r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 3bbb845b153026fc5332dd4506585b57
3cad200fac28fd00f34ce6ef79373e661e188743
6035871c0de6ff2d120921461207cfa32bc286e1fe78849ce74815ffbb9ff950
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6035871C0DE6FF2D120921461207CFA32BC286E1FE78849CE74815FFBB9FF950"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3825
Expires: Sat, 03 Dec 2022 08:05:15 GMT
Date: Sat, 03 Dec 2022 07:01:30 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash 7439fb99a444b66db1e68ffbfaa38451
4b7742d7956485906f1c392c478515ff89a46184
636327ce88f733e5a1d39af212f97242717a39ce20edaef330fafea238e3a309
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4779
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 03 Dec 2022 07:01:30 GMT
Last-Modified: Sat, 03 Dec 2022 05:41:51 GMT
Server: ECS (ska/F6FE)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 55b4c61a1e99001307750e3647fe1102
7559f9f6770b7d3f45b723167062096312641e08
39f6bb64420bcfc8f0b010168fd35b67732984cd0698409f04d5ae40410422aa
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "39F6BB64420BCFC8F0B010168FD35B67732984CD0698409F04D5AE40410422AA"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3203
Expires: Sat, 03 Dec 2022 07:54:53 GMT
Date: Sat, 03 Dec 2022 07:01:30 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 14cd9a0afb6ba9a763651d5112760d1e
75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Alert, Backoff, Content-Length, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sat, 03 Dec 2022 06:18:14 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 2596
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: f1YHIsGnNf+l6GLolQer++KbXGI73VnX7SYen0Xw82R/ga4CB/jsj3BR1zFP/ikUPO8Dnqba/nA=
x-amz-request-id: H98K80E3AC1VZXTD
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sat, 03 Dec 2022 06:46:28 GMT
age: 902
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 07:01:30 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
mkkuei4kdsz.com/895/565.html
200 OK 329 B URL HTTP/1.1 mkkuei4kdsz.com/895/565.html
IP
ASN #14061 DIGITALOCEAN-ASN
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash ecbcb8bae64098de3e587487b474f8b8
e275409fb40ea27c3826af493f70faf147d0f995
2597a3f2418586d8a9fb0764743a84486ba066c6af3ff194922fb6c65a783688
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /895/565.html HTTP/1.1
Host: mkkuei4kdsz.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
server: nginx/1.18.0 (Ubuntu)
date: Sat, 03 Dec 2022 07:01:30 GMT
content-type: text/html
last-modified: Wed, 12 Jan 2022 17:20:45 GMT
etag: W/"61df0ded-1ad"
content-encoding: gzip
transfer-encoding: chunked
cdnjs.cloudflare.com/ajax/libs/jquery/3.5.1/jquery.min.js
200 OK 28 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/jquery/3.5.1/jquery.min.js
IP
File type ASCII text, with very long lines (65451)
Hash 4b5f47439b640180cc3450f7de05d0d8
5a0dc9bcab80ddc409dd35fcb00a88fe6846fee2
1f85e8b327f42c17c025d69849914068536d9aa95412fe473ae90ffb2f4ebd82
GET /ajax/libs/jquery/3.5.1/jquery.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://mkkuei4kdsz.com
Connection: keep-alive
Referer: http://mkkuei4kdsz.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 03 Dec 2022 07:01:30 GMT
content-type: application/javascript; charset=utf-8
content-length: 27958
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb09ed3-15d84"
last-modified: Mon, 04 May 2020 23:01:39 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
vary: Accept-Encoding
cf-cache-status: HIT
age: 15494594
expires: Thu, 23 Nov 2023 07:01:30 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lHsVREO%2Bftn9un72PWPfgHcxUWnZyPRUbiL7%2BR6vrPMAwzjRa8oyRqj3kYZsm3Gd1vRWK8cSjX4b17jxmVfId48be0z2CM%2FesMTg7193AiaWl3TohOSo6qIwmYplIQZUUHJ38sOm"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 773a6e7118680afa-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Pragma, Last-Modified, ETag, Alert, Expires, Retry-After, Cache-Control, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sat, 03 Dec 2022 06:11:17 GMT
cache-control: public,max-age=3600
age: 3013
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash e0d0f9b1c865a3e991332e8a7fc07bd8
cea8a7c9150c98b54fd547941bac9612c0b40151
2153b786541c89f6c2814bf1f1e70dfb7b52b2786919e67ba2de512583ae73ad
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "2153B786541C89F6C2814BF1F1E70DFB7B52B2786919E67BA2DE512583AE73AD"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Sat, 03 Dec 2022 13:01:30 GMT
Date: Sat, 03 Dec 2022 07:01:30 GMT
Connection: keep-alive
mkkuei4kdsz.com/favicon.ico
200 OK 329 B URL HTTP/1.1 mkkuei4kdsz.com/favicon.ico
IP
ASN #14061 DIGITALOCEAN-ASN
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash ecbcb8bae64098de3e587487b474f8b8
e275409fb40ea27c3826af493f70faf147d0f995
2597a3f2418586d8a9fb0764743a84486ba066c6af3ff194922fb6c65a783688
Analyzer Verdict Alert quad9 Sinkholed
GET /favicon.ico HTTP/1.1
Host: mkkuei4kdsz.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mkkuei4kdsz.com/895/565.html
HTTP/1.1 200 OK
server: nginx/1.18.0 (Ubuntu)
date: Sat, 03 Dec 2022 07:01:30 GMT
content-type: text/html
last-modified: Wed, 12 Jan 2022 17:20:45 GMT
etag: W/"61df0ded-1ad"
content-encoding: gzip
transfer-encoding: chunked
domaincntrol.com/?orighost=http://mkkuei4kdsz.com/895/565.html
200 OK 28 B URL HTTP/2 domaincntrol.com/?orighost=http://mkkuei4kdsz.com/895/565.html
IP
File type ASCII text, with no line terminators
Hash 7aae16ed70d2e07943585bbb1cd02b55
3209123510c034e6e38ca45edf14307f1375a8f5
51bfb53a70df6adc48f0670be59a16a657ab5a2bafc176973a32d5c36a4fc5d3
GET /?orighost=http://mkkuei4kdsz.com/895/565.html HTTP/1.1
Host: domaincntrol.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://mkkuei4kdsz.com
Connection: keep-alive
Referer: http://mkkuei4kdsz.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 03 Dec 2022 07:01:30 GMT
content-type: text/javascript;charset=UTF-8
content-length: 28
access-control-allow-origin: *
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JPucAlBGbPlMu%2FagRxBgzJ8nEB2frkYGaYT1h8m7V85jUVI%2BBnDx8bDQy8gjMOglwXtPLlgHKlbUt9KjkAnQUOejVQ6Oh31Yo90heT8q3wKhJSrAqhh%2BRewWde1aGFKybzQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 773a6e732988b51e-OSL
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 7f1f8fc556d1f7e0aea3e1208ee2fd1c
09c341a56ff876479cfc8a0505a5fef4a5d110f1
65adcf58887bcc23f73379f74ab19a61cfbb93285c95c64b44a6716eeacc1482
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4758
Cache-Control: max-age=98681
Content-Type: application/ocsp-response
Date: Sat, 03 Dec 2022 07:01:30 GMT
Etag: "6389c02e-1d7"
Expires: Sun, 04 Dec 2022 10:26:11 GMT
Last-Modified: Fri, 02 Dec 2022 09:06:54 GMT
Server: ECS (ska/F6FE)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: RarckSGZukYoYPhqcI/lRg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: QokT/W8kSrmFIQvuq2rs7jd046I=
ww2.mkkuei4kdsz.com/
200 OK 1.3 kB IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (700)
Hash edd68ced19a1fdb6ebaa8de906fd3b56
0ba832a5458e33226e2df6abcbbd85817c43c3de
5ff30d3b3dd0b3d9fc506f3aa45006a9f87969aba65b689e2bbf0ba862d0c48d
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET / HTTP/1.1
Host: ww2.mkkuei4kdsz.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mkkuei4kdsz.com/
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
date: Sat, 03 Dec 2022 07:01:31 GMT
content-type: text/html; charset=UTF-8
transfer-encoding: chunked
vary: Accept-Encoding
x-powered-by: PHP/8.1.9
expires: Mon, 26 Jul 1997 05:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANnylWw2vLY4hUn9w06zQKbhKBfvjFUCsdFlb6TdQhxb9RXWXuI4t31c+o8fYOv/s8q1LGPga3DE1L/tHU4LENMCAwEAAQ==_zfi2IAQMFhbeJz7TohoVHVtJWU2hwm7Lrp9mU2CS1tg8fh6Um4KcOzzYJ6LQkNLWAjiGBQP1WU+h5qP7TrTizQ==
last-modified: Sat, 03 Dec 2022 07:01:31 GMT
x-cache-miss-from: parking-d7dbd8c4d-lpd8s
server: NginX
content-encoding: gzip
ww2.mkkuei4kdsz.com/search/tsc.php?200=MzgzNDQ1ODM3&21=OTEuOTAuNDIuMTU0&681=MTY3MDA1MDg5MTQ3MzQ2ZjJmYzkwYmRjZDk5OTk2MTQ2ZDNmODJkODM2&crc=9a17040dba821066b0241e516ff49233157b7ec1&cv=1
200 OK 0 B URL HTTP/1.1 ww2.mkkuei4kdsz.com/search/tsc.php?200=MzgzNDQ1ODM3&21=OTEuOTAuNDIuMTU0&681=MTY3MDA1MDg5MTQ3MzQ2ZjJmYzkwYmRjZDk5OTk2MTQ2ZDNmODJkODM2&crc=9a17040dba821066b0241e516ff49233157b7ec1&cv=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /search/tsc.php?200=MzgzNDQ1ODM3&21=OTEuOTAuNDIuMTU0&681=MTY3MDA1MDg5MTQ3MzQ2ZjJmYzkwYmRjZDk5OTk2MTQ2ZDNmODJkODM2&crc=9a17040dba821066b0241e516ff49233157b7ec1&cv=1 HTTP/1.1
Host: ww2.mkkuei4kdsz.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ww2.mkkuei4kdsz.com/
HTTP/1.1 200 OK
date: Sat, 03 Dec 2022 07:01:31 GMT
content-type: text/html; charset=UTF-8
content-length: 0
x-powered-by: PHP/8.1.9
x-cache-miss-from: parking-d7dbd8c4d-565j6
server: NginX
img.sedoparking.com/images/js_preloader.gif
200 OK 4.3 kB URL HTTP/1.1 img.sedoparking.com/images/js_preloader.gif
IP
File type GIF image data, version 89a, 16 x 16\012- data
Hash 90c93102a88c2ab94bff1575b7a6e86e
56d71bf13de464534643db9d127629a0a3bf677a
5f6ad7031600056b578a6e8c6b34bc718d13125cc8256aa4a9050e549576f81a
GET /images/js_preloader.gif HTTP/1.1
Host: img.sedoparking.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ww2.mkkuei4kdsz.com/
HTTP/1.1 200 OK
Date: Sat, 03 Dec 2022 07:01:31 GMT
Content-Type: image/gif
Content-Length: 4254
Connection: keep-alive
Access-Control-Allow-Origin: *
Cache-Control: max-age=604800
Expires: Sat, 10 Dec 2022 07:01:31 GMT
X-CFHash: "90c93102a88c2ab94bff1575b7a6e86e"
X-CFF: B
Last-Modified: Fri, 15 Mar 2019 12:24:07 GMT
X-CF3: H
CF4Age: 156700
x-cf-tsc: 1648179742
CF4ttl: 31536000.000
X-CF2: H
Server: CFS 0215
X-CF-ReqID: c92ae213a471c358b18b84d43d4efb08
X-CF1: 11696:fA.arn1:cf:cacheN.arn1-01:H
Accept-Ranges: bytes
ww2.mkkuei4kdsz.com/search/redirect.php?f=http%3A%2F%2Fxml.sedodna.com%2Fclick%3Fi%3D18tpshkteX8_0&v=ZjUwMzFhYzZiMWM0NWIzNjRiNzg2YmViNmFiM2UxOTYJMQl3dzIubWtrdWVpNGtkc3ouY29tNjM4YWY0NGIwYjVjMTIuMTQ2NzE0OTMJd3cyLm1ra3VlaTRrZHN6LmNvbTYzOGFmNDRiMGI2MTM4LjAxMTgyODg3CTE2NzAwNTA4OTEJYWRfNjNfMA==&l=OAlmMjFjODViNTczMWZiNzcyYTM3OGY0ZTE0MDY5NWE2MAkwCTM1CTAJZTUxNmY0ODJhMWM4YzdmMzFmYWExOWNhMjZhNDE0NTUJMzgzNDQ1ODM3CW1ra3VlaTRrZHN6CTAJNjMJNgkyCTE2NzAwNTA4OTEJMy4wRS02CU4JMAkxCTE1MTIJMTIwNQkxOTQwNDMxNDIJOTEuOTAuNDIuMTU0CTA%3D
302 Found 0 B URL HTTP/1.1 ww2.mkkuei4kdsz.com/search/redirect.php?f=http%3A%2F%2Fxml.sedodna.com%2Fclick%3Fi%3D18tpshkteX8_0&v=ZjUwMzFhYzZiMWM0NWIzNjRiNzg2YmViNmFiM2UxOTYJMQl3dzIubWtrdWVpNGtkc3ouY29tNjM4YWY0NGIwYjVjMTIuMTQ2NzE0OTMJd3cyLm1ra3VlaTRrZHN6LmNvbTYzOGFmNDRiMGI2MTM4LjAxMTgyODg3CTE2NzAwNTA4OTEJYWRfNjNfMA==&l=OAlmMjFjODViNTczMWZiNzcyYTM3OGY0ZTE0MDY5NWE2MAkwCTM1CTAJZTUxNmY0ODJhMWM4YzdmMzFmYWExOWNhMjZhNDE0NTUJMzgzNDQ1ODM3CW1ra3VlaTRrZHN6CTAJNjMJNgkyCTE2NzAwNTA4OTEJMy4wRS02CU4JMAkxCTE1MTIJMTIwNQkxOTQwNDMxNDIJOTEuOTAuNDIuMTU0CTA%3D
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /search/redirect.php?f=http%3A%2F%2Fxml.sedodna.com%2Fclick%3Fi%3D18tpshkteX8_0&v=ZjUwMzFhYzZiMWM0NWIzNjRiNzg2YmViNmFiM2UxOTYJMQl3dzIubWtrdWVpNGtkc3ouY29tNjM4YWY0NGIwYjVjMTIuMTQ2NzE0OTMJd3cyLm1ra3VlaTRrZHN6LmNvbTYzOGFmNDRiMGI2MTM4LjAxMTgyODg3CTE2NzAwNTA4OTEJYWRfNjNfMA==&l=OAlmMjFjODViNTczMWZiNzcyYTM3OGY0ZTE0MDY5NWE2MAkwCTM1CTAJZTUxNmY0ODJhMWM4YzdmMzFmYWExOWNhMjZhNDE0NTUJMzgzNDQ1ODM3CW1ra3VlaTRrZHN6CTAJNjMJNgkyCTE2NzAwNTA4OTEJMy4wRS02CU4JMAkxCTE1MTIJMTIwNQkxOTQwNDMxNDIJOTEuOTAuNDIuMTU0CTA%3D HTTP/1.1
Host: ww2.mkkuei4kdsz.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ww2.mkkuei4kdsz.com/
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
date: Sat, 03 Dec 2022 07:01:32 GMT
content-type: text/html; charset=UTF-8
content-length: 0
x-powered-by: PHP/8.1.9
expires: Mon, 26 Jul 1997 05:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
last-modified: Sat, 03 Dec 2022 07:01:32 GMT
location: /search/tcerider.php?f=http%3A%2F%2Fxml.sedodna.com%2Fclick%3Fi%3D18tpshkteX8_0&v=ZjUwMzFhYzZiMWM0NWIzNjRiNzg2YmViNmFiM2UxOTYJMQl3dzIubWtrdWVpNGtkc3ouY29tNjM4YWY0NGIwYjVjMTIuMTQ2NzE0OTMJd3cyLm1ra3VlaTRrZHN6LmNvbTYzOGFmNDRiMGI2MTM4LjAxMTgyODg3CTE2NzAwNTA4OTEJYWRfNjNfMA==&l=OAlmMjFjODViNTczMWZiNzcyYTM3OGY0ZTE0MDY5NWE2MAkwCTM1CTAJZTUxNmY0ODJhMWM4YzdmMzFmYWExOWNhMjZhNDE0NTUJMzgzNDQ1ODM3CW1ra3VlaTRrZHN6CTAJNjMJNgkyCTE2NzAwNTA4OTEJMy4wRS02CU4JMAkxCTE1MTIJMTIwNQkxOTQwNDMxNDIJOTEuOTAuNDIuMTU0CTA%3D
x-cache-miss-from: parking-d7dbd8c4d-565j6
server: NginX
ww2.mkkuei4kdsz.com/search/tcerider.php?f=http%3A%2F%2Fxml.sedodna.com%2Fclick%3Fi%3D18tpshkteX8_0&v=ZjUwMzFhYzZiMWM0NWIzNjRiNzg2YmViNmFiM2UxOTYJMQl3dzIubWtrdWVpNGtkc3ouY29tNjM4YWY0NGIwYjVjMTIuMTQ2NzE0OTMJd3cyLm1ra3VlaTRrZHN6LmNvbTYzOGFmNDRiMGI2MTM4LjAxMTgyODg3CTE2NzAwNTA4OTEJYWRfNjNfMA==&l=OAlmMjFjODViNTczMWZiNzcyYTM3OGY0ZTE0MDY5NWE2MAkwCTM1CTAJZTUxNmY0ODJhMWM4YzdmMzFmYWExOWNhMjZhNDE0NTUJMzgzNDQ1ODM3CW1ra3VlaTRrZHN6CTAJNjMJNgkyCTE2NzAwNTA4OTEJMy4wRS02CU4JMAkxCTE1MTIJMTIwNQkxOTQwNDMxNDIJOTEuOTAuNDIuMTU0CTA%3D
302 Found 311 B URL HTTP/1.1 ww2.mkkuei4kdsz.com/search/tcerider.php?f=http%3A%2F%2Fxml.sedodna.com%2Fclick%3Fi%3D18tpshkteX8_0&v=ZjUwMzFhYzZiMWM0NWIzNjRiNzg2YmViNmFiM2UxOTYJMQl3dzIubWtrdWVpNGtkc3ouY29tNjM4YWY0NGIwYjVjMTIuMTQ2NzE0OTMJd3cyLm1ra3VlaTRrZHN6LmNvbTYzOGFmNDRiMGI2MTM4LjAxMTgyODg3CTE2NzAwNTA4OTEJYWRfNjNfMA==&l=OAlmMjFjODViNTczMWZiNzcyYTM3OGY0ZTE0MDY5NWE2MAkwCTM1CTAJZTUxNmY0ODJhMWM4YzdmMzFmYWExOWNhMjZhNDE0NTUJMzgzNDQ1ODM3CW1ra3VlaTRrZHN6CTAJNjMJNgkyCTE2NzAwNTA4OTEJMy4wRS02CU4JMAkxCTE1MTIJMTIwNQkxOTQwNDMxNDIJOTEuOTAuNDIuMTU0CTA%3D
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 1468f08b2ff56d9a28e0099c16831668
6a35fe1e977477846b30d9026b54245a9c45718a
706f2158e375f880ccf7a11e1c1be5fb682111915fc0615a7edc5559500f5995
Analyzer Verdict Alert quad9 Sinkholed
GET /search/tcerider.php?f=http%3A%2F%2Fxml.sedodna.com%2Fclick%3Fi%3D18tpshkteX8_0&v=ZjUwMzFhYzZiMWM0NWIzNjRiNzg2YmViNmFiM2UxOTYJMQl3dzIubWtrdWVpNGtkc3ouY29tNjM4YWY0NGIwYjVjMTIuMTQ2NzE0OTMJd3cyLm1ra3VlaTRrZHN6LmNvbTYzOGFmNDRiMGI2MTM4LjAxMTgyODg3CTE2NzAwNTA4OTEJYWRfNjNfMA==&l=OAlmMjFjODViNTczMWZiNzcyYTM3OGY0ZTE0MDY5NWE2MAkwCTM1CTAJZTUxNmY0ODJhMWM4YzdmMzFmYWExOWNhMjZhNDE0NTUJMzgzNDQ1ODM3CW1ra3VlaTRrZHN6CTAJNjMJNgkyCTE2NzAwNTA4OTEJMy4wRS02CU4JMAkxCTE1MTIJMTIwNQkxOTQwNDMxNDIJOTEuOTAuNDIuMTU0CTA%3D HTTP/1.1
Host: ww2.mkkuei4kdsz.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://ww2.mkkuei4kdsz.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
date: Sat, 03 Dec 2022 07:01:32 GMT
content-type: text/html; charset=UTF-8
transfer-encoding: chunked
x-powered-by: PHP/8.1.9
expires: Mon, 26 Jul 1997 05:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
last-modified: Sat, 03 Dec 2022 07:01:32 GMT
location: http://xml.sedodna.com/click?i=18tpshkteX8_0
x-cache-miss-from: parking-d7dbd8c4d-4r7pb
server: NginX
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ecab83d593cc540b02689be5be7abc8a
81cda579b7b9b22332b85266b0126585f3d3f73f
d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8239
Expires: Sat, 03 Dec 2022 09:18:51 GMT
Date: Sat, 03 Dec 2022 07:01:32 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ecab83d593cc540b02689be5be7abc8a
81cda579b7b9b22332b85266b0126585f3d3f73f
d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8239
Expires: Sat, 03 Dec 2022 09:18:51 GMT
Date: Sat, 03 Dec 2022 07:01:32 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ecab83d593cc540b02689be5be7abc8a
81cda579b7b9b22332b85266b0126585f3d3f73f
d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8277
Expires: Sat, 03 Dec 2022 09:19:29 GMT
Date: Sat, 03 Dec 2022 07:01:32 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ecab83d593cc540b02689be5be7abc8a
81cda579b7b9b22332b85266b0126585f3d3f73f
d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8239
Expires: Sat, 03 Dec 2022 09:18:51 GMT
Date: Sat, 03 Dec 2022 07:01:32 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ecab83d593cc540b02689be5be7abc8a
81cda579b7b9b22332b85266b0126585f3d3f73f
d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8277
Expires: Sat, 03 Dec 2022 09:19:29 GMT
Date: Sat, 03 Dec 2022 07:01:32 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7c64ab72-bcba-40fb-b912-d1f41e6b381a.jpeg
200 OK 8.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7c64ab72-bcba-40fb-b912-d1f41e6b381a.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a03ff222aa12639f1fa939056c19c9fc
d4bc237ce074da3269ddd70affee2ce2f83081eb
b374a38bd3adf7f66ed1c8c1153c96e07d7d0fa37179ea3e38899d863bbdacb9
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7c64ab72-bcba-40fb-b912-d1f41e6b381a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8228
x-amzn-requestid: 8c071948-dccd-4416-8978-659e0f97a70a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cfd-oFGLoAMFWFw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63894390-6eded101572b79ec7b8bba87;Sampled=0
x-amzn-remapped-date: Fri, 02 Dec 2022 00:15:12 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: F2yF_SMkhqXNP2OZlrbamxzMy6zpEpWJsGvrTh3gZrCaju6duR6tEQ==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 be082a2326b7d49643607b097f1e7180.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Dec 2022 05:22:30 GMT
age: 5942
etag: "d4bc237ce074da3269ddd70affee2ce2f83081eb"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd7dc00fa-a8d3-44bf-ba84-1998d8dd7c5a.jpeg
200 OK 4.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd7dc00fa-a8d3-44bf-ba84-1998d8dd7c5a.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash fcb89ca25035b2bbb71ae5dd175fcd40
544428cdad754b1bb7be3cd46a79bf078fd5b450
36dcbbe6cd2710ee502776b4bcf32053e92b750a55e2bd4cdeadbc694c7c2699
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd7dc00fa-a8d3-44bf-ba84-1998d8dd7c5a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4309
x-amzn-requestid: c824c317-e6e3-4006-9f9d-ea54e8170a4c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cf2_tGErIAMF8_A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63896b97-7fc523296afea4dd4b5d1de8;Sampled=0
x-amzn-remapped-date: Fri, 02 Dec 2022 03:05:59 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: tp50A9LYeT1RvSPImBUoQNKtarPryKb8Zacm_nxqDh-gegwdQov7Nw==
via: 1.1 40b967aa4aa18637c4b91214147f3cb4.cloudfront.net (CloudFront), 1.1 943c6a4d4ee43b18ee91634536f53eae.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Dec 2022 03:50:52 GMT
age: 11440
etag: "544428cdad754b1bb7be3cd46a79bf078fd5b450"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6b6b798b-d396-454d-9d5b-17b47827e4ad.jpeg
200 OK 2.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6b6b798b-d396-454d-9d5b-17b47827e4ad.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b47431190f34eccf0a6efb98e2a32b7d
9fc7ab3a4eb2d36fd6df7e0267a26a47627d1704
08d3b6be354cafb70c20e6865788cb375adbf88d47711651fe1a3b855094daf2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6b6b798b-d396-454d-9d5b-17b47827e4ad.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 2942
x-amzn-requestid: ed26679f-cd56-477f-9914-f9afbcaaeea6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cfGeoGFYoAMFWgA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63891df7-4ec6bebe21656d5026456994;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 21:34:47 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: XvG2dAUeB914GQ1qJwQRHovAtra8OSjG-CsXeR8UOBq5r8qVjEbPBQ==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Fri, 02 Dec 2022 22:39:04 GMT
age: 30148
etag: "9fc7ab3a4eb2d36fd6df7e0267a26a47627d1704"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe8498f68-55a6-46be-9eb1-671b7a90a148.jpeg
200 OK 3.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe8498f68-55a6-46be-9eb1-671b7a90a148.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ce5811e1c83156e6a6d4557c33faafe5
ba23b3c6adc42832ccd60941123d78dab3e435d5
a9394a4f8f80733a19fb03bc3ad216f4e15c9ba7110e2e181272304ea2f3f2df
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe8498f68-55a6-46be-9eb1-671b7a90a148.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3321
x-amzn-requestid: b418b18c-969e-4525-8263-0c910593f7fa
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ciZN2HJaoAMFQ2Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638a6f25-5196fa3028f5fb80160617af;Sampled=0
x-amzn-remapped-date: Fri, 02 Dec 2022 21:33:25 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: MWBXvM2iS-PFfaBrG8uteifjCljCO_DnjEmXodiSvwN2Es_YkBWDLQ==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 ee8246c5442dace7525c74f6a799bb46.cloudfront.net (CloudFront), 1.1 google
date: Fri, 02 Dec 2022 21:37:47 GMT
age: 33825
etag: "ba23b3c6adc42832ccd60941123d78dab3e435d5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F683f066f-699d-4765-8f4f-33c72e1672e2.jpeg
200 OK 6.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F683f066f-699d-4765-8f4f-33c72e1672e2.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b986f9fcbeca91ed5c8d58fbfaf47d19
6e6c8bd2bce144cc4da1cd7be375b046b60dca79
07a8938d2841f8c13bd646f4e79e41e46acd6463aa019cd70871b3741f12bb4f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F683f066f-699d-4765-8f4f-33c72e1672e2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6174
x-amzn-requestid: f78f1e9d-8c0c-495d-a862-61838f8297e8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cZ0iyH2WoAMFQdg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63870144-45442a8544259930564f685b;Sampled=0
x-amzn-remapped-date: Wed, 30 Nov 2022 07:07:48 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: QIOz71_Kr08pIIwOm2GUkWr421fO7-UyUI7LYld0JBaGnYQ0j3IDFg==
via: 1.1 eece508272520f70691e4eebdc5a6dea.cloudfront.net (CloudFront), 1.1 d6a002c70d55f415107618b0750d493c.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Dec 2022 06:00:50 GMT
age: 3642
etag: "6e6c8bd2bce144cc4da1cd7be375b046b60dca79"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F73a3aed7-6615-4aba-95ab-991227988c2f.jpeg
200 OK 7.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F73a3aed7-6615-4aba-95ab-991227988c2f.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 750406a3a0b6a62379aef0830ae2cf3d
a40580118b667af32464b3e02645d63135700d9c
ccd41727dc1c0f49347dea67f6d273f1aee8c0f30d41967bda695c9dcc3c8515
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F73a3aed7-6615-4aba-95ab-991227988c2f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7932
x-amzn-requestid: 2259a17c-a282-4093-aa1b-5d0fccc71368
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cY0GtEdTIAMFdWg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63869a2a-1c6fd4912e5952ad507036ff;Sampled=0
x-amzn-remapped-date: Tue, 29 Nov 2022 23:47:54 GMT
x-amz-cf-pop: SEA19-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: KCPJSmj2yFUn__4ngtZjikL-2Z7TUCYbgLFiqjYqxrKcoTW0ppTwlw==
via: 1.1 d042f60a962591f741406f28a8170c5a.cloudfront.net (CloudFront), 1.1 61bc723adb3b1884ed759711e84e13a8.cloudfront.net (CloudFront), 1.1 google
date: Fri, 02 Dec 2022 21:45:10 GMT
etag: "a40580118b667af32464b3e02645d63135700d9c"
content-type: image/jpeg
age: 33382
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
xml.sedodna.com/click?i=18tpshkteX8_0
302 Found 0 B URL HTTP/1.1 xml.sedodna.com/click?i=18tpshkteX8_0
IP
ASN #27257 WEBAIR-INTERNET
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /click?i=18tpshkteX8_0 HTTP/1.1
Host: xml.sedodna.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://ww2.mkkuei4kdsz.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
Cache-Control: no-store
Content-Length: 0
Age: 0
Connection: keep-alive
Location: https://mybettermb.com/aS/feedclick?s=HFz5zNIIs96fzq49jFkHXa3dDnCBF-q5pjcTajzqm_QH0A88-gtuCxG_6U4hqQTcO4eq_lgR48_oiQJuDuwoS9gcFc4_-stlmbd3B7sGcRAkoDlrhq7v09i6czQKU3WjqWfap4yUt_iPH1TzciB1Qg6AZUDRz9bjOEX4iGGchU3iaM8vcO7TGGn8XZNssXrAzkb-KNEq1_DUD3eg5Z5w7URtWxpLV7zGJF7YtIv_pSU8yedaajdQan7X1xyAWrFGJaATSme3WF9iYH5cn7PpR96H_Z4cAXUhbNWIUl0XQT-85OIp9iwj7uwUW1daS2u3jXkdiroZGpvbnyvokSzRUdkToqh8XF8oSlbEWRe_vMZ585EtGYcDgElmlUqhKAuUWDF_aYFKoC_pCloREz-gAUf4GCn_ti_dC0ynZ48tkGSDsFZzNHNozOQiGGVu-xbsDCRyz2H-C45Heh8v0Km3Y1oaVVIbEr-PuuKRjgR8nMTmxekK28wDoRMkZAll1gGpA7wZp7a6IJO8RJT6is_tgBFVXMhxbJ1a3lLVGDOQcJ7XNLVlVnjPxxbPR3gMLCYzkuKMowKAWI3qEPCeYIJUQLsnuHDiWSpkgMSB3n-pE1pMB7PikiKp4IfeAmylp93fwrquaeKfq1d_I1h3UOTRcd6Iez1QXWMYWbmStyCJrC9HydVPRrkWrre2FyI3zJE9XtPzPZgsqfpRdQeoA2h4A0JvH6RBYM1x-2hMb9Pb2jF32-S5bEkeFG735iCmsc80-eG-D03DV5K6HCdI1Kk0Ge8RmhLzsdnwjhiDVjJ3Kj35TYfKss98oD8UJdgsmGrUmLR4OqlPou_jY-nZ4h2Gi8g2MYNKf9gzRu1tHZec409ufGrp8vEveGSZXs9N-UlXWAcy_s0ZetMc-lmTMvRz7cC49WDpqXe-qqdGOzi4GAb-fNgP3tEjDFFehKlGmMbgPAj_yaetn5VIlXqw7Fgk2OgbZLq7t0BuU0js5-rF3QU6RI6IV5OkKlv0FLGsKb_TdMgSsO8Lq_DPnZ6asMmh3atSStWeSexnBDUsAjReqsC8T6FZOp0ZMrgPoxdNST-TuiC5-ZNuWGtSIJC_waxMumRHG28gIr3yJeZ058jv1p978B-CdgqhZn1Z3KTpwTqCBfGwl1zgRrLZX1_Sm6K-id8Z9o2uJ2OV4p7be5ULI6Unpr7Y0bNdYf-xOxRvjTJrrtg5Yuugvl7nAA319rQT5Ud6a0Dn6eNJZbhSXBsuqp4TKI2qVF_upugCggYFh3EAoiiZxlTdJcUbO7pWllwGdVGZXxgmhR3INz-QU0tQexjS1sjTSDdvxjTnBG6KLohwyqV7tETR7cP-o1a3gHjZa_gjn5QKyssU7dq2rVA9fmvq9IaY6LYxIeiF1cs76ErxCBdlQonnkAtH2nCzpVOQcBJKWnGaCo17onOqLNsrJIIZq0s55ffWLNKnAOuWPT1UQ_9mRvg2MiCiSQNRRKPFTJsWIdus28GDES9pbDp9ii8iAV5LeF_BIBKicVDyK2EYrXtVVrcM9JHv17p3ygdjEHu_9BHbjj3yRCmuI0tSEk_a_Gei7StA-CFjNx6Toj9kghgbOnleKyz947GP4TsT26NezqvwtmGKUTpGk9yX0sr4SfHbi0RDkFmhaS5DjZ7fq1QONt9OxTf7WLbPkU3hnuULpSBOclApGnETwPbCednl8usGYgrUihltjPnnWR7ArmQLfoUt5WaRwCIXpnHq8I0bYtXdmST4aCvw1mX2qEUhYBeUO1dAajXaSwjszpoemvdNVb-Ai2sCC7QSYRJxkXd-d-Km4x3zpGL3jwDO2rKic6os2yskgrCLYR7wB-v9Wa_x1wU3pDZetrPeDa_33O76AwuK8-pP
Pragma: no-cache
ocsp.sectigo.com/
200 OK 472 B IP
Hash 35100cbf157b6825ef3d213be11b9169
8b1d43b2b0382b174ba275b72118932ad28a837a
d427cea895f3856ada3f1b648342b55f2463a7fc88a979b4e8e57e351997e5ee
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 03 Dec 2022 07:01:32 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Thu, 01 Dec 2022 07:25:42 GMT
Expires: Thu, 08 Dec 2022 07:25:41 GMT
Etag: "8b1d43b2b0382b174ba275b72118932ad28a837a"
Cache-Control: max-age=432848,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 773a6e7f19e1b529-OSL
mybettermb.com/aS/feedclick?s=HFz5zNIIs96fzq49jFkHXa3dDnCBF-q5pjcTajzqm_QH0A88-gtuCxG_6U4hqQTcO4eq_lgR48_oiQJuDuwoS9gcFc4_-stlmbd3B7sGcRAkoDlrhq7v09i6czQKU3WjqWfap4yUt_iPH1TzciB1Qg6AZUDRz9bjOEX4iGGchU3iaM8vcO7TGGn8XZNssXrAzkb-KNEq1_DUD3eg5Z5w7URtWxpLV7zGJF7YtIv_pSU8yedaajdQan7X1xyAWrFGJaATSme3WF9iYH5cn7PpR96H_Z4cAXUhbNWIUl0XQT-85OIp9iwj7uwUW1daS2u3jXkdiroZGpvbnyvokSzRUdkToqh8XF8oSlbEWRe_vMZ585EtGYcDgElmlUqhKAuUWDF_aYFKoC_pCloREz-gAUf4GCn_ti_dC0ynZ48tkGSDsFZzNHNozOQiGGVu-xbsDCRyz2H-C45Heh8v0Km3Y1oaVVIbEr-PuuKRjgR8nMTmxekK28wDoRMkZAll1gGpA7wZp7a6IJO8RJT6is_tgBFVXMhxbJ1a3lLVGDOQcJ7XNLVlVnjPxxbPR3gMLCYzkuKMowKAWI3qEPCeYIJUQLsnuHDiWSpkgMSB3n-pE1pMB7PikiKp4IfeAmylp93fwrquaeKfq1d_I1h3UOTRcd6Iez1QXWMYWbmStyCJrC9HydVPRrkWrre2FyI3zJE9XtPzPZgsqfpRdQeoA2h4A0JvH6RBYM1x-2hMb9Pb2jF32-S5bEkeFG735iCmsc80-eG-D03DV5K6HCdI1Kk0Ge8RmhLzsdnwjhiDVjJ3Kj35TYfKss98oD8UJdgsmGrUmLR4OqlPou_jY-nZ4h2Gi8g2MYNKf9gzRu1tHZec409ufGrp8vEveGSZXs9N-UlXWAcy_s0ZetMc-lmTMvRz7cC49WDpqXe-qqdGOzi4GAb-fNgP3tEjDFFehKlGmMbgPAj_yaetn5VIlXqw7Fgk2OgbZLq7t0BuU0js5-rF3QU6RI6IV5OkKlv0FLGsKb_TdMgSsO8Lq_DPnZ6asMmh3atSStWeSexnBDUsAjReqsC8T6FZOp0ZMrgPoxdNST-TuiC5-ZNuWGtSIJC_waxMumRHG28gIr3yJeZ058jv1p978B-CdgqhZn1Z3KTpwTqCBfGwl1zgRrLZX1_Sm6K-id8Z9o2uJ2OV4p7be5ULI6Unpr7Y0bNdYf-xOxRvjTJrrtg5Yuugvl7nAA319rQT5Ud6a0Dn6eNJZbhSXBsuqp4TKI2qVF_upugCggYFh3EAoiiZxlTdJcUbO7pWllwGdVGZXxgmhR3INz-QU0tQexjS1sjTSDdvxjTnBG6KLohwyqV7tETR7cP-o1a3gHjZa_gjn5QKyssU7dq2rVA9fmvq9IaY6LYxIeiF1cs76ErxCBdlQonnkAtH2nCzpVOQcBJKWnGaCo17onOqLNsrJIIZq0s55ffWLNKnAOuWPT1UQ_9mRvg2MiCiSQNRRKPFTJsWIdus28GDES9pbDp9ii8iAV5LeF_BIBKicVDyK2EYrXtVVrcM9JHv17p3ygdjEHu_9BHbjj3yRCmuI0tSEk_a_Gei7StA-CFjNx6Toj9kghgbOnleKyz947GP4TsT26NezqvwtmGKUTpGk9yX0sr4SfHbi0RDkFmhaS5DjZ7fq1QONt9OxTf7WLbPkU3hnuULpSBOclApGnETwPbCednl8usGYgrUihltjPnnWR7ArmQLfoUt5WaRwCIXpnHq8I0bYtXdmST4aCvw1mX2qEUhYBeUO1dAajXaSwjszpoemvdNVb-Ai2sCC7QSYRJxkXd-d-Km4x3zpGL3jwDO2rKic6os2yskgrCLYR7wB-v9Wa_x1wU3pDZetrPeDa_33O76AwuK8-pP
302 Found 0 B URL HTTP/2 mybettermb.com/aS/feedclick?s=HFz5zNIIs96fzq49jFkHXa3dDnCBF-q5pjcTajzqm_QH0A88-gtuCxG_6U4hqQTcO4eq_lgR48_oiQJuDuwoS9gcFc4_-stlmbd3B7sGcRAkoDlrhq7v09i6czQKU3WjqWfap4yUt_iPH1TzciB1Qg6AZUDRz9bjOEX4iGGchU3iaM8vcO7TGGn8XZNssXrAzkb-KNEq1_DUD3eg5Z5w7URtWxpLV7zGJF7YtIv_pSU8yedaajdQan7X1xyAWrFGJaATSme3WF9iYH5cn7PpR96H_Z4cAXUhbNWIUl0XQT-85OIp9iwj7uwUW1daS2u3jXkdiroZGpvbnyvokSzRUdkToqh8XF8oSlbEWRe_vMZ585EtGYcDgElmlUqhKAuUWDF_aYFKoC_pCloREz-gAUf4GCn_ti_dC0ynZ48tkGSDsFZzNHNozOQiGGVu-xbsDCRyz2H-C45Heh8v0Km3Y1oaVVIbEr-PuuKRjgR8nMTmxekK28wDoRMkZAll1gGpA7wZp7a6IJO8RJT6is_tgBFVXMhxbJ1a3lLVGDOQcJ7XNLVlVnjPxxbPR3gMLCYzkuKMowKAWI3qEPCeYIJUQLsnuHDiWSpkgMSB3n-pE1pMB7PikiKp4IfeAmylp93fwrquaeKfq1d_I1h3UOTRcd6Iez1QXWMYWbmStyCJrC9HydVPRrkWrre2FyI3zJE9XtPzPZgsqfpRdQeoA2h4A0JvH6RBYM1x-2hMb9Pb2jF32-S5bEkeFG735iCmsc80-eG-D03DV5K6HCdI1Kk0Ge8RmhLzsdnwjhiDVjJ3Kj35TYfKss98oD8UJdgsmGrUmLR4OqlPou_jY-nZ4h2Gi8g2MYNKf9gzRu1tHZec409ufGrp8vEveGSZXs9N-UlXWAcy_s0ZetMc-lmTMvRz7cC49WDpqXe-qqdGOzi4GAb-fNgP3tEjDFFehKlGmMbgPAj_yaetn5VIlXqw7Fgk2OgbZLq7t0BuU0js5-rF3QU6RI6IV5OkKlv0FLGsKb_TdMgSsO8Lq_DPnZ6asMmh3atSStWeSexnBDUsAjReqsC8T6FZOp0ZMrgPoxdNST-TuiC5-ZNuWGtSIJC_waxMumRHG28gIr3yJeZ058jv1p978B-CdgqhZn1Z3KTpwTqCBfGwl1zgRrLZX1_Sm6K-id8Z9o2uJ2OV4p7be5ULI6Unpr7Y0bNdYf-xOxRvjTJrrtg5Yuugvl7nAA319rQT5Ud6a0Dn6eNJZbhSXBsuqp4TKI2qVF_upugCggYFh3EAoiiZxlTdJcUbO7pWllwGdVGZXxgmhR3INz-QU0tQexjS1sjTSDdvxjTnBG6KLohwyqV7tETR7cP-o1a3gHjZa_gjn5QKyssU7dq2rVA9fmvq9IaY6LYxIeiF1cs76ErxCBdlQonnkAtH2nCzpVOQcBJKWnGaCo17onOqLNsrJIIZq0s55ffWLNKnAOuWPT1UQ_9mRvg2MiCiSQNRRKPFTJsWIdus28GDES9pbDp9ii8iAV5LeF_BIBKicVDyK2EYrXtVVrcM9JHv17p3ygdjEHu_9BHbjj3yRCmuI0tSEk_a_Gei7StA-CFjNx6Toj9kghgbOnleKyz947GP4TsT26NezqvwtmGKUTpGk9yX0sr4SfHbi0RDkFmhaS5DjZ7fq1QONt9OxTf7WLbPkU3hnuULpSBOclApGnETwPbCednl8usGYgrUihltjPnnWR7ArmQLfoUt5WaRwCIXpnHq8I0bYtXdmST4aCvw1mX2qEUhYBeUO1dAajXaSwjszpoemvdNVb-Ai2sCC7QSYRJxkXd-d-Km4x3zpGL3jwDO2rKic6os2yskgrCLYR7wB-v9Wa_x1wU3pDZetrPeDa_33O76AwuK8-pP
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /aS/feedclick?s=HFz5zNIIs96fzq49jFkHXa3dDnCBF-q5pjcTajzqm_QH0A88-gtuCxG_6U4hqQTcO4eq_lgR48_oiQJuDuwoS9gcFc4_-stlmbd3B7sGcRAkoDlrhq7v09i6czQKU3WjqWfap4yUt_iPH1TzciB1Qg6AZUDRz9bjOEX4iGGchU3iaM8vcO7TGGn8XZNssXrAzkb-KNEq1_DUD3eg5Z5w7URtWxpLV7zGJF7YtIv_pSU8yedaajdQan7X1xyAWrFGJaATSme3WF9iYH5cn7PpR96H_Z4cAXUhbNWIUl0XQT-85OIp9iwj7uwUW1daS2u3jXkdiroZGpvbnyvokSzRUdkToqh8XF8oSlbEWRe_vMZ585EtGYcDgElmlUqhKAuUWDF_aYFKoC_pCloREz-gAUf4GCn_ti_dC0ynZ48tkGSDsFZzNHNozOQiGGVu-xbsDCRyz2H-C45Heh8v0Km3Y1oaVVIbEr-PuuKRjgR8nMTmxekK28wDoRMkZAll1gGpA7wZp7a6IJO8RJT6is_tgBFVXMhxbJ1a3lLVGDOQcJ7XNLVlVnjPxxbPR3gMLCYzkuKMowKAWI3qEPCeYIJUQLsnuHDiWSpkgMSB3n-pE1pMB7PikiKp4IfeAmylp93fwrquaeKfq1d_I1h3UOTRcd6Iez1QXWMYWbmStyCJrC9HydVPRrkWrre2FyI3zJE9XtPzPZgsqfpRdQeoA2h4A0JvH6RBYM1x-2hMb9Pb2jF32-S5bEkeFG735iCmsc80-eG-D03DV5K6HCdI1Kk0Ge8RmhLzsdnwjhiDVjJ3Kj35TYfKss98oD8UJdgsmGrUmLR4OqlPou_jY-nZ4h2Gi8g2MYNKf9gzRu1tHZec409ufGrp8vEveGSZXs9N-UlXWAcy_s0ZetMc-lmTMvRz7cC49WDpqXe-qqdGOzi4GAb-fNgP3tEjDFFehKlGmMbgPAj_yaetn5VIlXqw7Fgk2OgbZLq7t0BuU0js5-rF3QU6RI6IV5OkKlv0FLGsKb_TdMgSsO8Lq_DPnZ6asMmh3atSStWeSexnBDUsAjReqsC8T6FZOp0ZMrgPoxdNST-TuiC5-ZNuWGtSIJC_waxMumRHG28gIr3yJeZ058jv1p978B-CdgqhZn1Z3KTpwTqCBfGwl1zgRrLZX1_Sm6K-id8Z9o2uJ2OV4p7be5ULI6Unpr7Y0bNdYf-xOxRvjTJrrtg5Yuugvl7nAA319rQT5Ud6a0Dn6eNJZbhSXBsuqp4TKI2qVF_upugCggYFh3EAoiiZxlTdJcUbO7pWllwGdVGZXxgmhR3INz-QU0tQexjS1sjTSDdvxjTnBG6KLohwyqV7tETR7cP-o1a3gHjZa_gjn5QKyssU7dq2rVA9fmvq9IaY6LYxIeiF1cs76ErxCBdlQonnkAtH2nCzpVOQcBJKWnGaCo17onOqLNsrJIIZq0s55ffWLNKnAOuWPT1UQ_9mRvg2MiCiSQNRRKPFTJsWIdus28GDES9pbDp9ii8iAV5LeF_BIBKicVDyK2EYrXtVVrcM9JHv17p3ygdjEHu_9BHbjj3yRCmuI0tSEk_a_Gei7StA-CFjNx6Toj9kghgbOnleKyz947GP4TsT26NezqvwtmGKUTpGk9yX0sr4SfHbi0RDkFmhaS5DjZ7fq1QONt9OxTf7WLbPkU3hnuULpSBOclApGnETwPbCednl8usGYgrUihltjPnnWR7ArmQLfoUt5WaRwCIXpnHq8I0bYtXdmST4aCvw1mX2qEUhYBeUO1dAajXaSwjszpoemvdNVb-Ai2sCC7QSYRJxkXd-d-Km4x3zpGL3jwDO2rKic6os2yskgrCLYR7wB-v9Wa_x1wU3pDZetrPeDa_33O76AwuK8-pP HTTP/1.1
Host: mybettermb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ww2.mkkuei4kdsz.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Sat, 03 Dec 2022 07:01:32 GMT
content-length: 0
set-cookie: rhid=82485456419; Max-Age=15552000; Expires=Thu, 01-Jun-2023 07:01:32 GMT; Domain=mybettermb.com; Path=/; SameSite=None; secure;
location: https://p201298.mybettermb.com/adServe/domainClick?ai=GNWsBy0vmeWNIRD1OGzon2SZVu5NPqSq-h2rSoksoBqNG2LV3Zkk-L8FPCSjKZr_YsQ0yRxpJ6k8LlotqmtX7ErGSkvN2YlGY4HZ8X7cx-dM1QaxFxK0PHGpJGlCLAoWMnzoVZuce8ueVaQ0F217-cHwFJ-CDJF8T7C2wcJ1dqtoOgN9pzNxgl6S4oChQzOvrPE96Ym7CMGlXRdGMK-TkKMF_XSxG7q5c9lRJWHNr4s5bSTdWcYVZJciO9bgcuS1jIeAEiXnU3VYEUAru7F_DuXugOnM5m-8Jm7EhOsk27bxGYd3vi6Mg89LCz5E8ciHT2L9NFyVXF6ciSN7CaQexuqZ_HrRuXqwbM7TR-A6o2LnrG8E1DfQ9Vu8kUSrMxroonOqLNsrJIKgUSZw7eMl7vr4nvPsKvQNOYwwqJPWDKxkmVbuTT6kqjvQfnk4ki0ivitaEXZPV_A9yZrhH3-Sbu_XunfKB2MQE-IWmIj47KCOF0SokHo2PZeYO9hdbD2Gn6oVmfmCmc-q0T2xsmJwnBfZ8RtWPEH2SnZADPOdLz_p-OGBQW3exAhKJncPyYXssKbYd4jRL3fz-AbClJeve1IAxxj8fbHTscWi84ZIOk0qJeEuaLJ-WEdDYOEm2_nsCKidNDxuV5s&ui=HFz5zNIIs96fzq49jFkHXcQzYObQGwwU7xf6tdOZukPv17p3ygdjEF5OXrjE4myZBk-q2gLJAHJZ_HEeSQXtNNH-Gy5bSZr7kkKyQOuutSqX2rzBrT1tjQ&si=1&oref=e2905b67c440133e06d94d472902354c&optunit=g1X1rV7f4BpBS4YUfGI2rw&rb=2Vb288azLYM&rr=1&abtg=0
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 98fe7e5fd6b778bcdcc63028c3a49fbd
06b34160c344526fbe14ce41445b9fe76c0a878d
d45d898dfe5bf1151557bbbc3be6e6878fbadce386136d60777b4464199173a6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 03 Dec 2022 07:01:33 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.googleapis.com/css?family=Permanent+Marker&display=swap
200 OK 768 B URL HTTP/2 fonts.googleapis.com/css?family=Permanent+Marker&display=swap
IP
Hash 0d1c1081fa24f7991aa34738e23bc4b2
9e8836cff947620085b3ec4dfabbe571c3c8138a
6923e2696d510bd154878277078609f01b1d41fea74e3d98a7021d7d15a5c3ff
GET /css?family=Permanent+Marker&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://poroshop.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 03 Dec 2022 07:01:33 GMT
date: Sat, 03 Dec 2022 07:01:33 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash baaba92c2ccd740f080a25a9ea5cb3ad
3322d5a9fb0b3a2ec83247eac9865234cbcefece
5150dcbc7293378fff4a337fd0f61bdbbf6b4f64bddba6d0fd270be37e81fe07
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 03 Dec 2022 07:01:33 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/permanentmarker/v16/Fh4uPib9Iyv2ucM6pGQMWimMp004La2Cfw.woff2
200 OK 30 kB URL HTTP/2 fonts.gstatic.com/s/permanentmarker/v16/Fh4uPib9Iyv2ucM6pGQMWimMp004La2Cfw.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 29564, version 1.0\012- data
Hash 1b66ccb164151a6cf698667c8b570cc6
f5617a0f087645703c874453960be6382c8a7427
4884fec2c73aa52a2461073c1b87d1ceb80f400520391b43f97ca7d3c39eeb24
GET /s/permanentmarker/v16/Fh4uPib9Iyv2ucM6pGQMWimMp004La2Cfw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://poroshop.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 29564
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 01 Dec 2022 12:31:43 GMT
expires: Fri, 01 Dec 2023 12:31:43 GMT
cache-control: public, max-age=31536000
age: 152990
last-modified: Tue, 19 Apr 2022 17:55:57 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash baaba92c2ccd740f080a25a9ea5cb3ad
3322d5a9fb0b3a2ec83247eac9865234cbcefece
5150dcbc7293378fff4a337fd0f61bdbbf6b4f64bddba6d0fd270be37e81fe07
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 03 Dec 2022 07:01:33 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash c63d515eea38d91b650137867eebb035
02387300b1f487cc524012d39a87a554a9d46429
dbd57e78af4806ec75568feb830979c1ff3195e91b13412acb3f20fc50cbe449
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Sat, 03 Dec 2022 07:01:33 GMT
Content-Type: application/ocsp-response
Content-Length: 1778
Connection: keep-alive
X-Sucuri-ID: 19036
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Fri, 02 Dec 2022 21:14:20 GMT
Expires: Sat, 03 Dec 2022 21:14:20 GMT
ETag: "02387300b1f487cc524012d39a87a554a9d46429"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
r.srvtrck.com/v1/redirect?type=linkId&id=472d4fcb5b8e454cb905f3a23c825148&api_key=aed6cc324ad47c90a20724d0bfad2ff7&site_id=a06e6a1e26d442e1a38a549f69ef4fcd&dch=feed&ad_t=advertiser&yk_tag=s-no-NO-438203600
302 Found 0 B URL HTTP/2 r.srvtrck.com/v1/redirect?type=linkId&id=472d4fcb5b8e454cb905f3a23c825148&api_key=aed6cc324ad47c90a20724d0bfad2ff7&site_id=a06e6a1e26d442e1a38a549f69ef4fcd&dch=feed&ad_t=advertiser&yk_tag=s-no-NO-438203600
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v1/redirect?type=linkId&id=472d4fcb5b8e454cb905f3a23c825148&api_key=aed6cc324ad47c90a20724d0bfad2ff7&site_id=a06e6a1e26d442e1a38a549f69ef4fcd&dch=feed&ad_t=advertiser&yk_tag=s-no-NO-438203600 HTTP/1.1
Host: r.srvtrck.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Sat, 03 Dec 2022 07:01:34 GMT
content-length: 0
location: http://www.headspace.com
p3p: CP="CAO PSA OUR"
set-cookie: ykuid=a21bbf18198c4e31a00dbdaf59813cae; Domain=.srvtrck.com; Expires=Sun, 03-Dec-2023 07:01:34 GMT; Path=/
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 773a6e87bb6ab51e-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.headspace.com/
301 Moved Permanently 167 B IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f5d40b7259645010f9a248858ad14178
b3051d17a6ec8c9e166bf09a62b48261ab86957b
7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
GET / HTTP/1.1
Host: www.headspace.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Sat, 03 Dec 2022 07:01:34 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://www.headspace.com/
X-Cache: Redirect from cloudfront
Via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: EN-V_3QsSnLpm3v5vrQ1EroJXDQyN7Ow4NEmI0uRdWq0mWj0Kv7zgg==
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash c63d515eea38d91b650137867eebb035
02387300b1f487cc524012d39a87a554a9d46429
dbd57e78af4806ec75568feb830979c1ff3195e91b13412acb3f20fc50cbe449
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Sat, 03 Dec 2022 07:01:34 GMT
Content-Type: application/ocsp-response
Content-Length: 1778
Connection: keep-alive
X-Sucuri-ID: 19036
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Fri, 02 Dec 2022 21:14:20 GMT
Expires: Sat, 03 Dec 2022 21:14:20 GMT
ETag: "02387300b1f487cc524012d39a87a554a9d46429"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
www.headspace.com/marketing-assets/view-components-CountryModuleSwitcher-CountryModuleSwitcher-9a034809cd3101dab284.js
200 OK 1.2 kB URL HTTP/2 www.headspace.com/marketing-assets/view-components-CountryModuleSwitcher-CountryModuleSwitcher-9a034809cd3101dab284.js
IP
Hash 0e5f71b20cb462d987c49f04ca6edad7
8916980acf1fea0a1c09a67c1600768bbc72bf78
7510f4e9cb4371f19b27430aa1f429846eee4ea7fdac8dfe4d74b8e47e7e6637
GET /marketing-assets/view-components-CountryModuleSwitcher-CountryModuleSwitcher-9a034809cd3101dab284.js HTTP/1.1
Host: www.headspace.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.headspace.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Fri, 02 Dec 2022 18:15:42 GMT
last-modified: Wed, 30 Nov 2022 19:31:13 GMT
etag: W/"327d3c4f424793cf7f9c7f65fc0afeec"
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000,public,immutable
x-amz-version-id: kVRRFkNe6dBT82r00QUa52V4vzcDnB_F
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: gLWvA5VQAEm6RuHicEisDVOZKtHBK9S1tbAyP5paYa-Of9SkEoStRw==
age: 45953
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.headspace.com/marketing-assets/view-components-SeoLinks-SeoLinks-6c44073e2a9618d36f35.js
200 OK 2.8 kB URL HTTP/2 www.headspace.com/marketing-assets/view-components-SeoLinks-SeoLinks-6c44073e2a9618d36f35.js
IP
Hash f8c92d11df7100e7917aa7f2593df63b
1580df7f6cfe63a46bf935c3840ee679263e3b39
f73c96c6bf11d50575afc2479e3d429014edc012233de236a71b32efcfe95ff5
GET /marketing-assets/view-components-SeoLinks-SeoLinks-6c44073e2a9618d36f35.js HTTP/1.1
Host: www.headspace.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.headspace.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Fri, 02 Dec 2022 18:15:47 GMT
last-modified: Wed, 30 Nov 2022 19:31:13 GMT
etag: W/"54c9953c7bdd4df2623f731207064845"
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000,public,immutable
x-amz-version-id: S5S9g82f9eudfzU3Ejufn8HAnnBUufqX
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: h025aKEzg2_wvAaV3dGC4jBlLw1zwHt_23EqP2OKQ7XyVz4k4-RoTg==
age: 45948
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.headspace.com/marketing-assets/view-components-LatestArticlesGrid-LatestArticlesGrid-d0bebd74761949b114ee.js
200 OK 106 kB URL HTTP/2 www.headspace.com/marketing-assets/view-components-LatestArticlesGrid-LatestArticlesGrid-d0bebd74761949b114ee.js
IP
Size 106 kB (106020 bytes)
Hash 74806fff88d991f66b27f928c30a6613
5a6420e6fea5ad11d55928e3c814171eaed249e8
ce34759266c2c906647f0f3d2e5fa31c3c73c6f7c4409767a95b9813ae268c71
GET /marketing-assets/view-components-LatestArticlesGrid-LatestArticlesGrid-d0bebd74761949b114ee.js HTTP/1.1
Host: www.headspace.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.headspace.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Fri, 02 Dec 2022 18:15:42 GMT
last-modified: Wed, 30 Nov 2022 19:31:13 GMT
etag: W/"50e9bfb93f639bc2218599735c22cbb4"
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000,public,immutable
x-amz-version-id: apHfabQBOBihAYehzvqVHNJVw4Np5hSP
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: jxrtC0KEhJP989Cht0XzXKtcH-KwPuiRKyLUyCFGf7VDwOztS34WOQ==
age: 45953
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e63a3fb1ef1a4ebbbd126969d6ee68ca
8bc9c26950b3899087e25ddea159c28f57b47200
f2ec30377e239f64286ae7dde8032e4e332b6c123f7decc07126fbbcff460a69
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 03 Dec 2022 07:01:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.headspace.com/marketing-assets/ea88be26-7e6ceef818a18297e4ea.js
200 OK 91 kB URL HTTP/2 www.headspace.com/marketing-assets/ea88be26-7e6ceef818a18297e4ea.js
IP
Hash 571dc9741f8e48630355935378f2a1b1
76fc3a24e911306c9c2ef764416868b7aba73cc0
0e74a7815d977329f3fc31d6d36356e92979a16360f74cbe5e9a72a807f0781e
GET /marketing-assets/ea88be26-7e6ceef818a18297e4ea.js HTTP/1.1
Host: www.headspace.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.headspace.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Fri, 02 Dec 2022 18:15:42 GMT
last-modified: Wed, 30 Nov 2022 19:31:12 GMT
etag: W/"51b5e4c53cb5e877d8af9157ca7e6175"
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000,public,immutable
x-amz-version-id: 8nO0gQ6DjO6YWr1mkruavu8tb4Z34M4D
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: k-vZ9K4KN3UXM79WbMLmbHTwpded5X7oHacZEsZl1kLUVcQMoVgzpw==
age: 45953
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.headspace.com/marketing-assets/view-components-HeroPlans-HeroPlans-94b51fbb419e383a86c7.js
200 OK 25 kB URL HTTP/2 www.headspace.com/marketing-assets/view-components-HeroPlans-HeroPlans-94b51fbb419e383a86c7.js
IP
Hash fabc0ff6d5ab5c846fb6bdffdbecc11a
5ae09a05ee9e8b8e335dce73e01b0d8025f4f9f3
54b9a2754696914c30a824519f718b21c886920e36a22a559c47cdf0b0f937b8
GET /marketing-assets/view-components-HeroPlans-HeroPlans-94b51fbb419e383a86c7.js HTTP/1.1
Host: www.headspace.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.headspace.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Fri, 02 Dec 2022 18:15:42 GMT
last-modified: Wed, 30 Nov 2022 19:31:13 GMT
etag: W/"04f3619ad77d14007f32d55aa2e5ac6d"
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000,public,immutable
x-amz-version-id: bmND28NFDFESAMsLJ28ZfJez72kJn4tI
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 4v2SENTQegms59Hl_NNq802eLqGbnWHrvcqmWKGVhTtuKOre93tSAA==
age: 45953
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.headspace.com/
200 OK 123 kB IP
Size 123 kB (123411 bytes)
Hash 0ba4f8ef9bc6a987ab7cc8d9ab762e62
91746fe998077442e79c03f3413a336d331895e8
b088d03b1142ce8981070f013ea928395aa6f978ba22e13dfcd0a35dc596cc1c
GET / HTTP/1.1
Host: www.headspace.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html
x-amz-id-2: jcVk0jxIdC0z6/joRGPRJKEnKLMYlYEsYCeu6PwMYx1PgZdoa7YQYeSIWezxslC4A+LPtq76O10=
x-amz-request-id: 2H27C05FKAXADAZ5
last-modified: Wed, 30 Nov 2022 19:19:52 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: 1Ze.eGGmJzixW98BgD.YZAKFD7BMWo0x
server: AmazonS3
content-encoding: gzip
date: Sat, 03 Dec 2022 07:01:35 GMT
cache-control: max-age=0,public,must-revalidate
etag: W/"52f7bcd98fc82b92e49c1270b99d3c5f"
vary: Accept-Encoding
x-cache: RefreshHit from cloudfront
via: 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: r5B8pRxqpKjoqRQRQp5skRIw8qwhjhkBsuY7dzof1U52qXKmur4ExQ==
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
X-Firefox-Spdy: h2
images.ctfassets.net/v3n26e09qg2r/7Eo55Bcu7sEnBt2mN3SFpT/567f1161bb8db4c78df89fef31a97051/homepage-module-img-1.png?w=1080&h=828&q=80&fm=webp&bg=rgb%3AF2F2F2
200 OK 16 kB URL HTTP/2 images.ctfassets.net/v3n26e09qg2r/7Eo55Bcu7sEnBt2mN3SFpT/567f1161bb8db4c78df89fef31a97051/homepage-module-img-1.png?w=1080&h=828&q=80&fm=webp&bg=rgb%3AF2F2F2
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 2e279419252de8eedfe55e827c54b6e7
a226364c6c74e8441c82bd1ed60cffcc5eb5c925
305afb50f660b780e740756e1ae4b108f2c1d1193c7de262dd3be7bc70db2d94
GET /v3n26e09qg2r/7Eo55Bcu7sEnBt2mN3SFpT/567f1161bb8db4c78df89fef31a97051/homepage-module-img-1.png?w=1080&h=828&q=80&fm=webp&bg=rgb%3AF2F2F2 HTTP/1.1
Host: images.ctfassets.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.headspace.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 16082
last-modified: Mon, 28 Nov 2022 21:22:14 GMT
server: Contentful Images API
access-control-allow-origin: *
date: Fri, 02 Dec 2022 08:42:20 GMT
cache-control: max-age=31536000
etag: "2e279419252de8eedfe55e827c54b6e7"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 7NQyA0p02nFCDtrVtP90J7sKqjfOalMtU9Wf5a7jaWTGZKQnswS1vA==
age: 80355
X-Firefox-Spdy: h2
images.ctfassets.net/v3n26e09qg2r/52fcyYV1u2nHk5lMVffFp3/623bbee228a65e9152244db95969459a/Netflix_UYM_Banner-Desktop.png?w=1447&h=52&q=80&fm=webp&bg=rgb%3AF2F2F2
200 OK 304 B URL HTTP/2 images.ctfassets.net/v3n26e09qg2r/52fcyYV1u2nHk5lMVffFp3/623bbee228a65e9152244db95969459a/Netflix_UYM_Banner-Desktop.png?w=1447&h=52&q=80&fm=webp&bg=rgb%3AF2F2F2
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 2dea4fffb9a7e0f1f7ca8cb15747c5a3
fedd340965957102b81d8834f1c156fb9168c32c
4a185f1f43ce3b67680304449e02448e9dce9d06b046d3f0f955aa14030bd07b
GET /v3n26e09qg2r/52fcyYV1u2nHk5lMVffFp3/623bbee228a65e9152244db95969459a/Netflix_UYM_Banner-Desktop.png?w=1447&h=52&q=80&fm=webp&bg=rgb%3AF2F2F2 HTTP/1.1
Host: images.ctfassets.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.headspace.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 304
last-modified: Sun, 06 Nov 2022 02:13:29 GMT
server: Contentful Images API
access-control-allow-origin: *
date: Sat, 03 Dec 2022 07:01:35 GMT
cache-control: max-age=31536000
etag: "2dea4fffb9a7e0f1f7ca8cb15747c5a3"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 9aCN9hzFjftOp-W9oObgUJMQEgg98Ic18kLRj8OIU3pHfmxaeFjECQ==
age: 14976
X-Firefox-Spdy: h2
images.ctfassets.net/v3n26e09qg2r/42GrxqLrMarmzD8xMITPo4/86dece2b416cb8f9f9f8a1c6d29f58f3/Trio-1_2x.png?w=202&h=200&q=80&fm=webp&bg=rgb%3AF2F2F2
200 OK 4.2 kB URL HTTP/2 images.ctfassets.net/v3n26e09qg2r/42GrxqLrMarmzD8xMITPo4/86dece2b416cb8f9f9f8a1c6d29f58f3/Trio-1_2x.png?w=202&h=200&q=80&fm=webp&bg=rgb%3AF2F2F2
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash add349c9f24c3c0e29d7637990974391
de238324b374b79df92b1ef27a0604d93e5c3adc
e08ce207f1dffdfe91027ec7144f0abe1179e92ab0996a9c6e19a2cfc4a6e9dd
GET /v3n26e09qg2r/42GrxqLrMarmzD8xMITPo4/86dece2b416cb8f9f9f8a1c6d29f58f3/Trio-1_2x.png?w=202&h=200&q=80&fm=webp&bg=rgb%3AF2F2F2 HTTP/1.1
Host: images.ctfassets.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.headspace.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 4176
last-modified: Mon, 31 Oct 2022 19:11:42 GMT
server: Contentful Images API
access-control-allow-origin: *
date: Sat, 03 Dec 2022 07:01:35 GMT
cache-control: max-age=31536000
etag: "add349c9f24c3c0e29d7637990974391"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: S1uJJduHxWCOjL8Z3q4TjCXvo07ClRgMUC3gXLYjzs4txckcj40NJg==
age: 18997
X-Firefox-Spdy: h2
images.ctfassets.net/v3n26e09qg2r/1hClu9z6IR2dkp3RBDeCI3/b76cef67757dd02bb95062364415b56b/Trio-2_2x.png?w=213&h=200&q=80&fm=webp&bg=rgb%3AF2F2F2
200 OK 3.5 kB URL HTTP/2 images.ctfassets.net/v3n26e09qg2r/1hClu9z6IR2dkp3RBDeCI3/b76cef67757dd02bb95062364415b56b/Trio-2_2x.png?w=213&h=200&q=80&fm=webp&bg=rgb%3AF2F2F2
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash b986f7856658102d0990d4cbf4835f93
e02f78d53311239416d7b963c20b656440224a30
c822fc640501bd4d3adc9605e4554d03f0a9fde39801021eaf5fa6e2d44e1dce
GET /v3n26e09qg2r/1hClu9z6IR2dkp3RBDeCI3/b76cef67757dd02bb95062364415b56b/Trio-2_2x.png?w=213&h=200&q=80&fm=webp&bg=rgb%3AF2F2F2 HTTP/1.1
Host: images.ctfassets.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.headspace.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 3488
last-modified: Tue, 01 Nov 2022 12:44:35 GMT
server: Contentful Images API
access-control-allow-origin: *
date: Sat, 03 Dec 2022 07:01:35 GMT
cache-control: max-age=31536000
etag: "b986f7856658102d0990d4cbf4835f93"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: HdYiNQhf2WhrsKPypprSpPC_nBL9pPWGJhhLm92XVSDgNHxBnt4JdA==
age: 22583
X-Firefox-Spdy: h2
images.ctfassets.net/v3n26e09qg2r/dmvoqWQDeTvaN5aF969lZ/5a600f50e44b6c8933aa8899c7bd1e56/Trio-3_2x.png?w=202&h=200&q=80&fm=webp&bg=rgb%3AF2F2F2
200 OK 3.8 kB URL HTTP/2 images.ctfassets.net/v3n26e09qg2r/dmvoqWQDeTvaN5aF969lZ/5a600f50e44b6c8933aa8899c7bd1e56/Trio-3_2x.png?w=202&h=200&q=80&fm=webp&bg=rgb%3AF2F2F2
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 9740cf3b40db009618a10608cbec03ec
afb8d002de0bbdd45536332724101880ed0f43d0
e2f4ecc972355d9d23c34a9eef68ffeb1ac02b7c150a954e8e027d8fd03b3182
GET /v3n26e09qg2r/dmvoqWQDeTvaN5aF969lZ/5a600f50e44b6c8933aa8899c7bd1e56/Trio-3_2x.png?w=202&h=200&q=80&fm=webp&bg=rgb%3AF2F2F2 HTTP/1.1
Host: images.ctfassets.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.headspace.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 3756
last-modified: Sat, 29 Oct 2022 13:58:04 GMT
server: Contentful Images API
access-control-allow-origin: *
date: Sat, 03 Dec 2022 07:01:35 GMT
cache-control: max-age=31536000
etag: "9740cf3b40db009618a10608cbec03ec"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: bGwVW3lFqR3kcBHwXU7DARFXaUOeiY5lTSXhf-lCW6boh9Wlsn19Qg==
age: 9405
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 133700a221adc632096ba07231dff450
65709336bcc45deca9015c0a33722eb0a9779bbb
d3391e367acafd98b2680500556201f58671a391fdf267c0eaacb4409ecc5e9b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D3391E367ACAFD98B2680500556201F58671A391FDF267C0EAACB4409ECC5E9B"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14572
Expires: Sat, 03 Dec 2022 11:04:27 GMT
Date: Sat, 03 Dec 2022 07:01:35 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 133700a221adc632096ba07231dff450
65709336bcc45deca9015c0a33722eb0a9779bbb
d3391e367acafd98b2680500556201f58671a391fdf267c0eaacb4409ecc5e9b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D3391E367ACAFD98B2680500556201F58671A391FDF267C0EAACB4409ECC5E9B"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2930
Expires: Sat, 03 Dec 2022 07:50:25 GMT
Date: Sat, 03 Dec 2022 07:01:35 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 133700a221adc632096ba07231dff450
65709336bcc45deca9015c0a33722eb0a9779bbb
d3391e367acafd98b2680500556201f58671a391fdf267c0eaacb4409ecc5e9b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D3391E367ACAFD98B2680500556201F58671A391FDF267C0EAACB4409ECC5E9B"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14572
Expires: Sat, 03 Dec 2022 11:04:27 GMT
Date: Sat, 03 Dec 2022 07:01:35 GMT
Connection: keep-alive
www.headspace.com/marketing-assets/view-components-Stories-Stories-33e2470b757d4fb0abf3.js
200 OK 755 kB URL HTTP/2 www.headspace.com/marketing-assets/view-components-Stories-Stories-33e2470b757d4fb0abf3.js
IP
File type ASCII text, with very long lines (57275)
Size 755 kB (755276 bytes)
Hash d0548c902925810c9a815e88612bca8e
c1d570fff9aeb9bb7974d9426dcd4848fe12f69b
95ff1929a962dd35c4283c3d01b0bbe2d0ab2a7255dfa1c69a8d8206c19c9949
GET /marketing-assets/view-components-Stories-Stories-33e2470b757d4fb0abf3.js HTTP/1.1
Host: www.headspace.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.headspace.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Fri, 02 Dec 2022 18:15:47 GMT
last-modified: Wed, 30 Nov 2022 19:31:14 GMT
etag: W/"8240dc569643e8069a88161ef142706c"
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000,public,immutable
x-amz-version-id: 1y5wKwamdPcXpopmgGnEtgIxTioZqQI_
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Vzb2_xoANklLV1fzPxaRW9V6ULKXhKLzDS5hKY-mdEpXYIuM5Vzw_A==
age: 45948
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
X-Firefox-Spdy: h2
o28532.ingest.sentry.io/api/5272047/envelope/?sentry_key=646f2ec572e04bf5901f3696cd4d922d&sentry_version=7&sentry_client=sentry.javascript.gatsby%2F7.8.0
200 OK 2 B URL HTTP/2 o28532.ingest.sentry.io/api/5272047/envelope/?sentry_key=646f2ec572e04bf5901f3696cd4d922d&sentry_version=7&sentry_client=sentry.javascript.gatsby%2F7.8.0
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
POST /api/5272047/envelope/?sentry_key=646f2ec572e04bf5901f3696cd4d922d&sentry_version=7&sentry_client=sentry.javascript.gatsby%2F7.8.0 HTTP/1.1
Host: o28532.ingest.sentry.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.headspace.com/
Content-Type: text/plain;charset=UTF-8
Origin: https://www.headspace.com
Content-Length: 459
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 07:01:35 GMT
content-type: application/json
content-length: 2
access-control-allow-origin: https://www.headspace.com
access-control-expose-headers: x-sentry-error, x-sentry-rate-limits, retry-after
vary: Origin
x-envoy-upstream-service-time: 0
strict-transport-security: max-age=31536000; includeSubDomains; preload
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
o28532.ingest.sentry.io/api/5272047/envelope/?sentry_key=646f2ec572e04bf5901f3696cd4d922d&sentry_version=7&sentry_client=sentry.javascript.gatsby%2F7.8.0
200 OK 2 B URL HTTP/2 o28532.ingest.sentry.io/api/5272047/envelope/?sentry_key=646f2ec572e04bf5901f3696cd4d922d&sentry_version=7&sentry_client=sentry.javascript.gatsby%2F7.8.0
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
POST /api/5272047/envelope/?sentry_key=646f2ec572e04bf5901f3696cd4d922d&sentry_version=7&sentry_client=sentry.javascript.gatsby%2F7.8.0 HTTP/1.1
Host: o28532.ingest.sentry.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.headspace.com/
Content-Type: text/plain;charset=UTF-8
Origin: https://www.headspace.com
Content-Length: 464
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 07:01:35 GMT
content-type: application/json
content-length: 2
access-control-allow-origin: https://www.headspace.com
access-control-expose-headers: x-sentry-error, x-sentry-rate-limits, retry-after
vary: Origin
x-envoy-upstream-service-time: 0
strict-transport-security: max-age=31536000; includeSubDomains; preload
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
o28532.ingest.sentry.io/api/5272047/envelope/?sentry_key=646f2ec572e04bf5901f3696cd4d922d&sentry_version=7&sentry_client=sentry.javascript.gatsby%2F7.8.0
200 OK 2 B URL HTTP/2 o28532.ingest.sentry.io/api/5272047/envelope/?sentry_key=646f2ec572e04bf5901f3696cd4d922d&sentry_version=7&sentry_client=sentry.javascript.gatsby%2F7.8.0
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
POST /api/5272047/envelope/?sentry_key=646f2ec572e04bf5901f3696cd4d922d&sentry_version=7&sentry_client=sentry.javascript.gatsby%2F7.8.0 HTTP/1.1
Host: o28532.ingest.sentry.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.headspace.com/
Content-Type: text/plain;charset=UTF-8
Origin: https://www.headspace.com
Content-Length: 459
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 07:01:35 GMT
content-type: application/json
content-length: 2
access-control-allow-origin: https://www.headspace.com
access-control-expose-headers: x-sentry-rate-limits, x-sentry-error, retry-after
vary: Origin
x-envoy-upstream-service-time: 0
strict-transport-security: max-age=31536000; includeSubDomains; preload
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
location.prod.headspace.com/
200 OK 2 B URL HTTP/2 location.prod.headspace.com/
IP
File type ASCII text, with no line terminators
Hash c2f3f489a00553e7a01d369c103c7251
a0509b7780628bd9d9abc7eb8a2163477341053a
23794d91c53ae875c8e247d72561e35d9d06ee07c70c9e0dbcc977a6d161504a
GET / HTTP/1.1
Host: location.prod.headspace.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.headspace.com
Connection: keep-alive
Referer: https://www.headspace.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
content-length: 2
server: CloudFront
date: Fri, 02 Dec 2022 10:15:33 GMT
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: PLkj7CrF0mt1sDPo6ICWnrqGFhjqqfEvs-QTa1dNBil6upgCLd7yOw==
age: 74762
access-control-allow-origin: https://www.headspace.com
vary: Origin
X-Firefox-Spdy: h2
assets.ctfassets.net/v3n26e09qg2r/1klC4Z7WVcQIi0c4w86sCM/9f9afe86cc0df9eaa7450f9cfdf0e9cd/pack_basics_level_1_s1_3m_en_20170320.mp3
206 Partial Content 1.8 MB URL HTTP/2 assets.ctfassets.net/v3n26e09qg2r/1klC4Z7WVcQIi0c4w86sCM/9f9afe86cc0df9eaa7450f9cfdf0e9cd/pack_basics_level_1_s1_3m_en_20170320.mp3
IP
File type MPEG ADTS, layer III, v1, 192 kbps, 44.1 kHz, JntStereo\012- data
Size 1.8 MB (1815214 bytes)
Hash e4a2290ce62b1edce285232ce3661462
bf4558999a4d81c3bb390542f2bf0696c90c21b5
cf92a82fb73f2b630380a8e5de1a769e4e2798dc41b74f00f22e790e616c409c
GET /v3n26e09qg2r/1klC4Z7WVcQIi0c4w86sCM/9f9afe86cc0df9eaa7450f9cfdf0e9cd/pack_basics_level_1_s1_3m_en_20170320.mp3 HTTP/1.1
Host: assets.ctfassets.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://www.headspace.com/
Sec-Fetch-Dest: audio
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 206 Partial Content
content-type: audio/mpeg
content-length: 6479228
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-max-age: 86400
x-amz-replication-status: REPLICA
last-modified: Tue, 24 Jul 2018 17:34:14 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: FlzTwmxxHVE8NLLQr1bifTXp5qErGFvR
accept-ranges: bytes
server: AmazonS3
date: Sat, 03 Dec 2022 05:39:56 GMT
cache-control: max-age=2592000
etag: "941301899380d58af80ef6cc2236519e-2"
vary: Accept-Encoding
content-range: bytes 0-6479227/6479228
x-cache: Hit from cloudfront
via: 1.1 d4fd24ae65d4d2b97cfdea8d2f0c21a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: Zhq0Eg7KdKSX_j3BcR9RXwP03_ggFMLklMdiSqj9fFBfGsOzx5Srow==
age: 4900
X-Firefox-Spdy: h2
downloads.ctfassets.net/v3n26e09qg2r/3ssFwMNnu7kVqWLt66vn3v/14a79b0ed0c2d66d1e1c17a0fd8764df/focus_music_r1_lo-fi_radio_01_20200702_02.mp3
206 Partial Content 2.4 MB URL HTTP/2 downloads.ctfassets.net/v3n26e09qg2r/3ssFwMNnu7kVqWLt66vn3v/14a79b0ed0c2d66d1e1c17a0fd8764df/focus_music_r1_lo-fi_radio_01_20200702_02.mp3
IP
File type MPEG ADTS, layer III, v1, 192 kbps, 48 kHz, JntStereo\012- data
Size 2.4 MB (2392064 bytes)
Hash f7796906284ed322fccbb704f73c3c7a
5d5b08a8f588547c6b1d23de2125d4ebe1ab3681
4d48ffbd62eae334170d6ac711f4f09d2e4a5fabcd8bf38c1aa96b7d8bd7239c
GET /v3n26e09qg2r/3ssFwMNnu7kVqWLt66vn3v/14a79b0ed0c2d66d1e1c17a0fd8764df/focus_music_r1_lo-fi_radio_01_20200702_02.mp3 HTTP/1.1
Host: downloads.ctfassets.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://www.headspace.com/
Sec-Fetch-Dest: audio
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 206 Partial Content
content-type: audio/mpeg
content-length: 81931520
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-max-age: 86400
x-amz-replication-status: REPLICA
last-modified: Thu, 13 Aug 2020 16:33:29 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: BeV8GcPKfhXJUuo8avD.dAGycnQZot05
accept-ranges: bytes
server: AmazonS3
date: Sat, 03 Dec 2022 04:05:30 GMT
cache-control: max-age=2592000
etag: "d2ff20fde5a2a607ce82d0f515438c27-16"
vary: Accept-Encoding
content-range: bytes 0-81931519/81931520
x-cache: Hit from cloudfront
via: 1.1 d4fd24ae65d4d2b97cfdea8d2f0c21a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: MQInWbgFCG0KxKsnSUUFZZjoumu8M8WaZY6KzNryUWfuZufr1bzRPQ==
age: 10566
X-Firefox-Spdy: h2
www.headspace.com/marketing-assets/2dff74c1-6c48c0c532166beb5abb.js
200 OK 29 kB URL HTTP/2 www.headspace.com/marketing-assets/2dff74c1-6c48c0c532166beb5abb.js
IP
Hash 146f5e6c09b6a0c1356941af56802af0
fb388a52db7edb4579df427f64179f11b8877c2b
68adc1e7e68d24c6fccdcb916737636db4a8ea44be9a3f59732d4871d220f000
GET /marketing-assets/2dff74c1-6c48c0c532166beb5abb.js HTTP/1.1
Host: www.headspace.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.headspace.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Fri, 02 Dec 2022 18:15:39 GMT
last-modified: Wed, 30 Nov 2022 19:31:11 GMT
etag: W/"53b714e753f3d8379ce74f13cce7c309"
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000,public,immutable
x-amz-version-id: iCvpBhh6Wm3V8rj_9iJ84ONZ.IwRasyK
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: mUw4PesKtoTWThUWKPEMtIIv35xUq3NMeJhmWui7oqEMpw6ORC6wRA==
age: 45956
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash f830d147fe46fb6e3e57095237415550
3c6335c0d51ec3ce105a18e4b92431b0a95685ea
ecb3ca18208f735e23d3c477b67ef20a09efb5cf9e59055e7df27c05ef922d15
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=171523
Date: Sat, 03 Dec 2022 07:01:36 GMT
Etag: "638ae06e-1d7"
Expires: Mon, 05 Dec 2022 06:40:19 GMT
Last-Modified: Sat, 03 Dec 2022 05:36:46 GMT
Server: ECS (dcb/7F14)
X-Cache: Miss from cloudfront
Via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 3UCe25ovAe0bgq8to2VlD_Y3zMHG9nopS6QFHU_TWPZOml41j3JDQg==
Age: 3813
wec-assets.terminus.services/f0c9017a-7514-4b1e-b253-eddc086a1230/t.gif?d=192eb480-0436-4a39-ad94-533ddb9df0a7&s=ae7d1b39-9a02-484b-99bc-e04b6424bc78&p=https%3A%2F%2Fwww.headspace.com%2F&cb=1670050894213&t=Meditation%20and%20Sleep%20Made%20Simple%20-%20Headspace&r=&e=page_viewed&u=83f66a8c-1094-4881-848f-c3109cc5f3f8-1670050894213
200 OK 43 B URL HTTP/2 wec-assets.terminus.services/f0c9017a-7514-4b1e-b253-eddc086a1230/t.gif?d=192eb480-0436-4a39-ad94-533ddb9df0a7&s=ae7d1b39-9a02-484b-99bc-e04b6424bc78&p=https%3A%2F%2Fwww.headspace.com%2F&cb=1670050894213&t=Meditation%20and%20Sleep%20Made%20Simple%20-%20Headspace&r=&e=page_viewed&u=83f66a8c-1094-4881-848f-c3109cc5f3f8-1670050894213
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 325472601571f31e1bf00674c368d335
2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
GET /f0c9017a-7514-4b1e-b253-eddc086a1230/t.gif?d=192eb480-0436-4a39-ad94-533ddb9df0a7&s=ae7d1b39-9a02-484b-99bc-e04b6424bc78&p=https%3A%2F%2Fwww.headspace.com%2F&cb=1670050894213&t=Meditation%20and%20Sleep%20Made%20Simple%20-%20Headspace&r=&e=page_viewed&u=83f66a8c-1094-4881-848f-c3109cc5f3f8-1670050894213 HTTP/1.1
Host: wec-assets.terminus.services
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.headspace.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/gif
content-length: 43
date: Sat, 03 Dec 2022 06:54:57 GMT
strict-transport-security: max-age=31536000
x-cache: Hit from cloudfront
via: 1.1 057fdebf738f5915bf38a78949190758.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: UHcrRrDq2xNxGiQoGWBd--DjlBPlEGaFnjrkPW-zarcw8zOK1S36kw==
age: 399
X-Firefox-Spdy: h2
ext.chtbl.com/trackable.js
200 OK 4.1 kB URL HTTP/2 ext.chtbl.com/trackable.js
IP
File type ASCII text, with very long lines (4092), with no line terminators
Hash 4a494dbb82444463b6fd8bff0e5593d6
16bc1f3f18d87fa93ab1c49a99eb50097ed892f5
27dc4f62298834987d3d8e5608c1af94c82ee3d18ee31858d39e0202697b5308
GET /trackable.js HTTP/1.1
Host: ext.chtbl.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.headspace.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript;charset=UTF-8
content-length: 4092
last-modified: Fri, 12 Feb 2021 20:28:32 GMT
accept-ranges: bytes
server: AmazonS3
date: Sat, 03 Dec 2022 06:19:52 GMT
cache-control: max-age=3600
etag: "4a494dbb82444463b6fd8bff0e5593d6"
x-cache: Hit from cloudfront
via: 1.1 dac7cf040932e0c072eeed10afdd7b3e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: aMMUI_eMCL3E2ZYTOyxOt4wYU3tvkArFASyN7UJvvIwCedTFsAGs2g==
age: 2662
X-Firefox-Spdy: h2
www.headspace.com/marketing-assets/view-components-SimpleMedia-SimpleMedia-e1cd66bff25ba0526e86.js
200 OK 2.5 kB URL HTTP/2 www.headspace.com/marketing-assets/view-components-SimpleMedia-SimpleMedia-e1cd66bff25ba0526e86.js
IP
Hash 0b39800b04483670fb2a0e52387ebfa0
82e86769641be4338dd230fa9de71c75b702851a
7ec5d942f3a3db3488ff009796d63ea031b5106d59951aed164e0240fd63dd6e
GET /marketing-assets/view-components-SimpleMedia-SimpleMedia-e1cd66bff25ba0526e86.js HTTP/1.1
Host: www.headspace.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.headspace.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Fri, 02 Dec 2022 18:15:42 GMT
last-modified: Wed, 30 Nov 2022 19:31:13 GMT
etag: W/"ae38ca685770aad34301142280f4bb5b"
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000,public,immutable
x-amz-version-id: SalU.Az2RIQ_PkD4sMZ.S4CYZSWWMuHz
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: efwPLa6z4nAyK_ZTMByhF9UTM-Be6AQ1VapKbyBpX3x-sVLYd05TeQ==
age: 45953
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
X-Firefox-Spdy: h2
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash bc90be454f4657250b962f055913ec87
ec1a7c95b35d88002af017f163d8f8b00ca246de
2061417dc8a0e0b59b7b7bfe012730a0faa6654a6c154b058f025d096bd5bdb3
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Sat, 03 Dec 2022 07:01:36 GMT
Content-Type: application/ocsp-response
Content-Length: 1777
Connection: keep-alive
X-Sucuri-ID: 19036
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Fri, 02 Dec 2022 20:08:35 GMT
Expires: Sat, 03 Dec 2022 20:08:35 GMT
ETag: "ec1a7c95b35d88002af017f163d8f8b00ca246de"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
d.impactradius-event.com/A2816351-2c6d-442e-a206-0844e1aebf7b1.js
200 OK 13 kB URL HTTP/2 d.impactradius-event.com/A2816351-2c6d-442e-a206-0844e1aebf7b1.js
IP
File type C source, ASCII text, with very long lines (41662), with no line terminators
Hash f176eb78f890ae149f28dc0a819be629
4bcbc0f8c82d0eb205121bedc6709d1a42b56de8
f85ba04cda4863a2da131849014b951d3d05b13a76d72a795931f409aa3b35af
GET /A2816351-2c6d-442e-a206-0844e1aebf7b1.js HTTP/1.1
Host: d.impactradius-event.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.headspace.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-guploader-uploadid: ADPycdsNsCig8UdUq1s2EylEXc5V7BnnxkYh331N7ZPYvdLWX1p09uUxf9P7iIx9-7QkZT-wsA1y8ODEpUYZconaQWCePBVkeMSp
x-goog-generation: 1645019493121702
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 12949
content-encoding: gzip
x-goog-hash: crc32c=RNTbMQ==, md5=8XbrePiQrhSfKNwKgZvmKQ==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
vary: Accept-Encoding
content-length: 12949
server: UploadServer
date: Sat, 03 Dec 2022 07:00:16 GMT
expires: Sat, 03 Dec 2022 07:05:16 GMT
cache-control: public,max-age=900,s-maxage=300
age: 80
last-modified: Wed, 16 Feb 2022 13:51:33 GMT
etag: "f176eb78f890ae149f28dc0a819be629"
content-type: text/javascript; charset=utf-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
jssdks.mparticle.com/v1/JS/BxazLKm8649buJbWBLWXt2Pw7bfin6qB/Forwarding
202 Accepted 0 B URL HTTP/2 jssdks.mparticle.com/v1/JS/BxazLKm8649buJbWBLWXt2Pw7bfin6qB/Forwarding
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /v1/JS/BxazLKm8649buJbWBLWXt2Pw7bfin6qB/Forwarding HTTP/1.1
Host: jssdks.mparticle.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 143
Origin: https://www.headspace.com
Connection: keep-alive
Referer: https://www.headspace.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 202 Accepted
server: Kestrel
access-control-allow-origin: *
x-origin-name: 7arPuRjnqGEhiMyprEtnLk--F_us1_origin
accept-ranges: bytes
date: Sat, 03 Dec 2022 07:01:36 GMT
via: 1.1 varnish
x-served-by: cache-bma1626-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1670050897.597463,VS0,VE19
content-length: 0
X-Firefox-Spdy: h2
identity.mparticle.com/v1/identify
200 OK 164 B URL HTTP/2 identity.mparticle.com/v1/identify
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 7ea1ac15f5513da56bffa9f151f4aee5
f054adea2ca4e7a291dd33959a27effe74cae6e3
f99c8a6481438f9c73ba2aeff1af54af1b654df7bbb4b5a89da877430945bb5d
POST /v1/identify HTTP/1.1
Host: identity.mparticle.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
x-mp-key: BxazLKm8649buJbWBLWXt2Pw7bfin6qB
Content-Length: 320
Origin: https://www.headspace.com
Connection: keep-alive
Referer: https://www.headspace.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
server: Kestrel
access-control-allow-origin: *
content-encoding: gzip
x-origin-name: 4PrgpUXX9K0sNAH1JImfyI--F_us1_origin
accept-ranges: bytes
date: Sat, 03 Dec 2022 07:01:36 GMT
via: 1.1 varnish
x-served-by: cache-bma1622-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1670050896.322585,VS0,VE107
vary: Accept-Encoding
strict-transport-security: max-age=900
X-Firefox-Spdy: h2
trkn.us/pixel/conv/ppt=11045;g=landing_page;gid=32736;ord=[uniqueid]?gtmcb=255178806
302 Found 0 B URL HTTP/1.1 trkn.us/pixel/conv/ppt=11045;g=landing_page;gid=32736;ord=[uniqueid]?gtmcb=255178806
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pixel/conv/ppt=11045;g=landing_page;gid=32736;ord=[uniqueid]?gtmcb=255178806 HTTP/1.1
Host: trkn.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.headspace.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
Date: Sat, 03 Dec 2022 07:01:36 GMT
Location: /pixel/conv/ppt=11045;g=landing_page;gid=32736;ord=[uniqueid]?gtmcb=255178806;ip=91.90.42.154;cuidchk=1
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Server: Apache
Set-Cookie: barometric[cuid]=cuid_9bc2f51e-0cbf-446d-bab2-7e5b30a9cadf; expires=Sun, 03-Dec-2023 07:01:36 GMT; Max-Age=31536000; path=/; SameSite=None; Secure; domain=.trkn.us
X-Content-Type-Options: nosniff
Content-Length: 0
Connection: keep-alive
web.chtbl.com/track
200 OK 49 B IP
File type JSON data\012- , ASCII text, with no line terminators
Hash d082a3018d8d388ba8a05bbfd201e397
5a6271ee38cdebb71cdfcd8e05c4fac26e59389e
bb30148d9df7671c14f2cd5be91e6b7a1488932efb740a80b66f39052744c168
OPTIONS /track HTTP/1.1
Host: web.chtbl.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://www.headspace.com/
Origin: https://www.headspace.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/json
content-length: 49
date: Sat, 03 Dec 2022 07:01:36 GMT
server: uvicorn
access-control-allow-methods: OPTIONS,POST
access-control-allow-headers: *
access-control-allow-origin: *
vary: Origin
x-cache: Miss from cloudfront
via: 1.1 095562e8748e634f880ee3c4ada2b6d0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: z8yuYqE8LO0uKRax2peWEzPVSqAlzjdVxFeVG-DMWf-948UDscEswg==
X-Firefox-Spdy: h2
www.headspace.com/marketing-assets/page-data/app-data.json
200 OK 50 B URL HTTP/2 www.headspace.com/marketing-assets/page-data/app-data.json
IP
File type JSON data\012- , ASCII text
Hash bc97e7125a16b5206e4be821b37151fc
9586d29595c5a439ca04959763316a2ec8cce850
557d20de7fa2508a9d617a13e7545650cb593413f6428a61f4e5081f6a891d30
GET /marketing-assets/page-data/app-data.json HTTP/1.1
Host: www.headspace.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
sentry-trace: 64de2ff7bc1b4338a56dc3b0d338e739-b7c08c6d8a4802f2-0
baggage: sentry-environment=production,sentry-release=7d57015eef2f9d28f8063b61f32f01fce549044b,sentry-public_key=646f2ec572e04bf5901f3696cd4d922d,sentry-trace_id=64de2ff7bc1b4338a56dc3b0d338e739,sentry-sample_rate=0.01
Connection: keep-alive
Referer: https://www.headspace.com/
Cookie: _gcl_au=1.1.1610401417.1670050894; mprtcl-v4_B0C8D5EC={'gs':{'ie':1|'dt':'BxazLKm8649buJbWBLWXt2Pw7bfin6qB'|'cgid':'88a76943-0456-4428-b469-d71fc3683b9b'|'das':'a708f74e-c53f-40a4-829d-5b90c22adf44'}|'l':0}; countryCode=NO
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/json
content-length: 50
last-modified: Fri, 02 Dec 2022 18:30:55 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: q2Ws8rMAxXPxisZVI3KT.Tnap6QtgLH0
accept-ranges: bytes
server: AmazonS3
date: Sat, 03 Dec 2022 07:01:37 GMT
cache-control: max-age=0,public,must-revalidate
etag: "bc97e7125a16b5206e4be821b37151fc"
vary: Accept-Encoding
x-cache: RefreshHit from cloudfront
via: 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 5ZQGUyWvteGY0nMBs7IMggS3MgYHc4fQMoUkhOBnu12G3SQ95pPvBQ==
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
X-Firefox-Spdy: h2
web.chtbl.com/track
200 OK 49 B IP
File type JSON data\012- , ASCII text, with no line terminators
Hash d082a3018d8d388ba8a05bbfd201e397
5a6271ee38cdebb71cdfcd8e05c4fac26e59389e
bb30148d9df7671c14f2cd5be91e6b7a1488932efb740a80b66f39052744c168
POST /track HTTP/1.1
Host: web.chtbl.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/json;charset=UTF-8
Content-Length: 256
Origin: https://www.headspace.com
Connection: keep-alive
Referer: https://www.headspace.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json
content-length: 49
date: Sat, 03 Dec 2022 07:01:36 GMT
server: uvicorn
access-control-allow-methods: OPTIONS,POST
access-control-allow-headers: *
access-control-allow-origin: *
vary: Origin
x-cache: Miss from cloudfront
via: 1.1 095562e8748e634f880ee3c4ada2b6d0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: ZI2_dzmuqk9dwZh357DtRVpZptBjqZdT0sbye6hE8pgXvaeFRZPgww==
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash 12f92bc18ae77632ec5d0437b38a9582
21e40dd6fa038d5b0c62ab487719b0bbcc58a0b8
b093dc13588449f00c6f8c4026f118611b56123eec6ce5c2fca6fb363112f0d9
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 03 Dec 2022 07:01:36 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Wed, 30 Nov 2022 14:09:18 GMT
Expires: Wed, 07 Dec 2022 14:09:17 GMT
Etag: "21e40dd6fa038d5b0c62ab487719b0bbcc58a0b8"
Cache-Control: max-age=370660,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 773a6e97598ab529-OSL
ocsp.sectigo.com/
200 OK 472 B IP
Hash 3c69e743b748c66be391d94fd2e88f9c
b9d8260b32d754ba9a1fafe1660a582f9ec99bbe
c55f658564e74ea25d745b8156fa23a9dc482ca905d3638c2041e3286713f492
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 03 Dec 2022 07:01:37 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Thu, 01 Dec 2022 02:29:46 GMT
Expires: Thu, 08 Dec 2022 02:29:45 GMT
Etag: "b9d8260b32d754ba9a1fafe1660a582f9ec99bbe"
Cache-Control: max-age=415088,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 773a6e97dac50b02-OSL
headspace.pxf.io/xc/2958222/1067607/13686
200 OK 586 B URL HTTP/2 headspace.pxf.io/xc/2958222/1067607/13686
IP
Hash 9511b79985b5f4f2acaf81d11721a416
ae6271a7226c046de5db00febe35f3f49d886ced
650dc481371d9a6b8992752797dd9b03098670eed7a2d1c6914c582d6c7b6806
POST /xc/2958222/1067607/13686 HTTP/1.1
Host: headspace.pxf.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded;charset=UTF-8
Content-Length: 78
Origin: https://www.headspace.com
Connection: keep-alive
Referer: https://www.headspace.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://www.headspace.com
access-control-allow-credentials: true
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
expires: Sat, 03 Dec 2022 07:01:37 GMT
p3p: policyref="/w3c/p3p.xml", CP="ALL BUS LEG DSP COR ADM CUR DEV PSA OUR NAV INT"
set-cookie: brwsr=544454d6-72d8-11ed-b42d-ebe6abc2b8b8; Domain=.pxf.io; Path=/; Secure; Max-Age=62208000; Expires=Fri, 22 Nov 2024 07:01:37 GMT; HttpOnly; SameSite=None
irld=LzgVRJHQ%3AnQ3DznS0mHR0-2Bm3JVWdHw7D30hxrexfATD9SKP; Path=/; Secure; Max-Age=15552000; Expires=Thu, 1 Jun 2023 07:01:37 GMT; HttpOnly; SameSite=None
irtps=1; Domain=.pxf.io; Path=/; Secure; Max-Age=86400; Expires=Sun, 4 Dec 2022 07:01:37 GMT; HttpOnly; SameSite=None
content-type: application/json; charset=UTF-8
date: Sat, 03 Dec 2022 07:01:37 GMT
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
images.ctfassets.net/v3n26e09qg2r/6EZdTyVDRpvt9VhbxwChhq/5037f9607d6db5a1c5881cd70a58ffb7/Group_1.svg
200 OK 339 B URL HTTP/2 images.ctfassets.net/v3n26e09qg2r/6EZdTyVDRpvt9VhbxwChhq/5037f9607d6db5a1c5881cd70a58ffb7/Group_1.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text
Hash 7835b67e1e5030bcb456329da12d2573
9b83542f4cfed4d8938914ae953ad931f4a3e43e
5d20e55f4f5841cf38eab02428d067682272fb6fbbf97f3e066ee9a377f8589f
GET /v3n26e09qg2r/6EZdTyVDRpvt9VhbxwChhq/5037f9607d6db5a1c5881cd70a58ffb7/Group_1.svg HTTP/1.1
Host: images.ctfassets.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.headspace.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 339
last-modified: Wed, 26 Aug 2020 12:36:23 GMT
server: Contentful Images API
access-control-allow-origin: *
date: Sat, 03 Dec 2022 07:01:37 GMT
cache-control: max-age=31536000
etag: "7835b67e1e5030bcb456329da12d2573"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: LhjDnugxFhPywVd-MNKMvbH4v1Y3YBy8oFhfk3nuvSuxANc4s_EQoA==
age: 654
X-Firefox-Spdy: h2
www.headspace.com/marketing-assets/3610-6992d4b3a945e46c1022.js
200 OK 760 B URL HTTP/2 www.headspace.com/marketing-assets/3610-6992d4b3a945e46c1022.js
IP
File type ASCII text, with very long lines (760), with no line terminators
Hash 1e426763457d7f6c7fbf1705777ebf80
370cad3b2674f5f95aa41fcd16ff02f0c6fadb5b
61400cee6e970017929b6abc1384eabe5dbe2c88ebab994068b4b51855a43aa2
GET /marketing-assets/3610-6992d4b3a945e46c1022.js HTTP/1.1
Host: www.headspace.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.headspace.com/
Cookie: _gcl_au=1.1.1610401417.1670050894; mprtcl-v4_B0C8D5EC={'gs':{'ie':1|'dt':'BxazLKm8649buJbWBLWXt2Pw7bfin6qB'|'cgid':'88a76943-0456-4428-b469-d71fc3683b9b'|'das':'a708f74e-c53f-40a4-829d-5b90c22adf44'|'csm':'WyI3Mzk0NjQ4MDAwNzMxNDgzNDciXQ=='|'sid':'C3F8AB41-0194-4ADE-89D0-1150D7EF9D55'|'les':1670050894103|'ssd':1670050894101}|'l':0|'739464800073148347':{'fst':1670050894527}|'cu':'739464800073148347'}; countryCode=NO; d-a8e6=192eb480-0436-4a39-ad94-533ddb9df0a7; s-9da4=ae7d1b39-9a02-484b-99bc-e04b6424bc78; AWSALB=B6DGFeMuZzua+q2pItZUzO6sdqygXU/xESkDpKW/+jPqHhMyTxS7freRgF4dg0/2oH2m17Xy+JZ2+6cUa86NjdkPnUu91xgYJWGq/vb1ROowdsdSubibShmqbK+c; AWSALBCORS=B6DGFeMuZzua+q2pItZUzO6sdqygXU/xESkDpKW/+jPqHhMyTxS7freRgF4dg0/2oH2m17Xy+JZ2+6cUa86NjdkPnUu91xgYJWGq/vb1ROowdsdSubibShmqbK+c; _sp_id.8a05=77dc4ebd-0c0f-4a88-96af-9bba75d34b2b.1670050896.0.1670050896..52a9aa0f-909d-4d57-91f3-9da897ee16b3; cookiePolicyMarketing=accept; cookiePolicyAnalytics=accept; _wchtbl_uid=ca9c3e0f-293f-4f0f-9d95-f2e2c961cc57; _wchtbl_sid=db3bfd0f-db80-4e35-9eac-8fdc5f4864fe; IR_gbd=headspace.com; IR_13686=1670050894553%7C2958222%7C1670050894553%7C%7C; lang=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 760
date: Fri, 02 Dec 2022 18:16:03 GMT
last-modified: Wed, 30 Nov 2022 19:31:11 GMT
etag: "1e426763457d7f6c7fbf1705777ebf80"
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000,public,immutable
x-amz-version-id: GDEyNLTcstxsIgMG.ZEDg2m9gpVllQ1O
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 7tKizC_QOaKSeVDlEgEBr1sP-QJoyRbcwust_8aJ4ZFbJ7kcUZ7I4A==
age: 45935
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
X-Firefox-Spdy: h2
jssdks.mparticle.com/v1/JS/BxazLKm8649buJbWBLWXt2Pw7bfin6qB/Forwarding
202 Accepted 0 B URL HTTP/2 jssdks.mparticle.com/v1/JS/BxazLKm8649buJbWBLWXt2Pw7bfin6qB/Forwarding
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /v1/JS/BxazLKm8649buJbWBLWXt2Pw7bfin6qB/Forwarding HTTP/1.1
Host: jssdks.mparticle.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 159
Origin: https://www.headspace.com
Connection: keep-alive
Referer: https://www.headspace.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 202 Accepted
server: Kestrel
access-control-allow-origin: *
x-origin-name: 7arPuRjnqGEhiMyprEtnLk--F_us1_origin
accept-ranges: bytes
date: Sat, 03 Dec 2022 07:01:37 GMT
via: 1.1 varnish
x-served-by: cache-bma1626-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1670050897.294450,VS0,VE19
content-length: 0
X-Firefox-Spdy: h2
downloads.ctfassets.net/v3n26e09qg2r/7h9Kfli2AA7YS3AVCdQKgO/13d2b650fb5ba6601665e37178fb5704/Slow_train.mp3
206 Partial Content 2.0 MB URL HTTP/2 downloads.ctfassets.net/v3n26e09qg2r/7h9Kfli2AA7YS3AVCdQKgO/13d2b650fb5ba6601665e37178fb5704/Slow_train.mp3
IP
File type MPEG ADTS, layer III, v1, 192 kbps, 48 kHz, JntStereo\012- data
Size 2.0 MB (1950623 bytes)
Hash 51ed58088381243c30dcca454e07cc34
1ea17df8689c84470c7e8f23ca8c4219b6b64014
e7b68c198fe424946731be7cd6c55eeffb53bca15a5cbddff900264abb59ef4e
GET /v3n26e09qg2r/7h9Kfli2AA7YS3AVCdQKgO/13d2b650fb5ba6601665e37178fb5704/Slow_train.mp3 HTTP/1.1
Host: downloads.ctfassets.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://www.headspace.com/
Sec-Fetch-Dest: audio
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 206 Partial Content
content-type: audio/mpeg
content-length: 64801280
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-max-age: 86400
x-amz-replication-status: COMPLETED
last-modified: Wed, 15 Apr 2020 23:06:41 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: c9nGq39sHWpGDEZOQCZQVFIKjVVB6osy
accept-ranges: bytes
server: AmazonS3
date: Sat, 03 Dec 2022 03:54:04 GMT
cache-control: max-age=2592000
etag: "7e1f66d09215f60b0476393325365541-13"
vary: Accept-Encoding
content-range: bytes 0-64801279/64801280
x-cache: Hit from cloudfront
via: 1.1 d4fd24ae65d4d2b97cfdea8d2f0c21a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: J6gFPUAVK9oXJqM7qvHHrcPGv0O3NoD4zZSdmFTeEtmkXVQSmhWGAQ==
age: 11252
X-Firefox-Spdy: h2
trkn.us/pixel/conv/ppt=11045;g=landing_page;gid=32736;ord=[uniqueid]?gtmcb=255178806;ip=91.90.42.154;cuidchk=1
200 OK 42 B URL HTTP/1.1 trkn.us/pixel/conv/ppt=11045;g=landing_page;gid=32736;ord=[uniqueid]?gtmcb=255178806;ip=91.90.42.154;cuidchk=1
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 9b5e8704c89f018cff215cb5ed3e0128
2a9fa3661b326c503e492b89cdd9130d12ead03d
b2c78c910f5ea29e3a9d223dabc203c055c8708b1fe7d83788b490638126db4d
GET /pixel/conv/ppt=11045;g=landing_page;gid=32736;ord=[uniqueid]?gtmcb=255178806;ip=91.90.42.154;cuidchk=1 HTTP/1.1
Host: trkn.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.headspace.com/
Connection: keep-alive
Cookie: barometric[cuid]=cuid_9bc2f51e-0cbf-446d-bab2-7e5b30a9cadf
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate
Content-Type: image/gif
Date: Sat, 03 Dec 2022 07:01:36 GMT
Expires: Sun, 9 Nov 1980 12:58:00 GMT
Last-Modified: Sun, 9 Nov 1980 12:59:00 GMT
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Pragma: no-cache
Server: Apache
Set-Cookie: barometric[cuid]=cuid_9bc2f51e-0cbf-446d-bab2-7e5b30a9cadf; expires=Sun, 03-Dec-2023 07:01:36 GMT; Max-Age=31536000; path=/; SameSite=None; Secure; domain=.trkn.us
barometric[idfa]=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; SameSite=None; Secure; domain=.trkn.us
X-Content-Type-Options: nosniff
Content-Length: 42
Connection: keep-alive
images.ctfassets.net/v3n26e09qg2r/46TLkq8jWvYg666xP7ceth/409e71dc720be462f4f5f02e97d417e3/Group__1_.svg
200 OK 536 B URL HTTP/2 images.ctfassets.net/v3n26e09qg2r/46TLkq8jWvYg666xP7ceth/409e71dc720be462f4f5f02e97d417e3/Group__1_.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text
Hash 7eb5bb50b1726baeb7dba60699ecf911
da3d66864908996931c9a6b11931c0ded1c008eb
4d0c7e3152e849084e1c701805e0025e22ccd852043b71bfa94477c38b3183e5
GET /v3n26e09qg2r/46TLkq8jWvYg666xP7ceth/409e71dc720be462f4f5f02e97d417e3/Group__1_.svg HTTP/1.1
Host: images.ctfassets.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.headspace.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 536
last-modified: Tue, 14 Jul 2020 15:18:25 GMT
server: Contentful Images API
access-control-allow-origin: *
date: Sat, 03 Dec 2022 07:01:37 GMT
cache-control: max-age=31536000
etag: "7eb5bb50b1726baeb7dba60699ecf911"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 2iDh9ULu3chCHD98QzX_LgCMIbvK5Ro_gzuMc7eMosCFPqimGcuauQ==
age: 6887
X-Firefox-Spdy: h2
jssdks.mparticle.com/v1/JS/BxazLKm8649buJbWBLWXt2Pw7bfin6qB/Forwarding
202 Accepted 0 B URL HTTP/2 jssdks.mparticle.com/v1/JS/BxazLKm8649buJbWBLWXt2Pw7bfin6qB/Forwarding
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /v1/JS/BxazLKm8649buJbWBLWXt2Pw7bfin6qB/Forwarding HTTP/1.1
Host: jssdks.mparticle.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 319
Origin: https://www.headspace.com
Connection: keep-alive
Referer: https://www.headspace.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 202 Accepted
server: Kestrel
access-control-allow-origin: *
x-origin-name: 7arPuRjnqGEhiMyprEtnLk--F_us1_origin
accept-ranges: bytes
date: Sat, 03 Dec 2022 07:01:37 GMT
via: 1.1 varnish
x-served-by: cache-bma1626-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1670050898.620800,VS0,VE19
content-length: 0
X-Firefox-Spdy: h2
jssdks.mparticle.com/v1/JS/BxazLKm8649buJbWBLWXt2Pw7bfin6qB/Forwarding
202 Accepted 0 B URL HTTP/2 jssdks.mparticle.com/v1/JS/BxazLKm8649buJbWBLWXt2Pw7bfin6qB/Forwarding
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /v1/JS/BxazLKm8649buJbWBLWXt2Pw7bfin6qB/Forwarding HTTP/1.1
Host: jssdks.mparticle.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 319
Origin: https://www.headspace.com
Connection: keep-alive
Referer: https://www.headspace.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 202 Accepted
server: Kestrel
access-control-allow-origin: *
x-origin-name: 7arPuRjnqGEhiMyprEtnLk--F_us1_origin
accept-ranges: bytes
date: Sat, 03 Dec 2022 07:01:37 GMT
via: 1.1 varnish
x-served-by: cache-bma1626-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1670050898.621181,VS0,VE19
content-length: 0
X-Firefox-Spdy: h2
jssdks.mparticle.com/v1/JS/BxazLKm8649buJbWBLWXt2Pw7bfin6qB/Forwarding
202 Accepted 0 B URL HTTP/2 jssdks.mparticle.com/v1/JS/BxazLKm8649buJbWBLWXt2Pw7bfin6qB/Forwarding
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /v1/JS/BxazLKm8649buJbWBLWXt2Pw7bfin6qB/Forwarding HTTP/1.1
Host: jssdks.mparticle.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 319
Origin: https://www.headspace.com
Connection: keep-alive
Referer: https://www.headspace.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 202 Accepted
server: Kestrel
access-control-allow-origin: *
x-origin-name: 7arPuRjnqGEhiMyprEtnLk--F_us1_origin
accept-ranges: bytes
date: Sat, 03 Dec 2022 07:01:37 GMT
via: 1.1 varnish
x-served-by: cache-bma1626-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1670050898.622954,VS0,VE76
content-length: 0
X-Firefox-Spdy: h2
images.ctfassets.net/v3n26e09qg2r/D8CCJ8Fhd2FgpWScN5no4/5d9b7e41eab36b25e9939deb86753625/fa-solid_users.svg
200 OK 61 kB URL HTTP/2 images.ctfassets.net/v3n26e09qg2r/D8CCJ8Fhd2FgpWScN5no4/5d9b7e41eab36b25e9939deb86753625/fa-solid_users.svg
IP
Hash 6c5e53ca980650ea2f94598162d237de
3c595e165695ee53a494c208b4747814e7d6359e
21e8df8630af1c31555da1fa7c440aee35d6487ca1a50e6f5ace68dc2e11ce05
GET /v3n26e09qg2r/D8CCJ8Fhd2FgpWScN5no4/5d9b7e41eab36b25e9939deb86753625/fa-solid_users.svg HTTP/1.1
Host: images.ctfassets.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.headspace.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
last-modified: Tue, 14 Jul 2020 15:18:53 GMT
server: Contentful Images API
access-control-allow-origin: *
content-encoding: gzip
date: Sat, 03 Dec 2022 07:01:37 GMT
cache-control: max-age=31536000
etag: W/"8212772c2a69d1c23f93a420f8faa0b7"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: JAwGBzEGN7mikh7EBY5P-o8vuJjmitJvXdQKsdiRSIVruXHHeFAPtA==
age: 15820
X-Firefox-Spdy: h2
api.prod.headspace.com/subscription/vouchers/B2C14DANNUAL2022
200 OK 330 kB URL HTTP/2 api.prod.headspace.com/subscription/vouchers/B2C14DANNUAL2022
IP
Size 330 kB (330217 bytes)
Hash 9365600a28e6db709fe80bba52b97972
f79220c4cba5ddc393c19069c0fd82c092518a57
22b5010b07ba500d705d6265f092e1ec92e546ff373edc40abc429827b54d3d8
GET /subscription/vouchers/B2C14DANNUAL2022 HTTP/1.1
Host: api.prod.headspace.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.headspace.com
Connection: keep-alive
Referer: https://www.headspace.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
date: Sat, 03 Dec 2022 07:01:38 GMT
cache-control: no-cache
content-encoding: gzip
server: envoy
x-envoy-upstream-service-time: 12
x-cache: Miss from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: X8YjFzm-bAA0m0wxu9JBUzka133SATYdzn6PHgsHuNfy8IXg9AwHgQ==
access-control-allow-credentials: true
access-control-allow-origin: https://www.headspace.com
vary: origin,accept-encoding, Origin
access-control-expose-headers: Authorization,Server-Authorization,tags,WWW-Authenticate
X-Firefox-Spdy: h2
cdn.amplitude.com/libs/amplitude-7.2.1-min.gz.js
200 OK 19 kB URL HTTP/2 cdn.amplitude.com/libs/amplitude-7.2.1-min.gz.js
IP
File type ASCII text, with very long lines (60877)
Hash e7ee6bc7f428f90fb1b1ed0e94b9f835
12a8cedc4a363af306b438111de73bc4d8b399d7
4bdadec687b990a491b8a797c8fbfbea6e30b2a28bda402760262bbfc982a3af
GET /libs/amplitude-7.2.1-min.gz.js HTTP/1.1
Host: cdn.amplitude.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.headspace.com
Connection: keep-alive
Referer: https://www.headspace.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
content-length: 19222
date: Thu, 10 Nov 2022 01:39:32 GMT
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-max-age: 3000
last-modified: Tue, 22 Sep 2020 19:51:25 GMT
etag: "e7ee6bc7f428f90fb1b1ed0e94b9f835"
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000
content-encoding: gzip
x-amz-version-id: rtLe8nVXDx8sL7XBGT5sDlFBE.TwGFEn
accept-ranges: bytes
server: AmazonS3
vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method
x-cache: Hit from cloudfront
via: 1.1 b053873243f91b1bb6dc406ce0c67db4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: XI2VY5Ds8qCv7Ls1BziRI0cCutwsYfssGFfmb2LxHfHlm9sSTd8NEA==
age: 2006527
X-Firefox-Spdy: h2
api.prod.headspace.com/subscription/vouchers/B2C14DANNUAL2022
200 OK 23 kB URL HTTP/2 api.prod.headspace.com/subscription/vouchers/B2C14DANNUAL2022
IP
File type JSON data\012- , ASCII text, with very long lines (2646)
Hash 8faefd6823e97bef728db2de2d427241
f790884efa3bc5622437e10ffc5c76d702bf843a
9fcd602546928c0000b5ae6dd20c85fcbd5ae6f2c697468ad1e2c536ec1398a4
GET /subscription/vouchers/B2C14DANNUAL2022 HTTP/1.1
Host: api.prod.headspace.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.headspace.com
Connection: keep-alive
Referer: https://www.headspace.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
date: Sat, 03 Dec 2022 07:01:38 GMT
cache-control: no-cache
content-encoding: gzip
server: envoy
x-envoy-upstream-service-time: 13
x-cache: Miss from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: S2oHm8v9kEk93V5S-6EQW-2Rr9sdyisggYU_cIN5rDelYsEf8KGJLQ==
access-control-allow-credentials: true
access-control-allow-origin: https://www.headspace.com
vary: origin,accept-encoding, Origin
access-control-expose-headers: Authorization,Server-Authorization,tags,WWW-Authenticate
X-Firefox-Spdy: h2
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1325)
Hash 47e6f374ca946fddd5b59871b325736c
baa9282efc8785e84d247c3bff518eaa45f101c4
16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.headspace.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Sat, 03 Dec 2022 06:41:08 GMT
expires: Sat, 03 Dec 2022 08:41:08 GMT
cache-control: public, max-age=7200
age: 1230
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.headspace.com/marketing-assets/6898-e6d6f46deacf9ad58e19.js
200 OK 76 kB URL HTTP/2 www.headspace.com/marketing-assets/6898-e6d6f46deacf9ad58e19.js
IP
File type ASCII text, with very long lines (62951)
Hash 950defb5cc4567bfc49e679ff48a2a99
d1e145707573c04461883f49d0a335bc197c565f
d13a4c52a45f5de586cf85183c5243b03a9a0ceaeb68a8f2c9e2f0d68b114177
GET /marketing-assets/6898-e6d6f46deacf9ad58e19.js HTTP/1.1
Host: www.headspace.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.headspace.com/
Cookie: _gcl_au=1.1.1610401417.1670050894; mprtcl-v4_B0C8D5EC={'gs':{'ie':1|'dt':'BxazLKm8649buJbWBLWXt2Pw7bfin6qB'|'cgid':'88a76943-0456-4428-b469-d71fc3683b9b'|'das':'a708f74e-c53f-40a4-829d-5b90c22adf44'|'csm':'WyI3Mzk0NjQ4MDAwNzMxNDgzNDciXQ=='|'sid':'C3F8AB41-0194-4ADE-89D0-1150D7EF9D55'|'les':1670050895525|'ssd':1670050894101}|'l':0|'739464800073148347':{'fst':1670050894527}|'cu':'739464800073148347'}; countryCode=NO; d-a8e6=192eb480-0436-4a39-ad94-533ddb9df0a7; s-9da4=ae7d1b39-9a02-484b-99bc-e04b6424bc78; AWSALB=B6DGFeMuZzua+q2pItZUzO6sdqygXU/xESkDpKW/+jPqHhMyTxS7freRgF4dg0/2oH2m17Xy+JZ2+6cUa86NjdkPnUu91xgYJWGq/vb1ROowdsdSubibShmqbK+c; AWSALBCORS=B6DGFeMuZzua+q2pItZUzO6sdqygXU/xESkDpKW/+jPqHhMyTxS7freRgF4dg0/2oH2m17Xy+JZ2+6cUa86NjdkPnUu91xgYJWGq/vb1ROowdsdSubibShmqbK+c; _sp_id.8a05=77dc4ebd-0c0f-4a88-96af-9bba75d34b2b.1670050896.0.1670050896..52a9aa0f-909d-4d57-91f3-9da897ee16b3; cookiePolicyMarketing=accept; cookiePolicyAnalytics=accept; _wchtbl_uid=ca9c3e0f-293f-4f0f-9d95-f2e2c961cc57; _wchtbl_sid=db3bfd0f-db80-4e35-9eac-8fdc5f4864fe; IR_gbd=headspace.com; IR_13686=1670050894553%7C2958222%7C1670050894553%7C%7C; lang=en; previousUrlPath=null
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Fri, 02 Dec 2022 18:15:43 GMT
last-modified: Wed, 30 Nov 2022 19:31:12 GMT
etag: W/"bd1509a5c8a45eac07681d1f61bcfcd5"
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000,public,immutable
x-amz-version-id: hqybm5kjTvoHLheL7SARTJ4EFnDvzBYE
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: yzgMwccol7wrwJvprU08BFXfqhfNGqGMQHz4f2qHzjGKsKDHpB6XRA==
age: 45954
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
X-Firefox-Spdy: h2
ocsp.globalsign.com/gsgccr3dvtlsca2020
200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsgccr3dvtlsca2020
IP
Hash e625a518fa274fa4849a12768ffc123f
4722f2d3a7f059a818302fe8b10166a58ddc3c98
659cdbfcbc8f96b7d6b83eed80c3d4633058b18e7bc3d02db1f96d619d5cf2a6
POST /gsgccr3dvtlsca2020 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 03 Dec 2022 07:01:38 GMT
Content-Type: application/ocsp-response
Content-Length: 1414
Connection: keep-alive
Expires: Wed, 07 Dec 2022 04:18:09 GMT
ETag: "4722f2d3a7f059a818302fe8b10166a58ddc3c98"
Last-Modified: Sat, 03 Dec 2022 04:18:10 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 3000
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 773a6ea2afb3b50f-OSL
api.prod.headspace.com/subscription/vouchers/B2C14DANNUAL2022
200 OK 1.1 kB URL HTTP/2 api.prod.headspace.com/subscription/vouchers/B2C14DANNUAL2022
IP
Hash 790832460317c4a79311d809e4a354df
3c05ceb560b6a1394fdca5e521bd2cddcadedee7
e9c37ea9bc00ada5ff273bd9d2227666f27a8c96117762692506bbcbb1914709
GET /subscription/vouchers/B2C14DANNUAL2022 HTTP/1.1
Host: api.prod.headspace.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.headspace.com
Connection: keep-alive
Referer: https://www.headspace.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
content-type: application/json; charset=utf-8
date: Sat, 03 Dec 2022 07:01:37 GMT
cache-control: no-cache
content-encoding: gzip
server: envoy
x-envoy-upstream-service-time: 24
x-cache: Miss from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: X0YypOxdGpaZplo8g3ETpCPkbonuT0jRnhq5qwOo3h_mJPaDla5feQ==
access-control-allow-credentials: true
access-control-allow-origin: https://www.headspace.com
vary: origin,accept-encoding, Origin
X-Firefox-Spdy: h2
api.prod.headspace.com/subscription/vouchers/B2C7DMONTHLY
200 OK 601 B URL HTTP/2 api.prod.headspace.com/subscription/vouchers/B2C7DMONTHLY
IP
Hash 8750213e5216517b446348673bffa5a3
74eef69b587ac2c5fa4f3b8c0ff087b0ab97a83d
48a5ebd0c9106e2ac1aa17231133ce21d442c6566f795104c075bae52846d90c
GET /subscription/vouchers/B2C7DMONTHLY HTTP/1.1
Host: api.prod.headspace.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.headspace.com
Connection: keep-alive
Referer: https://www.headspace.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
date: Sat, 03 Dec 2022 07:01:38 GMT
cache-control: no-cache
content-encoding: gzip
server: envoy
x-envoy-upstream-service-time: 12
x-cache: Miss from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ac0GZdRWsqyHyxM2uamzj-_bvdV-XypMfZSR-0ekE4-Lo2qRiVWkGw==
access-control-allow-credentials: true
access-control-allow-origin: https://www.headspace.com
vary: origin,accept-encoding, Origin
access-control-expose-headers: Authorization,Server-Authorization,tags,WWW-Authenticate
X-Firefox-Spdy: h2
a11673470095.cdn.optimizely.com/client_storage/a11673470095.html
200 OK 795 B URL HTTP/2 a11673470095.cdn.optimizely.com/client_storage/a11673470095.html
IP
File type HTML document, ASCII text, with very long lines (1371)
Hash e95d3eafc37ee2d0b8b043f1ef5510d4
77f957d104454af5651a516a7a63b510f767680f
83062b34f1c384460a7015fe45a271485b142860684bf835a57c2ce614ff4ea5
GET /client_storage/a11673470095.html HTTP/1.1
Host: a11673470095.cdn.optimizely.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.headspace.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: u6a3A8iLOcTWJtC0grXCHIuDU+Nev1OsThQ2CilpfZovcnIsi58csFrUOqZtJlYiCa6lvjn2IRY=
x-amz-request-id: 0M49T7NCK6RC7XEY
x-amz-replication-status: COMPLETED
last-modified: Wed, 06 Jul 2022 23:17:45 GMT
etag: "e95d3eafc37ee2d0b8b043f1ef5510d4"
x-amz-server-side-encryption: AES256
x-amz-meta-pci_enabled: False
content-encoding: gzip
x-amz-version-id: mXdZmS5tSWCODVMlfT5cJdb7DoAopoZ.
accept-ranges: bytes
content-type: text/html; charset=utf-8
server: AmazonS3
content-length: 795
vary: Accept-Encoding
cache-control: max-age=120
date: Sat, 03 Dec 2022 07:01:38 GMT
server-timing: cdn;desc="AkamaiION";dur=0,rtt;desc="2";dur=0,cdnip;desc="104.110.8.48";dur=0,cdnmap;desc="a4728.x.akamaiedge.net";dur=0,proto;desc="h2";dur=0
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
ocsp.comodoca.com/
200 OK 471 B IP
Hash f15e471c24424484b2bebcd675bd294c
78fbec83f71c32557a78b0e09df2888e77155eed
955e56f58c5c1d1fb224cc75775957a49e5bc8328d22219031d9bbc1191f8af0
POST / HTTP/1.1
Host: ocsp.comodoca.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 03 Dec 2022 07:01:38 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Wed, 30 Nov 2022 03:38:20 GMT
Expires: Wed, 07 Dec 2022 03:38:19 GMT
Etag: "78fbec83f71c32557a78b0e09df2888e77155eed"
Cache-Control: max-age=602536,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: HIT
Age: 816
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 773a6ea51dbab517-OSL
app.link/_r?sdk=web2.71.0&branch_key=key_live_mcdUiF9uYBpZ5OEBEK0jqoflzzlbD4dt&callback=branch_callback__0
200 OK 91 B URL HTTP/2 app.link/_r?sdk=web2.71.0&branch_key=key_live_mcdUiF9uYBpZ5OEBEK0jqoflzzlbD4dt&callback=branch_callback__0
IP
File type ASCII text, with no line terminators
Hash ea9963a2c2792a48158de3cb31ea2b45
9956e9de2f4544f519381210b1dce200fcff1021
9d36bdc67f41d9b9cc63ea14938eccabc7507c965cea877d5245e89f414fa212
GET /_r?sdk=web2.71.0&branch_key=key_live_mcdUiF9uYBpZ5OEBEK0jqoflzzlbD4dt&callback=branch_callback__0 HTTP/1.1
Host: app.link
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.headspace.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
content-length: 91
server: openresty
date: Sat, 03 Dec 2022 07:01:38 GMT
set-cookie: _s=1TuzEFVU6mU6%2F2AShBBGgnxPTWtt8u1sBGbUCa86bIDRXxyJJTidVUOtAvMbNWKA; Max-Age=31536000; Domain=.app.link; Path=/; Expires=Sun, 03 Dec 2023 07:01:38 GMT; Secure
x-content-type-options: nosniff
etag: W/"5b-mVbp3i9FRPUZOBIQsdziAPz/ECE"
strict-transport-security: max-age=31536000; includeSubDomains
x-cache: Miss from cloudfront
via: 1.1 784cb0c259a6d79800d037bda4e7de86.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 8Bgn4IDS-UJcoFtvhq5lcpH7LIdx7-0WfNnukjS7t-FeHZa35lrDCg==
X-Firefox-Spdy: h2
api2.branch.io/v1/open
200 OK 275 B IP
File type JSON data\012- , ASCII text, with no line terminators
Hash f174e06f994b90f0fb5f1a6d9bab375d
f2241ca24d35f91e1cabf2fdb4496ccc89fcffce
1534a31249b32669636d35820299576b6880b0ee2b7adf8bdd4eebf46c358e9c
POST /v1/open HTTP/1.1
Host: api2.branch.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 208
Origin: https://www.headspace.com
Connection: keep-alive
Referer: https://www.headspace.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/json
content-length: 275
access-control-allow-origin: *
cache-control: no-cache
date: Sat, 03 Dec 2022 07:01:38 GMT
strict-transport-security: max-age=31536000; includeSubDomains
x-branch-request-id: 03c6fb9ffe7f4fd284cab2e57d806984-2022120307
x-cache: Miss from cloudfront
via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: scXlUpdRETyQii6Jlqy6LBIdc6-tBg505pVd2ionkcq4RIGeB_G2xA==
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash aca1a788de69de62f0698dd7d528ddab
bca15ef1fe19138fbd0749a8c55bc0169b1c1b93
b3ea2e9fc46bc5b3b1c00d0f1c641bb941343dced072460ffc2cd5b63a51e2d2
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 03 Dec 2022 07:01:39 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sat, 03 Dec 2022 05:55:46 GMT
Expires: Sat, 10 Dec 2022 05:55:45 GMT
Etag: "bca15ef1fe19138fbd0749a8c55bc0169b1c1b93"
Cache-Control: max-age=600246,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 773a6ea5d9cd0b02-OSL
api2.amplitude.com/
200 OK 7 B IP
File type ASCII text, with no line terminators
Hash 260ca9dd8a4577fc00b7bd5810298076
53a5687cb26dc41f2ab4033e97e13adefd3740d6
aee408847d35e44e99430f0979c3357b85fe8dbb4535a494301198adbee85f27
POST / HTTP/1.1
Host: api2.amplitude.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
Content-Length: 1193
Origin: https://www.headspace.com
Connection: keep-alive
Referer: https://www.headspace.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 03 Dec 2022 07:01:38 GMT
content-type: text/html;charset=utf-8
content-length: 7
access-control-allow-origin: *
access-control-allow-methods: GET, POST
trace-id: Root=1-638af452-0e29fc9b7030e2555a09ad0b
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
api.prod.headspace.com/subscription/vouchers/B2CGIFT12M
200 OK 951 B URL HTTP/2 api.prod.headspace.com/subscription/vouchers/B2CGIFT12M
IP
Hash 1e973e6edf3e40b2d787296ea460445f
92f7a8271f68d4b9ea09626507bab9fc69f276ca
da27b68cff3bd3f1d91d63f3e18a6cf1ba55ad33b63b81b8eabf221c9d450acc
GET /subscription/vouchers/B2CGIFT12M HTTP/1.1
Host: api.prod.headspace.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.headspace.com
Connection: keep-alive
Referer: https://www.headspace.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
date: Sat, 03 Dec 2022 07:01:37 GMT
cache-control: no-cache
content-encoding: gzip
server: envoy
x-envoy-upstream-service-time: 12
x-cache: Miss from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 09nYwt04NEuVoQXq_XCY4Rryi_Az0nqt-Hd3CS0djN6EG1QpIJervQ==
access-control-allow-credentials: true
access-control-allow-origin: https://www.headspace.com
vary: origin,accept-encoding, Origin
X-Firefox-Spdy: h2
www.ojrq.net/p/?return=&cid=13686&tpsync=no
200 OK 50 B URL HTTP/2 www.ojrq.net/p/?return=&cid=13686&tpsync=no
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 7db7a843f18dadb40f7947564560596c
4b966c390f5784fad88c2c8359a4715d14b8e815
ec34cd386427fe6deacf99f4fdbeea4b1d1ed25f505411650d7ceaa843a7fc63
GET /p/?return=&cid=13686&tpsync=no HTTP/1.1
Host: www.ojrq.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.headspace.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
expires: Sat, 03 Dec 2022 07:01:39 GMT
p3p: policyref="/w3c/p3p.xml", CP="ALL BUS LEG DSP COR ADM CUR DEV PSA OUR NAV INT"
set-cookie: brwsr=557b9c0d-72d8-11ed-9ec9-d90eb3934b0f; Domain=.ojrq.net; Path=/; Secure; Max-Age=62208000; Expires=Fri, 22 Nov 2024 07:01:39 GMT; HttpOnly; SameSite=None
content-type: image/gif
content-length: 50
date: Sat, 03 Dec 2022 07:01:39 GMT
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-62943083-4&cid=514635458.1670050896&jid=256792491&gjid=1288191365&_gid=444547714.1670050896&_u=IEBAAAAAAAAAAC~&z=723510994
200 OK 1 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-62943083-4&cid=514635458.1670050896&jid=256792491&gjid=1288191365&_gid=444547714.1670050896&_u=IEBAAAAAAAAAAC~&z=723510994
IP
File type very short file (no magic)
Hash c4ca4238a0b923820dcc509a6f75849b
356a192b7913b04c54574d18c28d46e6395428ab
6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-62943083-4&cid=514635458.1670050896&jid=256792491&gjid=1288191365&_gid=444547714.1670050896&_u=IEBAAAAAAAAAAC~&z=723510994 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://www.headspace.com
Connection: keep-alive
Referer: https://www.headspace.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://www.headspace.com
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Sat, 03 Dec 2022 07:01:39 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 1
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 8b7101d867bdd5f43846f0c13219f59a
21757d04e644b8d2fd00a00b8bc0cfa24e925c81
8e39f1d39866c28718700ee5234e070a8fda40bdde406b0232bbe0749f131fea
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=167729
Date: Sat, 03 Dec 2022 07:01:39 GMT
Etag: "638ace3d-1d7"
Expires: Mon, 05 Dec 2022 05:37:08 GMT
Last-Modified: Sat, 03 Dec 2022 04:19:09 GMT
Server: ECS (nyb/1D18)
X-Cache: Miss from cloudfront
Via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: IaSDlCx3qjV6UFhAJLRizdntQ-AUSWa3DuGd5LpEpJgUSKtl3ZyVsw==
Age: 4679
www.headspace.com/marketing-assets/webpack-runtime-b714c781bc0eaec00bb8.js
200 OK 0 B URL HTTP/2 www.headspace.com/marketing-assets/webpack-runtime-b714c781bc0eaec00bb8.js
IP
GET /marketing-assets/webpack-runtime-b714c781bc0eaec00bb8.js HTTP/1.1
Host: www.headspace.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.headspace.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Fri, 02 Dec 2022 18:15:39 GMT
last-modified: Wed, 30 Nov 2022 19:31:14 GMT
etag: W/"3f69268cc3b51c6fa7edd8539faa927c"
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000,public,immutable
x-amz-version-id: nSy2G_.6Xcjh.GatC7u8Uh12e15onEoL
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: sx6ioaD2utGgVPKV2IF_DuY4xw0Xfe-xXTPtf4b5-EdVXUhEySdzSA==
age: 45956
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
X-Firefox-Spdy: h2
api.prod.headspace.com/subscription/vouchers/B2CGIFT12M
200 OK 0 B URL HTTP/2 api.prod.headspace.com/subscription/vouchers/B2CGIFT12M
IP
GET /subscription/vouchers/B2CGIFT12M HTTP/1.1
Host: api.prod.headspace.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.headspace.com
Connection: keep-alive
Referer: https://www.headspace.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
date: Sat, 03 Dec 2022 07:01:38 GMT
cache-control: no-cache
content-encoding: gzip
server: envoy
x-envoy-upstream-service-time: 14
x-cache: Miss from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 6WVZ8wh0pEthLJI1YL4L6zhFLD14_7VWm-uhuCeMXue_Gc1OfCMhfA==
access-control-allow-credentials: true
access-control-allow-origin: https://www.headspace.com
vary: origin,accept-encoding, Origin
access-control-expose-headers: Authorization,Server-Authorization,tags,WWW-Authenticate
X-Firefox-Spdy: h2
www.headspace.com/marketing-assets/view-components-TextAndMediaList-TextAndMediaList-dbd99d3b1114c1149de5.js
200 OK 0 B URL HTTP/2 www.headspace.com/marketing-assets/view-components-TextAndMediaList-TextAndMediaList-dbd99d3b1114c1149de5.js
IP
GET /marketing-assets/view-components-TextAndMediaList-TextAndMediaList-dbd99d3b1114c1149de5.js HTTP/1.1
Host: www.headspace.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.headspace.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Fri, 02 Dec 2022 18:15:42 GMT
last-modified: Wed, 30 Nov 2022 19:31:14 GMT
etag: W/"c2a3bb4c14af0d1e822f5e9ee78eaf2b"
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000,public,immutable
x-amz-version-id: y4w95r_nDev352axs2OFfMVTeCfIj93S
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: yeUmI6cpy6cjnaiacOd7GtrOTv8ZaJFBxXfxW4vtBAgA3LauVLV2Tg==
age: 45953
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.headspace.com/marketing-assets/9e82d048-a8dad296e08ef551cb2d.js
200 OK 0 B URL HTTP/2 www.headspace.com/marketing-assets/9e82d048-a8dad296e08ef551cb2d.js
IP
GET /marketing-assets/9e82d048-a8dad296e08ef551cb2d.js HTTP/1.1
Host: www.headspace.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.headspace.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Fri, 02 Dec 2022 18:15:39 GMT
last-modified: Wed, 30 Nov 2022 19:31:12 GMT
etag: W/"f1bbf16e64f6eba8b7feff55d8c27021"
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000,public,immutable
x-amz-version-id: FaXmDR2EiLuLeK3sO_18XJJ6VvRiozd8
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: TMElkJltO8kdF1Di3x5MH1kE3nxIAIT_L_SFjPIDHfWywJgRNsOHGw==
age: 45956
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.headspace.com/marketing-assets/app-1233d6a645219e740a13.js
200 OK 0 B URL HTTP/2 www.headspace.com/marketing-assets/app-1233d6a645219e740a13.js
IP
GET /marketing-assets/app-1233d6a645219e740a13.js HTTP/1.1
Host: www.headspace.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.headspace.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Fri, 02 Dec 2022 18:15:39 GMT
last-modified: Wed, 30 Nov 2022 19:31:12 GMT
etag: W/"e87197d6a0df9878aa60fe391d8fd8f7"
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000,public,immutable
x-amz-version-id: Jo_2FSTJhHUo_BHpw5aXm9StBcI_ZwOv
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: i5oA61mSJWeehPX74Eam7MgxBIaVlwykKXy9dRI9iaWzmc1nreDchA==
age: 45956
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
X-Firefox-Spdy: h2
api.prod.headspace.com/subscription/vouchers/B2CGIFT12M
200 OK 0 B URL HTTP/2 api.prod.headspace.com/subscription/vouchers/B2CGIFT12M
IP
GET /subscription/vouchers/B2CGIFT12M HTTP/1.1
Host: api.prod.headspace.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.headspace.com
Connection: keep-alive
Referer: https://www.headspace.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
date: Sat, 03 Dec 2022 07:01:38 GMT
cache-control: no-cache
content-encoding: gzip
server: envoy
x-envoy-upstream-service-time: 19
x-cache: Miss from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Npa9taJzHpDtZKM09SqsauOZxIfnu7KMgXct0UPpkrlzvIPyjhf62A==
access-control-allow-credentials: true
access-control-allow-origin: https://www.headspace.com
vary: origin,accept-encoding, Origin
access-control-expose-headers: Authorization,Server-Authorization,tags,WWW-Authenticate
X-Firefox-Spdy: h2
api.prod.headspace.com/subscription/vouchers/B2CGIFT12M
200 OK 0 B URL HTTP/2 api.prod.headspace.com/subscription/vouchers/B2CGIFT12M
IP
GET /subscription/vouchers/B2CGIFT12M HTTP/1.1
Host: api.prod.headspace.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.headspace.com
Connection: keep-alive
Referer: https://www.headspace.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
content-type: application/json; charset=utf-8
date: Sat, 03 Dec 2022 07:01:37 GMT
cache-control: no-cache
content-encoding: gzip
server: envoy
x-envoy-upstream-service-time: 33
x-cache: Miss from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: DiZn86zkwlmsTlpWW9gqK1RBbYMrEyU36HoQWQnIZ96X2U2bzOalng==
access-control-allow-credentials: true
access-control-allow-origin: https://www.headspace.com
vary: origin,accept-encoding, Origin
access-control-expose-headers: Authorization,Server-Authorization,tags,WWW-Authenticate
X-Firefox-Spdy: h2
api.prod.headspace.com/subscription/vouchers/B2C14DANNUAL2022
200 OK 0 B URL HTTP/2 api.prod.headspace.com/subscription/vouchers/B2C14DANNUAL2022
IP
GET /subscription/vouchers/B2C14DANNUAL2022 HTTP/1.1
Host: api.prod.headspace.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.headspace.com
Connection: keep-alive
Referer: https://www.headspace.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
content-type: application/json; charset=utf-8
date: Sat, 03 Dec 2022 07:01:37 GMT
cache-control: no-cache
content-encoding: gzip
server: envoy
x-envoy-upstream-service-time: 33
x-cache: Miss from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: IA_E92CGsohBwy_U5TKTESJL-fCICIYR4TlLf_SQnRS19G4t5JFDYQ==
access-control-allow-credentials: true
access-control-allow-origin: https://www.headspace.com
vary: origin,accept-encoding, Origin
access-control-expose-headers: Authorization,Server-Authorization,tags,WWW-Authenticate
X-Firefox-Spdy: h2
www.headspace.com/marketing-assets/commons-831dafa3bb5db6566aaa.js
200 OK 0 B URL HTTP/2 www.headspace.com/marketing-assets/commons-831dafa3bb5db6566aaa.js
IP
GET /marketing-assets/commons-831dafa3bb5db6566aaa.js HTTP/1.1
Host: www.headspace.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.headspace.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Fri, 02 Dec 2022 18:15:38 GMT
last-modified: Wed, 30 Nov 2022 19:31:12 GMT
etag: W/"bedf00fc41fcaafe0af88af0b6450468"
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000,public,immutable
x-amz-version-id: O5df8w3flgDe2iicmhOdFfOnRGpJUMy1
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: U-SvGy_vvBkwls-8e2r49Etnv6Q6RDJie5JvHobd0RUycJ2IsE9rUA==
age: 45957
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.headspace.com/marketing-assets/view-components-SiteHeader-SiteHeader-c07e151df9d2e8e873be.js
200 OK 0 B URL HTTP/2 www.headspace.com/marketing-assets/view-components-SiteHeader-SiteHeader-c07e151df9d2e8e873be.js
IP
GET /marketing-assets/view-components-SiteHeader-SiteHeader-c07e151df9d2e8e873be.js HTTP/1.1
Host: www.headspace.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.headspace.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Fri, 02 Dec 2022 18:15:38 GMT
last-modified: Wed, 30 Nov 2022 19:31:13 GMT
etag: W/"08104a28d6fd04445b0c73f6a0deeb92"
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000,public,immutable
x-amz-version-id: hH.NcYKx.bajAkW0XKxPMSLv6oV.pt_l
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Z-8zSkYwAZBJb-9M-hL-KShh_XCwAVV_KCy2RtVKa8h2CjTBw9xE5A==
age: 45957
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.headspace.com/marketing-assets/view-components-Statistic-Statistic-8f130150fded201721dd.js
200 OK 0 B URL HTTP/2 www.headspace.com/marketing-assets/view-components-Statistic-Statistic-8f130150fded201721dd.js
IP
GET /marketing-assets/view-components-Statistic-Statistic-8f130150fded201721dd.js HTTP/1.1
Host: www.headspace.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.headspace.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Fri, 02 Dec 2022 18:15:42 GMT
last-modified: Wed, 30 Nov 2022 19:31:14 GMT
etag: W/"d09a8d5971ece5ba388f1e55adbfff6b"
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000,public,immutable
x-amz-version-id: xEsPDpHFZSIesUCO1MvY3_yRBK2pk4xa
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: h8A2g2eJUtKo6I4tKQ-0I1zkSWuTO2NPDbPWuqrHXt16Mc_gMBjQgg==
age: 45953
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
X-Firefox-Spdy: h2
api.prod.headspace.com/subscription/vouchers/B2C7DMONTHLY
200 OK 0 B URL HTTP/2 api.prod.headspace.com/subscription/vouchers/B2C7DMONTHLY
IP
GET /subscription/vouchers/B2C7DMONTHLY HTTP/1.1
Host: api.prod.headspace.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.headspace.com
Connection: keep-alive
Referer: https://www.headspace.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
date: Sat, 03 Dec 2022 07:01:37 GMT
cache-control: no-cache
content-encoding: gzip
server: envoy
x-envoy-upstream-service-time: 19
x-cache: Miss from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Nh1pu4vO6sE2h5BtWXnBuimmpV8K4ksqXhth-AeVzC7OLMyVtWh-jQ==
access-control-allow-credentials: true
access-control-allow-origin: https://www.headspace.com
vary: origin,accept-encoding, Origin
X-Firefox-Spdy: h2
api.prod.headspace.com/subscription/vouchers/B2CGIFT12M
200 OK 0 B URL HTTP/2 api.prod.headspace.com/subscription/vouchers/B2CGIFT12M
IP
GET /subscription/vouchers/B2CGIFT12M HTTP/1.1
Host: api.prod.headspace.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.headspace.com
Connection: keep-alive
Referer: https://www.headspace.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
date: Sat, 03 Dec 2022 07:01:37 GMT
cache-control: no-cache
content-encoding: gzip
server: envoy
x-envoy-upstream-service-time: 19
x-cache: Miss from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: kuoUbxkzSi3ZUuOn6AY6P3qrINyVH0qGAcrpgnaOZX-PPvwfdKwKvw==
access-control-allow-credentials: true
access-control-allow-origin: https://www.headspace.com
vary: origin,accept-encoding, Origin
X-Firefox-Spdy: h2
images.ctfassets.net/v3n26e09qg2r/7dNdX76LZYMUkOSE4UUASa/748e5314e7add4aaf6a64d99fa9dae60/tabs_background_1.svg
200 OK 0 B URL HTTP/2 images.ctfassets.net/v3n26e09qg2r/7dNdX76LZYMUkOSE4UUASa/748e5314e7add4aaf6a64d99fa9dae60/tabs_background_1.svg
IP
GET /v3n26e09qg2r/7dNdX76LZYMUkOSE4UUASa/748e5314e7add4aaf6a64d99fa9dae60/tabs_background_1.svg HTTP/1.1
Host: images.ctfassets.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.headspace.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
last-modified: Thu, 26 Aug 2021 07:06:37 GMT
server: Contentful Images API
access-control-allow-origin: *
content-encoding: gzip
date: Sat, 03 Dec 2022 07:01:37 GMT
cache-control: max-age=31536000
etag: W/"f3b53b313cc0f4ade26856b1e16116fe"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: lXkK1-i5VthY8_e_46QN0sPrDd9HDzC5xPyfhF1emsiVxj-IhclJjQ==
age: 10562
X-Firefox-Spdy: h2
api.prod.headspace.com/subscription/vouchers/B2C14DANNUAL2022
200 OK 0 B URL HTTP/2 api.prod.headspace.com/subscription/vouchers/B2C14DANNUAL2022
IP
GET /subscription/vouchers/B2C14DANNUAL2022 HTTP/1.1
Host: api.prod.headspace.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.headspace.com
Connection: keep-alive
Referer: https://www.headspace.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
date: Sat, 03 Dec 2022 07:01:37 GMT
cache-control: no-cache
content-encoding: gzip
server: envoy
x-envoy-upstream-service-time: 25
x-cache: Miss from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: T1Dq_fW9x-qZV-c5i1SRzJqlUCTEHQ1Y3IhgLacz5dKb2eXW9s6RYw==
access-control-allow-credentials: true
access-control-allow-origin: https://www.headspace.com
vary: origin,accept-encoding, Origin
X-Firefox-Spdy: h2
www.headspace.com/marketing-assets/view-components-TrialSubscription-TrialSubscription-565325c76d100db99a0a.js
200 OK 0 B URL HTTP/2 www.headspace.com/marketing-assets/view-components-TrialSubscription-TrialSubscription-565325c76d100db99a0a.js
IP
GET /marketing-assets/view-components-TrialSubscription-TrialSubscription-565325c76d100db99a0a.js HTTP/1.1
Host: www.headspace.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.headspace.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Fri, 02 Dec 2022 18:15:42 GMT
last-modified: Wed, 30 Nov 2022 19:31:14 GMT
etag: W/"73695e9724f3c378530cfd010222809d"
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000,public,immutable
x-amz-version-id: Cm2mKeQsfeiQlxDhHTRc.15r3vL3LX0o
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: nhUbj_tTW87jXX-4hA4HaeVqG0qzVjg6Hnr1zU23JpzNv_k9yK6mhg==
age: 45953
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
X-Firefox-Spdy: h2
api.prod.headspace.com/subscription/vouchers/B2CGIFT12M
200 OK 0 B URL HTTP/2 api.prod.headspace.com/subscription/vouchers/B2CGIFT12M
IP
GET /subscription/vouchers/B2CGIFT12M HTTP/1.1
Host: api.prod.headspace.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.headspace.com
Connection: keep-alive
Referer: https://www.headspace.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
date: Sat, 03 Dec 2022 07:01:38 GMT
cache-control: no-cache
content-encoding: gzip
server: envoy
x-envoy-upstream-service-time: 19
x-cache: Miss from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: imsEZwSLCvQHtuvAXcnQWyJLxZ32qiy9YgWQQmsJQlrKoMMLyMq9ww==
access-control-allow-credentials: true
access-control-allow-origin: https://www.headspace.com
vary: origin,accept-encoding, Origin
access-control-expose-headers: Authorization,Server-Authorization,tags,WWW-Authenticate
X-Firefox-Spdy: h2
www.headspace.com/marketing-assets/framework-0b70c8776dab8e5c1c8d.js
200 OK 0 B URL HTTP/2 www.headspace.com/marketing-assets/framework-0b70c8776dab8e5c1c8d.js
IP
GET /marketing-assets/framework-0b70c8776dab8e5c1c8d.js HTTP/1.1
Host: www.headspace.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.headspace.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Fri, 02 Dec 2022 18:15:39 GMT
last-modified: Wed, 30 Nov 2022 19:31:12 GMT
etag: W/"26387cda5f4e81ccf3defa2909c5a745"
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000,public,immutable
x-amz-version-id: LBPy6t6OCjuZXxi5o4x6juuQNbJ4jjbd
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: oLFNMWehQSBmuN2Dm0HvGIes4Hnw12IzI05fVGlXxi-czqT3Cbk3Xw==
age: 45956
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
X-Firefox-Spdy: h2
api.prod.headspace.com/subscription/vouchers/B2C7DMONTHLY
200 OK 0 B URL HTTP/2 api.prod.headspace.com/subscription/vouchers/B2C7DMONTHLY
IP
GET /subscription/vouchers/B2C7DMONTHLY HTTP/1.1
Host: api.prod.headspace.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.headspace.com
Connection: keep-alive
Referer: https://www.headspace.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
content-type: application/json; charset=utf-8
date: Sat, 03 Dec 2022 07:01:37 GMT
cache-control: no-cache
content-encoding: gzip
server: envoy
x-envoy-upstream-service-time: 13
x-cache: Miss from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: sn38NsMTwX4WU2hZXNIbpsFUSkGC5ISOpaL8msvyZBJ5rfNEFVyH3Q==
access-control-allow-credentials: true
access-control-allow-origin: https://www.headspace.com
vary: origin,accept-encoding, Origin
access-control-expose-headers: Authorization,Server-Authorization,tags,WWW-Authenticate
X-Firefox-Spdy: h2
api.prod.headspace.com/subscription/vouchers/B2C14DANNUAL2022
200 OK 0 B URL HTTP/2 api.prod.headspace.com/subscription/vouchers/B2C14DANNUAL2022
IP
GET /subscription/vouchers/B2C14DANNUAL2022 HTTP/1.1
Host: api.prod.headspace.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.headspace.com
Connection: keep-alive
Referer: https://www.headspace.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
date: Sat, 03 Dec 2022 07:01:38 GMT
cache-control: no-cache
content-encoding: gzip
server: envoy
x-envoy-upstream-service-time: 17
x-cache: Miss from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: mujJqRhIFm-1-ZgmEu9X1f08E54jlLO6oMBFVWcMnY2vOq1XcwzBBw==
access-control-allow-credentials: true
access-control-allow-origin: https://www.headspace.com
vary: origin,accept-encoding, Origin
access-control-expose-headers: Authorization,Server-Authorization,tags,WWW-Authenticate
X-Firefox-Spdy: h2
api.prod.headspace.com/subscription/vouchers/B2C14DANNUAL2022
200 OK 0 B URL HTTP/2 api.prod.headspace.com/subscription/vouchers/B2C14DANNUAL2022
IP
GET /subscription/vouchers/B2C14DANNUAL2022 HTTP/1.1
Host: api.prod.headspace.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.headspace.com
Connection: keep-alive
Referer: https://www.headspace.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
date: Sat, 03 Dec 2022 07:01:38 GMT
cache-control: no-cache
content-encoding: gzip
server: envoy
x-envoy-upstream-service-time: 26
x-cache: Miss from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: cxRIp8hOGWJl_GSsXEW8qJevBA0LmsYRgbhkiFqZ6eIyQvPFk1d8Xg==
access-control-allow-credentials: true
access-control-allow-origin: https://www.headspace.com
vary: origin,accept-encoding, Origin
access-control-expose-headers: Authorization,Server-Authorization,tags,WWW-Authenticate
X-Firefox-Spdy: h2
www.headspace.com/marketing-assets/shared-ImageCard-ImageCard-e1bb953911ef013e62b0.js
200 OK 0 B URL HTTP/2 www.headspace.com/marketing-assets/shared-ImageCard-ImageCard-e1bb953911ef013e62b0.js
IP
GET /marketing-assets/shared-ImageCard-ImageCard-e1bb953911ef013e62b0.js HTTP/1.1
Host: www.headspace.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.headspace.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Fri, 02 Dec 2022 18:15:42 GMT
last-modified: Wed, 30 Nov 2022 19:31:13 GMT
etag: W/"eead570e1348580c3efe39a8056c6edb"
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000,public,immutable
x-amz-version-id: ZLy6nST9rwEuL8Zhn4Sej66sAsBJQcXl
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: dPfOIY_qVFu0aqNDqkJze4qKjhoF5o4cqb9kbOO8caOv0zrhs_vLrQ==
age: 45953
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.headspace.com/marketing-assets/page-data/index/page-data.json
200 OK 0 B URL HTTP/2 www.headspace.com/marketing-assets/page-data/index/page-data.json
IP
GET /marketing-assets/page-data/index/page-data.json HTTP/1.1
Host: www.headspace.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
sentry-trace: 64de2ff7bc1b4338a56dc3b0d338e739-99448c1ef1fa9135-0
baggage: sentry-environment=production,sentry-release=7d57015eef2f9d28f8063b61f32f01fce549044b,sentry-public_key=646f2ec572e04bf5901f3696cd4d922d,sentry-trace_id=64de2ff7bc1b4338a56dc3b0d338e739,sentry-sample_rate=0.01
Connection: keep-alive
Referer: https://www.headspace.com/
Cookie: _gcl_au=1.1.1610401417.1670050894; mprtcl-v4_B0C8D5EC={'gs':{'ie':1|'dt':'BxazLKm8649buJbWBLWXt2Pw7bfin6qB'|'cgid':'88a76943-0456-4428-b469-d71fc3683b9b'|'das':'a708f74e-c53f-40a4-829d-5b90c22adf44'}|'l':0}; countryCode=NO
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/json
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-expose-headers: ETag
access-control-max-age: 3600
last-modified: Wed, 30 Nov 2022 19:31:04 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: DgvPv4Al7LRXRCXEzgTtUaE2zCw74DmM
server: AmazonS3
content-encoding: gzip
date: Sat, 03 Dec 2022 07:01:37 GMT
cache-control: max-age=0,public,must-revalidate
etag: W/"75e0aeff87acbdd27f8be402290056fc"
vary: Accept-Encoding
x-cache: RefreshHit from cloudfront
via: 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: xJYFUaIQr_rWiaHprUIpBbPffehtJ5457o1OAIXklmaxImyb6-fYgg==
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.headspace.com/marketing-assets/component---src-view-templates-marketing-page-landing-tsx-b110a9d601ef37d35189.js
200 OK 0 B URL HTTP/2 www.headspace.com/marketing-assets/component---src-view-templates-marketing-page-landing-tsx-b110a9d601ef37d35189.js
IP
GET /marketing-assets/component---src-view-templates-marketing-page-landing-tsx-b110a9d601ef37d35189.js HTTP/1.1
Host: www.headspace.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.headspace.com/
Cookie: _gcl_au=1.1.1610401417.1670050894; mprtcl-v4_B0C8D5EC={'gs':{'ie':1|'dt':'BxazLKm8649buJbWBLWXt2Pw7bfin6qB'|'cgid':'88a76943-0456-4428-b469-d71fc3683b9b'|'das':'a708f74e-c53f-40a4-829d-5b90c22adf44'|'csm':'WyI3Mzk0NjQ4MDAwNzMxNDgzNDciXQ=='|'sid':'C3F8AB41-0194-4ADE-89D0-1150D7EF9D55'|'les':1670050894103|'ssd':1670050894101}|'l':0|'739464800073148347':{'fst':1670050894527}|'cu':'739464800073148347'}; countryCode=NO; d-a8e6=192eb480-0436-4a39-ad94-533ddb9df0a7; s-9da4=ae7d1b39-9a02-484b-99bc-e04b6424bc78; AWSALB=B6DGFeMuZzua+q2pItZUzO6sdqygXU/xESkDpKW/+jPqHhMyTxS7freRgF4dg0/2oH2m17Xy+JZ2+6cUa86NjdkPnUu91xgYJWGq/vb1ROowdsdSubibShmqbK+c; AWSALBCORS=B6DGFeMuZzua+q2pItZUzO6sdqygXU/xESkDpKW/+jPqHhMyTxS7freRgF4dg0/2oH2m17Xy+JZ2+6cUa86NjdkPnUu91xgYJWGq/vb1ROowdsdSubibShmqbK+c; _sp_id.8a05=77dc4ebd-0c0f-4a88-96af-9bba75d34b2b.1670050896.0.1670050896..52a9aa0f-909d-4d57-91f3-9da897ee16b3; cookiePolicyMarketing=accept; cookiePolicyAnalytics=accept; _wchtbl_uid=ca9c3e0f-293f-4f0f-9d95-f2e2c961cc57; _wchtbl_sid=db3bfd0f-db80-4e35-9eac-8fdc5f4864fe; IR_gbd=headspace.com; IR_13686=1670050894553%7C2958222%7C1670050894553%7C%7C
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Fri, 02 Dec 2022 18:15:41 GMT
last-modified: Wed, 30 Nov 2022 19:31:12 GMT
etag: W/"d6c37df2f919d45430b7962c90ccd91e"
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000,public,immutable
x-amz-version-id: VpyiMx1REu0Ccxx7Wm4TLs4I5WZvEIrB
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: lF91cgKG7LjUiQSFJb9wA6bnhFVFeiyqHWAWo20t-PrfJF1YhUItFg==
age: 45955
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
X-Firefox-Spdy: h2
vidassets.terminus.services/f0c9017a-7514-4b1e-b253-eddc086a1230/t.js
200 OK 0 B URL HTTP/2 vidassets.terminus.services/f0c9017a-7514-4b1e-b253-eddc086a1230/t.js
IP
GET /f0c9017a-7514-4b1e-b253-eddc086a1230/t.js HTTP/1.1
Host: vidassets.terminus.services
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.headspace.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript;charset=utf-8
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range,Authorization
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-origin: *
access-control-expose-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range,Authorization
last-modified: Tue, 25 Oct 2022 11:29:18 GMT
server: nginx/1.10.3 (Ubuntu)
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-encoding: gzip
date: Sat, 03 Dec 2022 06:56:14 GMT
cache-control: public, s-maxage=2700
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 095562e8748e634f880ee3c4ada2b6d0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: mh3JS04sQxR28-FxUzEL2iIE3fa7CLo5YAZ88w474-KsZHK3PP4Qtw==
age: 666
X-Firefox-Spdy: h2
www.headspace.com/marketing-assets/view-components-Footer-Footer-dab4bd7a96e39c57e77d.js
200 OK 0 B URL HTTP/2 www.headspace.com/marketing-assets/view-components-Footer-Footer-dab4bd7a96e39c57e77d.js
IP
GET /marketing-assets/view-components-Footer-Footer-dab4bd7a96e39c57e77d.js HTTP/1.1
Host: www.headspace.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.headspace.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Fri, 02 Dec 2022 18:15:38 GMT
last-modified: Wed, 30 Nov 2022 19:31:13 GMT
etag: W/"2e2a3b6ee5bb92442aa2ad55094fa3a6"
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000,public,immutable
x-amz-version-id: dzdk5LYROThoJ379rZRTE8y9ez953LU3
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: EkTymH48R0MQjXzEtke4ag66SuOFfeKh1KNZmub3Dhw68FCunwl2yA==
age: 45957
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
X-Firefox-Spdy: h2
p201298.mybettermb.com/adServe/domainClick?ai=GNWsBy0vmeWNIRD1OGzon2SZVu5NPqSq-h2rSoksoBqNG2LV3Zkk-L8FPCSjKZr_YsQ0yRxpJ6k8LlotqmtX7ErGSkvN2YlGY4HZ8X7cx-dM1QaxFxK0PHGpJGlCLAoWMnzoVZuce8ueVaQ0F217-cHwFJ-CDJF8T7C2wcJ1dqtoOgN9pzNxgl6S4oChQzOvrPE96Ym7CMGlXRdGMK-TkKMF_XSxG7q5c9lRJWHNr4s5bSTdWcYVZJciO9bgcuS1jIeAEiXnU3VYEUAru7F_DuXugOnM5m-8Jm7EhOsk27bxGYd3vi6Mg89LCz5E8ciHT2L9NFyVXF6ciSN7CaQexuqZ_HrRuXqwbM7TR-A6o2LnrG8E1DfQ9Vu8kUSrMxroonOqLNsrJIKgUSZw7eMl7vr4nvPsKvQNOYwwqJPWDKxkmVbuTT6kqjvQfnk4ki0ivitaEXZPV_A9yZrhH3-Sbu_XunfKB2MQE-IWmIj47KCOF0SokHo2PZeYO9hdbD2Gn6oVmfmCmc-q0T2xsmJwnBfZ8RtWPEH2SnZADPOdLz_p-OGBQW3exAhKJncPyYXssKbYd4jRL3fz-AbClJeve1IAxxj8fbHTscWi84ZIOk0qJeEuaLJ-WEdDYOEm2_nsCKidNDxuV5s&ui=HFz5zNIIs96fzq49jFkHXcQzYObQGwwU7xf6tdOZukPv17p3ygdjEF5OXrjE4myZBk-q2gLJAHJZ_HEeSQXtNNH-Gy5bSZr7kkKyQOuutSqX2rzBrT1tjQ&si=1&oref=e2905b67c440133e06d94d472902354c&optunit=g1X1rV7f4BpBS4YUfGI2rw&rb=2Vb288azLYM&rr=1&abtg=0
200 OK 0 B URL HTTP/2 p201298.mybettermb.com/adServe/domainClick?ai=GNWsBy0vmeWNIRD1OGzon2SZVu5NPqSq-h2rSoksoBqNG2LV3Zkk-L8FPCSjKZr_YsQ0yRxpJ6k8LlotqmtX7ErGSkvN2YlGY4HZ8X7cx-dM1QaxFxK0PHGpJGlCLAoWMnzoVZuce8ueVaQ0F217-cHwFJ-CDJF8T7C2wcJ1dqtoOgN9pzNxgl6S4oChQzOvrPE96Ym7CMGlXRdGMK-TkKMF_XSxG7q5c9lRJWHNr4s5bSTdWcYVZJciO9bgcuS1jIeAEiXnU3VYEUAru7F_DuXugOnM5m-8Jm7EhOsk27bxGYd3vi6Mg89LCz5E8ciHT2L9NFyVXF6ciSN7CaQexuqZ_HrRuXqwbM7TR-A6o2LnrG8E1DfQ9Vu8kUSrMxroonOqLNsrJIKgUSZw7eMl7vr4nvPsKvQNOYwwqJPWDKxkmVbuTT6kqjvQfnk4ki0ivitaEXZPV_A9yZrhH3-Sbu_XunfKB2MQE-IWmIj47KCOF0SokHo2PZeYO9hdbD2Gn6oVmfmCmc-q0T2xsmJwnBfZ8RtWPEH2SnZADPOdLz_p-OGBQW3exAhKJncPyYXssKbYd4jRL3fz-AbClJeve1IAxxj8fbHTscWi84ZIOk0qJeEuaLJ-WEdDYOEm2_nsCKidNDxuV5s&ui=HFz5zNIIs96fzq49jFkHXcQzYObQGwwU7xf6tdOZukPv17p3ygdjEF5OXrjE4myZBk-q2gLJAHJZ_HEeSQXtNNH-Gy5bSZr7kkKyQOuutSqX2rzBrT1tjQ&si=1&oref=e2905b67c440133e06d94d472902354c&optunit=g1X1rV7f4BpBS4YUfGI2rw&rb=2Vb288azLYM&rr=1&abtg=0
IP
GET /adServe/domainClick?ai=GNWsBy0vmeWNIRD1OGzon2SZVu5NPqSq-h2rSoksoBqNG2LV3Zkk-L8FPCSjKZr_YsQ0yRxpJ6k8LlotqmtX7ErGSkvN2YlGY4HZ8X7cx-dM1QaxFxK0PHGpJGlCLAoWMnzoVZuce8ueVaQ0F217-cHwFJ-CDJF8T7C2wcJ1dqtoOgN9pzNxgl6S4oChQzOvrPE96Ym7CMGlXRdGMK-TkKMF_XSxG7q5c9lRJWHNr4s5bSTdWcYVZJciO9bgcuS1jIeAEiXnU3VYEUAru7F_DuXugOnM5m-8Jm7EhOsk27bxGYd3vi6Mg89LCz5E8ciHT2L9NFyVXF6ciSN7CaQexuqZ_HrRuXqwbM7TR-A6o2LnrG8E1DfQ9Vu8kUSrMxroonOqLNsrJIKgUSZw7eMl7vr4nvPsKvQNOYwwqJPWDKxkmVbuTT6kqjvQfnk4ki0ivitaEXZPV_A9yZrhH3-Sbu_XunfKB2MQE-IWmIj47KCOF0SokHo2PZeYO9hdbD2Gn6oVmfmCmc-q0T2xsmJwnBfZ8RtWPEH2SnZADPOdLz_p-OGBQW3exAhKJncPyYXssKbYd4jRL3fz-AbClJeve1IAxxj8fbHTscWi84ZIOk0qJeEuaLJ-WEdDYOEm2_nsCKidNDxuV5s&ui=HFz5zNIIs96fzq49jFkHXcQzYObQGwwU7xf6tdOZukPv17p3ygdjEF5OXrjE4myZBk-q2gLJAHJZ_HEeSQXtNNH-Gy5bSZr7kkKyQOuutSqX2rzBrT1tjQ&si=1&oref=e2905b67c440133e06d94d472902354c&optunit=g1X1rV7f4BpBS4YUfGI2rw&rb=2Vb288azLYM&rr=1&abtg=0 HTTP/1.1
Host: p201298.mybettermb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ww2.mkkuei4kdsz.com/
Connection: keep-alive
Cookie: rhid=82485456419
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 07:01:33 GMT
content-type: text/html;charset=ISO-8859-1
vary: Accept-Encoding
set-cookie: rhid=82485456419; Max-Age=15552000; Expires=Thu, 01-Jun-2023 07:01:33 GMT; Domain=mybettermb.com; Path=/; SameSite=None; secure;
loi=ad_1336737_off_779865_aff_89990_cid_201298-MKKUEI4KDSZ.COM_ts_1670050893; Max-Age=3600; Expires=Sat, 03-Dec-2022 08:01:33 GMT; Domain=mybettermb.com; Path=/; SameSite=None; secure;
content-encoding: gzip
X-Firefox-Spdy: h2
poroshop.com/redirect-simple?ci=254&c=no&m_c_r=-1&c_p=s&c_s=438203600&c_k=electronics&c_geo=NO&c_d=Desktop
200 OK 0 B URL HTTP/2 poroshop.com/redirect-simple?ci=254&c=no&m_c_r=-1&c_p=s&c_s=438203600&c_k=electronics&c_geo=NO&c_d=Desktop
IP
GET /redirect-simple?ci=254&c=no&m_c_r=-1&c_p=s&c_s=438203600&c_k=electronics&c_geo=NO&c_d=Desktop HTTP/1.1
Host: poroshop.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.18.0
date: Sat, 03 Dec 2022 07:01:33 GMT
content-type: text/html; charset=UTF-8
x-powered-by: PHP/7.4.29
x-frame-options: *
content-encoding: gzip
X-Firefox-Spdy: h2
api.prod.headspace.com/subscription/vouchers/B2C7DMONTHLY
200 OK 0 B URL HTTP/2 api.prod.headspace.com/subscription/vouchers/B2C7DMONTHLY
IP
GET /subscription/vouchers/B2C7DMONTHLY HTTP/1.1
Host: api.prod.headspace.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.headspace.com
Connection: keep-alive
Referer: https://www.headspace.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
date: Sat, 03 Dec 2022 07:01:37 GMT
cache-control: no-cache
content-encoding: gzip
server: envoy
x-envoy-upstream-service-time: 18
x-cache: Miss from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: k0DNxviJbtT14yofL1G3MElcLUdk6xhwuP40n9p1Gxsqo_xZ0VQ34w==
access-control-allow-credentials: true
access-control-allow-origin: https://www.headspace.com
vary: origin,accept-encoding, Origin
X-Firefox-Spdy: h2
api.prod.headspace.com/subscription/vouchers/B2C7DMONTHLY
200 OK 0 B URL HTTP/2 api.prod.headspace.com/subscription/vouchers/B2C7DMONTHLY
IP
GET /subscription/vouchers/B2C7DMONTHLY HTTP/1.1
Host: api.prod.headspace.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.headspace.com
Connection: keep-alive
Referer: https://www.headspace.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
date: Sat, 03 Dec 2022 07:01:38 GMT
cache-control: no-cache
content-encoding: gzip
server: envoy
x-envoy-upstream-service-time: 13
x-cache: Miss from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Fe7eUQBBBGfT8O2hDj6kEDCT2JL3K8euI-VaPBXtVf8Nz90RYnHhRg==
access-control-allow-credentials: true
access-control-allow-origin: https://www.headspace.com
vary: origin,accept-encoding, Origin
access-control-expose-headers: Authorization,Server-Authorization,tags,WWW-Authenticate
X-Firefox-Spdy: h2
api.prod.headspace.com/subscription/vouchers/B2C7DMONTHLY
200 OK 0 B URL HTTP/2 api.prod.headspace.com/subscription/vouchers/B2C7DMONTHLY
IP
GET /subscription/vouchers/B2C7DMONTHLY HTTP/1.1
Host: api.prod.headspace.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.headspace.com
Connection: keep-alive
Referer: https://www.headspace.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
date: Sat, 03 Dec 2022 07:01:38 GMT
cache-control: no-cache
content-encoding: gzip
server: envoy
x-envoy-upstream-service-time: 16
x-cache: Miss from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: aqnxFNIzrVvIMBoJrLatHwnfCD5EB6SwBQftC6gZ-rn-zTN6pH_iDA==
access-control-allow-credentials: true
access-control-allow-origin: https://www.headspace.com
vary: origin,accept-encoding, Origin
access-control-expose-headers: Authorization,Server-Authorization,tags,WWW-Authenticate
X-Firefox-Spdy: h2
www.headspace.com/marketing-assets/view-components-ThreeCardSet-ThreeCardSet-c20be41e96df5db574e6.js
200 OK 0 B URL HTTP/2 www.headspace.com/marketing-assets/view-components-ThreeCardSet-ThreeCardSet-c20be41e96df5db574e6.js
IP
GET /marketing-assets/view-components-ThreeCardSet-ThreeCardSet-c20be41e96df5db574e6.js HTTP/1.1
Host: www.headspace.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.headspace.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Fri, 02 Dec 2022 18:15:47 GMT
last-modified: Wed, 30 Nov 2022 19:31:14 GMT
etag: W/"ee20b535a1cf601eb9b8d40abd6ebe02"
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000,public,immutable
x-amz-version-id: 5jsEjFe2Fq7zi8cYebO7JTmk4E4v2m93
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: rUBaT3vMtxCuiZ2LLn0uQuY3xCLslxMdRX9Zi47LD9y0fVeizvndgA==
age: 45948
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.headspace.com/marketing-assets/view-components-SectionWithTabs-SectionWithTabs-0e2a6e553bba49ebfafc.js
200 OK 0 B URL HTTP/2 www.headspace.com/marketing-assets/view-components-SectionWithTabs-SectionWithTabs-0e2a6e553bba49ebfafc.js
IP
GET /marketing-assets/view-components-SectionWithTabs-SectionWithTabs-0e2a6e553bba49ebfafc.js HTTP/1.1
Host: www.headspace.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.headspace.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Fri, 02 Dec 2022 18:15:42 GMT
last-modified: Wed, 30 Nov 2022 19:31:13 GMT
etag: W/"24043f9e391c0ff8b5c2bee63e0becd5"
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000,public,immutable
x-amz-version-id: drUc9KsxBTB67NXLLFliqQoj9j2NTgmN
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: s_cSKiEKWMRJiwtRFkCIjxEytz6gBFNc8WFXbYA8Atyw7pxqeN1m2g==
age: 45953
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
X-Firefox-Spdy: h2
images.ctfassets.net/v3n26e09qg2r/7CSyedyArzTd5GP9LiuL78/f5a303f777ee3691a8ddfd5d36a7d591/headspace-logo.svg
200 OK 0 B URL HTTP/2 images.ctfassets.net/v3n26e09qg2r/7CSyedyArzTd5GP9LiuL78/f5a303f777ee3691a8ddfd5d36a7d591/headspace-logo.svg
IP
GET /v3n26e09qg2r/7CSyedyArzTd5GP9LiuL78/f5a303f777ee3691a8ddfd5d36a7d591/headspace-logo.svg HTTP/1.1
Host: images.ctfassets.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.headspace.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/svg+xml
last-modified: Thu, 05 Nov 2020 22:59:07 GMT
server: Contentful Images API
access-control-allow-origin: *
content-encoding: gzip
date: Sat, 03 Dec 2022 05:14:34 GMT
cache-control: max-age=31536000
etag: W/"3fa3c755b534a4d6c064397fc0e6ba6b"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: pnyqCdPqJP836cAKGA5LcMJwU47jHnjj3s7fdnw0A1dmztS7rskPyA==
age: 6565
X-Firefox-Spdy: h2
www.headspace.com/marketing-assets/05d954cf-fcf0f33e925fdae4a363.js
200 OK 0 B URL HTTP/2 www.headspace.com/marketing-assets/05d954cf-fcf0f33e925fdae4a363.js
IP
GET /marketing-assets/05d954cf-fcf0f33e925fdae4a363.js HTTP/1.1
Host: www.headspace.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.headspace.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Fri, 02 Dec 2022 18:15:42 GMT
last-modified: Wed, 30 Nov 2022 19:31:11 GMT
etag: W/"ed4158d274630c7bc13ffdbc06fedb83"
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000,public,immutable
x-amz-version-id: _b06FHv8qayAHPdWvQwf0OEwFekMybd3
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: UIYQQwXYXUNU-nHyw3TJZR5hx8V5zGfnu4QZDJroHH4qM1oyJ1jMYA==
age: 45953
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
X-Firefox-Spdy: h2
api.prod.headspace.com/subscription/vouchers/B2C7DMONTHLY
200 OK 0 B URL HTTP/2 api.prod.headspace.com/subscription/vouchers/B2C7DMONTHLY
IP
GET /subscription/vouchers/B2C7DMONTHLY HTTP/1.1
Host: api.prod.headspace.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.headspace.com
Connection: keep-alive
Referer: https://www.headspace.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
date: Sat, 03 Dec 2022 07:01:38 GMT
cache-control: no-cache
content-encoding: gzip
server: envoy
x-envoy-upstream-service-time: 16
x-cache: Miss from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 374EZoO9AQdeAHTN0UmV_8dIgQPIT35iHjLB8DpGqVH-Q1HoybQ0mQ==
access-control-allow-credentials: true
access-control-allow-origin: https://www.headspace.com
vary: origin,accept-encoding, Origin
access-control-expose-headers: Authorization,Server-Authorization,tags,WWW-Authenticate
X-Firefox-Spdy: h2
api.prod.headspace.com/subscription/vouchers/B2C7DMONTHLY
200 OK 0 B URL HTTP/2 api.prod.headspace.com/subscription/vouchers/B2C7DMONTHLY
IP
GET /subscription/vouchers/B2C7DMONTHLY HTTP/1.1
Host: api.prod.headspace.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.headspace.com
Connection: keep-alive
Referer: https://www.headspace.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
date: Sat, 03 Dec 2022 07:01:38 GMT
cache-control: no-cache
content-encoding: gzip
server: envoy
x-envoy-upstream-service-time: 23
x-cache: Miss from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: TTO3Pq9q8f8ikjvJQ1BlzXC7ebg4uh4ygoNUyVqc_23uV-tH_JRn4A==
access-control-allow-credentials: true
access-control-allow-origin: https://www.headspace.com
vary: origin,accept-encoding, Origin
access-control-expose-headers: Authorization,Server-Authorization,tags,WWW-Authenticate
X-Firefox-Spdy: h2
64.225.91.73
185.209.223.208
104.18.32.68
23.33.119.27
93.184.220.29