 11 Dec 2023 09:00:07 GMT
content-type: application/javascript; charset=utf-8
server: nginx
vary: Accept-Encoding
expires: Sun, 28 Dec 1980 18:57:00 EST
cache-control: private, no-cache, no-store, must-revalidate, max-age=0, post-check=0, pre-check=0
pragma: no-cache
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
script.anura.io/response.json
18.130.48.239200 OK 157 B URL POST HTTP/2 script.anura.io/response.json
IP 18.130.48.239:443
Requested by https://auto.provide-insurance.com/?tid=2744&subid=4&subid2=superpower_daily&c1=3ea3f8c586fa407f820f28ef74fbb2ee
Certificate IssuerAmazon
Subjectscript.anura.io
Fingerprint83:CF:23:67:0B:B9:DB:BB:65:3F:31:44:AD:06:8B:B2:7E:B4:E1:20
ValidityMon, 16 Oct 2023 00:00:00 GMT - Wed, 13 Nov 2024 23:59:59 GMT
File type troff or preprocessor input, ASCII text, with no line terminators
Hash c85cef7a84f4f89bb67232e87d646ba7
294d34ea50a8e4d30cc5272ef187b22c70147c0d
09161b7166655c77e65f50fc9345f62cf2a7971e1ea74087ed4fad02a07c6464
POST /response.json HTTP/1.1
Host: script.anura.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 5029
Origin: https://auto.provide-insurance.com
DNT: 1
Connection: keep-alive
Referer: https://auto.provide-insurance.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 11 Dec 2023 09:00:09 GMT
content-type: application/json; charset=utf-8
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-methods: POST
expires: Sun, 28 Dec 1980 18:57:00 EST
cache-control: private, no-cache, no-store, must-revalidate, max-age=0, post-check=0, pre-check=0
pragma: no-cache
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
link.mail.beehiiv.com/ss/c/SFMS2DGC_3bR2eTtelyfFeEoe88dCt-SdRHYCdHOyh7q4hc2-2JMyDvLnSgAOuiAvY59RbFtWgw-q8KIQKP474gAdoqL15nReqcL4l4De8Sn92NGUCbtov2i9SZqvL7z9jRf_PVCXq9MKFoNYHSfB3hpEzLXR-dKu1pMoN0Jryqz7eaEg8adtS5OFog_pXQznZFd0mAlJHPRpJp9JaLJYNVg9n8WiuxiSW0WOR53yfS-uaTkCfFzNmryd5KUE2_1t6yYzgn2CWMaDyLK5vtsgUeod3DxaqxGPKXysWd_9hc/421/OfSIQAocTV-2Y5XwZfARFg/h14/CcyLovWoNGbLDkIAvTVg3l-bHIwBR7oUb5L_Vi1aKus
104.18.69.40302 Found 51 kB URL User Request GET HTTP/2 link.mail.beehiiv.com/ss/c/SFMS2DGC_3bR2eTtelyfFeEoe88dCt-SdRHYCdHOyh7q4hc2-2JMyDvLnSgAOuiAvY59RbFtWgw-q8KIQKP474gAdoqL15nReqcL4l4De8Sn92NGUCbtov2i9SZqvL7z9jRf_PVCXq9MKFoNYHSfB3hpEzLXR-dKu1pMoN0Jryqz7eaEg8adtS5OFog_pXQznZFd0mAlJHPRpJp9JaLJYNVg9n8WiuxiSW0WOR53yfS-uaTkCfFzNmryd5KUE2_1t6yYzgn2CWMaDyLK5vtsgUeod3DxaqxGPKXysWd_9hc/421/OfSIQAocTV-2Y5XwZfARFg/h14/CcyLovWoNGbLDkIAvTVg3l-bHIwBR7oUb5L_Vi1aKus
IP 104.18.69.40:443
Certificate IssuerCloudflare, Inc.
Subjectbeehiiv.com
FingerprintCE:51:1F:72:9C:F3:A5:DD:02:F8:91:63:03:E1:44:49:3E:D7:98:F7
ValiditySun, 06 Aug 2023 00:00:00 GMT - Sun, 04 Aug 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ss/c/SFMS2DGC_3bR2eTtelyfFeEoe88dCt-SdRHYCdHOyh7q4hc2-2JMyDvLnSgAOuiAvY59RbFtWgw-q8KIQKP474gAdoqL15nReqcL4l4De8Sn92NGUCbtov2i9SZqvL7z9jRf_PVCXq9MKFoNYHSfB3hpEzLXR-dKu1pMoN0Jryqz7eaEg8adtS5OFog_pXQznZFd0mAlJHPRpJp9JaLJYNVg9n8WiuxiSW0WOR53yfS-uaTkCfFzNmryd5KUE2_1t6yYzgn2CWMaDyLK5vtsgUeod3DxaqxGPKXysWd_9hc/421/OfSIQAocTV-2Y5XwZfARFg/h14/CcyLovWoNGbLDkIAvTVg3l-bHIwBR7oUb5L_Vi1aKus HTTP/1.1
Host: link.mail.beehiiv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Mon, 11 Dec 2023 09:00:05 GMT
content-type: text/html; charset=utf-8
location: https://www.agn4j0trk.com/63CFP/3QQG7/?sub1=superpower_daily&sub2=85646cd00c3208b7842ebe90c0ea0ca9&sub3=9941194b-31f9-4d71-b991-d4ee479e27b8&sub4=&_bhiiv=opp_eff89fc9-639d-4ab7-aa2f-6f6672e0bc52_627fe518
x-robots-tag: noindex, nofollow
cf-cache-status: DYNAMIC
set-cookie: __cf_bm=O57KoO7tSos250hbG7ZjYeh5o9xziIWPWX07q5RhmcA-1702285205-1-AWvpCSasB11M0rkTbnxTyXZd1Q6FHqp19auP/9ecNx9Gn3PKmX/42FxU36oy0k0/dWXAlDxUmSRcnLQ4Rj6IyLk=; path=/; expires=Mon, 11-Dec-23 09:30:05 GMT; domain=.beehiiv.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 833c89031d475689-OSL
X-Firefox-Spdy: h2
ads.everquote.com/gdn/conversion?pixel_stage=landing&arrival_tid=2744&client=auto&oauid=e3ed7eae-ef07-4577-8fb4-4053f1392863&city=Oslo®ion=03
104.16.235.120200 OK 70 B URL GET HTTP/2 ads.everquote.com/gdn/conversion?pixel_stage=landing&arrival_tid=2744&client=auto&oauid=e3ed7eae-ef07-4577-8fb4-4053f1392863&city=Oslo®ion=03
IP 104.16.235.120:443
Requested by https://auto.provide-insurance.com/api/pixels/e3ed7eae-ef07-4577-8fb4-4053f1392863?previous_page=¤t_page=Landing&zip_code=0191
Certificate IssuerCloudflare, Inc.
Subjecteverquote.com
Fingerprint01:DA:D1:FD:E7:E1:F9:66:F0:AA:F7:A9:8E:4D:15:01:A8:85:A0:91
ValidityMon, 10 Apr 2023 00:00:00 GMT - Tue, 09 Apr 2024 23:59:59 GMT
File type PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
- data
Hash e9a7d10e1d6fd8bdc561798b9ae4c4b3
896bd3adbbcb3e93ba80dc446cae7cd605f889f3
a73237a07cec4d81b7cb7995220839f554e2e8936e5d5ae25cc47753f9737c07
GET /gdn/conversion?pixel_stage=landing&arrival_tid=2744&client=auto&oauid=e3ed7eae-ef07-4577-8fb4-4053f1392863&city=Oslo®ion=03 HTTP/1.1
Host: ads.everquote.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://auto.provide-insurance.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 11 Dec 2023 09:00:08 GMT
content-type: image/png
content-length: 70
etag: "896bd3adbbcb3e93ba80dc446cae7cd605f889f3"
set-cookie: asvr_visitor="2|1:0|10:1702285208|12:asvr_visitor|52:IjNkMGQxZmE2LWEzYjktNGZlNS1iNjFiLTQ3MjRjMmRhNjRiNiI=|df4c5ff8aeebe4359b164dd2b9020ff87cb9a83b9c43fe40401231657c2e27a2"; expires=Wed, 10 Dec 2025 09:00:08 GMT; Path=/; SameSite=None; Secure
conversion_cookie="2|1:0|10:1702285208|17:conversion_cookie|332:W3sicmVnaW9uIjogIjAzIiwgIm9hdWlkIjogImUzZWQ3ZWFlLWVmMDctNDU3Ny04ZmI0LTQwNTNmMTM5Mjg2MyIsICJhdXRvX29hdWlkIjogImUzZWQ3ZWFlLWVmMDctNDU3Ny04ZmI0LTQwNTNmMTM5Mjg2MyIsICJwaXhlbF9zdGFnZSI6ICJsYW5kaW5nIiwgImNpdHkiOiAiT3NsbyIsICJldmVudF90aW1lIjogIjIwMjMtMTItMTFUMDk6MDA6MDguMzQ5MDgxIiwgImFycml2YWxfdGlkIjogIjI3NDQiLCAiY2xpZW50IjogImF1dG8ifV0=|1dcdcc56aae4ad5e7c2d2303a1480675e0f0883ed935f8bd6e55a3023f57877e"; expires=Wed, 17 Nov 2123 09:00:08 GMT; Path=/; SameSite=None; Secure
most_likely_value_cookie="2|1:0|10:1702285208|24:most_likely_value_cookie|652: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|d1484eb3828b73055550150fa15884e2979ef4a0e59cf2419c37051ec2a33af7"; expires=Wed, 17 Nov 2123 09:00:08 GMT; Path=/; SameSite=None; Secure
strict-transport-security: max-age=15552000
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 833c8917ac5eb50c-OSL
X-Firefox-Spdy: h2
auto.provide-insurance.com/_next/static/qXHavcoRGHkJjsJ2CCDFR/pages/auto/exits/EverQuote.js
104.18.34.99200 OK 133 kB URL GET HTTP/2 auto.provide-insurance.com/_next/static/qXHavcoRGHkJjsJ2CCDFR/pages/auto/exits/EverQuote.js
IP 104.18.34.99:443
Requested by https://auto.provide-insurance.com/?tid=2744&subid=4&subid2=superpower_daily&c1=3ea3f8c586fa407f820f28ef74fbb2ee
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintC3:EB:79:38:C2:A6:67:69:75:A6:30:20:D5:FA:93:F9:71:D1:51:D0
ValidityMon, 20 Mar 2023 00:00:00 GMT - Tue, 19 Mar 2024 23:59:59 GMT
Size 133 kB (132602 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /_next/static/qXHavcoRGHkJjsJ2CCDFR/pages/auto/exits/EverQuote.js HTTP/1.1
Host: auto.provide-insurance.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://auto.provide-insurance.com/?tid=2744&subid=4&subid2=superpower_daily&c1=3ea3f8c586fa407f820f28ef74fbb2ee
Cookie: visitor.uuid=8cd34165-8481-43d8-a020-5d6389653725; session.uuid=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1dWlkIjoiZTNlZDdlYWUtZWYwNy00NTc3LThmYjQtNDA1M2YxMzkyODYzIn0.PyZv2C5QRL5gDK6fWeOx8t5cwdEKFPtCdamkIsDH_cI; _ga_JMN8P5NC9M=GS1.1.1702285207.1.0.1702285207.60.0.0; _ga=GA1.1.887551722.1702285207; _gcl_au=1.1.439448090.1702285207
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 11 Dec 2023 09:00:07 GMT
content-type: text/javascript
cache-control: public, max-age=31536000
etag: W/"80e6-18c1ab644d0"
last-modified: Wed, 29 Nov 2023 10:53:22 GMT
strict-transport-security: max-age=15552000
cf-cache-status: HIT
expires: Tue, 10 Dec 2024 09:00:07 GMT
vary: Accept-Encoding
server: cloudflare
cf-ray: 833c8914c9f5b512-OSL
content-encoding: br
X-Firefox-Spdy: h2
auto.provide-insurance.com/_next/static/qXHavcoRGHkJjsJ2CCDFR/pages/_error.js
104.18.34.99200 OK 190 B URL GET HTTP/2 auto.provide-insurance.com/_next/static/qXHavcoRGHkJjsJ2CCDFR/pages/_error.js
IP 104.18.34.99:443
Requested by https://auto.provide-insurance.com/?tid=2744&subid=4&subid2=superpower_daily&c1=3ea3f8c586fa407f820f28ef74fbb2ee
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintC3:EB:79:38:C2:A6:67:69:75:A6:30:20:D5:FA:93:F9:71:D1:51:D0
ValidityMon, 20 Mar 2023 00:00:00 GMT - Tue, 19 Mar 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 8d44a6d0df01a421ee67dec27d0cc8fe
f9abc40b2dbee5749fcb33ff01973f05a76ba3fd
8fa17c4a8865ed7f267976f71a33b945961d5d61e5fb6cb9b052c606c680e5df
GET /_next/static/qXHavcoRGHkJjsJ2CCDFR/pages/_error.js HTTP/1.1
Host: auto.provide-insurance.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://auto.provide-insurance.com/?tid=2744&subid=4&subid2=superpower_daily&c1=3ea3f8c586fa407f820f28ef74fbb2ee
Cookie: visitor.uuid=8cd34165-8481-43d8-a020-5d6389653725; session.uuid=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1dWlkIjoiZTNlZDdlYWUtZWYwNy00NTc3LThmYjQtNDA1M2YxMzkyODYzIn0.PyZv2C5QRL5gDK6fWeOx8t5cwdEKFPtCdamkIsDH_cI
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 11 Dec 2023 09:00:06 GMT
content-type: text/javascript
cache-control: public, max-age=31536000
etag: W/"ac-18c1ab644d0"
last-modified: Wed, 29 Nov 2023 10:53:22 GMT
strict-transport-security: max-age=15552000
cf-cache-status: HIT
expires: Tue, 10 Dec 2024 09:00:06 GMT
vary: Accept-Encoding
server: cloudflare
cf-ray: 833c890ae90fb512-OSL
content-encoding: br
X-Firefox-Spdy: h2
consumer-assets.everquote.com/static-assets/tests-assets/auto/landings/EQSimpleDesignDesktop/carrier-logos/libertyMutual.svg
104.16.235.120200 OK 13 kB URL GET HTTP/2 consumer-assets.everquote.com/static-assets/tests-assets/auto/landings/EQSimpleDesignDesktop/carrier-logos/libertyMutual.svg
IP 104.16.235.120:443
Requested by https://auto.provide-insurance.com/?tid=2744&subid=4&subid2=superpower_daily&c1=3ea3f8c586fa407f820f28ef74fbb2ee
Certificate IssuerCloudflare, Inc.
Subjecteverquote.com
Fingerprint01:DA:D1:FD:E7:E1:F9:66:F0:AA:F7:A9:8E:4D:15:01:A8:85:A0:91
ValidityMon, 10 Apr 2023 00:00:00 GMT - Tue, 09 Apr 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image
- , ASCII text, with very long lines (13400), with no line terminators
Hash 58c0844e1b7d1d9bf1342c0e385110c3
37470bbdf0a86d7a4fd0f5e6de15726573971168
c4d44de64b672700bb610ce4c9bc88afb10f567ff23999f8eb26af6575ca81b4
GET /static-assets/tests-assets/auto/landings/EQSimpleDesignDesktop/carrier-logos/libertyMutual.svg HTTP/1.1
Host: consumer-assets.everquote.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://auto.provide-insurance.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 11 Dec 2023 09:00:06 GMT
content-type: image/svg+xml
last-modified: Fri, 04 Nov 2022 10:35:44 GMT
etag: W/"58c0844e1b7d1d9bf1342c0e385110c3"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 2e0b0e777d576ee595b61a5d3b296990.cloudfront.net (CloudFront)
x-amz-cf-pop: HEL51-P1
x-amz-cf-id: F726kzxVVJ57pzkY7kXjK2phWqgWoSJt8eYeEwlvULn3IBYRCY2aZA==
cf-cache-status: REVALIDATED
expires: Mon, 11 Dec 2023 13:00:06 GMT
cache-control: public, max-age=14400
strict-transport-security: max-age=15552000
server: cloudflare
cf-ray: 833c890bca6eb50c-OSL
content-encoding: br
X-Firefox-Spdy: h2
bat.bing.com/action/0?ti=4030807&Ver=2&mid=350989bc-84a3-4e84-bb5b-90fe404ad477&sid=af4e6470980311ee86e5c927371d9f79&vid=af4e48d0980311eeb709e994985c4ead&vids=1&msclkid=N&pi=918639831&lg=en-US&sw=1280&sh=1024&sc=24&tl=Auto%20Insurance%20Quotes%20Online,%20Free%20%26%20Fast%20%7C%20EverQuote&p=https%3A%2F%2Fauto.provide-insurance.com%2F%3Ftid%3D2744%26subid%3D4%26subid2%3Dsuperpower_daily%26c1%3D3ea3f8c586fa407f820f28ef74fbb2ee&r=<=1954&evt=pageLoad&sv=1&rn=953531
204.79.197.200204 No Content 0 B URL GET HTTP/2 bat.bing.com/action/0?ti=4030807&Ver=2&mid=350989bc-84a3-4e84-bb5b-90fe404ad477&sid=af4e6470980311ee86e5c927371d9f79&vid=af4e48d0980311eeb709e994985c4ead&vids=1&msclkid=N&pi=918639831&lg=en-US&sw=1280&sh=1024&sc=24&tl=Auto%20Insurance%20Quotes%20Online,%20Free%20%26%20Fast%20%7C%20EverQuote&p=https%3A%2F%2Fauto.provide-insurance.com%2F%3Ftid%3D2744%26subid%3D4%26subid2%3Dsuperpower_daily%26c1%3D3ea3f8c586fa407f820f28ef74fbb2ee&r=<=1954&evt=pageLoad&sv=1&rn=953531
IP 204.79.197.200:443
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://auto.provide-insurance.com/?tid=2744&subid=4&subid2=superpower_daily&c1=3ea3f8c586fa407f820f28ef74fbb2ee
Certificate IssuerMicrosoft Corporation
Subjectwww.bing.com
FingerprintA5:EC:34:1F:AB:B3:69:71:54:88:69:BA:64:CC:E2:9B:32:B6:65:CD
ValidityTue, 24 Oct 2023 07:42:22 GMT - Sun, 21 Apr 2024 07:42:22 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /action/0?ti=4030807&Ver=2&mid=350989bc-84a3-4e84-bb5b-90fe404ad477&sid=af4e6470980311ee86e5c927371d9f79&vid=af4e48d0980311eeb709e994985c4ead&vids=1&msclkid=N&pi=918639831&lg=en-US&sw=1280&sh=1024&sc=24&tl=Auto%20Insurance%20Quotes%20Online,%20Free%20%26%20Fast%20%7C%20EverQuote&p=https%3A%2F%2Fauto.provide-insurance.com%2F%3Ftid%3D2744%26subid%3D4%26subid2%3Dsuperpower_daily%26c1%3D3ea3f8c586fa407f820f28ef74fbb2ee&r=<=1954&evt=pageLoad&sv=1&rn=953531 HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://auto.provide-insurance.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
cache-control: no-cache, must-revalidate
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
set-cookie: MUID=05D8D07EFEBA63AB25F8C39AFFED622A; domain=.bing.com; expires=Sat, 04-Jan-2025 09:00:08 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 8997D9EE8E9D4E7D95E75672C410F908 Ref B: OSL30EDGE0313 Ref C: 2023-12-11T09:00:08Z
date: Mon, 11 Dec 2023 09:00:08 GMT
X-Firefox-Spdy: h2
ads.anura.io/showads.js?199129427996
54.230.111.27200 OK 0 B URL GET HTTP/2 ads.anura.io/showads.js?199129427996
IP 54.230.111.27:443
Requested by https://auto.provide-insurance.com/?tid=2744&subid=4&subid2=superpower_daily&c1=3ea3f8c586fa407f820f28ef74fbb2ee
Certificate IssuerAmazon
Subjectads.anura.io
Fingerprint69:66:FA:26:E2:E4:89:00:9A:F7:DE:2C:F6:5A:C2:B9:58:04:5D:E6
ValidityTue, 30 May 2023 00:00:00 GMT - Thu, 27 Jun 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /showads.js?199129427996 HTTP/1.1
Host: ads.anura.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://auto.provide-insurance.com
DNT: 1
Connection: keep-alive
Referer: https://auto.provide-insurance.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
date: Sun, 10 Dec 2023 19:45:30 GMT
server: nginx
access-control-allow-origin: *
access-control-allow-methods: GET
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: e0i-RstBICPSDD9TnhKg-vRI92ekPSYd_idi8VgTDFZuJjgz9FaRUQ==
age: 47678
X-Firefox-Spdy: h2
bubastis-prom-aggregation-gateway.services.everquote.com/metrics/
104.18.41.239200 OK 0 B URL POST HTTP/2 bubastis-prom-aggregation-gateway.services.everquote.com/metrics/
IP 104.18.41.239:443
Requested by https://auto.provide-insurance.com/?tid=2744&subid=4&subid2=superpower_daily&c1=3ea3f8c586fa407f820f28ef74fbb2ee
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint89:C7:86:5F:F8:35:73:EC:3C:0B:10:5E:CA:91:18:DF:F0:AA:F2:FD
ValidityFri, 28 Apr 2023 00:00:00 GMT - Sat, 27 Apr 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /metrics/ HTTP/1.1
Host: bubastis-prom-aggregation-gateway.services.everquote.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://auto.provide-insurance.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 21764
Origin: https://auto.provide-insurance.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 11 Dec 2023 09:00:12 GMT
content-length: 0
access-control-allow-origin: *
strict-transport-security: max-age=15552000
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 833c892f6f1cb4f9-OSL
X-Firefox-Spdy: h2
auto.provide-insurance.com/api/prepop/xdp/
104.18.34.99404 Not Found 44 B URL POST HTTP/2 auto.provide-insurance.com/api/prepop/xdp/
IP 104.18.34.99:443
Requested by https://auto.provide-insurance.com/?tid=2744&subid=4&subid2=superpower_daily&c1=3ea3f8c586fa407f820f28ef74fbb2ee
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintC3:EB:79:38:C2:A6:67:69:75:A6:30:20:D5:FA:93:F9:71:D1:51:D0
ValidityMon, 20 Mar 2023 00:00:00 GMT - Tue, 19 Mar 2024 23:59:59 GMT
File type troff or preprocessor input, ASCII text, with no line terminators
Hash a7343a0a363982bc80770f9152c34f59
95353ce2ace5ca72897410fff5252f6baa6045cd
7df06af7d92309b8d44f0611287ed4039833ee6f89f98621c0efbb3e07b7216e
POST /api/prepop/xdp/ HTTP/1.1
Host: auto.provide-insurance.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://auto.provide-insurance.com/?tid=2744&subid=4&subid2=superpower_daily&c1=3ea3f8c586fa407f820f28ef74fbb2ee
newrelic: eyJ2IjpbMCwxXSwiZCI6eyJ0eSI6IkJyb3dzZXIiLCJhYyI6IjM0MDc0NDYiLCJhcCI6IjExMDMxMjUxMDciLCJpZCI6ImMyZWY3ZmIzYWYxNTJjNDQiLCJ0ciI6ImUzZjE1NDQxNmJiNDA2ODkzOGViYTNhZGRmNTgyNGYwIiwidGkiOjE3MDIyODUyMDc4MDF9fQ==
traceparent: 00-e3f154416bb4068938eba3addf5824f0-c2ef7fb3af152c44-01
tracestate: 3407446@nr=0-1-3407446-1103125107-c2ef7fb3af152c44----1702285207801
Content-Type: text/plain;charset=UTF-8
Content-Length: 68
Origin: https://auto.provide-insurance.com
DNT: 1
Connection: keep-alive
Cookie: visitor.uuid=8cd34165-8481-43d8-a020-5d6389653725; session.uuid=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1dWlkIjoiZTNlZDdlYWUtZWYwNy00NTc3LThmYjQtNDA1M2YxMzkyODYzIn0.PyZv2C5QRL5gDK6fWeOx8t5cwdEKFPtCdamkIsDH_cI; _ga_JMN8P5NC9M=GS1.1.1702285207.1.0.1702285207.60.0.0; _ga=GA1.1.887551722.1702285207; _gcl_au=1.1.439448090.1702285207
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
date: Mon, 11 Dec 2023 09:00:07 GMT
content-type: application/json; charset=utf-8
content-length: 44
strict-transport-security: max-age=15552000
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 833c89152a5eb512-OSL
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
142.250.74.163200 OK 16 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
IP 142.250.74.163:443
Requested by https://auto.provide-insurance.com/?tid=2744&subid=4&subid2=superpower_daily&c1=3ea3f8c586fa407f820f28ef74fbb2ee
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint5F:60:69:C9:59:6D:F1:B5:87:82:8D:B0:57:3C:D9:24:10:FD:74:D1
ValidityMon, 20 Nov 2023 08:08:49 GMT - Mon, 12 Feb 2024 08:08:48 GMT
File type Web Open Font Format (Version 2), TrueType, length 15860, version 1.0
- data
Hash e9f5aaf547f165386cd313b995dddd8e
acdef5603c2387b0e5bffd744b679a24a8bc1968
f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://auto.provide-insurance.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 06 Dec 2023 21:52:12 GMT
expires: Thu, 05 Dec 2024 21:52:12 GMT
cache-control: public, max-age=31536000
age: 385675
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
auto.provide-insurance.com/_next/static/qXHavcoRGHkJjsJ2CCDFR/pages/auto/forms/OneQuestionPerStage.js
104.18.34.99200 OK 342 kB URL GET HTTP/2 auto.provide-insurance.com/_next/static/qXHavcoRGHkJjsJ2CCDFR/pages/auto/forms/OneQuestionPerStage.js
IP 104.18.34.99:443
Requested by https://auto.provide-insurance.com/?tid=2744&subid=4&subid2=superpower_daily&c1=3ea3f8c586fa407f820f28ef74fbb2ee
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintC3:EB:79:38:C2:A6:67:69:75:A6:30:20:D5:FA:93:F9:71:D1:51:D0
ValidityMon, 20 Mar 2023 00:00:00 GMT - Tue, 19 Mar 2024 23:59:59 GMT
Size 342 kB (341460 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /_next/static/qXHavcoRGHkJjsJ2CCDFR/pages/auto/forms/OneQuestionPerStage.js HTTP/1.1
Host: auto.provide-insurance.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://auto.provide-insurance.com/?tid=2744&subid=4&subid2=superpower_daily&c1=3ea3f8c586fa407f820f28ef74fbb2ee
Cookie: visitor.uuid=8cd34165-8481-43d8-a020-5d6389653725; session.uuid=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1dWlkIjoiZTNlZDdlYWUtZWYwNy00NTc3LThmYjQtNDA1M2YxMzkyODYzIn0.PyZv2C5QRL5gDK6fWeOx8t5cwdEKFPtCdamkIsDH_cI; _ga_JMN8P5NC9M=GS1.1.1702285207.1.0.1702285207.60.0.0; _ga=GA1.1.887551722.1702285207; _gcl_au=1.1.439448090.1702285207
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 11 Dec 2023 09:00:07 GMT
content-type: text/javascript
cache-control: public, max-age=31536000
etag: W/"18be2-18c1ab644d0"
last-modified: Wed, 29 Nov 2023 10:53:22 GMT
strict-transport-security: max-age=15552000
cf-cache-status: HIT
expires: Tue, 10 Dec 2024 09:00:07 GMT
vary: Accept-Encoding
server: cloudflare
cf-ray: 833c89145998b512-OSL
content-encoding: br
X-Firefox-Spdy: h2
auto.provide-insurance.com/api/pixels/e3ed7eae-ef07-4577-8fb4-4053f1392863?previous_page=¤t_page=Landing&zip_code=0191&non_iframe=true
104.18.34.99200 OK 0 B URL GET HTTP/2 auto.provide-insurance.com/api/pixels/e3ed7eae-ef07-4577-8fb4-4053f1392863?previous_page=¤t_page=Landing&zip_code=0191&non_iframe=true
IP 104.18.34.99:443
Requested by https://auto.provide-insurance.com/?tid=2744&subid=4&subid2=superpower_daily&c1=3ea3f8c586fa407f820f28ef74fbb2ee
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintC3:EB:79:38:C2:A6:67:69:75:A6:30:20:D5:FA:93:F9:71:D1:51:D0
ValidityMon, 20 Mar 2023 00:00:00 GMT - Tue, 19 Mar 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /api/pixels/e3ed7eae-ef07-4577-8fb4-4053f1392863?previous_page=¤t_page=Landing&zip_code=0191&non_iframe=true HTTP/1.1
Host: auto.provide-insurance.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://auto.provide-insurance.com/?tid=2744&subid=4&subid2=superpower_daily&c1=3ea3f8c586fa407f820f28ef74fbb2ee
newrelic: eyJ2IjpbMCwxXSwiZCI6eyJ0eSI6IkJyb3dzZXIiLCJhYyI6IjM0MDc0NDYiLCJhcCI6IjExMDMxMjUxMDciLCJpZCI6ImQxZjQ2YTE4NDIxY2Y4ODEiLCJ0ciI6IjI0NGUyNTRlMDkyNDE2Y2IyYWVkYmM3ZjBmM2VhNDAwIiwidGkiOjE3MDIyODUyMDc1MDl9fQ==
traceparent: 00-244e254e092416cb2aedbc7f0f3ea400-d1f46a18421cf881-01
tracestate: 3407446@nr=0-1-3407446-1103125107-d1f46a18421cf881----1702285207509
DNT: 1
Connection: keep-alive
Cookie: visitor.uuid=8cd34165-8481-43d8-a020-5d6389653725; session.uuid=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1dWlkIjoiZTNlZDdlYWUtZWYwNy00NTc3LThmYjQtNDA1M2YxMzkyODYzIn0.PyZv2C5QRL5gDK6fWeOx8t5cwdEKFPtCdamkIsDH_cI; _ga_JMN8P5NC9M=GS1.1.1702285207.1.0.1702285207.60.0.0; _ga=GA1.1.887551722.1702285207; _gcl_au=1.1.439448090.1702285207
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 11 Dec 2023 09:00:07 GMT
content-type: text/html; charset=utf-8
set-cookie: session.uuid=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1dWlkIjoiZTNlZDdlYWUtZWYwNy00NTc3LThmYjQtNDA1M2YxMzkyODYzIn0.PyZv2C5QRL5gDK6fWeOx8t5cwdEKFPtCdamkIsDH_cI; Path=/; Domain=auto.provide-insurance.com; Max-Age=86400; Secure
strict-transport-security: max-age=15552000
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 833c8913c91ab512-OSL
content-encoding: br
X-Firefox-Spdy: h2
region1.analytics.google.com/g/collect?v=2&tid=G-JMN8P5NC9M>m=45je3bt0v870089632&_p=1702285207039&_gaz=1&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=887551722.1702285207&ul=en-us&sr=1280x1024&_s=1&sid=1702285207&sct=1&seg=0&dl=https%3A%2F%2Fauto.provide-insurance.com%2F%3Ftid%3D2744%26subid%3D4%26subid2%3Dsuperpower_daily%26c1%3D3ea3f8c586fa407f820f28ef74fbb2ee&dt=Auto%20Insurance%20Quotes%20Online%2C%20Free%20%26%20Fast%20%7C%20EverQuote&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1&tfd=2114
216.239.32.36204 No Content 0 B URL POST HTTP/2 region1.analytics.google.com/g/collect?v=2&tid=G-JMN8P5NC9M>m=45je3bt0v870089632&_p=1702285207039&_gaz=1&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=887551722.1702285207&ul=en-us&sr=1280x1024&_s=1&sid=1702285207&sct=1&seg=0&dl=https%3A%2F%2Fauto.provide-insurance.com%2F%3Ftid%3D2744%26subid%3D4%26subid2%3Dsuperpower_daily%26c1%3D3ea3f8c586fa407f820f28ef74fbb2ee&dt=Auto%20Insurance%20Quotes%20Online%2C%20Free%20%26%20Fast%20%7C%20EverQuote&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1&tfd=2114
IP 216.239.32.36:443
Requested by https://auto.provide-insurance.com/?tid=2744&subid=4&subid2=superpower_daily&c1=3ea3f8c586fa407f820f28ef74fbb2ee
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
FingerprintC1:58:7C:BF:5A:61:79:08:CB:C2:00:63:60:07:86:BD:EA:0A:45:8A
ValidityMon, 20 Nov 2023 08:02:50 GMT - Mon, 12 Feb 2024 08:02:49 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-JMN8P5NC9M>m=45je3bt0v870089632&_p=1702285207039&_gaz=1&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=887551722.1702285207&ul=en-us&sr=1280x1024&_s=1&sid=1702285207&sct=1&seg=0&dl=https%3A%2F%2Fauto.provide-insurance.com%2F%3Ftid%3D2744%26subid%3D4%26subid2%3Dsuperpower_daily%26c1%3D3ea3f8c586fa407f820f28ef74fbb2ee&dt=Auto%20Insurance%20Quotes%20Online%2C%20Free%20%26%20Fast%20%7C%20EverQuote&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1&tfd=2114 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://auto.provide-insurance.com
DNT: 1
Connection: keep-alive
Referer: https://auto.provide-insurance.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://auto.provide-insurance.com
date: Mon, 11 Dec 2023 09:00:07 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2