pages.upwellness.com/uc-i11x-fps/?offer=15&session_id=1023d8631c9ad2431cc56cbf4cf350&n=tune&AFFID=477232&subid=1_TH221124PM
200 OK 33 kB URL HTTP/1.1 pages.upwellness.com/uc-i11x-fps/?offer=15&session_id=1023d8631c9ad2431cc56cbf4cf350&n=tune&AFFID=477232&subid=1_TH221124PM
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text
Hash de4e316674c3b8556a519a5d1fbdd766
b4403981ee044340948768c1302fb2053d7438fc
aed028878d51b00a566444f2313eef524aaeda6f444b401a40f4367c49760410
GET /uc-i11x-fps/?offer=15&session_id=1023d8631c9ad2431cc56cbf4cf350&n=tune&AFFID=477232&subid=1_TH221124PM HTTP/1.1
Host: pages.upwellness.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
date: Fri, 25 Nov 2022 02:40:06 GMT
content-type: text/html; charset=utf-8
content-length: 33434
set-cookie: ubvs=2c88da86-94e8-45b4-8ee9-d83a3a6c42f0; Max-Age=15552000; Path=/; SameSite=Lax
ubvt=2c88da86-94e8-45b4-8ee9-d83a3a6c42f0; Max-Age=259200; Domain=upwellness.com; Path=/; SameSite=Lax
ubpv=h%2Cca29e708-bbc6-4dd2-9faa-ac8cd497a818; Max-Age=15897600; Path=/uc-i11x-fps/; SameSite=Lax
content-location: http://pages.upwellness.com/uc-i11x-fps/
etag: "h:2c88da8694e845b48ee9d83a3a6c42f0"
link: <http://pages.upwellness.com/uc-i11x-fps/>; rel="canonical"
x-unbounce-pageid: ca29e708-bbc6-4dd2-9faa-ac8cd497a818
x-unbounce-variant: h
x-unbounce-visitorid: 2c88da86-94e8-45b4-8ee9-d83a3a6c42f0
content-encoding: gzip
x-proxy-backend: page-server
connection: close
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a9f1d4d98705c281fed3b60343463200
db6f8aa98d2eda4e5473b116a222c3055568bb78
164d11173045b569cafb32e300e4c1ec6d6ab177fd34d0414cc40c541268779f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "164D11173045B569CAFB32E300E4C1EC6D6AB177FD34D0414CC40C541268779F"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5123
Expires: Fri, 25 Nov 2022 04:05:29 GMT
Date: Fri, 25 Nov 2022 02:40:06 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash af40a2fcf8debb90c3608002da6c907a
3c75d6c0b557a3bd8d5db50155b8d896e852c145
555617a51ee3077552545a29a3baf0b43e8a82367e4c08110ee480ebedc8b523
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1259
Cache-Control: max-age=115924
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 02:40:06 GMT
Etag: "637f47ef-1d7"
Expires: Sat, 26 Nov 2022 10:52:10 GMT
Last-Modified: Thu, 24 Nov 2022 10:31:11 GMT
Server: ECS (ska/F707)
X-Cache: HIT
Content-Length: 471
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash d130218d0e2841f39c99610fe1a2ab90
29fbe1e177ee55c7a61ae0a206afff271cf5f945
6b6d74dccf10c2bc98a91c3388280d7ba1d9596bf8cadd7db0e2f63720b3d152
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Alert, Content-Type, Retry-After, Content-Length
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Fri, 25 Nov 2022 02:19:02 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 1264
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8c63b226725ca6e92e3ef586ac19e603
d21ae42a1927501e5293ff3564f52b49f6b0decc
141ac47acc3800e5d35a82012fa4b044277abad3a95dc24415f66fb72c972ae6
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "141AC47ACC3800E5D35A82012FA4B044277ABAD3A95DC24415F66FB72C972AE6"
Last-Modified: Wed, 23 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7579
Expires: Fri, 25 Nov 2022 04:46:25 GMT
Date: Fri, 25 Nov 2022 02:40:06 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: fjoA+wydKoSkoVvEGH4cWzwtZIR8B0AHh7X5WkeYP9dOOR3Lk9DkPHDvl5lO0or/jxCRQWlOQVc=
x-amz-request-id: 0S4QHWQX9ZNWGBYY
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 25 Nov 2022 01:40:37 GMT
age: 3569
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
builder-assets.unbounce.com/published-css/main-7b78720.z.css
200 OK 2.9 kB URL HTTP/1.1 builder-assets.unbounce.com/published-css/main-7b78720.z.css
IP
File type ASCII text, with very long lines (15017)
Hash 4458a4d76a70cb207bcc34d6bc6f872f
f484b0b1737f7de59ca699e6cc3169d234e8f6a8
0825f8972704bc1b84e30170cd77f5ecde2d6a7dbf9e43be96c6809c2c5228d7
GET /published-css/main-7b78720.z.css HTTP/1.1
Host: builder-assets.unbounce.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pages.upwellness.com/
HTTP/1.1 200 OK
Content-Type: text/css
Content-Length: 2902
Connection: keep-alive
Date: Tue, 30 Aug 2022 02:28:13 GMT
Last-Modified: Mon, 04 Jul 2022 16:47:32 GMT
ETag: "4458a4d76a70cb207bcc34d6bc6f872f"
Cache-Control: max-age=31536000
Content-Encoding: gzip
x-amz-version-id: L4ZmeoxkTVchyWCkJ77TONE89Elaj8X7
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 b053873243f91b1bb6dc406ce0c67db4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: DfRr7bySdVBufPnPITPMDjpXUsmBkry3v2x-JvkV57oYEhM_-ub8Rw==
Age: 7517514
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 25 Nov 2022 02:40:06 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash dd0dd96ca622aa07354fabdd0da767bf
a29eaa02a81dabed2c12be20a89d65a5a0417524
6a670e9031ec8c94bdc91c47a2d6a4ca2bd95fe032fec28888a8e6d7dc163cb4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 02:40:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash dd0dd96ca622aa07354fabdd0da767bf
a29eaa02a81dabed2c12be20a89d65a5a0417524
6a670e9031ec8c94bdc91c47a2d6a4ca2bd95fe032fec28888a8e6d7dc163cb4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 02:40:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash dd0dd96ca622aa07354fabdd0da767bf
a29eaa02a81dabed2c12be20a89d65a5a0417524
6a670e9031ec8c94bdc91c47a2d6a4ca2bd95fe032fec28888a8e6d7dc163cb4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 02:40:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash dd0dd96ca622aa07354fabdd0da767bf
a29eaa02a81dabed2c12be20a89d65a5a0417524
6a670e9031ec8c94bdc91c47a2d6a4ca2bd95fe032fec28888a8e6d7dc163cb4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 02:40:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtag/js?id=AW-862759327
200 OK 70 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=AW-862759327
IP
File type ASCII text, with very long lines (5236)
Hash 7664c100311109ca4979ff75a560469c
78cf4eb1a6c05780741f78e2d28d6fa4f30f1318
a3b43ca0ae6f8c56d1c30ef0cb336e06f275b79939830956a2cea2a8da3cd47e
GET /gtag/js?id=AW-862759327 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pages.upwellness.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 25 Nov 2022 02:40:06 GMT
expires: Fri, 25 Nov 2022 02:40:06 GMT
cache-control: private, max-age=900
last-modified: Fri, 25 Nov 2022 00:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 69821
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fast.wistia.com/assets/external/E-v1.js
200 OK 117 kB URL HTTP/2 fast.wistia.com/assets/external/E-v1.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Size 117 kB (116637 bytes)
Hash daf6f411893d0a2adeebb8a9878f54dc
7359be87a83e4bf392c7465d0619f8d1a456be7b
311032200014a4c8f4650c783ebddec6f839112f53916a25b45afbbe7b318c50
GET /assets/external/E-v1.js HTTP/1.1
Host: fast.wistia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pages.upwellness.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
cache-control: public, max-age=3600
content-encoding: br
content-type: application/javascript
etag: "637ce334-1c79d"
last-modified: Tue, 22 Nov 2022 14:56:52 GMT
timing-allow-origin: *
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Fri, 25 Nov 2022 02:40:06 GMT
age: 235
x-served-by: cache-iad-kiad7000159-IAD, cache-bma1671-BMA
x-cache: HIT, HIT
x-cache-hits: 38, 6
x-timer: S1669344007.595621,VS0,VE0
vary: Accept-Encoding
strict-transport-security: max-age=0
x-ecma-v: modern
x-browser: firefox
x-browser-version: 105
content-length: 116637
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=AW-624541243
200 OK 53 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=AW-624541243
IP
File type ASCII text, with very long lines (1921)
Hash c7eb7f5822b447aab364644f77c592e1
3debb935df28157102011559087084443000acff
42ccbaf9890c1c4c9f2460d36a6351055faa7ac092f0b5fedf1996a1f85f18a8
GET /gtag/js?id=AW-624541243 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pages.upwellness.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 25 Nov 2022 02:40:06 GMT
expires: Fri, 25 Nov 2022 02:40:06 GMT
cache-control: private, max-age=900
last-modified: Fri, 25 Nov 2022 00:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 53026
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fast.wistia.com/embed/medias/rjukmx7rqk/swatch
200 OK 3.7 kB URL HTTP/2 fast.wistia.com/embed/medias/rjukmx7rqk/swatch
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 100x56, components 3\012- data
Hash 0b9765a2be140f501b232f2e45d2288b
8a3de8ff5e8a6d2511ed1ee296849982c1262cd9
faa58395059c0affc55d8da780eeb8fae313c723cc9af523054293ce7b3b4a7b
GET /embed/medias/rjukmx7rqk/swatch HTTP/1.1
Host: fast.wistia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pages.upwellness.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-methods: GET, HEAD, OPTIONS
access-control-allow-origin: *, *
access-control-expose-headers: Origin, Content-Type, Accept, Server, x-amz-version-id, X-Cache
access-control-request-method: *
cache-control: public, no-cache, max-age=31536000
content-disposition: inline
content-type: image/jpeg
last-modified: Mon, 27 Jul 2020 22:32:56 UTC
timing-allow-origin: *
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Fri, 25 Nov 2022 02:40:06 GMT
age: 38540
x-served-by: cache-iad-kjyo7100051-IAD, cache-bma1671-BMA
x-cache: HIT, HIT
x-cache-hits: 26, 1
x-timer: S1669344007.597244,VS0,VE3
strict-transport-security: max-age=0
x-ecma-v: modern
x-browser: firefox
x-browser-version: 105
content-length: 3688
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=AW-10838597190
200 OK 53 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=AW-10838597190
IP
File type ASCII text, with very long lines (1921)
Hash 371a65edc43c0c964eee2c53d826d110
4d898af251083a0dc7c2053e063d14e44db65749
fa26b3badcc6aa291cbd5e1cdb9c49e54dc02710725486026310438374193d34
GET /gtag/js?id=AW-10838597190 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pages.upwellness.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 25 Nov 2022 02:40:06 GMT
expires: Fri, 25 Nov 2022 02:40:06 GMT
cache-control: private, max-age=900
last-modified: Fri, 25 Nov 2022 00:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 53032
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fast.wistia.com/embed/medias/rjukmx7rqk.jsonp
200 OK 1.5 kB URL HTTP/2 fast.wistia.com/embed/medias/rjukmx7rqk.jsonp
IP
File type ASCII text, with very long lines (4848)
Hash 7945f69d68af09b63d584ca41befb40c
46aebc68614e9439fcbf0df0374fc89d222841a6
3a35f02ac785228b3acfba8d16d46b30209b8414b24aec895c5bda0f646518ef
GET /embed/medias/rjukmx7rqk.jsonp HTTP/1.1
Host: fast.wistia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pages.upwellness.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
cache-control: public, no-cache
content-encoding: br
content-type: application/javascript; charset=utf-8
etag: W/"9fbde7e12d70e7ea4f359f1ea072e166"
p3p: CP="CURi ADMa DEVa IVAa IVDa CONi OUR IND DSP CAO COR"
referrer-policy: strict-origin-when-cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
x-download-options: noopen
x-permitted-cross-domain-policies: none
x-request-id: 0f745a440baba0b93b23434464cbdcc5
x-runtime: 0.047870
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Fri, 25 Nov 2022 02:40:06 GMT
age: 38540
x-served-by: cache-iad-kjyo7100044-IAD, cache-bma1671-BMA
x-cache: HIT, HIT
x-cache-hits: 27, 1
x-timer: S1669344007.602855,VS0,VE1
vary: Accept-Encoding,X-Forwarded-Proto,X-ECMA-Override
strict-transport-security: max-age=0
x-ecma-v: modern
x-browser: firefox
x-browser-version: 105
content-length: 1548
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=AW-458254939
200 OK 72 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=AW-458254939
IP
File type ASCII text, with very long lines (7857)
Hash 223e39e16298ad6639b9cf180db15921
ab01e872cf84af51643dc9f8033ecf935774c836
9e473c3cc629ddb98214451c01c6c3d11bdea651292cecdfa061e52814318376
GET /gtag/js?id=AW-458254939 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pages.upwellness.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 25 Nov 2022 02:40:06 GMT
expires: Fri, 25 Nov 2022 02:40:06 GMT
cache-control: private, max-age=900
last-modified: Fri, 25 Nov 2022 00:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 71587
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
0505c62f0b6942afbaf22991f0778de5.js.ubembed.com/
200 OK 12 kB URL HTTP/1.1 0505c62f0b6942afbaf22991f0778de5.js.ubembed.com/
IP
File type ASCII text, with very long lines (11879), with no line terminators
Hash b08aad2ef1dfef1576d4cbddd3ddd8fd
25e799f9b661b4cb2bd3c8c70455d1c928caa2d7
af8e0cdb45f6d957d59370dd3bbc96e2b3808be1c264569338784e4010d3ae10
GET / HTTP/1.1
Host: 0505c62f0b6942afbaf22991f0778de5.js.ubembed.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pages.upwellness.com/
HTTP/1.1 200 OK
Connection: keep-alive
Content-Type: application/json
x-amz-apigw-id: cIupEFunDoEFmtA=
X-Amz-Cf-Pop: ARN56-P2
X-Backend-Region: eu_west_1
Date: Fri, 25 Nov 2022 02:40:06 GMT
Age: 0
X-Cache: Miss from cloudfront, MISS
Access-Control-Allow-Origin: *
Cache-Control: max-age=0, must-revalidate
Vary: Accept-Encoding, Referer
ETag: c1a25e1d6816d6d62e7914c952b1818c-v0.179.2
transfer-encoding: chunked
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 19286c6a0360d32460573ddf3fc27027
b14b4288cf0415da6448e40c836683c896e7ff7e
49f8ed785296cc28c55af66b7d871034428f0935e6d713bbd70b759ac1083469
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "49F8ED785296CC28C55AF66B7D871034428F0935E6D713BBD70B759AC1083469"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3184
Expires: Fri, 25 Nov 2022 03:33:10 GMT
Date: Fri, 25 Nov 2022 02:40:06 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 19286c6a0360d32460573ddf3fc27027
b14b4288cf0415da6448e40c836683c896e7ff7e
49f8ed785296cc28c55af66b7d871034428f0935e6d713bbd70b759ac1083469
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "49F8ED785296CC28C55AF66B7D871034428F0935E6D713BBD70B759AC1083469"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3184
Expires: Fri, 25 Nov 2022 03:33:10 GMT
Date: Fri, 25 Nov 2022 02:40:06 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8635d5eafa19971429ef44ab7bce748c
2a484a8d986970cde94cceb82c047dc60070d740
6a8f2579710defb58d178518ef7d738096ea33a1f9bef423b3b69eea8296fb97
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6A8F2579710DEFB58D178518EF7D738096EA33A1F9BEF423B3B69EEA8296FB97"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=1777
Expires: Fri, 25 Nov 2022 03:09:43 GMT
Date: Fri, 25 Nov 2022 02:40:06 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash a0111a2443450172e5d2b48d350a8f57
75e89d4cd001303e66a93880f96d6c47e7d665ab
c9865c82b8f373aeb3a7333b0f65408211d832aba753c35d3544ecb2913f4f64
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 02:40:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 279 B IP
Hash 424464526cf458681b4053398f4c3ac8
de7099a1b756b40d0c3af9f640af40a361243811
2d62fbbb90137ab4d67b403bfaa99fe6ebd9c37f3cdcd635f6f38d014f9d87dd
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=155699
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 02:40:06 GMT
Etag: "637fe839-117"
Expires: Sat, 26 Nov 2022 21:55:05 GMT
Last-Modified: Thu, 24 Nov 2022 21:55:05 GMT
Server: nginx
Content-Length: 279
cdn.useproof.com/proof.js?acc=trtc0limNRYJwhvfi9uRqUFQo0w1
200 OK 498 kB URL HTTP/2 cdn.useproof.com/proof.js?acc=trtc0limNRYJwhvfi9uRqUFQo0w1
IP
File type Unicode text, UTF-8 text, with very long lines (60034), with no line terminators
Size 498 kB (497733 bytes)
Hash 0426397a9b31146729ac86c5be8595d3
953342b7defc23d1c552eba63f42bb915aae90f3
418614329e831c01f8232ddf31feefe6f63c6b52b9c6cbdd5bd5ac314540cfaf
GET /proof.js?acc=trtc0limNRYJwhvfi9uRqUFQo0w1 HTTP/1.1
Host: cdn.useproof.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pages.upwellness.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 25 Nov 2022 02:40:06 GMT
content-type: application/javascript
content-length: 497733
x-amz-id-2: XfamGhBMjZBo/sWrg3mxYdwUMUL0rpYArqF2RUd2t+2nxyqUognVNx+1xnHz8Eg7hGncdCbH6WA=
x-amz-request-id: RVX6E6XRK17ASENB
last-modified: Mon, 29 Jun 2020 14:15:25 GMT
etag: "0426397a9b31146729ac86c5be8595d3"
cache-control: public, max-age=315360000, no-transform
x-amz-version-id: F0WxJo6k6ZqSk5t4_qZ.mqlg1RkwiqAq
cf-cache-status: HIT
age: 50190805
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=YqzFlPuFs%2FAzk12GHHJSqoin9HbOiLami2M5CeWXLUpw09EKQLDRBI98aYUCwGhAkonW5PFV3Yx5ERGNGkmGAbuBCLwWAvCs%2FGEour3QQPJIYafLQz0CR7oOR8R5U%2FpxfSnJ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76f7048aafdfb4f4-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
store.upwellness.com/cgi-bin/UCAffiliateNetworkPixel
200 OK 744 B URL HTTP/2 store.upwellness.com/cgi-bin/UCAffiliateNetworkPixel
IP
File type ASCII text, with CRLF line terminators
Hash 3110f39a7f2fe9edef25454e9b7a57c2
273c540727af9f5f57cf7f0164d8eb43c56c1b71
b6591997ffdba5b81c1af7fa96a8f6cf26597eb4046d64f91301eb1000a54853
GET /cgi-bin/UCAffiliateNetworkPixel HTTP/1.1
Host: store.upwellness.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pages.upwellness.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 25 Nov 2022 02:40:06 GMT
content-type: text/javascript; charset=utf-8
content-length: 744
set-cookie: AWSALB=gBjyrr4tuGfxp0N3M28BmMLHWwZzMSVs+L1Qx6/F995IKoGWHMHp76nXh1PoDpltyKM9FQ8ry/0QsrvZg7IKSfgz26ccscp5LzzK2WgruxCkwYdtF9ofAbwcaOPh; Expires=Fri, 02 Dec 2022 02:40:06 GMT; Path=/
AWSALBCORS=gBjyrr4tuGfxp0N3M28BmMLHWwZzMSVs+L1Qx6/F995IKoGWHMHp76nXh1PoDpltyKM9FQ8ry/0QsrvZg7IKSfgz26ccscp5LzzK2WgruxCkwYdtF9ofAbwcaOPh; Expires=Fri, 02 Dec 2022 02:40:06 GMT; Path=/; SameSite=None; Secure
server: Apache
x-content-type-options: nosniff
p3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
store.upwellness.com/cgi-bin/UCInvisibleLink?merchantId=UPWEL
200 OK 251 B URL HTTP/2 store.upwellness.com/cgi-bin/UCInvisibleLink?merchantId=UPWEL
IP
File type ASCII text, with CRLF line terminators
Hash e6735c6f608ee64c784286185e5ec194
fc90f684a019712ed8bba84418bd7aee5e691bb9
5a74dbf85d18206e84e65be38b869a0a2cc8bc71ac8adeb26321ccc5ef1411e2
GET /cgi-bin/UCInvisibleLink?merchantId=UPWEL HTTP/1.1
Host: store.upwellness.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pages.upwellness.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 25 Nov 2022 02:40:06 GMT
content-type: text/javascript; charset=utf-8
content-length: 251
set-cookie: AWSALB=0YTYZy8JbIY0jZtYqxr7qnH3F300j8y5L3/WYXBz+ZIv7U9gCu7fUWMSoFANppQ7NkNl9JvBHHm3mQuw0HyhOq1ZqiiabpSIeuYRHTjkSTKHhxN8yR1rnOCZmXiE; Expires=Fri, 02 Dec 2022 02:40:06 GMT; Path=/
AWSALBCORS=0YTYZy8JbIY0jZtYqxr7qnH3F300j8y5L3/WYXBz+ZIv7U9gCu7fUWMSoFANppQ7NkNl9JvBHHm3mQuw0HyhOq1ZqiiabpSIeuYRHTjkSTKHhxN8yR1rnOCZmXiE; Expires=Fri, 02 Dec 2022 02:40:06 GMT; Path=/; SameSite=None; Secure
server: Apache
x-content-type-options: nosniff
p3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: ETag, Content-Type, Content-Length, Last-Modified, Alert, Backoff, Pragma, Expires, Retry-After, Cache-Control
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Fri, 25 Nov 2022 02:08:53 GMT
cache-control: public,max-age=3600
age: 1873
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash fb6949e7abaa473393f7c604691de14f
599681bba3947709baa603bbae2dd7afd04059a4
36c5165526ea9d34de14d36655ed494d0cffaa11ca3271ee47824ac11246ba13
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 441
Cache-Control: max-age=110043
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 02:40:07 GMT
Etag: "637f3429-1d7"
Expires: Sat, 26 Nov 2022 09:14:10 GMT
Last-Modified: Thu, 24 Nov 2022 09:06:49 GMT
Server: ECS (ska/F707)
X-Cache: HIT
Content-Length: 471
store.upwellness.com/affiliate/invisibleLink.jsp?mid=UPWEL&r=&u=http%3A//pages.upwellness.com/uc-i11x-fps/%3Foffer%3D15%26session_id%3D1023d8631c9ad2431cc56cbf4cf350%26n%3Dtune%26AFFID%3D477232%26subid%3D1_TH221124PM
200 OK 143 B URL HTTP/1.1 store.upwellness.com/affiliate/invisibleLink.jsp?mid=UPWEL&r=&u=http%3A//pages.upwellness.com/uc-i11x-fps/%3Foffer%3D15%26session_id%3D1023d8631c9ad2431cc56cbf4cf350%26n%3Dtune%26AFFID%3D477232%26subid%3D1_TH221124PM
IP
File type ASCII text, with CRLF, LF line terminators
Hash ac79c2cbd188a2092822ee1eac224360
f88ba4a94a05559da68814fa33c340fb6eed8847
30d20bbdbd6a768390055aec41257ec21afd500fd503dba5ed2271c26094494e
GET /affiliate/invisibleLink.jsp?mid=UPWEL&r=&u=http%3A//pages.upwellness.com/uc-i11x-fps/%3Foffer%3D15%26session_id%3D1023d8631c9ad2431cc56cbf4cf350%26n%3Dtune%26AFFID%3D477232%26subid%3D1_TH221124PM HTTP/1.1
Host: store.upwellness.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pages.upwellness.com/
Cookie: ubvt=2c88da86-94e8-45b4-8ee9-d83a3a6c42f0
HTTP/1.1 200 OK
Date: Fri, 25 Nov 2022 02:40:07 GMT
Content-Type: text/javascript; charset=utf-8
Content-Length: 143
Connection: keep-alive
Set-Cookie: AWSALB=fhuM0ZXrBISZ1qUq5sbQSOicxUCw7i1aEKgMJMGb66dY/hdTKITonywiFnrMEixmnNivjc/TrTua0OIw3bEHMRC1q2qi8DNL2O5SrvDXky2559Wyvzjzfoo6M7Ft; Expires=Fri, 02 Dec 2022 02:40:07 GMT; Path=/
AWSALBCORS=fhuM0ZXrBISZ1qUq5sbQSOicxUCw7i1aEKgMJMGb66dY/hdTKITonywiFnrMEixmnNivjc/TrTua0OIw3bEHMRC1q2qi8DNL2O5SrvDXky2559Wyvzjzfoo6M7Ft; Expires=Fri, 02 Dec 2022 02:40:07 GMT; Path=/; SameSite=None
UltraCartShoppingCartID=F49A870774A0CB0184ACA813E61FB500;Version=0;Path=/;Domain=.upwellness.com
ucacid=1540149089.066506;Version=0;Path=/;Domain=.upwellness.com;Max-Age=315360000
ucacid=1540149089.066506;Version=0;Path=/;Domain=store.upwellness.com;Max-Age=315360000
JSESSIONID=abcFeuyVMY8nXaW5n4b-5; path=/; HttpOnly
LBJSESSIONID=abcFeuyVMY8nXaW5n4b-5.n223; path=/; HttpOnly
Server: Apache
X-Content-Type-Options: nosniff
P3P: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Vary: Accept-Encoding
Content-Encoding: gzip
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ea62cfec950257353e9924867a493351
03990cfbd0dffb1e735d4b482844e52c69a888b7
87067badfc8babcef3fca860be2f4b44778142461a5aea97b09f1d8e8b389cf2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "87067BADFC8BABCEF3FCA860BE2F4B44778142461A5AEA97B09F1D8E8B389CF2"
Last-Modified: Wed, 23 Nov 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11125
Expires: Fri, 25 Nov 2022 05:45:32 GMT
Date: Fri, 25 Nov 2022 02:40:07 GMT
Connection: keep-alive
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: PGoPXOSQ2srQMQI22QUoKA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: /AuctpeoHXXin82RByv9e5s5nqk=
h.upwellnessfeed.com/v1/lst/universal-script?ph=b27b2d9cab4edb79ea8d8031ae1cdcab396d994adeed7dcf9ab186020a45dbd3&tag=!tracking
200 OK 49 B URL HTTP/1.1 h.upwellnessfeed.com/v1/lst/universal-script?ph=b27b2d9cab4edb79ea8d8031ae1cdcab396d994adeed7dcf9ab186020a45dbd3&tag=!tracking
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 1467ad668080ed4ab50a1408a712cdcc
e0e5faa2d11a93edc33ee27f07885e0dd48110b4
7d7d1c1b75be5d8b716b9c137e025932f6f2e8391c978f08620b6ad892775096
GET /v1/lst/universal-script?ph=b27b2d9cab4edb79ea8d8031ae1cdcab396d994adeed7dcf9ab186020a45dbd3&tag=!tracking HTTP/1.1
Host: h.upwellnessfeed.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pages.upwellness.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 25 Nov 2022 02:40:07 GMT
Content-Type: text/plain;charset=utf-8
Content-Length: 49
Connection: keep-alive
Access-Control-Allow-Methods: GET, PUT, POST, OPTIONS, DELETE
Access-Control-Expose-Headers: Session-ID
Access-Control-Max-Age: 86400
Access-Control-Allow-Credentials: true
Front-End-Https: off
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash a6fb9a2c7a9871289668a5c147559401
7473256e484a0e20931aa77de21b8757f2331815
cc3b85d7d854070d7e0157a6d6773b397227739dcd887808d35f4ca75cef2abb
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Fri, 25 Nov 2022 02:40:07 GMT
Last-Modified: Fri, 25 Nov 2022 01:13:44 GMT
Server: ECS (dcb/7EA7)
X-Cache: Miss from cloudfront
Via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: r5dbS-yR1pQsl7_-i7f1zNtKE1kbBZYGoNOEMVqW47m8pr21c__daA==
Age: 5183
store.upwellness.com/cgi-bin/UCAffiliateNetworkPixel?t=0.20312078088508856&r=&u=http%3A%2F%2Fpages.upwellness.com%2Fuc-i11x-fps%2F%3Foffer%3D15%26session_id%3D1023d8631c9ad2431cc56cbf4cf350%26n%3Dtune%26AFFID%3D477232%26subid%3D1_TH221124PM
200 OK 0 B URL HTTP/1.1 store.upwellness.com/cgi-bin/UCAffiliateNetworkPixel?t=0.20312078088508856&r=&u=http%3A%2F%2Fpages.upwellness.com%2Fuc-i11x-fps%2F%3Foffer%3D15%26session_id%3D1023d8631c9ad2431cc56cbf4cf350%26n%3Dtune%26AFFID%3D477232%26subid%3D1_TH221124PM
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cgi-bin/UCAffiliateNetworkPixel?t=0.20312078088508856&r=&u=http%3A%2F%2Fpages.upwellness.com%2Fuc-i11x-fps%2F%3Foffer%3D15%26session_id%3D1023d8631c9ad2431cc56cbf4cf350%26n%3Dtune%26AFFID%3D477232%26subid%3D1_TH221124PM HTTP/1.1
Host: store.upwellness.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pages.upwellness.com/
Cookie: ubvt=2c88da86-94e8-45b4-8ee9-d83a3a6c42f0; AWSALB=fhuM0ZXrBISZ1qUq5sbQSOicxUCw7i1aEKgMJMGb66dY/hdTKITonywiFnrMEixmnNivjc/TrTua0OIw3bEHMRC1q2qi8DNL2O5SrvDXky2559Wyvzjzfoo6M7Ft; UltraCartShoppingCartID=F49A870774A0CB0184ACA813E61FB500; ucacid=1540149089.066506; ucacid=1540149089.066506; JSESSIONID=abcFeuyVMY8nXaW5n4b-5; LBJSESSIONID=abcFeuyVMY8nXaW5n4b-5.n223
HTTP/1.1 200 OK
Date: Fri, 25 Nov 2022 02:40:07 GMT
Content-Length: 0
Connection: keep-alive
Set-Cookie: AWSALB=3nlpFilFWWi1YFAwXMpdHgriwnWX5Gz7SXMZoz10cPwlLeckR+/Hro7Vc1kgKP/04mEM+2eLQqELjQCvXMfgCc0RUUWnoHyyQ6ck9LTc5Yx9/j0TErlZ0kknuHT3; Expires=Fri, 02 Dec 2022 02:40:07 GMT; Path=/
AWSALBCORS=3nlpFilFWWi1YFAwXMpdHgriwnWX5Gz7SXMZoz10cPwlLeckR+/Hro7Vc1kgKP/04mEM+2eLQqELjQCvXMfgCc0RUUWnoHyyQ6ck9LTc5Yx9/j0TErlZ0kknuHT3; Expires=Fri, 02 Dec 2022 02:40:07 GMT; Path=/; SameSite=None
UPWEL-ANP=6141; domain=store.upwellness.com; path=/; expires=Sat, 25-Nov-2023 02:40:07 GMT; HttpOnly
Server: Apache
P3P: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
fast.wistia.com/assets/external/wistia-mux.js
200 OK 31 kB URL HTTP/2 fast.wistia.com/assets/external/wistia-mux.js
IP
File type ASCII text, with very long lines (65468)
Hash 8ca4953da62f6c8a05b7f2d7333a83f7
c68e554587e7e3dc6da836b6501e926ae543f933
9d7adbd9c2243a23cf7cb8ab534ce188da6f2b78d75e52ab79fb6af490dc6279
GET /assets/external/wistia-mux.js HTTP/1.1
Host: fast.wistia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pages.upwellness.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
cache-control: public, max-age=3600
content-encoding: br
content-type: application/javascript
etag: "637ce334-7a30"
last-modified: Tue, 22 Nov 2022 14:56:52 GMT
timing-allow-origin: *
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Fri, 25 Nov 2022 02:40:07 GMT
age: 236
x-served-by: cache-iad-kcgs7200128-IAD, cache-bma1671-BMA
x-cache: HIT, HIT
x-cache-hits: 4, 3
x-timer: S1669344008.857202,VS0,VE0
vary: Accept-Encoding
strict-transport-security: max-age=0
x-ecma-v: modern
x-browser: firefox
x-browser-version: 105
content-length: 31280
X-Firefox-Spdy: h2
cdn.useproof.com/proxy/index.html
200 OK 325 B URL HTTP/2 cdn.useproof.com/proxy/index.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (325), with no line terminators
Hash f92252b1f21fd30ac52b59395971ecdb
ecb588481454091dcfea3c925c83577425497626
0adeedede6d3bdf7e7258108ead2ed80af83b9fec8ba560d29fce2f3a957a261
GET /proxy/index.html HTTP/1.1
Host: cdn.useproof.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pages.upwellness.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 25 Nov 2022 02:40:07 GMT
content-type: text/html
content-length: 325
x-amz-id-2: Vp1R8+47gyYQ7nU3LF4ye/qKAasObqczQiybPbi0TG3QR8+6/m3gbKjH8BVrnEpOMEfq/gN3oSY=
x-amz-request-id: PB1DXMFB4C2HSG0X
last-modified: Mon, 29 Jun 2020 14:15:25 GMT
etag: "f92252b1f21fd30ac52b59395971ecdb"
cache-control: max-age=315360000, no-transform, public
x-amz-version-id: 6OysE9MvUGgGn.qn_BXpeYijOLHR8713
accept-ranges: bytes
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hMqLgC5a1TNJRpPTH1YwZMys8Y6t06IRO2p8WfiMuEPYjPemXvHQenhnfFxc%2BTSpnltsxkacf1fAV2YtCw9DHdPrKOyzDwedDN28M%2F3VL4zeu8qkxEtL8pbb7f%2BaQdnM3PKj"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76f7048ed98eb4f4-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.useproof.com/proxy/proxy.js
200 OK 114 kB URL HTTP/2 cdn.useproof.com/proxy/proxy.js
IP
File type Unicode text, UTF-8 text, with very long lines (65514), with no line terminators
Size 114 kB (114404 bytes)
Hash 9f4d60f4f2b143cadacb2b8b3a901401
8c25b07f5122f9875920498c20ede6045320f479
f4d712c5a2901b92d4baa6e18554c3db8e5ce1d8f4d3189054e39489b37c982c
GET /proxy/proxy.js HTTP/1.1
Host: cdn.useproof.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cdn.useproof.com/proxy/index.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 25 Nov 2022 02:40:08 GMT
content-type: application/javascript
content-length: 114404
cache-control: public, max-age=315360000, no-transform
cf-bgj: minify
etag: "9f4d60f4f2b143cadacb2b8b3a901401"
last-modified: Mon, 29 Jun 2020 14:15:25 GMT
x-amz-id-2: yoAjzcyRlZUSIcodHaLndl6c776jIrkHPBSIgiDtxS12xvdyq2MKSDzEETmCnivt0ELZRmo4dWc=
x-amz-request-id: YH3Z1CT1HCFY0HSJ
x-amz-version-id: FhtEkyvjyNE68BTwRHm.pMLrP83vtI4K
cf-cache-status: HIT
age: 48990306
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nWIUjdm%2B8sjlSFvf5AGIn59zfwYVjAp8QaEyK9TdZ5EObbP%2FXKkJfIw0a%2BKD%2FFAVvANkXSN7xuGkmB6HRof6oycKrZ7YXdJ%2BspcAANHWUQc0yBLewnKnHQBIYyzaK3kjfJLe"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76f704921aa0b4f4-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
embed-ssl.wistia.com/deliveries/98d5a20a578467fb567492bba9090aa9.webp?image_crop_resized=400x224
200 OK 12 kB URL HTTP/2 embed-ssl.wistia.com/deliveries/98d5a20a578467fb567492bba9090aa9.webp?image_crop_resized=400x224
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 400x224, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash b9f20051be0e5f0ac3facd1b0505c53a
1ce57aed2a4b03320790e9c7d1a113bf9e3c8991
053298949f19e13be3aa6ab53b08c2b20ff3fa968e79466ff28a0c451789f857
GET /deliveries/98d5a20a578467fb567492bba9090aa9.webp?image_crop_resized=400x224 HTTP/1.1
Host: embed-ssl.wistia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pages.upwellness.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/webp
access-control-expose-headers: Origin, Content-Type, Accept, Server, x-amz-version-id, X-Cache
cache-control: max-age=31536000
content-disposition: inline
edge-cache-tag: 98d5a20a578467fb567492bba9090aa9
last-modified: Mon, 27 Jul 2020 22:32:56 UTC
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Fri, 25 Nov 2022 02:40:08 GMT
age: 3846939
access-control-allow-origin: *
access-control-request-method: *
access-control-allow-methods: GET, HEAD, OPTIONS
x-served-by: cache-iad-kjyo7100117-IAD, cache-bma1671-BMA
x-cache: HIT, HIT
x-cache-hits: 760, 1
x-timer: S1669344008.047641,VS0,VE1
content-length: 11602
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 87de3dd2c7dce12b01a337d1554a222a
30e0bd68bbb78995aa8a0686ac02848fd5a7a699
533c21806ef66401ea5faeeb37366a33f19f0e9052b4fb06f22981ec73b21a59
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 02:40:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.gstatic.com/firebasejs/4.5.0/firebase.js
200 OK 116 kB URL HTTP/2 www.gstatic.com/firebasejs/4.5.0/firebase.js
IP
File type ASCII text, with very long lines (16738)
Size 116 kB (116073 bytes)
Hash 0ff319bf584fbc1049438249c206242d
2adccf821c87d51efbc577cc3f091d6f254f0a35
2571c05e9c76a275e38235dc4b7256c971cccd9c1a40367b8d2f8fc9a14b4efb
GET /firebasejs/4.5.0/firebase.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cdn.useproof.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 116073
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 23 Nov 2022 08:31:51 GMT
expires: Thu, 23 Nov 2023 08:31:51 GMT
cache-control: public, max-age=31536000
age: 151697
last-modified: Tue, 03 Oct 2017 14:56:39 GMT
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 87de3dd2c7dce12b01a337d1554a222a
30e0bd68bbb78995aa8a0686ac02848fd5a7a699
533c21806ef66401ea5faeeb37366a33f19f0e9052b4fb06f22981ec73b21a59
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 02:40:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
flask.nextdoor.com/pixel?pid=77b5f184-78b6-4a8f-8547-6b081e5774db&ev=PAGE_VIEW&pl=http%3A%2F%2Fpages.upwellness.com%2Fuc-i11x-fps%2F%3Foffer%3D15%26session_id%3D1023d8631c9ad2431cc56cbf4cf350%26n%3Dtune%26AFFID%3D477232%26subid%3D1_TH221124PM&ndclid=&rf=&sem=&tm=0
204 No Content 0 B URL HTTP/2 flask.nextdoor.com/pixel?pid=77b5f184-78b6-4a8f-8547-6b081e5774db&ev=PAGE_VIEW&pl=http%3A%2F%2Fpages.upwellness.com%2Fuc-i11x-fps%2F%3Foffer%3D15%26session_id%3D1023d8631c9ad2431cc56cbf4cf350%26n%3Dtune%26AFFID%3D477232%26subid%3D1_TH221124PM&ndclid=&rf=&sem=&tm=0
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pixel?pid=77b5f184-78b6-4a8f-8547-6b081e5774db&ev=PAGE_VIEW&pl=http%3A%2F%2Fpages.upwellness.com%2Fuc-i11x-fps%2F%3Foffer%3D15%26session_id%3D1023d8631c9ad2431cc56cbf4cf350%26n%3Dtune%26AFFID%3D477232%26subid%3D1_TH221124PM&ndclid=&rf=&sem=&tm=0 HTTP/1.1
Host: flask.nextdoor.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pages.upwellness.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Fri, 25 Nov 2022 02:40:08 GMT
server: istio-envoy
context-id: f3356a4e-a990-4ecd-b869-f25bfb842152
x-envoy-upstream-service-time: 2
X-Firefox-Spdy: h2
cdn.js.customerlabs.co/cl4975ot4arrr6.js
200 OK 191 kB URL HTTP/1.1 cdn.js.customerlabs.co/cl4975ot4arrr6.js
IP
File type ASCII text, with very long lines (33540)
Size 191 kB (191202 bytes)
Hash 9bc0790bc835c816132d6d632d1fe678
d7ff94e3db5e659963e7a828053c2472af6d751d
989a353c87693ae8700e24dacf7d12637287b303896573ac84fa0211244f4615
GET /cl4975ot4arrr6.js HTTP/1.1
Host: cdn.js.customerlabs.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Origin: http://pages.upwellness.com
Connection: keep-alive
Referer: http://pages.upwellness.com/
HTTP/1.1 200 OK
Content-Type: binary/octet-stream
Content-Length: 191202
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: HEAD, GET, PUT, POST, DELETE
Access-Control-Expose-Headers: ETag, x-amz-meta-custom-header
x-amz-replication-status: COMPLETED
Last-Modified: Mon, 21 Nov 2022 21:23:13 GMT
x-amz-version-id: C1DASnfA0sWthFzaWaR0QLMU9MXInfPn
Accept-Ranges: bytes
Server: AmazonS3
Date: Fri, 25 Nov 2022 02:40:09 GMT
Cache-Control: max-age=60
ETag: "9bc0790bc835c816132d6d632d1fe678"
Vary: Accept-Encoding,Origin,Access-Control-Request-Headers,Access-Control-Request-Method
X-Cache: RefreshHit from cloudfront
Via: 1.1 aac54e3fe9825ce24d51e0204433c2c0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
Alt-Svc: h3=":443"; ma=86400
X-Amz-Cf-Id: ZlVbtqptbcwQNStDQSxmShXkdtv-nU0AlOeN0u2aK8Ax80Emkud7BQ==
builder-assets.unbounce.com/published-js/main.bundle-384ff03.z.js
200 OK 34 kB URL HTTP/1.1 builder-assets.unbounce.com/published-js/main.bundle-384ff03.z.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 1825a0c47b2e38b6cf30a4072987bce1
1710545a9d62ae8aaf4b1dd415ffd910df671839
0b4478d998fd8dc7dd45411ac1d80c70e89194ec993a6ef4c53676ba92ab1282
GET /published-js/main.bundle-384ff03.z.js HTTP/1.1
Host: builder-assets.unbounce.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pages.upwellness.com/
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Length: 33495
Connection: keep-alive
Date: Tue, 30 Aug 2022 01:41:30 GMT
Last-Modified: Mon, 04 Jul 2022 16:47:26 GMT
ETag: "1825a0c47b2e38b6cf30a4072987bce1"
Cache-Control: max-age=31536000
Content-Encoding: gzip
x-amz-version-id: 8Zp2fnRnJC.CRCK1CKEZXPX8nFkHjX8u
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 b053873243f91b1bb6dc406ce0c67db4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: vEbTH6ZB0BwEF-NV_MLxv9hpVhJr8J7EKKCut_ElJpbxmpnqaMQM3g==
Age: 7520319
b-code.liadm.com/a-057g.min.js
200 OK 11 kB URL HTTP/1.1 b-code.liadm.com/a-057g.min.js
IP
File type Unicode text, UTF-8 text, with very long lines (30660)
Hash 649973a951d4a0b63b7a9504dd502b33
44029549df4e673add495cd965049dd3b1c2ca11
18c3fa47e2de6bc61ccaba3dd6a9836c0246856473bbe3e73739ac38cb6ea54e
GET /a-057g.min.js HTTP/1.1
Host: b-code.liadm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pages.upwellness.com/
HTTP/1.1 200 OK
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Date: Thu, 24 Nov 2022 06:49:16 GMT
Cache-Control: "public, max-age=86400"
Content-Encoding: gzip
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 e49f22f18c16784c0f42291e768d1daa.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: W7VpyD0wLGYOQONkrevfAy66xg5d0oVU77b_KHcolp_QGKqTRj8cyA==
Age: 71452
d34qb8suadcc4g.cloudfront.net/ub.js?1618514269
200 OK 1.9 kB URL HTTP/2 d34qb8suadcc4g.cloudfront.net/ub.js?1618514269
IP
Hash f6420c864830b5860bfaadd47a2bb21b
935d2ed35f43eb0f1aea9b0642df0d7f4770def7
6f36d2d4b4b9df950fd0dd0d57e0eacb7c4217e8086b4ef940cbd6e526930462
GET /ub.js?1618514269 HTTP/1.1
Host: d34qb8suadcc4g.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pages.upwellness.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
content-length: 1856
date: Mon, 29 Aug 2022 01:57:45 GMT
last-modified: Thu, 15 Apr 2021 19:15:08 GMT
etag: "f6420c864830b5860bfaadd47a2bb21b"
cache-control: max-age=31536000
content-encoding: gzip
x-amz-version-id: bKC28ufbc849z_LglraHgQe9TbPw1SIU
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: bTeQjtJI1M7wddcDCVog_tMvwwZwzcsPLncR_jaf21pFGixwwcczyg==
age: 7605744
X-Firefox-Spdy: h2
bat.bing.com/bat.js
200 OK 11 kB IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type Unicode text, UTF-8 text, with very long lines (39007), with no line terminators
Hash 22e2e3226eb5ada04929a2e43307eeda
04615fa88f80567974bdeb0f103ca5909746ebd7
41feebdfb0b03cd7fee2eb886adef6f3f1f85d3f14215e9a388d2a50e42efb9b
GET /bat.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pages.upwellness.com/
HTTP/1.1 200 OK
Cache-Control: private,max-age=1800
Content-Length: 11421
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Wed, 09 Nov 2022 21:23:50 GMT
Accept-Ranges: bytes
ETag: "077538f81f4d81:0"
Vary: Accept-Encoding
Set-Cookie: MUID=30538E2A09D3658F12599C4D08846486; domain=.bing.com; expires=Wed, 20-Dec-2023 02:40:08 GMT; path=/; SameSite=None; Secure; Priority=High;
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
Access-Control-Allow-Origin: *
X-Cache: CONFIG_NOCACHE
X-MSEdge-Ref: Ref A: EA0B9ECC281C41D8999BAFB0F4177B6A Ref B: OSL30EDGE0312 Ref C: 2022-11-25T02:40:08Z
Date: Fri, 25 Nov 2022 02:40:07 GMT
d34qb8suadcc4g.cloudfront.net/sp-2.14.0.js
200 OK 30 kB URL HTTP/2 d34qb8suadcc4g.cloudfront.net/sp-2.14.0.js
IP
File type ASCII text, with very long lines (64903)
Hash 73de733c308b8b5e44d2a6242dc4bd99
2f43a0cd155124d65ab5ce3574abc5f82b45fcf9
cf4ff4a67675a54e9a9469d967c77fba778ccf839a98119d246012447eb44ea3
GET /sp-2.14.0.js HTTP/1.1
Host: d34qb8suadcc4g.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pages.upwellness.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 30399
date: Wed, 31 Aug 2022 03:46:21 GMT
last-modified: Wed, 04 Nov 2020 01:35:32 GMT
etag: "73de733c308b8b5e44d2a6242dc4bd99"
cache-control: max-age=31536000
content-encoding: gzip
x-amz-version-id: rVTqklA1qqyT_0VdOCY323BKPISR0uej
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: XcPzJGgWW91eZnUcQQhT_EDun_0ii2_aysi9HOZcEKxzeo9uz1rNwg==
age: 7426427
X-Firefox-Spdy: h2
s.pinimg.com/ct/core.js
200 OK 1.1 kB IP
File type ASCII text, with very long lines (1146), with no line terminators
Hash 8d9d0550c915347e312e24f00d311e50
cb44712b22cb011b759da4e741b543238839c735
57d73d188a6162bec272876156addbd7b02a2c6941c45653b8d3453e998e0b5b
GET /ct/core.js HTTP/1.1
Host: s.pinimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pages.upwellness.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
etag: "8d9d0550c915347e312e24f00d311e50"
content-type: application/javascript
fastly-restarts: 1
x-cdn: fastly
alt-svc: h3=":443";ma=600,h3-29=":443";ma=600,h3-27=":443";ma=600
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 86400
access-control-expose-headers: X-CDN
vary: Accept-Encoding, Origin
cache-control: max-age=7200
date: Fri, 25 Nov 2022 02:40:08 GMT
content-length: 1146
X-Firefox-Spdy: h2
d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-i11x-fps/d3e49b11-fb7f07-shorter-orange-wavebg_11hc0lm000000000000028.png
200 OK 74 kB URL HTTP/1.1 d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-i11x-fps/d3e49b11-fb7f07-shorter-orange-wavebg_11hc0lm000000000000028.png
IP
File type PNG image data, 3000 x 1216, 8-bit colormap, non-interlaced\012- data
Hash 1341778ff066cde28775587f57fbb93a
cd41c801268658ccf0665dd04eb66b7223622b17
7e9559426d647ede464f6570a728dd24346c558a2cdf9c85a652e5bc999bf10e
GET /pages.upwellness.com/uc-i11x-fps/d3e49b11-fb7f07-shorter-orange-wavebg_11hc0lm000000000000028.png HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pages.upwellness.com/
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 74542
Connection: keep-alive
Date: Fri, 25 Nov 2022 01:25:28 GMT
Last-Modified: Tue, 22 Nov 2022 20:57:41 GMT
ETag: "1341778ff066cde28775587f57fbb93a"
Cache-Control: max-age=31557600
x-amz-version-id: 9i.rufvGIEtxn66IbvqFieZ3EYTxmAnx
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 227a1815a1677b9cf6dd587e443000b8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: VGcbWCM3CnJI1C2ZSf5vUavsynApFISn7RBpgIhrN4xZndvBcz2c7w==
Age: 4481
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash d3d2d21ac304813a16da64921ce18ba4
98b1762c675c61eeb18254986461e6b1074ebc92
af00429c189464ddb8df704dc48035421f943444df6ca17390fb97466c2e7e9b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 02:40:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fast.wistia.com/assets/external/engines/hls_video.js
200 OK 114 kB URL HTTP/2 fast.wistia.com/assets/external/engines/hls_video.js
IP
File type ASCII text, with very long lines (65469)
Size 114 kB (114373 bytes)
Hash ddbf94a47f16fcd8a99d8c45572ac852
fabe447aee7408e90c4fcfc1de127d98987b8ca0
cb2cba64e3b0a0797031ca64b918bed7c1c58b6f3b40d92b4f45f93b3ea55109
GET /assets/external/engines/hls_video.js HTTP/1.1
Host: fast.wistia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pages.upwellness.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
cache-control: public, max-age=3600
content-encoding: br
content-type: application/javascript
etag: "637ce334-1bec5"
last-modified: Tue, 22 Nov 2022 14:56:52 GMT
timing-allow-origin: *
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Fri, 25 Nov 2022 02:40:08 GMT
age: 236
x-served-by: cache-iad-kiad7000086-IAD, cache-bma1671-BMA
x-cache: HIT, HIT
x-cache-hits: 12, 3
x-timer: S1669344008.304958,VS0,VE0
vary: Accept-Encoding
strict-transport-security: max-age=0
x-ecma-v: modern
x-browser: firefox
x-browser-version: 105
content-length: 114373
X-Firefox-Spdy: h2
d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-i11x-fps/6cec1b2f-flat-3c3c3c-grey-wavebg_11hc0sl000000000000028.png
200 OK 109 kB URL HTTP/1.1 d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-i11x-fps/6cec1b2f-flat-3c3c3c-grey-wavebg_11hc0sl000000000000028.png
IP
File type PNG image data, 3000 x 1608, 8-bit colormap, non-interlaced\012- data
Size 109 kB (109384 bytes)
Hash 8e882b2123ddfb94ca7c427496ba0413
3060e733c741b0b4cc3240a6d5444509cc6b8ae9
710651d81196e5403855aa6e8c3f7ddc7a476ec7c728846acadb870c46e181eb
GET /pages.upwellness.com/uc-i11x-fps/6cec1b2f-flat-3c3c3c-grey-wavebg_11hc0sl000000000000028.png HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pages.upwellness.com/
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 109384
Connection: keep-alive
Date: Fri, 18 Nov 2022 22:52:44 GMT
Last-Modified: Tue, 23 Aug 2022 15:06:34 GMT
ETag: "8e882b2123ddfb94ca7c427496ba0413"
Cache-Control: max-age=31557600
x-amz-version-id: msCwVKXD8gpTItZ1BZVCT4HnTiL0cP76
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: UL7CG2DZd0VMjo4lkp2UCYqEJvsaYSwO2eNnM9X-mWsFXHHYBs15GA==
Age: 532045
ocsp.digicert.com/
200 OK 471 B IP
Hash 670dda5fda45a89db08867e9109f65b7
2a64bc381f8e795fe7a46a98c3e8add2f1ade404
7c2085a52a32eab3f4ab73c4ab3718cf1e7d67502e83001ce45d2857b37a0755
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4334
Cache-Control: max-age=99517
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 02:40:08 GMT
Etag: "637efbd7-1d7"
Expires: Sat, 26 Nov 2022 06:18:45 GMT
Last-Modified: Thu, 24 Nov 2022 05:06:31 GMT
Server: ECS (ska/F707)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash f86429279e19a89ba7fae87ba2406b4e
abfa5369a7feb4dfebf13f5eb902c3e860976238
76d03c181e150e7e3a61bfa8489231999fb562f6cb0b382c456b9a37da1106a6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 02:40:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-i11x-fps/c1421fbb-tria-listpad-e21-converted-1_124f1lb1hc1lb0bj000028.png
200 OK 303 kB URL HTTP/1.1 d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-i11x-fps/c1421fbb-tria-listpad-e21-converted-1_124f1lb1hc1lb0bj000028.png
IP
File type PNG image data, 1920 x 2063, 8-bit colormap, non-interlaced\012- data
Size 303 kB (302980 bytes)
Hash 089cee077755850a516fbb6d37cdff45
53c00dee9a00052e76694d35013311e655abb0ee
5f688a5e666f99817e56ea624f7543e5c35ad288ee53b587b73932c9fb65f686
GET /pages.upwellness.com/uc-i11x-fps/c1421fbb-tria-listpad-e21-converted-1_124f1lb1hc1lb0bj000028.png HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pages.upwellness.com/
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 302980
Connection: keep-alive
Date: Fri, 18 Nov 2022 22:53:30 GMT
Last-Modified: Tue, 23 Aug 2022 15:06:34 GMT
ETag: "089cee077755850a516fbb6d37cdff45"
Cache-Control: max-age=31557600
x-amz-version-id: 4WHqWwH_ZUWu_Pgo.7fbujhM_M73T_h.
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: i-QKIn4f50vwBB7XkwOQoNNHtDTzzVp5xaNC1rWBkcPXLGd-j5tW2w==
Age: 531999
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash f86429279e19a89ba7fae87ba2406b4e
abfa5369a7feb4dfebf13f5eb902c3e860976238
76d03c181e150e7e3a61bfa8489231999fb562f6cb0b382c456b9a37da1106a6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 02:40:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash f86429279e19a89ba7fae87ba2406b4e
abfa5369a7feb4dfebf13f5eb902c3e860976238
76d03c181e150e7e3a61bfa8489231999fb562f6cb0b382c456b9a37da1106a6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 02:40:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1325)
Hash 47e6f374ca946fddd5b59871b325736c
baa9282efc8785e84d247c3bff518eaa45f101c4
16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pages.upwellness.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Fri, 25 Nov 2022 00:41:08 GMT
expires: Fri, 25 Nov 2022 02:41:08 GMT
cache-control: public, max-age=7200
age: 7140
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/viewthroughconversion/458254939/?random=1669344007294&cv=11&fst=1669344007294&bg=ffffff&guid=ON&async=1>m=2oab90&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=http%3A%2F%2Fpages.upwellness.com%2Fuc-i11x-fps%2F%3Foffer%3D15%26session_id%3D1023d8631c9ad2431cc56cbf4cf350%26n%3Dtune%26AFFID%3D477232%26subid%3D1_TH221124PM&tiba=Immune%2011X%20-%20UpWellness%20-%20Dr.%20Joshua%20Levitt&auid=1665624883.1669344007&data=event%3Dgtag.config&rfmt=3&fmt=4
200 OK 998 B URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/458254939/?random=1669344007294&cv=11&fst=1669344007294&bg=ffffff&guid=ON&async=1>m=2oab90&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=http%3A%2F%2Fpages.upwellness.com%2Fuc-i11x-fps%2F%3Foffer%3D15%26session_id%3D1023d8631c9ad2431cc56cbf4cf350%26n%3Dtune%26AFFID%3D477232%26subid%3D1_TH221124PM&tiba=Immune%2011X%20-%20UpWellness%20-%20Dr.%20Joshua%20Levitt&auid=1665624883.1669344007&data=event%3Dgtag.config&rfmt=3&fmt=4
IP
File type ASCII text, with very long lines (2169), with no line terminators
Hash ac84f1f78c55d1fe55d6209c047b9913
22ff04e985b8e37fa70dc98eb88823e49263f694
0e742739a45614e37f2f35296240509864dfad507ad71a00ab9986aeaa44a0cb
GET /pagead/viewthroughconversion/458254939/?random=1669344007294&cv=11&fst=1669344007294&bg=ffffff&guid=ON&async=1>m=2oab90&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=http%3A%2F%2Fpages.upwellness.com%2Fuc-i11x-fps%2F%3Foffer%3D15%26session_id%3D1023d8631c9ad2431cc56cbf4cf350%26n%3Dtune%26AFFID%3D477232%26subid%3D1_TH221124PM&tiba=Immune%2011X%20-%20UpWellness%20-%20Dr.%20Joshua%20Levitt&auid=1665624883.1669344007&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pages.upwellness.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 25 Nov 2022 02:40:08 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 998
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Fri, 25-Nov-2022 02:55:08 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/viewthroughconversion/675938688/?random=1669344007419&cv=11&fst=1669344007419&bg=ffffff&guid=ON&async=1>m=2oab90&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=http%3A%2F%2Fpages.upwellness.com%2Fuc-i11x-fps%2F%3Foffer%3D15%26session_id%3D1023d8631c9ad2431cc56cbf4cf350%26n%3Dtune%26AFFID%3D477232%26subid%3D1_TH221124PM&tiba=Immune%2011X%20-%20UpWellness%20-%20Dr.%20Joshua%20Levitt&auid=1665624883.1669344007&data=event%3Dgtag.config&rfmt=3&fmt=4
200 OK 997 B URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/675938688/?random=1669344007419&cv=11&fst=1669344007419&bg=ffffff&guid=ON&async=1>m=2oab90&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=http%3A%2F%2Fpages.upwellness.com%2Fuc-i11x-fps%2F%3Foffer%3D15%26session_id%3D1023d8631c9ad2431cc56cbf4cf350%26n%3Dtune%26AFFID%3D477232%26subid%3D1_TH221124PM&tiba=Immune%2011X%20-%20UpWellness%20-%20Dr.%20Joshua%20Levitt&auid=1665624883.1669344007&data=event%3Dgtag.config&rfmt=3&fmt=4
IP
File type ASCII text, with very long lines (2169), with no line terminators
Hash 83a5cf18c059c9b61b9d340025a4ef3d
d2b1efd158d45c73e8a259a5f7518af26322a6a9
06ad7de69edc5603bafe67ec39efd813c6585445cc807923acf4a8487776ee6f
GET /pagead/viewthroughconversion/675938688/?random=1669344007419&cv=11&fst=1669344007419&bg=ffffff&guid=ON&async=1>m=2oab90&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=http%3A%2F%2Fpages.upwellness.com%2Fuc-i11x-fps%2F%3Foffer%3D15%26session_id%3D1023d8631c9ad2431cc56cbf4cf350%26n%3Dtune%26AFFID%3D477232%26subid%3D1_TH221124PM&tiba=Immune%2011X%20-%20UpWellness%20-%20Dr.%20Joshua%20Levitt&auid=1665624883.1669344007&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pages.upwellness.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 25 Nov 2022 02:40:08 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 997
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Fri, 25-Nov-2022 02:55:08 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash cb3dbeb752bbb4b359b6700cfec713fa
cbf6e69e1463db6bf1824e6b927228832986ad20
66a5b6fdf9927c8dbd250ea1d8dbb228fd442a0d4c6b54e1a9135af4da8433ea
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2220
Cache-Control: max-age=86278
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 02:40:08 GMT
Etag: "637ed062-1d7"
Expires: Sat, 26 Nov 2022 02:38:06 GMT
Last-Modified: Thu, 24 Nov 2022 02:01:06 GMT
Server: ECS (ska/F707)
X-Cache: HIT
Content-Length: 471
googleads.g.doubleclick.net/pagead/viewthroughconversion/624541243/?random=1669344007255&cv=11&fst=1669344007255&bg=ffffff&guid=ON&async=1>m=2oab90&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=http%3A%2F%2Fpages.upwellness.com%2Fuc-i11x-fps%2F%3Foffer%3D15%26session_id%3D1023d8631c9ad2431cc56cbf4cf350%26n%3Dtune%26AFFID%3D477232%26subid%3D1_TH221124PM&tiba=Immune%2011X%20-%20UpWellness%20-%20Dr.%20Joshua%20Levitt&auid=1665624883.1669344007&data=event%3Dgtag.config&rfmt=3&fmt=4
200 OK 997 B URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/624541243/?random=1669344007255&cv=11&fst=1669344007255&bg=ffffff&guid=ON&async=1>m=2oab90&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=http%3A%2F%2Fpages.upwellness.com%2Fuc-i11x-fps%2F%3Foffer%3D15%26session_id%3D1023d8631c9ad2431cc56cbf4cf350%26n%3Dtune%26AFFID%3D477232%26subid%3D1_TH221124PM&tiba=Immune%2011X%20-%20UpWellness%20-%20Dr.%20Joshua%20Levitt&auid=1665624883.1669344007&data=event%3Dgtag.config&rfmt=3&fmt=4
IP
File type ASCII text, with very long lines (2169), with no line terminators
Hash 39278ecfa20a2c0c231de11b7dcb09ce
6f0410935a0d721b224b47fdc1512e96e7f763af
efdb100e8fb5a7ddef8052ced9c0cdd747a3c36be91e8486939d5d234be6f1e3
GET /pagead/viewthroughconversion/624541243/?random=1669344007255&cv=11&fst=1669344007255&bg=ffffff&guid=ON&async=1>m=2oab90&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=http%3A%2F%2Fpages.upwellness.com%2Fuc-i11x-fps%2F%3Foffer%3D15%26session_id%3D1023d8631c9ad2431cc56cbf4cf350%26n%3Dtune%26AFFID%3D477232%26subid%3D1_TH221124PM&tiba=Immune%2011X%20-%20UpWellness%20-%20Dr.%20Joshua%20Levitt&auid=1665624883.1669344007&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pages.upwellness.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 25 Nov 2022 02:40:08 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 997
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Fri, 25-Nov-2022 02:55:08 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/viewthroughconversion/10838597190/?random=1669344007240&cv=11&fst=1669344007240&bg=ffffff&guid=ON&async=1>m=2oab90&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=http%3A%2F%2Fpages.upwellness.com%2Fuc-i11x-fps%2F%3Foffer%3D15%26session_id%3D1023d8631c9ad2431cc56cbf4cf350%26n%3Dtune%26AFFID%3D477232%26subid%3D1_TH221124PM&tiba=Immune%2011X%20-%20UpWellness%20-%20Dr.%20Joshua%20Levitt&auid=1665624883.1669344007&data=event%3Dgtag.config&rfmt=3&fmt=4
200 OK 998 B URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/10838597190/?random=1669344007240&cv=11&fst=1669344007240&bg=ffffff&guid=ON&async=1>m=2oab90&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=http%3A%2F%2Fpages.upwellness.com%2Fuc-i11x-fps%2F%3Foffer%3D15%26session_id%3D1023d8631c9ad2431cc56cbf4cf350%26n%3Dtune%26AFFID%3D477232%26subid%3D1_TH221124PM&tiba=Immune%2011X%20-%20UpWellness%20-%20Dr.%20Joshua%20Levitt&auid=1665624883.1669344007&data=event%3Dgtag.config&rfmt=3&fmt=4
IP
File type ASCII text, with very long lines (2173), with no line terminators
Hash 7812c2a717bde484a66480ef5a8be68a
025288ef25d759e8ccfa2e5854aa9f391c801f4a
4a797964a0e347c90bc3c4779e85f2c946f1b6325c878d21b22164c893c6bb10
GET /pagead/viewthroughconversion/10838597190/?random=1669344007240&cv=11&fst=1669344007240&bg=ffffff&guid=ON&async=1>m=2oab90&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=http%3A%2F%2Fpages.upwellness.com%2Fuc-i11x-fps%2F%3Foffer%3D15%26session_id%3D1023d8631c9ad2431cc56cbf4cf350%26n%3Dtune%26AFFID%3D477232%26subid%3D1_TH221124PM&tiba=Immune%2011X%20-%20UpWellness%20-%20Dr.%20Joshua%20Levitt&auid=1665624883.1669344007&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pages.upwellness.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 25 Nov 2022 02:40:08 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 998
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Fri, 25-Nov-2022 02:55:08 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
cdn.taboola.com/libtrc/unip/1225872/tfa.js
200 OK 18 kB URL HTTP/1.1 cdn.taboola.com/libtrc/unip/1225872/tfa.js
IP
File type ASCII text, with very long lines (58488)
Hash cba749de2564af41c25142b52b1a9254
e089b2dc346c754fa6e5e0e50a0345ea18451ba9
e6e99427e313b68c6d3f27864a13a23169f5fbee3f59d2f78bd097df5982864c
GET /libtrc/unip/1225872/tfa.js HTTP/1.1
Host: cdn.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pages.upwellness.com/
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 17946
x-amz-id-2: qpT2YeNsswasDSXp4oIEw2V6wynzthrbYTOC8bhFiL4qCH6hg/qqHSFkKTZ/Zrxf7zlOUwqUpsU=
x-amz-request-id: 33PYZ55ZGB9SHA15
x-amz-replication-status: COMPLETED
Last-Modified: Sun, 20 Nov 2022 11:20:49 GMT
ETag: "529c36a298268cdab3b94c05d8d39bfc"
x-amz-version-id: 1ISsJshg78FFwoPyGORj_DGaRAfZZEpP
Content-Type: application/javascript; charset=utf-8
Server: AmazonS3
Content-Encoding: gzip
Accept-Ranges: bytes
Date: Fri, 25 Nov 2022 02:40:08 GMT
Via: 1.1 varnish
Age: 0
X-Served-By: cache-bma1629-BMA
X-Cache: HIT
X-Cache-Hits: 1
X-Timer: S1669344008.254060,VS0,VE193
Cache-Control: private,max-age=14401
Vary: Accept-Encoding
abp: 80
ads.nextdoor.com/public/pixel/ndp.js
200 OK 4.0 kB URL HTTP/2 ads.nextdoor.com/public/pixel/ndp.js
IP
Hash 0330f08ae9b022660258fc9a87238309
0a1bcc50b30dc542d06fb25ef4fbae858ef81324
b2e260e78d2c0ffbf73932cb7101beab1d576303c272a125289ff4961f7f7344
GET /public/pixel/ndp.js HTTP/1.1
Host: ads.nextdoor.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pages.upwellness.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 25 Nov 2022 02:40:07 GMT
content-type: application/javascript
server: istio-envoy
last-modified: Mon, 21 Nov 2022 21:46:16 GMT
vary: Accept-Encoding
etag: W/"637bf1a8-19c7"
content-security-policy: frame-ancestors 'self' *.lightning.force.com nextdoor.com *.nextdoor.com nextdoor-test.com *.nextdoor-test.com;
content-encoding: gzip
x-envoy-upstream-service-time: 1
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 4af780570d49b327d38dc189095448e9
1dd4193a2afeb237c5e475b603b1cbd137f7f97e
f25ef2e65d3c2acbba49b5d36c2fe37f8d404fa3b0ea5cdd6c93ac1685a6129a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 02:40:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 471 B IP
Hash 670dda5fda45a89db08867e9109f65b7
2a64bc381f8e795fe7a46a98c3e8add2f1ade404
7c2085a52a32eab3f4ab73c4ab3718cf1e7d67502e83001ce45d2857b37a0755
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4334
Cache-Control: max-age=99517
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 02:40:08 GMT
Etag: "637efbd7-1d7"
Expires: Sat, 26 Nov 2022 06:18:45 GMT
Last-Modified: Thu, 24 Nov 2022 05:06:31 GMT
Server: ECS (ska/F707)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash f86429279e19a89ba7fae87ba2406b4e
abfa5369a7feb4dfebf13f5eb902c3e860976238
76d03c181e150e7e3a61bfa8489231999fb562f6cb0b382c456b9a37da1106a6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 02:40:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 34bb0e5fa5833e8a7b4d0a69564e6257
44df77bd8988136e44abd3cbead7404417a1d9e2
397ee078a4d76a1274959075c6f875a6f9ee61cce732327dddc0140816ee676d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "397EE078A4D76A1274959075C6F875A6F9EE61CCE732327DDDC0140816EE676D"
Last-Modified: Wed, 23 Nov 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7979
Expires: Fri, 25 Nov 2022 04:53:07 GMT
Date: Fri, 25 Nov 2022 02:40:08 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 34bb0e5fa5833e8a7b4d0a69564e6257
44df77bd8988136e44abd3cbead7404417a1d9e2
397ee078a4d76a1274959075c6f875a6f9ee61cce732327dddc0140816ee676d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "397EE078A4D76A1274959075C6F875A6F9EE61CCE732327DDDC0140816EE676D"
Last-Modified: Wed, 23 Nov 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=1777
Expires: Fri, 25 Nov 2022 03:09:45 GMT
Date: Fri, 25 Nov 2022 02:40:08 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 4af780570d49b327d38dc189095448e9
1dd4193a2afeb237c5e475b603b1cbd137f7f97e
f25ef2e65d3c2acbba49b5d36c2fe37f8d404fa3b0ea5cdd6c93ac1685a6129a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 02:40:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
tr.outbrain.com/cachedClickId?marketerId=00e83052a71a1dff3bc62d5d40765808fc
200 OK 56 B URL HTTP/1.1 tr.outbrain.com/cachedClickId?marketerId=00e83052a71a1dff3bc62d5d40765808fc
IP
File type ASCII text, with no line terminators
Hash 77fbe8ab311fa20557d95906363035ed
5806df80f09a37e070d5f37c49f19797c2763fd0
4fa9f4ca5bfa56b9f8467324e3654f4a717dcd40b70c05b538092d8a101b0599
GET /cachedClickId?marketerId=00e83052a71a1dff3bc62d5d40765808fc HTTP/1.1
Host: tr.outbrain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pages.upwellness.com/
HTTP/1.1 200 OK
Date: Fri, 25 Nov 2022 02:40:08 GMT
Content-Type: application/javascript
Content-Length: 56
X-TraceId: 68364726542177e58cc90f941de67f58
content-encoding: gzip
www.upwellness.com/wp-content/uploads/2016/08/apple-touch-icon-144x144.png
200 OK 8.6 kB URL HTTP/2 www.upwellness.com/wp-content/uploads/2016/08/apple-touch-icon-144x144.png
IP
File type PNG image data, 144 x 144, 8-bit colormap, non-interlaced\012- data
Hash b5dc3661602dcf8810766c01556df41b
a84687898568cf8ae0ba6c4b35886b3ee4dfbd17
91e84a8da7499abc9388eed1192e8363c8dfe07e28e6300c69ee25be1a4eb994
GET /wp-content/uploads/2016/08/apple-touch-icon-144x144.png HTTP/1.1
Host: www.upwellness.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pages.upwellness.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 25 Nov 2022 02:40:08 GMT
content-type: image/png
content-length: 8622
server: Pagely-ARES/1.10.15
x-gateway-request-id: 5458fa1374aac53d31dd06f013978d37
last-modified: Fri, 23 Sep 2022 23:01:07 GMT
etag: "21ae-5e960272eb24c"
expires: Wed, 21 Dec 2022 08:04:16 GMT
cache-control: max-age=2592000
x-gateway-cache-key: 0||https|www.upwellness.com|||/wp-content/uploads/2016/08/apple-touch-icon-144x144.png
x-gateway-cache-status: HIT
x-gateway-skip-cache: 0
accept-ranges: bytes
X-Firefox-Spdy: h2
fast.wistia.com/embed/medias/rjukmx7rqk.m3u8
200 OK 929 B URL HTTP/2 fast.wistia.com/embed/medias/rjukmx7rqk.m3u8
IP
Hash dcf5dcd0a87cc52807d42f824a7d756b
ce24f7037bfc7107abad563e3679733454d173c4
ad1d67c148d8e8ed2dfcd0ef84d834f868dd6d2ea2d91494a4d2d07da1b86681
GET /embed/medias/rjukmx7rqk.m3u8 HTTP/1.1
Host: fast.wistia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://pages.upwellness.com
Connection: keep-alive
Referer: http://pages.upwellness.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
cache-control: public, no-cache
content-type: application/x-mpegURL
etag: W/"ad1d67c148d8e8ed2dfcd0ef84d834f8"
p3p: CP="CURi ADMa DEVa IVAa IVDa CONi OUR IND DSP CAO COR"
referrer-policy: strict-origin-when-cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
x-download-options: noopen
x-permitted-cross-domain-policies: none
x-request-id: 4f3957827de5fb05ac624e9a91ff588b
x-runtime: 0.024699
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Fri, 25 Nov 2022 02:40:08 GMT
age: 37311
x-served-by: cache-iad-kjyo7100025-IAD, cache-bma1671-BMA
x-cache: HIT, HIT
x-cache-hits: 47, 1
x-timer: S1669344009.618648,VS0,VE1
vary: Accept-Encoding,X-Forwarded-Proto,X-ECMA-Override
strict-transport-security: max-age=0
x-ecma-v: modern
x-browser: firefox
x-browser-version: 105
content-length: 929
X-Firefox-Spdy: h2
fast.wistia.com/assets/images/blank.gif
200 OK 1.2 kB URL HTTP/2 fast.wistia.com/assets/images/blank.gif
IP
File type GIF image data, version 89a, 100 x 100\012- data
Hash fbdc4ed9a1e2ee4917a265306927bcf1
6d177725d8230df0457e72004080f712e26fe624
a78759ea185fd0fa42ca9be1fc5bca4d3167a2836dc6c85e479a19dbf57fe2c2
GET /assets/images/blank.gif HTTP/1.1
Host: fast.wistia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pages.upwellness.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
cache-control: max-age=315360000, public
content-type: image/gif
etag: "637e83f2-4be"
expires: Thu, 31 Dec 2037 23:55:55 GMT
last-modified: Wed, 23 Nov 2022 20:34:58 GMT
timing-allow-origin: *
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Fri, 25 Nov 2022 02:40:08 GMT
age: 108238
x-served-by: cache-iad-kiad7000052-IAD, cache-bma1671-BMA
x-cache: HIT, HIT
x-cache-hits: 44, 2146
x-timer: S1669344009.625406,VS0,VE0
vary: Accept-Encoding
strict-transport-security: max-age=0
x-ecma-v: modern
x-browser: firefox
x-browser-version: 105
content-length: 1214
X-Firefox-Spdy: h2
events.ub-analytics.com/i?stm=1669344007987&e=pv&url=http%3A%2F%2Fpages.upwellness.com%2Fuc-i11x-fps%2F%3Foffer%3D15%26session_id%3D1023d8631c9ad2431cc56cbf4cf350%26n%3Dtune%26AFFID%3D477232%26subid%3D1_TH221124PM&page=Immune%2011X%20-%20UpWellness%20-%20Dr.%20Joshua%20Levitt&tv=js-2.14.0&tna=sp-ub&aid=landing_page&p=web&tz=UTC&lang=en-US&cs=UTF-8&res=1280x1024&cd=24&eid=8eb51588-88c1-4188-a8be-02a9c804b539&dtm=1669344007985&vp=1280x939&ds=1268x10833&vid=1&sid=7c139446-bd94-4874-be7f-c1431736d1eb&duid=4f81296b-6ab4-4f45-8f42-9dc183ddb03f&uid=2c88da86-94e8-45b4-8ee9-d83a3a6c42f0&cx=eyJzY2hlbWEiOiJpZ2x1OmNvbS5zbm93cGxvd2FuYWx5dGljcy5zbm93cGxvdy9jb250ZXh0cy9qc29uc2NoZW1hLzEtMC0wIiwiZGF0YSI6W3sic2NoZW1hIjoianNfdHJhY2tlcl9jb250ZXh0X3YxLjEuanNvbiIsImRhdGEiOnsicGFnZUlkIjoiY2EyOWU3MDgtYmJjNi00ZGQyLTlmYWEtYWM4Y2Q0OTdhODE4IiwidmFyaWFudElkIjoiaCIsImV2ZW50VHlwZSI6InZpc2l0IiwiZXZlbnRNZXRhZGF0YSI6W10sInJvdXRpbmdTdHJhdGVneSI6InNpbmdsZSJ9fV19
200 OK 43 B URL HTTP/1.1 events.ub-analytics.com/i?stm=1669344007987&e=pv&url=http%3A%2F%2Fpages.upwellness.com%2Fuc-i11x-fps%2F%3Foffer%3D15%26session_id%3D1023d8631c9ad2431cc56cbf4cf350%26n%3Dtune%26AFFID%3D477232%26subid%3D1_TH221124PM&page=Immune%2011X%20-%20UpWellness%20-%20Dr.%20Joshua%20Levitt&tv=js-2.14.0&tna=sp-ub&aid=landing_page&p=web&tz=UTC&lang=en-US&cs=UTF-8&res=1280x1024&cd=24&eid=8eb51588-88c1-4188-a8be-02a9c804b539&dtm=1669344007985&vp=1280x939&ds=1268x10833&vid=1&sid=7c139446-bd94-4874-be7f-c1431736d1eb&duid=4f81296b-6ab4-4f45-8f42-9dc183ddb03f&uid=2c88da86-94e8-45b4-8ee9-d83a3a6c42f0&cx=eyJzY2hlbWEiOiJpZ2x1OmNvbS5zbm93cGxvd2FuYWx5dGljcy5zbm93cGxvdy9jb250ZXh0cy9qc29uc2NoZW1hLzEtMC0wIiwiZGF0YSI6W3sic2NoZW1hIjoianNfdHJhY2tlcl9jb250ZXh0X3YxLjEuanNvbiIsImRhdGEiOnsicGFnZUlkIjoiY2EyOWU3MDgtYmJjNi00ZGQyLTlmYWEtYWM4Y2Q0OTdhODE4IiwidmFyaWFudElkIjoiaCIsImV2ZW50VHlwZSI6InZpc2l0IiwiZXZlbnRNZXRhZGF0YSI6W10sInJvdXRpbmdTdHJhdGVneSI6InNpbmdsZSJ9fV19
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash fb02f374b8f73825415db1bccd4bd76d
b103aa629cacdd90b39538a7561da7f8e49ad73f
caa849b179befa2645a8e2c474d2e82a76777a3305315ece911013e8ee9a916c
GET /i?stm=1669344007987&e=pv&url=http%3A%2F%2Fpages.upwellness.com%2Fuc-i11x-fps%2F%3Foffer%3D15%26session_id%3D1023d8631c9ad2431cc56cbf4cf350%26n%3Dtune%26AFFID%3D477232%26subid%3D1_TH221124PM&page=Immune%2011X%20-%20UpWellness%20-%20Dr.%20Joshua%20Levitt&tv=js-2.14.0&tna=sp-ub&aid=landing_page&p=web&tz=UTC&lang=en-US&cs=UTF-8&res=1280x1024&cd=24&eid=8eb51588-88c1-4188-a8be-02a9c804b539&dtm=1669344007985&vp=1280x939&ds=1268x10833&vid=1&sid=7c139446-bd94-4874-be7f-c1431736d1eb&duid=4f81296b-6ab4-4f45-8f42-9dc183ddb03f&uid=2c88da86-94e8-45b4-8ee9-d83a3a6c42f0&cx=eyJzY2hlbWEiOiJpZ2x1OmNvbS5zbm93cGxvd2FuYWx5dGljcy5zbm93cGxvdy9jb250ZXh0cy9qc29uc2NoZW1hLzEtMC0wIiwiZGF0YSI6W3sic2NoZW1hIjoianNfdHJhY2tlcl9jb250ZXh0X3YxLjEuanNvbiIsImRhdGEiOnsicGFnZUlkIjoiY2EyOWU3MDgtYmJjNi00ZGQyLTlmYWEtYWM4Y2Q0OTdhODE4IiwidmFyaWFudElkIjoiaCIsImV2ZW50VHlwZSI6InZpc2l0IiwiZXZlbnRNZXRhZGF0YSI6W10sInJvdXRpbmdTdHJhdGVneSI6InNpbmdsZSJ9fV19 HTTP/1.1
Host: events.ub-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pages.upwellness.com/
HTTP/1.1 200 OK
Date: Fri, 25 Nov 2022 02:40:08 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID PSA OUR IND COM NAV STA"
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Server: akka-http/10.0.9
www.upwellness.com/wp-content/uploads/2015/10/favicon-152.png
200 OK 18 kB URL HTTP/2 www.upwellness.com/wp-content/uploads/2015/10/favicon-152.png
IP
File type PNG image data, 152 x 152, 8-bit/color RGBA, non-interlaced\012- data
Hash d094840fd6b5b489b25f18a22a493822
29a59e8c0250e81421609d5c7c25f20776fdaa4a
c0647c9ef6024399a19f5043445d5063bf899fcae9d33d64bb3b8b2708d28421
GET /wp-content/uploads/2015/10/favicon-152.png HTTP/1.1
Host: www.upwellness.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pages.upwellness.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 25 Nov 2022 02:40:08 GMT
content-type: image/png
content-length: 18176
server: Pagely-ARES/1.10.15
x-gateway-request-id: 244b1672466e8e49b505dad0332cc044
last-modified: Fri, 23 Sep 2022 23:00:59 GMT
etag: "4700-5e96026c123c4"
expires: Wed, 21 Dec 2022 08:04:16 GMT
cache-control: max-age=2592000
x-gateway-cache-key: 0||https|www.upwellness.com|||/wp-content/uploads/2015/10/favicon-152.png
x-gateway-cache-status: HIT
x-gateway-skip-cache: 0
accept-ranges: bytes
X-Firefox-Spdy: h2
fonts.gstatic.com/s/lato/v23/S6uyw4BMUTPHjx4wXg.woff2
200 OK 24 kB URL HTTP/2 fonts.gstatic.com/s/lato/v23/S6uyw4BMUTPHjx4wXg.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 23580, version 1.0\012- data
Hash e1b3b5908c9cf23dfb2b9c52b9a023ab
fcd4136085f2a03481d9958cc6793a5ed98e714c
918b7dc3e2e2d015c16ce08b57bcb64d2253bafc1707658f361e72865498e537
GET /s/lato/v23/S6uyw4BMUTPHjx4wXg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://pages.upwellness.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 23580
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 22 Nov 2022 17:10:21 GMT
expires: Wed, 22 Nov 2023 17:10:21 GMT
cache-control: public, max-age=31536000
age: 206987
last-modified: Tue, 26 Apr 2022 15:48:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/lato/v23/S6u_w4BMUTPHjxsI9w2_Gwft.woff2
200 OK 18 kB URL HTTP/2 fonts.gstatic.com/s/lato/v23/S6u_w4BMUTPHjxsI9w2_Gwft.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 17728, version 1.0\012- data
Hash 9d09d1df90538b11770ec5f593b6d792
6e117eeeda54f443063becf094332b362e19abb8
a961366b4346f6078cc2f164d2c019f63b37e2693f6fc93a995048a98b25c083
GET /s/lato/v23/S6u_w4BMUTPHjxsI9w2_Gwft.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://pages.upwellness.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 17728
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 23 Nov 2022 14:07:41 GMT
expires: Thu, 23 Nov 2023 14:07:41 GMT
cache-control: public, max-age=31536000
age: 131547
last-modified: Tue, 26 Apr 2022 16:10:29 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/oswald/v49/TK3iWkUHHAIjg752GT8G.woff2
200 OK 25 kB URL HTTP/2 fonts.gstatic.com/s/oswald/v49/TK3iWkUHHAIjg752GT8G.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 25372, version 1.0\012- data
Hash fe424f96cb627d8b835cb001af17f56e
c5b4368fed99812a99036fba86d01367b5549505
35c92598a5f32c018dc630f57b183b0284c211ce9c222e5b36840a62115262f1
GET /s/oswald/v49/TK3iWkUHHAIjg752GT8G.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://pages.upwellness.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 25372
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 21 Nov 2022 21:14:39 GMT
expires: Tue, 21 Nov 2023 21:14:39 GMT
cache-control: public, max-age=31536000
age: 278729
last-modified: Mon, 18 Jul 2022 19:24:05 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh6UVSwiPGQ.woff2
200 OK 23 kB URL HTTP/2 fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh6UVSwiPGQ.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 23040, version 1.0\012- data
Hash de69cf9e514df447d1b0bb16f49d2457
2ac78601179c3a63ba3f3f3081556b12ddcaf655
c447dd7677b419db7b21dbdfc6277c7816a913ffda76fd2e52702df538de0e49
GET /s/lato/v23/S6u9w4BMUTPHh6UVSwiPGQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://pages.upwellness.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 23040
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 19 Nov 2022 21:11:39 GMT
expires: Sun, 19 Nov 2023 21:11:39 GMT
cache-control: public, max-age=31536000
age: 451709
last-modified: Tue, 26 Apr 2022 15:56:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6827d82f488045e02e40d6a2fdbae4b3
4944139a4b08769511ffc6aa913857d88a0db7bc
0e4ef6ddef97ec03d43df4c0bada61d792b9f030e4d9fab5bd3cf904aeaa3bc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E4EF6DDEF97EC03D43DF4C0BADA61D792B9F030E4D9FAB5BD3CF904AEAA3BC9"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5144
Expires: Fri, 25 Nov 2022 04:05:52 GMT
Date: Fri, 25 Nov 2022 02:40:08 GMT
Connection: keep-alive
fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh50XSwiPGQ.woff2
200 OK 22 kB URL HTTP/2 fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh50XSwiPGQ.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 22504, version 1.0\012- data
Hash 1c6c65523675abc6fcd78e804325bd77
898d9808304dc157f5dcb18ca169ec6e2b96b3d7
08664859baab5ed98f0bf818ed77e38464ff1826dc6406d5ecbd651409afbd92
GET /s/lato/v23/S6u9w4BMUTPHh50XSwiPGQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://pages.upwellness.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 22504
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 22 Nov 2022 17:15:33 GMT
expires: Wed, 22 Nov 2023 17:15:33 GMT
cache-control: public, max-age=31536000
age: 206675
last-modified: Tue, 26 Apr 2022 16:04:16 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6827d82f488045e02e40d6a2fdbae4b3
4944139a4b08769511ffc6aa913857d88a0db7bc
0e4ef6ddef97ec03d43df4c0bada61d792b9f030e4d9fab5bd3cf904aeaa3bc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E4EF6DDEF97EC03D43DF4C0BADA61D792B9F030E4D9FAB5BD3CF904AEAA3BC9"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5144
Expires: Fri, 25 Nov 2022 04:05:52 GMT
Date: Fri, 25 Nov 2022 02:40:08 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6827d82f488045e02e40d6a2fdbae4b3
4944139a4b08769511ffc6aa913857d88a0db7bc
0e4ef6ddef97ec03d43df4c0bada61d792b9f030e4d9fab5bd3cf904aeaa3bc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E4EF6DDEF97EC03D43DF4C0BADA61D792B9F030E4D9FAB5BD3CF904AEAA3BC9"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5144
Expires: Fri, 25 Nov 2022 04:05:52 GMT
Date: Fri, 25 Nov 2022 02:40:08 GMT
Connection: keep-alive
fonts.gstatic.com/s/lato/v23/S6u8w4BMUTPHjxsAXC-q.woff2
200 OK 24 kB URL HTTP/2 fonts.gstatic.com/s/lato/v23/S6u8w4BMUTPHjxsAXC-q.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 24408, version 1.0\012- data
Hash efee2d080d7bebdd2e0aeb2e030813a0
f8d38f9f9584e48c2e469877ebd94232265585f1
bca1d88ada544d9c80872d4da27133fab6d347361fa26e932b47ec9559088fd0
GET /s/lato/v23/S6u8w4BMUTPHjxsAXC-q.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://pages.upwellness.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 24408
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 21 Nov 2022 20:02:02 GMT
expires: Tue, 21 Nov 2023 20:02:02 GMT
cache-control: public, max-age=31536000
age: 283086
last-modified: Tue, 26 Apr 2022 15:50:25 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6827d82f488045e02e40d6a2fdbae4b3
4944139a4b08769511ffc6aa913857d88a0db7bc
0e4ef6ddef97ec03d43df4c0bada61d792b9f030e4d9fab5bd3cf904aeaa3bc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E4EF6DDEF97EC03D43DF4C0BADA61D792B9F030E4D9FAB5BD3CF904AEAA3BC9"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5144
Expires: Fri, 25 Nov 2022 04:05:52 GMT
Date: Fri, 25 Nov 2022 02:40:08 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1bd50a26-dc90-4a0f-9ac7-e2950f1e9d5f.jpeg
200 OK 8.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1bd50a26-dc90-4a0f-9ac7-e2950f1e9d5f.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4c67bf2eb6ca2d7e2b34df1dbe8e7b36
cdacea802c72450973140387aafacae9df78b0aa
52c1b293ec45c98077953699dcc48d77d4aee2bb12f38ef21c692af9171b6db2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1bd50a26-dc90-4a0f-9ac7-e2950f1e9d5f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8275
x-amzn-requestid: 350ffdb7-723f-4dfc-95e8-e76364d1313d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cIB8xGPAoAMFbWA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637fe384-10d4c566779b9b9f4bb9112d;Sampled=0
x-amzn-remapped-date: Thu, 24 Nov 2022 21:35:00 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: nJ7Ppbn5tLf-PIzvOMM-JK3paiWilTRRs5f93VzR0dZ5XDeIGwWonw==
via: 1.1 4dde8ec6d6c12741888c2d3a059d4a2e.cloudfront.net (CloudFront), 1.1 12a392bc3a7281f8d5d4591bfadc41fc.cloudfront.net (CloudFront), 1.1 google
date: Thu, 24 Nov 2022 21:55:55 GMT
age: 17053
etag: "cdacea802c72450973140387aafacae9df78b0aa"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-i11x-fps/2aacc74c-100h_100000006b02s00f000028.png
200 OK 2.7 kB URL HTTP/1.1 d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-i11x-fps/2aacc74c-100h_100000006b02s00f000028.png
IP
File type PNG image data, 227 x 100, 8-bit colormap, non-interlaced\012- data
Hash 20b5a5469e8c66abef680db6488cccb8
ee1d4b9f7032e40713860f61d19ea931b791ba19
4bfc1ba2aaee28054ea04f0eb3a2d4d45d40d7c9409d369226277c89e4e75ade
GET /pages.upwellness.com/uc-i11x-fps/2aacc74c-100h_100000006b02s00f000028.png HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pages.upwellness.com/
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 2736
Connection: keep-alive
Date: Fri, 18 Nov 2022 17:14:09 GMT
Last-Modified: Tue, 23 Aug 2022 15:06:34 GMT
ETag: "20b5a5469e8c66abef680db6488cccb8"
Cache-Control: max-age=31557600
x-amz-version-id: YGfOExdTEhFJvbzWg97zC09myy6hfVjm
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 7a9F8eo2DuRPeihz8etUS_J4ksNYhQd3q6zuRwBriBI11GPb4asxgg==
Age: 552360
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1dd98515-d0af-440a-8f3d-4c9986928081.jpeg
200 OK 4.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1dd98515-d0af-440a-8f3d-4c9986928081.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 841a4b110022a99ddea6f7bf66df0fa1
126771b86638108050cf57c0d12faa27f80f0edb
240fbffc1f9104433297d3ff7afba2d0b58d7f1b13d9a9260a1bad25216665db
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1dd98515-d0af-440a-8f3d-4c9986928081.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4309
x-amzn-requestid: 47c2739d-73c5-4d91-914c-fe635cb09772
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b1U8xGxgIAMF-qQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63786851-6fbe19dc5c4c20dd657604e3;Sampled=0
x-amzn-remapped-date: Sat, 19 Nov 2022 05:23:29 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: j_8oVo464QMWMnmkxQJIDRhaIVmwhzCTHe4A57OdmaUr9HcyTtBUjg==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 2750b94b402c92287d764b5fa115a042.cloudfront.net (CloudFront), 1.1 google
date: Thu, 24 Nov 2022 05:04:28 GMT
age: 77740
etag: "126771b86638108050cf57c0d12faa27f80f0edb"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
connect.facebook.net/en_US/fbevents.js
200 OK 4.0 kB URL HTTP/2 connect.facebook.net/en_US/fbevents.js
IP
Hash 4006a9037ab5f28dca62b0aa7a704c41
74cb2ccd6ae38b171bfbe5a74f0eccb09aa3836b
556ae6516a1f272a96569a3637858292731a34e82672b682f6e7442ca68f4b1d
GET /en_US/fbevents.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pages.upwellness.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: application/x-javascript; charset=utf-8
content-security-policy: default-src facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com data: blob: 'self';script-src *.fbcdn.net *.facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com;connect-src *.fbcdn.net *.facebook.net wss://*.fbcdn.net attachment.fbsbx.com blob: 'self';block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: sP4Xmd11tEgtChSB24W70lOLzgUfrwHAkxelC1ciICVocSFg/EaJl4xuWbSt4qbH4br70cRc44dYipdOlCU2hg==
priority: u=3,i
content-length: 27340
x-fb-trip-id: 1679558926
date: Fri, 25 Nov 2022 02:40:08 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F31c66612-f3a0-4e62-8b93-c9f774ffc236.jpeg
200 OK 6.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F31c66612-f3a0-4e62-8b93-c9f774ffc236.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ba7b9c131ab7e5998f25b069ba3860a0
0214fc0deecb1115766802f42cfd256e3c479490
717aa23c687ccebc1b5ebbfd88d0e4fe181fef038d308231842b2b1969f3976b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F31c66612-f3a0-4e62-8b93-c9f774ffc236.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6130
x-amzn-requestid: 0ab34b27-2c6b-4a37-87ad-6fa56a265453
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cIB8wF7KIAMFjlw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637fe384-4a3d24f93ceb37d37a5ce1ee;Sampled=0
x-amzn-remapped-date: Thu, 24 Nov 2022 21:35:00 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: SHmcFNiZ97RU02VeLiHLjFynYiSuaQP8T_XKG2UaAigWXG5sYhdVLQ==
via: 1.1 1cc6ed0d2d3dd9529ce544f9dfe61a52.cloudfront.net (CloudFront), 1.1 e4d3d5aafc7d7d582423c073065ab562.cloudfront.net (CloudFront), 1.1 google
date: Thu, 24 Nov 2022 21:55:28 GMT
age: 17080
etag: "0214fc0deecb1115766802f42cfd256e3c479490"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
static.hotjar.com/c/hotjar-795540.js?sv=6
200 OK 3.2 kB URL HTTP/2 static.hotjar.com/c/hotjar-795540.js?sv=6
IP
File type ASCII text, with very long lines (5908)
Hash 0ce1c6f9c3ff6a9b78260d6483789052
d63ef21e98a5923b161c84aeee62c71d439d7240
2a50e343715b109893cb59c1bcef89fb2e1248e7d147b76972ab84f6618dcd13
GET /c/hotjar-795540.js?sv=6 HTTP/1.1
Host: static.hotjar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pages.upwellness.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
date: Fri, 25 Nov 2022 02:40:08 GMT
access-control-allow-origin: *
cache-control: max-age=60
content-encoding: br
cross-origin-resource-policy: cross-origin
etag: W/925f7d226d89ca852a6ccc68e7c3bffe
strict-transport-security: max-age=2592000; includeSubDomains
x-cache-hit: 1
x-content-type-options: nosniff
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 a6d89f7e2d55548b941f1ff5d5b3c8d4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: DSjBf7rO75NSp_jULrn2k_6C9dkHORJJmJ3cDAqQi7r8HQOu2cGtqg==
X-Firefox-Spdy: h2
d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-i11x-fps/14cede05-1bottle-immune11x_108u0eq000000000000028.png
200 OK 44 kB URL HTTP/1.1 d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-i11x-fps/14cede05-1bottle-immune11x_108u0eq000000000000028.png
IP
File type PNG image data, 318 x 530, 8-bit colormap, non-interlaced\012- data
Hash 33d2c74e52f2f97b45d35315dda127d9
32f6642f3d81412f288dcc2dddb66423737694fd
1ec66c12a51c1800d31dd44cb5d830b4c5e509691b4445927c6fb1123ae9f3cd
GET /pages.upwellness.com/uc-i11x-fps/14cede05-1bottle-immune11x_108u0eq000000000000028.png HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pages.upwellness.com/
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 44540
Connection: keep-alive
Date: Fri, 25 Nov 2022 01:25:28 GMT
Last-Modified: Tue, 22 Nov 2022 20:57:40 GMT
ETag: "33d2c74e52f2f97b45d35315dda127d9"
Cache-Control: max-age=31557600
x-amz-version-id: bhvd_dCDSEgByy9bHklhTrVIawVK0sid
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 227a1815a1677b9cf6dd587e443000b8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: AG0Ka1DlYFaz7Y_9y6JpnnHgM6aIhkMkPMDnFGTTOArMXib0bFfeQg==
Age: 4481
d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-i11x-fps/86ba562c-check-1_100x017000000000000028.png
200 OK 611 B URL HTTP/1.1 d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-i11x-fps/86ba562c-check-1_100x017000000000000028.png
IP
File type PNG image data, 33 x 43, 8-bit colormap, non-interlaced\012- data
Hash 8bee8119a1217eb0cc7d2743043c1ef2
f5ee0f5f8ecb407e12bad2bbce9c15b4a011102f
dcb8490278af52f6f2b072d7a31d079a0d47ebcca9857a5231aff930afc93bf8
GET /pages.upwellness.com/uc-i11x-fps/86ba562c-check-1_100x017000000000000028.png HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pages.upwellness.com/
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 611
Connection: keep-alive
Date: Fri, 18 Nov 2022 17:14:09 GMT
Last-Modified: Tue, 23 Aug 2022 15:06:34 GMT
ETag: "8bee8119a1217eb0cc7d2743043c1ef2"
Cache-Control: max-age=31557600
x-amz-version-id: 9YW0mDFN6bzO5l24d0mM1LWDLzuHzQMM
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: zsPgbmtT7pttKCHlV8kTipdKAJ5bqRSqPgJ78bcJwjJPiNH_8tlhjA==
Age: 552360
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2302d358-ba65-4bf0-9d74-b5fb532a1d52.jpeg
200 OK 6.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2302d358-ba65-4bf0-9d74-b5fb532a1d52.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1adbf0cd373a4c06caa71eac14e1286c
236199a790f16dcf96dba80b9945836b37e3c2eb
767fd66cf0751dd80b2453588f9363fac7d9637da3dc9098d25fb65699ca8c5e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2302d358-ba65-4bf0-9d74-b5fb532a1d52.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6590
x-amzn-requestid: 5d8b02c4-673a-4c77-8f24-498d9b8a28ff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cIB8zGeAIAMF4HA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637fe384-661ce3991caf87e8558158c3;Sampled=0
x-amzn-remapped-date: Thu, 24 Nov 2022 21:35:01 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 4iFMdgZvXpHdbGKY-3exNXsKVn2FuWGQg70mCqzGLSHk_bSTiXSCxA==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 760139201585481b26f947c5f776103a.cloudfront.net (CloudFront), 1.1 google
date: Thu, 24 Nov 2022 22:01:38 GMT
age: 16710
etag: "236199a790f16dcf96dba80b9945836b37e3c2eb"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-i11x-fps/552e04ed-3c3c3c-grey-wavebg_11hc0sl000000000000028.png
200 OK 12 kB URL HTTP/1.1 d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-i11x-fps/552e04ed-3c3c3c-grey-wavebg_11hc0sl000000000000028.png
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6673267df195141739d1018c17101368
b80047da428636adb7027f12718c8d11bd461da4
de30af07eed7326a1326c831e04727649a112c20d0c485a7e973edd96f91bfaa
GET /pages.upwellness.com/uc-i11x-fps/552e04ed-3c3c3c-grey-wavebg_11hc0sl000000000000028.png HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pages.upwellness.com/
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 102599
Connection: keep-alive
Date: Fri, 18 Nov 2022 22:53:29 GMT
Last-Modified: Tue, 23 Aug 2022 15:06:34 GMT
ETag: "fea0e81269ca004b1589035292ada1c5"
Cache-Control: max-age=31557600
x-amz-version-id: i1lWL9K1u1LNuZ3RPxklQCz9FR.hgIie
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: UkuLPV7lMpMaFWi7iN4cABjuYGiZpHfth71ti3FelAK-LbqqFc1dXg==
Age: 532000
d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-i11x-fps/570b4015-madeintheusa-icon-02_103a034000000000000028.png
200 OK 3.9 kB URL HTTP/1.1 d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-i11x-fps/570b4015-madeintheusa-icon-02_103a034000000000000028.png
IP
File type PNG image data, 118 x 112, 8-bit colormap, non-interlaced\012- data
Hash 27de35681f56b8461fcf4d23a23e59d4
461d7f49f44475773bad275060f0ace9fa2f6790
a9eafb27341f7154276f11721ed7c94eb8750a0f231f12992679321eec3e56ed
GET /pages.upwellness.com/uc-i11x-fps/570b4015-madeintheusa-icon-02_103a034000000000000028.png HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pages.upwellness.com/
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 3861
Connection: keep-alive
Date: Fri, 25 Nov 2022 01:25:28 GMT
Last-Modified: Tue, 22 Nov 2022 20:57:40 GMT
ETag: "27de35681f56b8461fcf4d23a23e59d4"
Cache-Control: max-age=31557600
x-amz-version-id: GDouHAl8ZDlxzsweOZy200L4SfZ00IdS
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: cAN6W3t7YyDsHcIIXrL43duJdzNjQn5GQUt3dJbMolTr2jLuNwrjtg==
Age: 4481
tr.outbrain.com/unifiedPixel?marketerId=00e83052a71a1dff3bc62d5d40765808fc&apiObjVersion=1.1&obtpVersion=2.0.4&name=PAGE_VIEW&dl=http%3A%2F%2Fpages.upwellness.com%2Fuc-i11x-fps%2F%3Foffer%3D15%26session_id%3D1023d8631c9ad2431cc56cbf4cf350%26n%3Dtune%26AFFID%3D477232%26subid%3D1_TH221124PM&optOut=false&bust=01924232097219427&referrer=
200 OK 60 B URL HTTP/1.1 tr.outbrain.com/unifiedPixel?marketerId=00e83052a71a1dff3bc62d5d40765808fc&apiObjVersion=1.1&obtpVersion=2.0.4&name=PAGE_VIEW&dl=http%3A%2F%2Fpages.upwellness.com%2Fuc-i11x-fps%2F%3Foffer%3D15%26session_id%3D1023d8631c9ad2431cc56cbf4cf350%26n%3Dtune%26AFFID%3D477232%26subid%3D1_TH221124PM&optOut=false&bust=01924232097219427&referrer=
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash fb0fc5c090282e372b8bf8ff13ae3ee2
2de3834253ece606ce4d2a6f10a59654b6fa378b
90a8ffa59ad6227daafa10083d4cff2e9b295c9c82135b5f5cedd65b2e7c8ceb
GET /unifiedPixel?marketerId=00e83052a71a1dff3bc62d5d40765808fc&apiObjVersion=1.1&obtpVersion=2.0.4&name=PAGE_VIEW&dl=http%3A%2F%2Fpages.upwellness.com%2Fuc-i11x-fps%2F%3Foffer%3D15%26session_id%3D1023d8631c9ad2431cc56cbf4cf350%26n%3Dtune%26AFFID%3D477232%26subid%3D1_TH221124PM&optOut=false&bust=01924232097219427&referrer= HTTP/1.1
Host: tr.outbrain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pages.upwellness.com/
HTTP/1.1 200 OK
Date: Fri, 25 Nov 2022 02:40:08 GMT
Content-Type: image/gif;
Content-Length: 60
Cache-Control: no-cache
X-TraceId: c36be661065ed004c3ec837b14056267
content-encoding: gzip
d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-i11x-fps/93aefdb8-freeshipping-icon_103a033000000000000028.png
200 OK 3.8 kB URL HTTP/1.1 d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-i11x-fps/93aefdb8-freeshipping-icon_103a033000000000000028.png
IP
File type PNG image data, 118 x 111, 8-bit colormap, non-interlaced\012- data
Hash d8fccb8e5f9e5558e179a929da1d9f51
cc303b9ef9428a7784c524caf99e62c0ef83c6de
2f8ae5e2de6466393a936586d70d94bd0d0c05a613129a99b2c8d4c2b768f825
GET /pages.upwellness.com/uc-i11x-fps/93aefdb8-freeshipping-icon_103a033000000000000028.png HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pages.upwellness.com/
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 3794
Connection: keep-alive
Date: Fri, 18 Nov 2022 17:14:09 GMT
Last-Modified: Tue, 23 Aug 2022 15:06:34 GMT
ETag: "d8fccb8e5f9e5558e179a929da1d9f51"
Cache-Control: max-age=31557600
x-amz-version-id: XchGbDxiV9cPp8c_M5yhv33aVs7CthWV
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: IUdRfJVS1gctt4L2xUhS2m8km0QKsU5N_BXZERrtaZb-0hzdeo2yoA==
Age: 552360
d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-i11x-fps/e9db0b2f-icons-03_103a034000000000000028.png
200 OK 3.9 kB URL HTTP/1.1 d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-i11x-fps/e9db0b2f-icons-03_103a034000000000000028.png
IP
File type PNG image data, 118 x 112, 8-bit colormap, non-interlaced\012- data
Hash 90d6f71b63565a99667ff59f0b3694e8
f577f41eca7bf764abbd0dfdbd7b0385473d998a
c020ba4565964057cdeef2d71c93cecbd5430f49706c44ca562dbbf21c3b22a4
GET /pages.upwellness.com/uc-i11x-fps/e9db0b2f-icons-03_103a034000000000000028.png HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pages.upwellness.com/
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 3934
Connection: keep-alive
Date: Fri, 18 Nov 2022 17:14:09 GMT
Last-Modified: Tue, 23 Aug 2022 15:06:34 GMT
ETag: "90d6f71b63565a99667ff59f0b3694e8"
Cache-Control: max-age=31557600
x-amz-version-id: nD8Be80lggOdeDcRQq77XInQa7GPo9NE
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 4ay8Q9hyBLNOBS8Fc_qevDoWF_JZxni4ENiQ38XwK-rumyUJ86Rxvw==
Age: 552360
d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-i11x-fps/b8c51d05-lr-adobestock-331966547-converted-1_10as0d9000000000000028.png
200 OK 17 kB URL HTTP/1.1 d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-i11x-fps/b8c51d05-lr-adobestock-331966547-converted-1_10as0d9000000000000028.png
IP
File type PNG image data, 388 x 477, 8-bit colormap, non-interlaced\012- data
Hash 8b951a8b3b09b45b610cd97b77562748
6064a32836593e1d6aeb8c98fe1116736d28083a
8f4020cf8cba727ee2fc9374c472d3203155bca766eb553f4540375a96e3ae4f
GET /pages.upwellness.com/uc-i11x-fps/b8c51d05-lr-adobestock-331966547-converted-1_10as0d9000000000000028.png HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pages.upwellness.com/
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 17294
Connection: keep-alive
Date: Fri, 18 Nov 2022 17:14:09 GMT
Last-Modified: Tue, 23 Aug 2022 15:06:34 GMT
ETag: "8b951a8b3b09b45b610cd97b77562748"
Cache-Control: max-age=31557600
x-amz-version-id: MYAspyYwmrMlF9jaL.yAkcSJsc0ZaMaR
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 1_uLKIFegCPnrxjLinaIp8pDz96ZdaZiBGQd2hneLYAyVfO24o8ghg==
Age: 552360
d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-i11x-fps/56f40964-lr-adobestock-216305168-converted-_109j0h107x0ez00t00t028.png
200 OK 13 kB URL HTTP/1.1 d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-i11x-fps/56f40964-lr-adobestock-216305168-converted-_109j0h107x0ez00t00t028.png
IP
File type PNG image data, 285 x 539, 8-bit colormap, non-interlaced\012- data
Hash ca5f710fcd418c3169548d2be93fa5a2
39fc5190c836155017ab961f7e0810a4b7bdd6cd
f8f2cfcc5c85a0fc36746143734fa44b641b83c25f49cccd708e9bde498149cb
GET /pages.upwellness.com/uc-i11x-fps/56f40964-lr-adobestock-216305168-converted-_109j0h107x0ez00t00t028.png HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pages.upwellness.com/
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 13342
Connection: keep-alive
Date: Fri, 18 Nov 2022 17:14:09 GMT
Last-Modified: Tue, 23 Aug 2022 15:06:34 GMT
ETag: "ca5f710fcd418c3169548d2be93fa5a2"
Cache-Control: max-age=31557600
x-amz-version-id: c0ak8Hue99WepgoJQX_bHKyceSJXbb.i
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 227a1815a1677b9cf6dd587e443000b8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: tlbDajGVOFpXBVnvyMsdVY9paDJ42H6u1TxhKI5RBXtmnx9BhuDBcQ==
Age: 552360
s.yimg.com/wi/config/10056129.json
200 OK 46 B URL HTTP/2 s.yimg.com/wi/config/10056129.json
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash fc5f6676b4f2531b36b8c7120da6ecca
e7ddbe9b016bc7594e9d5f3a7bf960b56226d5de
53e808254e77628c2ca0b926487688a3d92f2b145b6b2aac4d7b425a34f22f85
GET /wi/config/10056129.json HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://pages.upwellness.com
Connection: keep-alive
Referer: http://pages.upwellness.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: T1EIW3PR4N+PsmCrbe4YeaDdjYgdKUW61JyUxU0iBq+dmNTGKOW8JFc+HumFXj8aXI1hEzLpqz8=
x-amz-request-id: RA8JCJ8B3F2XYXXW
date: Thu, 24 Nov 2022 05:05:14 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method
last-modified: Tue, 27 Sep 2022 22:00:05 GMT
x-amz-expiration: expiry-date="Thu, 02 Nov 2023 00:00:00 GMT", rule-id="oath-standard-lifecycle"
x-amz-server-side-encryption: AES256
x-amz-version-id: 2rRdRVYlbk84_TZOhKVDmB8X1gW3WGzs
accept-ranges: bytes
content-type: application/json
server: ATS
content-length: 46
referrer-policy: no-referrer-when-downgrade
etag: "fc5f6676b4f2531b36b8c7120da6ecca"
age: 77695
strict-transport-security: max-age=15552000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-28307243-3&cid=1974600337.1669344008&jid=1760242469&gjid=2111075862&_gid=1125369768.1669344008&_u=YGBAiEABBAAAAEAAI~&z=1740218995
200 OK 4 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-28307243-3&cid=1974600337.1669344008&jid=1760242469&gjid=2111075862&_gid=1125369768.1669344008&_u=YGBAiEABBAAAAEAAI~&z=1740218995
IP
File type ASCII text, with no line terminators
Hash 48c0473b7821185d937e685216e2168b
3743e47f8a429a5e87b86cb582d78940733d9d2e
570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-28307243-3&cid=1974600337.1669344008&jid=1760242469&gjid=2111075862&_gid=1125369768.1669344008&_u=YGBAiEABBAAAAEAAI~&z=1740218995 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: http://pages.upwellness.com
Connection: keep-alive
Referer: http://pages.upwellness.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: http://pages.upwellness.com
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Fri, 25 Nov 2022 02:40:08 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
bat.bing.com/p/action/27015508.js
204 No Content 0 B URL HTTP/2 bat.bing.com/p/action/27015508.js
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /p/action/27015508.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pages.upwellness.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
cache-control: private,max-age=1800
set-cookie: MUID=114CB9A128B862322ADCABC6294D6354; domain=.bing.com; expires=Wed, 20-Dec-2023 02:40:08 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 6CC1DB4E3D8E44AA90A9FCC460DE11B0 Ref B: OSL30EDGE0518 Ref C: 2022-11-25T02:40:08Z
date: Fri, 25 Nov 2022 02:40:08 GMT
X-Firefox-Spdy: h2
d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-i11x-fps/79158344-pieceofmind-icon_1033033000000000000028.png
200 OK 2.4 kB URL HTTP/1.1 d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-i11x-fps/79158344-pieceofmind-icon_1033033000000000000028.png
IP
File type PNG image data, 111 x 111, 8-bit colormap, non-interlaced\012- data
Hash 192c9168827beb2b23d6e5adb9d70535
d7c362374727a35cd6d23ab1fc300453c71d2309
5bfc4faad49730b7aa96ef631ff237c0d1d5d5b785f2b6990035da9ed40efd50
GET /pages.upwellness.com/uc-i11x-fps/79158344-pieceofmind-icon_1033033000000000000028.png HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pages.upwellness.com/
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 2356
Connection: keep-alive
Date: Fri, 18 Nov 2022 17:14:09 GMT
Last-Modified: Tue, 23 Aug 2022 15:06:34 GMT
ETag: "192c9168827beb2b23d6e5adb9d70535"
Cache-Control: max-age=31557600
x-amz-version-id: uuxSkRq_ninNzU9mG6iGh1OhBELsYVar
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: XD4uTf2OI56y76Ww6uQLd_opcZlA-lGHg8O_cgLhAB4IbqcvK5vXdQ==
Age: 552360
bat.bing.com/action/0?ti=27015508&Ver=2&mid=2cc8c09e-66d4-4f28-8ef1-3947d93f98e0&sid=798637a06c6a11eda224a3beafdeff12&vid=798648406c6a11ed935d43cff689c4c6&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=Immune%2011X%20-%20UpWellness%20-%20Dr.%20Joshua%20Levitt&p=http%3A%2F%2Fpages.upwellness.com%2Fuc-i11x-fps%2F%3Foffer%3D15%26session_id%3D1023d8631c9ad2431cc56cbf4cf350%26n%3Dtune%26AFFID%3D477232%26subid%3D1_TH221124PM&r=<=1499&evt=pageLoad&sv=1&rn=447457
204 No Content 0 B URL HTTP/2 bat.bing.com/action/0?ti=27015508&Ver=2&mid=2cc8c09e-66d4-4f28-8ef1-3947d93f98e0&sid=798637a06c6a11eda224a3beafdeff12&vid=798648406c6a11ed935d43cff689c4c6&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=Immune%2011X%20-%20UpWellness%20-%20Dr.%20Joshua%20Levitt&p=http%3A%2F%2Fpages.upwellness.com%2Fuc-i11x-fps%2F%3Foffer%3D15%26session_id%3D1023d8631c9ad2431cc56cbf4cf350%26n%3Dtune%26AFFID%3D477232%26subid%3D1_TH221124PM&r=<=1499&evt=pageLoad&sv=1&rn=447457
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /action/0?ti=27015508&Ver=2&mid=2cc8c09e-66d4-4f28-8ef1-3947d93f98e0&sid=798637a06c6a11eda224a3beafdeff12&vid=798648406c6a11ed935d43cff689c4c6&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=Immune%2011X%20-%20UpWellness%20-%20Dr.%20Joshua%20Levitt&p=http%3A%2F%2Fpages.upwellness.com%2Fuc-i11x-fps%2F%3Foffer%3D15%26session_id%3D1023d8631c9ad2431cc56cbf4cf350%26n%3Dtune%26AFFID%3D477232%26subid%3D1_TH221124PM&r=<=1499&evt=pageLoad&sv=1&rn=447457 HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pages.upwellness.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
cache-control: no-cache, must-revalidate
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
set-cookie: MUID=0464CAE44CE0606306C9D8834D156147; domain=.bing.com; expires=Wed, 20-Dec-2023 02:40:08 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 99E11711BE0545CFA024FE6D127823E7 Ref B: OSL30EDGE0518 Ref C: 2022-11-25T02:40:08Z
date: Fri, 25 Nov 2022 02:40:08 GMT
X-Firefox-Spdy: h2
d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-i11x-fps/43d58b63-inflammation-icon_1033033000000000000028.png
200 OK 1.7 kB URL HTTP/1.1 d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-i11x-fps/43d58b63-inflammation-icon_1033033000000000000028.png
IP
File type PNG image data, 111 x 111, 8-bit colormap, non-interlaced\012- data
Hash eb0061d58eab6b7fbd7dcfda282b7301
e6202e14a7f9e468d8c98583284a1a5658c86af3
b25f6a979763d093294395d25726ad10a6331a95fbf0200bd4322512201e3da2
GET /pages.upwellness.com/uc-i11x-fps/43d58b63-inflammation-icon_1033033000000000000028.png HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pages.upwellness.com/
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 1681
Connection: keep-alive
Date: Fri, 25 Nov 2022 01:25:28 GMT
Last-Modified: Tue, 22 Nov 2022 20:57:40 GMT
ETag: "eb0061d58eab6b7fbd7dcfda282b7301"
Cache-Control: max-age=31557600
x-amz-version-id: lNtJ8BY6lj0EUZgAjqhXZr053CW4rJbi
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: bGrSFaEugjGCbRrg3hYzEJm83tB-1y_0cw8wMHXiKxswzjQ0EwgY2g==
Age: 4481
d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-i11x-fps/bc066089-enhanceinnateimmunity-icon_1033033000000000000028.png
200 OK 2.4 kB URL HTTP/1.1 d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-i11x-fps/bc066089-enhanceinnateimmunity-icon_1033033000000000000028.png
IP
File type PNG image data, 111 x 111, 8-bit colormap, non-interlaced\012- data
Hash 7ad3440249cdb5f35dc815a11ea613f3
16578e299781cb19bcf01064d8d7d4ae74185665
755b3393e9f4098c620279b7798863946c6254c5d550c71284d55c7acea74965
GET /pages.upwellness.com/uc-i11x-fps/bc066089-enhanceinnateimmunity-icon_1033033000000000000028.png HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pages.upwellness.com/
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 2351
Connection: keep-alive
Date: Fri, 25 Nov 2022 01:25:28 GMT
Last-Modified: Tue, 22 Nov 2022 20:57:41 GMT
ETag: "7ad3440249cdb5f35dc815a11ea613f3"
Cache-Control: max-age=31557600
x-amz-version-id: S.7X5VopkcybnPJa4PWLOlsgFlJ_qi4v
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: jlyqTFpcwMlWCDfXbcSrH9NzhIg2PVjtx4n04KaV-hzC4pt-ulyLmg==
Age: 4481
d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-i11x-fps/b9971e94-immuneprotection-icon-01_1033032000000000000028.png
200 OK 1.8 kB URL HTTP/1.1 d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-i11x-fps/b9971e94-immuneprotection-icon-01_1033032000000000000028.png
IP
File type PNG image data, 111 x 110, 8-bit colormap, non-interlaced\012- data
Hash 145efe527292dfdcdbb4e05463eae7df
cdfdc680112d1d0fe562d77ea349721a7293c5f9
84ca6926b16bc0e43451bb954a44ffb6860a196d922d737d25b67296df98e291
GET /pages.upwellness.com/uc-i11x-fps/b9971e94-immuneprotection-icon-01_1033032000000000000028.png HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pages.upwellness.com/
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 1807
Connection: keep-alive
Date: Fri, 25 Nov 2022 01:25:28 GMT
Last-Modified: Tue, 22 Nov 2022 20:57:41 GMT
ETag: "145efe527292dfdcdbb4e05463eae7df"
Cache-Control: max-age=31557600
x-amz-version-id: 8GeEsvePEPSQCoIdXAdDEoIm8LOLxvlm
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: FlgTVhAQHleIGrbcxw8R7gMYEM5wUTXao6gq97JOiBBO4lM-PXEYKA==
Age: 4481
d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-i11x-fps/55668209-repaircells-icon_1033033000000000000028.png
200 OK 2.2 kB URL HTTP/1.1 d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-i11x-fps/55668209-repaircells-icon_1033033000000000000028.png
IP
File type PNG image data, 111 x 111, 8-bit colormap, non-interlaced\012- data
Hash 243392b069a22b1b83de730d8c156bfb
0dda143a4e00ac541b2532b17e09dc80efdb14c8
deb2cc1d9d1ccfba8c95a6a96153fc7de2ec0345a29c899eeb000cc4d6a2c853
GET /pages.upwellness.com/uc-i11x-fps/55668209-repaircells-icon_1033033000000000000028.png HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pages.upwellness.com/
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 2222
Connection: keep-alive
Date: Fri, 18 Nov 2022 17:14:09 GMT
Last-Modified: Tue, 23 Aug 2022 15:06:34 GMT
ETag: "243392b069a22b1b83de730d8c156bfb"
Cache-Control: max-age=31557600
x-amz-version-id: hqUY.g9DKbae1m29sfbIgkz.uv6Ry5fU
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: El4RAcTCPrcFcb-cyxR_Q2iSz3YtDGXuDHwajKGrpyhNCnrF1AJXFA==
Age: 552361
d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-i11x-fps/7edea098-logofinal_104601o000000000000028.png
200 OK 3.8 kB URL HTTP/1.1 d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-i11x-fps/7edea098-logofinal_104601o000000000000028.png
IP
File type PNG image data, 150 x 60, 8-bit colormap, non-interlaced\012- data
Hash 9d3d4d4d37e8a6d40d89093b04d1f218
35aa1078346b6cbaeab5b0593ec5b1230c4c8a85
3236f586f49cb7afe68b95093ada6baada007db3ed31fed4741c52eeb868cec7
GET /pages.upwellness.com/uc-i11x-fps/7edea098-logofinal_104601o000000000000028.png HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pages.upwellness.com/
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 3764
Connection: keep-alive
Date: Fri, 18 Nov 2022 17:14:09 GMT
Last-Modified: Tue, 23 Aug 2022 15:06:34 GMT
ETag: "9d3d4d4d37e8a6d40d89093b04d1f218"
Cache-Control: max-age=31557600
x-amz-version-id: 726stpQexZN6egOFkrEHqtLAqZ_9lsAv
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: Ma4hztEGjkqXhWfKffyYZWsE9nCvbPorrR_jmlVpapPiyk6AQe_KOw==
Age: 552361
d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-i11x-fps/7f01bac7-five-stars-original_104q01e000000000000028.png
200 OK 1.1 kB URL HTTP/1.1 d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-i11x-fps/7f01bac7-five-stars-original_104q01e000000000000028.png
IP
File type PNG image data, 170 x 50, 8-bit colormap, non-interlaced\012- data
Hash 5533b29f0f4f9e9e7f7fb99932f7464e
f2e6582ffa38dfc584d6f8a646ecdc66b6748e91
0b69bb2edf72a370aafdd55dbf089c146b2ccc12cd81d9db7359bd703a6f7b72
GET /pages.upwellness.com/uc-i11x-fps/7f01bac7-five-stars-original_104q01e000000000000028.png HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pages.upwellness.com/
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 1117
Connection: keep-alive
Date: Sun, 20 Nov 2022 20:10:25 GMT
Last-Modified: Tue, 23 Aug 2022 15:06:34 GMT
ETag: "5533b29f0f4f9e9e7f7fb99932f7464e"
Cache-Control: max-age=31557600
x-amz-version-id: fJE8EQ_a1XHuQeP60W6ztiGj9_sXGU6W
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 227a1815a1677b9cf6dd587e443000b8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: BKawhj4k6KY5F5CIDaxpEmXOAlw86GNMOWNWYv3fbpDjhZVdGXIgkw==
Age: 368985
d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-i11x-fps/da253d5f-orange-fb7f07-circle-extracted-drjosh-1_10en0f7000000000000028.png
200 OK 73 kB URL HTTP/1.1 d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-i11x-fps/da253d5f-orange-fb7f07-circle-extracted-drjosh-1_10en0f7000000000000028.png
IP
File type PNG image data, 527 x 547, 8-bit colormap, non-interlaced\012- data
Hash 39d2bf429da52b4bc87df54ed5cfd91f
3eface2593a9e5c00a464d23794d50691c63fe2f
849c841a6777a9958cd7afbcc045ceabb8a4710e79ed4b0ab00fe27761fbcbcd
GET /pages.upwellness.com/uc-i11x-fps/da253d5f-orange-fb7f07-circle-extracted-drjosh-1_10en0f7000000000000028.png HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pages.upwellness.com/
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 72764
Connection: keep-alive
Date: Fri, 18 Nov 2022 17:14:09 GMT
Last-Modified: Tue, 23 Aug 2022 15:06:34 GMT
ETag: "39d2bf429da52b4bc87df54ed5cfd91f"
Cache-Control: max-age=31557600
x-amz-version-id: xGgL4ri2FdMF0cY38EDXBbv_A.Tb7uCN
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: U6yiKZQS6k3dmai2WYH1VI8Ro2UHTzzGvqE0H97GBQ4Owm3yIgMASw==
Age: 552361
s.yimg.com/wi/config/10175858.json
200 OK 46 B URL HTTP/2 s.yimg.com/wi/config/10175858.json
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 7ad716787c5ee7f50ab6806a8dfac76d
31d18a36b7472a44913f9871c1ea0d3530f17060
abfa88f1779dab4ebc144e49e4ed3b01567d93441a93dd09ed0099652aa08a2e
GET /wi/config/10175858.json HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://pages.upwellness.com
Connection: keep-alive
Referer: http://pages.upwellness.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: p53r6xZEnLMVqqOiN2dX+B8ugzFUpZxjFCFHKbfk/qOck5g+8IcGL333R05tyaMcwKPZKgJOh54=
x-amz-request-id: Z17XQ5FQ9ERCS51D
date: Fri, 25 Nov 2022 02:40:09 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method
last-modified: Fri, 14 Jan 2022 20:54:46 GMT
x-amz-expiration: expiry-date="Sun, 19 Feb 2023 00:00:00 GMT", rule-id="oath-standard-lifecycle"
etag: "7ad716787c5ee7f50ab6806a8dfac76d"
x-amz-server-side-encryption: AES256
x-amz-version-id: fa2aBktS.tlgTipU0DLTD9VeWF6_YTMO
accept-ranges: bytes
content-type: application/octet-stream
server: ATS
content-length: 46
referrer-policy: no-referrer-when-downgrade
age: 1
strict-transport-security: max-age=15552000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-i11x-fps/29a1276b-whitebloodcells-icon_1033033000000000000028.png
200 OK 2.1 kB URL HTTP/1.1 d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-i11x-fps/29a1276b-whitebloodcells-icon_1033033000000000000028.png
IP
File type PNG image data, 111 x 111, 8-bit colormap, non-interlaced\012- data
Hash e083017a38528016431cc614775d1e79
88e058cd4882bb0ce492fcf006d18fdf5a16a0ee
d8198ec4fa67f9e2df1b66e7c21f74e018093e45b2b84b66c2d01a899f45ebca
GET /pages.upwellness.com/uc-i11x-fps/29a1276b-whitebloodcells-icon_1033033000000000000028.png HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pages.upwellness.com/
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 2120
Connection: keep-alive
Date: Fri, 18 Nov 2022 17:14:09 GMT
Last-Modified: Tue, 23 Aug 2022 15:06:34 GMT
ETag: "e083017a38528016431cc614775d1e79"
Cache-Control: max-age=31557600
x-amz-version-id: .G0ziNI1d4HBS6DG9hpKc0A3zeosmWBP
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: FjYSc-FsXacGIxR6GcYgkstNI4EY81_Dtjl-qViMU0h-mHmJpSmKRA==
Age: 552361
d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-i11x-fps/7be0d590-freeradical-icon_1033033000000000000028.png
200 OK 3.0 kB URL HTTP/1.1 d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-i11x-fps/7be0d590-freeradical-icon_1033033000000000000028.png
IP
File type PNG image data, 111 x 111, 8-bit colormap, non-interlaced\012- data
Hash d930fa99dbe487ada19a1c5184df19b0
e92d1969b1096a49d28d481e6115bbc328ddc434
37ade000a9e389e3f3075b8e915fdb623ad89fcc0b37440ef7e4f1289c80881f
GET /pages.upwellness.com/uc-i11x-fps/7be0d590-freeradical-icon_1033033000000000000028.png HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pages.upwellness.com/
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 2955
Connection: keep-alive
Date: Fri, 18 Nov 2022 17:14:09 GMT
Last-Modified: Tue, 23 Aug 2022 15:06:34 GMT
ETag: "d930fa99dbe487ada19a1c5184df19b0"
Cache-Control: max-age=31557600
x-amz-version-id: 97VjmzGsVU7PSO8TJ331arV8PefQe.Co
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: p70Q4YUSyiNarT-ijAa4KHv0iputQ-wBcP8tIg1KWz4uSmkaQyuK9g==
Age: 552361
d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-i11x-fps/88cce07a-adobestock-263472526-1_108g0co04g04g01z00b01o.jpeg
200 OK 4.1 kB URL HTTP/1.1 d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-i11x-fps/88cce07a-adobestock-263472526-1_108g0co04g04g01z00b01o.jpeg
IP
File type JPEG image data, baseline, precision 8, 160x160, components 3\012- data
Hash 26bc89175a66fb307fc32e51f68b9600
94349784bc9c3cb34431ef6d40851ae16409fbe8
fe352f9a2cf3b4058251d48d008b75cd2131ef71f8a493445fe2b7f01594e737
GET /pages.upwellness.com/uc-i11x-fps/88cce07a-adobestock-263472526-1_108g0co04g04g01z00b01o.jpeg HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pages.upwellness.com/
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 4101
Connection: keep-alive
Date: Fri, 18 Nov 2022 17:14:09 GMT
Last-Modified: Tue, 23 Aug 2022 15:06:34 GMT
ETag: "26bc89175a66fb307fc32e51f68b9600"
Cache-Control: max-age=31557600
x-amz-version-id: 9_llAresM2EtUPm86QoVb9kxLk_qETrf
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: HKfjnOwlPyoZap-gW9X8c_LJ231RZipGUxMqI5Q2eD3MWjkEdz2gmw==
Age: 552361
d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-i11x-fps/086fdb9a-lr-adobestock-288564120-converted-1-1_10cp0cp000000000000028.png
200 OK 11 kB URL HTTP/1.1 d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-i11x-fps/086fdb9a-lr-adobestock-288564120-converted-1-1_10cp0cp000000000000028.png
IP
File type PNG image data, 457 x 457, 8-bit colormap, non-interlaced\012- data
Hash 2086d9740b1a0e4760c710553e442a48
8dcac71a36ee56f989d9371ea40990fc6941cfba
67e129935a120c00d947edfc3b8200d9384e84e633b07ace0a93bf59ad3a0460
GET /pages.upwellness.com/uc-i11x-fps/086fdb9a-lr-adobestock-288564120-converted-1-1_10cp0cp000000000000028.png HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pages.upwellness.com/
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 11180
Connection: keep-alive
Date: Fri, 18 Nov 2022 17:14:09 GMT
Last-Modified: Tue, 23 Aug 2022 15:06:34 GMT
ETag: "2086d9740b1a0e4760c710553e442a48"
Cache-Control: max-age=31557600
x-amz-version-id: tEzjrRK5efrk1YnS2cfeLNgOoNC0RK_X
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: uBWSg_YPoL6Xv9pXvbGRZ2KbxTbLppwKySNPNj6Oroh9jXGa21njJg==
Age: 552361
d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-i11x-fps/bcd661cf-adobestock-273897943-converted-_10ab05z04g04g02y00001o.jpg
200 OK 1.9 kB URL HTTP/1.1 d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-i11x-fps/bcd661cf-adobestock-273897943-converted-_10ab05z04g04g02y00001o.jpg
IP
File type JPEG image data, baseline, precision 8, 160x160, components 3\012- data
Hash 4033d3a30dab565d618a687b1cdbb207
1be654b83a587e16febba15870d129ee25b31b07
839d5c7a9825bd420526d8628b1f3879660af45ba3aa3dc19db05b493c9a181b
GET /pages.upwellness.com/uc-i11x-fps/bcd661cf-adobestock-273897943-converted-_10ab05z04g04g02y00001o.jpg HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pages.upwellness.com/
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 1911
Connection: keep-alive
Date: Fri, 18 Nov 2022 17:14:09 GMT
Last-Modified: Tue, 23 Aug 2022 15:06:34 GMT
ETag: "4033d3a30dab565d618a687b1cdbb207"
Cache-Control: max-age=31557600
x-amz-version-id: oFnhEXYpDRwtwhA33EB3RgRT2si8KMo4
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 9nb4riEo-5YtVqFYu6wSiaHf8IISE9u7ATXMKgpGSJN1EFmKJkPvgw==
Age: 552361
d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-i11x-fps/c9ccbc9d-lr-adobestock-191667994-1_107y05a04g04g00f00f01o.jpg
200 OK 4.9 kB URL HTTP/1.1 d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-i11x-fps/c9ccbc9d-lr-adobestock-191667994-1_107y05a04g04g00f00f01o.jpg
IP
File type JPEG image data, baseline, precision 8, 160x160, components 3\012- data
Hash 934f91cff83c07a5aacdfd167635c685
a11de28603de5d8b430ae2facec52bc228b523b7
e0b60e82dbf820d0b0bf40e7f4fe3dfd4d5540c2887de2ab13b3ae0bbc2fa209
GET /pages.upwellness.com/uc-i11x-fps/c9ccbc9d-lr-adobestock-191667994-1_107y05a04g04g00f00f01o.jpg HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pages.upwellness.com/
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 4855
Connection: keep-alive
Date: Fri, 18 Nov 2022 17:14:09 GMT
Last-Modified: Tue, 23 Aug 2022 15:06:34 GMT
ETag: "934f91cff83c07a5aacdfd167635c685"
Cache-Control: max-age=31557600
x-amz-version-id: yXECxHdvDSvHpG3VvjbzBK_Zu8.wY29U
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: Dtj8S2VEaNGOlHUQ6pI_J8rMUAI2ZCpCQZSuqNnODcKqjwbvNsngmA==
Age: 552361
d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-i11x-fps/3935873e-adobestock-298726227-1_106l04x04g04g00q00001o.jpeg
200 OK 3.4 kB URL HTTP/1.1 d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-i11x-fps/3935873e-adobestock-298726227-1_106l04x04g04g00q00001o.jpeg
IP
File type JPEG image data, baseline, precision 8, 160x160, components 3\012- data
Hash 4b5e2f852c6c56358283c08f1e734526
4fb4c2120c3206888fadb8d4d3336593c69822c7
7f3ec50a701738504ccf5beffb90f43f634eaf50f3821ae0f4d724c77d23ff7d
GET /pages.upwellness.com/uc-i11x-fps/3935873e-adobestock-298726227-1_106l04x04g04g00q00001o.jpeg HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pages.upwellness.com/
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 3360
Connection: keep-alive
Date: Fri, 18 Nov 2022 17:14:09 GMT
Last-Modified: Tue, 23 Aug 2022 15:06:34 GMT
ETag: "4b5e2f852c6c56358283c08f1e734526"
Cache-Control: max-age=31557600
x-amz-version-id: 8YfzO4XLd86NiEeeE7v14YmKHpJzaR8N
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 0HKu0YwYeXd_fNBdGdgSgI7vlbp63nrekxGebNr6waShU6mNzEvdzw==
Age: 552361
d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-i11x-fps/a5b1c3ad-adobestock-326257252-1_105i0am04g04g00a00801o.jpg
200 OK 3.1 kB URL HTTP/1.1 d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-i11x-fps/a5b1c3ad-adobestock-326257252-1_105i0am04g04g00a00801o.jpg
IP
File type JPEG image data, baseline, precision 8, 160x160, components 3\012- data
Hash b1ab46e68dbd70b3b73b71d2a6fcc587
f0b6ab6cc4d07cec7363161d85af8c895a43ee7f
38d645abdad915f6e924aeef8287f819a2d88a9741e0d1f8372f41e444413cd6
GET /pages.upwellness.com/uc-i11x-fps/a5b1c3ad-adobestock-326257252-1_105i0am04g04g00a00801o.jpg HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pages.upwellness.com/
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 3137
Connection: keep-alive
Date: Fri, 25 Nov 2022 01:25:28 GMT
Last-Modified: Tue, 22 Nov 2022 20:57:40 GMT
ETag: "b1ab46e68dbd70b3b73b71d2a6fcc587"
Cache-Control: max-age=31557600
x-amz-version-id: hZZHJie.e6JusftiFpzjwJx.5QeZX_u.
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 227a1815a1677b9cf6dd587e443000b8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: b45j3rZkapN8v7A6MRgNJ88T-Jq2SH2vBU-aVvPpLeQp4e2XapDNyQ==
Age: 4482
d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-i11x-fps/18cc0351-adobestock-251481040-1_108p05u04g04g02400e01o.jpeg
200 OK 5.5 kB URL HTTP/1.1 d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-i11x-fps/18cc0351-adobestock-251481040-1_108p05u04g04g02400e01o.jpeg
IP
File type JPEG image data, baseline, precision 8, 160x160, components 3\012- data
Hash 2ccef9c8d1584dc03b304d58eb8d7e17
90d0d856859c7d279b8f6bd0d9854c39afbd564b
76f088819b5bd246a2b08e04f12c1496c8783bf1cb219f71c2f5735fa6f55dd3
GET /pages.upwellness.com/uc-i11x-fps/18cc0351-adobestock-251481040-1_108p05u04g04g02400e01o.jpeg HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pages.upwellness.com/
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 5493
Connection: keep-alive
Date: Fri, 18 Nov 2022 17:14:09 GMT
Last-Modified: Tue, 23 Aug 2022 15:06:34 GMT
ETag: "2ccef9c8d1584dc03b304d58eb8d7e17"
Cache-Control: max-age=31557600
x-amz-version-id: iJMeL.plcIzQzkDfJM3ZH5k2UwPJwQhr
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: BmGa-M-QBv0Su9EHwRBW_RXCdopRVlH01ZaeEdP-fXg06Qx3Zzh6Kw==
Age: 552361
d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-i11x-fps/527a707a-adobestock-25290027-1_109m06e04g04g02i00v01o.jpeg
200 OK 3.4 kB URL HTTP/1.1 d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-i11x-fps/527a707a-adobestock-25290027-1_109m06e04g04g02i00v01o.jpeg
IP
File type JPEG image data, baseline, precision 8, 160x160, components 3\012- data
Hash 6d9a02437cdda082ab7c05ba1bd03609
e12949d351076a3e3e72f236beef26cf2bff3a3b
a4cdf1e44d68878bcf0aa3316c81866afe0d02e09065f27da5f239e6161ae321
GET /pages.upwellness.com/uc-i11x-fps/527a707a-adobestock-25290027-1_109m06e04g04g02i00v01o.jpeg HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pages.upwellness.com/
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 3378
Connection: keep-alive
Date: Fri, 18 Nov 2022 17:14:09 GMT
Last-Modified: Tue, 23 Aug 2022 15:06:34 GMT
ETag: "6d9a02437cdda082ab7c05ba1bd03609"
Cache-Control: max-age=31557600
x-amz-version-id: ejevSfYHIfehVeRJSBQd5NYTJWS1sjQb
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: wlwckbCfbBPWEiIfACHw8LugRYQyiKyi9yqf46WKomzmDXlEoTUAOg==
Age: 552361
d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-i11x-fps/06f128b6-adobestock-342396218-1_106v05d04g04g00900j01o.jpeg
200 OK 4.3 kB URL HTTP/1.1 d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-i11x-fps/06f128b6-adobestock-342396218-1_106v05d04g04g00900j01o.jpeg
IP
File type JPEG image data, baseline, precision 8, 160x160, components 3\012- data
Hash 50b4c607e6a160ca468b3f0e0d957b8c
147e3e9fb9b30761d871a8f5ee113e19094c7f9f
66a7d82268ec47ef8adbe807eb1b41ba3825739210ce8451fbc5d8a6b029ae2b
GET /pages.upwellness.com/uc-i11x-fps/06f128b6-adobestock-342396218-1_106v05d04g04g00900j01o.jpeg HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pages.upwellness.com/
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 4272
Connection: keep-alive
Date: Fri, 18 Nov 2022 17:14:09 GMT
Last-Modified: Tue, 23 Aug 2022 15:06:34 GMT
ETag: "50b4c607e6a160ca468b3f0e0d957b8c"
Cache-Control: max-age=31557600
x-amz-version-id: IXGvr8eo98qv4M3JJ.wS_4UPVXFaYe5E
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: vJ1PgFWSsLDBNszuOcdpb07iXU-B6cSCgErz4YvG9D8di8BaMLWNQg==
Age: 552361
d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-i11x-fps/a13656be-adobestock-54934666-1_106709b04g04g01401k01o.jpeg
200 OK 3.0 kB URL HTTP/1.1 d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-i11x-fps/a13656be-adobestock-54934666-1_106709b04g04g01401k01o.jpeg
IP
File type JPEG image data, baseline, precision 8, 160x160, components 3\012- data
Hash bcb73cd1bf691384936d1d3283490f5f
aa4c269d8112f7c156b5efcc8ebd3e4724b2aaff
d23c72cebb3595aa724b54fac94718b5c96f2d4d5b5328d22d06e7074de4bd21
GET /pages.upwellness.com/uc-i11x-fps/a13656be-adobestock-54934666-1_106709b04g04g01401k01o.jpeg HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pages.upwellness.com/
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 3000
Connection: keep-alive
Date: Fri, 18 Nov 2022 17:14:09 GMT
Last-Modified: Tue, 23 Aug 2022 15:06:34 GMT
ETag: "bcb73cd1bf691384936d1d3283490f5f"
Cache-Control: max-age=31557600
x-amz-version-id: hXVV2DdsnCIB0UVcDL2PeMZw2hvCI7gw
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 9ZqIaZ0Ql7svXRhQzbR6tVH07eAaI4ZpPXYOsPYJ7DEkKR1LkibtZA==
Age: 552361
d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-i11x-fps/dfe0d68e-lr-adobestock-39210066-1_104x07g04g04g00001n01o.jpg
200 OK 3.8 kB URL HTTP/1.1 d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-i11x-fps/dfe0d68e-lr-adobestock-39210066-1_104x07g04g04g00001n01o.jpg
IP
File type JPEG image data, baseline, precision 8, 160x160, components 3\012- data
Hash 07af896b914a6bc6ae41a6cfd25146ed
732f891d9e6868c7671b0188149ffb6070b71cda
71e8962702a05bff03853e657ed6fec0d37593e9f8740a84f73642fd8647c299
GET /pages.upwellness.com/uc-i11x-fps/dfe0d68e-lr-adobestock-39210066-1_104x07g04g04g00001n01o.jpg HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pages.upwellness.com/
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 3766
Connection: keep-alive
Date: Fri, 25 Nov 2022 01:25:28 GMT
Last-Modified: Tue, 22 Nov 2022 20:57:41 GMT
ETag: "07af896b914a6bc6ae41a6cfd25146ed"
Cache-Control: max-age=31557600
x-amz-version-id: cbVTMrL5CxPur2Xkwqnb8KRZkLGYhz1C
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: kCodRG2Sx_4xugXXXZmzh6eLoDRB-NV_6SmPnM4XpgfieVsI-4EBIA==
Age: 4482
io.v2.customerlabs.co/externalIds?customerlabs_user_id=cl4975ot4arrr6852d6f32-f136-4947-a8d9-8367517512ae&id=cl4975ot4arrr6&uid=cl4975ot4arrr6852d6f32-f136-4947-a8d9-8367517512ae
200 OK 178 B URL HTTP/1.1 io.v2.customerlabs.co/externalIds?customerlabs_user_id=cl4975ot4arrr6852d6f32-f136-4947-a8d9-8367517512ae&id=cl4975ot4arrr6&uid=cl4975ot4arrr6852d6f32-f136-4947-a8d9-8367517512ae
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 259caf7aea73881a33b7505329bb27b9
3b9de19a8d7fb451f5f2e5ce47a84e874edfc891
82471257e3e24ef061a84f8d7e5bdf65d779854b9108ef8b9ee9b85c43cf363b
GET /externalIds?customerlabs_user_id=cl4975ot4arrr6852d6f32-f136-4947-a8d9-8367517512ae&id=cl4975ot4arrr6&uid=cl4975ot4arrr6852d6f32-f136-4947-a8d9-8367517512ae HTTP/1.1
Host: io.v2.customerlabs.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pages.upwellness.com/
HTTP/1.1 200 OK
Access-Control-Allow-Headers: Origin, Accept, Content-Type, Max-Age, X-CL-APP-ID, X-Content-Type-Options
Access-Control-Allow-Methods: POST, OPTIONS
Content-Type: application/json
Date: Fri, 25 Nov 2022 02:40:09 GMT
Server: nginx/1.12.1
Content-Length: 178
Connection: keep-alive
d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-i11x-fps/926b7738-adobestock-40113021-1_106p04g04g04g01n00001o.jpeg
200 OK 4.1 kB URL HTTP/1.1 d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-i11x-fps/926b7738-adobestock-40113021-1_106p04g04g04g01n00001o.jpeg
IP
File type JPEG image data, baseline, precision 8, 160x160, components 3\012- data
Hash dc232ad4e51eb7a2c786e4c68887d370
b222a71458dcc4dc0cc80ed4883e00b07cc8d052
02c7484d88daec97451d5e03193801b982532f25174fd16207a17e23eecc962e
GET /pages.upwellness.com/uc-i11x-fps/926b7738-adobestock-40113021-1_106p04g04g04g01n00001o.jpeg HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pages.upwellness.com/
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 4129
Connection: keep-alive
Date: Fri, 18 Nov 2022 17:14:09 GMT
Last-Modified: Tue, 23 Aug 2022 15:06:34 GMT
ETag: "dc232ad4e51eb7a2c786e4c68887d370"
Cache-Control: max-age=31557600
x-amz-version-id: ooPdqrfLZnxeah5ysZNf2ntKINUocqwU
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: E81oa7KkaiwB9PgX6IdY6-lNyqDkFoclXB63JFViyaL-67vtsZbPJA==
Age: 552361
d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-i11x-fps/062c05c8-shadow-immune11x-front_1039065000000000000028.png
200 OK 10 kB URL HTTP/1.1 d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-i11x-fps/062c05c8-shadow-immune11x-front_1039065000000000000028.png
IP
File type PNG image data, 117 x 221, 8-bit colormap, non-interlaced\012- data
Hash 3606cbd8a3768c5ed3577b2461ac076c
0136fcb7d715b12e4a922fb5dedd5cfcd074baa1
c5e63bdbe6253ddd0ab954540da51546003eb5a59c4041e8b3a3de86bc561f63
GET /pages.upwellness.com/uc-i11x-fps/062c05c8-shadow-immune11x-front_1039065000000000000028.png HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pages.upwellness.com/
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 10014
Connection: keep-alive
Date: Fri, 18 Nov 2022 17:14:09 GMT
Last-Modified: Tue, 23 Aug 2022 15:06:34 GMT
ETag: "3606cbd8a3768c5ed3577b2461ac076c"
Cache-Control: max-age=31557600
x-amz-version-id: 1D_zjXD_8_Ljfa5Ab4i5oPW24xq96Kpy
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: AWyS8ui1FU7ILqiYIe36JRWmYrQozWUfYxhriaivDkTXU_i15NrVpw==
Age: 552361
d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-i11x-fps/062c05c8-shadow-immune11x-front_107w0ex000000000000028.png
200 OK 42 kB URL HTTP/1.1 d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-i11x-fps/062c05c8-shadow-immune11x-front_107w0ex000000000000028.png
IP
File type PNG image data, 284 x 537, 8-bit colormap, non-interlaced\012- data
Hash ab9458b445d24d5782b81b338e42b8fd
f8e862ea170178bffda832386a0cf8daee8e656b
2891d3761ae3d06e8936d6847bb184849533e70f2f4d61325de733e1ba6a890d
GET /pages.upwellness.com/uc-i11x-fps/062c05c8-shadow-immune11x-front_107w0ex000000000000028.png HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pages.upwellness.com/
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 41937
Connection: keep-alive
Date: Fri, 18 Nov 2022 17:14:09 GMT
Last-Modified: Tue, 23 Aug 2022 15:06:34 GMT
ETag: "ab9458b445d24d5782b81b338e42b8fd"
Cache-Control: max-age=31557600
x-amz-version-id: 97LsZ2.7D4SRn5ZlPQK5Rt9glRVvM9b7
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: yjgYZaOstkH7HYCsIiwqZrK7-hNnnwioUpnA8UbRhbX7j9lIppTJOg==
Age: 552361
d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-i11x-fps/8c77d1de-rightarrow-angle_102n02m000000000000028.png
200 OK 1.0 kB URL HTTP/1.1 d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-i11x-fps/8c77d1de-rightarrow-angle_102n02m000000000000028.png
IP
File type PNG image data, 95 x 94, 8-bit colormap, non-interlaced\012- data
Hash 6eeccde26d2dc7f37f4370ec5f7bdef3
0842e21ac8a5a57abebe05108d6b97f1fb390256
1ba9ac8b06365638433cb55f70742ffcb72b341e0ea19f517c3f91c359e8ef67
GET /pages.upwellness.com/uc-i11x-fps/8c77d1de-rightarrow-angle_102n02m000000000000028.png HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pages.upwellness.com/
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 1009
Connection: keep-alive
Date: Fri, 25 Nov 2022 01:25:28 GMT
Last-Modified: Tue, 22 Nov 2022 20:57:40 GMT
ETag: "6eeccde26d2dc7f37f4370ec5f7bdef3"
Cache-Control: max-age=31557600
x-amz-version-id: Y9ZG4V2QJc4H.c3oXb6OJ7O6BafkcmwA
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: Dw-EDrspBIOvBziHBJaXfIuB9JnSpblAFcr9g5f2sBWAZlLvz6zsoQ==
Age: 4482
d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-i11x-fps/062c05c8-shadow-immune11x-front_107k0ea000000000000028.png
200 OK 40 kB URL HTTP/1.1 d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-i11x-fps/062c05c8-shadow-immune11x-front_107k0ea000000000000028.png
IP
File type PNG image data, 272 x 514, 8-bit colormap, non-interlaced\012- data
Hash be93a0aded409bd2629b9ce59a09d124
1344dd34b03c3d7a8b68d8ef2c1ef19c050d1294
7e4d6a76d7835c14dbf64fcbf65968746b2131fd368dbfa157c60d544a53087c
GET /pages.upwellness.com/uc-i11x-fps/062c05c8-shadow-immune11x-front_107k0ea000000000000028.png HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pages.upwellness.com/
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 40517
Connection: keep-alive
Date: Fri, 18 Nov 2022 17:14:09 GMT
Last-Modified: Tue, 23 Aug 2022 15:06:34 GMT
ETag: "be93a0aded409bd2629b9ce59a09d124"
Cache-Control: max-age=31557600
x-amz-version-id: Nb9U9FGCIrIM4ivRfcSsD_8L48mrRYQ4
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 227a1815a1677b9cf6dd587e443000b8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: VSRbskr_fpGJhU0cm--G6I7OCCdikROlLGuSz10feBokYRBmd2coOQ==
Age: 552361
d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-i11x-fps/382a6532-leftarrow-angle_102n02m000000000000028.png
200 OK 1.1 kB URL HTTP/1.1 d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-i11x-fps/382a6532-leftarrow-angle_102n02m000000000000028.png
IP
File type PNG image data, 95 x 94, 8-bit colormap, non-interlaced\012- data
Hash 38636c9904e9e46c854a0c55d99255c9
34b0375950bbfda1e3514d3d0d6caa608cc2ace3
a0ed1fd156e16b95275ef30f2229c0509ea00eeb1cce4173678dea14ba033c67
GET /pages.upwellness.com/uc-i11x-fps/382a6532-leftarrow-angle_102n02m000000000000028.png HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pages.upwellness.com/
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 1060
Connection: keep-alive
Date: Fri, 18 Nov 2022 17:14:09 GMT
Last-Modified: Tue, 23 Aug 2022 15:06:34 GMT
ETag: "38636c9904e9e46c854a0c55d99255c9"
Cache-Control: max-age=31557600
x-amz-version-id: JuwDlTv46k6zH5Xj_8WEUMA.3TgAbVlN
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: un96kUYgsDvQBHdQSLZc8m5GKDc4ahot4jN65Hun1hWGHNAPGr7pZQ==
Age: 552361
d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-i11x-fps/29534104-supplementfactsonly-immune11x-rev8-12062021-01_109z0cr000000000000028.png
200 OK 28 kB URL HTTP/1.1 d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-i11x-fps/29534104-supplementfactsonly-immune11x-rev8-12062021-01_109z0cr000000000000028.png
IP
File type PNG image data, 359 x 459, 8-bit colormap, non-interlaced\012- data
Hash 68a4346e1be8ddc5d39316972469fd9d
eb035df26405c7227111210099d3a58079ccbb8a
200a3114d2f125117797419a6e3afec6ed5137872ebf53d8a2b1a977753e688c
GET /pages.upwellness.com/uc-i11x-fps/29534104-supplementfactsonly-immune11x-rev8-12062021-01_109z0cr000000000000028.png HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pages.upwellness.com/
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 27492
Connection: keep-alive
Date: Fri, 18 Nov 2022 17:14:09 GMT
Last-Modified: Tue, 23 Aug 2022 15:06:34 GMT
ETag: "68a4346e1be8ddc5d39316972469fd9d"
Cache-Control: max-age=31557600
x-amz-version-id: 0AdmdGB3olgES8kyZvHhq5OepBzDyY7T
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: aMh9Q4DQA33fVAyRk11QkZrLFm2uhIadZzRbfLyxj5_bKfSvB4y0qw==
Age: 552361
fonts.googleapis.com/css?family=Lato:900,regular,700,italic,300italic%7COswald:700,300,regular,500
200 OK 1.2 kB URL HTTP/2 fonts.googleapis.com/css?family=Lato:900,regular,700,italic,300italic%7COswald:700,300,regular,500
IP
Hash eac8e5a63348d7eccb17fe40fe39bd92
91a6c70839c92cc53e568b7acc2ba2e97afe7087
d92d5b81fef34715dfabdf7a8542b76948d9f4afde207bc260f462c7b0857146
GET /css?family=Lato:900,regular,700,italic,300italic%7COswald:700,300,regular,500 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pages.upwellness.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 25 Nov 2022 02:40:08 GMT
date: Fri, 25 Nov 2022 02:40:08 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash b6a795cdfedb5c954b3000dbb2dc7f90
b17bb97d224d89bc8227cddf5a8386e100751cda
78c411d16c1be2d8da51fc409cb45ec2aca8d32b77ab4d1a1a1fe5d1a33552e1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 02:40:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash f7801fe8b983652ae788bc952856c2ed
f3898da21792b146a9f856e87ed3520d76277fb8
faa1bc8a9887e2dc694ff645546ea16cb96ac4bd1b0c460aef95f2cced100d6b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 02:40:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.no/pagead/1p-user-list/458254939/?random=1669344007294&cv=11&fst=1669341600000&bg=ffffff&guid=ON&async=1>m=2oab90&u_w=1280&u_h=1024&frm=0&url=http%3A%2F%2Fpages.upwellness.com%2Fuc-i11x-fps%2F%3Foffer%3D15%26session_id%3D1023d8631c9ad2431cc56cbf4cf350%26n%3Dtune%26AFFID%3D477232%26subid%3D1_TH221124PM&tiba=Immune%2011X%20-%20UpWellness%20-%20Dr.%20Joshua%20Levitt&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=1971603251&rmt_tld=1&ipr=y
200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-user-list/458254939/?random=1669344007294&cv=11&fst=1669341600000&bg=ffffff&guid=ON&async=1>m=2oab90&u_w=1280&u_h=1024&frm=0&url=http%3A%2F%2Fpages.upwellness.com%2Fuc-i11x-fps%2F%3Foffer%3D15%26session_id%3D1023d8631c9ad2431cc56cbf4cf350%26n%3Dtune%26AFFID%3D477232%26subid%3D1_TH221124PM&tiba=Immune%2011X%20-%20UpWellness%20-%20Dr.%20Joshua%20Levitt&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=1971603251&rmt_tld=1&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/458254939/?random=1669344007294&cv=11&fst=1669341600000&bg=ffffff&guid=ON&async=1>m=2oab90&u_w=1280&u_h=1024&frm=0&url=http%3A%2F%2Fpages.upwellness.com%2Fuc-i11x-fps%2F%3Foffer%3D15%26session_id%3D1023d8631c9ad2431cc56cbf4cf350%26n%3Dtune%26AFFID%3D477232%26subid%3D1_TH221124PM&tiba=Immune%2011X%20-%20UpWellness%20-%20Dr.%20Joshua%20Levitt&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=1971603251&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pages.upwellness.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 25 Nov 2022 02:40:09 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-28307243-3&cid=1974600337.1669344008&jid=1760242469&_u=YGBAiEABBAAAAEAAI~&z=4875799
200 OK 42 B URL HTTP/2 www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-28307243-3&cid=1974600337.1669344008&jid=1760242469&_u=YGBAiEABBAAAAEAAI~&z=4875799
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-28307243-3&cid=1974600337.1669344008&jid=1760242469&_u=YGBAiEABBAAAAEAAI~&z=4875799 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pages.upwellness.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 25 Nov 2022 02:40:09 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-28307243-3&cid=1974600337.1669344008&jid=1760242469&_u=YGBAiEABBAAAAEAAI~&z=4875799
200 OK 42 B URL HTTP/2 www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-28307243-3&cid=1974600337.1669344008&jid=1760242469&_u=YGBAiEABBAAAAEAAI~&z=4875799
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-28307243-3&cid=1974600337.1669344008&jid=1760242469&_u=YGBAiEABBAAAAEAAI~&z=4875799 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pages.upwellness.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 25 Nov 2022 02:40:09 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.no/pagead/1p-user-list/624541243/?random=1669344007255&cv=11&fst=1669341600000&bg=ffffff&guid=ON&async=1>m=2oab90&u_w=1280&u_h=1024&frm=0&url=http%3A%2F%2Fpages.upwellness.com%2Fuc-i11x-fps%2F%3Foffer%3D15%26session_id%3D1023d8631c9ad2431cc56cbf4cf350%26n%3Dtune%26AFFID%3D477232%26subid%3D1_TH221124PM&tiba=Immune%2011X%20-%20UpWellness%20-%20Dr.%20Joshua%20Levitt&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=2386495183&rmt_tld=1&ipr=y
200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-user-list/624541243/?random=1669344007255&cv=11&fst=1669341600000&bg=ffffff&guid=ON&async=1>m=2oab90&u_w=1280&u_h=1024&frm=0&url=http%3A%2F%2Fpages.upwellness.com%2Fuc-i11x-fps%2F%3Foffer%3D15%26session_id%3D1023d8631c9ad2431cc56cbf4cf350%26n%3Dtune%26AFFID%3D477232%26subid%3D1_TH221124PM&tiba=Immune%2011X%20-%20UpWellness%20-%20Dr.%20Joshua%20Levitt&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=2386495183&rmt_tld=1&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/624541243/?random=1669344007255&cv=11&fst=1669341600000&bg=ffffff&guid=ON&async=1>m=2oab90&u_w=1280&u_h=1024&frm=0&url=http%3A%2F%2Fpages.upwellness.com%2Fuc-i11x-fps%2F%3Foffer%3D15%26session_id%3D1023d8631c9ad2431cc56cbf4cf350%26n%3Dtune%26AFFID%3D477232%26subid%3D1_TH221124PM&tiba=Immune%2011X%20-%20UpWellness%20-%20Dr.%20Joshua%20Levitt&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=2386495183&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pages.upwellness.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 25 Nov 2022 02:40:09 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.com/pagead/1p-user-list/862759327/?random=1669344007309&cv=11&fst=1669341600000&bg=ffffff&guid=ON&async=1>m=2oab90&u_w=1280&u_h=1024&frm=0&url=http%3A%2F%2Fpages.upwellness.com%2Fuc-i11x-fps%2F%3Foffer%3D15%26session_id%3D1023d8631c9ad2431cc56cbf4cf350%26n%3Dtune%26AFFID%3D477232%26subid%3D1_TH221124PM&tiba=Immune%2011X%20-%20UpWellness%20-%20Dr.%20Joshua%20Levitt&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=2641017464&rmt_tld=0&ipr=y
200 OK 42 B URL HTTP/2 www.google.com/pagead/1p-user-list/862759327/?random=1669344007309&cv=11&fst=1669341600000&bg=ffffff&guid=ON&async=1>m=2oab90&u_w=1280&u_h=1024&frm=0&url=http%3A%2F%2Fpages.upwellness.com%2Fuc-i11x-fps%2F%3Foffer%3D15%26session_id%3D1023d8631c9ad2431cc56cbf4cf350%26n%3Dtune%26AFFID%3D477232%26subid%3D1_TH221124PM&tiba=Immune%2011X%20-%20UpWellness%20-%20Dr.%20Joshua%20Levitt&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=2641017464&rmt_tld=0&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/862759327/?random=1669344007309&cv=11&fst=1669341600000&bg=ffffff&guid=ON&async=1>m=2oab90&u_w=1280&u_h=1024&frm=0&url=http%3A%2F%2Fpages.upwellness.com%2Fuc-i11x-fps%2F%3Foffer%3D15%26session_id%3D1023d8631c9ad2431cc56cbf4cf350%26n%3Dtune%26AFFID%3D477232%26subid%3D1_TH221124PM&tiba=Immune%2011X%20-%20UpWellness%20-%20Dr.%20Joshua%20Levitt&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=2641017464&rmt_tld=0&ipr=y HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pages.upwellness.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 25 Nov 2022 02:40:09 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
rp.liadm.com/j?dtstmp=1669344008281&aid=a-057g&se=e30&duid=f0f26c15fa8f--01gjpag5mc157f409vczm3mefa&tna=v2.5.1&pu=http%3A%2F%2Fpages.upwellness.com%2Fuc-i11x-fps%2F%3Foffer%3D15%26session_id%3D1023d8631c9ad2431cc56cbf4cf350%26n%3Dtune%26AFFID%3D477232%26subid%3D1_TH221124PM&wpn=lc-bundle&c=PHRpdGxlPkltbXVuZSAxMVggLSBVcFdlbGxuZXNzIC0gRHIuIEpvc2h1YSBMZXZpdHQ8L3RpdGxlPjxtZXRhIG5hbWU9ImRlc2NyaXB0aW9uIiBjb250ZW50PSIiPg
302 Found 0 B URL HTTP/2 rp.liadm.com/j?dtstmp=1669344008281&aid=a-057g&se=e30&duid=f0f26c15fa8f--01gjpag5mc157f409vczm3mefa&tna=v2.5.1&pu=http%3A%2F%2Fpages.upwellness.com%2Fuc-i11x-fps%2F%3Foffer%3D15%26session_id%3D1023d8631c9ad2431cc56cbf4cf350%26n%3Dtune%26AFFID%3D477232%26subid%3D1_TH221124PM&wpn=lc-bundle&c=PHRpdGxlPkltbXVuZSAxMVggLSBVcFdlbGxuZXNzIC0gRHIuIEpvc2h1YSBMZXZpdHQ8L3RpdGxlPjxtZXRhIG5hbWU9ImRlc2NyaXB0aW9uIiBjb250ZW50PSIiPg
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /j?dtstmp=1669344008281&aid=a-057g&se=e30&duid=f0f26c15fa8f--01gjpag5mc157f409vczm3mefa&tna=v2.5.1&pu=http%3A%2F%2Fpages.upwellness.com%2Fuc-i11x-fps%2F%3Foffer%3D15%26session_id%3D1023d8631c9ad2431cc56cbf4cf350%26n%3Dtune%26AFFID%3D477232%26subid%3D1_TH221124PM&wpn=lc-bundle&c=PHRpdGxlPkltbXVuZSAxMVggLSBVcFdlbGxuZXNzIC0gRHIuIEpvc2h1YSBMZXZpdHQ8L3RpdGxlPjxtZXRhIG5hbWU9ImRlc2NyaXB0aW9uIiBjb250ZW50PSIiPg HTTP/1.1
Host: rp.liadm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://pages.upwellness.com
Connection: keep-alive
Referer: http://pages.upwellness.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Fri, 25 Nov 2022 02:40:09 GMT
content-length: 0
trace-id: 9a50a319119f01d6
vary: Origin
location: /j?dtstmp=1669344008281&aid=a-057g&se=e30&duid=f0f26c15fa8f--01gjpag5mc157f409vczm3mefa&tna=v2.5.1&pu=http%3A%2F%2Fpages.upwellness.com%2Fuc-i11x-fps%2F%3Foffer%3D15%26session_id%3D1023d8631c9ad2431cc56cbf4cf350%26n%3Dtune%26AFFID%3D477232%26subid%3D1_TH221124PM&wpn=lc-bundle&c=PHRpdGxlPkltbXVuZSAxMVggLSBVcFdlbGxuZXNzIC0gRHIuIEpvc2h1YSBMZXZpdHQ8L3RpdGxlPjxtZXRhIG5hbWU9ImRlc2NyaXB0aW9uIiBjb250ZW50PSIiPg&n3pc=true
set-cookie: lidid=03682059-656e-464c-aee2-0049b1f00a82; Max-Age=63072000; Expires=Sun, 24 Nov 2024 02:40:09 GMT; SameSite=None; Path=/; Domain=.liadm.com; Secure; HTTPOnly
request-time: 0
referrer-policy: origin-when-cross-origin, strict-origin-when-cross-origin
x-frame-options: DENY
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: http://pages.upwellness.com
access-control-allow-credentials: true
x-permitted-cross-domain-policies: master-only
X-Firefox-Spdy: h2
www.google.no/pagead/1p-user-list/862759327/?random=1669344007309&cv=11&fst=1669341600000&bg=ffffff&guid=ON&async=1>m=2oab90&u_w=1280&u_h=1024&frm=0&url=http%3A%2F%2Fpages.upwellness.com%2Fuc-i11x-fps%2F%3Foffer%3D15%26session_id%3D1023d8631c9ad2431cc56cbf4cf350%26n%3Dtune%26AFFID%3D477232%26subid%3D1_TH221124PM&tiba=Immune%2011X%20-%20UpWellness%20-%20Dr.%20Joshua%20Levitt&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=2641017464&rmt_tld=1&ipr=y
200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-user-list/862759327/?random=1669344007309&cv=11&fst=1669341600000&bg=ffffff&guid=ON&async=1>m=2oab90&u_w=1280&u_h=1024&frm=0&url=http%3A%2F%2Fpages.upwellness.com%2Fuc-i11x-fps%2F%3Foffer%3D15%26session_id%3D1023d8631c9ad2431cc56cbf4cf350%26n%3Dtune%26AFFID%3D477232%26subid%3D1_TH221124PM&tiba=Immune%2011X%20-%20UpWellness%20-%20Dr.%20Joshua%20Levitt&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=2641017464&rmt_tld=1&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/862759327/?random=1669344007309&cv=11&fst=1669341600000&bg=ffffff&guid=ON&async=1>m=2oab90&u_w=1280&u_h=1024&frm=0&url=http%3A%2F%2Fpages.upwellness.com%2Fuc-i11x-fps%2F%3Foffer%3D15%26session_id%3D1023d8631c9ad2431cc56cbf4cf350%26n%3Dtune%26AFFID%3D477232%26subid%3D1_TH221124PM&tiba=Immune%2011X%20-%20UpWellness%20-%20Dr.%20Joshua%20Levitt&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=2641017464&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pages.upwellness.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 25 Nov 2022 02:40:09 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.com/pagead/1p-user-list/10838597190/?random=1669344007240&cv=11&fst=1669341600000&bg=ffffff&guid=ON&async=1>m=2oab90&u_w=1280&u_h=1024&frm=0&url=http%3A%2F%2Fpages.upwellness.com%2Fuc-i11x-fps%2F%3Foffer%3D15%26session_id%3D1023d8631c9ad2431cc56cbf4cf350%26n%3Dtune%26AFFID%3D477232%26subid%3D1_TH221124PM&tiba=Immune%2011X%20-%20UpWellness%20-%20Dr.%20Joshua%20Levitt&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=2602985201&rmt_tld=0&ipr=y
200 OK 42 B URL HTTP/2 www.google.com/pagead/1p-user-list/10838597190/?random=1669344007240&cv=11&fst=1669341600000&bg=ffffff&guid=ON&async=1>m=2oab90&u_w=1280&u_h=1024&frm=0&url=http%3A%2F%2Fpages.upwellness.com%2Fuc-i11x-fps%2F%3Foffer%3D15%26session_id%3D1023d8631c9ad2431cc56cbf4cf350%26n%3Dtune%26AFFID%3D477232%26subid%3D1_TH221124PM&tiba=Immune%2011X%20-%20UpWellness%20-%20Dr.%20Joshua%20Levitt&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=2602985201&rmt_tld=0&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/10838597190/?random=1669344007240&cv=11&fst=1669341600000&bg=ffffff&guid=ON&async=1>m=2oab90&u_w=1280&u_h=1024&frm=0&url=http%3A%2F%2Fpages.upwellness.com%2Fuc-i11x-fps%2F%3Foffer%3D15%26session_id%3D1023d8631c9ad2431cc56cbf4cf350%26n%3Dtune%26AFFID%3D477232%26subid%3D1_TH221124PM&tiba=Immune%2011X%20-%20UpWellness%20-%20Dr.%20Joshua%20Levitt&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=2602985201&rmt_tld=0&ipr=y HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pages.upwellness.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 25 Nov 2022 02:40:09 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 87 kB IP
File type gzip compressed data, from Unix\012- data
Hash e0131c486c66f98c4582953bd9767e6c
8ba52358b14bc9f4da0cd5b525925d00c325701d
9aa052b76746983157da6d15935e07851214b658de4f8a35b907cd0a02b3c3ca
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 02:40:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash f7801fe8b983652ae788bc952856c2ed
f3898da21792b146a9f856e87ed3520d76277fb8
faa1bc8a9887e2dc694ff645546ea16cb96ac4bd1b0c460aef95f2cced100d6b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 02:40:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.no/pagead/1p-user-list/10838597190/?random=1669344007240&cv=11&fst=1669341600000&bg=ffffff&guid=ON&async=1>m=2oab90&u_w=1280&u_h=1024&frm=0&url=http%3A%2F%2Fpages.upwellness.com%2Fuc-i11x-fps%2F%3Foffer%3D15%26session_id%3D1023d8631c9ad2431cc56cbf4cf350%26n%3Dtune%26AFFID%3D477232%26subid%3D1_TH221124PM&tiba=Immune%2011X%20-%20UpWellness%20-%20Dr.%20Joshua%20Levitt&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=2602985201&rmt_tld=1&ipr=y
200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-user-list/10838597190/?random=1669344007240&cv=11&fst=1669341600000&bg=ffffff&guid=ON&async=1>m=2oab90&u_w=1280&u_h=1024&frm=0&url=http%3A%2F%2Fpages.upwellness.com%2Fuc-i11x-fps%2F%3Foffer%3D15%26session_id%3D1023d8631c9ad2431cc56cbf4cf350%26n%3Dtune%26AFFID%3D477232%26subid%3D1_TH221124PM&tiba=Immune%2011X%20-%20UpWellness%20-%20Dr.%20Joshua%20Levitt&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=2602985201&rmt_tld=1&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/10838597190/?random=1669344007240&cv=11&fst=1669341600000&bg=ffffff&guid=ON&async=1>m=2oab90&u_w=1280&u_h=1024&frm=0&url=http%3A%2F%2Fpages.upwellness.com%2Fuc-i11x-fps%2F%3Foffer%3D15%26session_id%3D1023d8631c9ad2431cc56cbf4cf350%26n%3Dtune%26AFFID%3D477232%26subid%3D1_TH221124PM&tiba=Immune%2011X%20-%20UpWellness%20-%20Dr.%20Joshua%20Levitt&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=2602985201&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pages.upwellness.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 25 Nov 2022 02:40:09 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.com/pagead/1p-user-list/458254939/?random=1669344007294&cv=11&fst=1669341600000&bg=ffffff&guid=ON&async=1>m=2oab90&u_w=1280&u_h=1024&frm=0&url=http%3A%2F%2Fpages.upwellness.com%2Fuc-i11x-fps%2F%3Foffer%3D15%26session_id%3D1023d8631c9ad2431cc56cbf4cf350%26n%3Dtune%26AFFID%3D477232%26subid%3D1_TH221124PM&tiba=Immune%2011X%20-%20UpWellness%20-%20Dr.%20Joshua%20Levitt&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=1971603251&rmt_tld=0&ipr=y
200 OK 42 B URL HTTP/2 www.google.com/pagead/1p-user-list/458254939/?random=1669344007294&cv=11&fst=1669341600000&bg=ffffff&guid=ON&async=1>m=2oab90&u_w=1280&u_h=1024&frm=0&url=http%3A%2F%2Fpages.upwellness.com%2Fuc-i11x-fps%2F%3Foffer%3D15%26session_id%3D1023d8631c9ad2431cc56cbf4cf350%26n%3Dtune%26AFFID%3D477232%26subid%3D1_TH221124PM&tiba=Immune%2011X%20-%20UpWellness%20-%20Dr.%20Joshua%20Levitt&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=1971603251&rmt_tld=0&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/458254939/?random=1669344007294&cv=11&fst=1669341600000&bg=ffffff&guid=ON&async=1>m=2oab90&u_w=1280&u_h=1024&frm=0&url=http%3A%2F%2Fpages.upwellness.com%2Fuc-i11x-fps%2F%3Foffer%3D15%26session_id%3D1023d8631c9ad2431cc56cbf4cf350%26n%3Dtune%26AFFID%3D477232%26subid%3D1_TH221124PM&tiba=Immune%2011X%20-%20UpWellness%20-%20Dr.%20Joshua%20Levitt&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=1971603251&rmt_tld=0&ipr=y HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pages.upwellness.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 25 Nov 2022 02:40:09 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ct.pinterest.com/v3/?tid=2614137446842&pd=%7B%22em%22%3A%2224aba99b2defbb47ee981b4200313f61f3ae31541d8717bdac1e463c838939b0%22%7D&event=init&ad=%7B%22loc%22%3A%22http%3A%2F%2Fpages.upwellness.com%2Fuc-i11x-fps%2F%3Foffer%3D15%26session_id%3D1023d8631c9ad2431cc56cbf4cf350%26n%3Dtune%26AFFID%3D477232%26subid%3D1_TH221124PM%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%229a94ee76%22%2C%22ecm_enabled%22%3Afalse%7D&cb=1669344008434
200 OK 35 B URL HTTP/2 ct.pinterest.com/v3/?tid=2614137446842&pd=%7B%22em%22%3A%2224aba99b2defbb47ee981b4200313f61f3ae31541d8717bdac1e463c838939b0%22%7D&event=init&ad=%7B%22loc%22%3A%22http%3A%2F%2Fpages.upwellness.com%2Fuc-i11x-fps%2F%3Foffer%3D15%26session_id%3D1023d8631c9ad2431cc56cbf4cf350%26n%3Dtune%26AFFID%3D477232%26subid%3D1_TH221124PM%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%229a94ee76%22%2C%22ecm_enabled%22%3Afalse%7D&cb=1669344008434
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 9b8d19f4310c758344e40bf17fbc7e85
2290ef058812d5f5e398736e2316cba8cf8093cf
37b17c5135a176a9474521af147d96dfa1fb4ca0f43f00d1400bd1885be3ab9b
GET /v3/?tid=2614137446842&pd=%7B%22em%22%3A%2224aba99b2defbb47ee981b4200313f61f3ae31541d8717bdac1e463c838939b0%22%7D&event=init&ad=%7B%22loc%22%3A%22http%3A%2F%2Fpages.upwellness.com%2Fuc-i11x-fps%2F%3Foffer%3D15%26session_id%3D1023d8631c9ad2431cc56cbf4cf350%26n%3Dtune%26AFFID%3D477232%26subid%3D1_TH221124PM%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%229a94ee76%22%2C%22ecm_enabled%22%3Afalse%7D&cb=1669344008434 HTTP/1.1
Host: ct.pinterest.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pages.upwellness.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: no-cache,no-store,must-revalidate,max-age=0
pragma: no-cache
expires: Sat, 01 Jan 2000 00:00:00 GMT
content-type: image/gif
content-length: 35
access-control-allow-origin: *
x-envoy-upstream-service-time: 2
referrer-policy: origin
x-pinterest-rid: 1498485703819356
date: Fri, 25 Nov 2022 02:40:09 GMT
akamai-grn: 0.274f2417.1669344009.49cb92e2
x-cdn: akamai
strict-transport-security: max-age=31536000 ; includeSubDomains ; preload
X-Firefox-Spdy: h2
io.v2.customerlabs.co/cl
200 OK 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cl HTTP/1.1
Host: io.v2.customerlabs.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: text/plain;charset=UTF-8
Content-Length: 868
Origin: http://pages.upwellness.com
Connection: keep-alive
Referer: http://pages.upwellness.com/
HTTP/1.1 200 OK
Access-Control-Allow-Headers: Origin, Accept, Content-Type, Max-Age, X-CL-APP-ID, X-Content-Type-Options
Access-Control-Allow-Methods: POST, OPTIONS
Access-Control-Allow-Origin: http://pages.upwellness.com
Date: Fri, 25 Nov 2022 02:40:09 GMT
Server: nginx/1.12.1
Content-Length: 0
Connection: keep-alive
ct.pinterest.com/user/?tid=2614137446842&pd=%7B%22em%22%3A%2224aba99b2defbb47ee981b4200313f61f3ae31541d8717bdac1e463c838939b0%22%7D&cb=1669344008430&dep=2%2CPAGE_LOAD
200 OK 373 B URL HTTP/2 ct.pinterest.com/user/?tid=2614137446842&pd=%7B%22em%22%3A%2224aba99b2defbb47ee981b4200313f61f3ae31541d8717bdac1e463c838939b0%22%7D&cb=1669344008430&dep=2%2CPAGE_LOAD
IP
File type JSON data\012- , ASCII text, with very long lines (533), with no line terminators
Hash 7c95bf1e7580e7dfa7f4f5c10b0addd9
a1e3954cd6a0d4a5fc0a6c344d91e6c24504722b
1f8cb83a1e4eedc470a6d0c6acc5f5ff13fa65639378a8a14d5db82e288b2e17
GET /user/?tid=2614137446842&pd=%7B%22em%22%3A%2224aba99b2defbb47ee981b4200313f61f3ae31541d8717bdac1e463c838939b0%22%7D&cb=1669344008430&dep=2%2CPAGE_LOAD HTTP/1.1
Host: ct.pinterest.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://pages.upwellness.com
Connection: keep-alive
Referer: http://pages.upwellness.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-expose-headers: Epik,Pin-Unauth
pin-unauth: dWlkPU5XUmlOVEZoTURRdE1HWmhNeTAwTkdaaExXSmxNREF0T1RNeVltWmxOalpqTnpNNQ
cache-control: no-cache,no-store,must-revalidate,max-age=0
pragma: no-cache
expires: Sat, 01 Jan 2000 00:00:00 GMT
access-control-allow-origin: http://pages.upwellness.com
content-type: application/json; charset=utf-8
content-encoding: gzip
content-length: 373
x-envoy-upstream-service-time: 3
referrer-policy: origin
x-pinterest-rid: 4691719695080007
date: Fri, 25 Nov 2022 02:40:09 GMT
vary: Accept-Encoding
akamai-grn: 0.274f2417.1669344009.49cb92f2
x-cdn: akamai
strict-transport-security: max-age=31536000 ; includeSubDomains ; preload
X-Firefox-Spdy: h2
www.google.com/pagead/1p-user-list/675938688/?random=1669344007419&cv=11&fst=1669341600000&bg=ffffff&guid=ON&async=1>m=2oab90&u_w=1280&u_h=1024&frm=0&url=http%3A%2F%2Fpages.upwellness.com%2Fuc-i11x-fps%2F%3Foffer%3D15%26session_id%3D1023d8631c9ad2431cc56cbf4cf350%26n%3Dtune%26AFFID%3D477232%26subid%3D1_TH221124PM&tiba=Immune%2011X%20-%20UpWellness%20-%20Dr.%20Joshua%20Levitt&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=2515883669&rmt_tld=0&ipr=y
200 OK 42 B URL HTTP/2 www.google.com/pagead/1p-user-list/675938688/?random=1669344007419&cv=11&fst=1669341600000&bg=ffffff&guid=ON&async=1>m=2oab90&u_w=1280&u_h=1024&frm=0&url=http%3A%2F%2Fpages.upwellness.com%2Fuc-i11x-fps%2F%3Foffer%3D15%26session_id%3D1023d8631c9ad2431cc56cbf4cf350%26n%3Dtune%26AFFID%3D477232%26subid%3D1_TH221124PM&tiba=Immune%2011X%20-%20UpWellness%20-%20Dr.%20Joshua%20Levitt&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=2515883669&rmt_tld=0&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/675938688/?random=1669344007419&cv=11&fst=1669341600000&bg=ffffff&guid=ON&async=1>m=2oab90&u_w=1280&u_h=1024&frm=0&url=http%3A%2F%2Fpages.upwellness.com%2Fuc-i11x-fps%2F%3Foffer%3D15%26session_id%3D1023d8631c9ad2431cc56cbf4cf350%26n%3Dtune%26AFFID%3D477232%26subid%3D1_TH221124PM&tiba=Immune%2011X%20-%20UpWellness%20-%20Dr.%20Joshua%20Levitt&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=2515883669&rmt_tld=0&ipr=y HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pages.upwellness.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 25 Nov 2022 02:40:09 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.no/pagead/1p-user-list/675938688/?random=1669344007419&cv=11&fst=1669341600000&bg=ffffff&guid=ON&async=1>m=2oab90&u_w=1280&u_h=1024&frm=0&url=http%3A%2F%2Fpages.upwellness.com%2Fuc-i11x-fps%2F%3Foffer%3D15%26session_id%3D1023d8631c9ad2431cc56cbf4cf350%26n%3Dtune%26AFFID%3D477232%26subid%3D1_TH221124PM&tiba=Immune%2011X%20-%20UpWellness%20-%20Dr.%20Joshua%20Levitt&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=2515883669&rmt_tld=1&ipr=y
200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-user-list/675938688/?random=1669344007419&cv=11&fst=1669341600000&bg=ffffff&guid=ON&async=1>m=2oab90&u_w=1280&u_h=1024&frm=0&url=http%3A%2F%2Fpages.upwellness.com%2Fuc-i11x-fps%2F%3Foffer%3D15%26session_id%3D1023d8631c9ad2431cc56cbf4cf350%26n%3Dtune%26AFFID%3D477232%26subid%3D1_TH221124PM&tiba=Immune%2011X%20-%20UpWellness%20-%20Dr.%20Joshua%20Levitt&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=2515883669&rmt_tld=1&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/675938688/?random=1669344007419&cv=11&fst=1669341600000&bg=ffffff&guid=ON&async=1>m=2oab90&u_w=1280&u_h=1024&frm=0&url=http%3A%2F%2Fpages.upwellness.com%2Fuc-i11x-fps%2F%3Foffer%3D15%26session_id%3D1023d8631c9ad2431cc56cbf4cf350%26n%3Dtune%26AFFID%3D477232%26subid%3D1_TH221124PM&tiba=Immune%2011X%20-%20UpWellness%20-%20Dr.%20Joshua%20Levitt&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=2515883669&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pages.upwellness.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 25 Nov 2022 02:40:09 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.facebook.com/tr/?id=724703108401252&ev=PageView&dl=http%3A%2F%2Fpages.upwellness.com%2Fuc-i11x-fps%2F%3Foffer%3D15%26session_id%3D1023d8631c9ad2431cc56cbf4cf350%26n%3Dtune%26AFFID%3D477232%26subid%3D_removed_%26_filteredParams%3D%257B%2522unwantedParams%2522%253A%255B%255D%252C%2522sensitiveParams%2522%253A%255B%2522e93c74d439413482403026cb034251f3de234fb2bda30607f05cd87f477c9289%2522%255D%257D&rl=&if=false&ts=1669344008572&sw=1280&sh=1024&v=2.9.89&r=stable&ec=0&o=30&fbp=fb.1.1669344008569.670019085&it=1669344008096&coo=false&rqm=GET
200 OK 0 B URL HTTP/2 www.facebook.com/tr/?id=724703108401252&ev=PageView&dl=http%3A%2F%2Fpages.upwellness.com%2Fuc-i11x-fps%2F%3Foffer%3D15%26session_id%3D1023d8631c9ad2431cc56cbf4cf350%26n%3Dtune%26AFFID%3D477232%26subid%3D_removed_%26_filteredParams%3D%257B%2522unwantedParams%2522%253A%255B%255D%252C%2522sensitiveParams%2522%253A%255B%2522e93c74d439413482403026cb034251f3de234fb2bda30607f05cd87f477c9289%2522%255D%257D&rl=&if=false&ts=1669344008572&sw=1280&sh=1024&v=2.9.89&r=stable&ec=0&o=30&fbp=fb.1.1669344008569.670019085&it=1669344008096&coo=false&rqm=GET
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=724703108401252&ev=PageView&dl=http%3A%2F%2Fpages.upwellness.com%2Fuc-i11x-fps%2F%3Foffer%3D15%26session_id%3D1023d8631c9ad2431cc56cbf4cf350%26n%3Dtune%26AFFID%3D477232%26subid%3D_removed_%26_filteredParams%3D%257B%2522unwantedParams%2522%253A%255B%255D%252C%2522sensitiveParams%2522%253A%255B%2522e93c74d439413482403026cb034251f3de234fb2bda30607f05cd87f477c9289%2522%255D%257D&rl=&if=false&ts=1669344008572&sw=1280&sh=1024&v=2.9.89&r=stable&ec=0&o=30&fbp=fb.1.1669344008569.670019085&it=1669344008096&coo=false&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pages.upwellness.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Fri, 25 Nov 2022 02:40:09 GMT
X-Firefox-Spdy: h2
www.facebook.com/tr/?id=724703108401252&ev=LPVisit&dl=http%3A%2F%2Fpages.upwellness.com%2Fuc-i11x-fps%2F%3Foffer%3D15%26session_id%3D1023d8631c9ad2431cc56cbf4cf350%26n%3Dtune%26AFFID%3D477232%26subid%3D_removed_%26_filteredParams%3D%257B%2522unwantedParams%2522%253A%255B%255D%252C%2522sensitiveParams%2522%253A%255B%2522e93c74d439413482403026cb034251f3de234fb2bda30607f05cd87f477c9289%2522%255D%257D&rl=&if=false&ts=1669344008577&sw=1280&sh=1024&v=2.9.89&r=stable&ec=2&o=30&fbp=fb.1.1669344008569.670019085&it=1669344008096&coo=false&rqm=GET
200 OK 0 B URL HTTP/2 www.facebook.com/tr/?id=724703108401252&ev=LPVisit&dl=http%3A%2F%2Fpages.upwellness.com%2Fuc-i11x-fps%2F%3Foffer%3D15%26session_id%3D1023d8631c9ad2431cc56cbf4cf350%26n%3Dtune%26AFFID%3D477232%26subid%3D_removed_%26_filteredParams%3D%257B%2522unwantedParams%2522%253A%255B%255D%252C%2522sensitiveParams%2522%253A%255B%2522e93c74d439413482403026cb034251f3de234fb2bda30607f05cd87f477c9289%2522%255D%257D&rl=&if=false&ts=1669344008577&sw=1280&sh=1024&v=2.9.89&r=stable&ec=2&o=30&fbp=fb.1.1669344008569.670019085&it=1669344008096&coo=false&rqm=GET
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=724703108401252&ev=LPVisit&dl=http%3A%2F%2Fpages.upwellness.com%2Fuc-i11x-fps%2F%3Foffer%3D15%26session_id%3D1023d8631c9ad2431cc56cbf4cf350%26n%3Dtune%26AFFID%3D477232%26subid%3D_removed_%26_filteredParams%3D%257B%2522unwantedParams%2522%253A%255B%255D%252C%2522sensitiveParams%2522%253A%255B%2522e93c74d439413482403026cb034251f3de234fb2bda30607f05cd87f477c9289%2522%255D%257D&rl=&if=false&ts=1669344008577&sw=1280&sh=1024&v=2.9.89&r=stable&ec=2&o=30&fbp=fb.1.1669344008569.670019085&it=1669344008096&coo=false&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pages.upwellness.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Fri, 25 Nov 2022 02:40:09 GMT
X-Firefox-Spdy: h2
www.facebook.com/tr/?id=724703108401252&ev=LPVisit_I11X&dl=http%3A%2F%2Fpages.upwellness.com%2Fuc-i11x-fps%2F%3Foffer%3D15%26session_id%3D1023d8631c9ad2431cc56cbf4cf350%26n%3Dtune%26AFFID%3D477232%26subid%3D1_TH221124PM%26_filteredParams%3D%257B%2522unwantedParams%2522%253A%255B%255D%252C%2522sensitiveParams%2522%253A%255B%255D%257D&rl=&if=false&ts=1669344008580&sw=1280&sh=1024&v=2.9.89&r=stable&ec=3&o=30&fbp=fb.1.1669344008569.670019085&it=1669344008096&coo=false&rqm=GET
200 OK 0 B URL HTTP/2 www.facebook.com/tr/?id=724703108401252&ev=LPVisit_I11X&dl=http%3A%2F%2Fpages.upwellness.com%2Fuc-i11x-fps%2F%3Foffer%3D15%26session_id%3D1023d8631c9ad2431cc56cbf4cf350%26n%3Dtune%26AFFID%3D477232%26subid%3D1_TH221124PM%26_filteredParams%3D%257B%2522unwantedParams%2522%253A%255B%255D%252C%2522sensitiveParams%2522%253A%255B%255D%257D&rl=&if=false&ts=1669344008580&sw=1280&sh=1024&v=2.9.89&r=stable&ec=3&o=30&fbp=fb.1.1669344008569.670019085&it=1669344008096&coo=false&rqm=GET
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=724703108401252&ev=LPVisit_I11X&dl=http%3A%2F%2Fpages.upwellness.com%2Fuc-i11x-fps%2F%3Foffer%3D15%26session_id%3D1023d8631c9ad2431cc56cbf4cf350%26n%3Dtune%26AFFID%3D477232%26subid%3D1_TH221124PM%26_filteredParams%3D%257B%2522unwantedParams%2522%253A%255B%255D%252C%2522sensitiveParams%2522%253A%255B%255D%257D&rl=&if=false&ts=1669344008580&sw=1280&sh=1024&v=2.9.89&r=stable&ec=3&o=30&fbp=fb.1.1669344008569.670019085&it=1669344008096&coo=false&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pages.upwellness.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Fri, 25 Nov 2022 02:40:09 GMT
X-Firefox-Spdy: h2
www.facebook.com/tr/?id=724703108401252&ev=PageView_I11X&dl=http%3A%2F%2Fpages.upwellness.com%2Fuc-i11x-fps%2F%3Foffer%3D15%26session_id%3D1023d8631c9ad2431cc56cbf4cf350%26n%3Dtune%26AFFID%3D477232%26subid%3D1_TH221124PM%26_filteredParams%3D%257B%2522unwantedParams%2522%253A%255B%255D%252C%2522sensitiveParams%2522%253A%255B%255D%257D&rl=&if=false&ts=1669344008575&sw=1280&sh=1024&v=2.9.89&r=stable&ec=1&o=30&fbp=fb.1.1669344008569.670019085&it=1669344008096&coo=false&rqm=GET
200 OK 0 B URL HTTP/2 www.facebook.com/tr/?id=724703108401252&ev=PageView_I11X&dl=http%3A%2F%2Fpages.upwellness.com%2Fuc-i11x-fps%2F%3Foffer%3D15%26session_id%3D1023d8631c9ad2431cc56cbf4cf350%26n%3Dtune%26AFFID%3D477232%26subid%3D1_TH221124PM%26_filteredParams%3D%257B%2522unwantedParams%2522%253A%255B%255D%252C%2522sensitiveParams%2522%253A%255B%255D%257D&rl=&if=false&ts=1669344008575&sw=1280&sh=1024&v=2.9.89&r=stable&ec=1&o=30&fbp=fb.1.1669344008569.670019085&it=1669344008096&coo=false&rqm=GET
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=724703108401252&ev=PageView_I11X&dl=http%3A%2F%2Fpages.upwellness.com%2Fuc-i11x-fps%2F%3Foffer%3D15%26session_id%3D1023d8631c9ad2431cc56cbf4cf350%26n%3Dtune%26AFFID%3D477232%26subid%3D1_TH221124PM%26_filteredParams%3D%257B%2522unwantedParams%2522%253A%255B%255D%252C%2522sensitiveParams%2522%253A%255B%255D%257D&rl=&if=false&ts=1669344008575&sw=1280&sh=1024&v=2.9.89&r=stable&ec=1&o=30&fbp=fb.1.1669344008569.670019085&it=1669344008096&coo=false&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pages.upwellness.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Fri, 25 Nov 2022 02:40:09 GMT
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 6fe23ae41ec0cbb3d702b1c64028cd13
e0e4d852454a5eae80a797aaa6f0991834dcc19a
47a12f27ec1ec271d17295d822c69d1b49c6a24107f3f7ce06a320688fae7f3c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 02:40:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 279 B IP
Hash 81719b714f6442c59abaf8ba83379485
41416feee370a849eb765bdafb03dce7a8807462
1902781456dee6d2481f78791950653f1961f727594acaf816bd12df8eb6e31c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=162880
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 02:40:09 GMT
Etag: "63800449-117"
Expires: Sat, 26 Nov 2022 23:54:49 GMT
Last-Modified: Thu, 24 Nov 2022 23:54:49 GMT
Server: nginx
Content-Length: 279
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash f7801fe8b983652ae788bc952856c2ed
f3898da21792b146a9f856e87ed3520d76277fb8
faa1bc8a9887e2dc694ff645546ea16cb96ac4bd1b0c460aef95f2cced100d6b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 02:40:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
rp.liadm.com/j?dtstmp=1669344008281&aid=a-057g&se=e30&duid=f0f26c15fa8f--01gjpag5mc157f409vczm3mefa&tna=v2.5.1&pu=http%3A%2F%2Fpages.upwellness.com%2Fuc-i11x-fps%2F%3Foffer%3D15%26session_id%3D1023d8631c9ad2431cc56cbf4cf350%26n%3Dtune%26AFFID%3D477232%26subid%3D1_TH221124PM&wpn=lc-bundle&c=PHRpdGxlPkltbXVuZSAxMVggLSBVcFdlbGxuZXNzIC0gRHIuIEpvc2h1YSBMZXZpdHQ8L3RpdGxlPjxtZXRhIG5hbWU9ImRlc2NyaXB0aW9uIiBjb250ZW50PSIiPg&n3pc=true
200 OK 13 B URL HTTP/2 rp.liadm.com/j?dtstmp=1669344008281&aid=a-057g&se=e30&duid=f0f26c15fa8f--01gjpag5mc157f409vczm3mefa&tna=v2.5.1&pu=http%3A%2F%2Fpages.upwellness.com%2Fuc-i11x-fps%2F%3Foffer%3D15%26session_id%3D1023d8631c9ad2431cc56cbf4cf350%26n%3Dtune%26AFFID%3D477232%26subid%3D1_TH221124PM&wpn=lc-bundle&c=PHRpdGxlPkltbXVuZSAxMVggLSBVcFdlbGxuZXNzIC0gRHIuIEpvc2h1YSBMZXZpdHQ8L3RpdGxlPjxtZXRhIG5hbWU9ImRlc2NyaXB0aW9uIiBjb250ZW50PSIiPg&n3pc=true
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 97efe0b7ee61e154d57e80758bb797d8
810b4e115fe9f5ae697666febf2a9abf0b21c9ec
efabba3678b85fcab831b778ea2ddaad1e2a1e952584d3566bc39b7ccb3429d9
GET /j?dtstmp=1669344008281&aid=a-057g&se=e30&duid=f0f26c15fa8f--01gjpag5mc157f409vczm3mefa&tna=v2.5.1&pu=http%3A%2F%2Fpages.upwellness.com%2Fuc-i11x-fps%2F%3Foffer%3D15%26session_id%3D1023d8631c9ad2431cc56cbf4cf350%26n%3Dtune%26AFFID%3D477232%26subid%3D1_TH221124PM&wpn=lc-bundle&c=PHRpdGxlPkltbXVuZSAxMVggLSBVcFdlbGxuZXNzIC0gRHIuIEpvc2h1YSBMZXZpdHQ8L3RpdGxlPjxtZXRhIG5hbWU9ImRlc2NyaXB0aW9uIiBjb250ZW50PSIiPg&n3pc=true HTTP/1.1
Host: rp.liadm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://pages.upwellness.com
Referer: http://pages.upwellness.com/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 25 Nov 2022 02:40:09 GMT
content-type: application/json
content-length: 13
trace-id: 298b5eb2fac9978e
vary: Origin
request-time: 0
referrer-policy: origin-when-cross-origin, strict-origin-when-cross-origin
x-frame-options: DENY
x-pixel-event-id: c575e890-843b-413d-96d6-b34a6313e26d
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: http://pages.upwellness.com
access-control-allow-credentials: true
x-permitted-cross-domain-policies: master-only
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash b6a795cdfedb5c954b3000dbb2dc7f90
b17bb97d224d89bc8227cddf5a8386e100751cda
78c411d16c1be2d8da51fc409cb45ec2aca8d32b77ab4d1a1a1fe5d1a33552e1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 02:40:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
io.v2.customerlabs.co/cl
200 OK 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cl HTTP/1.1
Host: io.v2.customerlabs.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: text/plain;charset=UTF-8
Content-Length: 872
Origin: http://pages.upwellness.com
Connection: keep-alive
Referer: http://pages.upwellness.com/
HTTP/1.1 200 OK
Access-Control-Allow-Headers: Origin, Accept, Content-Type, Max-Age, X-CL-APP-ID, X-Content-Type-Options
Access-Control-Allow-Methods: POST, OPTIONS
Access-Control-Allow-Origin: http://pages.upwellness.com
Date: Fri, 25 Nov 2022 02:40:09 GMT
Server: nginx/1.12.1
Content-Length: 0
Connection: keep-alive
ocsp.digicert.com/
200 OK 280 B IP
Hash 86348c59c5733446124f40fbc069f588
76c261f6a036a38ecc90dcf340f7c94b36193470
6d004884178a3b159c98a4b4d1b3ead45d875ea553c6826b9ecaadea74a1b3f5
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=160347
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 02:40:09 GMT
Etag: "637ffa64-118"
Expires: Sat, 26 Nov 2022 23:12:36 GMT
Last-Modified: Thu, 24 Nov 2022 23:12:36 GMT
Server: nginx
Content-Length: 280
d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-i11x-fps/95f860a4-60daymoneybackguarantee-logo_108c08c000000000000028.png
200 OK 29 kB URL HTTP/1.1 d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-i11x-fps/95f860a4-60daymoneybackguarantee-logo_108c08c000000000000028.png
IP
File type PNG image data, 300 x 300, 8-bit colormap, non-interlaced\012- data
Hash a990802f1ac85c58126fe20aae762598
591dc57a276d6c83dc804853277f0ddf79b84c6f
d128f8dfec11f4b24fe5073448a836656dd70ab4980f08c3309e4ab4843b2f83
GET /pages.upwellness.com/uc-i11x-fps/95f860a4-60daymoneybackguarantee-logo_108c08c000000000000028.png HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pages.upwellness.com/
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 28869
Connection: keep-alive
Date: Fri, 25 Nov 2022 02:40:10 GMT
Last-Modified: Tue, 22 Nov 2022 20:57:40 GMT
ETag: "a990802f1ac85c58126fe20aae762598"
Cache-Control: max-age=31557600
x-amz-version-id: a1S_h87gZLfEDbd2uUw.DtDp1oiKg7nQ
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Miss from cloudfront
Via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: Vt9_TtfacDssgTYYnqvFGDveAFqxt2w2poUzArZ7gzcPV1RFL093fQ==
io.v2.customerlabs.co/cl/firstVisit
200 OK 0 B URL HTTP/1.1 io.v2.customerlabs.co/cl/firstVisit
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cl/firstVisit HTTP/1.1
Host: io.v2.customerlabs.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: text/plain;charset=UTF-8
Content-Length: 523
Origin: http://pages.upwellness.com
Connection: keep-alive
Referer: http://pages.upwellness.com/
HTTP/1.1 200 OK
Access-Control-Allow-Headers: Origin, Accept, Content-Type, Max-Age, X-CL-APP-ID, X-Content-Type-Options
Access-Control-Allow-Methods: POST, OPTIONS
Access-Control-Allow-Origin: http://pages.upwellness.com
Date: Fri, 25 Nov 2022 02:40:09 GMT
Server: nginx/1.12.1
Content-Length: 0
Connection: keep-alive
sp.analytics.yahoo.com/sp.pl?a=10000&d=Fri%2C%2025%20Nov%202022%2002%3A40%3A08%20GMT&n=0&b=Immune%2011X%20-%20UpWellness%20-%20Dr.%20Joshua%20Levitt&.yp=10056129&f=http%3A%2F%2Fpages.upwellness.com%2Fuc-i11x-fps%2F%3Foffer%3D15%26session_id%3D1023d8631c9ad2431cc56cbf4cf350%26n%3Dtune%26AFFID%3D477232%26subid%3D1_TH221124PM&enc=UTF-8&yv=1.13.0&tagmgr=gtm
200 OK 43 B URL HTTP/2 sp.analytics.yahoo.com/sp.pl?a=10000&d=Fri%2C%2025%20Nov%202022%2002%3A40%3A08%20GMT&n=0&b=Immune%2011X%20-%20UpWellness%20-%20Dr.%20Joshua%20Levitt&.yp=10056129&f=http%3A%2F%2Fpages.upwellness.com%2Fuc-i11x-fps%2F%3Foffer%3D15%26session_id%3D1023d8631c9ad2431cc56cbf4cf350%26n%3Dtune%26AFFID%3D477232%26subid%3D1_TH221124PM&enc=UTF-8&yv=1.13.0&tagmgr=gtm
IP
ASN #34010 Yahoo! UK Services Limited
File type GIF image data, version 89a, 1 x 1\012- data
Hash bff56ce49dd485d195fdfa0a02342568
74fb4071deab7d3ab083562067b735df32c43397
0e4b1e428a2198ef747010c094101c257b568a97cdcc0f31ed5e9868cc835b39
GET /sp.pl?a=10000&d=Fri%2C%2025%20Nov%202022%2002%3A40%3A08%20GMT&n=0&b=Immune%2011X%20-%20UpWellness%20-%20Dr.%20Joshua%20Levitt&.yp=10056129&f=http%3A%2F%2Fpages.upwellness.com%2Fuc-i11x-fps%2F%3Foffer%3D15%26session_id%3D1023d8631c9ad2431cc56cbf4cf350%26n%3Dtune%26AFFID%3D477232%26subid%3D1_TH221124PM&enc=UTF-8&yv=1.13.0&tagmgr=gtm HTTP/1.1
Host: sp.analytics.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pages.upwellness.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 25 Nov 2022 02:40:09 GMT
expires: Fri, 25 Nov 2022 02:40:09 GMT
pragma: no-cache
cache-control: no-cache, private, must-revalidate
content-type: image/gif
accept-ranges: bytes
content-length: 43
server: ATS
age: 0
strict-transport-security: max-age=31536000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-frame-options: DENY
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
content-security-policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic
set-cookie: A3=d=AQABBAkrgGMCEFxUmcC3ne7pRUCdxW7kYvEFEgEBAQF8gWOKYwAAAAAA_eMAAA&S=AQAAAgynonhfT7exXqNsQvvjVOY; Expires=Sat, 25 Nov 2023 08:40:09 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
X-Firefox-Spdy: h2
sp.analytics.yahoo.com/sp.pl?a=10000&b=Immune%2011X%20-%20UpWellness%20-%20Dr.%20Joshua%20Levitt&.yp=10175858&f=http%3A%2F%2Fpages.upwellness.com%2Fuc-i11x-fps%2F%3Foffer%3D15%26session_id%3D1023d8631c9ad2431cc56cbf4cf350%26n%3Dtune%26AFFID%3D477232%26subid%3D1_TH221124PM&enc=UTF-8&yv=1.13.0&tagmgr=gtm
200 OK 43 B URL HTTP/2 sp.analytics.yahoo.com/sp.pl?a=10000&b=Immune%2011X%20-%20UpWellness%20-%20Dr.%20Joshua%20Levitt&.yp=10175858&f=http%3A%2F%2Fpages.upwellness.com%2Fuc-i11x-fps%2F%3Foffer%3D15%26session_id%3D1023d8631c9ad2431cc56cbf4cf350%26n%3Dtune%26AFFID%3D477232%26subid%3D1_TH221124PM&enc=UTF-8&yv=1.13.0&tagmgr=gtm
IP
ASN #34010 Yahoo! UK Services Limited
File type GIF image data, version 89a, 1 x 1\012- data
Hash bff56ce49dd485d195fdfa0a02342568
74fb4071deab7d3ab083562067b735df32c43397
0e4b1e428a2198ef747010c094101c257b568a97cdcc0f31ed5e9868cc835b39
GET /sp.pl?a=10000&b=Immune%2011X%20-%20UpWellness%20-%20Dr.%20Joshua%20Levitt&.yp=10175858&f=http%3A%2F%2Fpages.upwellness.com%2Fuc-i11x-fps%2F%3Foffer%3D15%26session_id%3D1023d8631c9ad2431cc56cbf4cf350%26n%3Dtune%26AFFID%3D477232%26subid%3D1_TH221124PM&enc=UTF-8&yv=1.13.0&tagmgr=gtm HTTP/1.1
Host: sp.analytics.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pages.upwellness.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 25 Nov 2022 02:40:09 GMT
expires: Fri, 25 Nov 2022 02:40:09 GMT
pragma: no-cache
cache-control: no-cache, private, must-revalidate
content-type: image/gif
accept-ranges: bytes
content-length: 43
server: ATS
age: 0
strict-transport-security: max-age=31536000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-frame-options: DENY
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
content-security-policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic
set-cookie: A3=d=AQABBAkrgGMCEPVeKPhG2ZrrEKL3djitVk8FEgEBAQF8gWOKYwAAAAAA_eMAAA&S=AQAAAvy9-dQIRVdBjz6uPAbP5Ns; Expires=Sat, 25 Nov 2023 08:40:09 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash ac4a14fdb8a8ac0bb56636c74d06965f
326a1fd45c01f55e54c1be6b7a971e2ea3660e60
1d7137634292f05911421b7f0abfe291dbafee2795720e6ecab8d1c0ef130cde
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=89895
Date: Fri, 25 Nov 2022 02:40:09 GMT
Etag: "637edfdf-1d7"
Expires: Sat, 26 Nov 2022 03:38:24 GMT
Last-Modified: Thu, 24 Nov 2022 03:07:11 GMT
Server: ECS (dcb/7ECB)
X-Cache: Miss from cloudfront
Via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: fw88E13XWLTOkpJ15SzJ5tnuftYhh_bSRtX4ciXezk9ExJ6jQ3llMQ==
Age: 1873
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash ac4a14fdb8a8ac0bb56636c74d06965f
326a1fd45c01f55e54c1be6b7a971e2ea3660e60
1d7137634292f05911421b7f0abfe291dbafee2795720e6ecab8d1c0ef130cde
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=90477
Date: Fri, 25 Nov 2022 02:40:09 GMT
Etag: "637edfdf-1d7"
Expires: Sat, 26 Nov 2022 03:48:06 GMT
Last-Modified: Thu, 24 Nov 2022 03:07:11 GMT
Server: ECS (dcb/7EEC)
X-Cache: Miss from cloudfront
Via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: Hso8gmOYl_Jzk7RvLw6ihM7daG3G3K-e1LYhLk3F2j38SoI0yt3d1A==
Age: 2455
live-visitor-counts.herokuapp.com/lvc/register
204 No Content 0 B URL HTTP/1.1 live-visitor-counts.herokuapp.com/lvc/register
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /lvc/register HTTP/1.1
Host: live-visitor-counts.herokuapp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://cdn.useproof.com/
Origin: https://cdn.useproof.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Server: Cowboy
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Headers: Origin,Content-Length,Content-Type
Access-Control-Allow-Methods: GET,POST,PUT,PATCH,DELETE,HEAD
Access-Control-Allow-Origin: https://cdn.useproof.com
Access-Control-Max-Age: 43200
Vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
Date: Fri, 25 Nov 2022 02:40:09 GMT
Via: 1.1 vegur
io.v2.customerlabs.co/externalIds?facebook___fbp=fb.1.1669344008569.670019085&customerlabs_user_id=cl4975ot4arrr6852d6f32-f136-4947-a8d9-8367517512ae&id=cl4975ot4arrr6&uid=cl4975ot4arrr6852d6f32-f136-4947-a8d9-8367517512ae&t=0&sc=1280%20x%201024
200 OK 560 B URL HTTP/1.1 io.v2.customerlabs.co/externalIds?facebook___fbp=fb.1.1669344008569.670019085&customerlabs_user_id=cl4975ot4arrr6852d6f32-f136-4947-a8d9-8367517512ae&id=cl4975ot4arrr6&uid=cl4975ot4arrr6852d6f32-f136-4947-a8d9-8367517512ae&t=0&sc=1280%20x%201024
IP
File type JSON data\012- , ASCII text, with very long lines (560), with no line terminators
Hash ae3785b0d590f4ab34b72ae72858dd09
8e105b38724aed88938aaf9a015dd9caa08355e2
69638fdd2517e64ce96f1e785d0e329306877282f87e888baa7dc889ce85ab77
GET /externalIds?facebook___fbp=fb.1.1669344008569.670019085&customerlabs_user_id=cl4975ot4arrr6852d6f32-f136-4947-a8d9-8367517512ae&id=cl4975ot4arrr6&uid=cl4975ot4arrr6852d6f32-f136-4947-a8d9-8367517512ae&t=0&sc=1280%20x%201024 HTTP/1.1
Host: io.v2.customerlabs.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pages.upwellness.com/
HTTP/1.1 200 OK
Access-Control-Allow-Headers: Origin, Accept, Content-Type, Max-Age, X-CL-APP-ID, X-Content-Type-Options
Access-Control-Allow-Methods: POST, OPTIONS
Content-Type: application/json
Date: Fri, 25 Nov 2022 02:40:09 GMT
Server: nginx/1.12.1
Content-Length: 560
Connection: keep-alive
a.remarketstats.com/px/smart/?c=24a3d6f0fe7dd9c&seg=uc-i11x-fps&partner_id=cl4975ot4arrr6852d6f32-f136-4947-a8d9-8367517512ae
302 Found 278 B URL HTTP/2 a.remarketstats.com/px/smart/?c=24a3d6f0fe7dd9c&seg=uc-i11x-fps&partner_id=cl4975ot4arrr6852d6f32-f136-4947-a8d9-8367517512ae
IP
Hash e68a54b924d5f66234e53c63de0ac8ca
33f41b1e6242315736314681a51ae774a9429193
0524c2d2148b8f7d8b015050b5a18e36427c546cd7461b92d0f74eb42ab58ff5
GET /px/smart/?c=24a3d6f0fe7dd9c&seg=uc-i11x-fps&partner_id=cl4975ot4arrr6852d6f32-f136-4947-a8d9-8367517512ae HTTP/1.1
Host: a.remarketstats.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pages.upwellness.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Fri, 25 Nov 2022 02:40:09 GMT
content-type: text/html
location: https://a.clickcertain.com/px/smart/a/?partner_id=cl4975ot4arrr6852d6f32-f136-4947-a8d9-8367517512ae&seg=uc-i11x-fps&c=24a3d6f0fe7dd9c
x-frontend: cc-nginx-c76b96594-sggch:cc-nginx-c76b96594-sggch
x-requestid: a0bd3eb4-d85c-446f-ae52-73a4fbeda049
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=HIssVzcXxHFTj2pycwBpLw674%2B1GmogBMyuAjAYwYNPDI3uVdKhCVvNu1mO2NEE%2Fuui0rCb8zDN%2BbNZxMdivqOnFl8V1RNeOHEmRbq27svnSUdUkvoI%2F78AwMR88QWuOLgCh0l8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76f7049cbb51b503-OSL
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash 81719b714f6442c59abaf8ba83379485
41416feee370a849eb765bdafb03dce7a8807462
1902781456dee6d2481f78791950653f1961f727594acaf816bd12df8eb6e31c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=162880
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 02:40:09 GMT
Etag: "63800449-117"
Expires: Sat, 26 Nov 2022 23:54:49 GMT
Last-Modified: Thu, 24 Nov 2022 23:54:49 GMT
Server: nginx
Content-Length: 279
live-visitor-counts.herokuapp.com/lvc/register
200 OK 0 B URL HTTP/1.1 live-visitor-counts.herokuapp.com/lvc/register
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /lvc/register HTTP/1.1
Host: live-visitor-counts.herokuapp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json;charset=utf-8
Content-Length: 191
Origin: https://cdn.useproof.com
Connection: keep-alive
Referer: https://cdn.useproof.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Cowboy
Connection: keep-alive
Access-Control-Allow-Origin: https://cdn.useproof.com
Vary: Origin
Date: Fri, 25 Nov 2022 02:40:09 GMT
Content-Length: 0
Via: 1.1 vegur
trc-events.taboola.com/1225872/log/3/unip?en=pre_d_eng_tb&tos=1618&scd=8&ssd=1&est=1669344008170&ver=35&isls=true&src=i&invt=1500&rv=1&tim=1669344009790&vi=1669344008168&ri=4c6296d518d527bf4dcafdeff0c73c92&ref=null&cv=20221117-23-RELEASE&item-url=http%3A%2F%2Fpages.upwellness.com%2Fuc-i11x-fps%2F%3Foffer%3D15%26session_id%3D1023d8631c9ad2431cc56cbf4cf350%26n%3Dtune%26AFFID%3D477232%26subid%3D1_TH221124PM
204 No Content 0 B URL HTTP/2 trc-events.taboola.com/1225872/log/3/unip?en=pre_d_eng_tb&tos=1618&scd=8&ssd=1&est=1669344008170&ver=35&isls=true&src=i&invt=1500&rv=1&tim=1669344009790&vi=1669344008168&ri=4c6296d518d527bf4dcafdeff0c73c92&ref=null&cv=20221117-23-RELEASE&item-url=http%3A%2F%2Fpages.upwellness.com%2Fuc-i11x-fps%2F%3Foffer%3D15%26session_id%3D1023d8631c9ad2431cc56cbf4cf350%26n%3Dtune%26AFFID%3D477232%26subid%3D1_TH221124PM
IP
ASN #200478 Taboola.com ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /1225872/log/3/unip?en=pre_d_eng_tb&tos=1618&scd=8&ssd=1&est=1669344008170&ver=35&isls=true&src=i&invt=1500&rv=1&tim=1669344009790&vi=1669344008168&ri=4c6296d518d527bf4dcafdeff0c73c92&ref=null&cv=20221117-23-RELEASE&item-url=http%3A%2F%2Fpages.upwellness.com%2Fuc-i11x-fps%2F%3Foffer%3D15%26session_id%3D1023d8631c9ad2431cc56cbf4cf350%26n%3Dtune%26AFFID%3D477232%26subid%3D1_TH221124PM HTTP/1.1
Host: trc-events.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://pages.upwellness.com
Connection: keep-alive
Referer: http://pages.upwellness.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: nginx
date: Fri, 25 Nov 2022 02:40:10 GMT
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: http://pages.upwellness.com
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 50a92cbd99c9867edeed064914407764
db7add2c14b06d670f307ac15abe6f4f69c3f50b
23ea01318a6602949849daf314622d87672ee4828d50cc01bc3e73a3e1543894
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4603
Cache-Control: max-age=96195
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 02:40:11 GMT
Etag: "637eedd3-1d7"
Expires: Sat, 26 Nov 2022 05:23:26 GMT
Last-Modified: Thu, 24 Nov 2022 04:06:43 GMT
Server: ECS (ska/F707)
X-Cache: HIT
Content-Length: 471
a.clickcertain.com/px/smart/a/?partner_id=cl4975ot4arrr6852d6f32-f136-4947-a8d9-8367517512ae&seg=uc-i11x-fps&c=24a3d6f0fe7dd9c
302 Found 1.9 kB URL HTTP/2 a.clickcertain.com/px/smart/a/?partner_id=cl4975ot4arrr6852d6f32-f136-4947-a8d9-8367517512ae&seg=uc-i11x-fps&c=24a3d6f0fe7dd9c
IP
Hash 23795e1bfaa97ff7c0102f99459fe3ac
787f8d00fc0b2589c48c13665f672794bf560029
ef26e7ebef2f9f2a5b34288882e3506bd0987bce1eca2e8545554c798408d5d7
GET /px/smart/a/?partner_id=cl4975ot4arrr6852d6f32-f136-4947-a8d9-8367517512ae&seg=uc-i11x-fps&c=24a3d6f0fe7dd9c HTTP/1.1
Host: a.clickcertain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://pages.upwellness.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Fri, 25 Nov 2022 02:40:10 GMT
content-type: text/javascript
location: https://a.clickcertain.com/px/?c=24a3d6f0fe7dd9c
set-cookie: _ccpx_u=1ff31f60%2d39d4%2d433a%2dbfe2%2d79d80e9fc141; Expires=Sat, 25 Nov 2023 02:40:10 GMT; Path=/; HttpOnly; SameSite=None; Secure
x-frontend: cc-nginx-c76b96594-v646m:cc-nginx-c76b96594-v646m
x-requestid: a455f93b-937f-416b-9d16-803934677536
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qnhEBbYi3lQeq0ziYuqC2Xxy83aBkMXxh%2BMOz2t3H6WtCy6tkVPedZuLlAGLh61n82Yu5lfrEML7rw40OajyMtXlco36nZLPhODlvgUM8IfewGENiwwL87FZ8Qpxwk0dpB8QFw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76f7049e88e8b511-OSL
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 50a92cbd99c9867edeed064914407764
db7add2c14b06d670f307ac15abe6f4f69c3f50b
23ea01318a6602949849daf314622d87672ee4828d50cc01bc3e73a3e1543894
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4603
Cache-Control: max-age=96195
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 02:40:11 GMT
Etag: "637eedd3-1d7"
Expires: Sat, 26 Nov 2022 05:23:26 GMT
Last-Modified: Thu, 24 Nov 2022 04:06:43 GMT
Server: ECS (ska/F707)
X-Cache: HIT
Content-Length: 471
pixel.tapad.com/idsync/ex/receive/check?partner_id=3318&partner_device_id=1ff31f60-39d4-433a-bfe2-79d80e9fc141&partner_url=https%3a%2f%2fa%2eclickcertain%2ecom%2fpx%2fta%2f%3fdone%3dtrue%26ta_id%3d%24%7bTA_DEVICE_ID%7d
302 Found 0 B URL HTTP/2 pixel.tapad.com/idsync/ex/receive/check?partner_id=3318&partner_device_id=1ff31f60-39d4-433a-bfe2-79d80e9fc141&partner_url=https%3a%2f%2fa%2eclickcertain%2ecom%2fpx%2fta%2f%3fdone%3dtrue%26ta_id%3d%24%7bTA_DEVICE_ID%7d
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /idsync/ex/receive/check?partner_id=3318&partner_device_id=1ff31f60-39d4-433a-bfe2-79d80e9fc141&partner_url=https%3a%2f%2fa%2eclickcertain%2ecom%2fpx%2fta%2f%3fdone%3dtrue%26ta_id%3d%24%7bTA_DEVICE_ID%7d HTTP/1.1
Host: pixel.tapad.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://a.clickcertain.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
date: Fri, 25 Nov 2022 02:40:11 GMT
strict-transport-security: max-age=31536000
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-WoW64
p3p: policyref="http://tapad-taptags.s3.amazonaws.com/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
set-cookie: TapAd_TS=1669344011332;Expires=Tue, 24 Jan 2023 02:40:11 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None
TapAd_DID=fb983909-0b3e-4cd4-aa4d-edfd51999e66;Expires=Tue, 24 Jan 2023 02:40:11 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None
TapAd_3WAY_SYNCS=;Expires=Tue, 24 Jan 2023 02:40:11 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None
location: https://a.clickcertain.com/px/ta/?done=true&ta_id=fb983909-0b3e-4cd4-aa4d-edfd51999e66
content-length: 0
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
a.clickcertain.com/px/ta/?done=true&ta_id=fb983909-0b3e-4cd4-aa4d-edfd51999e66
204 No Content 0 B URL HTTP/2 a.clickcertain.com/px/ta/?done=true&ta_id=fb983909-0b3e-4cd4-aa4d-edfd51999e66
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /px/ta/?done=true&ta_id=fb983909-0b3e-4cd4-aa4d-edfd51999e66 HTTP/1.1
Host: a.clickcertain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://a.clickcertain.com/
Connection: keep-alive
Cookie: _ccpx_u=1ff31f60%2d39d4%2d433a%2dbfe2%2d79d80e9fc141; _ccpx_24a3d6f0fe7dd9c=1; _ccpx=24a3d6f0fe7dd9c
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Fri, 25 Nov 2022 02:40:11 GMT
set-cookie: _ccpx_u=1ff31f60%2d39d4%2d433a%2dbfe2%2d79d80e9fc141; Expires=Sat, 25 Nov 2023 02:40:11 GMT; Path=/; HttpOnly; SameSite=None; Secure
x-frontend: cc-nginx-c76b96594-xgb5v:cc-nginx-c76b96594-xgb5v
x-requestid: f2f8d66e-141c-40a9-b335-b85b33c61cc2
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=sU7z6u4F%2FAccjkWfEFyZ%2By%2FNCiPLImhhvH5q%2FCYN%2FDm4fserUdLYLJ6RtaPtJJNa%2Bw0%2B%2FADb%2BWIVgUZNDVu4PlLPUGJtuOf%2FbHVCd56TTPWEYaT2YRdiUMOn7Q5mBZhwUsD73g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76f704a6fc35b511-OSL
X-Firefox-Spdy: h2
ocsp.r2m02.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.r2m02.amazontrust.com/
IP
Hash 7e1f10921950e9569eae7e85bd9a1ac6
3b9049609d373b08428e05f6117c368efe721650
bf3d62a2e12d6699abf52a8b08af060d909268901c5518013b99989622a1ca25
POST / HTTP/1.1
Host: ocsp.r2m02.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=108263
Date: Fri, 25 Nov 2022 02:40:11 GMT
Etag: "637f1988-1d7"
Expires: Sat, 26 Nov 2022 08:44:34 GMT
Last-Modified: Thu, 24 Nov 2022 07:13:12 GMT
Server: ECS (dcb/7F80)
X-Cache: Miss from cloudfront
Via: 1.1 784cb0c259a6d79800d037bda4e7de86.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: hJ_vMO2tYtS9aV4L4t2cgYJhHF2k7x_MSTRI69gFbR29FnH6MB8NrA==
Age: 5482
a.browserspeed.support/cs?puid=2afdb6c5-3bb7-5bc4-9017-9e9eecf2f793&pid=lc
302 Found 24 B URL HTTP/2 a.browserspeed.support/cs?puid=2afdb6c5-3bb7-5bc4-9017-9e9eecf2f793&pid=lc
IP
File type HTML document, ASCII text
Hash cd5fa747861f510d1d45ab9dc80a16a0
90d910869fbe5e0f79b7f7e58f59f5303f46ad78
5bdd19de1ad3c04f1a88334882b16565cef8ac274902e671a72ebebdb35c697c
GET /cs?puid=2afdb6c5-3bb7-5bc4-9017-9e9eecf2f793&pid=lc HTTP/1.1
Host: a.browserspeed.support
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://a.clickcertain.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: awselb/2.0
date: Fri, 25 Nov 2022 02:40:11 GMT
content-type: text/html; charset=utf-8
content-length: 24
location: https://a.browserspeed.support/
set-cookie: tuid=292eeff2-3e55-4821-ac36-0e86f1301218; Path=/; Domain=a.browserspeed.support; Max-Age=31536000; HttpOnly; Secure; SameSite=None
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash c73fdd75eac4ce768a1263d219a851bc
30dfc643989ef33a52da872bd25e6bf30f846a39
ff055e5492417bdffc32e75d467fd2a2d91b1e446e62cdc8b5957e4014bfc0ec
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=167362
Date: Fri, 25 Nov 2022 02:40:11 GMT
Etag: "637ffe9c-1d7"
Expires: Sun, 27 Nov 2022 01:09:33 GMT
Last-Modified: Thu, 24 Nov 2022 23:30:36 GMT
Server: ECS (dcb/7ECA)
X-Cache: Miss from cloudfront
Via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: n9mOATHBW_vC-9FDULlumXhzEYK4mt8q3xBz7Eo7shECocAir8JO8g==
Age: 5937
i.liadm.com/s/56408?bidder_id=200441&bidder_uuid=1ff31f60-39d4-433a-bfe2-79d80e9fc141&ccid=1ff31f60-39d4-433a-bfe2-79d80e9fc141&redir=https%253a%252f%252fcm%252eg%252edoubleclick%252enet%252fpixel%253fgoogle_nid%253dclickcertain%2526google_cm%253d1%2526google_sc%253d1%2526redir%253dhttps%25253a%25252f%25252fsecure%25252eadnxs%25252ecom%25252fgetuidu%25253fhttps%25253a%25252f%25252fa%25252eclickcertain%25252ecom%25252fpx%25252fimg%25252fbidswitch%25252f%25253fdone%25253dtrue%252526ccid%25253d1ff31f60%25252d39d4%25252d433a%25252dbfe2%25252d79d80e9fc141%252526anx_uId%25253d%252524UID
303 See Other 0 B URL HTTP/1.1 i.liadm.com/s/56408?bidder_id=200441&bidder_uuid=1ff31f60-39d4-433a-bfe2-79d80e9fc141&ccid=1ff31f60-39d4-433a-bfe2-79d80e9fc141&redir=https%253a%252f%252fcm%252eg%252edoubleclick%252enet%252fpixel%253fgoogle_nid%253dclickcertain%2526google_cm%253d1%2526google_sc%253d1%2526redir%253dhttps%25253a%25252f%25252fsecure%25252eadnxs%25252ecom%25252fgetuidu%25253fhttps%25253a%25252f%25252fa%25252eclickcertain%25252ecom%25252fpx%25252fimg%25252fbidswitch%25252f%25253fdone%25253dtrue%252526ccid%25253d1ff31f60%25252d39d4%25252d433a%25252dbfe2%25252d79d80e9fc141%252526anx_uId%25253d%252524UID
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /s/56408?bidder_id=200441&bidder_uuid=1ff31f60-39d4-433a-bfe2-79d80e9fc141&ccid=1ff31f60-39d4-433a-bfe2-79d80e9fc141&redir=https%253a%252f%252fcm%252eg%252edoubleclick%252enet%252fpixel%253fgoogle_nid%253dclickcertain%2526google_cm%253d1%2526google_sc%253d1%2526redir%253dhttps%25253a%25252f%25252fsecure%25252eadnxs%25252ecom%25252fgetuidu%25253fhttps%25253a%25252f%25252fa%25252eclickcertain%25252ecom%25252fpx%25252fimg%25252fbidswitch%25252f%25253fdone%25253dtrue%252526ccid%25253d1ff31f60%25252d39d4%25252d433a%25252dbfe2%25252d79d80e9fc141%252526anx_uId%25253d%252524UID HTTP/1.1
Host: i.liadm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://a.clickcertain.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 303 See Other
Date: Fri, 25 Nov 2022 02:40:11 GMT
Content-Length: 0
Connection: keep-alive
Location: /s/56408?redir=https%253a%252f%252fcm%252eg%252edoubleclick%252enet%252fpixel%253fgoogle_nid%253dclickcertain%2526google_cm%253d1%2526google_sc%253d1%2526redir%253dhttps%25253a%25252f%25252fsecure%25252eadnxs%25252ecom%25252fgetuidu%25253fhttps%25253a%25252f%25252fa%25252eclickcertain%25252ecom%25252fpx%25252fimg%25252fbidswitch%25252f%25253fdone%25253dtrue%252526ccid%25253d1ff31f60%25252d39d4%25252d433a%25252dbfe2%25252d79d80e9fc141%252526anx_uId%25253d%252524UID&bidder_id=200441&bidder_uuid=1ff31f60-39d4-433a-bfe2-79d80e9fc141&_li_chk=true&ccid=1ff31f60-39d4-433a-bfe2-79d80e9fc141&previous_uuid=0e125efd20ad493d8114ae29fb464fc9
Set-Cookie: lidid=0e125efd-20ad-493d-8114-ae29fb464fc9; Max-Age=63072000; Expires=Sun, 24 Nov 2024 02:40:11 GMT; SameSite=None; Path=/; Domain=liadm.com; Secure
Request-Time: 1
Strict-Transport-Security: max-age=31536000; includeSubDomains
a.browserspeed.support/
200 OK 4 B IP
File type ASCII text, with no line terminators
Hash 72054d9a6fbdcc7df012e19f32345b65
52dd4c74c813db3790179c4f236ceadaca3467a8
c48b5b1a9776c84602de2306d7903a7241158a5077e7a8519af75c33441b8334
Analyzer Verdict Alert fortinet Phishing
GET / HTTP/1.1
Host: a.browserspeed.support
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://a.clickcertain.com/
Connection: keep-alive
Cookie: tuid=292eeff2-3e55-4821-ac36-0e86f1301218
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: awselb/2.0
date: Fri, 25 Nov 2022 02:40:11 GMT
content-type: application/json; charset=utf-8
content-length: 4
set-cookie: tuid=292eeff2-3e55-4821-ac36-0e86f1301218; Path=/; Domain=a.browserspeed.support; Max-Age=31536000; HttpOnly; Secure; SameSite=None
X-Firefox-Spdy: h2
i.liadm.com/s/56408?redir=https%253a%252f%252fcm%252eg%252edoubleclick%252enet%252fpixel%253fgoogle_nid%253dclickcertain%2526google_cm%253d1%2526google_sc%253d1%2526redir%253dhttps%25253a%25252f%25252fsecure%25252eadnxs%25252ecom%25252fgetuidu%25253fhttps%25253a%25252f%25252fa%25252eclickcertain%25252ecom%25252fpx%25252fimg%25252fbidswitch%25252f%25253fdone%25253dtrue%252526ccid%25253d1ff31f60%25252d39d4%25252d433a%25252dbfe2%25252d79d80e9fc141%252526anx_uId%25253d%252524UID&bidder_id=200441&bidder_uuid=1ff31f60-39d4-433a-bfe2-79d80e9fc141&_li_chk=true&ccid=1ff31f60-39d4-433a-bfe2-79d80e9fc141&previous_uuid=0e125efd20ad493d8114ae29fb464fc9
303 See Other 0 B URL HTTP/1.1 i.liadm.com/s/56408?redir=https%253a%252f%252fcm%252eg%252edoubleclick%252enet%252fpixel%253fgoogle_nid%253dclickcertain%2526google_cm%253d1%2526google_sc%253d1%2526redir%253dhttps%25253a%25252f%25252fsecure%25252eadnxs%25252ecom%25252fgetuidu%25253fhttps%25253a%25252f%25252fa%25252eclickcertain%25252ecom%25252fpx%25252fimg%25252fbidswitch%25252f%25253fdone%25253dtrue%252526ccid%25253d1ff31f60%25252d39d4%25252d433a%25252dbfe2%25252d79d80e9fc141%252526anx_uId%25253d%252524UID&bidder_id=200441&bidder_uuid=1ff31f60-39d4-433a-bfe2-79d80e9fc141&_li_chk=true&ccid=1ff31f60-39d4-433a-bfe2-79d80e9fc141&previous_uuid=0e125efd20ad493d8114ae29fb464fc9
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /s/56408?redir=https%253a%252f%252fcm%252eg%252edoubleclick%252enet%252fpixel%253fgoogle_nid%253dclickcertain%2526google_cm%253d1%2526google_sc%253d1%2526redir%253dhttps%25253a%25252f%25252fsecure%25252eadnxs%25252ecom%25252fgetuidu%25253fhttps%25253a%25252f%25252fa%25252eclickcertain%25252ecom%25252fpx%25252fimg%25252fbidswitch%25252f%25253fdone%25253dtrue%252526ccid%25253d1ff31f60%25252d39d4%25252d433a%25252dbfe2%25252d79d80e9fc141%252526anx_uId%25253d%252524UID&bidder_id=200441&bidder_uuid=1ff31f60-39d4-433a-bfe2-79d80e9fc141&_li_chk=true&ccid=1ff31f60-39d4-433a-bfe2-79d80e9fc141&previous_uuid=0e125efd20ad493d8114ae29fb464fc9 HTTP/1.1
Host: i.liadm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://a.clickcertain.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 303 See Other
Date: Fri, 25 Nov 2022 02:40:12 GMT
Content-Length: 0
Connection: keep-alive
Location: https://a.clickcertain.com/px/li/?redir=https%3a%2f%2fcm%2eg%2edoubleclick%2enet%2fpixel%3fgoogle_nid%3dclickcertain%26google_cm%3d1%26google_sc%3d1%26redir%3dhttps%253a%252f%252fsecure%252eadnxs%252ecom%252fgetuidu%253fhttps%253a%252f%252fa%252eclickcertain%252ecom%252fpx%252fimg%252fbidswitch%252f%253fdone%253dtrue%2526ccid%253d1ff31f60%252d39d4%252d433a%252dbfe2%252d79d80e9fc141%2526anx_uId%253d%2524UID&ccid=1ff31f60-39d4-433a-bfe2-79d80e9fc141
Set-Cookie: _li_ss=MgYIkgEQ2BM; Max-Age=2592000; Expires=Sun, 25 Dec 2022 02:40:12 GMT; SameSite=None; Path=/s; Secure
lidid=d6162009-e0fb-4c20-a7c5-c7edc24c7e81; Max-Age=63072000; Expires=Sun, 24 Nov 2024 02:40:12 GMT; SameSite=None; Path=/; Domain=liadm.com; Secure
Request-Time: 2
Strict-Transport-Security: max-age=31536000; includeSubDomains
a.clickcertain.com/px/li/?redir=https%3a%2f%2fcm%2eg%2edoubleclick%2enet%2fpixel%3fgoogle_nid%3dclickcertain%26google_cm%3d1%26google_sc%3d1%26redir%3dhttps%253a%252f%252fsecure%252eadnxs%252ecom%252fgetuidu%253fhttps%253a%252f%252fa%252eclickcertain%252ecom%252fpx%252fimg%252fbidswitch%252f%253fdone%253dtrue%2526ccid%253d1ff31f60%252d39d4%252d433a%252dbfe2%252d79d80e9fc141%2526anx_uId%253d%2524UID&ccid=1ff31f60-39d4-433a-bfe2-79d80e9fc141
302 Found 509 B URL HTTP/2 a.clickcertain.com/px/li/?redir=https%3a%2f%2fcm%2eg%2edoubleclick%2enet%2fpixel%3fgoogle_nid%3dclickcertain%26google_cm%3d1%26google_sc%3d1%26redir%3dhttps%253a%252f%252fsecure%252eadnxs%252ecom%252fgetuidu%253fhttps%253a%252f%252fa%252eclickcertain%252ecom%252fpx%252fimg%252fbidswitch%252f%253fdone%253dtrue%2526ccid%253d1ff31f60%252d39d4%252d433a%252dbfe2%252d79d80e9fc141%2526anx_uId%253d%2524UID&ccid=1ff31f60-39d4-433a-bfe2-79d80e9fc141
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (332), with CRLF, LF line terminators
Hash fb45e65f5c3a208154d7d0210095e85d
a99e6cfa5829a8169ca772b930699e9f7a3d2ad9
2462b2a72f1ba6922137460b948b8d965e86832fbf084b08825cd5504a152168
GET /px/li/?redir=https%3a%2f%2fcm%2eg%2edoubleclick%2enet%2fpixel%3fgoogle_nid%3dclickcertain%26google_cm%3d1%26google_sc%3d1%26redir%3dhttps%253a%252f%252fsecure%252eadnxs%252ecom%252fgetuidu%253fhttps%253a%252f%252fa%252eclickcertain%252ecom%252fpx%252fimg%252fbidswitch%252f%253fdone%253dtrue%2526ccid%253d1ff31f60%252d39d4%252d433a%252dbfe2%252d79d80e9fc141%2526anx_uId%253d%2524UID&ccid=1ff31f60-39d4-433a-bfe2-79d80e9fc141 HTTP/1.1
Host: a.clickcertain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://a.clickcertain.com/
Connection: keep-alive
Cookie: _ccpx_u=1ff31f60%2d39d4%2d433a%2dbfe2%2d79d80e9fc141; _ccpx_24a3d6f0fe7dd9c=1; _ccpx=24a3d6f0fe7dd9c
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
date: Fri, 25 Nov 2022 02:40:12 GMT
content-type: text/html
location: https://cm.g.doubleclick.net/pixel?google_nid=clickcertain&google_cm=1&google_sc=1&redir=https%3a%2f%2fsecure%2eadnxs%2ecom%2fgetuidu%3fhttps%3a%2f%2fa%2eclickcertain%2ecom%2fpx%2fimg%2fbidswitch%2f%3fdone%3dtrue%26ccid%3d1ff31f60%2d39d4%2d433a%2dbfe2%2d79d80e9fc141%26anx_uId%3d%24UID
set-cookie: _ccpx_u=1ff31f60%2d39d4%2d433a%2dbfe2%2d79d80e9fc141; Expires=Sat, 25 Nov 2023 02:40:12 GMT; Path=/; HttpOnly; SameSite=None; Secure
x-frontend: cc-nginx-c76b96594-8gps5:cc-nginx-c76b96594-8gps5
x-requestid: c308d290-1b10-4882-acd9-fb5e9f8dea85
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=FJR%2FExjWIzjTKEfh7eDUsLKBRjp1mZO0%2B54EJYgxugZdHmF4vJY5U%2BphbbmoQctfLjTk4wNMVV%2Bu12MAmXBMtlPv%2FeaiLxrENhd3uVL%2BTb0D5zi%2Fp28%2BwaQ9LUk9pGJMJxaDtA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76f704ab7de9b511-OSL
X-Firefox-Spdy: h2
cm.g.doubleclick.net/pixel?google_nid=clickcertain&google_cm=1&google_sc=1&redir=https%3A%2F%2Fsecure%2Eadnxs%2Ecom%2Fgetuidu%3Fhttps%3A%2F%2Fa%2Eclickcertain%2Ecom%2Fpx%2Fimg%2Fbidswitch%2F%3Fdone%3Dtrue%26ccid%3D1ff31f60%2D39d4%2D433a%2Dbfe2%2D79d80e9fc141%26anx_uId%3D%24UID&google_tc=
302 Found 455 B URL HTTP/2 cm.g.doubleclick.net/pixel?google_nid=clickcertain&google_cm=1&google_sc=1&redir=https%3A%2F%2Fsecure%2Eadnxs%2Ecom%2Fgetuidu%3Fhttps%3A%2F%2Fa%2Eclickcertain%2Ecom%2Fpx%2Fimg%2Fbidswitch%2F%3Fdone%3Dtrue%26ccid%3D1ff31f60%2D39d4%2D433a%2Dbfe2%2D79d80e9fc141%26anx_uId%3D%24UID&google_tc=
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Hash 3ad91f78569146d8e3ddb71a3c582810
294527595201c052149ae5f78ec0ef16c491037f
21d52aa257131046fea1638ca9ac088a2e978c9b6ecd68bb0236877aec31e008
GET /pixel?google_nid=clickcertain&google_cm=1&google_sc=1&redir=https%3A%2F%2Fsecure%2Eadnxs%2Ecom%2Fgetuidu%3Fhttps%3A%2F%2Fa%2Eclickcertain%2Ecom%2Fpx%2Fimg%2Fbidswitch%2F%3Fdone%3Dtrue%26ccid%3D1ff31f60%2D39d4%2D433a%2Dbfe2%2D79d80e9fc141%26anx_uId%3D%24UID&google_tc= HTTP/1.1
Host: cm.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://a.clickcertain.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
location: https://a.clickcertain.com/px/img/g/?redir=https%3A%2F%2Fsecure%2Eadnxs%2Ecom%2Fgetuidu%3Fhttps%3A%2F%2Fa%2Eclickcertain%2Ecom%2Fpx%2Fimg%2Fbidswitch%2F%3Fdone%3Dtrue%26ccid%3D1ff31f60%2D39d4%2D433a%2Dbfe2%2D79d80e9fc141%26anx_uId%3D%24UID&google_error=3
date: Fri, 25 Nov 2022 02:40:12 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
server: HTTP server (unknown)
content-length: 455
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
a.clickcertain.com/px/img/g/?redir=https%3A%2F%2Fsecure%2Eadnxs%2Ecom%2Fgetuidu%3Fhttps%3A%2F%2Fa%2Eclickcertain%2Ecom%2Fpx%2Fimg%2Fbidswitch%2F%3Fdone%3Dtrue%26ccid%3D1ff31f60%2D39d4%2D433a%2Dbfe2%2D79d80e9fc141%26anx_uId%3D%24UID&google_error=3
302 Found 0 B URL HTTP/2 a.clickcertain.com/px/img/g/?redir=https%3A%2F%2Fsecure%2Eadnxs%2Ecom%2Fgetuidu%3Fhttps%3A%2F%2Fa%2Eclickcertain%2Ecom%2Fpx%2Fimg%2Fbidswitch%2F%3Fdone%3Dtrue%26ccid%3D1ff31f60%2D39d4%2D433a%2Dbfe2%2D79d80e9fc141%26anx_uId%3D%24UID&google_error=3
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /px/img/g/?redir=https%3A%2F%2Fsecure%2Eadnxs%2Ecom%2Fgetuidu%3Fhttps%3A%2F%2Fa%2Eclickcertain%2Ecom%2Fpx%2Fimg%2Fbidswitch%2F%3Fdone%3Dtrue%26ccid%3D1ff31f60%2D39d4%2D433a%2Dbfe2%2D79d80e9fc141%26anx_uId%3D%24UID&google_error=3 HTTP/1.1
Host: a.clickcertain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://a.clickcertain.com/
Connection: keep-alive
Cookie: _ccpx_u=1ff31f60%2d39d4%2d433a%2dbfe2%2d79d80e9fc141; _ccpx_24a3d6f0fe7dd9c=1; _ccpx=24a3d6f0fe7dd9c
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
date: Fri, 25 Nov 2022 02:40:12 GMT
content-type: text/html
location: https://secure.adnxs.com/getuidu?https://a.clickcertain.com/px/img/bidswitch/?done=true&ccid=1ff31f60-39d4-433a-bfe2-79d80e9fc141&anx_uId=$UID
x-frontend: cc-nginx-c76b96594-2chkn:cc-nginx-c76b96594-2chkn
x-requestid: 22bcebc4-d619-4afb-9eb7-f574c82725eb
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nQcFMKlC73BfOicjzsjaexcXuxqYbOKiRLegsbbKu6esB5EvLv4Jm8y79UIma34zwWwdilaS8SDAscVdPbXep1QPwLepB5jLkR3m%2FFDJWYc0WDplQEB692C5TgKkP9HtcN%2B9jg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76f704ad1e85b511-OSL
X-Firefox-Spdy: h2
secure.adnxs.com/bounce?%2Fgetuidu%3Fhttps%3A%2F%2Fa.clickcertain.com%2Fpx%2Fimg%2Fbidswitch%2F%3Fdone%3Dtrue%26ccid%3D1ff31f60-39d4-433a-bfe2-79d80e9fc141%26anx_uId%3D%24UID
302 Found 0 B URL HTTP/1.1 secure.adnxs.com/bounce?%2Fgetuidu%3Fhttps%3A%2F%2Fa.clickcertain.com%2Fpx%2Fimg%2Fbidswitch%2F%3Fdone%3Dtrue%26ccid%3D1ff31f60-39d4-433a-bfe2-79d80e9fc141%26anx_uId%3D%24UID
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /bounce?%2Fgetuidu%3Fhttps%3A%2F%2Fa.clickcertain.com%2Fpx%2Fimg%2Fbidswitch%2F%3Fdone%3Dtrue%26ccid%3D1ff31f60-39d4-433a-bfe2-79d80e9fc141%26anx_uId%3D%24UID HTTP/1.1
Host: secure.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://a.clickcertain.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx/1.21.3
Date: Fri, 25 Nov 2022 02:40:12 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Location: https://a.clickcertain.com/px/img/bidswitch/?done=true&ccid=1ff31f60-39d4-433a-bfe2-79d80e9fc141&anx_uId=0
AN-X-Request-Uuid: 49913c7f-9b51-4b91-9bb9-2b8a8f672a27
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 1004.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com
fast.wistia.com/assets/external/allIntegrations.js
200 OK 5.6 kB URL HTTP/2 fast.wistia.com/assets/external/allIntegrations.js
IP
File type ASCII text, with very long lines (21637), with no line terminators
Hash 98d8f1350f159ef9d630464f2677623c
ee33382759ec18abebe452fb065599627d729114
0bcc59bc6540d08234fceefb99483c915ced9406d7b30173817cb18553c462b3
GET /assets/external/allIntegrations.js HTTP/1.1
Host: fast.wistia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pages.upwellness.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
cache-control: public, max-age=3600
content-encoding: br
content-type: application/javascript
etag: "637ce334-15f7"
last-modified: Tue, 22 Nov 2022 14:56:52 GMT
timing-allow-origin: *
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Fri, 25 Nov 2022 02:40:12 GMT
age: 239
x-served-by: cache-iad-kiad7000146-IAD, cache-bma1671-BMA
x-cache: HIT, HIT
x-cache-hits: 2, 2
x-timer: S1669344013.950090,VS0,VE0
vary: Accept-Encoding
strict-transport-security: max-age=0
x-ecma-v: modern
x-browser: firefox
x-browser-version: 105
content-length: 5623
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash 86776344fc6dd826ff48ca2f315dec8a
23054ddd051e653c90cc3232bbe1ecb88820b29a
7a6a778b4a383d8385e3843a7fd1ad88a5e7182d5627740511dd2c83a6f264c1
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 25 Nov 2022 02:40:13 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Tue, 22 Nov 2022 13:56:48 GMT
Expires: Tue, 29 Nov 2022 13:56:47 GMT
Etag: "23054ddd051e653c90cc3232bbe1ecb88820b29a"
Cache-Control: max-age=385593,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 76f704b10c36b51b-OSL
a.clickcertain.com/px/img/bidswitch/?done=true&ccid=1ff31f60-39d4-433a-bfe2-79d80e9fc141&anx_uId=0
302 Found 0 B URL HTTP/2 a.clickcertain.com/px/img/bidswitch/?done=true&ccid=1ff31f60-39d4-433a-bfe2-79d80e9fc141&anx_uId=0
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /px/img/bidswitch/?done=true&ccid=1ff31f60-39d4-433a-bfe2-79d80e9fc141&anx_uId=0 HTTP/1.1
Host: a.clickcertain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://a.clickcertain.com/
Connection: keep-alive
Cookie: _ccpx_u=1ff31f60%2d39d4%2d433a%2dbfe2%2d79d80e9fc141; _ccpx_24a3d6f0fe7dd9c=1; _ccpx=24a3d6f0fe7dd9c
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
date: Fri, 25 Nov 2022 02:40:12 GMT
content-type: text/html
location: https://x.bidswitch.net/sync?dsp_id=179&user_id=1ff31f60-39d4-433a-bfe2-79d80e9fc141&expires=5&user_group=0
set-cookie: _ccpx_u=1ff31f60%2d39d4%2d433a%2dbfe2%2d79d80e9fc141; Expires=Sat, 25 Nov 2023 02:40:12 GMT; Path=/; HttpOnly; SameSite=None; Secure
x-frontend: cc-nginx-c76b96594-2chkn:cc-nginx-c76b96594-2chkn
x-requestid: 7079c2d8-fec9-48b7-b926-f6bd8b7145a6
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=TPWkXa4L4ZVUe5%2BXXd1w6TnL9ZIf3N0BTzEU9AXD9dAe0dwBX43oTIfuYUJO61YbFfIRp8%2FRoifuZLM7ZxrDtWf%2FlN1yU%2FDDrhSS8EwWcfeVJxCNnJmv94wC0nbvZIAwlaAIwg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76f704af3f66b511-OSL
X-Firefox-Spdy: h2
x.bidswitch.net/ul_cb/sync?dsp_id=179&user_id=1ff31f60-39d4-433a-bfe2-79d80e9fc141&expires=5&user_group=0
200 OK 43 B URL HTTP/2 x.bidswitch.net/ul_cb/sync?dsp_id=179&user_id=1ff31f60-39d4-433a-bfe2-79d80e9fc141&expires=5&user_group=0
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /ul_cb/sync?dsp_id=179&user_id=1ff31f60-39d4-433a-bfe2-79d80e9fc141&expires=5&user_group=0 HTTP/1.1
Host: x.bidswitch.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://a.clickcertain.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 25 Nov 2022 02:40:13 GMT
content-type: image/gif
content-length: 43
cache-control: no-cache, no-store, must-revalidate
X-Firefox-Spdy: h2
fast.wistia.com/assets/external/playPauseLoadingControl.js
200 OK 16 kB URL HTTP/2 fast.wistia.com/assets/external/playPauseLoadingControl.js
IP
File type ASCII text, with very long lines (60125), with no line terminators
Hash 7264d7b49eb6dc6eef062a9511cfd32e
d6724f77d675d740c895a283e4b8e3dbdd1719d5
6cca15bd7bbece1644b8b31db564da9659fa85f73ea22b814cb831cf0113a4e3
GET /assets/external/playPauseLoadingControl.js HTTP/1.1
Host: fast.wistia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pages.upwellness.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
cache-control: public, max-age=3600
content-encoding: br
content-type: application/javascript
etag: "637ce334-3e59"
last-modified: Tue, 22 Nov 2022 14:56:52 GMT
timing-allow-origin: *
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Fri, 25 Nov 2022 02:40:13 GMT
age: 241
x-served-by: cache-iad-kcgs7200113-IAD, cache-bma1671-BMA
x-cache: HIT, HIT
x-cache-hits: 47, 3
x-timer: S1669344013.098891,VS0,VE0
vary: Accept-Encoding
strict-transport-security: max-age=0
x-ecma-v: modern
x-browser: firefox
x-browser-version: 105
content-length: 15961
X-Firefox-Spdy: h2
ct.pinterest.com/ct.html
200 OK 323 B IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (565), with no line terminators
Hash b49b45b63051915a8c657060651eb07f
acaddf8021f220d0e4d30e7c8b3d8330ff781af9
4b00fbca5db49c6e4b29a0c873c43671880bcea1b7b3007655183382a318c2dc
GET /ct.html HTTP/1.1
Host: ct.pinterest.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pages.upwellness.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: max-age=86400
content-type: text/html; charset=utf-8
content-encoding: gzip
content-length: 323
x-envoy-upstream-service-time: 0
referrer-policy: origin
x-pinterest-rid: 1605725514907397
date: Fri, 25 Nov 2022 02:40:13 GMT
vary: Accept-Encoding
akamai-grn: 0.274f2417.1669344013.49cbaf48
x-cdn: akamai
strict-transport-security: max-age=31536000 ; includeSubDomains ; preload
X-Firefox-Spdy: h2
io.v2.customerlabs.co/cl
200 OK 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cl HTTP/1.1
Host: io.v2.customerlabs.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: text/plain;charset=UTF-8
Content-Length: 781
Origin: http://pages.upwellness.com
Connection: keep-alive
Referer: http://pages.upwellness.com/
HTTP/1.1 200 OK
Access-Control-Allow-Headers: Origin, Accept, Content-Type, Max-Age, X-CL-APP-ID, X-Content-Type-Options
Access-Control-Allow-Methods: POST, OPTIONS
Access-Control-Allow-Origin: http://pages.upwellness.com
Date: Fri, 25 Nov 2022 02:40:13 GMT
Server: nginx/1.12.1
Content-Length: 0
Connection: keep-alive
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash d00eaf1f7e43489c5718ce3fa5a491e9
eca6d2f9139f3321e20ffe1929755efdc468b981
c8164da57b36002493cdc0983dc9e8a879ef47b2cac532e2ba105142b6b6b09d
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=108145
Date: Fri, 25 Nov 2022 02:40:13 GMT
Etag: "637f2e7e-1d7"
Expires: Sat, 26 Nov 2022 08:42:38 GMT
Last-Modified: Thu, 24 Nov 2022 08:42:38 GMT
Server: nginx
X-Cache: Miss from cloudfront
Via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: JxSnhHozx0e3cslGfeTShzJeCpCwgc3V-9jbS2HCqw6W6pg3VpfHCw==
pipedream.wistia.com/mput?topic=metrics
200 OK 2 B URL HTTP/1.1 pipedream.wistia.com/mput?topic=metrics
IP
File type ASCII text, with no line terminators
Hash e0aa021e21dddbd6d8cecec71e9cf564
9ce3bd4224c8c1780db56b4125ecf3f24bf748b7
565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3
POST /mput?topic=metrics HTTP/1.1
Host: pipedream.wistia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
content-type: application/x-www-form-urlencoded
Content-Length: 1516
Origin: http://pages.upwellness.com
Connection: keep-alive
Referer: http://pages.upwellness.com/
HTTP/1.1 200 OK
Date: Fri, 25 Nov 2022 02:40:13 GMT
Content-Type: text/plain; charset=utf-8
Content-Length: 2
Connection: keep-alive
Access-Control-Allow-Methods: POST, OPTIONS
Access-Control-Allow-Origin: *
s.amazon-adsystem.com/iu3?d=generic&ex-fargs=%3Fid%3Dc230f4f4-2471-e083-6695-c6f3f7fc5010%26type%3DUNKNOWN%26m%3D1&ex-fch=416613&ex-src=https://www.upwellness.com/&ex-hargs=v%3D1.0%3Bc%3D593675756572392096%3Bp%3DC230F4F4-2471-E083-6695-C6F3F7FC5010&cb=416692220130697300
301 Moved Permanently 0 B URL HTTP/1.1 s.amazon-adsystem.com/iu3?d=generic&ex-fargs=%3Fid%3Dc230f4f4-2471-e083-6695-c6f3f7fc5010%26type%3DUNKNOWN%26m%3D1&ex-fch=416613&ex-src=https://www.upwellness.com/&ex-hargs=v%3D1.0%3Bc%3D593675756572392096%3Bp%3DC230F4F4-2471-E083-6695-C6F3F7FC5010&cb=416692220130697300
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /iu3?d=generic&ex-fargs=%3Fid%3Dc230f4f4-2471-e083-6695-c6f3f7fc5010%26type%3DUNKNOWN%26m%3D1&ex-fch=416613&ex-src=https://www.upwellness.com/&ex-hargs=v%3D1.0%3Bc%3D593675756572392096%3Bp%3DC230F4F4-2471-E083-6695-C6F3F7FC5010&cb=416692220130697300 HTTP/1.1
Host: s.amazon-adsystem.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pages.upwellness.com/
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Fri, 25 Nov 2022 02:40:13 GMT
Server: Server
Location: https://s.amazon-adsystem.com/iu3?d=generic&ex-fargs=%3Fid%3Dc230f4f4-2471-e083-6695-c6f3f7fc5010%26type%3DUNKNOWN%26m%3D1&ex-fch=416613&ex-src=https://www.upwellness.com/&ex-hargs=v%3D1.0%3Bc%3D593675756572392096%3Bp%3DC230F4F4-2471-E083-6695-C6F3F7FC5010&cb=416692220130697300
Cache-Control: no-cache
Content-Length: 0
x-amz-rid: 1THSP2XFDNQCABNPM85T
Vary: Accept-Encoding,User-Agent
distillery.wistia.com/x
204 No Content 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /x HTTP/1.1
Host: distillery.wistia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
content-type: text/plain
Content-Length: 1570
Origin: http://pages.upwellness.com
Connection: keep-alive
Referer: http://pages.upwellness.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Fri, 25 Nov 2022 02:40:13 GMT
access-control-allow-origin: *
cache-control: max-age=0, private, must-revalidate
X-Firefox-Spdy: h2
trc-events.taboola.com/1225872/log/3/unip?en=pre_d_eng_tb&tos=4621&scd=8&ssd=1&est=1669344008170&ver=35&isls=true&src=i&invt=3000&rv=1&tim=1669344012792&vi=1669344008168&ri=4c6296d518d527bf4dcafdeff0c73c92&ref=null&cv=20221117-23-RELEASE&item-url=http%3A%2F%2Fpages.upwellness.com%2Fuc-i11x-fps%2F%3Foffer%3D15%26session_id%3D1023d8631c9ad2431cc56cbf4cf350%26n%3Dtune%26AFFID%3D477232%26subid%3D1_TH221124PM
204 No Content 0 B URL HTTP/2 trc-events.taboola.com/1225872/log/3/unip?en=pre_d_eng_tb&tos=4621&scd=8&ssd=1&est=1669344008170&ver=35&isls=true&src=i&invt=3000&rv=1&tim=1669344012792&vi=1669344008168&ri=4c6296d518d527bf4dcafdeff0c73c92&ref=null&cv=20221117-23-RELEASE&item-url=http%3A%2F%2Fpages.upwellness.com%2Fuc-i11x-fps%2F%3Foffer%3D15%26session_id%3D1023d8631c9ad2431cc56cbf4cf350%26n%3Dtune%26AFFID%3D477232%26subid%3D1_TH221124PM
IP
ASN #200478 Taboola.com ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /1225872/log/3/unip?en=pre_d_eng_tb&tos=4621&scd=8&ssd=1&est=1669344008170&ver=35&isls=true&src=i&invt=3000&rv=1&tim=1669344012792&vi=1669344008168&ri=4c6296d518d527bf4dcafdeff0c73c92&ref=null&cv=20221117-23-RELEASE&item-url=http%3A%2F%2Fpages.upwellness.com%2Fuc-i11x-fps%2F%3Foffer%3D15%26session_id%3D1023d8631c9ad2431cc56cbf4cf350%26n%3Dtune%26AFFID%3D477232%26subid%3D1_TH221124PM HTTP/1.1
Host: trc-events.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://pages.upwellness.com
Connection: keep-alive
Referer: http://pages.upwellness.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Fri, 25 Nov 2022 02:40:13 GMT
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: http://pages.upwellness.com
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
X-Firefox-Spdy: h2
s.amazon-adsystem.com/iu3?d=generic&ex-fargs=%3Fid%3Dc230f4f4-2471-e083-6695-c6f3f7fc5010%26type%3DUNKNOWN%26m%3D1&ex-fch=416613&ex-src=https://www.upwellness.com/&ex-hargs=v%3D1.0%3Bc%3D593675756572392096%3Bp%3DC230F4F4-2471-E083-6695-C6F3F7FC5010&cb=416692220130697300
302 Found 0 B URL HTTP/1.1 s.amazon-adsystem.com/iu3?d=generic&ex-fargs=%3Fid%3Dc230f4f4-2471-e083-6695-c6f3f7fc5010%26type%3DUNKNOWN%26m%3D1&ex-fch=416613&ex-src=https://www.upwellness.com/&ex-hargs=v%3D1.0%3Bc%3D593675756572392096%3Bp%3DC230F4F4-2471-E083-6695-C6F3F7FC5010&cb=416692220130697300
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /iu3?d=generic&ex-fargs=%3Fid%3Dc230f4f4-2471-e083-6695-c6f3f7fc5010%26type%3DUNKNOWN%26m%3D1&ex-fch=416613&ex-src=https://www.upwellness.com/&ex-hargs=v%3D1.0%3Bc%3D593675756572392096%3Bp%3DC230F4F4-2471-E083-6695-C6F3F7FC5010&cb=416692220130697300 HTTP/1.1
Host: s.amazon-adsystem.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://pages.upwellness.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: Server
Date: Fri, 25 Nov 2022 02:40:13 GMT
Content-Length: 0
Connection: keep-alive
x-amz-rid: JD6TYG0C32QYD8S8EM97
Set-Cookie: ad-id=A3vDOereXUfCvThs2MtT23Q|t; Domain=.amazon-adsystem.com; Expires=Sat, 01-Jul-2023 02:40:13 GMT; Path=/; Secure; HttpOnly; SameSite=None
Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0
Pragma: no-cache
Expires: Thu, 01 Jan 1970 00:00:00 GMT
p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR"
Location: https://s.amazon-adsystem.com/iu3?d=generic&ex-fargs=%3Fid%3Dc230f4f4-2471-e083-6695-c6f3f7fc5010%26type%3DUNKNOWN%26m%3D1&ex-fch=416613&ex-src=https://www.upwellness.com/&ex-hargs=v%3D1.0%3Bc%3D593675756572392096%3Bp%3DC230F4F4-2471-E083-6695-C6F3F7FC5010&cb=416692220130697300&dcc=t
Vary: Content-Type,Accept-Encoding,User-Agent
Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
s.amazon-adsystem.com/iu3?d=generic&ex-fargs=%3Fid%3Dc230f4f4-2471-e083-6695-c6f3f7fc5010%26type%3DUNKNOWN%26m%3D1&ex-fch=416613&ex-src=https://www.upwellness.com/&ex-hargs=v%3D1.0%3Bc%3D593675756572392096%3Bp%3DC230F4F4-2471-E083-6695-C6F3F7FC5010&cb=416692220130697300&dcc=t
200 OK 65 B URL HTTP/1.1 s.amazon-adsystem.com/iu3?d=generic&ex-fargs=%3Fid%3Dc230f4f4-2471-e083-6695-c6f3f7fc5010%26type%3DUNKNOWN%26m%3D1&ex-fch=416613&ex-src=https://www.upwellness.com/&ex-hargs=v%3D1.0%3Bc%3D593675756572392096%3Bp%3DC230F4F4-2471-E083-6695-C6F3F7FC5010&cb=416692220130697300&dcc=t
IP
File type HTML document, ASCII text
Hash 22fdf49482d8200e8f305bbe262eff14
f254bd4053267c2cf46675613e689016d8b7f775
115d83ece49fd1c5769409aab9d78572eed86cd38a0556b4cdeeac82c83091d3
GET /iu3?d=generic&ex-fargs=%3Fid%3Dc230f4f4-2471-e083-6695-c6f3f7fc5010%26type%3DUNKNOWN%26m%3D1&ex-fch=416613&ex-src=https://www.upwellness.com/&ex-hargs=v%3D1.0%3Bc%3D593675756572392096%3Bp%3DC230F4F4-2471-E083-6695-C6F3F7FC5010&cb=416692220130697300&dcc=t HTTP/1.1
Host: s.amazon-adsystem.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://pages.upwellness.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Server
Date: Fri, 25 Nov 2022 02:40:13 GMT
Content-Type: text/html;charset=ISO-8859-1
Content-Length: 65
Connection: keep-alive
x-amz-rid: TXRWNN9NTDRVDCDZG073
Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0
Pragma: no-cache
Expires: Thu, 01 Jan 1970 00:00:00 GMT
p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR"
Vary: Content-Type,Accept-Encoding,User-Agent
Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
live.upwellness.com/services/scripts/jquery/jquery.min.js
200 OK 0 B URL HTTP/2 live.upwellness.com/services/scripts/jquery/jquery.min.js
IP
GET /services/scripts/jquery/jquery.min.js HTTP/1.1
Host: live.upwellness.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pages.upwellness.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 25 Nov 2022 02:40:06 GMT
content-type: application/javascript; charset=utf-8
last-modified: Tue, 20 Sep 2022 09:48:00 GMT
vary: Accept-Encoding
etag: W/"63298c50-15d84"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
assets.ubembed.com/universalscript/releases/v0.179.2/bundle.js
200 OK 0 B URL HTTP/2 assets.ubembed.com/universalscript/releases/v0.179.2/bundle.js
IP
GET /universalscript/releases/v0.179.2/bundle.js HTTP/1.1
Host: assets.ubembed.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pages.upwellness.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
date: Sat, 03 Sep 2022 23:09:05 GMT
last-modified: Tue, 05 Apr 2022 16:31:05 GMT
etag: W/"359008fe01078c59c66e034866170bd2"
cache-control: max-age=31536000
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6cb1d4b545e7beb4ead790454f4807c6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: WNW6jHL22BsS_uxGgUwmK5_5zDK02qU1zgeLi5jJOzD25rAkGtW91g==
age: 7097462
X-Firefox-Spdy: h2
api.useproof.com/pixel/trtc0limNRYJwhvfi9uRqUFQo0w1?url=http:%2F%2Fpages.upwellness.com%2Fuc-i11x-fps%2F%3Foffer%3D15%26session_id%3D1023d8631c9ad2431cc56cbf4cf350%26n%3Dtune%26AFFID%3D477232%26subid%3D1_TH221124PM
200 OK 0 B URL HTTP/2 api.useproof.com/pixel/trtc0limNRYJwhvfi9uRqUFQo0w1?url=http:%2F%2Fpages.upwellness.com%2Fuc-i11x-fps%2F%3Foffer%3D15%26session_id%3D1023d8631c9ad2431cc56cbf4cf350%26n%3Dtune%26AFFID%3D477232%26subid%3D1_TH221124PM
IP
GET /pixel/trtc0limNRYJwhvfi9uRqUFQo0w1?url=http:%2F%2Fpages.upwellness.com%2Fuc-i11x-fps%2F%3Foffer%3D15%26session_id%3D1023d8631c9ad2431cc56cbf4cf350%26n%3Dtune%26AFFID%3D477232%26subid%3D1_TH221124PM HTTP/1.1
Host: api.useproof.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://cdn.useproof.com
Connection: keep-alive
Referer: https://cdn.useproof.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Fri, 25 Nov 2022 02:40:09 GMT
content-type: application/json; charset=utf-8
x-amzn-requestid: 71fb30d7-9b6a-4733-a2a2-9b6acc757600
access-control-allow-origin: *
surrogate-control: no-store
x-amzn-remapped-content-length: 178
x-amzn-remapped-connection: keep-alive
x-amz-apigw-id: cIupeF_NIAMF7kw=
cache-control: no-store, no-cache, must-revalidate, proxy-revalidate
expires: 0
etag: W/"b2-OenOJ5+poZHQBF95l6mn992GfU4"
pragma: no-cache
x-amzn-remapped-date: Fri, 25 Nov 2022 02:40:09 GMT
x-cache: Miss from cloudfront
via: 1.1 dbfaae0db03f11cf713bbcbdb25be4a2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: YB8swo0OUzzbLGbmExXvCsMe2ZV2qcFMrCz3uuWbY4Z8R0gBcl0X_A==
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lmZB1GUdx%2Bb8axSoy2ZzFdLGBJ8ta08T45L7vyNS2s7FqKas2jBvh0GBZk4Mbrqqf9neZKDJbHg%2BBflKWayuFLlFHAxbCc6sR%2BgOeq9BddLZNAeR9t5kwZi6L4fY4DuQfJCE"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76f704980cddb4f4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
a.clickcertain.com/px/r/?ccid=1ff31f60-39d4-433a-bfe2-79d80e9fc141
302 Found 0 B URL HTTP/2 a.clickcertain.com/px/r/?ccid=1ff31f60-39d4-433a-bfe2-79d80e9fc141
IP
GET /px/r/?ccid=1ff31f60-39d4-433a-bfe2-79d80e9fc141 HTTP/1.1
Host: a.clickcertain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://a.clickcertain.com/px/cont/?c=24a3d6f0fe7dd9c&ccid=1ff31f60-39d4-433a-bfe2-79d80e9fc141&cn=NO
Cookie: _ccpx_u=1ff31f60%2d39d4%2d433a%2dbfe2%2d79d80e9fc141; _ccpx_24a3d6f0fe7dd9c=1; _ccpx=24a3d6f0fe7dd9c
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 302 Found
date: Fri, 25 Nov 2022 02:40:11 GMT
content-type: text/html
location: https://i.liadm.com/s/56408?bidder_id=200441&bidder_uuid=1ff31f60-39d4-433a-bfe2-79d80e9fc141&ccid=1ff31f60-39d4-433a-bfe2-79d80e9fc141&redir=https%253a%252f%252fcm%252eg%252edoubleclick%252enet%252fpixel%253fgoogle_nid%253dclickcertain%2526google_cm%253d1%2526google_sc%253d1%2526redir%253dhttps%25253a%25252f%25252fsecure%25252eadnxs%25252ecom%25252fgetuidu%25253fhttps%25253a%25252f%25252fa%25252eclickcertain%25252ecom%25252fpx%25252fimg%25252fbidswitch%25252f%25253fdone%25253dtrue%252526ccid%25253d1ff31f60%25252d39d4%25252d433a%25252dbfe2%25252d79d80e9fc141%252526anx_uId%25253d%252524UID
set-cookie: _ccpx_u=1ff31f60%2d39d4%2d433a%2dbfe2%2d79d80e9fc141; Expires=Sat, 25 Nov 2023 02:40:11 GMT; Path=/; HttpOnly; SameSite=None; Secure
x-frontend: cc-nginx-c76b96594-jc7pn:cc-nginx-c76b96594-jc7pn
x-requestid: c2bb4e1d-2192-406c-850f-7b8b793c4bbe
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tfX8eUfHSAEBOdnjRPTKy%2F8KZIW1EtXwsl39pnYTAE43gaDPUlIus4Gz9hqZoelf9fUJKJKNZD0quRy%2Fig76EM2i78NR0V0J1rLWtumVUTiJPBfDKj9XItIh%2FJbFkDY3Sn7jMA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76f704a43b20b511-OSL
X-Firefox-Spdy: h2
s.yimg.com/wi/ytc.js
200 OK 0 B IP
GET /wi/ytc.js HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pages.upwellness.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: tvjnVo87jGsL+V7RLNbWm5XxHqbdKU3AjkmKWHEMI0SSNvf7GFTkoqmQ3q+nkRrr2Udhi6UP0Wk=
x-amz-request-id: M5BHNT2CMBV43KTB
date: Fri, 25 Nov 2022 02:35:43 GMT
last-modified: Tue, 14 Jun 2022 12:21:31 GMT
x-amz-expiration: expiry-date="Thu, 20 Jul 2023 00:00:00 GMT", rule-id="oath-standard-lifecycle"
x-amz-server-side-encryption: AES256
cache-control: public,max-age=3600
x-amz-version-id: .QD3nDfK79S8_ikLSJXTL23Tdis9tg0C
accept-ranges: bytes
content-type: application/javascript
server: ATS
referrer-policy: no-referrer-when-downgrade
vary: Origin, Accept-Encoding
etag: "6a624022b5d271dcefb070b0b6670abc-df"
age: 266
content-encoding: gzip
strict-transport-security: max-age=15552000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
trc.taboola.com/1225872/trc/3/json?tim=1669344008174&data=%7B%22id%22%3A954%2C%22ii%22%3A%22%2Fuc-i11x-fps%22%2C%22it%22%3A%22video%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22vi%22%3A1669344008168%2C%22cv%22%3A%2220221117-23-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22http%3A%2F%2Fpages.upwellness.com%2Fuc-i11x-fps%2F%3Foffer%3D15%26session_id%3D1023d8631c9ad2431cc56cbf4cf350%26n%3Dtune%26AFFID%3D477232%26subid%3D1_TH221124PM%22%2C%22e%22%3Anull%2C%22cb%22%3A%22TFASC.trkCallback%22%2C%22qs%22%3A%22%3Foffer%3D15%26session_id%3D1023d8631c9ad2431cc56cbf4cf350%26n%3Dtune%26AFFID%3D477232%26subid%3D1_TH221124PM%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Drainmaker-splashdaily-sc%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1669344008173%2C%22ref%22%3Anull%2C%22item-url%22%3A%22http%3A%2F%2Fpages.upwellness.com%2Fuc-i11x-fps%2F%3Foffer%3D15%26session_id%3D1023d8631c9ad2431cc56cbf4cf350%26n%3Dtune%26AFFID%3D477232%26subid%3D1_TH221124PM%22%2C%22tos%22%3A1%2C%22ssd%22%3A1%2C%22scd%22%3A8%2C%22supv%22%3Atrue%7D%7D&pubit=i
200 OK 0 B URL HTTP/2 trc.taboola.com/1225872/trc/3/json?tim=1669344008174&data=%7B%22id%22%3A954%2C%22ii%22%3A%22%2Fuc-i11x-fps%22%2C%22it%22%3A%22video%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22vi%22%3A1669344008168%2C%22cv%22%3A%2220221117-23-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22http%3A%2F%2Fpages.upwellness.com%2Fuc-i11x-fps%2F%3Foffer%3D15%26session_id%3D1023d8631c9ad2431cc56cbf4cf350%26n%3Dtune%26AFFID%3D477232%26subid%3D1_TH221124PM%22%2C%22e%22%3Anull%2C%22cb%22%3A%22TFASC.trkCallback%22%2C%22qs%22%3A%22%3Foffer%3D15%26session_id%3D1023d8631c9ad2431cc56cbf4cf350%26n%3Dtune%26AFFID%3D477232%26subid%3D1_TH221124PM%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Drainmaker-splashdaily-sc%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1669344008173%2C%22ref%22%3Anull%2C%22item-url%22%3A%22http%3A%2F%2Fpages.upwellness.com%2Fuc-i11x-fps%2F%3Foffer%3D15%26session_id%3D1023d8631c9ad2431cc56cbf4cf350%26n%3Dtune%26AFFID%3D477232%26subid%3D1_TH221124PM%22%2C%22tos%22%3A1%2C%22ssd%22%3A1%2C%22scd%22%3A8%2C%22supv%22%3Atrue%7D%7D&pubit=i
IP
GET /1225872/trc/3/json?tim=1669344008174&data=%7B%22id%22%3A954%2C%22ii%22%3A%22%2Fuc-i11x-fps%22%2C%22it%22%3A%22video%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22vi%22%3A1669344008168%2C%22cv%22%3A%2220221117-23-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22http%3A%2F%2Fpages.upwellness.com%2Fuc-i11x-fps%2F%3Foffer%3D15%26session_id%3D1023d8631c9ad2431cc56cbf4cf350%26n%3Dtune%26AFFID%3D477232%26subid%3D1_TH221124PM%22%2C%22e%22%3Anull%2C%22cb%22%3A%22TFASC.trkCallback%22%2C%22qs%22%3A%22%3Foffer%3D15%26session_id%3D1023d8631c9ad2431cc56cbf4cf350%26n%3Dtune%26AFFID%3D477232%26subid%3D1_TH221124PM%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Drainmaker-splashdaily-sc%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1669344008173%2C%22ref%22%3Anull%2C%22item-url%22%3A%22http%3A%2F%2Fpages.upwellness.com%2Fuc-i11x-fps%2F%3Foffer%3D15%26session_id%3D1023d8631c9ad2431cc56cbf4cf350%26n%3Dtune%26AFFID%3D477232%26subid%3D1_TH221124PM%22%2C%22tos%22%3A1%2C%22ssd%22%3A1%2C%22scd%22%3A8%2C%22supv%22%3Atrue%7D%7D&pubit=i HTTP/1.1
Host: trc.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pages.upwellness.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: *
access-control-allow-credentials: true
content-encoding: gzip
accept-ranges: bytes
date: Fri, 25 Nov 2022 02:40:09 GMT
via: 1.1 varnish
x-served-by: cache-bma1658-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1669344009.934809,VS0,VE98
vary: Accept-Encoding
x-vcl-time-ms: 98
X-Firefox-Spdy: h2
analytics.proofapi.com/track?e=%257B%2522pixelId%2522%253A%2522trtc0limNRYJwhvfi9uRqUFQo0w1%2522%252C%2522pixelVersion%2522%253A%25223.1.13%2522%252C%2522visitorId%2522%253A%25221e3b6be3-9d8d-476a-988d-95c78d09a572%2522%252C%2522captureIds%2522%253A%255B%255D%252C%2522integrationType%2522%253A%2522auto-lead-capture%2522%252C%2522localeSetting%2522%253A%2522en%2522%252C%2522os%2522%253A%2522UNIX%2522%252C%2522browser%2522%253A%2522Firefox%2522%252C%2522url%2522%253A%2522http%253A%252F%252Fpages.upwellness.com%252Fuc-i11x-fps%252F%253Foffer%253D15%2526session_id%253D1023d8631c9ad2431cc56cbf4cf350%2526n%253Dtune%2526AFFID%253D477232%2526subid%253D1_TH221124PM%2522%252C%2522cleanUrl%2522%253A%2522pages.upwellness.com%252Fuc-i11x-fps%2522%252C%2522domain%2522%253A%2522pages.upwellness.com%2522%252C%2522pageviews%2522%253A1%252C%2522initialLandingPage%2522%253A%2522http%253A%252F%252Fpages.upwellness.com%252Fuc-i11x-fps%252F%253Foffer%253D15%2526session_id%253D1023d8631c9ad2431cc56cbf4cf350%2526n%253Dtune%2526AFFID%253D477232%2526subid%253D1_TH221124PM%2522%257D
200 OK 0 B URL HTTP/2 analytics.proofapi.com/track?e=%257B%2522pixelId%2522%253A%2522trtc0limNRYJwhvfi9uRqUFQo0w1%2522%252C%2522pixelVersion%2522%253A%25223.1.13%2522%252C%2522visitorId%2522%253A%25221e3b6be3-9d8d-476a-988d-95c78d09a572%2522%252C%2522captureIds%2522%253A%255B%255D%252C%2522integrationType%2522%253A%2522auto-lead-capture%2522%252C%2522localeSetting%2522%253A%2522en%2522%252C%2522os%2522%253A%2522UNIX%2522%252C%2522browser%2522%253A%2522Firefox%2522%252C%2522url%2522%253A%2522http%253A%252F%252Fpages.upwellness.com%252Fuc-i11x-fps%252F%253Foffer%253D15%2526session_id%253D1023d8631c9ad2431cc56cbf4cf350%2526n%253Dtune%2526AFFID%253D477232%2526subid%253D1_TH221124PM%2522%252C%2522cleanUrl%2522%253A%2522pages.upwellness.com%252Fuc-i11x-fps%2522%252C%2522domain%2522%253A%2522pages.upwellness.com%2522%252C%2522pageviews%2522%253A1%252C%2522initialLandingPage%2522%253A%2522http%253A%252F%252Fpages.upwellness.com%252Fuc-i11x-fps%252F%253Foffer%253D15%2526session_id%253D1023d8631c9ad2431cc56cbf4cf350%2526n%253Dtune%2526AFFID%253D477232%2526subid%253D1_TH221124PM%2522%257D
IP
GET /track?e=%257B%2522pixelId%2522%253A%2522trtc0limNRYJwhvfi9uRqUFQo0w1%2522%252C%2522pixelVersion%2522%253A%25223.1.13%2522%252C%2522visitorId%2522%253A%25221e3b6be3-9d8d-476a-988d-95c78d09a572%2522%252C%2522captureIds%2522%253A%255B%255D%252C%2522integrationType%2522%253A%2522auto-lead-capture%2522%252C%2522localeSetting%2522%253A%2522en%2522%252C%2522os%2522%253A%2522UNIX%2522%252C%2522browser%2522%253A%2522Firefox%2522%252C%2522url%2522%253A%2522http%253A%252F%252Fpages.upwellness.com%252Fuc-i11x-fps%252F%253Foffer%253D15%2526session_id%253D1023d8631c9ad2431cc56cbf4cf350%2526n%253Dtune%2526AFFID%253D477232%2526subid%253D1_TH221124PM%2522%252C%2522cleanUrl%2522%253A%2522pages.upwellness.com%252Fuc-i11x-fps%2522%252C%2522domain%2522%253A%2522pages.upwellness.com%2522%252C%2522pageviews%2522%253A1%252C%2522initialLandingPage%2522%253A%2522http%253A%252F%252Fpages.upwellness.com%252Fuc-i11x-fps%252F%253Foffer%253D15%2526session_id%253D1023d8631c9ad2431cc56cbf4cf350%2526n%253Dtune%2526AFFID%253D477232%2526subid%253D1_TH221124PM%2522%257D HTTP/1.1
Host: analytics.proofapi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://cdn.useproof.com
Connection: keep-alive
Referer: https://cdn.useproof.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 25 Nov 2022 02:40:09 GMT
content-type: application/json; charset=utf-8
x-powered-by: Express
access-control-allow-origin: https://cdn.useproof.com
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: X-Requested-With,content-type
access-control-allow-credentials: true
etag: W/"3f-ERqJ6YY3d1po2yzLa5/+mDDMZxE"
via: 1.1 vegur
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=IBd%2B6tno60tEW54qFCDySeh%2FYKqWfQeTkQ2HM8JuHTQNSLz5h8k9Z6BnUsXsu11L0aOAmkHMO5Ex44zbUEL29MjzpS%2FrNU5N%2FckSC6M%2BRTMtKYi7B%2BlwdUylKFuEtPRu6jBn%2FiqfXHby"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76f7049c0d8ab50b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
3.126.202.50
54.146.248.82
23.36.76.226
151.101.86.133
104.18.32.68
93.184.220.29
212.82.100.181
157.240.200.35
141.226.228.48