www.nearlynatural.com/10894606436/orders/6348693670e7d945b05ac004b55173ed/authenticate?key=9cfa749d16fe42bce933cbb62e8acb64
302 Found 0 B URL HTTP/1.1 www.nearlynatural.com/10894606436/orders/6348693670e7d945b05ac004b55173ed/authenticate?key=9cfa749d16fe42bce933cbb62e8acb64
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /10894606436/orders/6348693670e7d945b05ac004b55173ed/authenticate?key=9cfa749d16fe42bce933cbb62e8acb64 HTTP/1.1
Host: www.nearlynatural.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
Date: Fri, 20 Jan 2023 19:29:31 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Sorting-Hat-PodId: 82
X-Sorting-Hat-ShopId: 10894606436
X-Frame-Options: DENY
Location: https://www.nearlynatural.com/10894606436/orders/6348693670e7d945b05ac004b55173ed/authenticate?key=9cfa749d16fe42bce933cbb62e8acb64
X-Shopify-Stage: production
Content-Security-Policy: frame-ancestors 'none'; report-uri /csp-report?source%5Baction%5D=authenticate&source%5Bapp%5D=Shopify&source%5Bcontroller%5D=checkouts%2Fweb%2Forders&source%5Bsection%5D=checkout&source%5Bshop_id%5D=10894606436&source%5Buuid%5D=cd6e611f-5776-4468-ad37-33bf7fd3d3a8
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Permitted-Cross-Domain-Policies: none
X-XSS-Protection: 1; mode=block; report=/xss-report?source%5Baction%5D=authenticate&source%5Bapp%5D=Shopify&source%5Bcontroller%5D=checkouts%2Fweb%2Forders&source%5Bsection%5D=checkout&source%5Bshop_id%5D=10894606436&source%5Buuid%5D=cd6e611f-5776-4468-ad37-33bf7fd3d3a8
X-Dc: gcp-europe-north1,gcp-us-central1,gcp-us-central1
X-Request-ID: cd6e611f-5776-4468-ad37-33bf7fd3d3a8
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=NhDXMtErbXQRNx7WhcJ17igsGAPTC2NmGmAaVXoFDcYwTDo3HEg9OemRjOJbSz8RtH0BA2NVqRl6tbmcL5RjHxJKUReObWiJMn6yoMHL48n%2FEefG6PNZV5MP2YA4p5q%2BRpoumr6mhQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
Server-Timing: cfRequestDuration;dur=301.999807
Server: cloudflare
CF-RAY: 78ca3827e9feb50c-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8a5e416451617846248067d72b675125
995b0346adefaf5f2e167d1b81e60cc9afc4f19e
c5fafb9127b71cbd4f7b1a44f755fc4aa0e2f47bbc50de4b15c870a22bf160d9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C5FAFB9127B71CBD4F7B1A44F755FC4AA0E2F47BBC50DE4B15C870A22BF160D9"
Last-Modified: Fri, 20 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6888
Expires: Fri, 20 Jan 2023 21:24:19 GMT
Date: Fri, 20 Jan 2023 19:29:31 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 37284a837312d6586460a3b86bbe7bd0
6ac0847abd48eb8607597218aaa2cb2d434c012b
6a0e11bb042555d72b397ae0cc3d5e242d3a3fe04418e28ffd222decca7d16ca
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6A0E11BB042555D72B397AE0CC3D5E242D3A3FE04418E28FFD222DECCA7D16CA"
Last-Modified: Wed, 18 Jan 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3678
Expires: Fri, 20 Jan 2023 20:30:49 GMT
Date: Fri, 20 Jan 2023 19:29:31 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 14cd9a0afb6ba9a763651d5112760d1e
75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Retry-After, Content-Type, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Fri, 20 Jan 2023 18:34:37 GMT
content-type: application/json
age: 3294
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7afaa97fbfa9baa1485c892eac8e114d
8c17c707c218e28ac14197ce8e5eef873207a732
59db16baacb452453dbf44fc2a24f25ab09c4dbaec3a9271fda84230d8f11925
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "59DB16BAACB452453DBF44FC2A24F25AB09C4DBAEC3A9271FDA84230D8F11925"
Last-Modified: Wed, 18 Jan 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17728
Expires: Sat, 21 Jan 2023 00:24:59 GMT
Date: Fri, 20 Jan 2023 19:29:31 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP
File type PEM certificate\012- , ASCII text
Hash 7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: 2Y4dusb+YcWvy5qVvdf6VzyU2VZnRFSXI8UuPJf1QFQbXz/NK5g2J1LAN71iCSGBDrG7qwIip24=
x-amz-request-id: 2D96C9GHJV41SV79
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 20 Jan 2023 18:46:28 GMT
age: 2583
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash df4bca9070fd8fa487347da7e80ba310
1eb7104cc8d1c56eb961f03c0ca45ea86c36da2f
62b1297b339f2f03d8bf4be068f5f521e805dd9d936ccd1327bc8efff7eda9e0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "62B1297B339F2F03D8BF4BE068F5F521E805DD9D936CCD1327BC8EFFF7EDA9E0"
Last-Modified: Fri, 20 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13955
Expires: Fri, 20 Jan 2023 23:22:06 GMT
Date: Fri, 20 Jan 2023 19:29:31 GMT
Connection: keep-alive
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 20 Jan 2023 19:29:31 GMT
content-type: application/json
content-length: 12
access-control-allow-credentials: true
access-control-expose-headers: content-type
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash df4bca9070fd8fa487347da7e80ba310
1eb7104cc8d1c56eb961f03c0ca45ea86c36da2f
62b1297b339f2f03d8bf4be068f5f521e805dd9d936ccd1327bc8efff7eda9e0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "62B1297B339F2F03D8BF4BE068F5F521E805DD9D936CCD1327BC8EFFF7EDA9E0"
Last-Modified: Fri, 20 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13955
Expires: Fri, 20 Jan 2023 23:22:06 GMT
Date: Fri, 20 Jan 2023 19:29:31 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Expires, Last-Modified, Alert, Content-Type, Content-Length, ETag, Pragma, Cache-Control, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Fri, 20 Jan 2023 18:48:58 GMT
age: 2433
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash bdb8a13dfce39d6e151a9ef185a772a1
037a680510f9dbce3c7cc3c0f9115fd587dbcd1d
98c8b7f269b9aad73b73fd946788ebfd7a4d7afbdd5347b56c67f73b947f5ff6
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5691
Cache-Control: max-age=141135
Content-Type: application/ocsp-response
Date: Fri, 20 Jan 2023 19:29:31 GMT
Etag: "63ca59af-1d7"
Expires: Sun, 22 Jan 2023 10:41:46 GMT
Last-Modified: Fri, 20 Jan 2023 09:06:55 GMT
Server: ECS (ska/F71C)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: Z6V+JCR/7twtjM+XIrDnzw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: WYPj8hlGMedCV8GLnY9hbBEHeZ0=
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 15ba07243d8edda30f5a90b52108c444
ca72cd13cf9c2ee11ea991fa5f988eef7b01b2f3
a34f369c9e92d917c61ab18a8722ea38cd061127990f27204afac403bd1c28f9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A34F369C9E92D917C61AB18A8722EA38CD061127990F27204AFAC403BD1C28F9"
Last-Modified: Fri, 20 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7598
Expires: Fri, 20 Jan 2023 21:36:10 GMT
Date: Fri, 20 Jan 2023 19:29:32 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 15ba07243d8edda30f5a90b52108c444
ca72cd13cf9c2ee11ea991fa5f988eef7b01b2f3
a34f369c9e92d917c61ab18a8722ea38cd061127990f27204afac403bd1c28f9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A34F369C9E92D917C61AB18A8722EA38CD061127990F27204AFAC403BD1C28F9"
Last-Modified: Fri, 20 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7598
Expires: Fri, 20 Jan 2023 21:36:10 GMT
Date: Fri, 20 Jan 2023 19:29:32 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 15ba07243d8edda30f5a90b52108c444
ca72cd13cf9c2ee11ea991fa5f988eef7b01b2f3
a34f369c9e92d917c61ab18a8722ea38cd061127990f27204afac403bd1c28f9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A34F369C9E92D917C61AB18A8722EA38CD061127990F27204AFAC403BD1C28F9"
Last-Modified: Fri, 20 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7598
Expires: Fri, 20 Jan 2023 21:36:10 GMT
Date: Fri, 20 Jan 2023 19:29:32 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 15ba07243d8edda30f5a90b52108c444
ca72cd13cf9c2ee11ea991fa5f988eef7b01b2f3
a34f369c9e92d917c61ab18a8722ea38cd061127990f27204afac403bd1c28f9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A34F369C9E92D917C61AB18A8722EA38CD061127990F27204AFAC403BD1C28F9"
Last-Modified: Fri, 20 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7598
Expires: Fri, 20 Jan 2023 21:36:10 GMT
Date: Fri, 20 Jan 2023 19:29:32 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 0d8d55791acc6bce29e4599c25afe522
596f02869a51de3f6d522585be0b1b841f880fbe
64c7b6f660a100f085af77eff4848a75239200c8af93382650c3defa1bfd2829
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 20 Jan 2023 19:29:32 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/s/gts1d4/Udi7jfC2-KY
200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/Udi7jfC2-KY
IP
Hash c07696900a238e3720bcc2d1699bdba6
1f61a7d27f6ecb9c208e005e88670c04237a7c6f
bc208ee25b9e05a5c56ffc17dced15a0dce1431637b028d351c438700cc8e481
POST /s/gts1d4/Udi7jfC2-KY HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 20 Jan 2023 19:29:32 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
shopify-gtm-suite.getelevar.com/shops/920b8fe7aebdde46c3642961bd9357fa43c356c0/events.js
200 OK 8.2 kB URL HTTP/2 shopify-gtm-suite.getelevar.com/shops/920b8fe7aebdde46c3642961bd9357fa43c356c0/events.js
IP
File type Unicode text, UTF-8 text, with very long lines (23506), with no line terminators
Hash c8cc3ae0309f19c2979e6ab19aaf60cc
38492b4bcb5df44b04d1648e6078cbf8691fbb35
8c4c1d185f2840db0065e7b40d88b565755038b26d8b79e43171b20064083803
GET /shops/920b8fe7aebdde46c3642961bd9357fa43c356c0/events.js HTTP/1.1
Host: shopify-gtm-suite.getelevar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nearlynatural.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-guploader-uploadid: ADPycduJ5ySyGHgXhqcewqprLAKqwiVNgKnXtLxDa7xYotECNX3l_lrbZT3OFrX9wLfBNz6ZHci0SqOxP9k0KV4q4pOWjA
x-goog-generation: 1669685077155549
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 8238
content-encoding: gzip
x-goog-hash: crc32c=1t3H+Q==, md5=yMw64DCfGcKXnmqxmq9gzA==
x-goog-storage-class: STANDARD
accept-ranges: bytes
content-length: 8238
vary: Origin
server: UploadServer
date: Fri, 13 Jan 2023 03:23:13 GMT
expires: Sat, 13 Jan 2024 03:23:13 GMT
cache-control: no-transform
last-modified: Tue, 29 Nov 2022 01:24:37 GMT
etag: "c8cc3ae0309f19c2979e6ab19aaf60cc"
content-type: application/javascript
age: 662779
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.googletagmanager.com/gtm.js?id=GTM-5235WJV
200 OK 100 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-5235WJV
IP
File type ASCII text, with very long lines (35937)
Size 100 kB (100486 bytes)
Hash 00260b2eedcc00890899f084d9ba39ca
d7de8b349fbc4d8594b00dab852144d4de90203b
76630ab896e074969824a9aaaa85e4498246f8feee2f34baf54a8da7f66f7623
GET /gtm.js?id=GTM-5235WJV HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nearlynatural.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 20 Jan 2023 19:29:32 GMT
expires: Fri, 20 Jan 2023 19:29:32 GMT
cache-control: private, max-age=900
last-modified: Fri, 20 Jan 2023 18:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 100486
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
cdn.shopify.com/s/files/1/0108/9460/6436/files/NearlyNatural_Logo-loop2.png?79331
200 OK 3.8 kB URL HTTP/2 cdn.shopify.com/s/files/1/0108/9460/6436/files/NearlyNatural_Logo-loop2.png?79331
IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
File type PNG image data, 148 x 80, 8-bit/color RGBA, non-interlaced\012- data
Hash 913fdadffbbd031b583875f6e704aa1e
8a01a6e34e7f920920b23932afac79c55796da65
7665f92e7e5f92285dd5f2b4efc83a2d86b727a11480e7028a03e04dceccb12f
GET /s/files/1/0108/9460/6436/files/NearlyNatural_Logo-loop2.png?79331 HTTP/1.1
Host: cdn.shopify.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 20 Jan 2023 19:29:32 GMT
content-type: image/png
content-length: 3830
access-control-allow-origin: *
access-control-expose-headers: *
cache-control: public, max-age=31557600
link: <https://cdn.shopify.com/s/files/1/0108/9460/6436/files/NearlyNatural_Logo-loop2.png>; rel="canonical"
source-length: 3722
source-type: image/png
timing-allow-origin: *
vary: Accept, Accept-Encoding
x-content-type-options: nosniff
x-request-id: 8b33d001-7124-4077-9614-b6dfcb1cfe97
x-xss-protection: 1; mode=block
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-dc: gcp-us-east1,gcp-us-central1
last-modified: Fri, 20 Jan 2023 19:16:49 GMT
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=skRL%2FknjmT0ILwN2tpI48ORegtWbQ0OL5cKJALR%2Bran%2Fs9QyZzlQ%2FjtuvDJ%2FYmMfF0SWzGtB47ppKzOygw4CCvO%2FrJ%2B3XLuWWuEtsZbDWbQZ86T%2FD%2FWr0CjiL2Vy2TRHMQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
server-timing: imagery;dur=367.242, imageryFetch;dur=109.677, imageryProcess;dur=256.298;desc="image", cfRequestDuration;dur=126.999855
server: cloudflare
cf-ray: 78ca38328bc61c0a-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 15ba07243d8edda30f5a90b52108c444
ca72cd13cf9c2ee11ea991fa5f988eef7b01b2f3
a34f369c9e92d917c61ab18a8722ea38cd061127990f27204afac403bd1c28f9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A34F369C9E92D917C61AB18A8722EA38CD061127990F27204AFAC403BD1C28F9"
Last-Modified: Fri, 20 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7598
Expires: Fri, 20 Jan 2023 21:36:10 GMT
Date: Fri, 20 Jan 2023 19:29:32 GMT
Connection: keep-alive
cdn.shopify.com/s/files/1/0108/9460/6436/products/artificial-26-sansevieria-artificial-plant-nearly-natural-780529_small.jpg?v=1584166135
200 OK 2.5 kB URL HTTP/2 cdn.shopify.com/s/files/1/0108/9460/6436/products/artificial-26-sansevieria-artificial-plant-nearly-natural-780529_small.jpg?v=1584166135
IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
File type ISO Media, AVIF Image\012- data
Hash fbf9890736412ffabae454c71ab6f63a
3d561d1bc6fed78a7b7ed70cb40be2d283f688e6
a851cf0407dd33ddb9744d309dd2d786b54d256f40c0de811f8260857ce6477f
GET /s/files/1/0108/9460/6436/products/artificial-26-sansevieria-artificial-plant-nearly-natural-780529_small.jpg?v=1584166135 HTTP/1.1
Host: cdn.shopify.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 20 Jan 2023 19:29:32 GMT
content-type: image/avif
content-length: 2458
access-control-allow-origin: *
access-control-expose-headers: *
cache-control: public, max-age=31557600
link: <https://cdn.shopify.com/s/files/1/0108/9460/6436/products/artificial-26-sansevieria-artificial-plant-nearly-natural-780529_small.jpg>; rel="canonical"
source-length: 158446
source-type: image/jpeg
timing-allow-origin: *
vary: Accept, Accept-Encoding
x-content-type-options: nosniff
x-request-id: 49f34296-937a-4153-969f-8caee6b2e1ac
x-xss-protection: 1; mode=block
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-dc: gcp-us-central1,gcp-us-central1
last-modified: Fri, 20 Jan 2023 04:12:07 GMT
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jz9sjzb%2FF6FENNI%2F%2FHxthXyF99p%2BSRPgzTHejmNBMXnXSHP6ajV8Opr27GnRtSIIOgHvw1lzCKK0mUv9oXVColbtApg16VbdkSaEoRVn9MqXWUSJrYejolMmLWq0GGAAZw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
server-timing: imagery;dur=226.749, imageryFetch;dur=42.883, imageryProcess;dur=182.769;desc="image", cfRequestDuration;dur=131.999969
server: cloudflare
cf-ray: 78ca38329bd81c0a-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.attn.tv/checkout/checkout.js
200 OK 6.4 kB URL HTTP/2 cdn.attn.tv/checkout/checkout.js
IP
Hash c5b45ac6d75b170db8b459b546a94c60
88d8de66685bb69a853cd57fc134317f12894072
61ba75ae9ec14909d9d6652f1ff1939bd16bd452c514ba1f275996e68d1f6b60
GET /checkout/checkout.js HTTP/1.1
Host: cdn.attn.tv
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
last-modified: Mon, 23 Nov 2020 18:50:08 GMT
x-amz-version-id: 12RHvzVpePJPM_R9tiRSIgubYkdVseR4
server: AmazonS3
content-encoding: gzip
date: Fri, 20 Jan 2023 19:29:32 GMT
cache-control: public, max-age=300
etag: W/"25e629cff471f51e0cfba3eb956a5063"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 50584ad285d5f627ddebae74efdd0770.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 62QJ9YcU9V1mJi39YXyRJmu9j6LD1RBH7qm9Z287OnX9IU-NepmQlQ==
age: 103
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1d4/Udi7jfC2-KY
200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/Udi7jfC2-KY
IP
Hash c07696900a238e3720bcc2d1699bdba6
1f61a7d27f6ecb9c208e005e88670c04237a7c6f
bc208ee25b9e05a5c56ffc17dced15a0dce1431637b028d351c438700cc8e481
POST /s/gts1d4/Udi7jfC2-KY HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 20 Jan 2023 19:29:32 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cdn.shopify.com/s/files/1/0108/9460/6436/products/artificial-28-agave-artificial-plant-nearly-natural-985238_small.jpg?v=1584167523
200 OK 2.7 kB URL HTTP/2 cdn.shopify.com/s/files/1/0108/9460/6436/products/artificial-28-agave-artificial-plant-nearly-natural-985238_small.jpg?v=1584167523
IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
File type RIFF (little-endian) data, Web/P image\012- data
Hash f33f56778a8e824c463d85f066443ecb
f974336ec964440fe59f7df5138ec07a19db4b28
1f85699dcaa670cef08ab529a9a08c11229095c60a3f2aaa4219298c0a61ecc1
GET /s/files/1/0108/9460/6436/products/artificial-28-agave-artificial-plant-nearly-natural-985238_small.jpg?v=1584167523 HTTP/1.1
Host: cdn.shopify.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 20 Jan 2023 19:29:32 GMT
content-type: image/webp
content-length: 2736
access-control-allow-origin: *
access-control-expose-headers: *
cache-control: public, max-age=31557600
link: <https://cdn.shopify.com/s/files/1/0108/9460/6436/products/artificial-28-agave-artificial-plant-nearly-natural-985238_small.jpg>; rel="canonical"
source-length: 143555
source-type: image/jpeg
timing-allow-origin: *
vary: Accept, Accept-Encoding
x-content-type-options: nosniff
x-request-id: 5f524918-6a14-43c6-8461-7234a82c8ef0
x-xss-protection: 1; mode=block
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-dc: gcp-us-central1,gcp-us-central1
last-modified: Fri, 20 Jan 2023 19:29:32 GMT
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ofSEWJfGxH98O%2B5xK5g57gO0PPIotzrOF1aAQjHCIW60u7UafiKU3oF0qW3S3%2BRqsnIJsQhi1CqutT06yuX05pH1YbbDRsnrcsTjg9Xh7LwLncxKT2K0CHubPfDZlYqAqQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
server-timing: imagery;dur=282.441, imageryFetch;dur=59.447, imageryProcess;dur=221.726;desc="image", cfRequestDuration;dur=424.999952
server: cloudflare
cf-ray: 78ca38328bd21c0a-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 89055b1f42119cc1e7a33ce2fc364e76
20550fd56bf49a8aa30e18a923be22cda3f2ba7b
7698e9bb59f46011dbd3b6b74fc5784ac60d64c9d8403e8fe3aa18a60c17393d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7698E9BB59F46011DBD3B6B74FC5784AC60D64C9D8403E8FE3AA18A60C17393D"
Last-Modified: Wed, 18 Jan 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11061
Expires: Fri, 20 Jan 2023 22:33:54 GMT
Date: Fri, 20 Jan 2023 19:29:33 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 89055b1f42119cc1e7a33ce2fc364e76
20550fd56bf49a8aa30e18a923be22cda3f2ba7b
7698e9bb59f46011dbd3b6b74fc5784ac60d64c9d8403e8fe3aa18a60c17393d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7698E9BB59F46011DBD3B6B74FC5784AC60D64C9D8403E8FE3AA18A60C17393D"
Last-Modified: Wed, 18 Jan 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11061
Expires: Fri, 20 Jan 2023 22:33:54 GMT
Date: Fri, 20 Jan 2023 19:29:33 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 89055b1f42119cc1e7a33ce2fc364e76
20550fd56bf49a8aa30e18a923be22cda3f2ba7b
7698e9bb59f46011dbd3b6b74fc5784ac60d64c9d8403e8fe3aa18a60c17393d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7698E9BB59F46011DBD3B6B74FC5784AC60D64C9D8403E8FE3AA18A60C17393D"
Last-Modified: Wed, 18 Jan 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11061
Expires: Fri, 20 Jan 2023 22:33:54 GMT
Date: Fri, 20 Jan 2023 19:29:33 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc0c09209-bc9e-43f8-ace4-c90a39c75c63.jpeg
200 OK 6.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc0c09209-bc9e-43f8-ace4-c90a39c75c63.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5553b06c7dde4dc377f9f4e65bc8ace7
9dca5486485416d1aef199be08a50abd717addc7
33a5d1a21738218e0a6fe16d79045bd390af2e84073330a0a94c03812e1ba3ba
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc0c09209-bc9e-43f8-ace4-c90a39c75c63.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6557
x-amzn-requestid: 70710215-b8fd-44eb-8b50-f0948f98366c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fAmQWFNvoAMF3ZQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c9b735-19e7e3865ce991cb5447f0f2;Sampled=0
x-amzn-remapped-date: Thu, 19 Jan 2023 21:33:41 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Fc9dIiT5QQaTowAA6lp8ffJl4Niq3i_iVe54lYhAV52kJ8Q98EMJqQ==
via: 1.1 1cc6ed0d2d3dd9529ce544f9dfe61a52.cloudfront.net (CloudFront), 1.1 12a392bc3a7281f8d5d4591bfadc41fc.cloudfront.net (CloudFront), 1.1 google
date: Thu, 19 Jan 2023 21:58:19 GMT
age: 77474
etag: "9dca5486485416d1aef199be08a50abd717addc7"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F03285c30-851a-4892-8ad6-994296dfce51.jpeg
200 OK 5.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F03285c30-851a-4892-8ad6-994296dfce51.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1eff6cdee4c98a6f806c5b417b12cdf2
4b4b817055dc2c0699c6e01d85841638e63d9c0e
2f2fdd1e829e4175e8cf915794ffc16e24dac72ab425448cd0ac5165b1b87b2f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F03285c30-851a-4892-8ad6-994296dfce51.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5351
x-amzn-requestid: 86ba43bc-0b0f-40ba-9015-463371baf673
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: e3foQFg_IAMFSZA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c61301-0c1461622a361a5d0ab35cbb;Sampled=0
x-amzn-remapped-date: Tue, 17 Jan 2023 03:16:17 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 6KG0FqyN4ShRqE3cdV81X749Tlas0mf5W7Elvt5WOMZ1BHc3LXXU1g==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 324a68a6c25ee50d774953f3e15a611c.cloudfront.net (CloudFront), 1.1 google
date: Fri, 20 Jan 2023 07:21:11 GMT
age: 43702
etag: "4b4b817055dc2c0699c6e01d85841638e63d9c0e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbbb60a79-f6ba-46cb-8679-5da65b53c107.webp
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbbb60a79-f6ba-46cb-8679-5da65b53c107.webp
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3638dc76d0638625ac9a31c038df3a44
deff1903d591273a96d538ae77988d8a080e228c
8382af3843ebeca8e5c13fdd60f7fb92b479915416f36686fce40566fd87ce68
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbbb60a79-f6ba-46cb-8679-5da65b53c107.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10867
x-amzn-requestid: 8d882e21-d4c5-49ac-b76a-198cec065377
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fAnVTEfpoAMFgJA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c9b8ee-6579537e6a82269f4bc99395;Sampled=0
x-amzn-remapped-date: Thu, 19 Jan 2023 21:41:02 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: U9KuaPBC5u3bWYidHridxyj8GEYB79yig6zD9FxGCGwXh6zvs7QokA==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 2bedbeaa49b4a77447d30097858cb81a.cloudfront.net (CloudFront), 1.1 google
date: Thu, 19 Jan 2023 22:01:55 GMT
age: 77258
etag: "deff1903d591273a96d538ae77988d8a080e228c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
cdn.shopify.com/shopifycloud/shopify/assets/shop_qr-1f53501e8ad08edc204b781136461a901672e8838b9408142dbd5469245aed63.js
200 OK 21 kB URL HTTP/2 cdn.shopify.com/shopifycloud/shopify/assets/shop_qr-1f53501e8ad08edc204b781136461a901672e8838b9408142dbd5469245aed63.js
IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
File type ASCII text, with very long lines (19843), with no line terminators
Hash eb9afe0ad8e742d2d1cd21abca658d5f
1942448b9b8f6f392e5ce4f910729be00088fc63
1eb7eb1dc10850d6e8c0b04c2aa765357e5f5d03982808903aa7f3a354db0e6c
GET /shopifycloud/shopify/assets/shop_qr-1f53501e8ad08edc204b781136461a901672e8838b9408142dbd5469245aed63.js HTTP/1.1
Host: cdn.shopify.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Origin: https://www.nearlynatural.com
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 20 Jan 2023 19:29:32 GMT
content-type: text/javascript
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=31556952, immutable
link: <https://cdn.shopify.com/shopifycloud/shopify/assets/shop_qr-1f53501e8ad08edc204b781136461a901672e8838b9408142dbd5469245aed63.js>; rel="canonical"
timing-allow-origin: *
x-content-type-options: nosniff
x-request-id: a6e74d1f-75da-4c5e-ba38-202c014f936c
x-xss-protection: 1; mode=block
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-dc: gcp-us-east1,us-east1
last-modified: Fri, 14 Oct 2022 12:56:02 GMT
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=yBH0dqfcefogJ4Hj02lLLZ8JP6lqSknNdd17cA6KleGILJahQD7B%2BV7w8cDsi2prYWKV20A%2BBT5cFkRcO4s4t97QmSnzHZTn7kMbTGLqIZUBrNM9C%2BWZ5I6NPj8uidalHw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
server-timing: imagery;dur=28.554, imageryFetch;dur=28.388, cfRequestDuration;dur=159.000158
server: cloudflare
cf-ray: 78ca38327bb91c0a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb1122c75-908d-4e51-8a61-b64f7ab77c76.jpeg
200 OK 7.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb1122c75-908d-4e51-8a61-b64f7ab77c76.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f5195ac5d83278bed049661c0d1aaa4a
74b3e81e1dfc9f0a50aa936ba02b357c0df3aa9e
30af8f591b2d4f7c8de7d52ea53bb170ca426ef0550001c7802a7f993a6344df
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb1122c75-908d-4e51-8a61-b64f7ab77c76.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7111
x-amzn-requestid: d9b5e6b0-3995-4c70-be84-0b1b457b7143
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fAmRlHtkIAMFiGg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c9b73d-37d253ee68fe1b7e483097dd;Sampled=0
x-amzn-remapped-date: Thu, 19 Jan 2023 21:33:49 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 86-hgCgiYN-PYLZgXJO79kM9Vm6DIiRixaz-kQZFaY0m5481x8GWlw==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 112d82578d402a38d8d02e8b857617e0.cloudfront.net (CloudFront), 1.1 google
date: Thu, 19 Jan 2023 22:04:16 GMT
etag: "74b3e81e1dfc9f0a50aa936ba02b357c0df3aa9e"
content-type: image/jpeg
age: 77117
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F035e7b24-d861-44e8-ac81-1dcc5e3a0e2a.jpeg
200 OK 5.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F035e7b24-d861-44e8-ac81-1dcc5e3a0e2a.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6889019ec9c1155e9e4b4eeb6a86760d
59c6f3a313efba4a67a63c9ae725db8d17c08c03
378510ecdbbb2b6248391195eace1dc3120d18b6f13e52033a3e88024592cac4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F035e7b24-d861-44e8-ac81-1dcc5e3a0e2a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5588
x-amzn-requestid: c9d6f09b-2cd9-4137-9369-0295836e06e0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fAnT0FkNIAMF7Yw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c9b8e5-5c6360c025826ed06525c67e;Sampled=0
x-amzn-remapped-date: Thu, 19 Jan 2023 21:40:53 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: YDM_osYMROfqJk1OPZCo05eNDlcbqMjPkc0AvggHtzmOiDY12BS78Q==
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 981753271eb5b6d11bc29d52f173a5da.cloudfront.net (CloudFront), 1.1 google
date: Thu, 19 Jan 2023 22:02:01 GMT
age: 77252
etag: "59c6f3a313efba4a67a63c9ae725db8d17c08c03"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
region1.google-analytics.com/g/collect?v=2&tid=G-PVTH6KWPSR>m=2oe1i0&_p=99240072&cid=1634987963.1674242972&ul=en-us&sr=1280x1024&_s=1&sid=1674242972&sct=1&seg=0&dl=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F6348693670e7d945b05ac004b55173ed&dt=Thank%20you%20Dala!%20-%20Nearly%20Natural%20-%20Checkout&en=page_view&_fv=1&_nsi=1&_ss=1&up.visitor_type=guest
204 No Content 0 B URL HTTP/2 region1.google-analytics.com/g/collect?v=2&tid=G-PVTH6KWPSR>m=2oe1i0&_p=99240072&cid=1634987963.1674242972&ul=en-us&sr=1280x1024&_s=1&sid=1674242972&sct=1&seg=0&dl=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F6348693670e7d945b05ac004b55173ed&dt=Thank%20you%20Dala!%20-%20Nearly%20Natural%20-%20Checkout&en=page_view&_fv=1&_nsi=1&_ss=1&up.visitor_type=guest
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-PVTH6KWPSR>m=2oe1i0&_p=99240072&cid=1634987963.1674242972&ul=en-us&sr=1280x1024&_s=1&sid=1674242972&sct=1&seg=0&dl=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F6348693670e7d945b05ac004b55173ed&dt=Thank%20you%20Dala!%20-%20Nearly%20Natural%20-%20Checkout&en=page_view&_fv=1&_nsi=1&_ss=1&up.visitor_type=guest HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Origin: https://www.nearlynatural.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://www.nearlynatural.com
date: Fri, 20 Jan 2023 19:29:33 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 1.4 kB IP
Hash 5e13b673a85534f291922d80bac4eab2
e1d46c424c6167a11f80bd6a83f2df711185c446
cc913a2f8254b54c41b1cc77c6c1efd63c23abd7f366a92ded197c0d55e36923
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2421
Cache-Control: max-age=89633
Content-Type: application/ocsp-response
Date: Fri, 20 Jan 2023 19:29:33 GMT
Etag: "63c99d4a-2d7"
Expires: Sat, 21 Jan 2023 20:23:26 GMT
Last-Modified: Thu, 19 Jan 2023 19:43:06 GMT
Server: ECS (ska/F71C)
X-Cache: HIT
Content-Length: 727
shop.pe/widget/widget_async.js
301 Moved Permanently 178 B URL HTTP/2 shop.pe/widget/widget_async.js
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash cd2e0e43980a00fb6a2742d3afd803b8
81ffbd1712afe8cdf138b570c0fc9934742c33c1
bd9df047d51943acc4bc6cf55d88edb5b6785a53337ee2a0f74dd521aedde87d
GET /widget/widget_async.js HTTP/1.1
Host: shop.pe
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
server: nginx
date: Fri, 20 Jan 2023 19:29:34 GMT
content-type: text/html
content-length: 178
location: https://d3rr3d0n31t48m.cloudfront.net/widget/widget_async.js
x-frame-options: deny
content-security-policy: frame-ancestors none;
strict-transport-security: max-age=31536000; includeSubDomains
referrer-policy: no-referrer-when-downgrade
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.shopify.com/app/services/10894606436/javascripts/checkout_countries/124581314643/en-US/countries-183b980cd6c66ee4355991a9a9056cf654976758-0.js?version=2021-01-25
200 OK 31 kB URL HTTP/2 cdn.shopify.com/app/services/10894606436/javascripts/checkout_countries/124581314643/en-US/countries-183b980cd6c66ee4355991a9a9056cf654976758-0.js?version=2021-01-25
IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
File type Unicode text, UTF-8 text, with very long lines (62586)
Hash b8501ea1c5143250fcd27d2bc3a81947
469f213fd15da21c3b07b08bd342c3dc8955ece1
c228170559e1b7ae8b79e4dbd07929a1656eb380845e6602cd35c36e60bb2c15
GET /app/services/10894606436/javascripts/checkout_countries/124581314643/en-US/countries-183b980cd6c66ee4355991a9a9056cf654976758-0.js?version=2021-01-25 HTTP/1.1
Host: cdn.shopify.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Origin: https://www.nearlynatural.com
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 20 Jan 2023 19:29:33 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: no-cache
content-language: en-US
link: <https://cdn.shopify.com/app/services/10894606436/javascripts/checkout_countries/124581314643/en-US/countries-183b980cd6c66ee4355991a9a9056cf654976758-0.js>; rel="canonical"
timing-allow-origin: *
x-content-type-options: nosniff
x-request-id: 0c899814-2a55-4c9c-b3de-7a513f2d8c20
x-xss-protection: 1; mode=block
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-dc: gcp-us-central1,gcp-us-east1
last-modified: Fri, 20 Jan 2023 19:26:57 GMT
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Xtr2Hjo0QJ76p5x9r6TqQiUMrEUvElTpYu9ySBW%2BqO6C2Eu2ipHZrlon41ds%2B6y%2BWPGj74BbvMvG9%2FPLqr1e6L%2FM1zcFn1pvZ9UeT1IbeUlp%2BTFY0EOvxV%2FjHK2FpNgymQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
server-timing: imagery;dur=817.149, imageryFetch;dur=816.956, cfRequestDuration;dur=1033.999920
server: cloudflare
cf-ray: 78ca38327bbe1c0a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.attn.tv/tag/4-latest/unified-tag.js?v=4-latest_263507365a
200 OK 31 kB URL HTTP/2 cdn.attn.tv/tag/4-latest/unified-tag.js?v=4-latest_263507365a
IP
Hash 4f8833f954f87da5f8fb093489f50f09
6acf8651299e427d15d4467e0ef0236821a82be5
2804f7219b4d0dd9a05140ca8b49d742931f3d54c0b302e07c8ac6dfdc7ae7ec
GET /tag/4-latest/unified-tag.js?v=4-latest_263507365a HTTP/1.1
Host: cdn.attn.tv
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
x-amz-replication-status: COMPLETED
last-modified: Tue, 17 Jan 2023 20:53:48 GMT
x-amz-version-id: xqr6VwIZ4g4Tr.55DcE7Z4Jb.18Zi98q
server: AmazonS3
content-encoding: gzip
date: Fri, 20 Jan 2023 19:29:22 GMT
cache-control: public, max-age=300
etag: W/"a1da8ef8e7607e2c498a21099e8ce0e5"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 50584ad285d5f627ddebae74efdd0770.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: BZrup567dwj2MRjHKCSOC-PnJK73pW_3Z3wVdRrk4BtbQW1NO2hiJg==
age: 12
X-Firefox-Spdy: h2
events.attentivemobile.com/e?v=4.16.27_3b1f8ef468&pd=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F6348693670e7d945b05ac004b55173ed&u=64df4dad74334bbdb034eab1d0601d62&c=nearlynatural&ceid=M0e<=1674242973641&tag=modern&cs=1339779608&t=v&r=&m=%7B%22source%22%3A%22a%22%7D&cb=1674242973648
200 OK 0 B URL HTTP/2 events.attentivemobile.com/e?v=4.16.27_3b1f8ef468&pd=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F6348693670e7d945b05ac004b55173ed&u=64df4dad74334bbdb034eab1d0601d62&c=nearlynatural&ceid=M0e<=1674242973641&tag=modern&cs=1339779608&t=v&r=&m=%7B%22source%22%3A%22a%22%7D&cb=1674242973648
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /e?v=4.16.27_3b1f8ef468&pd=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F6348693670e7d945b05ac004b55173ed&u=64df4dad74334bbdb034eab1d0601d62&c=nearlynatural&ceid=M0e<=1674242973641&tag=modern&cs=1339779608&t=v&r=&m=%7B%22source%22%3A%22a%22%7D&cb=1674242973648 HTTP/1.1
Host: events.attentivemobile.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Origin: https://www.nearlynatural.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 200 OK
date: Fri, 20 Jan 2023 19:29:34 GMT
content-type: text/plain;charset=UTF-8
content-length: 0
x-envoy-upstream-service-time: 1
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 78ca383e1c18b524-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
checkout.shopify.com/10894606436/sandbox/google_maps?locale=en-US
200 OK 886 B URL HTTP/2 checkout.shopify.com/10894606436/sandbox/google_maps?locale=en-US
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text
Hash da26949445ab5d51f79d9aa0941e8170
bcac606b5bf12de0546580075c2dc432dc74c2bf
f79746e0da1410fcb8cb0c91bbb507b1f21714619bd589f67f75c700616410b0
GET /10894606436/sandbox/google_maps?locale=en-US HTTP/1.1
Host: checkout.shopify.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 20 Jan 2023 19:29:34 GMT
content-type: text/html; charset=utf-8
x-sorting-hat-podid: 82
x-sorting-hat-shopid: 10894606436
vary: Accept-Encoding
x-shopid: 10894606436
x-shardid: 82
x-robots-tag: none
referrer-policy: origin-when-cross-origin
content-language: en-US
cache-control: no-cache
strict-transport-security: max-age=315569520; includeSubdomains
set-cookie: _cmp_a=%7B%22purposes%22%3A%7B%22a%22%3Atrue%2C%22p%22%3Atrue%2C%22m%22%3Atrue%2C%22t%22%3Atrue%7D%2C%22display_banner%22%3Afalse%2C%22merchant_geo%22%3A%22USUSFL%22%2C%22sale_of_data_region%22%3Afalse%7D; domain=shopify.com; path=/; expires=Sat, 21 Jan 2023 19:29:34 GMT; SameSite=Lax
_orig_referrer=https%3A%2F%2Fwww.nearlynatural.com%2F; Expires=Fri, 03-Feb-23 19:29:34 GMT; Domain=shopify.com; Path=/; HttpOnly; SameSite=Lax
_landing_page=%2F10894606436%2Fsandbox%2Fgoogle_maps%3Flocale%3Den-US; Expires=Fri, 03-Feb-23 19:29:34 GMT; Domain=shopify.com; Path=/; HttpOnly; SameSite=Lax
_y=30b9f091-d09f-41a4-9b87-61e592cd8eac; Expires=Sat, 20-Jan-24 19:29:34 GMT; Domain=shopify.com; Path=/; SameSite=Lax
_s=f413538a-5b9e-4ccd-b435-b461e92713e1; Expires=Fri, 20-Jan-23 19:59:34 GMT; Domain=shopify.com; Path=/; SameSite=Lax
_shopify_y=30b9f091-d09f-41a4-9b87-61e592cd8eac; Expires=Sat, 20-Jan-24 19:29:34 GMT; Domain=shopify.com; Path=/; SameSite=Lax
_shopify_s=f413538a-5b9e-4ccd-b435-b461e92713e1; Expires=Fri, 20-Jan-23 19:59:34 GMT; Domain=shopify.com; Path=/; SameSite=Lax
x-shopify-stage: production
content-security-policy: frame-ancestors *; upgrade-insecure-requests; report-uri /csp-report?source%5Baction%5D=google_maps&source%5Bapp%5D=Shopify&source%5Bcontroller%5D=checkouts%2Fweb%2Fsandbox&source%5Bsection%5D=checkout&source%5Bshop_id%5D=10894606436&source%5Buuid%5D=3414bd95-006e-4464-a740-2a21f2f3407a
x-content-type-options: nosniff
x-download-options: noopen
x-permitted-cross-domain-policies: none
x-xss-protection: 1; mode=block; report=/xss-report?source%5Baction%5D=google_maps&source%5Bapp%5D=Shopify&source%5Bcontroller%5D=checkouts%2Fweb%2Fsandbox&source%5Bsection%5D=checkout&source%5Bshop_id%5D=10894606436&source%5Buuid%5D=3414bd95-006e-4464-a740-2a21f2f3407a
x-dc: gcp-europe-north1,gcp-us-central1,gcp-us-central1
x-request-id: 3414bd95-006e-4464-a740-2a21f2f3407a
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Gc8BmDMuMJ0W%2BAGpfYUzilhzw6oNl9C0o9Q17HZBraqsak%2F5r0oPvKUJ6T7dBS8QN6InJGWsDXXtPsouvWMiu2FBFI0d6F2v9maAqbWAf%2FuDPOqmy9f47gxeXjNcHUCgVj7bPRY2"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
server-timing: cfRequestDuration;dur=271.999836
server: cloudflare
cf-ray: 78ca383b4b49b4f7-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash bd9ed9c3f88cda5456e13a134e27b268
aaa82eb935ce140174b2392ac7f7d80e2ddff1c5
a5621fa38dc23d545f834fc7331e59fc61825004b2c599c11c89628175333ca6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 20 Jan 2023 19:29:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
checkout.shopify.com/10894606436/sandbox/google_maps?locale=en-US
200 OK 54 kB URL HTTP/2 checkout.shopify.com/10894606436/sandbox/google_maps?locale=en-US
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text
Hash 9bebf3a578d75daa49d47df16b4e810c
460c5dc7556585ac56ac05c216d513173f8ef72e
ea701fcbfc9cec8cf7d608b87f608351637341b1871cc0be7543d29fcdf95dcb
GET /10894606436/sandbox/google_maps?locale=en-US HTTP/1.1
Host: checkout.shopify.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 20 Jan 2023 19:29:34 GMT
content-type: text/html; charset=utf-8
x-sorting-hat-podid: 82
x-sorting-hat-shopid: 10894606436
vary: Accept-Encoding
x-shopid: 10894606436
x-shardid: 82
x-robots-tag: none
referrer-policy: origin-when-cross-origin
content-language: en-US
cache-control: no-cache
strict-transport-security: max-age=315569520; includeSubdomains
set-cookie: _cmp_a=%7B%22purposes%22%3A%7B%22a%22%3Atrue%2C%22p%22%3Atrue%2C%22m%22%3Atrue%2C%22t%22%3Atrue%7D%2C%22display_banner%22%3Afalse%2C%22merchant_geo%22%3A%22USUSFL%22%2C%22sale_of_data_region%22%3Afalse%7D; domain=shopify.com; path=/; expires=Sat, 21 Jan 2023 19:29:34 GMT; SameSite=Lax
_orig_referrer=https%3A%2F%2Fwww.nearlynatural.com%2F; Expires=Fri, 03-Feb-23 19:29:34 GMT; Domain=shopify.com; Path=/; HttpOnly; SameSite=Lax
_landing_page=%2F10894606436%2Fsandbox%2Fgoogle_maps%3Flocale%3Den-US; Expires=Fri, 03-Feb-23 19:29:34 GMT; Domain=shopify.com; Path=/; HttpOnly; SameSite=Lax
_y=bd24e943-5a80-4d3b-b55b-7d5ee636d739; Expires=Sat, 20-Jan-24 19:29:34 GMT; Domain=shopify.com; Path=/; SameSite=Lax
_s=c0f47cd6-c9f4-4e3d-879d-2f3ad3305581; Expires=Fri, 20-Jan-23 19:59:34 GMT; Domain=shopify.com; Path=/; SameSite=Lax
_shopify_y=bd24e943-5a80-4d3b-b55b-7d5ee636d739; Expires=Sat, 20-Jan-24 19:29:34 GMT; Domain=shopify.com; Path=/; SameSite=Lax
_shopify_s=c0f47cd6-c9f4-4e3d-879d-2f3ad3305581; Expires=Fri, 20-Jan-23 19:59:34 GMT; Domain=shopify.com; Path=/; SameSite=Lax
x-shopify-stage: production
content-security-policy: frame-ancestors *; upgrade-insecure-requests; report-uri /csp-report?source%5Baction%5D=google_maps&source%5Bapp%5D=Shopify&source%5Bcontroller%5D=checkouts%2Fweb%2Fsandbox&source%5Bsection%5D=checkout&source%5Bshop_id%5D=10894606436&source%5Buuid%5D=9cae8e59-08a3-4a3d-9cb6-5bf0110d4940
x-content-type-options: nosniff
x-download-options: noopen
x-permitted-cross-domain-policies: none
x-xss-protection: 1; mode=block; report=/xss-report?source%5Baction%5D=google_maps&source%5Bapp%5D=Shopify&source%5Bcontroller%5D=checkouts%2Fweb%2Fsandbox&source%5Bsection%5D=checkout&source%5Bshop_id%5D=10894606436&source%5Buuid%5D=9cae8e59-08a3-4a3d-9cb6-5bf0110d4940
x-dc: gcp-europe-north1,gcp-us-central1,gcp-us-central1
x-request-id: 9cae8e59-08a3-4a3d-9cb6-5bf0110d4940
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nhrjbZxdtT2%2FdpPik6ZqMechwBo5FVIq15hdG7EmBX7GgzyKV%2FfLpQcn9DIxVVb%2Bcwe%2FaziS27zYpJAsnnkUCURqTTl%2BwCWQ51OboaffK0zVbk3PV30uSeJtk8YXJsjahszVsdyg"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
server-timing: cfRequestDuration;dur=245.999813
server: cloudflare
cf-ray: 78ca383cce18b4f7-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash bd9ed9c3f88cda5456e13a134e27b268
aaa82eb935ce140174b2392ac7f7d80e2ddff1c5
a5621fa38dc23d545f834fc7331e59fc61825004b2c599c11c89628175333ca6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 20 Jan 2023 19:29:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
analytics.tiktok.com/i18n/pixel/events.js?sdkid=C07E9LNN571TE177PC10&lib=ttq
200 OK 1.1 kB URL HTTP/2 analytics.tiktok.com/i18n/pixel/events.js?sdkid=C07E9LNN571TE177PC10&lib=ttq
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (2333)
Hash c346884c12933bc43995d55edc5e2be2
24fd97da0e05ece12051a5fbd76027394ab742d4
2f528b64136ef1cfd2af578d5879426aebdf31203c7c4e0d9b2a8c849880dc16
GET /i18n/pixel/events.js?sdkid=C07E9LNN571TE177PC10&lib=ttq HTTP/1.1
Host: analytics.tiktok.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=UTF-8
x-tt-logid: 20230120192934EC7A92AF306D81421EE3
x-tt-trace-host: 01250e51f4d5abc0e156abb7e367bacbb63810b7a8ec9da06ee36a195ee67aadeead5060238948945741a5f06ebdbe913a5199d0fbffd4d953a3c3c0e2581294b1f63d118a0b131804525b3fb1f00600c0e3d1732a568875f0d66d8ac3bad73ec50fe8bae3503d1cd9b98de6d8b472f2ab
content-encoding: gzip
content-length: 1149
x-origin-response-time: 8,23.220.104.204
x-akamai-request-id: 6dade631.3bd43199
expires: Fri, 20 Jan 2023 19:29:34 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Fri, 20 Jan 2023 19:29:34 GMT
x-cache: TCP_MISS from a95-101-10-198.deploy.akamaitechnologies.com (AkamaiGHost/10.10.3-45298580) (-)
vary: Accept-Encoding
set-cookie: _ttp=2KbUrWtHUA4FUCfesCX3bH5l6Mz; Path=/; Domain=tiktok.com; Max-Age=33696000; Secure; SameSite=None
x-cache-remote: TCP_MISS from a23-220-104-204.deploy.akamaitechnologies.com (AkamaiGHost/10.10.3-45298580) (-)
x-tt-trace-tag: id=16;cdn-cache=miss;type=dyn
server-timing: cdn-cache; desc=MISS, edge; dur=91, origin; dur=8, inner; dur=2
x-parent-response-time: 99,95.101.10.198
X-Firefox-Spdy: h2
analytics.tiktok.com/i18n/pixel/static/main.MWE2YWY2YTgzMg.js
200 OK 70 kB URL HTTP/2 analytics.tiktok.com/i18n/pixel/static/main.MWE2YWY2YTgzMg.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (21891)
Hash ffc6265c4b27e525c338cb6a34f43de5
0eae08861265bd37630a3c366ed27c53211117f7
f094142084c3ef80b74b1de14c8eaa51d0c1c8a90c1190656d54f16d21e3f58a
GET /i18n/pixel/static/main.MWE2YWY2YTgzMg.js HTTP/1.1
Host: analytics.tiktok.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Connection: keep-alive
Cookie: _ttp=2KbUrWtHUA4FUCfesCX3bH5l6Mz
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000, immutable
x-tt-logid: 20230112175828B12D2EE402EE4177B8B8
x-tt-trace-host: 01e6cc6feeff51cb89119df47ec89889210c7d81fecb262d683454dd5be490ae464799fa4a5154b0da6f8399cd19358928510f7898d8798e90dfca3cf6407d71283b64980cceecded503ee15ed2bb4cdf6d81f41cf97626b66bd5a2f3a1ec50922
content-encoding: gzip
content-length: 69781
date: Fri, 20 Jan 2023 19:29:34 GMT
x-cache: TCP_HIT from a95-101-10-198.deploy.akamaitechnologies.com (AkamaiGHost/10.10.3-45298580) (-)
vary: Accept-Encoding
x-tt-trace-tag: id=16;cdn-cache=hit;type=static
server-timing: cdn-cache; desc=HIT, edge; dur=0, inner; dur=12
x-akamai-request-id: 3bd43279
X-Firefox-Spdy: h2
cdn.shopify.com/shopifycloud/shopify/assets/checkout/esnext/sandboxed_services-00fe4e1da267cb8ce9e2e0b5f9d3a6f92c7c7fd06aad1d2a09b91e58075b3f20.js
200 OK 55 kB URL HTTP/2 cdn.shopify.com/shopifycloud/shopify/assets/checkout/esnext/sandboxed_services-00fe4e1da267cb8ce9e2e0b5f9d3a6f92c7c7fd06aad1d2a09b91e58075b3f20.js
IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
File type ASCII text, with very long lines (32768)
Hash af3f1c3e7eda3e8ea3c6ab34a3c78bb1
4661d5f35dc91d3a4953d5cf629ff3fac902e80d
2712036fa17551011ba42dd7b7eab10adea925fc489f1d9006b6605539f7993f
GET /shopifycloud/shopify/assets/checkout/esnext/sandboxed_services-00fe4e1da267cb8ce9e2e0b5f9d3a6f92c7c7fd06aad1d2a09b91e58075b3f20.js HTTP/1.1
Host: cdn.shopify.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://checkout.shopify.com
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Fri, 20 Jan 2023 19:29:34 GMT
content-type: text/javascript
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=31556952, immutable
link: <https://cdn.shopify.com/shopifycloud/shopify/assets/checkout/esnext/sandboxed_services-00fe4e1da267cb8ce9e2e0b5f9d3a6f92c7c7fd06aad1d2a09b91e58075b3f20.js>; rel="canonical"
timing-allow-origin: *
x-content-type-options: nosniff
x-request-id: c440c1f8-4f18-42db-94a6-5a1f76e3a501
x-xss-protection: 1; mode=block
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-dc: gcp-us-east1,us-central1
last-modified: Fri, 26 Aug 2022 05:10:36 GMT
cf-cache-status: HIT
age: 12752337
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=bdexd5zsLpedrP9cpDLAZCxxHCK5rIUDRW5uwv%2BD0WiZ8tuP81EXF75FGYH0AgZiYW1K10eSI2yp%2Fh6JGl%2FnTcnldSiUTWtGp5sfNoWkMcPgO%2B%2BekcTTh%2FT9bGx6qE%2FCNg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
server-timing: imagery;dur=46.589, imageryFetch;dur=46.429, cfRequestDuration;dur=11.000156
server: cloudflare
cf-ray: 78ca383d8e8c1c0a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
analytics.tiktok.com/i18n/pixel/events.js?sdkid=C07E9LNN571TE177PC10&lib=ttq
200 OK 1.2 kB URL HTTP/2 analytics.tiktok.com/i18n/pixel/events.js?sdkid=C07E9LNN571TE177PC10&lib=ttq
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (2333)
Hash 228738bf3efd1bddac27e597bb050d37
e43429d3696b7ecd79a85386e57863600f6074c2
1a6d711029375c4eecb5d7dc35fbece74702857d8018e53d8b7a22e087f286b0
GET /i18n/pixel/events.js?sdkid=C07E9LNN571TE177PC10&lib=ttq HTTP/1.1
Host: analytics.tiktok.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=UTF-8
x-tt-logid: 2023012019293474BBA05D5AD7D6651192
x-tt-trace-host: 01250e51f4d5abc0e156abb7e367bacbb63810b7a8ec9da06ee36a195ee67aadee0832496733a111959fb237684d5c08c18c5b11b24d4fb5a347d9a682149269044aaf0870b914acbbf54eebcc834977ff79c8cf5691f34311bd68b159dc0a31caa90da7bfd5e33ee2069d470113ffff98
content-encoding: gzip
content-length: 1151
x-origin-response-time: 7,23.220.104.205
x-akamai-request-id: 1b35d83e.3bd4324c
expires: Fri, 20 Jan 2023 19:29:34 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Fri, 20 Jan 2023 19:29:34 GMT
x-cache: TCP_MISS from a95-101-10-198.deploy.akamaitechnologies.com (AkamaiGHost/10.10.3-45298580) (-)
vary: Accept-Encoding
set-cookie: _ttp=2KbUrRR9m6p4HCAN8mrg6LagxfQ; Path=/; Domain=tiktok.com; Max-Age=33696000; Secure; SameSite=None
x-cache-remote: TCP_MISS from a23-220-104-205.deploy.akamaitechnologies.com (AkamaiGHost/10.10.3-45298580) (-)
x-tt-trace-tag: id=16;cdn-cache=miss;type=dyn
server-timing: cdn-cache; desc=MISS, edge; dur=92, origin; dur=7, inner; dur=4
x-parent-response-time: 99,95.101.10.198
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 61162a42e6bf5415f3d80ceac5e25ad2
2c2a987ab75a008682a5defd50d20be737912b23
4260bef1cd37c1f0372c9a5aae4ca0a6564c6473f68a4f4181ed83ed3d6b2d48
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 20 Jan 2023 19:29:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
maps.gstatic.com/mapfiles/openhand_8_8.cur
200 OK 326 B URL HTTP/2 maps.gstatic.com/mapfiles/openhand_8_8.cur
IP
File type MS Windows cursor resource - 1 icon, 32x32, 2 colors, hotspot @8x8\012- data
Hash feff9159f56cb2069041d660b484eb07
0d0a08cf25a258511957f357b89d3908f3c5e6e3
7342f390b12f636d14e25f698fc5e38cf6240994dc0c07fefbbb4e78ec4d03c7
GET /mapfiles/openhand_8_8.cur HTTP/1.1
Host: maps.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-type: image/bmp
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/geo-tactile
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="geo-tactile"
report-to: {"group":"geo-tactile","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/geo-tactile"}]}
content-length: 326
date: Fri, 20 Jan 2023 19:29:34 GMT
expires: Fri, 20 Jan 2023 19:29:34 GMT
cache-control: private, max-age=31536000
last-modified: Tue, 18 May 2021 19:15:00 GMT
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
cdn.attn.tv/growth-tag-assets/client-configs/nearlynatural.attn.tv.js
200 OK 0 B URL HTTP/2 cdn.attn.tv/growth-tag-assets/client-configs/nearlynatural.attn.tv.js
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /growth-tag-assets/client-configs/nearlynatural.attn.tv.js HTTP/1.1
Host: cdn.attn.tv
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/javascript
content-length: 0
last-modified: Mon, 17 Dec 2018 20:59:49 GMT
content-encoding:
x-amz-version-id: kGJjc2HxNgGNuk_7UqP1h9o.liqWLb8I
accept-ranges: bytes
server: AmazonS3
date: Fri, 20 Jan 2023 01:14:52 GMT
etag: "d41d8cd98f00b204e9800998ecf8427e"
vary: Accept-Encoding
x-cache: Error from cloudfront
via: 1.1 50584ad285d5f627ddebae74efdd0770.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: a9DrsDOUHB1HyKZ5SPrZzXrrdhrpjNVyPhrjlUnMHY1XIDOU25vOqw==
age: 65687
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash e6d21eff1927f7a74984663b16cfe21a
b747f7d42cdf7cfea6900348cd257066b2634222
a4343acb5bda29aa0d6d64bbefd6bc07a1c5e0166646171be74f4a1d266e3c92
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 20 Jan 2023 19:29:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash cd059e87bc3cfc0ae88e3314cdc236ba
4a3953512e46eb7a2f37a30ae84176a084c21e9d
95d7090bc82c2deada34c6863d1fd74d1f7f1c0e33ce0de3a1b505aadff965d9
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Fri, 20 Jan 2023 19:29:34 GMT
Content-Type: application/ocsp-response
Content-Length: 1777
Connection: keep-alive
X-Sucuri-ID: 19023
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Fri, 20 Jan 2023 04:15:20 GMT
Expires: Sat, 21 Jan 2023 04:15:20 GMT
ETag: "5b688085634f1aed6c53682e107676110d725e3e"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
analytics.tiktok.com/i18n/pixel/static/identify_c4832.js
200 OK 31 kB URL HTTP/2 analytics.tiktok.com/i18n/pixel/static/identify_c4832.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (65234)
Hash c5bbd7f7242b6d2e890126ee862eb2c3
f63d9d3a0068612f42698ad37db279fa03a1f422
b18fea6678e5130050d98077bc56ead32a029838f4d7653055ebd1a5561d4ce9
GET /i18n/pixel/static/identify_c4832.js HTTP/1.1
Host: analytics.tiktok.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Connection: keep-alive
Cookie: _ttp=2KbUrRR9m6p4HCAN8mrg6LagxfQ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000, immutable
x-tt-logid: 20230112175825795F92399DF9E7BC6845
x-tt-trace-host: 01213c9428e1dc2e706424a5e4830ae2753a9403fe7ed2020932fc61a3c47c96784adda24a6c56428140d39df42ee71252f6133830581f45dad09e0f84f6c427e5570f8f5241c1349d3294ee56c52eab748dbda5cfd0ecad2a022e79233890d27b
content-encoding: gzip
content-length: 30930
date: Fri, 20 Jan 2023 19:29:35 GMT
x-cache: TCP_MEM_HIT from a95-101-10-198.deploy.akamaitechnologies.com (AkamaiGHost/10.10.3-45298580) (-)
vary: Accept-Encoding
x-tt-trace-tag: id=16;cdn-cache=hit;type=static
server-timing: cdn-cache; desc=HIT, edge; dur=0, inner; dur=1
x-akamai-request-id: 3bd43564
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://checkout.shopify.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 18 Jan 2023 19:33:54 GMT
expires: Thu, 18 Jan 2024 19:33:54 GMT
cache-control: public, max-age=31536000
age: 172541
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
dx.mountain.com/spx?dxver=4.0.0&shaid=32489&tdr=&plh=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F6348693670e7d945b05ac004b55173ed&cb=25764539673557484term=value
200 OK 5.9 kB URL HTTP/1.1 dx.mountain.com/spx?dxver=4.0.0&shaid=32489&tdr=&plh=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F6348693670e7d945b05ac004b55173ed&cb=25764539673557484term=value
IP
Hash bb693362a29c8d837719e1134bb07423
0cff47a6b27c555c57142ac708669bc14e12aa22
c4b7468ccd98c7126c6d42cf8b90ff11be0be83421c64db137961dde51ad12df
GET /spx?dxver=4.0.0&shaid=32489&tdr=&plh=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F6348693670e7d945b05ac004b55173ed&cb=25764539673557484term=value HTTP/1.1
Host: dx.mountain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
vary: origin,access-control-request-method,access-control-request-headers,accept-encoding
expires: Thu, 01 Jan 1970 00:00:00 GMT
content-encoding: gzip
content-type: application/javascript;charset=utf-8
date: Fri, 20 Jan 2023 19:29:34 GMT
x-envoy-upstream-service-time: 3
server: istio-envoy
connection: close
transfer-encoding: chunked
nearlynatural.attn.tv/unrenderedCreative?v=4.16.27&r=&id=64df4dad74334bbdb034eab1d0601d62&pv=1&l=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F6348693670e7d945b05ac004b55173ed&w=1280&h=939&ss_ref=ORGANIC&m=marketing&m=live-sms
204 No Content 0 B URL HTTP/2 nearlynatural.attn.tv/unrenderedCreative?v=4.16.27&r=&id=64df4dad74334bbdb034eab1d0601d62&pv=1&l=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F6348693670e7d945b05ac004b55173ed&w=1280&h=939&ss_ref=ORGANIC&m=marketing&m=live-sms
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /unrenderedCreative?v=4.16.27&r=&id=64df4dad74334bbdb034eab1d0601d62&pv=1&l=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F6348693670e7d945b05ac004b55173ed&w=1280&h=939&ss_ref=ORGANIC&m=marketing&m=live-sms HTTP/1.1
Host: nearlynatural.attn.tv
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Content-Type: text/plain;charset=UTF-8
Origin: https://www.nearlynatural.com
Content-Length: 29
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Fri, 20 Jan 2023 19:29:35 GMT
vary: Origin,Access-Control-Request-Method,Access-Control-Request-Headers
access-control-allow-origin: *
cache-control: no-cache, no-store, must-revalidate
x-envoy-upstream-service-time: 18
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 78ca38425d010b55-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
analytics.tiktok.com/api/v2/pixel
200 OK 0 B URL HTTP/2 analytics.tiktok.com/api/v2/pixel
IP
ASN #20940 Akamai International B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /api/v2/pixel HTTP/1.1
Host: analytics.tiktok.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 1152
Origin: https://www.nearlynatural.com
Connection: keep-alive
Cookie: _ttp=2KbUrRR9m6p4HCAN8mrg6LagxfQ
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 0
access-control-allow-origin: *
x-tt-logid: 2023012019293522022303F73089527D60
x-tt-trace-host: 01250e51f4d5abc0e156abb7e367bacbb63810b7a8ec9da06ee36a195ee67aadee9262d71e712c5b91f151adae41bfd18ffd79c2b644ff00412219d9cff4f39fdf9f8a974987561e3af0f20b9c55dcc88b3bfa2df4250980a766ae9075343de0cce50e290260c6f69c2445aa0578d12464
x-origin-response-time: 18,23.220.104.202
x-akamai-request-id: 25b05a7a.3bd4365c
expires: Fri, 20 Jan 2023 19:29:35 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Fri, 20 Jan 2023 19:29:35 GMT
x-cache: TCP_MISS from a95-101-10-198.deploy.akamaitechnologies.com (AkamaiGHost/10.10.3-45298580) (-)
x-cache-remote: TCP_MISS from a23-220-104-202.deploy.akamaitechnologies.com (AkamaiGHost/10.10.3-45298580) (-)
x-tt-trace-tag: id=16;cdn-cache=miss;type=dyn
server-timing: cdn-cache; desc=MISS, edge; dur=98, origin; dur=18, inner; dur=15
x-parent-response-time: 109,95.101.10.198
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash 9826742e5a5253efcaebcb17cf1183ff
2420b0825d3e105c7b5dc78caad3f566994bc2ed
710513c24600f34bcf0b53b24178658dbd2c3a663fe33db20cef99dcd94f0d66
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 729
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 20 Jan 2023 19:29:35 GMT
Last-Modified: Fri, 20 Jan 2023 19:17:27 GMT
Server: ECS (amb/6B9E)
X-Cache: HIT
Content-Length: 279
analytics.tiktok.com/api/v2/pixel
200 OK 0 B URL HTTP/2 analytics.tiktok.com/api/v2/pixel
IP
ASN #20940 Akamai International B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /api/v2/pixel HTTP/1.1
Host: analytics.tiktok.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 1152
Origin: https://www.nearlynatural.com
Connection: keep-alive
Cookie: _ttp=2KbUrRR9m6p4HCAN8mrg6LagxfQ
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 0
access-control-allow-origin: *
x-tt-logid: 20230120192935EA3C8A1F8FC7A51DF40E
x-tt-trace-host: 01250e51f4d5abc0e156abb7e367bacbb63810b7a8ec9da06ee36a195ee67aadee63d4012b7e6123903b384e84ceae1f21f8c224ad637e459e5dff7968f44ada2843574b04a1e17b78f8639750a885b52ca5833f64d0af74a6df165f242825212c30b11dd20ab1501375c34347340371a6
x-origin-response-time: 56,23.220.104.203
x-akamai-request-id: 7a9076d1.3bd43667
expires: Fri, 20 Jan 2023 19:29:35 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Fri, 20 Jan 2023 19:29:35 GMT
x-cache: TCP_MISS from a95-101-10-198.deploy.akamaitechnologies.com (AkamaiGHost/10.10.3-45298580) (-)
x-cache-remote: TCP_MISS from a23-220-104-203.deploy.akamaitechnologies.com (AkamaiGHost/10.10.3-45298580) (-)
x-tt-trace-tag: id=16;cdn-cache=miss;type=dyn
server-timing: cdn-cache; desc=MISS, edge; dur=103, origin; dur=56, inner; dur=43
x-parent-response-time: 153,95.101.10.198
X-Firefox-Spdy: h2
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1490)
Hash ca7fbbfd120e3e329633044190bbf134
d17f81e03dd827554ddd207ea081fb46b3415445
847004cefb32f85a9cc16b0b1eb77529ff5753680c145bfcb23f651d214737db
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20085
date: Fri, 20 Jan 2023 18:41:07 GMT
expires: Fri, 20 Jan 2023 20:41:07 GMT
cache-control: public, max-age=7200
age: 2908
last-modified: Tue, 10 Jan 2023 21:29:14 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
d3rr3d0n31t48m.cloudfront.net/widget/widget_async.js
200 OK 906 B URL HTTP/2 d3rr3d0n31t48m.cloudfront.net/widget/widget_async.js
IP
File type ASCII text, with very long lines (559)
Hash d86662fb4063e393752762c7372e1a41
69ba04e02bd520200fa58f773ae32dd6ed1cbed8
f97f39992ee9da3170cac3acfeaeb9074207ffac37c853480cc08a0f9fbb280d
GET /widget/widget_async.js HTTP/1.1
Host: d3rr3d0n31t48m.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nearlynatural.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
content-length: 906
last-modified: Thu, 19 Jan 2023 16:13:30 GMT
content-encoding: gzip
x-amz-meta-mtime: 1674144808.01
accept-ranges: bytes
server: AmazonS3
date: Fri, 20 Jan 2023 19:16:35 GMT
cache-control: max-age=3600, public
etag: "d86662fb4063e393752762c7372e1a41"
x-cache: Hit from cloudfront
via: 1.1 501ad2910f631f0520a6d389d6f053e8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: n6a2ixVVjbdEvRxvYKv4gxW9gbbWrSmESujmpIdfZoyu85A7KVjQyA==
age: 781
X-Firefox-Spdy: h2
cdn-widgetsrepository.yotpo.com/v1/loader/Qa2_Txh_GUAHRQInnnDTPA
200 OK 21 kB URL HTTP/2 cdn-widgetsrepository.yotpo.com/v1/loader/Qa2_Txh_GUAHRQInnnDTPA
IP
Hash 9c4d7af987d717a75c2e3818524cc258
afe0e84ca312478ad4c1a45f4954af83d950471b
c672328c564367d4380c2312c10474121dcd15c89a4761bb6d8b99da4e414131
GET /v1/loader/Qa2_Txh_GUAHRQInnnDTPA HTTP/1.1
Host: cdn-widgetsrepository.yotpo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
content-encoding: gzip
x-ratelimit-remaining-minute: 4999
x-ratelimit-limit-minute: 5000
ratelimit-remaining: 4999
ratelimit-limit: 5000
ratelimit-reset: 5
correlation-id: 30bc1c3e-961e-4a30-a8e2-44d5b7c2d54e
x-kong-upstream-latency: 172
x-kong-proxy-latency: 3
content-length: 21437
date: Fri, 20 Jan 2023 19:29:35 GMT
vary: Accept-Encoding
access-control-max-age: 86400
access-control-allow-credentials: false
access-control-allow-headers: *
access-control-allow-methods: GET,POST
access-control-allow-origin: *
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 071edf406c3e287843fdf4e61ceb9ff7
99cf4c0cb373feeecbdf97df42c8066551f89dfe
127371c4c4a3345b44dfbf97fb93b506d2daf0c0ecfb39317eefd695c8c59d69
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 20 Jan 2023 19:29:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
googleads.g.doubleclick.net/pagead/viewthroughconversion/1066970472/?random=1674242973347&cv=11&fst=1674242973347&bg=ffffff&guid=ON&async=1>m=2wg1i0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F6348693670e7d945b05ac004b55173ed&tiba=Thank%20you%20Dala!%20-%20Nearly%20Natural%20-%20Checkout&auid=1741870945.1674242972&data=event%3Ddl_add_to_cart&rfmt=3&fmt=4
200 OK 944 B URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/1066970472/?random=1674242973347&cv=11&fst=1674242973347&bg=ffffff&guid=ON&async=1>m=2wg1i0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F6348693670e7d945b05ac004b55173ed&tiba=Thank%20you%20Dala!%20-%20Nearly%20Natural%20-%20Checkout&auid=1741870945.1674242972&data=event%3Ddl_add_to_cart&rfmt=3&fmt=4
IP
File type ASCII text, with very long lines (2041), with no line terminators
Hash 7ab6150e0bfed9e8502975b21e95c791
1886009eed2909ac75a0ee89e95f5ac1233d93aa
5c31ad7a948740d6acf6e412191fd8d63ca1f562d27d811b8e66eaa6ad9c0556
GET /pagead/viewthroughconversion/1066970472/?random=1674242973347&cv=11&fst=1674242973347&bg=ffffff&guid=ON&async=1>m=2wg1i0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F6348693670e7d945b05ac004b55173ed&tiba=Thank%20you%20Dala!%20-%20Nearly%20Natural%20-%20Checkout&auid=1741870945.1674242972&data=event%3Ddl_add_to_cart&rfmt=3&fmt=4 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 20 Jan 2023 19:29:35 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 944
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Fri, 20-Jan-2023 19:44:35 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/viewthroughconversion/1066970472/?random=1674242973455&cv=11&fst=1674242973455&fmt=3&bg=ffffff&guid=ON&async=1>m=2wg1i0&u_w=1280&u_h=1024&label=Cn-FCN6JjqMCEOja4vwD&hn=www.google.com&frm=0&url=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F6348693670e7d945b05ac004b55173ed&tiba=Thank%20you%20Dala!%20-%20Nearly%20Natural%20-%20Checkout&value=127.99&bttype=purchase&auid=1741870945.1674242972&gcp=1&ct_cookie_present=1
200 OK 42 B URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/1066970472/?random=1674242973455&cv=11&fst=1674242973455&fmt=3&bg=ffffff&guid=ON&async=1>m=2wg1i0&u_w=1280&u_h=1024&label=Cn-FCN6JjqMCEOja4vwD&hn=www.google.com&frm=0&url=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F6348693670e7d945b05ac004b55173ed&tiba=Thank%20you%20Dala!%20-%20Nearly%20Natural%20-%20Checkout&value=127.99&bttype=purchase&auid=1741870945.1674242972&gcp=1&ct_cookie_present=1
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/viewthroughconversion/1066970472/?random=1674242973455&cv=11&fst=1674242973455&fmt=3&bg=ffffff&guid=ON&async=1>m=2wg1i0&u_w=1280&u_h=1024&label=Cn-FCN6JjqMCEOja4vwD&hn=www.google.com&frm=0&url=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F6348693670e7d945b05ac004b55173ed&tiba=Thank%20you%20Dala!%20-%20Nearly%20Natural%20-%20Checkout&value=127.99&bttype=purchase&auid=1741870945.1674242972&gcp=1&ct_cookie_present=1 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 20 Jan 2023 19:29:35 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Fri, 20-Jan-2023 19:44:35 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 071edf406c3e287843fdf4e61ceb9ff7
99cf4c0cb373feeecbdf97df42c8066551f89dfe
127371c4c4a3345b44dfbf97fb93b506d2daf0c0ecfb39317eefd695c8c59d69
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 20 Jan 2023 19:29:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 34a6ffa8918b00f3f6d21bd90db799f4
6573697e6488b07ba3551ca7fea9b89220494b3a
dff7862c0cfa5ae27f6e8daef94bf0cd05000b667dbabd62a673ec0354e4873b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 20 Jan 2023 19:29:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
googleads.g.doubleclick.net/pagead/viewthroughconversion/1066970472/?random=1674242973417&cv=11&fst=1674242973417&fmt=3&bg=ffffff&guid=ON&async=1>m=2wg1i0&u_w=1280&u_h=1024&label=Cn-FCN6JjqMCEOja4vwD&hn=www.google.com&frm=0&url=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F6348693670e7d945b05ac004b55173ed&tiba=Thank%20you%20Dala!%20-%20Nearly%20Natural%20-%20Checkout&value=83.99&bttype=purchase&auid=1741870945.1674242972&gcp=1&ct_cookie_present=1
200 OK 42 B URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/1066970472/?random=1674242973417&cv=11&fst=1674242973417&fmt=3&bg=ffffff&guid=ON&async=1>m=2wg1i0&u_w=1280&u_h=1024&label=Cn-FCN6JjqMCEOja4vwD&hn=www.google.com&frm=0&url=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F6348693670e7d945b05ac004b55173ed&tiba=Thank%20you%20Dala!%20-%20Nearly%20Natural%20-%20Checkout&value=83.99&bttype=purchase&auid=1741870945.1674242972&gcp=1&ct_cookie_present=1
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/viewthroughconversion/1066970472/?random=1674242973417&cv=11&fst=1674242973417&fmt=3&bg=ffffff&guid=ON&async=1>m=2wg1i0&u_w=1280&u_h=1024&label=Cn-FCN6JjqMCEOja4vwD&hn=www.google.com&frm=0&url=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F6348693670e7d945b05ac004b55173ed&tiba=Thank%20you%20Dala!%20-%20Nearly%20Natural%20-%20Checkout&value=83.99&bttype=purchase&auid=1741870945.1674242972&gcp=1&ct_cookie_present=1 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 20 Jan 2023 19:29:35 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Fri, 20-Jan-2023 19:44:35 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/viewthroughconversion/1066970472/?random=1674242974002&cv=11&fst=1674242974002&fmt=3&bg=ffffff&guid=ON&async=1>m=2oa1i0&u_w=1280&u_h=1024&label=P50UCNWJjqMCEOja4vwD&tiba=Thank%20you%20Dala!%20-%20Nearly%20Natural%20-%20Checkout&hn=www.google.com&frm=0&url=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F6348693670e7d945b05ac004b55173ed>m_ee=1&auid=1741870945.1674242972&data=event%3Dpage_view%3Bpage_path%3D%2F10894606436%2Forders%2F6348693670e7d945b05ac004b55173ed&gcp=1&ct_cookie_present=1
200 OK 42 B URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/1066970472/?random=1674242974002&cv=11&fst=1674242974002&fmt=3&bg=ffffff&guid=ON&async=1>m=2oa1i0&u_w=1280&u_h=1024&label=P50UCNWJjqMCEOja4vwD&tiba=Thank%20you%20Dala!%20-%20Nearly%20Natural%20-%20Checkout&hn=www.google.com&frm=0&url=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F6348693670e7d945b05ac004b55173ed>m_ee=1&auid=1741870945.1674242972&data=event%3Dpage_view%3Bpage_path%3D%2F10894606436%2Forders%2F6348693670e7d945b05ac004b55173ed&gcp=1&ct_cookie_present=1
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/viewthroughconversion/1066970472/?random=1674242974002&cv=11&fst=1674242974002&fmt=3&bg=ffffff&guid=ON&async=1>m=2oa1i0&u_w=1280&u_h=1024&label=P50UCNWJjqMCEOja4vwD&tiba=Thank%20you%20Dala!%20-%20Nearly%20Natural%20-%20Checkout&hn=www.google.com&frm=0&url=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F6348693670e7d945b05ac004b55173ed>m_ee=1&auid=1741870945.1674242972&data=event%3Dpage_view%3Bpage_path%3D%2F10894606436%2Forders%2F6348693670e7d945b05ac004b55173ed&gcp=1&ct_cookie_present=1 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 20 Jan 2023 19:29:35 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Fri, 20-Jan-2023 19:44:35 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/viewthroughconversion/1066970472/?random=1674242973451&cv=11&fst=1674242973451&bg=ffffff&guid=ON&async=1>m=2wg1i0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F6348693670e7d945b05ac004b55173ed&tiba=Thank%20you%20Dala!%20-%20Nearly%20Natural%20-%20Checkout&value=127.99&auid=1741870945.1674242972&data=event%3Dadd_to_cart%3Bvisitor_type%3Dguest%3Becomm_prodid%3D6565%3Bgoogle_business_vertical%3Dretail%3Bid%3D6565&rfmt=3&fmt=4
200 OK 1.0 kB URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/1066970472/?random=1674242973451&cv=11&fst=1674242973451&bg=ffffff&guid=ON&async=1>m=2wg1i0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F6348693670e7d945b05ac004b55173ed&tiba=Thank%20you%20Dala!%20-%20Nearly%20Natural%20-%20Checkout&value=127.99&auid=1741870945.1674242972&data=event%3Dadd_to_cart%3Bvisitor_type%3Dguest%3Becomm_prodid%3D6565%3Bgoogle_business_vertical%3Dretail%3Bid%3D6565&rfmt=3&fmt=4
IP
File type ASCII text, with very long lines (2259), with no line terminators
Hash 3c4882905761ca9548f9362379816356
554305fcb135df48705ddfb90ddefa05466470da
0dc9aa03ae910aec5e0889a47335166571612f3d5922f465eb546a6d2b96d003
GET /pagead/viewthroughconversion/1066970472/?random=1674242973451&cv=11&fst=1674242973451&bg=ffffff&guid=ON&async=1>m=2wg1i0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F6348693670e7d945b05ac004b55173ed&tiba=Thank%20you%20Dala!%20-%20Nearly%20Natural%20-%20Checkout&value=127.99&auid=1741870945.1674242972&data=event%3Dadd_to_cart%3Bvisitor_type%3Dguest%3Becomm_prodid%3D6565%3Bgoogle_business_vertical%3Dretail%3Bid%3D6565&rfmt=3&fmt=4 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 20 Jan 2023 19:29:35 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 1010
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Fri, 20-Jan-2023 19:44:35 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
analytics.tiktok.com/api/v2/pixel
200 OK 0 B URL HTTP/2 analytics.tiktok.com/api/v2/pixel
IP
ASN #20940 Akamai International B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /api/v2/pixel HTTP/1.1
Host: analytics.tiktok.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 1152
Origin: https://www.nearlynatural.com
Connection: keep-alive
Cookie: _ttp=2KbUrRR9m6p4HCAN8mrg6LagxfQ
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 0
access-control-allow-origin: *
x-tt-logid: 2023012019293529B4C894DBC9283D90D4
x-tt-trace-host: 01250e51f4d5abc0e156abb7e367bacbb63810b7a8ec9da06ee36a195ee67aadeead5060238948945741a5f06ebdbe913a79fa337a8d7087287eab46f4b6fee53d6075328fe79fcd496737febb0bb0b8f694dd503114fd05c3777d71f41d73cbaa13201750c38e7a8945fab7df75ad1115
x-origin-response-time: 83,23.220.104.204
x-akamai-request-id: 6dae2ff9.3bd436a0
expires: Fri, 20 Jan 2023 19:29:35 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Fri, 20 Jan 2023 19:29:35 GMT
x-cache: TCP_MISS from a95-101-10-198.deploy.akamaitechnologies.com (AkamaiGHost/10.10.3-45298580) (-)
x-cache-remote: TCP_MISS from a23-220-104-204.deploy.akamaitechnologies.com (AkamaiGHost/10.10.3-45298580) (-)
x-tt-trace-tag: id=16;cdn-cache=miss;type=dyn
server-timing: cdn-cache; desc=MISS, edge; dur=124, origin; dur=83, inner; dur=75
x-parent-response-time: 199,95.101.10.198
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/viewthroughconversion/1066970472/?random=1674242973404&cv=11&fst=1674242973404&bg=ffffff&guid=ON&async=1>m=2wg1i0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F6348693670e7d945b05ac004b55173ed&tiba=Thank%20you%20Dala!%20-%20Nearly%20Natural%20-%20Checkout&auid=1741870945.1674242972&data=event%3Ddl_add_to_cart&rfmt=3&fmt=4
200 OK 947 B URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/1066970472/?random=1674242973404&cv=11&fst=1674242973404&bg=ffffff&guid=ON&async=1>m=2wg1i0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F6348693670e7d945b05ac004b55173ed&tiba=Thank%20you%20Dala!%20-%20Nearly%20Natural%20-%20Checkout&auid=1741870945.1674242972&data=event%3Ddl_add_to_cart&rfmt=3&fmt=4
IP
File type ASCII text, with very long lines (2041), with no line terminators
Hash c45539484e401c4ada3d572ecbbe86c0
b8f50fb5cca3c6dcc3658beec949e9441e7c60d4
1e163a6f33bf9d9aff85b397f4debeb8f633f99c82cdbbdc5287262ffdea05e7
GET /pagead/viewthroughconversion/1066970472/?random=1674242973404&cv=11&fst=1674242973404&bg=ffffff&guid=ON&async=1>m=2wg1i0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F6348693670e7d945b05ac004b55173ed&tiba=Thank%20you%20Dala!%20-%20Nearly%20Natural%20-%20Checkout&auid=1741870945.1674242972&data=event%3Ddl_add_to_cart&rfmt=3&fmt=4 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 20 Jan 2023 19:29:35 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 947
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Fri, 20-Jan-2023 19:44:35 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 071edf406c3e287843fdf4e61ceb9ff7
99cf4c0cb373feeecbdf97df42c8066551f89dfe
127371c4c4a3345b44dfbf97fb93b506d2daf0c0ecfb39317eefd695c8c59d69
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 20 Jan 2023 19:29:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash c82333f9a33a309c15d05fd11805df12
8dd5f20229a08900fd7f795e151f8caa9558ddfc
2c5c18efa4a58c40cc49553daf6fe206ed70fe17bd948cd5c09144a49db85401
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 20 Jan 2023 19:29:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cdn.attn.tv/nearlynatural/dtag.js
200 OK 3.8 kB URL HTTP/2 cdn.attn.tv/nearlynatural/dtag.js
IP
Hash b3553acd209bbeb9834d3d6aac3d08e2
e2c3d3006e80a5c40d8b50fbb40353d117c21a3b
b77e751cb279cda5b04d7bcdbce02f42630bf356a00da4bc6071ab9d1af8a829
GET /nearlynatural/dtag.js HTTP/1.1
Host: cdn.attn.tv
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript
date: Fri, 20 Jan 2023 19:29:34 GMT
x-amz-replication-status: COMPLETED
last-modified: Thu, 13 Oct 2022 16:39:13 GMT
etag: W/"73a8287bbb9c4566f62f7c4fa6f9a688"
cache-control: public, max-age=120
x-amz-version-id: LlT3T0xodZHpywBzY.WLjEsYuLvNGIQP
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 50584ad285d5f627ddebae74efdd0770.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: HdvfQO62rlhv3gpJAXB3Fg6Qtqg0sGxLKipfG-9_xqDZQ_Yk6wQqPw==
X-Firefox-Spdy: h2
nearlynatural.attn.tv/d/?attn_vid=64df4dad74334bbdb034eab1d0601d62
200 OK 94 B URL HTTP/2 nearlynatural.attn.tv/d/?attn_vid=64df4dad74334bbdb034eab1d0601d62
IP
File type ASCII text, with no line terminators
Hash 4719e3d599c04e4f9d998fa608216928
d0bfd969e903cb3778add023a281186d3d41ff8d
33ee91f265c533a0a83d2e7d4c3643a24d8ea4ad405fe75cee5e65ec79d4b8ee
GET /d/?attn_vid=64df4dad74334bbdb034eab1d0601d62 HTTP/1.1
Host: nearlynatural.attn.tv
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Origin: https://www.nearlynatural.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 20 Jan 2023 19:29:34 GMT
content-type: application/json
vary: Origin,Access-Control-Request-Method,Access-Control-Request-Headers
access-control-allow-origin: *
x-envoy-upstream-service-time: 4
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 78ca383e59940b55-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/viewthroughconversion/1066970472/?random=1674242973412&cv=11&fst=1674242973412&bg=ffffff&guid=ON&async=1>m=2wg1i0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F6348693670e7d945b05ac004b55173ed&tiba=Thank%20you%20Dala!%20-%20Nearly%20Natural%20-%20Checkout&value=83.99&auid=1741870945.1674242972&data=event%3Dadd_to_cart%3Bvisitor_type%3Dguest%3Becomm_prodid%3D6331%3Bgoogle_business_vertical%3Dretail%3Bid%3D6331&rfmt=3&fmt=4
200 OK 1.0 kB URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/1066970472/?random=1674242973412&cv=11&fst=1674242973412&bg=ffffff&guid=ON&async=1>m=2wg1i0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F6348693670e7d945b05ac004b55173ed&tiba=Thank%20you%20Dala!%20-%20Nearly%20Natural%20-%20Checkout&value=83.99&auid=1741870945.1674242972&data=event%3Dadd_to_cart%3Bvisitor_type%3Dguest%3Becomm_prodid%3D6331%3Bgoogle_business_vertical%3Dretail%3Bid%3D6331&rfmt=3&fmt=4
IP
File type ASCII text, with very long lines (2259), with no line terminators
Hash 855b519ccaf79c929b80ccfa30b188fa
33251ea60b58b1d4b9460a0d6f846777135f7a52
037127955e0e86190ad177092b61bcbc062214fe767a625fbc73e5a0e4f774b5
GET /pagead/viewthroughconversion/1066970472/?random=1674242973412&cv=11&fst=1674242973412&bg=ffffff&guid=ON&async=1>m=2wg1i0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F6348693670e7d945b05ac004b55173ed&tiba=Thank%20you%20Dala!%20-%20Nearly%20Natural%20-%20Checkout&value=83.99&auid=1741870945.1674242972&data=event%3Dadd_to_cart%3Bvisitor_type%3Dguest%3Becomm_prodid%3D6331%3Bgoogle_business_vertical%3Dretail%3Bid%3D6331&rfmt=3&fmt=4 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 20 Jan 2023 19:29:35 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 1013
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Fri, 20-Jan-2023 19:44:35 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.com/pagead/1p-conversion/1066970472/?random=1674242973455&cv=11&fst=1674242973455&bg=ffffff&guid=ON&async=1>m=2wg1i0&u_w=1280&u_h=1024&label=Cn-FCN6JjqMCEOja4vwD&hn=www.google.com&frm=0&url=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F6348693670e7d945b05ac004b55173ed&tiba=Thank%20you%20Dala!%20-%20Nearly%20Natural%20-%20Checkout&value=127.99&bttype=purchase&auid=1741870945.1674242972&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4
302 Found 63 B URL HTTP/2 www.google.com/pagead/1p-conversion/1066970472/?random=1674242973455&cv=11&fst=1674242973455&bg=ffffff&guid=ON&async=1>m=2wg1i0&u_w=1280&u_h=1024&label=Cn-FCN6JjqMCEOja4vwD&hn=www.google.com&frm=0&url=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F6348693670e7d945b05ac004b55173ed&tiba=Thank%20you%20Dala!%20-%20Nearly%20Natural%20-%20Checkout&value=127.99&bttype=purchase&auid=1741870945.1674242972&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4
IP
File type ASCII text, with no line terminators
Hash 0339f8f57d1bf75003db591e28957e45
ae2286e497c9f76a02cb40c40a674b73bd293b76
609cd8e12464fe137cfaa9f1ab6637150d44e105559c901b6df50303fd05aa26
GET /pagead/1p-conversion/1066970472/?random=1674242973455&cv=11&fst=1674242973455&bg=ffffff&guid=ON&async=1>m=2wg1i0&u_w=1280&u_h=1024&label=Cn-FCN6JjqMCEOja4vwD&hn=www.google.com&frm=0&url=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F6348693670e7d945b05ac004b55173ed&tiba=Thank%20you%20Dala!%20-%20Nearly%20Natural%20-%20Checkout&value=127.99&bttype=purchase&auid=1741870945.1674242972&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 20 Jan 2023 19:29:35 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
location: https://www.google.no/pagead/1p-conversion/1066970472/?random=1674242973455&cv=11&fst=1674242973455&bg=ffffff&guid=ON&async=1>m=2wg1i0&u_w=1280&u_h=1024&label=Cn-FCN6JjqMCEOja4vwD&hn=www.google.com&frm=0&url=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F6348693670e7d945b05ac004b55173ed&tiba=Thank%20you%20Dala!%20-%20Nearly%20Natural%20-%20Checkout&value=127.99&bttype=purchase&auid=1741870945.1674242972&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4&ipr=y&prhg=0
content-type: text/javascript; charset=UTF-8
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 63
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/viewthroughconversion/1066970472/?random=1674242973446&cv=11&fst=1674242973446&bg=ffffff&guid=ON&async=1>m=2wg1i0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F6348693670e7d945b05ac004b55173ed&tiba=Thank%20you%20Dala!%20-%20Nearly%20Natural%20-%20Checkout&auid=1741870945.1674242972&data=event%3Ddl_add_to_cart&rfmt=3&fmt=4
200 OK 947 B URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/1066970472/?random=1674242973446&cv=11&fst=1674242973446&bg=ffffff&guid=ON&async=1>m=2wg1i0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F6348693670e7d945b05ac004b55173ed&tiba=Thank%20you%20Dala!%20-%20Nearly%20Natural%20-%20Checkout&auid=1741870945.1674242972&data=event%3Ddl_add_to_cart&rfmt=3&fmt=4
IP
File type ASCII text, with very long lines (2043), with no line terminators
Hash a55b08960ebcf045f0c734b2b434d7f9
6ce2ef70207184027b0de3d87ff794ddd09ebdea
a1d4c9381ee2244a4d7eb2e300b976c128e5897ead5ad2f73be6c4925c74d62b
GET /pagead/viewthroughconversion/1066970472/?random=1674242973446&cv=11&fst=1674242973446&bg=ffffff&guid=ON&async=1>m=2wg1i0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F6348693670e7d945b05ac004b55173ed&tiba=Thank%20you%20Dala!%20-%20Nearly%20Natural%20-%20Checkout&auid=1741870945.1674242972&data=event%3Ddl_add_to_cart&rfmt=3&fmt=4 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 20 Jan 2023 19:29:35 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 947
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Fri, 20-Jan-2023 19:44:35 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash f76685480cc0a396abec56b2bacff3d5
6fc14273e16deb512063bcde6d936d3f331c1b28
96318b41cd34b22f88213f7f246780d3aeb476536c22566ef3f450aac93d1271
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5379
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 20 Jan 2023 19:29:35 GMT
Last-Modified: Fri, 20 Jan 2023 17:59:56 GMT
Server: ECS (ska/F71C)
X-Cache: HIT
Content-Length: 471
ocsp.starfieldtech.com/
200 OK 1.8 kB IP
Hash 7ff5e105815ef931a5556ba2ebc29f29
99f58b4cc24d3172c90f7c2b07e167bbee43d7d2
ef34437c6ca83e52efaa7ad77bad6450195cd2a6448b14960f033f5ce1baada2
POST / HTTP/1.1
Host: ocsp.starfieldtech.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Fri, 20 Jan 2023 19:29:34 GMT
Content-Type: application/ocsp-response
Content-Length: 1845
Connection: keep-alive
X-Sucuri-ID: 19023
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Thu, 19 Jan 2023 22:36:17 GMT
Expires: Fri, 20 Jan 2023 22:36:17 GMT
ETag: "99f58b4cc24d3172c90f7c2b07e167bbee43d7d2"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
www.google.com/pagead/1p-conversion/1066970472/?random=1674242974002&cv=11&fst=1674242974002&bg=ffffff&guid=ON&async=1>m=2oa1i0&u_w=1280&u_h=1024&label=P50UCNWJjqMCEOja4vwD&tiba=Thank%20you%20Dala!%20-%20Nearly%20Natural%20-%20Checkout&hn=www.google.com&frm=0&url=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F6348693670e7d945b05ac004b55173ed>m_ee=1&auid=1741870945.1674242972&data=event%3Dpage_view%3Bpage_path%3D%2F10894606436%2Forders%2F6348693670e7d945b05ac004b55173ed&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4
302 Found 63 B URL HTTP/2 www.google.com/pagead/1p-conversion/1066970472/?random=1674242974002&cv=11&fst=1674242974002&bg=ffffff&guid=ON&async=1>m=2oa1i0&u_w=1280&u_h=1024&label=P50UCNWJjqMCEOja4vwD&tiba=Thank%20you%20Dala!%20-%20Nearly%20Natural%20-%20Checkout&hn=www.google.com&frm=0&url=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F6348693670e7d945b05ac004b55173ed>m_ee=1&auid=1741870945.1674242972&data=event%3Dpage_view%3Bpage_path%3D%2F10894606436%2Forders%2F6348693670e7d945b05ac004b55173ed&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4
IP
File type ASCII text, with no line terminators
Hash 0339f8f57d1bf75003db591e28957e45
ae2286e497c9f76a02cb40c40a674b73bd293b76
609cd8e12464fe137cfaa9f1ab6637150d44e105559c901b6df50303fd05aa26
GET /pagead/1p-conversion/1066970472/?random=1674242974002&cv=11&fst=1674242974002&bg=ffffff&guid=ON&async=1>m=2oa1i0&u_w=1280&u_h=1024&label=P50UCNWJjqMCEOja4vwD&tiba=Thank%20you%20Dala!%20-%20Nearly%20Natural%20-%20Checkout&hn=www.google.com&frm=0&url=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F6348693670e7d945b05ac004b55173ed>m_ee=1&auid=1741870945.1674242972&data=event%3Dpage_view%3Bpage_path%3D%2F10894606436%2Forders%2F6348693670e7d945b05ac004b55173ed&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 20 Jan 2023 19:29:35 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
location: https://www.google.no/pagead/1p-conversion/1066970472/?random=1674242974002&cv=11&fst=1674242974002&bg=ffffff&guid=ON&async=1>m=2oa1i0&u_w=1280&u_h=1024&label=P50UCNWJjqMCEOja4vwD&tiba=Thank%20you%20Dala!%20-%20Nearly%20Natural%20-%20Checkout&hn=www.google.com&frm=0&url=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F6348693670e7d945b05ac004b55173ed>m_ee=1&auid=1741870945.1674242972&data=event%3Dpage_view%3Bpage_path%3D%2F10894606436%2Forders%2F6348693670e7d945b05ac004b55173ed&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4&ipr=y&prhg=0
content-type: text/javascript; charset=UTF-8
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 63
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google-analytics.com/j/collect?v=1&_v=j99&aip=1&a=99240072&t=pageview&_s=1&dl=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F6348693670e7d945b05ac004b55173ed&ul=en-us&de=UTF-8&dt=Thank%20you%20Dala!%20-%20Nearly%20Natural%20-%20Checkout&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=YADAAEALAAAAACAEK~&jid=1758723948&gjid=1782507631&cid=1634987963.1674242972&tid=UA-321745-2&_gid=1375945735.1674242975&_r=1&_slc=1>m=2wg1i05235WJV&z=141705478
200 OK 4 B URL HTTP/2 www.google-analytics.com/j/collect?v=1&_v=j99&aip=1&a=99240072&t=pageview&_s=1&dl=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F6348693670e7d945b05ac004b55173ed&ul=en-us&de=UTF-8&dt=Thank%20you%20Dala!%20-%20Nearly%20Natural%20-%20Checkout&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=YADAAEALAAAAACAEK~&jid=1758723948&gjid=1782507631&cid=1634987963.1674242972&tid=UA-321745-2&_gid=1375945735.1674242975&_r=1&_slc=1>m=2wg1i05235WJV&z=141705478
IP
File type ASCII text, with no line terminators
Hash 9e92e190700c1af4539b40c2171320a9
209bcdb79e6067b51091ce8586d4b977f25b67d8
aec60bc104db041b1512185839f18f52986df7e569e5445f740dd60f763fbca8
POST /j/collect?v=1&_v=j99&aip=1&a=99240072&t=pageview&_s=1&dl=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F6348693670e7d945b05ac004b55173ed&ul=en-us&de=UTF-8&dt=Thank%20you%20Dala!%20-%20Nearly%20Natural%20-%20Checkout&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=YADAAEALAAAAACAEK~&jid=1758723948&gjid=1782507631&cid=1634987963.1674242972&tid=UA-321745-2&_gid=1375945735.1674242975&_r=1&_slc=1>m=2wg1i05235WJV&z=141705478 HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Content-Type: text/plain
Content-Length: 0
Origin: https://www.nearlynatural.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://www.nearlynatural.com
date: Fri, 20 Jan 2023 19:29:35 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash 9826742e5a5253efcaebcb17cf1183ff
2420b0825d3e105c7b5dc78caad3f566994bc2ed
710513c24600f34bcf0b53b24178658dbd2c3a663fe33db20cef99dcd94f0d66
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 729
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 20 Jan 2023 19:29:35 GMT
Last-Modified: Fri, 20 Jan 2023 19:17:27 GMT
Server: ECS (ska/F71C)
X-Cache: HIT
Content-Length: 279
googleads.g.doubleclick.net/pagead/viewthroughconversion/1066970472/?random=1674242973363&cv=11&fst=1674242973363&fmt=3&bg=ffffff&guid=ON&async=1>m=2wg1i0&u_w=1280&u_h=1024&label=Cn-FCN6JjqMCEOja4vwD&hn=www.google.com&frm=0&url=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F6348693670e7d945b05ac004b55173ed&tiba=Thank%20you%20Dala!%20-%20Nearly%20Natural%20-%20Checkout&value=83.99&bttype=purchase&auid=1741870945.1674242972&gcp=1&ct_cookie_present=1
200 OK 42 B URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/1066970472/?random=1674242973363&cv=11&fst=1674242973363&fmt=3&bg=ffffff&guid=ON&async=1>m=2wg1i0&u_w=1280&u_h=1024&label=Cn-FCN6JjqMCEOja4vwD&hn=www.google.com&frm=0&url=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F6348693670e7d945b05ac004b55173ed&tiba=Thank%20you%20Dala!%20-%20Nearly%20Natural%20-%20Checkout&value=83.99&bttype=purchase&auid=1741870945.1674242972&gcp=1&ct_cookie_present=1
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/viewthroughconversion/1066970472/?random=1674242973363&cv=11&fst=1674242973363&fmt=3&bg=ffffff&guid=ON&async=1>m=2wg1i0&u_w=1280&u_h=1024&label=Cn-FCN6JjqMCEOja4vwD&hn=www.google.com&frm=0&url=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F6348693670e7d945b05ac004b55173ed&tiba=Thank%20you%20Dala!%20-%20Nearly%20Natural%20-%20Checkout&value=83.99&bttype=purchase&auid=1741870945.1674242972&gcp=1&ct_cookie_present=1 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 20 Jan 2023 19:29:35 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Fri, 20-Jan-2023 19:44:35 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
s.pinimg.com/ct/core.js
200 OK 1.1 kB IP
File type ASCII text, with very long lines (1146), with no line terminators
Hash 91c4ea42bc7f1df938d8cd8de8d598db
ccecbe4405d83510ca1a6291c374ea8ab1da33d9
aacfea800a59766fdd3672fad8e5eba13abae2dab105014fc9214cb0c1409925
GET /ct/core.js HTTP/1.1
Host: s.pinimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
etag: "91c4ea42bc7f1df938d8cd8de8d598db"
content-type: application/javascript
fastly-restarts: 1
x-cdn: fastly
alt-svc: h3=":443";ma=600,h3-29=":443";ma=600,h3-27=":443";ma=600
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 86400
access-control-expose-headers: X-CDN
vary: Accept-Encoding, Origin
cache-control: max-age=7200
date: Fri, 20 Jan 2023 19:29:35 GMT
content-length: 1146
X-Firefox-Spdy: h2
www.google.com/pagead/1p-conversion/1066970472/?random=1674242973417&cv=11&fst=1674242973417&bg=ffffff&guid=ON&async=1>m=2wg1i0&u_w=1280&u_h=1024&label=Cn-FCN6JjqMCEOja4vwD&hn=www.google.com&frm=0&url=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F6348693670e7d945b05ac004b55173ed&tiba=Thank%20you%20Dala!%20-%20Nearly%20Natural%20-%20Checkout&value=83.99&bttype=purchase&auid=1741870945.1674242972&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4
302 Found 63 B URL HTTP/2 www.google.com/pagead/1p-conversion/1066970472/?random=1674242973417&cv=11&fst=1674242973417&bg=ffffff&guid=ON&async=1>m=2wg1i0&u_w=1280&u_h=1024&label=Cn-FCN6JjqMCEOja4vwD&hn=www.google.com&frm=0&url=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F6348693670e7d945b05ac004b55173ed&tiba=Thank%20you%20Dala!%20-%20Nearly%20Natural%20-%20Checkout&value=83.99&bttype=purchase&auid=1741870945.1674242972&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4
IP
File type ASCII text, with no line terminators
Hash 0339f8f57d1bf75003db591e28957e45
ae2286e497c9f76a02cb40c40a674b73bd293b76
609cd8e12464fe137cfaa9f1ab6637150d44e105559c901b6df50303fd05aa26
GET /pagead/1p-conversion/1066970472/?random=1674242973417&cv=11&fst=1674242973417&bg=ffffff&guid=ON&async=1>m=2wg1i0&u_w=1280&u_h=1024&label=Cn-FCN6JjqMCEOja4vwD&hn=www.google.com&frm=0&url=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F6348693670e7d945b05ac004b55173ed&tiba=Thank%20you%20Dala!%20-%20Nearly%20Natural%20-%20Checkout&value=83.99&bttype=purchase&auid=1741870945.1674242972&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 20 Jan 2023 19:29:35 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
location: https://www.google.no/pagead/1p-conversion/1066970472/?random=1674242973417&cv=11&fst=1674242973417&bg=ffffff&guid=ON&async=1>m=2wg1i0&u_w=1280&u_h=1024&label=Cn-FCN6JjqMCEOja4vwD&hn=www.google.com&frm=0&url=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F6348693670e7d945b05ac004b55173ed&tiba=Thank%20you%20Dala!%20-%20Nearly%20Natural%20-%20Checkout&value=83.99&bttype=purchase&auid=1741870945.1674242972&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4&ipr=y&prhg=0
content-type: text/javascript; charset=UTF-8
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 63
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 071edf406c3e287843fdf4e61ceb9ff7
99cf4c0cb373feeecbdf97df42c8066551f89dfe
127371c4c4a3345b44dfbf97fb93b506d2daf0c0ecfb39317eefd695c8c59d69
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 20 Jan 2023 19:29:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
connect.facebook.net/en_US/fbevents.js
200 OK 28 kB URL HTTP/2 connect.facebook.net/en_US/fbevents.js
IP
Hash adfff022df11940eae4f154583733c87
95cebffbdacd8e5c9862af137550c29666294d89
9421e5029641f0926d53af2db421727c065e4dd9f4b0fd6295096a73ae433d3e
GET /en_US/fbevents.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: application/x-javascript; charset=utf-8
content-security-policy: default-src facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com data: blob: 'self';script-src *.fbcdn.net *.facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com;connect-src *.fbcdn.net *.facebook.net wss://*.fbcdn.net attachment.fbsbx.com blob: 'self';block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: Q+jK+zmspc3qJmqlBV2gYG/K2qSw2yCA1/okJqCxjKMlate0IhIUn4KqXhJ96JfRYhhoS3MQ189wpnDOic8Jqg==
priority: u=3,i
content-length: 27859
x-fb-trip-id: 1904183273
date: Fri, 20 Jan 2023 19:29:35 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash a16b4b7be19ebcafa8448b403aa56cdc
cc2450e2301c6380a452a5d4744fb9fc07b73dea
2740da6c7331cfd931e53e1cf9c8131f7e9ed21c96d3e63470e8bc75e7ea76a8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 20 Jan 2023 19:29:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
s.yimg.com/wi/ytc.js
200 OK 6.4 kB IP
Hash 3fd7fc8d72592fe1d600dc6689202ee0
16e0ed4211f56e1327bfc37c04ef7bd740200362
5e282e859d5b81bb0b7d4f014369da46b77defb1d615b48f0c29f0ebcb3a81d0
GET /wi/ytc.js HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: pRChbg4xmQNKGRj+hT0iREZPMyqgdBD2rL5fyQt+0M1+OUSgVlHigAQ53Dq1biMydv2CeWIzLqs=
x-amz-request-id: 4W0NFNAQFX5AH08D
date: Fri, 20 Jan 2023 18:31:18 GMT
last-modified: Tue, 14 Jun 2022 12:21:31 GMT
x-amz-expiration: expiry-date="Thu, 20 Jul 2023 00:00:00 GMT", rule-id="oath-standard-lifecycle"
etag: "6a624022b5d271dcefb070b0b6670abc-df"
x-amz-server-side-encryption: AES256
cache-control: public,max-age=3600
x-amz-version-id: .QD3nDfK79S8_ikLSJXTL23Tdis9tg0C
accept-ranges: bytes
content-type: application/javascript
server: ATS
referrer-policy: no-referrer-when-downgrade
vary: Origin, Accept-Encoding
age: 3498
content-encoding: gzip
strict-transport-security: max-age=15552000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash f76685480cc0a396abec56b2bacff3d5
6fc14273e16deb512063bcde6d936d3f331c1b28
96318b41cd34b22f88213f7f246780d3aeb476536c22566ef3f450aac93d1271
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2120
Cache-Control: max-age=109134
Content-Type: application/ocsp-response
Date: Fri, 20 Jan 2023 19:29:35 GMT
Etag: "63c9eaa5-1d7"
Expires: Sun, 22 Jan 2023 01:48:29 GMT
Last-Modified: Fri, 20 Jan 2023 01:13:09 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 471
ocsp.starfieldtech.com/
200 OK 1.8 kB IP
Hash 7ff5e105815ef931a5556ba2ebc29f29
99f58b4cc24d3172c90f7c2b07e167bbee43d7d2
ef34437c6ca83e52efaa7ad77bad6450195cd2a6448b14960f033f5ce1baada2
POST / HTTP/1.1
Host: ocsp.starfieldtech.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Fri, 20 Jan 2023 19:29:35 GMT
Content-Type: application/ocsp-response
Content-Length: 1845
Connection: keep-alive
X-Sucuri-ID: 19023
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Thu, 19 Jan 2023 22:36:17 GMT
Expires: Fri, 20 Jan 2023 22:36:17 GMT
ETag: "99f58b4cc24d3172c90f7c2b07e167bbee43d7d2"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
s.yimg.com/wi/config/10058070.json
200 OK 22 B URL HTTP/2 s.yimg.com/wi/config/10058070.json
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 14293ad9ad0ffaf9f7a3acf1b0793b66
718dea6b65b9516e5e33fac53451056397deb255
73a1b438b0221511fb3dde18e019f5ab045811b2248d25d424e40980c683a9dc
GET /wi/config/10058070.json HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Origin: https://www.nearlynatural.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-allow-methods: GET
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
x-amz-request-id: CCN9MQYDMSJGWZZT
x-amz-id-2: wJMFdJJfJl06Ju3Ir5L9jK40hiTGK+JnH1q7Qxotc9S/OyiPXoagod8PAvG2sPolB3VdZ1U5Hfs=
content-type: application/json
date: Fri, 20 Jan 2023 19:29:35 GMT
server: ATS
referrer-policy: no-referrer-when-downgrade
cache-control: public,max-age=3600
content-encoding: gzip
content-length: 22
age: 0
strict-transport-security: max-age=15552000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-321745-2&cid=1634987963.1674242972&jid=1758723948&gjid=1782507631&_gid=1375945735.1674242975&_u=YADAAEAKAAAAACAEK~&z=722948728
200 OK 4 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-321745-2&cid=1634987963.1674242972&jid=1758723948&gjid=1782507631&_gid=1375945735.1674242975&_u=YADAAEAKAAAAACAEK~&z=722948728
IP
File type ASCII text, with no line terminators
Hash 48c0473b7821185d937e685216e2168b
3743e47f8a429a5e87b86cb582d78940733d9d2e
570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-321745-2&cid=1634987963.1674242972&jid=1758723948&gjid=1782507631&_gid=1375945735.1674242975&_u=YADAAEAKAAAAACAEK~&z=722948728 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Content-Type: text/plain
Content-Length: 0
Origin: https://www.nearlynatural.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://www.nearlynatural.com
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Fri, 20 Jan 2023 19:29:35 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 472 B IP
Hash 141fb83bc8a8eb2cb612141dfdb7e451
d77ef49a363305d7180fe8396a05ec9eead96afa
4130f327604a815fea2e515e69ad44f3874e2556aea65e2b21787c34b317e68d
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 20 Jan 2023 19:29:35 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Wed, 18 Jan 2023 05:58:14 GMT
Expires: Wed, 25 Jan 2023 05:58:13 GMT
Etag: "d77ef49a363305d7180fe8396a05ec9eead96afa"
Cache-Control: max-age=382717,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 78ca3846496fb524-OSL
cdn.justuno.com/vck.js
200 OK 1.1 kB IP
File type ASCII text, with very long lines (1134)
Hash 94d1831c24bff56329b25e03ea49df97
3887fa8cd5aecf958a4bb953ab740aa7ea7879bd
b80af57de00ad625d2a8817bc54c45356d3c1cda53d1db5e30f1d0ee9a8cb535
GET /vck.js HTTP/1.1
Host: cdn.justuno.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 20 Jan 2023 19:29:35 GMT
content-type: application/javascript
access-control-max-age: 3000
cache-control: public, max-age=691200
cf-bgj: minify
cf-polished: origSize=3165
etag: W/"0d90f75705633071cb4330dbccfe579a"
last-modified: Thu, 12 Nov 2020 22:18:40 GMT
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
x-77-cache: HIT
x-77-nzt: AblMCQ3fSGX/npsDAA
x-77-nzt-ray: c0a4cc2821479f77147ebf6311fbb715
x-77-pop: stockholmSE
x-age: 236446
x-cache: HIT
x-amz-id-2: DgCtfEtw8awf9c0Vd7fckRDlPhvySxjSOmypq3UKelebDB6r+pu6r1s7aZkkFe5Wk+AjDex8Gc8=
x-amz-request-id: C2BRSWYJWF89YR4X
x-amz-version-id: IStAkkpAXub6mGXsU7R_eEc9Tjbt5OG9
cf-cache-status: HIT
age: 3295
expires: Sat, 28 Jan 2023 19:29:35 GMT
access-control-allow-headers: *
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
server: cloudflare
cf-ray: 78ca38441c871bfa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
d3rr3d0n31t48m.cloudfront.net/widget/triggerRunner.js?v=c317b78
200 OK 3.8 kB URL HTTP/2 d3rr3d0n31t48m.cloudfront.net/widget/triggerRunner.js?v=c317b78
IP
File type ASCII text, with very long lines (583)
Hash 879df6750bd5bf3c772ce4abd8df7a22
167d1ef1bd5d409ea52aef010944537f9e2dd16b
cdab7fcab2bc13cd768157a52bf12868130c6fe2af0843cb4cf5d67fae7552be
GET /widget/triggerRunner.js?v=c317b78 HTTP/1.1
Host: d3rr3d0n31t48m.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
content-length: 3772
date: Thu, 19 Jan 2023 16:15:20 GMT
last-modified: Thu, 19 Jan 2023 16:13:31 GMT
etag: "879df6750bd5bf3c772ce4abd8df7a22"
cache-control: max-age=2592000, public
content-encoding: gzip
x-amz-meta-mtime: 1674144807.99
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 501ad2910f631f0520a6d389d6f053e8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: rbsr1LfQe_Vgb1PA4KudZ5vLo80PTqd1OAJOupjaHTKcX8Ep11GerA==
age: 98056
X-Firefox-Spdy: h2
cdn-widgetsrepository.yotpo.com/widget-assets/yotpo-pixel/2022-12-06_09-10-14/bundle.js
200 OK 16 kB URL HTTP/2 cdn-widgetsrepository.yotpo.com/widget-assets/yotpo-pixel/2022-12-06_09-10-14/bundle.js
IP
Hash d22a977c440faf770e1d39ff00a7e1cc
a4b75b39d414a670e9b97506dcb9dcbfebf92c8f
be1f12383f567dff924756d7586d9089c17d082ec3dc2411358ffd637f1f1cac
GET /widget-assets/yotpo-pixel/2022-12-06_09-10-14/bundle.js HTTP/1.1
Host: cdn-widgetsrepository.yotpo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: JnGljnG5MsUzlBtVQtVIwwdoYV30tM7s4Riy4hQdOkIVBWM1/xjwSdX01ZJYr5X8JLqJ6bbQrxo=
x-amz-request-id: E5E1TTDR6S6B3XQ2
last-modified: Tue, 06 Dec 2022 09:10:21 GMT
etag: "aaa4223431ceb8bf734e9e241fc39c89"
x-amz-version-id: Urn5iuJOxPwl9H.GMq9Oc7wRRb1DTuGc
accept-ranges: bytes
content-type: text/javascript
server: AmazonS3
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=31536000
expires: Sat, 20 Jan 2024 19:29:35 GMT
date: Fri, 20 Jan 2023 19:29:35 GMT
content-length: 16306
access-control-max-age: 86400
access-control-allow-credentials: false
access-control-allow-headers: *
access-control-allow-methods: GET,POST
access-control-allow-origin: *
X-Firefox-Spdy: h2
cdn-widget-assets.yotpo.com/widgets-initializer/app.v0.2.0-3926.js
200 OK 9.7 kB URL HTTP/2 cdn-widget-assets.yotpo.com/widgets-initializer/app.v0.2.0-3926.js
IP
File type ASCII text, with very long lines (21913)
Hash 5e76fcb1200132616bd531e13894683c
cd14da9c77d46aba52ced2822bfbb9ead805656c
9c45d18b77797983fbc362db37855d061e3b6049d4b31ef4337e0a143cbdfaa0
GET /widgets-initializer/app.v0.2.0-3926.js HTTP/1.1
Host: cdn-widget-assets.yotpo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: yzl+FUSEELOHuLpKS6ra6MwQMIs92/rtCRQ9f+hFpQZgOsZJVGP/y5mr2PiO7DngvtHO4aoT6J4=
x-amz-request-id: MWAX576YDW8KRGR8
last-modified: Sun, 15 Jan 2023 23:05:49 GMT
etag: "c392a1d5bc5dd47e69a5b3883ad56167"
x-amz-meta-s3cmd-attrs: atime:1673823948/ctime:1673823948/gid:117/gname:jenkins/md5:c392a1d5bc5dd47e69a5b3883ad56167/mode:33188/mtime:1673823948/uid:110/uname:jenkins
x-amz-version-id: gaI5_HZVXcKgdfsCLu7FIMLQEFHXBRDB
accept-ranges: bytes
content-type: application/javascript
server: AmazonS3
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=31253663
date: Fri, 20 Jan 2023 19:29:35 GMT
content-length: 9692
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 287bdd180d0b6ff8f9a00e27cd61726e
ff9a567f1b0e6bb978737d402e69caad3d28e948
13a27537608da3260641b048e0e19292b4125186f2c6b05fcf6b6f307ec95630
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 20 Jan 2023 19:29:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 287bdd180d0b6ff8f9a00e27cd61726e
ff9a567f1b0e6bb978737d402e69caad3d28e948
13a27537608da3260641b048e0e19292b4125186f2c6b05fcf6b6f307ec95630
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 20 Jan 2023 19:29:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 287bdd180d0b6ff8f9a00e27cd61726e
ff9a567f1b0e6bb978737d402e69caad3d28e948
13a27537608da3260641b048e0e19292b4125186f2c6b05fcf6b6f307ec95630
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 20 Jan 2023 19:29:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 3c232c19f3fc429b50b4b21d042ea2d1
232ff9e14ff2bd70e2c058c139e3694cc8c45f25
dfdf4248506d908ca817562e74c64bdb1a192c61c6d1f2f2f66db045bc1e3575
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 20 Jan 2023 19:29:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.no/pagead/1p-conversion/1066970472/?random=1674242973417&cv=11&fst=1674242973417&bg=ffffff&guid=ON&async=1>m=2wg1i0&u_w=1280&u_h=1024&label=Cn-FCN6JjqMCEOja4vwD&hn=www.google.com&frm=0&url=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F6348693670e7d945b05ac004b55173ed&tiba=Thank%20you%20Dala!%20-%20Nearly%20Natural%20-%20Checkout&value=83.99&bttype=purchase&auid=1741870945.1674242972&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4&ipr=y&prhg=0
200 OK 63 B URL HTTP/2 www.google.no/pagead/1p-conversion/1066970472/?random=1674242973417&cv=11&fst=1674242973417&bg=ffffff&guid=ON&async=1>m=2wg1i0&u_w=1280&u_h=1024&label=Cn-FCN6JjqMCEOja4vwD&hn=www.google.com&frm=0&url=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F6348693670e7d945b05ac004b55173ed&tiba=Thank%20you%20Dala!%20-%20Nearly%20Natural%20-%20Checkout&value=83.99&bttype=purchase&auid=1741870945.1674242972&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4&ipr=y&prhg=0
IP
File type ASCII text, with no line terminators
Hash 0339f8f57d1bf75003db591e28957e45
ae2286e497c9f76a02cb40c40a674b73bd293b76
609cd8e12464fe137cfaa9f1ab6637150d44e105559c901b6df50303fd05aa26
GET /pagead/1p-conversion/1066970472/?random=1674242973417&cv=11&fst=1674242973417&bg=ffffff&guid=ON&async=1>m=2wg1i0&u_w=1280&u_h=1024&label=Cn-FCN6JjqMCEOja4vwD&hn=www.google.com&frm=0&url=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F6348693670e7d945b05ac004b55173ed&tiba=Thank%20you%20Dala!%20-%20Nearly%20Natural%20-%20Checkout&value=83.99&bttype=purchase&auid=1741870945.1674242972&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4&ipr=y&prhg=0 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 20 Jan 2023 19:29:36 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: text/javascript; charset=UTF-8
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 63
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.no/pagead/1p-user-list/1066970472/?random=1674242973347&cv=11&fst=1674241200000&bg=ffffff&guid=ON&async=1>m=2wg1i0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F6348693670e7d945b05ac004b55173ed&tiba=Thank%20you%20Dala!%20-%20Nearly%20Natural%20-%20Checkout&data=event%3Ddl_add_to_cart&fmt=3&is_vtc=1&random=307562115&rmt_tld=1&ipr=y
200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-user-list/1066970472/?random=1674242973347&cv=11&fst=1674241200000&bg=ffffff&guid=ON&async=1>m=2wg1i0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F6348693670e7d945b05ac004b55173ed&tiba=Thank%20you%20Dala!%20-%20Nearly%20Natural%20-%20Checkout&data=event%3Ddl_add_to_cart&fmt=3&is_vtc=1&random=307562115&rmt_tld=1&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/1066970472/?random=1674242973347&cv=11&fst=1674241200000&bg=ffffff&guid=ON&async=1>m=2wg1i0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F6348693670e7d945b05ac004b55173ed&tiba=Thank%20you%20Dala!%20-%20Nearly%20Natural%20-%20Checkout&data=event%3Ddl_add_to_cart&fmt=3&is_vtc=1&random=307562115&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 20 Jan 2023 19:29:36 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.no/pagead/1p-conversion/1066970472/?random=1674242973363&cv=11&fst=1674242973363&bg=ffffff&guid=ON&async=1>m=2wg1i0&u_w=1280&u_h=1024&label=Cn-FCN6JjqMCEOja4vwD&hn=www.google.com&frm=0&url=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F6348693670e7d945b05ac004b55173ed&tiba=Thank%20you%20Dala!%20-%20Nearly%20Natural%20-%20Checkout&value=83.99&bttype=purchase&auid=1741870945.1674242972&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4&ipr=y&prhg=0
200 OK 63 B URL HTTP/2 www.google.no/pagead/1p-conversion/1066970472/?random=1674242973363&cv=11&fst=1674242973363&bg=ffffff&guid=ON&async=1>m=2wg1i0&u_w=1280&u_h=1024&label=Cn-FCN6JjqMCEOja4vwD&hn=www.google.com&frm=0&url=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F6348693670e7d945b05ac004b55173ed&tiba=Thank%20you%20Dala!%20-%20Nearly%20Natural%20-%20Checkout&value=83.99&bttype=purchase&auid=1741870945.1674242972&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4&ipr=y&prhg=0
IP
File type ASCII text, with no line terminators
Hash 0339f8f57d1bf75003db591e28957e45
ae2286e497c9f76a02cb40c40a674b73bd293b76
609cd8e12464fe137cfaa9f1ab6637150d44e105559c901b6df50303fd05aa26
GET /pagead/1p-conversion/1066970472/?random=1674242973363&cv=11&fst=1674242973363&bg=ffffff&guid=ON&async=1>m=2wg1i0&u_w=1280&u_h=1024&label=Cn-FCN6JjqMCEOja4vwD&hn=www.google.com&frm=0&url=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F6348693670e7d945b05ac004b55173ed&tiba=Thank%20you%20Dala!%20-%20Nearly%20Natural%20-%20Checkout&value=83.99&bttype=purchase&auid=1741870945.1674242972&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4&ipr=y&prhg=0 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 20 Jan 2023 19:29:36 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: text/javascript; charset=UTF-8
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 63
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.no/pagead/1p-conversion/1066970472/?random=1674242974002&cv=11&fst=1674242974002&bg=ffffff&guid=ON&async=1>m=2oa1i0&u_w=1280&u_h=1024&label=P50UCNWJjqMCEOja4vwD&tiba=Thank%20you%20Dala!%20-%20Nearly%20Natural%20-%20Checkout&hn=www.google.com&frm=0&url=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F6348693670e7d945b05ac004b55173ed>m_ee=1&auid=1741870945.1674242972&data=event%3Dpage_view%3Bpage_path%3D%2F10894606436%2Forders%2F6348693670e7d945b05ac004b55173ed&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4&ipr=y&prhg=0
200 OK 63 B URL HTTP/2 www.google.no/pagead/1p-conversion/1066970472/?random=1674242974002&cv=11&fst=1674242974002&bg=ffffff&guid=ON&async=1>m=2oa1i0&u_w=1280&u_h=1024&label=P50UCNWJjqMCEOja4vwD&tiba=Thank%20you%20Dala!%20-%20Nearly%20Natural%20-%20Checkout&hn=www.google.com&frm=0&url=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F6348693670e7d945b05ac004b55173ed>m_ee=1&auid=1741870945.1674242972&data=event%3Dpage_view%3Bpage_path%3D%2F10894606436%2Forders%2F6348693670e7d945b05ac004b55173ed&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4&ipr=y&prhg=0
IP
File type ASCII text, with no line terminators
Hash 0339f8f57d1bf75003db591e28957e45
ae2286e497c9f76a02cb40c40a674b73bd293b76
609cd8e12464fe137cfaa9f1ab6637150d44e105559c901b6df50303fd05aa26
GET /pagead/1p-conversion/1066970472/?random=1674242974002&cv=11&fst=1674242974002&bg=ffffff&guid=ON&async=1>m=2oa1i0&u_w=1280&u_h=1024&label=P50UCNWJjqMCEOja4vwD&tiba=Thank%20you%20Dala!%20-%20Nearly%20Natural%20-%20Checkout&hn=www.google.com&frm=0&url=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F6348693670e7d945b05ac004b55173ed>m_ee=1&auid=1741870945.1674242972&data=event%3Dpage_view%3Bpage_path%3D%2F10894606436%2Forders%2F6348693670e7d945b05ac004b55173ed&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4&ipr=y&prhg=0 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 20 Jan 2023 19:29:36 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: text/javascript; charset=UTF-8
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 63
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.no/pagead/1p-user-list/1066970472/?random=1674242973451&cv=11&fst=1674241200000&bg=ffffff&guid=ON&async=1>m=2wg1i0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F6348693670e7d945b05ac004b55173ed&tiba=Thank%20you%20Dala!%20-%20Nearly%20Natural%20-%20Checkout&value=127.99&data=event%3Dadd_to_cart%3Bvisitor_type%3Dguest%3Becomm_prodid%3D6565%3Bgoogle_business_vertical%3Dretail%3Bid%3D6565&fmt=3&is_vtc=1&random=607013647&rmt_tld=1&ipr=y
200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-user-list/1066970472/?random=1674242973451&cv=11&fst=1674241200000&bg=ffffff&guid=ON&async=1>m=2wg1i0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F6348693670e7d945b05ac004b55173ed&tiba=Thank%20you%20Dala!%20-%20Nearly%20Natural%20-%20Checkout&value=127.99&data=event%3Dadd_to_cart%3Bvisitor_type%3Dguest%3Becomm_prodid%3D6565%3Bgoogle_business_vertical%3Dretail%3Bid%3D6565&fmt=3&is_vtc=1&random=607013647&rmt_tld=1&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/1066970472/?random=1674242973451&cv=11&fst=1674241200000&bg=ffffff&guid=ON&async=1>m=2wg1i0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F6348693670e7d945b05ac004b55173ed&tiba=Thank%20you%20Dala!%20-%20Nearly%20Natural%20-%20Checkout&value=127.99&data=event%3Dadd_to_cart%3Bvisitor_type%3Dguest%3Becomm_prodid%3D6565%3Bgoogle_business_vertical%3Dretail%3Bid%3D6565&fmt=3&is_vtc=1&random=607013647&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 20 Jan 2023 19:29:36 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-321745-2&cid=1634987963.1674242972&jid=1758723948&_u=YADAAEAKAAAAACAEK~&z=1754826838
200 OK 42 B URL HTTP/2 www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-321745-2&cid=1634987963.1674242972&jid=1758723948&_u=YADAAEAKAAAAACAEK~&z=1754826838
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-321745-2&cid=1634987963.1674242972&jid=1758723948&_u=YADAAEAKAAAAACAEK~&z=1754826838 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 20 Jan 2023 19:29:36 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.no/pagead/1p-user-list/1066970472/?random=1674242973358&cv=11&fst=1674241200000&bg=ffffff&guid=ON&async=1>m=2wg1i0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F6348693670e7d945b05ac004b55173ed&tiba=Thank%20you%20Dala!%20-%20Nearly%20Natural%20-%20Checkout&value=83.99&data=event%3Dadd_to_cart%3Bvisitor_type%3Dguest%3Becomm_prodid%3D6349%3Bgoogle_business_vertical%3Dretail%3Bid%3D6349&fmt=3&is_vtc=1&random=3980507150&rmt_tld=1&ipr=y
200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-user-list/1066970472/?random=1674242973358&cv=11&fst=1674241200000&bg=ffffff&guid=ON&async=1>m=2wg1i0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F6348693670e7d945b05ac004b55173ed&tiba=Thank%20you%20Dala!%20-%20Nearly%20Natural%20-%20Checkout&value=83.99&data=event%3Dadd_to_cart%3Bvisitor_type%3Dguest%3Becomm_prodid%3D6349%3Bgoogle_business_vertical%3Dretail%3Bid%3D6349&fmt=3&is_vtc=1&random=3980507150&rmt_tld=1&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/1066970472/?random=1674242973358&cv=11&fst=1674241200000&bg=ffffff&guid=ON&async=1>m=2wg1i0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F6348693670e7d945b05ac004b55173ed&tiba=Thank%20you%20Dala!%20-%20Nearly%20Natural%20-%20Checkout&value=83.99&data=event%3Dadd_to_cart%3Bvisitor_type%3Dguest%3Becomm_prodid%3D6349%3Bgoogle_business_vertical%3Dretail%3Bid%3D6349&fmt=3&is_vtc=1&random=3980507150&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 20 Jan 2023 19:29:36 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
35.160.46.251/is
200 OK 32 B IP
File type ASCII text, with no line terminators
Hash a40c50f4c51a4865b1fe6664ed9ae830
43849cc57fb21579837f2fd927b882cfa15bf73e
00361df1111567258965fa5ee5d440cf43129c2073e737b6fb06624191ab788a
Analyzer Verdict Alert quad9 Sinkholed
GET /is HTTP/1.1
Host: 35.160.46.251
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Origin: https://www.nearlynatural.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
date: Fri, 20 Jan 2023 19:29:35 GMT
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, x-requested-with, X-Custom-Header
x-application-context: application:prod:8080
content-type: text/plain;charset=utf-8
content-length: 32
x-envoy-upstream-service-time: 1
server: istio-envoy
connection: close
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 287bdd180d0b6ff8f9a00e27cd61726e
ff9a567f1b0e6bb978737d402e69caad3d28e948
13a27537608da3260641b048e0e19292b4125186f2c6b05fcf6b6f307ec95630
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 20 Jan 2023 19:29:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.no/pagead/1p-conversion/1066970472/?random=1674242973455&cv=11&fst=1674242973455&bg=ffffff&guid=ON&async=1>m=2wg1i0&u_w=1280&u_h=1024&label=Cn-FCN6JjqMCEOja4vwD&hn=www.google.com&frm=0&url=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F6348693670e7d945b05ac004b55173ed&tiba=Thank%20you%20Dala!%20-%20Nearly%20Natural%20-%20Checkout&value=127.99&bttype=purchase&auid=1741870945.1674242972&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4&ipr=y&prhg=0
200 OK 63 B URL HTTP/2 www.google.no/pagead/1p-conversion/1066970472/?random=1674242973455&cv=11&fst=1674242973455&bg=ffffff&guid=ON&async=1>m=2wg1i0&u_w=1280&u_h=1024&label=Cn-FCN6JjqMCEOja4vwD&hn=www.google.com&frm=0&url=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F6348693670e7d945b05ac004b55173ed&tiba=Thank%20you%20Dala!%20-%20Nearly%20Natural%20-%20Checkout&value=127.99&bttype=purchase&auid=1741870945.1674242972&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4&ipr=y&prhg=0
IP
File type ASCII text, with no line terminators
Hash 0339f8f57d1bf75003db591e28957e45
ae2286e497c9f76a02cb40c40a674b73bd293b76
609cd8e12464fe137cfaa9f1ab6637150d44e105559c901b6df50303fd05aa26
GET /pagead/1p-conversion/1066970472/?random=1674242973455&cv=11&fst=1674242973455&bg=ffffff&guid=ON&async=1>m=2wg1i0&u_w=1280&u_h=1024&label=Cn-FCN6JjqMCEOja4vwD&hn=www.google.com&frm=0&url=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F6348693670e7d945b05ac004b55173ed&tiba=Thank%20you%20Dala!%20-%20Nearly%20Natural%20-%20Checkout&value=127.99&bttype=purchase&auid=1741870945.1674242972&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4&ipr=y&prhg=0 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 20 Jan 2023 19:29:36 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: text/javascript; charset=UTF-8
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 63
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.no/pagead/1p-user-list/1066970472/?random=1674242973412&cv=11&fst=1674241200000&bg=ffffff&guid=ON&async=1>m=2wg1i0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F6348693670e7d945b05ac004b55173ed&tiba=Thank%20you%20Dala!%20-%20Nearly%20Natural%20-%20Checkout&value=83.99&data=event%3Dadd_to_cart%3Bvisitor_type%3Dguest%3Becomm_prodid%3D6331%3Bgoogle_business_vertical%3Dretail%3Bid%3D6331&fmt=3&is_vtc=1&random=3359446298&rmt_tld=1&ipr=y
200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-user-list/1066970472/?random=1674242973412&cv=11&fst=1674241200000&bg=ffffff&guid=ON&async=1>m=2wg1i0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F6348693670e7d945b05ac004b55173ed&tiba=Thank%20you%20Dala!%20-%20Nearly%20Natural%20-%20Checkout&value=83.99&data=event%3Dadd_to_cart%3Bvisitor_type%3Dguest%3Becomm_prodid%3D6331%3Bgoogle_business_vertical%3Dretail%3Bid%3D6331&fmt=3&is_vtc=1&random=3359446298&rmt_tld=1&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/1066970472/?random=1674242973412&cv=11&fst=1674241200000&bg=ffffff&guid=ON&async=1>m=2wg1i0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F6348693670e7d945b05ac004b55173ed&tiba=Thank%20you%20Dala!%20-%20Nearly%20Natural%20-%20Checkout&value=83.99&data=event%3Dadd_to_cart%3Bvisitor_type%3Dguest%3Becomm_prodid%3D6331%3Bgoogle_business_vertical%3Dretail%3Bid%3D6331&fmt=3&is_vtc=1&random=3359446298&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 20 Jan 2023 19:29:36 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.no/pagead/1p-user-list/1066970472/?random=1674242973446&cv=11&fst=1674241200000&bg=ffffff&guid=ON&async=1>m=2wg1i0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F6348693670e7d945b05ac004b55173ed&tiba=Thank%20you%20Dala!%20-%20Nearly%20Natural%20-%20Checkout&data=event%3Ddl_add_to_cart&fmt=3&is_vtc=1&random=2978065486&rmt_tld=1&ipr=y
200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-user-list/1066970472/?random=1674242973446&cv=11&fst=1674241200000&bg=ffffff&guid=ON&async=1>m=2wg1i0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F6348693670e7d945b05ac004b55173ed&tiba=Thank%20you%20Dala!%20-%20Nearly%20Natural%20-%20Checkout&data=event%3Ddl_add_to_cart&fmt=3&is_vtc=1&random=2978065486&rmt_tld=1&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/1066970472/?random=1674242973446&cv=11&fst=1674241200000&bg=ffffff&guid=ON&async=1>m=2wg1i0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F6348693670e7d945b05ac004b55173ed&tiba=Thank%20you%20Dala!%20-%20Nearly%20Natural%20-%20Checkout&data=event%3Ddl_add_to_cart&fmt=3&is_vtc=1&random=2978065486&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 20 Jan 2023 19:29:36 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 287bdd180d0b6ff8f9a00e27cd61726e
ff9a567f1b0e6bb978737d402e69caad3d28e948
13a27537608da3260641b048e0e19292b4125186f2c6b05fcf6b6f307ec95630
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 20 Jan 2023 19:29:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.no/pagead/1p-user-list/1066970472/?random=1674242973404&cv=11&fst=1674241200000&bg=ffffff&guid=ON&async=1>m=2wg1i0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F6348693670e7d945b05ac004b55173ed&tiba=Thank%20you%20Dala!%20-%20Nearly%20Natural%20-%20Checkout&data=event%3Ddl_add_to_cart&fmt=3&is_vtc=1&random=203744022&rmt_tld=1&ipr=y
200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-user-list/1066970472/?random=1674242973404&cv=11&fst=1674241200000&bg=ffffff&guid=ON&async=1>m=2wg1i0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F6348693670e7d945b05ac004b55173ed&tiba=Thank%20you%20Dala!%20-%20Nearly%20Natural%20-%20Checkout&data=event%3Ddl_add_to_cart&fmt=3&is_vtc=1&random=203744022&rmt_tld=1&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/1066970472/?random=1674242973404&cv=11&fst=1674241200000&bg=ffffff&guid=ON&async=1>m=2wg1i0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F6348693670e7d945b05ac004b55173ed&tiba=Thank%20you%20Dala!%20-%20Nearly%20Natural%20-%20Checkout&data=event%3Ddl_add_to_cart&fmt=3&is_vtc=1&random=203744022&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 20 Jan 2023 19:29:36 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
d3rr3d0n31t48m.cloudfront.net/widget/widget.js?v=2085405
200 OK 48 kB URL HTTP/2 d3rr3d0n31t48m.cloudfront.net/widget/widget.js?v=2085405
IP
File type ASCII text, with very long lines (778)
Hash bff3a0037cd355647d70d5e007d1bd42
3036edbddcdbbb8ed2a4a6b39350f9902c20c551
14b6807df5269a367d2ce8a123e64193baa9d057fe3777ea6b8329b6c7002dea
GET /widget/widget.js?v=2085405 HTTP/1.1
Host: d3rr3d0n31t48m.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
content-length: 48092
date: Thu, 19 Jan 2023 16:15:21 GMT
last-modified: Thu, 19 Jan 2023 16:13:32 GMT
etag: "bff3a0037cd355647d70d5e007d1bd42"
cache-control: max-age=2592000, public
content-encoding: gzip
x-amz-meta-mtime: 1674144805.85
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 501ad2910f631f0520a6d389d6f053e8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: QqJJgUBecCyNGTiVdPENl8_boxRf4I2YhuGwspp-O7fqJ2s8ObhJIw==
age: 98056
X-Firefox-Spdy: h2
sp.analytics.yahoo.com/sp.pl?a=10000&d=Fri%2C%2020%20Jan%202023%2019%3A29%3A35%20GMT&n=0&b=Thank%20you%20Dala!%20-%20Nearly%20Natural%20-%20Checkout&.yp=10058070&f=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F6348693670e7d945b05ac004b55173ed&enc=UTF-8&yv=1.13.0&tagmgr=gtm
200 OK 43 B URL HTTP/2 sp.analytics.yahoo.com/sp.pl?a=10000&d=Fri%2C%2020%20Jan%202023%2019%3A29%3A35%20GMT&n=0&b=Thank%20you%20Dala!%20-%20Nearly%20Natural%20-%20Checkout&.yp=10058070&f=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F6348693670e7d945b05ac004b55173ed&enc=UTF-8&yv=1.13.0&tagmgr=gtm
IP
ASN #34010 Yahoo! UK Services Limited
File type GIF image data, version 89a, 1 x 1\012- data
Hash bff56ce49dd485d195fdfa0a02342568
74fb4071deab7d3ab083562067b735df32c43397
0e4b1e428a2198ef747010c094101c257b568a97cdcc0f31ed5e9868cc835b39
GET /sp.pl?a=10000&d=Fri%2C%2020%20Jan%202023%2019%3A29%3A35%20GMT&n=0&b=Thank%20you%20Dala!%20-%20Nearly%20Natural%20-%20Checkout&.yp=10058070&f=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F6348693670e7d945b05ac004b55173ed&enc=UTF-8&yv=1.13.0&tagmgr=gtm HTTP/1.1
Host: sp.analytics.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 20 Jan 2023 19:29:36 GMT
expires: Fri, 20 Jan 2023 19:29:36 GMT
pragma: no-cache
cache-control: no-cache, private, must-revalidate
content-type: image/gif
accept-ranges: bytes
content-length: 43
server: ATS
age: 0
strict-transport-security: max-age=31536000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-frame-options: DENY
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
content-security-policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic
set-cookie: A3=d=AQABBKDrymMCEJq9sjpAQOT-U-SHKe4URVwFEgEBAQE9zGPUYwAAAAAA_eMAAA&S=AQAAAh4_T0TO_UF4rqbNBVe-soI; Expires=Sun, 21 Jan 2024 01:29:36 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
X-Firefox-Spdy: h2
ct.pinterest.com/user/?event=PageVisit&ed=%7B%22np%22%3A%22shopify%22%2C%22eventID%22%3A%22d0a86f46-E3BE-48BE-94CA-98A13DE6A6A0%22%7D&tid=2621045558050&cb=1674242975470&dep=5%2CEVENT_TAGS_ABSENT
200 OK 375 B URL HTTP/2 ct.pinterest.com/user/?event=PageVisit&ed=%7B%22np%22%3A%22shopify%22%2C%22eventID%22%3A%22d0a86f46-E3BE-48BE-94CA-98A13DE6A6A0%22%7D&tid=2621045558050&cb=1674242975470&dep=5%2CEVENT_TAGS_ABSENT
IP
File type JSON data\012- , ASCII text, with very long lines (539), with no line terminators
Hash f23754c0cabb23c00d00ec7cd0708b27
8b2826c766d44ba22ab77c66ba8b3389e3c1d482
1a26de1b3b0d3dbc8d54d94feeeb6ac92d05fbbe3132e2a2167caec156ac7796
GET /user/?event=PageVisit&ed=%7B%22np%22%3A%22shopify%22%2C%22eventID%22%3A%22d0a86f46-E3BE-48BE-94CA-98A13DE6A6A0%22%7D&tid=2621045558050&cb=1674242975470&dep=5%2CEVENT_TAGS_ABSENT HTTP/1.1
Host: ct.pinterest.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Origin: https://www.nearlynatural.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-expose-headers: Epik,Pin-Unauth
pin-unauth: dWlkPU5qWTVOemsxWkRFdFl6QXlNaTAwTWpVMkxUaGhPVFl0TW1aaE9HVTVZemd5T1RSbA
cache-control: no-cache,no-store,must-revalidate,max-age=0
pragma: no-cache
expires: Sat, 01 Jan 2000 00:00:00 GMT
access-control-allow-origin: https://www.nearlynatural.com
content-type: application/json; charset=utf-8
content-encoding: gzip
x-envoy-upstream-service-time: 1
referrer-policy: origin
x-pinterest-rid: 1380449666274874
date: Fri, 20 Jan 2023 19:29:36 GMT
x-cdn: fastly
content-length: 375
X-Firefox-Spdy: h2
ct.pinterest.com/user/?tid=2621045558050&pd=%7B%22np%22%3A%22shopify%22%7D&cb=1674242975468&dep=2%2CPAGE_LOAD
200 OK 375 B URL HTTP/2 ct.pinterest.com/user/?tid=2621045558050&pd=%7B%22np%22%3A%22shopify%22%7D&cb=1674242975468&dep=2%2CPAGE_LOAD
IP
File type JSON data\012- , ASCII text, with very long lines (539), with no line terminators
Hash f23754c0cabb23c00d00ec7cd0708b27
8b2826c766d44ba22ab77c66ba8b3389e3c1d482
1a26de1b3b0d3dbc8d54d94feeeb6ac92d05fbbe3132e2a2167caec156ac7796
GET /user/?tid=2621045558050&pd=%7B%22np%22%3A%22shopify%22%7D&cb=1674242975468&dep=2%2CPAGE_LOAD HTTP/1.1
Host: ct.pinterest.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Origin: https://www.nearlynatural.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-expose-headers: Epik,Pin-Unauth
pin-unauth: dWlkPU5HWm1NMlpoTWpZdE1qSTJNUzAwTURjekxXSTFaRFV0TW1RMlkyVmhPV1U0WkRreA
cache-control: no-cache,no-store,must-revalidate,max-age=0
pragma: no-cache
expires: Sat, 01 Jan 2000 00:00:00 GMT
access-control-allow-origin: https://www.nearlynatural.com
content-type: application/json; charset=utf-8
content-encoding: gzip
x-envoy-upstream-service-time: 2
referrer-policy: origin
x-pinterest-rid: 1181728886294069
date: Fri, 20 Jan 2023 19:29:36 GMT
x-cdn: fastly
content-length: 375
X-Firefox-Spdy: h2
www.facebook.com/tr/?id=1988548864489894&ev=PageView&dl=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F6348693670e7d945b05ac004b55173ed&rl=&if=false&ts=1674242975565&sw=1280&sh=1024&ud[external_id]=057fe1535a44563b60aab79776f3ae12ec091582ec051e1e7c21ecd7f2fb29c5&udff[em]=551cedd2dcfad35b56810f5cfe22acc5cb662c9977cf4f09f5be35e1c03f6a36&udff[fn]=4b60fa0667da3251a780451eb2d75df867d487f7edaccb7c1e2abfbfdefaddd0&udff[ln]=e9e4d7ea812bf144b7232098f5fb30bc36f9f16aa302fed2afb525cf3b8cdc8b&v=2.9.94&r=stable&ec=0&o=2078&cs_est=true&fbp=fb.1.1674242975565.795668937&it=1674242974893&coo=false&eid=5d6772ce-b70f-423a-8160-429ff2348b05&rqm=GET
200 OK 0 B URL HTTP/2 www.facebook.com/tr/?id=1988548864489894&ev=PageView&dl=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F6348693670e7d945b05ac004b55173ed&rl=&if=false&ts=1674242975565&sw=1280&sh=1024&ud[external_id]=057fe1535a44563b60aab79776f3ae12ec091582ec051e1e7c21ecd7f2fb29c5&udff[em]=551cedd2dcfad35b56810f5cfe22acc5cb662c9977cf4f09f5be35e1c03f6a36&udff[fn]=4b60fa0667da3251a780451eb2d75df867d487f7edaccb7c1e2abfbfdefaddd0&udff[ln]=e9e4d7ea812bf144b7232098f5fb30bc36f9f16aa302fed2afb525cf3b8cdc8b&v=2.9.94&r=stable&ec=0&o=2078&cs_est=true&fbp=fb.1.1674242975565.795668937&it=1674242974893&coo=false&eid=5d6772ce-b70f-423a-8160-429ff2348b05&rqm=GET
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=1988548864489894&ev=PageView&dl=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F6348693670e7d945b05ac004b55173ed&rl=&if=false&ts=1674242975565&sw=1280&sh=1024&ud[external_id]=057fe1535a44563b60aab79776f3ae12ec091582ec051e1e7c21ecd7f2fb29c5&udff[em]=551cedd2dcfad35b56810f5cfe22acc5cb662c9977cf4f09f5be35e1c03f6a36&udff[fn]=4b60fa0667da3251a780451eb2d75df867d487f7edaccb7c1e2abfbfdefaddd0&udff[ln]=e9e4d7ea812bf144b7232098f5fb30bc36f9f16aa302fed2afb525cf3b8cdc8b&v=2.9.94&r=stable&ec=0&o=2078&cs_est=true&fbp=fb.1.1674242975565.795668937&it=1674242974893&coo=false&eid=5d6772ce-b70f-423a-8160-429ff2348b05&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Fri, 20 Jan 2023 19:29:36 GMT
X-Firefox-Spdy: h2
ct.pinterest.com/v3/?tid=2621045558050&pd=%7B%22np%22%3A%22shopify%22%2C%22shopify_y%22%3A%229affe31e-7392-44af-a8d1-c6590fd811de%22%7D&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F6348693670e7d945b05ac004b55173ed%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%22f6304d83%22%2C%22is_eu%22%3Atrue%2C%22ecm_enabled%22%3Afalse%7D&cb=1674242975471
200 OK 35 B URL HTTP/2 ct.pinterest.com/v3/?tid=2621045558050&pd=%7B%22np%22%3A%22shopify%22%2C%22shopify_y%22%3A%229affe31e-7392-44af-a8d1-c6590fd811de%22%7D&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F6348693670e7d945b05ac004b55173ed%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%22f6304d83%22%2C%22is_eu%22%3Atrue%2C%22ecm_enabled%22%3Afalse%7D&cb=1674242975471
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 9b8d19f4310c758344e40bf17fbc7e85
2290ef058812d5f5e398736e2316cba8cf8093cf
37b17c5135a176a9474521af147d96dfa1fb4ca0f43f00d1400bd1885be3ab9b
GET /v3/?tid=2621045558050&pd=%7B%22np%22%3A%22shopify%22%2C%22shopify_y%22%3A%229affe31e-7392-44af-a8d1-c6590fd811de%22%7D&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F6348693670e7d945b05ac004b55173ed%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%22f6304d83%22%2C%22is_eu%22%3Atrue%2C%22ecm_enabled%22%3Afalse%7D&cb=1674242975471 HTTP/1.1
Host: ct.pinterest.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: no-cache,no-store,must-revalidate,max-age=0
pragma: no-cache
expires: Sat, 01 Jan 2000 00:00:00 GMT
content-type: image/gif
access-control-allow-origin: *
x-envoy-upstream-service-time: 3
referrer-policy: origin
x-pinterest-rid: 2683985092326958
date: Fri, 20 Jan 2023 19:29:36 GMT
x-cdn: fastly
content-length: 35
X-Firefox-Spdy: h2
ct.pinterest.com/v3/?event=PageVisit&ed=%7B%22np%22%3A%22shopify%22%2C%22eventID%22%3A%22d0a86f46-E3BE-48BE-94CA-98A13DE6A6A0%22%7D&tid=2621045558050&cb=1674242975801&dep=5%2CEVENT_TAGS_ABSENT&pd=%7B%22np%22%3A%22shopify%22%2C%22shopify_y%22%3A%229affe31e-7392-44af-a8d1-c6590fd811de%22%2C%22aem_eligible_list%22%3A%5B%22ct%22%2C%22ph%22%2C%22country%22%5D%7D&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F6348693670e7d945b05ac004b55173ed%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%22f6304d83%22%2C%22is_eu%22%3Atrue%2C%22ecm_enabled%22%3Afalse%7D
200 OK 35 B URL HTTP/2 ct.pinterest.com/v3/?event=PageVisit&ed=%7B%22np%22%3A%22shopify%22%2C%22eventID%22%3A%22d0a86f46-E3BE-48BE-94CA-98A13DE6A6A0%22%7D&tid=2621045558050&cb=1674242975801&dep=5%2CEVENT_TAGS_ABSENT&pd=%7B%22np%22%3A%22shopify%22%2C%22shopify_y%22%3A%229affe31e-7392-44af-a8d1-c6590fd811de%22%2C%22aem_eligible_list%22%3A%5B%22ct%22%2C%22ph%22%2C%22country%22%5D%7D&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F6348693670e7d945b05ac004b55173ed%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%22f6304d83%22%2C%22is_eu%22%3Atrue%2C%22ecm_enabled%22%3Afalse%7D
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 9b8d19f4310c758344e40bf17fbc7e85
2290ef058812d5f5e398736e2316cba8cf8093cf
37b17c5135a176a9474521af147d96dfa1fb4ca0f43f00d1400bd1885be3ab9b
GET /v3/?event=PageVisit&ed=%7B%22np%22%3A%22shopify%22%2C%22eventID%22%3A%22d0a86f46-E3BE-48BE-94CA-98A13DE6A6A0%22%7D&tid=2621045558050&cb=1674242975801&dep=5%2CEVENT_TAGS_ABSENT&pd=%7B%22np%22%3A%22shopify%22%2C%22shopify_y%22%3A%229affe31e-7392-44af-a8d1-c6590fd811de%22%2C%22aem_eligible_list%22%3A%5B%22ct%22%2C%22ph%22%2C%22country%22%5D%7D&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F6348693670e7d945b05ac004b55173ed%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%22f6304d83%22%2C%22is_eu%22%3Atrue%2C%22ecm_enabled%22%3Afalse%7D HTTP/1.1
Host: ct.pinterest.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: no-cache,no-store,must-revalidate,max-age=0
pragma: no-cache
expires: Sat, 01 Jan 2000 00:00:00 GMT
content-type: image/gif
access-control-allow-origin: *
set-cookie: _pinterest_ct_ua="TWc9PSZJa3NjbzM5ajBMY0JpZTRGSHAwZ3NkbzNjS1NkSFRSN3k4WFY5SWk5NWRvN1pnbnBQVUNGNjNjaVpyVnJ4bHRwOFhaQ3FJQUpoZ0M2eCtVUWxpamxiT0F2dityU1VBKzhiM3BQWStmYWF2cz0meVdTZGJZU01RbElZa2ltTFpTbHR0WkprSnVFPQ=="; Expires=Sat, 20 Jan 2024 19:29:36 GMT; Path=/; Domain=ct.pinterest.com; Secure; SameSite=None
x-envoy-upstream-service-time: 4
referrer-policy: origin
x-pinterest-rid: 1105393888386848
date: Fri, 20 Jan 2023 19:29:36 GMT
x-cdn: fastly
content-length: 35
X-Firefox-Spdy: h2
www.facebook.com/tr/?id=1988548864489894&ev=AddToCart&dl=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F6348693670e7d945b05ac004b55173ed&rl=&if=false&ts=1674242975574&cd[content_ids]=3193010094180&cd[content_name]=Agave%20Silk%20Plant&cd[content_type]=product_group&cd[value]=127.99&cd[content_category]=&cd[currency]=USD&sw=1280&sh=1024&ud[external_id]=057fe1535a44563b60aab79776f3ae12ec091582ec051e1e7c21ecd7f2fb29c5&udff[em]=551cedd2dcfad35b56810f5cfe22acc5cb662c9977cf4f09f5be35e1c03f6a36&udff[fn]=4b60fa0667da3251a780451eb2d75df867d487f7edaccb7c1e2abfbfdefaddd0&udff[ln]=e9e4d7ea812bf144b7232098f5fb30bc36f9f16aa302fed2afb525cf3b8cdc8b&v=2.9.94&r=stable&ec=3&o=2078&fbp=fb.1.1674242975565.795668937&it=1674242974893&coo=false&eid=82d22cf8-5057-4273-9f30-e47d0d3a4b3b&rqm=GET
200 OK 0 B URL HTTP/2 www.facebook.com/tr/?id=1988548864489894&ev=AddToCart&dl=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F6348693670e7d945b05ac004b55173ed&rl=&if=false&ts=1674242975574&cd[content_ids]=3193010094180&cd[content_name]=Agave%20Silk%20Plant&cd[content_type]=product_group&cd[value]=127.99&cd[content_category]=&cd[currency]=USD&sw=1280&sh=1024&ud[external_id]=057fe1535a44563b60aab79776f3ae12ec091582ec051e1e7c21ecd7f2fb29c5&udff[em]=551cedd2dcfad35b56810f5cfe22acc5cb662c9977cf4f09f5be35e1c03f6a36&udff[fn]=4b60fa0667da3251a780451eb2d75df867d487f7edaccb7c1e2abfbfdefaddd0&udff[ln]=e9e4d7ea812bf144b7232098f5fb30bc36f9f16aa302fed2afb525cf3b8cdc8b&v=2.9.94&r=stable&ec=3&o=2078&fbp=fb.1.1674242975565.795668937&it=1674242974893&coo=false&eid=82d22cf8-5057-4273-9f30-e47d0d3a4b3b&rqm=GET
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=1988548864489894&ev=AddToCart&dl=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F6348693670e7d945b05ac004b55173ed&rl=&if=false&ts=1674242975574&cd[content_ids]=3193010094180&cd[content_name]=Agave%20Silk%20Plant&cd[content_type]=product_group&cd[value]=127.99&cd[content_category]=&cd[currency]=USD&sw=1280&sh=1024&ud[external_id]=057fe1535a44563b60aab79776f3ae12ec091582ec051e1e7c21ecd7f2fb29c5&udff[em]=551cedd2dcfad35b56810f5cfe22acc5cb662c9977cf4f09f5be35e1c03f6a36&udff[fn]=4b60fa0667da3251a780451eb2d75df867d487f7edaccb7c1e2abfbfdefaddd0&udff[ln]=e9e4d7ea812bf144b7232098f5fb30bc36f9f16aa302fed2afb525cf3b8cdc8b&v=2.9.94&r=stable&ec=3&o=2078&fbp=fb.1.1674242975565.795668937&it=1674242974893&coo=false&eid=82d22cf8-5057-4273-9f30-e47d0d3a4b3b&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Fri, 20 Jan 2023 19:29:36 GMT
X-Firefox-Spdy: h2
www.facebook.com/tr/?id=1988548864489894&ev=AddToCart&dl=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F6348693670e7d945b05ac004b55173ed&rl=&if=false&ts=1674242975569&cd[content_ids]=3196329066596&cd[content_name]=26%E2%80%9D%20Sansevieria%20Artificial%20Plant&cd[content_type]=product_group&cd[value]=83.99&cd[content_category]=&cd[currency]=USD&sw=1280&sh=1024&ud[external_id]=057fe1535a44563b60aab79776f3ae12ec091582ec051e1e7c21ecd7f2fb29c5&udff[em]=551cedd2dcfad35b56810f5cfe22acc5cb662c9977cf4f09f5be35e1c03f6a36&udff[fn]=4b60fa0667da3251a780451eb2d75df867d487f7edaccb7c1e2abfbfdefaddd0&udff[ln]=e9e4d7ea812bf144b7232098f5fb30bc36f9f16aa302fed2afb525cf3b8cdc8b&v=2.9.94&r=stable&ec=1&o=2078&fbp=fb.1.1674242975565.795668937&it=1674242974893&coo=false&eid=6238778a-f183-458d-856f-de996f5e7dd0&rqm=GET
200 OK 0 B URL HTTP/2 www.facebook.com/tr/?id=1988548864489894&ev=AddToCart&dl=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F6348693670e7d945b05ac004b55173ed&rl=&if=false&ts=1674242975569&cd[content_ids]=3196329066596&cd[content_name]=26%E2%80%9D%20Sansevieria%20Artificial%20Plant&cd[content_type]=product_group&cd[value]=83.99&cd[content_category]=&cd[currency]=USD&sw=1280&sh=1024&ud[external_id]=057fe1535a44563b60aab79776f3ae12ec091582ec051e1e7c21ecd7f2fb29c5&udff[em]=551cedd2dcfad35b56810f5cfe22acc5cb662c9977cf4f09f5be35e1c03f6a36&udff[fn]=4b60fa0667da3251a780451eb2d75df867d487f7edaccb7c1e2abfbfdefaddd0&udff[ln]=e9e4d7ea812bf144b7232098f5fb30bc36f9f16aa302fed2afb525cf3b8cdc8b&v=2.9.94&r=stable&ec=1&o=2078&fbp=fb.1.1674242975565.795668937&it=1674242974893&coo=false&eid=6238778a-f183-458d-856f-de996f5e7dd0&rqm=GET
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=1988548864489894&ev=AddToCart&dl=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F6348693670e7d945b05ac004b55173ed&rl=&if=false&ts=1674242975569&cd[content_ids]=3196329066596&cd[content_name]=26%E2%80%9D%20Sansevieria%20Artificial%20Plant&cd[content_type]=product_group&cd[value]=83.99&cd[content_category]=&cd[currency]=USD&sw=1280&sh=1024&ud[external_id]=057fe1535a44563b60aab79776f3ae12ec091582ec051e1e7c21ecd7f2fb29c5&udff[em]=551cedd2dcfad35b56810f5cfe22acc5cb662c9977cf4f09f5be35e1c03f6a36&udff[fn]=4b60fa0667da3251a780451eb2d75df867d487f7edaccb7c1e2abfbfdefaddd0&udff[ln]=e9e4d7ea812bf144b7232098f5fb30bc36f9f16aa302fed2afb525cf3b8cdc8b&v=2.9.94&r=stable&ec=1&o=2078&fbp=fb.1.1674242975565.795668937&it=1674242974893&coo=false&eid=6238778a-f183-458d-856f-de996f5e7dd0&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Fri, 20 Jan 2023 19:29:36 GMT
X-Firefox-Spdy: h2
px.mountain.com/st?ga_tracking_id=UA-321745-2&ga_client_id=1634987963.1674242972&shpt=Thank%20you%20Dala!%20-%20Nearly%20Natural%20-%20Checkout&ga_info=%7B%22status%22%3A%22OK%22%2C%22ga_tracking_id%22%3A%22UA-321745-2%22%2C%22ga_client_id%22%3A%221634987963.1674242972%22%2C%22shpt%22%3A%22Thank%20you%20Dala!%20-%20Nearly%20Natural%20-%20Checkout%22%2C%22dcm_cid%22%3A%221674242972.1%22%2C%22dcm_gid%22%3A%221375945735.1674242975%22%2C%22mntnis%22%3A%7B%7D%2C%22execution_workflow%22%3A%7B%22iteration%22%3A6%2C%22shpt%22%3A%22OK%22%2C%22dcm_cid%22%3A%22OK%22%2C%22dcm_gid%22%3A%22OK%22%7D%7D&dcm_cid=1674242972.1&dcm_gid=1375945735.1674242975&dxver=4.0.0&shaid=32489&plh=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F6348693670e7d945b05ac004b55173ed&cb=25764539673557484term%3Dvalue&shadditional=googletagmanager%3Dtrue%2Cshopify%3Dtrue%2Cga4%3Dtrue%2Csh_conversion%3DSHBLOCK&shoamt=379.96&shoid=360946&shpc=
200 OK 1.2 kB URL HTTP/1.1 px.mountain.com/st?ga_tracking_id=UA-321745-2&ga_client_id=1634987963.1674242972&shpt=Thank%20you%20Dala!%20-%20Nearly%20Natural%20-%20Checkout&ga_info=%7B%22status%22%3A%22OK%22%2C%22ga_tracking_id%22%3A%22UA-321745-2%22%2C%22ga_client_id%22%3A%221634987963.1674242972%22%2C%22shpt%22%3A%22Thank%20you%20Dala!%20-%20Nearly%20Natural%20-%20Checkout%22%2C%22dcm_cid%22%3A%221674242972.1%22%2C%22dcm_gid%22%3A%221375945735.1674242975%22%2C%22mntnis%22%3A%7B%7D%2C%22execution_workflow%22%3A%7B%22iteration%22%3A6%2C%22shpt%22%3A%22OK%22%2C%22dcm_cid%22%3A%22OK%22%2C%22dcm_gid%22%3A%22OK%22%7D%7D&dcm_cid=1674242972.1&dcm_gid=1375945735.1674242975&dxver=4.0.0&shaid=32489&plh=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F6348693670e7d945b05ac004b55173ed&cb=25764539673557484term%3Dvalue&shadditional=googletagmanager%3Dtrue%2Cshopify%3Dtrue%2Cga4%3Dtrue%2Csh_conversion%3DSHBLOCK&shoamt=379.96&shoid=360946&shpc=
IP
File type ASCII text, with very long lines (2109)
Hash 61716f43257ebe3753f2e3f94899b836
3710c548c1c5759e5801506f60a2367a2b822195
c18b9f73e6992afcb12c6e0212b255c8885613067f5de741725bac268e3512ad
GET /st?ga_tracking_id=UA-321745-2&ga_client_id=1634987963.1674242972&shpt=Thank%20you%20Dala!%20-%20Nearly%20Natural%20-%20Checkout&ga_info=%7B%22status%22%3A%22OK%22%2C%22ga_tracking_id%22%3A%22UA-321745-2%22%2C%22ga_client_id%22%3A%221634987963.1674242972%22%2C%22shpt%22%3A%22Thank%20you%20Dala!%20-%20Nearly%20Natural%20-%20Checkout%22%2C%22dcm_cid%22%3A%221674242972.1%22%2C%22dcm_gid%22%3A%221375945735.1674242975%22%2C%22mntnis%22%3A%7B%7D%2C%22execution_workflow%22%3A%7B%22iteration%22%3A6%2C%22shpt%22%3A%22OK%22%2C%22dcm_cid%22%3A%22OK%22%2C%22dcm_gid%22%3A%22OK%22%7D%7D&dcm_cid=1674242972.1&dcm_gid=1375945735.1674242975&dxver=4.0.0&shaid=32489&plh=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F6348693670e7d945b05ac004b55173ed&cb=25764539673557484term%3Dvalue&shadditional=googletagmanager%3Dtrue%2Cshopify%3Dtrue%2Cga4%3Dtrue%2Csh_conversion%3DSHBLOCK&shoamt=379.96&shoid=360946&shpc= HTTP/1.1
Host: px.mountain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
date: Fri, 20 Jan 2023 19:29:37 GMT
content-type: application/javascript;charset=utf-8
access-control-allow-origin: *
p3p: CP="NON DSP COR NID CURa ADMa DEVa PSAa PSDa OUR STP UNI COM NAV INT STA PRE"
set-cookie: guid=c6a448e5-98f8-11ed-9fb1-71c2f9f8d78d;Domain=mountain.com;Max-Age=63113852;Path=/;SameSite=None;Secure
content-encoding: gzip
x-envoy-upstream-service-time: 0
server: istio-envoy
connection: close
transfer-encoding: chunked
gs.mountain.com/gs
200 OK 32 kB IP
Hash 189c7b7d01db5a4a9ce3423734fb22f5
341cd6146b7ef094b5e5aa845d3e2efc161d55d8
6df9b0393b15662153f69e55330ea790d90c464073143af053c0d177ecd2a581
GET /gs HTTP/1.1
Host: gs.mountain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Connection: keep-alive
Cookie: guid=c6a448e5-98f8-11ed-9fb1-71c2f9f8d78d
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
date: Fri, 20 Jan 2023 19:29:37 GMT
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, x-requested-with, X-Custom-Header
x-application-context: application:prod:8080
content-type: application/javascript;charset=utf-8
p3p: CP="NON DSP COR NID CURa ADMa DEVa PSAa PSDa OUR STP UNI COM NAV INT STA PRE"
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jan 1970 00:00:00 GMT
content-length: 144
x-envoy-upstream-service-time: 4
server: istio-envoy
connection: close
www.facebook.com/tr/?id=1988548864489894&ev=AddToCart&dl=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F6348693670e7d945b05ac004b55173ed&rl=&if=false&ts=1674242975571&cd[content_ids]=3195559477348&cd[content_name]=28%E2%80%9D%20Agave%20Artificial%20Plant&cd[content_type]=product_group&cd[value]=83.99&cd[content_category]=&cd[currency]=USD&sw=1280&sh=1024&ud[external_id]=057fe1535a44563b60aab79776f3ae12ec091582ec051e1e7c21ecd7f2fb29c5&udff[em]=551cedd2dcfad35b56810f5cfe22acc5cb662c9977cf4f09f5be35e1c03f6a36&udff[fn]=4b60fa0667da3251a780451eb2d75df867d487f7edaccb7c1e2abfbfdefaddd0&udff[ln]=e9e4d7ea812bf144b7232098f5fb30bc36f9f16aa302fed2afb525cf3b8cdc8b&v=2.9.94&r=stable&ec=2&o=2078&fbp=fb.1.1674242975565.795668937&it=1674242974893&coo=false&eid=0a817bf1-439f-40c9-aa11-5d47aceed17f&rqm=GET
200 OK 1.3 kB URL HTTP/2 www.facebook.com/tr/?id=1988548864489894&ev=AddToCart&dl=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F6348693670e7d945b05ac004b55173ed&rl=&if=false&ts=1674242975571&cd[content_ids]=3195559477348&cd[content_name]=28%E2%80%9D%20Agave%20Artificial%20Plant&cd[content_type]=product_group&cd[value]=83.99&cd[content_category]=&cd[currency]=USD&sw=1280&sh=1024&ud[external_id]=057fe1535a44563b60aab79776f3ae12ec091582ec051e1e7c21ecd7f2fb29c5&udff[em]=551cedd2dcfad35b56810f5cfe22acc5cb662c9977cf4f09f5be35e1c03f6a36&udff[fn]=4b60fa0667da3251a780451eb2d75df867d487f7edaccb7c1e2abfbfdefaddd0&udff[ln]=e9e4d7ea812bf144b7232098f5fb30bc36f9f16aa302fed2afb525cf3b8cdc8b&v=2.9.94&r=stable&ec=2&o=2078&fbp=fb.1.1674242975565.795668937&it=1674242974893&coo=false&eid=0a817bf1-439f-40c9-aa11-5d47aceed17f&rqm=GET
IP
File type gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)\012- data
Hash 300e403f82c65291f3397d1e8fdcd16d
3469c0e51edd8024d0eb668c516ef10cbb6f7397
fa30ecf2807f3728529a591336a8a5114c411f3f692b348d19b0c8fbe71abc1b
GET /tr/?id=1988548864489894&ev=AddToCart&dl=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F6348693670e7d945b05ac004b55173ed&rl=&if=false&ts=1674242975571&cd[content_ids]=3195559477348&cd[content_name]=28%E2%80%9D%20Agave%20Artificial%20Plant&cd[content_type]=product_group&cd[value]=83.99&cd[content_category]=&cd[currency]=USD&sw=1280&sh=1024&ud[external_id]=057fe1535a44563b60aab79776f3ae12ec091582ec051e1e7c21ecd7f2fb29c5&udff[em]=551cedd2dcfad35b56810f5cfe22acc5cb662c9977cf4f09f5be35e1c03f6a36&udff[fn]=4b60fa0667da3251a780451eb2d75df867d487f7edaccb7c1e2abfbfdefaddd0&udff[ln]=e9e4d7ea812bf144b7232098f5fb30bc36f9f16aa302fed2afb525cf3b8cdc8b&v=2.9.94&r=stable&ec=2&o=2078&fbp=fb.1.1674242975565.795668937&it=1674242974893&coo=false&eid=0a817bf1-439f-40c9-aa11-5d47aceed17f&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Fri, 20 Jan 2023 19:29:36 GMT
X-Firefox-Spdy: h2
ocsp.globalsign.com/gsgccr3dvtlsca2020
200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsgccr3dvtlsca2020
IP
Hash 909852a7ede800b0a727582539497466
19495f787798517d7389733fc5df8fca9eeed655
144ea964f59c1090c3aa26ea910bca1a68324a33581fc229457a4400f50a1591
POST /gsgccr3dvtlsca2020 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 20 Jan 2023 19:29:38 GMT
Content-Type: application/ocsp-response
Content-Length: 1414
Connection: keep-alive
Expires: Tue, 24 Jan 2023 15:32:35 GMT
ETag: "19495f787798517d7389733fc5df8fca9eeed655"
Last-Modified: Fri, 20 Jan 2023 15:32:36 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 2795
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 78ca38596d3e0b31-OSL
ocsp.globalsign.com/gsgccr3dvtlsca2020
200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsgccr3dvtlsca2020
IP
Hash 909852a7ede800b0a727582539497466
19495f787798517d7389733fc5df8fca9eeed655
144ea964f59c1090c3aa26ea910bca1a68324a33581fc229457a4400f50a1591
POST /gsgccr3dvtlsca2020 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 20 Jan 2023 19:29:38 GMT
Content-Type: application/ocsp-response
Content-Length: 1414
Connection: keep-alive
Expires: Tue, 24 Jan 2023 15:32:35 GMT
ETag: "19495f787798517d7389733fc5df8fca9eeed655"
Last-Modified: Fri, 20 Jan 2023 15:32:36 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 2795
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 78ca38595897b4ee-OSL
match.adsrvr.org/track/cmf/generic?ttd_pid=steelhouse&ttd_tpi=1&ttd_puid=c6a448e5-98f8-11ed-9fb1-71c2f9f8d78d&gdpr=&gdpr_consent=
200 OK 70 B URL HTTP/2 match.adsrvr.org/track/cmf/generic?ttd_pid=steelhouse&ttd_tpi=1&ttd_puid=c6a448e5-98f8-11ed-9fb1-71c2f9f8d78d&gdpr=&gdpr_consent=
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 58a7930cd4577fc33c35828c271eab8f
406e57f86dc101e10f3a57be1e2f7b93c4580474
8d70b3e6badb6973663b398d297bb32eaedd08826a1af98d0a1cfce5324ffce0
GET /track/cmf/generic?ttd_pid=steelhouse&ttd_tpi=1&ttd_puid=c6a448e5-98f8-11ed-9fb1-71c2f9f8d78d&gdpr=&gdpr_consent= HTTP/1.1
Host: match.adsrvr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 20 Jan 2023 19:29:38 GMT
content-type: image/gif
content-length: 70
cache-control: private,no-cache, must-revalidate
pragma: no-cache
x-aspnet-version: 4.0.30319
p3p: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV"
X-Firefox-Spdy: h2
insight.adsrvr.org/track/evnt/?adv=r0khv2b&ct=0:q50dbhy&fmt=3
200 OK 19 kB URL HTTP/2 insight.adsrvr.org/track/evnt/?adv=r0khv2b&ct=0:q50dbhy&fmt=3
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 4fb13d8283389c8f7efa55306447c1a4
d27447ef8c62eb1b016afc97a1f0fd13f72778f6
f3981282e12be646cf7bb5a4eba31abcba95d6a29981d9b64c988d3a023c3aed
GET /track/evnt/?adv=r0khv2b&ct=0:q50dbhy&fmt=3 HTTP/1.1
Host: insight.adsrvr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 20 Jan 2023 19:29:38 GMT
content-type: image/gif
cache-control: private,no-cache, must-revalidate
pragma: no-cache
x-aspnet-version: 4.0.30319
p3p: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV"
X-Firefox-Spdy: h2
ct.pinterest.com/ct.html
200 OK 323 B IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (565), with no line terminators
Hash b49b45b63051915a8c657060651eb07f
acaddf8021f220d0e4d30e7c8b3d8330ff781af9
4b00fbca5db49c6e4b29a0c873c43671880bcea1b7b3007655183382a318c2dc
GET /ct.html HTTP/1.1
Host: ct.pinterest.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: max-age=86400
content-type: text/html; charset=utf-8
content-encoding: gzip
x-envoy-upstream-service-time: 1
referrer-policy: origin
x-pinterest-rid: 1487285176545642
date: Fri, 20 Jan 2023 19:29:39 GMT
x-cdn: fastly
content-length: 323
X-Firefox-Spdy: h2
cdn.getcarro.com/script-tags/all/nb-101920173500.js?shop=silk-plants.myshopify.com
200 OK 647 B URL HTTP/2 cdn.getcarro.com/script-tags/all/nb-101920173500.js?shop=silk-plants.myshopify.com
IP
Hash 534bb39761d44878dc735375075d36b6
63ef0e84ea4f125c644241c0ac08fef15544aa25
a59e968e20f2b7c0530574846ca9ed7e3ab6d81711c26beb9665c54afca0aae2
GET /script-tags/all/nb-101920173500.js?shop=silk-plants.myshopify.com HTTP/1.1
Host: cdn.getcarro.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
content-length: 647
last-modified: Tue, 20 Oct 2020 00:36:01 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: null
accept-ranges: bytes
server: AmazonS3
date: Fri, 20 Jan 2023 18:43:59 GMT
etag: "534bb39761d44878dc735375075d36b6"
x-cache: Hit from cloudfront
via: 1.1 c2b101e67ac25a2f0013450d56ecac38.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: hDluTm3lm0QRLHVTP3M6uAdDRelaTlbF6rQlXKmeWsDLMfnt9KDKaw==
age: 2809
vary: Origin
X-Firefox-Spdy: h2
cjshpfy.cjpowered.com/getPluginJS?shop=silk-plants.myshopify.com
200 OK 6.4 kB URL HTTP/2 cjshpfy.cjpowered.com/getPluginJS?shop=silk-plants.myshopify.com
IP
File type ASCII text, with very long lines (6314)
Hash e04a29616630919c0b702f83c8af1fd7
65bf11798b84048ac971abefb28feecb961d71ce
0991cd24768622ec3895d80c0064ec75b8c45e920adb9c5f8108255978df2194
GET /getPluginJS?shop=silk-plants.myshopify.com HTTP/1.1
Host: cjshpfy.cjpowered.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 6356
server: CloudFront
date: Fri, 20 Jan 2023 19:03:23 GMT
cache-control: max-age=1800
x-cache: Hit from cloudfront
via: 1.1 227a1815a1677b9cf6dd587e443000b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: vZ107UcDZ9m6J1Ba2d4oNzdtddKlfs-Nj-8rsu6uDc6CCGeXDhdvdg==
age: 1576
X-Firefox-Spdy: h2
swymv3pro-01.azureedge.net/code/swym-shopify.js?hoopi=true&shop=silk-plants.myshopify.com
200 OK 69 kB URL HTTP/2 swymv3pro-01.azureedge.net/code/swym-shopify.js?hoopi=true&shop=silk-plants.myshopify.com
IP
File type ASCII text, with very long lines (848)
Hash 494b86ff5a39fd2ee146fc406c2fdb2d
4af02fa10fa1c94780b14fb4afdf13fd4612d2c7
26ad33d6de26894a0f66bf49132ee78225938500370cd109686f509d3010dd26
GET /code/swym-shopify.js?hoopi=true&shop=silk-plants.myshopify.com HTTP/1.1
Host: swymv3pro-01.azureedge.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-encoding: gzip
access-control-allow-origin: *
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding
age: 7432
cache-control: public, max-age=86400
content-md5: kCFDKf7Ug+dp3PS+8OCn3w==
content-type: application/javascript
date: Fri, 20 Jan 2023 19:29:39 GMT
etag: 0x8DAF7E6959D666C
last-modified: Mon, 16 Jan 2023 17:24:55 GMT
server: ECAcc (ska/F68A)
vary: Accept-Encoding
x-cache: HIT
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: 33604b7b-c01e-0031-7ff4-2c6e86000000
x-ms-version: 2009-09-19
content-length: 68675
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash 61fef8ff0fca807164e9bf4f8136c458
624f923cdad3470a971a983b9124ea21db24dc4e
ad5c01713f715daea87ae9ccdad5ad39e1c57bcc73554c8837538918f26b3133
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4768
Cache-Control: max-age=170811
Content-Type: application/ocsp-response
Date: Fri, 20 Jan 2023 19:29:39 GMT
Etag: "63cad13e-117"
Expires: Sun, 22 Jan 2023 18:56:30 GMT
Last-Modified: Fri, 20 Jan 2023 17:37:02 GMT
Server: ECS (amb/6BA0)
X-Cache: HIT
Content-Length: 279
static.klaviyo.com/onsite/js/klaviyo.js?company_id=WYNVyq&shop=silk-plants.myshopify.com
200 OK 922 B URL HTTP/2 static.klaviyo.com/onsite/js/klaviyo.js?company_id=WYNVyq&shop=silk-plants.myshopify.com
IP
File type ASCII text, with very long lines (2028)
Hash 2ed805cf2318e80bb39ca90227e8595a
743c133a84a9da84ab32fc8234c490ac4a6aa6f6
5fcfd635b404665d9944d3dde1ca5de6dfdcdfa2d0cb4089273ded0f2346931f
GET /onsite/js/klaviyo.js?company_id=WYNVyq&shop=silk-plants.myshopify.com HTTP/1.1
Host: static.klaviyo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-headers:
access-control-allow-methods: GET
access-control-allow-origin: *
access-control-max-age: 86400
allow: OPTIONS, GET
cache-control: max-age=1, stale-while-revalidate=10800
content-encoding: gzip
content-type: application/javascript
etag: W/"f0e12fa327a9c8561849e72881b2990a"
server: nginx
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Fri, 20 Jan 2023 19:29:39 GMT
age: 1176
x-served-by: cache-lga13629-LGA, cache-bma1667-BMA
x-cache: HIT, MISS
x-cache-hits: 4, 0
x-timer: S1674242979.082663,VS0,VE90
vary: Accept-Encoding
content-length: 922
X-Firefox-Spdy: h2
www.mczbf.com/tags/11287/tag.js
200 OK 16 kB URL HTTP/1.1 www.mczbf.com/tags/11287/tag.js
IP
File type ASCII text, with very long lines (49099)
Hash ba064912dd30f4d28ab3b49d651bfe98
28a4983acd70966d7b91edb80506828ce2e71e01
c73ce9183d1d15582bd0ab22e55ebda2443cccfa9cd6e7e2dc0aa7088275a25a
GET /tags/11287/tag.js HTTP/1.1
Host: www.mczbf.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Date: Fri, 20 Jan 2023 19:29:39 GMT
X-Request-ID: c7ebe3f1-98f8-11ed-ac7b-d3ffd6705649
Server: nginx
Cache-Control: max-age=1800
Content-Encoding: gzip
X-Cache: Miss from cloudfront
Via: 1.1 784cb0c259a6d79800d037bda4e7de86.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: gzHmD1vItoz5oDe0Gm5ivOxgQm_DNMiWiWwghirfT0A-4p9k58TZQQ==
dev.visualwebsiteoptimizer.com/j.php?a=370106&u=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F6348693670e7d945b05ac004b55173ed&r=0.6832551343508969
200 OK 1.3 kB URL HTTP/2 dev.visualwebsiteoptimizer.com/j.php?a=370106&u=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F6348693670e7d945b05ac004b55173ed&r=0.6832551343508969
IP
Hash 58c1f3f04e9288c7d7f7acfe7a64d5a3
4698193fbcca7c44ed731098af87b5a8943a5a18
e770bfe15055a836c540056e931659174648d18204c744d54808bbbb3efafefd
GET /j.php?a=370106&u=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F6348693670e7d945b05ac004b55173ed&r=0.6832551343508969 HTTP/1.1
Host: dev.visualwebsiteoptimizer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 20 Jan 2023 19:29:34 GMT
content-type: application/javascript; charset=UTF-8
vary: Accept-Encoding
cache-control: public, max-age=0, no-cache, must-revalidate
server: gams1
timing-allow-origin: *
content-encoding: gzip
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
api2.goaffpro.com/order_complete
200 OK 0 B URL HTTP/2 api2.goaffpro.com/order_complete
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /order_complete HTTP/1.1
Host: api2.goaffpro.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://www.nearlynatural.com/
Origin: https://www.nearlynatural.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 20 Jan 2023 19:29:39 GMT
content-length: 0
x-powered-by: Express
access-control-allow-origin: https://www.nearlynatural.com
vary: Origin
access-control-allow-credentials: true
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-headers: Authorization,X-Shop,content-type,x-site-id,x-goaffpro-public-key,x-goaffpro-public-token,x-goaffpro-access-token
access-control-max-age: 86400
cache-control: public, max-age=86400
x-frame-options: DENY
x-content-type-options: nosniff
x-xss-protection: 1;mode=block
strict-transport-security: max-age=15768000; includeSubdomains; preload
content-security-policy: default-src 'self' 'unsafe-inline'
referrer-policy: same-origin
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1QLcUIunUcEeUlmW8AdwItYoBYN9Rw9ve85sotXjowP5mm2JbcQjwK2LR6016r1yjFKCs5Ks82%2BVdPMNn15B2c99q%2FsU2dVhrQUrQejKLgCqbMkwQ9N4mppy2hn8oghTCrH%2B3w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 78ca385bce5d0b3d-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
static.klaviyo.com/onsite/js/klaviyo.js?company_id=WYNVyq&shop=silk-plants.myshopify.com
304 Not Modified 0 B URL HTTP/2 static.klaviyo.com/onsite/js/klaviyo.js?company_id=WYNVyq&shop=silk-plants.myshopify.com
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /onsite/js/klaviyo.js?company_id=WYNVyq&shop=silk-plants.myshopify.com HTTP/1.1
Host: static.klaviyo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
If-None-Match: W/"f0e12fa327a9c8561849e72881b2990a"
Cache-Control: max-age=0
TE: trailers
HTTP/2 304 Not Modified
date: Fri, 20 Jan 2023 19:29:39 GMT
via: 1.1 varnish
cache-control: max-age=1, stale-while-revalidate=10800
etag: W/"f0e12fa327a9c8561849e72881b2990a"
age: 1176
x-served-by: cache-bma1667-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1674242979.244679,VS0,VE0
vary: Accept-Encoding
X-Firefox-Spdy: h2
triplewhale-pixel.web.app/triplepx.js?shop=silk-plants.myshopify.com
200 OK 25 kB URL HTTP/2 triplewhale-pixel.web.app/triplepx.js?shop=silk-plants.myshopify.com
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 6c2bf83a68bd2507922ec4d4a8aac33d
3d836cd5d5ddd5249e9fcb50568e0050b4a5519b
fb73774cf509ea348ee1185c618f92d74a94ae58be24bb0da16aac9b9fd4e466
GET /triplepx.js?shop=silk-plants.myshopify.com HTTP/1.1
Host: triplewhale-pixel.web.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-headers: *
access-control-allow-methods: GET, POST, DELETE, OPTIONS
access-control-allow-origin: *
access-control-max-age: 3600
cache-control: max-age=3600
content-encoding: br
content-type: text/javascript; charset=utf-8
etag: "e471382d1d8abf9b1f4619be2ee8a8572f9fb70eee261b1e6be75653b9885865-br"
last-modified: Sun, 01 Jan 2023 14:20:12 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Fri, 20 Jan 2023 19:29:39 GMT
x-served-by: cache-bma1627-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1674242979.128557,VS0,VE112
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 24645
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 784 B IP
Hash eb43cf6d036c1915271059af15b274d3
ab914190ea0e78b571cf910224744ee1916fffda
40c59f3393c7bed6b6c6172d7e7e97ee8fadc2831fa6edae2e2434720c0bd179
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4768
Cache-Control: max-age=170811
Content-Type: application/ocsp-response
Date: Fri, 20 Jan 2023 19:29:39 GMT
Etag: "63cad13e-117"
Expires: Sun, 22 Jan 2023 18:56:30 GMT
Last-Modified: Fri, 20 Jan 2023 17:37:02 GMT
Server: ECS (ska/F71C)
X-Cache: HIT
Content-Length: 279
analytics.tiktok.com/api/v2/pixel
200 OK 0 B URL HTTP/2 analytics.tiktok.com/api/v2/pixel
IP
ASN #20940 Akamai International B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /api/v2/pixel HTTP/1.1
Host: analytics.tiktok.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 1150
Origin: https://www.nearlynatural.com
Connection: keep-alive
Cookie: _ttp=2KbUrRR9m6p4HCAN8mrg6LagxfQ
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 0
access-control-allow-origin: *
x-tt-logid: 202301201929393250911A95ECBB5281C5
x-tt-trace-host: 01250e51f4d5abc0e156abb7e367bacbb63810b7a8ec9da06ee36a195ee67aadee0832496733a111959fb237684d5c08c13e3fa408c645c8253278f92aa3ed53bdcdc58be7fd8e1febfb7e893c2c917a370518ad9071b51ef740969006ab9a815b38db083910326b1ee77d40c3f88e7ffb
x-origin-response-time: 169,23.220.104.205
x-akamai-request-id: 1b36ba8c.3bd45770
expires: Fri, 20 Jan 2023 19:29:39 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Fri, 20 Jan 2023 19:29:39 GMT
x-cache: TCP_MISS from a95-101-10-198.deploy.akamaitechnologies.com (AkamaiGHost/10.10.3-45298580) (-)
x-cache-remote: TCP_MISS from a23-220-104-205.deploy.akamaitechnologies.com (AkamaiGHost/10.10.3-45298580) (-)
x-tt-trace-tag: id=16;cdn-cache=miss;type=dyn
server-timing: cdn-cache; desc=MISS, edge; dur=129, origin; dur=169, inner; dur=22
x-parent-response-time: 292,95.101.10.198
X-Firefox-Spdy: h2
static.klaviyo.com/onsite/js/sharedUtils.3de4f7002f4cb2b9833f.js?cb=1
200 OK 14 kB URL HTTP/2 static.klaviyo.com/onsite/js/sharedUtils.3de4f7002f4cb2b9833f.js?cb=1
IP
File type Unicode text, UTF-8 text, with very long lines (36146), with no line terminators
Hash f32939851a20ce74d80fb5fa39fff073
734b7a9027ea89a333653e3dbccc8cdd4ec23029
dbafbcb2a692b78b0a88737f4f6c26177fc7c257271239338303e5c261a4f59f
GET /onsite/js/sharedUtils.3de4f7002f4cb2b9833f.js?cb=1 HTTP/1.1
Host: static.klaviyo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Origin: https://www.nearlynatural.com
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: rjXa6WzcApvwnCzg9VsgyIOa9Z/+AOdyUep+nz2C9l8Y9WmzTkf/3AyXkbcFBNADbgKH7kTMl9s=
x-amz-request-id: FA9HX3FB03RQ4E33
last-modified: Wed, 11 Jan 2023 17:07:32 GMT
etag: "41ee777bf771519f538138ed79a3786d"
cache-control: max-age=2592000,stale-while-revalidate=10800
x-amz-meta-surrogate-control: max-age=31536000
x-amz-meta-surrogate-key: fender-asset
x-amz-version-id: 9aF2q4NxY0Kun_gDXNyDk5ygoGoGgvoW
content-type: application/javascript
server: AmazonS3
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
access-control-allow-origin: *
accept-ranges: bytes
date: Fri, 20 Jan 2023 19:29:39 GMT
age: 1184
x-served-by: cache-lga21943-LGA, cache-bma1657-BMA
x-cache: HIT, HIT
x-cache-hits: 2, 755
vary: Accept-Encoding
content-length: 13990
X-Firefox-Spdy: h2
www.sjwoe.com/policy
200 OK 28 B IP
File type JSON data\012- , ASCII text, with no line terminators
Hash cb03d8f455e88d7bb7050795f9f9cfc9
ad15e9674b599d400994e2e83d094e696c76eb98
4bfe3fd63b2ce813a2e3e1252146acf89e82d30222ca39161cf68086449cd64b
GET /policy HTTP/1.1
Host: www.sjwoe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Origin: https://www.nearlynatural.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/json
content-length: 28
date: Fri, 20 Jan 2023 01:32:36 GMT
x-amzn-requestid: ab665999-6719-4937-bdb0-db31ee8712c6
access-control-allow-origin: *
x-amz-apigw-id: fBJQRF0ZIAMFlVA=
cache-control: max-age=3600
x-amzn-trace-id: Root=1-63c9ef34-4944634e3a421eb2483c7e8b;Sampled=0
x-cache: Hit from cloudfront
via: 1.1 4f01f770085624552bc30a98954f963a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: CyT0UpS7GY5UtNsIqRT_LWywC3LoyGr0ZMmtLrh4mpPsYqxXmbcpDQ==
age: 64623
X-Firefox-Spdy: h2
sdk.vyrl.co/loader-v2.js
200 OK 14 kB IP
File type ASCII text, with very long lines (34619)
Hash f09c1ca00e670bc0113996cb303996ae
8bb640b1bfc85791e7e7ae792c7eab658a53924d
53e806b25b5787425387707ffeba98e36bff472c9232bca5dfdc1f26bb9d055d
GET /loader-v2.js HTTP/1.1
Host: sdk.vyrl.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript;charset=UTF-8
date: Fri, 20 Jan 2023 19:29:39 GMT
last-modified: Tue, 04 Oct 2022 19:18:12 GMT
x-amz-server-side-encryption: AES256
server: AmazonS3
cache-control: public, max-age=0, s-maxage=2
origin: Access-Control-Allow-Origin
samesite: lax
x-frame-options: SAMEORIGIN
content-encoding: gzip
etag: W/"b3f4c61b567b77fd5228eaa38c3dade0"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 1d8cf7c8865ed1078c19a98771ad34ca.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: m5MN0qUE20goB3Z0jCHuXSgPTtywOBlbCDmdTkxfZvJr7ovusw8qBQ==
age: 1
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1d4int/CgqZOssWAEQ
200 OK 471 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4int/CgqZOssWAEQ
IP
Hash 6f92aa801310b442c712be0368613148
336189ad56ce2b81da23d87a3c33f4de6e5fab1c
bc2934c6aff8e232bb51e83bf20bda1921512233f1b159feefaaff185bd43dbb
POST /s/gts1d4int/CgqZOssWAEQ HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 20 Jan 2023 19:29:39 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
static-tracking.klaviyo.com/onsite/js/fender_analytics.42a910303762129b987c.js?cb=1
200 OK 11 kB URL HTTP/2 static-tracking.klaviyo.com/onsite/js/fender_analytics.42a910303762129b987c.js?cb=1
IP
File type ASCII text, with very long lines (27749), with no line terminators
Hash 0cfada57d478d97560b453019c523816
4503f32aa052c4ab0be24d9e3d383ce0ca568b0b
9a6fb085ebc0985e24aad977f126412a763fb7920f819e592e9baa1ff6362708
GET /onsite/js/fender_analytics.42a910303762129b987c.js?cb=1 HTTP/1.1
Host: static-tracking.klaviyo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Origin: https://www.nearlynatural.com
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: TVj4JadKocCV4h3NElq7oufjh6VUPmKs/RmMK3GsmHVEIEljMrEcW06e1Di1LhQKmT1Dja0y3h4=
x-amz-request-id: GVJMDN3QM916A9S6
last-modified: Tue, 25 Oct 2022 15:47:53 GMT
etag: "141ae207735ed4c2a3fb9ba628dca228"
cache-control: max-age=2592000,stale-while-revalidate=10800
x-amz-meta-surrogate-control: max-age=31536000
x-amz-meta-surrogate-key: fender-asset
x-amz-version-id: 3uoP2mttpPOUARdp4efml6Pc5m5_bVca
content-type: application/javascript
server: AmazonS3
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
access-control-allow-origin: *
accept-ranges: bytes
date: Fri, 20 Jan 2023 19:29:39 GMT
age: 1184
x-served-by: cache-lga21944-LGA, cache-bma1663-BMA
x-cache: HIT, HIT
x-cache-hits: 1, 39876
vary: Accept-Encoding
content-length: 10696
X-Firefox-Spdy: h2
static-tracking.klaviyo.com/onsite/js/static.afc80bee31dc9e622dc1.js?cb=1
200 OK 5.3 kB URL HTTP/2 static-tracking.klaviyo.com/onsite/js/static.afc80bee31dc9e622dc1.js?cb=1
IP
File type ASCII text, with very long lines (12659), with no line terminators
Hash 11ebf21f15c50424dd6beb159a12b25e
bdd433be7297384f5660dfe49154d266dda64432
c13b107bff92bbb4ed98886fa87d14faba7f3010b9f9d502eaf133e2321c51cb
GET /onsite/js/static.afc80bee31dc9e622dc1.js?cb=1 HTTP/1.1
Host: static-tracking.klaviyo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Origin: https://www.nearlynatural.com
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: ZFZ8THkCuT87hlNdYT/1gE0cGMwUOTZwHkpxdf7ULnVqWD+3NU8uwHPgGM4vlbagxFgSA7mLY3o=
x-amz-request-id: 8QKB1CHS4E49FXPS
last-modified: Mon, 05 Dec 2022 14:41:22 GMT
etag: "9aa89eda5d828bf8fce2ee83e11483a0"
cache-control: max-age=2592000,stale-while-revalidate=10800
x-amz-meta-surrogate-control: max-age=31536000
x-amz-meta-surrogate-key: fender-asset
x-amz-version-id: jO5CINofch2U3rpuRhEwzIKTUk198WIK
content-type: application/javascript
server: AmazonS3
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
access-control-allow-origin: *
accept-ranges: bytes
date: Fri, 20 Jan 2023 19:29:39 GMT
age: 1184
x-served-by: cache-lga21925-LGA, cache-bma1663-BMA
x-cache: MISS, HIT
x-cache-hits: 0, 636
vary: Accept-Encoding
content-length: 5321
X-Firefox-Spdy: h2
triplewhale-pixel.web.app/_thid372.txt
200 OK 26 kB URL HTTP/2 triplewhale-pixel.web.app/_thid372.txt
IP
File type Unicode text, UTF-8 text, with very long lines (65287)
Hash aaf56b95be6c33255ca2179979bd27ef
57bfa2cd35735b5092628b5dbae48b71a5cd7357
92523a8afd2746bf025b3b00205a2662029ec81d1a2c76a97338a493ed5ae964
GET /_thid372.txt HTTP/1.1
Host: triplewhale-pixel.web.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Origin: https://www.nearlynatural.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-headers: *
access-control-allow-methods: GET, POST, DELETE, OPTIONS
access-control-allow-origin: *
access-control-max-age: 3600
cache-control: max-age=3600
content-encoding: br
content-type: text/plain; charset=utf-8
etag: "901e977bb586c03557378cfa9dc1f0b1220c6e1b194b216ae25d8007cd401aaa-br"
last-modified: Sun, 01 Jan 2023 14:20:12 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Fri, 20 Jan 2023 19:29:39 GMT
x-served-by: cache-bma1626-BMA
x-cache: HIT
x-cache-hits: 3079
x-timer: S1674242979.428765,VS0,VE0
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 26230
X-Firefox-Spdy: h2
www.mczbf.com/11287/pageInfo
200 OK 68 B URL HTTP/1.1 www.mczbf.com/11287/pageInfo
IP
File type PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced\012- data
Hash 91e42db1c66c0b276abf6234dc50b2eb
c1986af3c26609b8b7d8933f99c51c1a89e9ea6b
63ef318d96b5d0d0ceba6e04a4e622b1158335cdc67c49e27839132c6f655058
POST /11287/pageInfo HTTP/1.1
Host: www.mczbf.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Content-Type: application/x-www-form-urlencoded
Origin: https://www.nearlynatural.com
Content-Length: 254
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 68
Connection: keep-alive
Date: Fri, 20 Jan 2023 19:29:39 GMT
X-Request-ID: c81257a9-98f8-11ed-981a-2730f555119b
Server: nginx
Access-Control-Allow-Origin: *
Cache-Control: no-store
X-Cache: Miss from cloudfront
Via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: d7syj8jCVt2xue30XLNrd5_L8976qFgC6gWCQhoTZ6Q0RcMMDQaRAg==
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 1fa9f32be41a00c21405d0f2dc02e661
dbba52851d24a7aa476b098bdfb03fbc287a3091
4a197f4a3de24441268e7a9c2e0b80d15beaa4461154c4d085b4c137b931ef58
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=123696
Date: Fri, 20 Jan 2023 19:29:39 GMT
Etag: "63ca18e1-1d7"
Expires: Sun, 22 Jan 2023 05:51:15 GMT
Last-Modified: Fri, 20 Jan 2023 04:30:25 GMT
Server: ECS (dcb/7F14)
X-Cache: Miss from cloudfront
Via: 1.1 5de23153ac267c206221751e1cccb6e8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: Zvv026kS7HaMfPD0KV6AV6aXVc-dHAHPG7TB04ihizIcwRGrknwNYw==
Age: 4850
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 32c3c755404072a91ee653c275c8096f
8539cf9184a282d7abbfc0a4a2f4b295431fec35
e3208a8ba1451c765acfe2afc52d030f48a80b6cf19816898ee666bc9d76016c
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Fri, 20 Jan 2023 19:29:39 GMT
Last-Modified: Fri, 20 Jan 2023 18:22:37 GMT
Server: ECS (bsa/EB17)
X-Cache: Miss from cloudfront
Via: 1.1 501ad2910f631f0520a6d389d6f053e8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: kNlQmBP1eMSqCmDPW6w_oSNwqqnfRKGWNPri58Ra4Te-5zWg-kps9A==
Age: 4022
shopper.shop.pe/input.js
200 OK 8.9 kB IP
File type ASCII text, with very long lines (17023)
Hash 277671bdc75ca43b2c48464d6ab4278f
fa3f6cfe3a34a0586917b256c7d5b8f9b4c1a205
cb280dde0bd7b5868891421254e239ef63551cc351cb246a68e9bc69bd4e0e8e
GET /input.js HTTP/1.1
Host: shopper.shop.pe
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-guploader-uploadid: ADPycduZ7KN0pPt7-LPpSkED_pVP4nZ-Dh-k2YJ3QlIq6q0z9aXwYMPAeSPfG6Hzw7DAiRTKtG0ODc7GtoXJzu-mOdXNsQ
vary: Accept-Encoding
x-goog-generation: 1667301507739079
x-goog-metageneration: 2
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 8877
content-encoding: gzip
x-goog-hash: crc32c=d2ag2w==, md5=J3ZxvcdcpDssSEZNarQnjw==
x-goog-storage-class: STANDARD
accept-ranges: bytes
content-length: 8877
access-control-allow-origin: *
access-control-expose-headers: Access-Control-Allow-Origin
server: UploadServer
date: Fri, 20 Jan 2023 17:45:14 GMT
expires: Fri, 20 Jan 2023 21:45:14 GMT
cache-control: public, max-age=14400
age: 6265
last-modified: Tue, 01 Nov 2022 11:18:27 GMT
etag: "277671bdc75ca43b2c48464d6ab4278f"
content-type: application/javascript; charset=utf-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash 23c0a681c29ff2f1b946481c315c2376
8144d49ad0306761fd9dd3cf41565c458136e513
7f0a73199adbc6f8a118f8cad40fc4a082e5b7ba72907fb93a9b5a3dbe67aa0c
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "7F0A73199ADBC6F8A118F8CAD40FC4A082E5B7BA72907FB93A9B5A3DBE67AA0C"
Last-Modified: Fri, 20 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21594
Expires: Sat, 21 Jan 2023 01:29:33 GMT
Date: Fri, 20 Jan 2023 19:29:39 GMT
Connection: keep-alive
api2.goaffpro.com/order_complete
200 OK 27 B URL HTTP/2 api2.goaffpro.com/order_complete
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash e619149e5452e6cd3c693b0235aae083
1bb457d3511014786bb12a571dede9eeec6b42bb
dc9607c8da374573e1c1f39878dbe83f5cadb19a2349e95570a206ed4465ed40
POST /order_complete HTTP/1.1
Host: api2.goaffpro.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Content-Type: application/json;charset=UTF-8
Content-Length: 5402
Origin: https://www.nearlynatural.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 20 Jan 2023 19:29:39 GMT
content-type: application/json; charset=utf-8
content-length: 27
x-powered-by: Express
access-control-allow-origin: https://www.nearlynatural.com
vary: Origin
access-control-allow-credentials: true
etag: W/"1b-G7RX01EQFHhrsSpXHe3p7uxrQrs"
x-frame-options: DENY
x-content-type-options: nosniff
x-xss-protection: 1;mode=block
strict-transport-security: max-age=15768000; includeSubdomains; preload
content-security-policy: default-src 'self' 'unsafe-inline'
referrer-policy: same-origin
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=iaMnOlFxkFC%2Bh1%2Ft%2B9aIkgVw1WddHgVJPM8%2BtXkoOnmTyWl7df6SZ4bx8Kbk%2BLOpkb6H%2F%2BXWUFAsqcmg2gglm3mqqW7my23zipYk2HvjuZBivhqrecUCJ5V%2FlaA%2FYmGOqBzBeg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 78ca385c4edc0b3d-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash 23c0a681c29ff2f1b946481c315c2376
8144d49ad0306761fd9dd3cf41565c458136e513
7f0a73199adbc6f8a118f8cad40fc4a082e5b7ba72907fb93a9b5a3dbe67aa0c
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "7F0A73199ADBC6F8A118F8CAD40FC4A082E5B7BA72907FB93A9B5A3DBE67AA0C"
Last-Modified: Fri, 20 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21594
Expires: Sat, 21 Jan 2023 01:29:33 GMT
Date: Fri, 20 Jan 2023 19:29:39 GMT
Connection: keep-alive
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash af4e34f161d71cfd2ddab0200bedeb69
4ee5dbfe31d1d0cc4f23ff205bf5e49c910fc28e
1d43df1916c0638bf86acb1fc58f2b54f44a9a96dfa412df92c170e0cdcd2bf5
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=102709
Date: Fri, 20 Jan 2023 19:29:39 GMT
Etag: "63c9d9d8-1d7"
Expires: Sun, 22 Jan 2023 00:01:28 GMT
Last-Modified: Fri, 20 Jan 2023 00:01:28 GMT
Server: nginx
X-Cache: Miss from cloudfront
Via: 1.1 6cb1d4b545e7beb4ead790454f4807c6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: bEQ6zR0epgdqHAgnVm8mXjEratBfkOqCYPWGOsaS4WvBGySYxgmZ5g==
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 38eae660d89e3327e110c60fee0a8ddc
ac16ad811863ea0cda782e67756399e9f0c9e312
cc736beb21c321786a650dc15720e874ecf9d481d98bec47dd932b81d2af7b58
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "CC736BEB21C321786A650DC15720E874ECF9D481D98BEC47DD932B81D2AF7B58"
Last-Modified: Wed, 18 Jan 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14029
Expires: Fri, 20 Jan 2023 23:23:28 GMT
Date: Fri, 20 Jan 2023 19:29:39 GMT
Connection: keep-alive
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 66b75f6e49eaeec0922f331fceed0703
ad6e5e4b309cb56274c13e4714dd98a207be5e2d
41eabaf2a76a1cb429f4135ffb66379ade1c57600dff4becaa18ec037aaa1cd1
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=158103
Date: Fri, 20 Jan 2023 19:29:39 GMT
Etag: "63ca9bd1-1d7"
Expires: Sun, 22 Jan 2023 15:24:42 GMT
Last-Modified: Fri, 20 Jan 2023 13:49:05 GMT
Server: ECS (nyb/1D25)
X-Cache: Miss from cloudfront
Via: 1.1 5de23153ac267c206221751e1cccb6e8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: hZ0tsMayyvPBBMjTnxCiekThCVxppOrXnyeCbw7PbXKX3eSFSJAX9Q==
Age: 5737
ajax.aspnetcdn.com/ajax/jQuery/jquery-3.6.0.min.js
200 OK 31 kB URL HTTP/2 ajax.aspnetcdn.com/ajax/jQuery/jquery-3.6.0.min.js
IP
File type ASCII text, with very long lines (65447)
Hash 9b0df0e2d00cb47a92ca0bb8a626a5ca
703ad8039c14079293957cdedacf800e9dab324b
5fc24a6ac6859491a9379b4aaa34017a02599e16cdb47a190993909a62be9dde
GET /ajax/jQuery/jquery-3.6.0.min.js HTTP/1.1
Host: ajax.aspnetcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-encoding: gzip
accept-ranges: bytes
access-control-allow-origin: *
age: 16226307
cache-control: public,max-age=31536000
content-type: application/javascript
date: Fri, 20 Jan 2023 19:29:39 GMT
etag: "803056b57d10d71:0"
last-modified: Wed, 03 Mar 2021 22:36:53 GMT
server: ECAcc (ska/F6B4)
timing-allow-origin: *
vary: Accept-Encoding
x-cache: HIT
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 30982
X-Firefox-Spdy: h2
app.magicpixel4in1.com/users
502 Bad Gateway 122 B URL HTTP/2 app.magicpixel4in1.com/users
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 2b04736d96787f2c09e31a234e40273e
1d629f8b728edcdcd9b9aeef861223ab0dc42592
880c929020d4b79bf1995656d21d9a6859aab3a9460f941eb0b1a6e5502ee4cc
OPTIONS /users HTTP/1.1
Host: app.magicpixel4in1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://www.nearlynatural.com/
Origin: https://www.nearlynatural.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 502 Bad Gateway
server: awselb/2.0
date: Fri, 20 Jan 2023 19:29:39 GMT
content-type: text/html
content-length: 122
X-Firefox-Spdy: h2
use1.fptls2.com/
200 OK 204 B IP
File type ASCII text, with no line terminators
Hash 085cf48e754de6ab4f1a299a7fb0186b
3ee06fd87d9105b6301bfa84f492e347928a56dd
31a131a0a5945daf84b66b95a7607f51426ac85f087e30e8a2b7773a77bcb1a1
GET / HTTP/1.1
Host: use1.fptls2.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Origin: https://www.nearlynatural.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
cache-control: max-age=2592000, immutable, private
strict-transport-security: max-age=63072000; includeSubDomains
content-type: text/plain; charset=utf-8
content-length: 204
date: Fri, 20 Jan 2023 19:29:39 GMT
X-Firefox-Spdy: h2
addshoppers.s3.amazonaws.com/customize/631746bb5d652504dbea90d7/802eeddc3db8480aa1482265a9dbf1c6.js?_t=1664570227
200 OK 1.8 kB URL HTTP/1.1 addshoppers.s3.amazonaws.com/customize/631746bb5d652504dbea90d7/802eeddc3db8480aa1482265a9dbf1c6.js?_t=1664570227
IP
File type ASCII text, with very long lines (7192), with no line terminators
Hash e4535fc4e088d3299aa5fc01dc17c52a
0c75addd352c94b0b710df45f58d92dbf2bedbf8
1d7dd7d43c9edf220d509bcd943eb7ebec83cfd667185c5dd320ca2433a0e435
GET /customize/631746bb5d652504dbea90d7/802eeddc3db8480aa1482265a9dbf1c6.js?_t=1664570227 HTTP/1.1
Host: addshoppers.s3.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: meoxeApYhE3waI654Sbi+MWxhQOy3fE7fTDj6/jx4WL7uzj4YsT+h5a7FHKZwqMgPoyuv0XwPX0=
x-amz-request-id: 5X3RDBKFWYT15V71
Date: Fri, 20 Jan 2023 19:29:40 GMT
Last-Modified: Fri, 30 Sep 2022 20:37:08 GMT
ETag: "e4535fc4e088d3299aa5fc01dc17c52a"
Cache-Control: max-age=2592000, public
Content-Encoding: gzip
x-amz-version-id: OvgK5LBpA.Mwf_xlF1_YLrdPvQXES_BY
Accept-Ranges: bytes
Content-Type: application/javascript; charset=utf-8
Server: AmazonS3
Content-Length: 1808
searchanise-ef84.kxcdn.com/widgets.63185.min.js
200 OK 40 kB URL HTTP/2 searchanise-ef84.kxcdn.com/widgets.63185.min.js
IP
File type Unicode text, UTF-8 text, with very long lines (65492), with no line terminators
Hash 810372f3b92381e3bb5eb2ec55c507a8
f82ca190fe4d86da4d6732788967aa2cf713c462
6122ccfad8b040232e87bd65a299e11ae594aeb6599616c53815a98c9dd22895
GET /widgets.63185.min.js HTTP/1.1
Host: searchanise-ef84.kxcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: keycdn-engine
date: Fri, 20 Jan 2023 19:29:39 GMT
content-type: application/javascript; charset=utf-8
content-length: 39963
x-amz-id-2: eF64viH9jM5oWij4ufUzGRxJY5YohXUQZ7XRh0F2zSC2ixBCxd3PjFdjkcHnA2L5ghfdurbvgKU=
x-amz-request-id: 1NGZKVP5VETZ0Z76
last-modified: Tue, 10 Jan 2023 07:36:39 GMT
etag: "810372f3b92381e3bb5eb2ec55c507a8"
cache-control: public, max-age=315360000
content-encoding: gzip
expires: Mon, 12 Oct 2037 00:00:00 GMT
x-amz-version-id: U7Q65gjsFl.EXvPjWfWGr16UxpDPTDsa
x-cache: HIT
x-edge-location: noos
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
candyrack.ds-cdn.com/static/main.js?shop=silk-plants.myshopify.com
200 OK 14 kB URL HTTP/2 candyrack.ds-cdn.com/static/main.js?shop=silk-plants.myshopify.com
IP
File type ASCII text, with very long lines (27579)
Hash efe944977b76f922b091f4f3b30cff06
842ad6335ba8ba5ae7576e69cc6f7ab19c728f4b
3389bf7b090835a46f8169df8b2342d8983fc8f15e672efb069a284587f08cb5
GET /static/main.js?shop=silk-plants.myshopify.com HTTP/1.1
Host: candyrack.ds-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 20 Jan 2023 19:29:39 GMT
content-type: text/javascript; charset="utf-8"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=86400
cross-origin-opener-policy: same-origin
etag: W/"63c7e527-6bdc"
last-modified: Wed, 18 Jan 2023 13:25:11 GMT
referrer-policy: same-origin
strict-transport-security: max-age=3600
vary: Accept-Encoding
x-content-type-options: nosniff
via: 1.1 vegur
cf-cache-status: HIT
age: 35847
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=g7xWH8GuuBd40%2BqFtaIemhQ1YbmH%2FGUQiZ3Ah3olKjdi4LJYxtvU4yE%2BBwEkFQVlzyYtC7jexarIIbaSxkSzI82yU3nuq2CI381dI4yUz9gFHT9Owy7lg3mY0FoGzPapeuN6XJWDKA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 78ca385bede172b2-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
dttrk.com/shopify/track.js?shop=silk-plants.myshopify.com
200 OK 11 kB URL HTTP/2 dttrk.com/shopify/track.js?shop=silk-plants.myshopify.com
IP
File type ASCII text, with very long lines (3396), with no line terminators
Hash 295469de078136cbe92a5292df7fe403
0f6b5a02c02868f04cfcbefdc0de6e684b5b7090
b09a3f3c9ffd8345ed49de6d1afedbbf3cb85ed265f51fc5630c91bfe0af6888
GET /shopify/track.js?shop=silk-plants.myshopify.com HTTP/1.1
Host: dttrk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 20 Jan 2023 19:29:39 GMT
content-type: application/javascript; charset=utf-8
cf-ray: 78ca385b9d240712-LHR
age: 38122
cache-control: max-age=7200
etag: W/"shopify/track.55051d17cc.js"
vary: Accept-Encoding
cf-cache-status: HIT
feature-policy: none
referrer-policy: unsafe-url
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wzjgGEkGMBD6wl%2BSh5VBRWcubK3oCGnxGZJ69nO9O3CiVoQgOYZ%2FM4HT%2F7BwI%2BEvcdYjrIlGD0qnL7%2Bp3oxgqlzrHb6P2tD8aOvX1oJTA58rlD7wUdYiiHWSD%2Fo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdn-bacon.getcarro.com/deviceStorage.html?https://www.nearlynatural.com
200 OK 0 B URL HTTP/2 cdn-bacon.getcarro.com/deviceStorage.html?https://www.nearlynatural.com
IP
GET /deviceStorage.html?https://www.nearlynatural.com HTTP/1.1
Host: cdn-bacon.getcarro.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
last-modified: Fri, 09 Dec 2022 01:40:49 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: o3MnDXzPQEn_YFBertXESImDYHVuoG4s
server: AmazonS3
content-encoding: gzip
date: Fri, 20 Jan 2023 06:02:51 GMT
etag: W/"3a02d1074864a5cf2b91e58b7d1a4ff1"
x-cache: Hit from cloudfront
via: 1.1 e49f22f18c16784c0f42291e768d1daa.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: l2AhI1C0yrwJs2blmQoue7zcIFNpp-5Hu-6pZCNwWEfXYXyclx75Pw==
age: 48409
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
searchserverapi.com/widgets/shopify/init.js?a=0N5M2a5v6j&shop=silk-plants.myshopify.com
200 OK 0 B URL HTTP/2 searchserverapi.com/widgets/shopify/init.js?a=0N5M2a5v6j&shop=silk-plants.myshopify.com
IP
GET /widgets/shopify/init.js?a=0N5M2a5v6j&shop=silk-plants.myshopify.com HTTP/1.1
Host: searchserverapi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 20 Jan 2023 19:29:39 GMT
content-type: application/x-javascript
last-modified: Wed, 18 Jan 2023 12:01:02 GMT
etag: W/"63c7df7e-1b08"
expires: Fri, 20 Jan 2023 19:29:38 GMT
cache-control: no-cache
access-control-allow-origin: *
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2
cdn.shopify.com/shopifycloud/shopify/assets/checkout_2021-01-25-56fd3fb2a9e87e63c7067dc66a54d13c9ca633da1575bf6a48f323da737ee10e.js
200 OK 0 B URL HTTP/2 cdn.shopify.com/shopifycloud/shopify/assets/checkout_2021-01-25-56fd3fb2a9e87e63c7067dc66a54d13c9ca633da1575bf6a48f323da737ee10e.js
IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
GET /shopifycloud/shopify/assets/checkout_2021-01-25-56fd3fb2a9e87e63c7067dc66a54d13c9ca633da1575bf6a48f323da737ee10e.js HTTP/1.1
Host: cdn.shopify.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Origin: https://www.nearlynatural.com
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 20 Jan 2023 19:29:32 GMT
content-type: text/javascript
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=31556952, immutable
link: <https://cdn.shopify.com/shopifycloud/shopify/assets/checkout_2021-01-25-56fd3fb2a9e87e63c7067dc66a54d13c9ca633da1575bf6a48f323da737ee10e.js>; rel="canonical"
timing-allow-origin: *
x-content-type-options: nosniff
x-request-id: 4e53d1c7-5f93-42aa-9145-fb8b086cd078
x-xss-protection: 1; mode=block
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-dc: gcp-us-east1,us-east1
last-modified: Mon, 12 Dec 2022 13:32:40 GMT
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=UZmlxFf0wnIPncio2TWcPJgV3zk06XVfgo7cFDwnWttbOaM%2FP3qsBUf32oyGQ4DOrvtXFaM9LdhLig%2BJ2LvsZymoxJ0Ovz45x8Tx03pkwbIKlRwz7em4a8kBaA5%2FzG1zDg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
server-timing: imagery;dur=50.501, imageryFetch;dur=50.318, cfRequestDuration;dur=145.999908
server: cloudflare
cf-ray: 78ca38328bcc1c0a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdn-bacon.getcarro.com/bacon.js?16742430
200 OK 0 B URL HTTP/2 cdn-bacon.getcarro.com/bacon.js?16742430
IP
GET /bacon.js?16742430 HTTP/1.1
Host: cdn-bacon.getcarro.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
last-modified: Fri, 09 Dec 2022 01:40:49 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: W.xSERekK7rUNyAa9uA8GZGTrjlSkuPp
server: AmazonS3
content-encoding: br
date: Fri, 20 Jan 2023 14:12:42 GMT
etag: W/"33454d8f3ae8d1236d7a05f3492798e7"
x-cache: Hit from cloudfront
via: 1.1 e49f22f18c16784c0f42291e768d1daa.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: H97UUtboKTrpWYOoTw_90V4cvBSPDBMeAAUYt1BWCyxrIw5YzCA9Gg==
age: 19018
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
app.shop.pe/app/datapartners/status?usersite_id=631746bb5d652504dbea90d7
200 OK 0 B URL HTTP/2 app.shop.pe/app/datapartners/status?usersite_id=631746bb5d652504dbea90d7
IP
GET /app/datapartners/status?usersite_id=631746bb5d652504dbea90d7 HTTP/1.1
Host: app.shop.pe
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Origin: https://www.nearlynatural.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 20 Jan 2023 19:29:39 GMT
content-type: application/json; charset=UTF-8
access-control-allow-credentials: true
p3p: policyref="/w3c/p3p.xml", CP="CAO PSA OUR"
access-control-allow-origin: *
access-control-allow-headers: X-Requested-With, Content-Type, X-XSRFToken
set-cookie: _xsrf=2|121dcfbf|152350fe4f9744792e747146321b36ea|1674242979; Path=/
etag: W/"0467ba22658b680d6de72dc567071b5bc495547f"
access-control-allow-methods: POST, GET, OPTIONS, DELETE, PATCH
x-frame-options: deny
strict-transport-security: max-age=31536000; includeSubDomains
content-encoding: gzip
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.stilyoapps.com/reconvert/assets/js/reconvert_node.js?v=2&scid=YTA1NjI2ZWE0MGIyZWMzZDExMjExNjdiNzE5YzVkYzguMzg3NWY4Mjk2NDkyY2YzOTNmZTQyMzYwZWIyMzJmNDg=&shop=silk-plants.myshopify.com
200 OK 0 B URL HTTP/2 www.stilyoapps.com/reconvert/assets/js/reconvert_node.js?v=2&scid=YTA1NjI2ZWE0MGIyZWMzZDExMjExNjdiNzE5YzVkYzguMzg3NWY4Mjk2NDkyY2YzOTNmZTQyMzYwZWIyMzJmNDg=&shop=silk-plants.myshopify.com
IP
GET /reconvert/assets/js/reconvert_node.js?v=2&scid=YTA1NjI2ZWE0MGIyZWMzZDExMjExNjdiNzE5YzVkYzguMzg3NWY4Mjk2NDkyY2YzOTNmZTQyMzYwZWIyMzJmNDg=&shop=silk-plants.myshopify.com HTTP/1.1
Host: www.stilyoapps.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 20 Jan 2023 19:29:39 GMT
content-type: application/javascript
content-length: 114528
server: nginx/1.14.2
last-modified: Wed, 18 Jan 2023 09:07:08 GMT
etag: "63c7b6bc-1bf60"
accept-ranges: bytes
X-Firefox-Spdy: h2
admin.revenuehunt.com/embed.js?shop=silk-plants.myshopify.com
200 OK 0 B URL HTTP/2 admin.revenuehunt.com/embed.js?shop=silk-plants.myshopify.com
IP
GET /embed.js?shop=silk-plants.myshopify.com HTTP/1.1
Host: admin.revenuehunt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
date: Fri, 20 Jan 2023 17:45:17 GMT
last-modified: Fri, 20 Jan 2023 12:25:44 GMT
cache-control: public, max-age=14400
content-encoding: br
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: RfFw7NReWcC4zHfZ8HlTNXjrn8q-Tcco4a4dHvMgGVYuzU3g8RuifA==
age: 6262
X-Firefox-Spdy: h2
cdn.shopify.com/s/files/1/0108/9460/6436/t/359/assets/idme-checkout-template.js?79331
404 Not Found 0 B URL HTTP/2 cdn.shopify.com/s/files/1/0108/9460/6436/t/359/assets/idme-checkout-template.js?79331
IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
GET /s/files/1/0108/9460/6436/t/359/assets/idme-checkout-template.js?79331 HTTP/1.1
Host: cdn.shopify.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 404 Not Found
date: Fri, 20 Jan 2023 19:29:32 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=30
timing-allow-origin: *
x-content-type-options: nosniff
x-request-id: 4b69d5d8-af53-4629-b153-f06dc9314eea
x-xss-protection: 1; mode=block
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-dc: gcp-us-east1,gcp-us-east1
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=uhhBg0JjbUPSJOBpe6A7lN3DrXixYnoiEfDEjiibjL7vLRQNlK%2FqvO69EqNTbCdlcoyCKwbTBV0eaap5LM8eXAAYMu%2Fwn3o8fTstpj%2BNSp1078ea9iruzXo2OMdqGQkmpQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
server-timing: imagery;dur=15.455, imageryFetch;dur=15.321, cfRequestDuration;dur=161.000013
server: cloudflare
cf-ray: 78ca38329fecb4eb-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.shopify.com/s/files/1/0108/9460/6436/t/359/assets/idme-checkout-style.css?79331
404 Not Found 0 B URL HTTP/2 cdn.shopify.com/s/files/1/0108/9460/6436/t/359/assets/idme-checkout-style.css?79331
IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
GET /s/files/1/0108/9460/6436/t/359/assets/idme-checkout-style.css?79331 HTTP/1.1
Host: cdn.shopify.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 404 Not Found
date: Fri, 20 Jan 2023 19:29:32 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=30
timing-allow-origin: *
x-content-type-options: nosniff
x-request-id: 24d07069-4af8-4261-94b5-7cabfc888e3b
x-xss-protection: 1; mode=block
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-dc: gcp-us-east1,gcp-us-central1
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=j07hrusv7%2Fr%2FPxKVFS0gV1SMxhPgQmVaPuZ2eDC%2BVLYHiUmpGZnhI747pEIA4zOF4fyUBHiqKFL8PjTlKaUZYBXe%2FjBnlD%2FojbdFAg%2BHs686orRDWWZmlxHbT3OHNnrs1Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
server-timing: imagery;dur=19.505, imageryFetch;dur=19.381, cfRequestDuration;dur=191.999912
server: cloudflare
cf-ray: 78ca38329feab4eb-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.attn.tv/nearlynatural/dtag.js?shop=silk-plants.myshopify.com
200 OK 0 B URL HTTP/2 cdn.attn.tv/nearlynatural/dtag.js?shop=silk-plants.myshopify.com
IP
GET /nearlynatural/dtag.js?shop=silk-plants.myshopify.com HTTP/1.1
Host: cdn.attn.tv
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/javascript
date: Fri, 20 Jan 2023 19:29:34 GMT
x-amz-replication-status: COMPLETED
last-modified: Thu, 13 Oct 2022 16:39:13 GMT
etag: W/"73a8287bbb9c4566f62f7c4fa6f9a688"
cache-control: public, max-age=120
x-amz-version-id: LlT3T0xodZHpywBzY.WLjEsYuLvNGIQP
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 50584ad285d5f627ddebae74efdd0770.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: RxObjep7UeaAyFejOYu72eS73BjQDLUgE_2-YJEwxBq6-8NNslDQ9Q==
age: 5
X-Firefox-Spdy: h2
www.nearlynatural.com/10894606436/orders/6348693670e7d945b05ac004b55173ed
200 OK 0 B URL HTTP/2 www.nearlynatural.com/10894606436/orders/6348693670e7d945b05ac004b55173ed
IP
GET /10894606436/orders/6348693670e7d945b05ac004b55173ed HTTP/1.1
Host: www.nearlynatural.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: order=eyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaEpJaVU1WTJaaE56UTVaREUyWm1VME1tSmpaVGt6TTJOaVlqWXlaVGhoWTJJMk5BWTZCa1ZVIiwiZXhwIjoiMjAyMy0wMi0xMFQxOToyOTozMS40NjlaIiwicHVyIjoiY29va2llLm9yZGVyIn19--e9593fde35cd53812ba97d01adb14ec056b80b96; _cmp_a=%7B%22purposes%22%3A%7B%22a%22%3Atrue%2C%22p%22%3Atrue%2C%22m%22%3Atrue%2C%22t%22%3Atrue%7D%2C%22display_banner%22%3Afalse%2C%22merchant_geo%22%3A%22USUSFL%22%2C%22sale_of_data_region%22%3Afalse%7D; _y=9affe31e-7392-44af-a8d1-c6590fd811de; _s=374f6bee-6b6b-475d-9b29-68ba883def57; _shopify_y=9affe31e-7392-44af-a8d1-c6590fd811de; _shopify_s=374f6bee-6b6b-475d-9b29-68ba883def57
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
TE: trailers
HTTP/2 200 OK
date: Fri, 20 Jan 2023 19:29:32 GMT
content-type: text/html; charset=utf-8
x-sorting-hat-podid: 82
x-sorting-hat-shopid: 10894606436
vary: Accept-Encoding
x-frame-options: DENY
x-shopid: 10894606436
x-shardid: 82
x-robots-tag: none
referrer-policy: origin-when-cross-origin
content-language: en-US
cache-control: no-cache
strict-transport-security: max-age=7889238
set-cookie: _secure_session_id=126bb08c646f72e8a677d7b1e2df81a7; path=/; expires=Sat, 21 Jan 2023 19:29:32 GMT; secure; HttpOnly
_cmp_a=%7B%22purposes%22%3A%7B%22a%22%3Atrue%2C%22p%22%3Atrue%2C%22m%22%3Atrue%2C%22t%22%3Atrue%7D%2C%22display_banner%22%3Afalse%2C%22merchant_geo%22%3A%22USUSFL%22%2C%22sale_of_data_region%22%3Afalse%7D; domain=nearlynatural.com; path=/; expires=Sat, 21 Jan 2023 19:29:32 GMT; SameSite=Lax
_orig_referrer=; Expires=Fri, 03-Feb-23 19:29:32 GMT; Domain=nearlynatural.com; Path=/; HttpOnly; SameSite=Lax
_landing_page=%2F10894606436%2Forders%2F6348693670e7d945b05ac004b55173ed; Expires=Fri, 03-Feb-23 19:29:32 GMT; Domain=nearlynatural.com; Path=/; HttpOnly; SameSite=Lax
_y=9affe31e-7392-44af-a8d1-c6590fd811de; Expires=Sat, 20-Jan-24 19:29:32 GMT; Domain=nearlynatural.com; Path=/; SameSite=Lax
_s=374f6bee-6b6b-475d-9b29-68ba883def57; Expires=Fri, 20-Jan-23 19:59:32 GMT; Domain=nearlynatural.com; Path=/; SameSite=Lax
_shopify_y=9affe31e-7392-44af-a8d1-c6590fd811de; Expires=Sat, 20-Jan-24 19:29:32 GMT; Domain=nearlynatural.com; Path=/; SameSite=Lax
_shopify_s=374f6bee-6b6b-475d-9b29-68ba883def57; Expires=Fri, 20-Jan-23 19:59:32 GMT; Domain=nearlynatural.com; Path=/; SameSite=Lax
x-shopify-stage: production
content-security-policy: frame-ancestors 'none'; upgrade-insecure-requests; report-uri /csp-report?source%5Baction%5D=show&source%5Bapp%5D=Shopify&source%5Bcontroller%5D=checkouts%2Fweb%2Forders&source%5Bsection%5D=checkout&source%5Bshop_id%5D=10894606436&source%5Buuid%5D=9c42886b-e879-4da1-a6e7-c899097d71b8
x-content-type-options: nosniff
x-download-options: noopen
x-permitted-cross-domain-policies: none
x-xss-protection: 1; mode=block; report=/xss-report?source%5Baction%5D=show&source%5Bapp%5D=Shopify&source%5Bcontroller%5D=checkouts%2Fweb%2Forders&source%5Bsection%5D=checkout&source%5Bshop_id%5D=10894606436&source%5Buuid%5D=9c42886b-e879-4da1-a6e7-c899097d71b8
x-dc: gcp-europe-north1,gcp-us-central1,gcp-us-central1
x-request-id: 9c42886b-e879-4da1-a6e7-c899097d71b8
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DuXZYkkHOcDZ25I5crTp1J4Q8K7IUkc5QoiBySsSmszYlTUZb3yzTEP5EBXuQCH9dh245aEGGcXYxzhrcVswWgQXAlaNWIF%2Fy8%2BKqUKwRSsRk8fu2Udv6EpyMiKrvK8rv2hFMSDfHg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
server-timing: cfRequestDuration;dur=840.999842
server: cloudflare
cf-ray: 78ca382c7db00b31-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.shopify.com/app/services/10894606436/assets/124581314643/checkout_stylesheet/v2-ltr-2021-01-25-3c4e8e0c27a5861dba599ab403718933-79331
200 OK 0 B URL HTTP/2 cdn.shopify.com/app/services/10894606436/assets/124581314643/checkout_stylesheet/v2-ltr-2021-01-25-3c4e8e0c27a5861dba599ab403718933-79331
IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
GET /app/services/10894606436/assets/124581314643/checkout_stylesheet/v2-ltr-2021-01-25-3c4e8e0c27a5861dba599ab403718933-79331 HTTP/1.1
Host: cdn.shopify.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 20 Jan 2023 19:29:32 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: max-age=31556952, public
link: <https://cdn.shopify.com/app/services/10894606436/assets/124581314643/checkout_stylesheet/v2-ltr-2021-01-25-3c4e8e0c27a5861dba599ab403718933-79331>; rel="canonical"
timing-allow-origin: *
x-content-type-options: nosniff
x-request-id: b882af31-2ded-4e66-808a-66b8ab133426
x-xss-protection: 1; mode=block
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-dc: gcp-us-east1,gcp-us-central1
last-modified: Fri, 20 Jan 2023 19:16:41 GMT
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jU4gTrtWhUhd9GprGeoYu%2Bdesv6pVu6DoZYu15MIXYKhD9%2B6d32p7SwyY7DKQcgY5LuntobtBMe3C4gKJxFrHG9GtDOIVSH26z0LkPdlIMfLybb2fbORXuZ7p3I6EPEyUg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
server-timing: imagery;dur=5514.951, imageryFetch;dur=5514.331, cfRequestDuration;dur=185.999870
server: cloudflare
cf-ray: 78ca38329fe7b4eb-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
upsell-app.logbase.io/lb-upsell.js?shop=silk-plants.myshopify.com
200 OK 0 B URL HTTP/2 upsell-app.logbase.io/lb-upsell.js?shop=silk-plants.myshopify.com
IP
GET /lb-upsell.js?shop=silk-plants.myshopify.com HTTP/1.1
Host: upsell-app.logbase.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 20 Jan 2023 19:29:39 GMT
content-type: application/javascript; charset=UTF-8
server: nginx/1.20.0
vary: Origin, Accept-Encoding
content-security-policy: frame-ancestors https://silk-plants.myshopify.com https://admin.shopify.com;
cache-control: public, s-maxage=86400
accept-ranges: bytes
last-modified: Sun, 15 Jan 2023 12:51:54 GMT
etag: W/"18f87-185b57c8210"
content-encoding: gzip
X-Firefox-Spdy: h2
candyrack.digismoothie.app/api/apps-info/?shop=silk-plants.myshopify.com
200 OK 0 B URL HTTP/2 candyrack.digismoothie.app/api/apps-info/?shop=silk-plants.myshopify.com
IP
GET /api/apps-info/?shop=silk-plants.myshopify.com HTTP/1.1
Host: candyrack.digismoothie.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Origin: https://www.nearlynatural.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 20 Jan 2023 19:29:39 GMT
content-type: application/json
access-control-allow-origin: *
cache-control: public, max-age=0, s-maxage=10
cross-origin-opener-policy: same-origin
referrer-policy: same-origin
strict-transport-security: max-age=3600
vary: Origin, Accept-Encoding
x-content-type-options: nosniff
via: 1.1 vegur
last-modified: Fri, 20 Jan 2023 19:29:24 GMT
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=BzaxaZg4lexn3D0AnC3OnOd0NnuZCM9WvGtW8zvaZxjshxOrfU71gP%2BdqPR18Edarano747EBr9rLBm%2BCVWY%2FmnwXrCwEFcRcBlqGo7KDY1WvpwTWlz4zRQZcTxfn2FwnuNYjIGC2naYHkmAJQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 78ca385e0cb4b4ff-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.nearlynatural.com/10894606436/orders/6348693670e7d945b05ac004b55173ed/authenticate?key=9cfa749d16fe42bce933cbb62e8acb64
302 Found 0 B URL HTTP/2 www.nearlynatural.com/10894606436/orders/6348693670e7d945b05ac004b55173ed/authenticate?key=9cfa749d16fe42bce933cbb62e8acb64
IP
GET /10894606436/orders/6348693670e7d945b05ac004b55173ed/authenticate?key=9cfa749d16fe42bce933cbb62e8acb64 HTTP/1.1
Host: www.nearlynatural.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 302 Found
date: Fri, 20 Jan 2023 19:29:31 GMT
content-type: text/html; charset=utf-8
location: https://www.nearlynatural.com/10894606436/orders/6348693670e7d945b05ac004b55173ed
x-sorting-hat-podid: 82
x-sorting-hat-shopid: 10894606436
x-frame-options: DENY
x-shopid: 10894606436
x-shardid: 82
x-robots-tag: none
referrer-policy: origin-when-cross-origin
content-language: en-US
cache-control: no-cache
strict-transport-security: max-age=7889238
set-cookie: order=eyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaEpJaVU1WTJaaE56UTVaREUyWm1VME1tSmpaVGt6TTJOaVlqWXlaVGhoWTJJMk5BWTZCa1ZVIiwiZXhwIjoiMjAyMy0wMi0xMFQxOToyOTozMS40NjlaIiwicHVyIjoiY29va2llLm9yZGVyIn19--e9593fde35cd53812ba97d01adb14ec056b80b96; path=/10894606436/orders/6348693670e7d945b05ac004b55173ed; expires=Fri, 10 Feb 2023 19:29:31 GMT; secure; HttpOnly; SameSite=Lax
_cmp_a=%7B%22purposes%22%3A%7B%22a%22%3Atrue%2C%22p%22%3Atrue%2C%22m%22%3Atrue%2C%22t%22%3Atrue%7D%2C%22display_banner%22%3Afalse%2C%22merchant_geo%22%3A%22USUSFL%22%2C%22sale_of_data_region%22%3Afalse%7D; domain=nearlynatural.com; path=/; expires=Sat, 21 Jan 2023 19:29:31 GMT; SameSite=Lax
_y=9affe31e-7392-44af-a8d1-c6590fd811de; Expires=Sat, 20-Jan-24 19:29:31 GMT; Domain=nearlynatural.com; Path=/; SameSite=Lax
_s=374f6bee-6b6b-475d-9b29-68ba883def57; Expires=Fri, 20-Jan-23 19:59:31 GMT; Domain=nearlynatural.com; Path=/; SameSite=Lax
_shopify_y=9affe31e-7392-44af-a8d1-c6590fd811de; Expires=Sat, 20-Jan-24 19:29:31 GMT; Domain=nearlynatural.com; Path=/; SameSite=Lax
_shopify_s=374f6bee-6b6b-475d-9b29-68ba883def57; Expires=Fri, 20-Jan-23 19:59:31 GMT; Domain=nearlynatural.com; Path=/; SameSite=Lax
x-shopify-stage: production
content-security-policy: frame-ancestors 'none'; upgrade-insecure-requests; report-uri /csp-report?source%5Baction%5D=authenticate&source%5Bapp%5D=Shopify&source%5Bcontroller%5D=checkouts%2Fweb%2Forders&source%5Bsection%5D=checkout&source%5Bshop_id%5D=10894606436&source%5Buuid%5D=cc0a7564-0062-498b-a8d5-8e9db28d8fca
x-content-type-options: nosniff
x-download-options: noopen
x-permitted-cross-domain-policies: none
x-xss-protection: 1; mode=block; report=/xss-report?source%5Baction%5D=authenticate&source%5Bapp%5D=Shopify&source%5Bcontroller%5D=checkouts%2Fweb%2Forders&source%5Bsection%5D=checkout&source%5Bshop_id%5D=10894606436&source%5Buuid%5D=cc0a7564-0062-498b-a8d5-8e9db28d8fca
x-dc: gcp-europe-north1,gcp-us-central1,gcp-us-central1
x-request-id: cc0a7564-0062-498b-a8d5-8e9db28d8fca
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BtUajQY51zA0PExjLlaD8kHkuIJsbEO5MlI7oo%2BDWSAeApVXE1sjO55xW6gh4eYeUl%2F%2BzkrmVMNtqDfxVVvcbnRV6dzN5bFVmAUn3tWkslr3p1hLQGXRrvisfrQjQ9L8782DzLQcKw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
server-timing: cfRequestDuration;dur=404.000044
server: cloudflare
cf-ray: 78ca382a9be80b31-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
fpcdn.me/sdk/shopify/200124213558e1anfjr9z3sk5x2g5mnn/shopify.min.js?v=1674144206.8832&shop=silk-plants.myshopify.com
200 OK 0 B URL HTTP/2 fpcdn.me/sdk/shopify/200124213558e1anfjr9z3sk5x2g5mnn/shopify.min.js?v=1674144206.8832&shop=silk-plants.myshopify.com
IP
GET /sdk/shopify/200124213558e1anfjr9z3sk5x2g5mnn/shopify.min.js?v=1674144206.8832&shop=silk-plants.myshopify.com HTTP/1.1
Host: fpcdn.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 20 Jan 2023 19:29:39 GMT
content-type: text/javascript
last-modified: Thu, 19 Jan 2023 16:02:24 GMT
vary: Accept-Encoding
etag: W/"63c96990-1f010"
expires: Sun, 19 Feb 2023 04:35:35 GMT
cache-control: public, max-age=2592000
pragme: public
access-control-allow-origin: *
cf-cache-status: HIT
age: 53644
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=oEOS9s5%2B1FSZQBmrRVDzV7B4DU1FkR4KJTdf4kxN7C3peKiFFSIHtboU5cGDOH%2FyRR2Blp1Uvcr%2BRyb%2F5PhDI1iMszsJsGdDwocxpaFrgiai6O0uKtxhkkP82w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 78ca385b8f9db512-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
23.227.38.74
142.250.74.110
31.13.72.36
23.33.119.27
93.184.220.29
212.82.100.181
151.101.244.84
104.18.20.226