firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 1b3053fa528e28810f8a2cc9284cc921
cca9eb471d941881a6b9a1793aecb6c281908f6a
a2427848ba35575dda8a82cf88f104978234c05389deebc3fc8279d9075eff45
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length, Backoff, Retry-After, Content-Type, Alert
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Wed, 21 Sep 2022 23:13:49 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 0CUIXK2QfeX4t6u01ehF9352e_ywbzQM6vocVVX1hTjaJ-E1C6MAtA==
Age: 3248
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a26d0784548ecab22f417f3d689daf23
8893b79366bbadeb5c8d587b8f023e310694df1c
35baaae7b3ce3110ebb2b075881cfab55ecf3eab57d834283fd18ac691b41fa2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "35BAAAE7B3CE3110EBB2B075881CFAB55ECF3EAB57D834283FD18AC691B41FA2"
Last-Modified: Tue, 20 Sep 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10133
Expires: Thu, 22 Sep 2022 02:56:50 GMT
Date: Thu, 22 Sep 2022 00:07:57 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
IP
File type PEM certificate\012- , ASCII text
Hash 6113f8408c59aebe188d6af273b90743
7398873bf00f99944eaa77ad3ebc0d43c23dba6b
b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 10 Sep 2022 18:47:45 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Wed, 21 Sep 2022 04:35:14 GMT
etag: "6113f8408c59aebe188d6af273b90743"
x-cache: Hit from cloudfront
via: 1.1 501ad2910f631f0520a6d389d6f053e8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 7pd0lOc0ZXJ2eYz_iylNfwYWRhdvJAYiqaaixba-yCQM1aA93ZFcBQ==
age: 70364
X-Firefox-Spdy: h2
bestforlife.life/india?cep=Ncjr1IBwEpaVCDR7gb1W-FGPfyBDcFKrvsN3TnUtKC3-YBpBZeA8K4I8aCQppDpOCh4X5YDyGxZZWBn4AgGWX4VJ_-u2PH-Fe1mMx7Ic55i2jwzIb3UZz0K-7U1j1TMcutJ3YQ7R976S284DLwimzH966zMkmJ9rZyHUAbUJccXBDtoAah4hwbnE7EcTJNHzmRHNpMzldPx6i9wW8T_gw8zk9YPz5Xqdy_0WpwAdR1Czt7BnDU4JX41f5JrUCrFQMEBD2aLDnTT_wWE6ceLuct25kNbpUG5Zg6PR_AvCsuxVfZd1nExlCJp4poF-Qun30uhMN3RK1jpIHZULEXZzQMMIqCaQnNIpveyc9kzJB8IU2zVs3mbBB4Xq5zGEzfGM
301 Moved Permanently 0 B URL HTTP/1.1 bestforlife.life/india?cep=Ncjr1IBwEpaVCDR7gb1W-FGPfyBDcFKrvsN3TnUtKC3-YBpBZeA8K4I8aCQppDpOCh4X5YDyGxZZWBn4AgGWX4VJ_-u2PH-Fe1mMx7Ic55i2jwzIb3UZz0K-7U1j1TMcutJ3YQ7R976S284DLwimzH966zMkmJ9rZyHUAbUJccXBDtoAah4hwbnE7EcTJNHzmRHNpMzldPx6i9wW8T_gw8zk9YPz5Xqdy_0WpwAdR1Czt7BnDU4JX41f5JrUCrFQMEBD2aLDnTT_wWE6ceLuct25kNbpUG5Zg6PR_AvCsuxVfZd1nExlCJp4poF-Qun30uhMN3RK1jpIHZULEXZzQMMIqCaQnNIpveyc9kzJB8IU2zVs3mbBB4Xq5zGEzfGM
IP
ASN #46606 UNIFIEDLAYER-AS-1
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Phishing
GET /india?cep=Ncjr1IBwEpaVCDR7gb1W-FGPfyBDcFKrvsN3TnUtKC3-YBpBZeA8K4I8aCQppDpOCh4X5YDyGxZZWBn4AgGWX4VJ_-u2PH-Fe1mMx7Ic55i2jwzIb3UZz0K-7U1j1TMcutJ3YQ7R976S284DLwimzH966zMkmJ9rZyHUAbUJccXBDtoAah4hwbnE7EcTJNHzmRHNpMzldPx6i9wW8T_gw8zk9YPz5Xqdy_0WpwAdR1Czt7BnDU4JX41f5JrUCrFQMEBD2aLDnTT_wWE6ceLuct25kNbpUG5Zg6PR_AvCsuxVfZd1nExlCJp4poF-Qun30uhMN3RK1jpIHZULEXZzQMMIqCaQnNIpveyc9kzJB8IU2zVs3mbBB4Xq5zGEzfGM HTTP/1.1
Host: bestforlife.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Thu, 22 Sep 2022 00:07:57 GMT
Server: Apache
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
X-Redirect-By: WordPress
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Location: https://bestforlife.life/india?cep=Ncjr1IBwEpaVCDR7gb1W-FGPfyBDcFKrvsN3TnUtKC3-YBpBZeA8K4I8aCQppDpOCh4X5YDyGxZZWBn4AgGWX4VJ_-u2PH-Fe1mMx7Ic55i2jwzIb3UZz0K-7U1j1TMcutJ3YQ7R976S284DLwimzH966zMkmJ9rZyHUAbUJccXBDtoAah4hwbnE7EcTJNHzmRHNpMzldPx6i9wW8T_gw8zk9YPz5Xqdy_0WpwAdR1Czt7BnDU4JX41f5JrUCrFQMEBD2aLDnTT_wWE6ceLuct25kNbpUG5Zg6PR_AvCsuxVfZd1nExlCJp4poF-Qun30uhMN3RK1jpIHZULEXZzQMMIqCaQnNIpveyc9kzJB8IU2zVs3mbBB4Xq5zGEzfGM
Content-Length: 0
Keep-Alive: timeout=5, max=75
Content-Type: text/html; charset=UTF-8
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 22 Sep 2022 00:07:57 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 702ca38d47d4d69e3105b36ff80988c6
19c3d80459c056bfc0c144b0d3b348fcbaed9490
031c63c350ae1f27791c11920d393c58c91462a1e388922a73b7013b02565e55
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "031C63C350AE1F27791C11920D393C58C91462A1E388922A73B7013B02565E55"
Last-Modified: Wed, 21 Sep 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3611
Expires: Thu, 22 Sep 2022 01:08:09 GMT
Date: Thu, 22 Sep 2022 00:07:58 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Thu, 22 Sep 2022 00:03:22 GMT
Cache-Control: max-age=3600
Expires: Thu, 22 Sep 2022 00:47:54 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 4f01f770085624552bc30a98954f963a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: wUW0CUbuY0cM4lIU2o2_jtZtLNxIPLz83G69CGGbH7rO9LcckpVCMg==
Age: 276
ocsp.digicert.com/
200 OK 471 B IP
Hash ff6d50919e56aed75c47feb45ee2f2ec
98f558a4b2d4f3c271abc93d0b74ece4ad7a59ef
b1b6f0e78b5a1e2092cba6d71d0d5a918066c0486176cef0a19f51e2d5a9962e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6010
Cache-Control: max-age=121144
Content-Type: application/ocsp-response
Date: Thu, 22 Sep 2022 00:07:58 GMT
Etag: "632ac61c-1d7"
Expires: Fri, 23 Sep 2022 09:47:02 GMT
Last-Modified: Wed, 21 Sep 2022 08:06:52 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: iNBSx290wWVq+erlKXmGWQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: mt1WVtgvWpVy+z0mLEfPHgzKmyI=
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash c8ac2005f83e8a3a9da1a9837b6c2ff3
7c05f49683e49232c1e11b91253e684d2f96ab83
b0b42743b4c7e4b528fd78aadc5429ef34c2e127f3d5147330d428a47203dc0a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 22 Sep 2022 00:07:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash c8ac2005f83e8a3a9da1a9837b6c2ff3
7c05f49683e49232c1e11b91253e684d2f96ab83
b0b42743b4c7e4b528fd78aadc5429ef34c2e127f3d5147330d428a47203dc0a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 22 Sep 2022 00:07:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 279 B IP
Hash e2edca22ec94765b68e59bf809d810b8
2728079f012ffd7152de5e49d4c4e6ae5b84670a
4084df6de14fe903c67951e8521d6465eb80a46d6456ec5445d531494b26773d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 22 Sep 2022 00:07:58 GMT
Server: ECS (amb/6B7E)
Content-Length: 279
ocsp.digicert.com/
200 OK 279 B IP
Hash e2edca22ec94765b68e59bf809d810b8
2728079f012ffd7152de5e49d4c4e6ae5b84670a
4084df6de14fe903c67951e8521d6465eb80a46d6456ec5445d531494b26773d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 22 Sep 2022 00:07:59 GMT
Server: ECS (amb/6B7A)
Content-Length: 279
ocsp.digicert.com/
200 OK 279 B IP
Hash e2edca22ec94765b68e59bf809d810b8
2728079f012ffd7152de5e49d4c4e6ae5b84670a
4084df6de14fe903c67951e8521d6465eb80a46d6456ec5445d531494b26773d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 22 Sep 2022 00:07:59 GMT
Server: ECS (amb/6BB2)
Content-Length: 279
ocsp.digicert.com/
200 OK 279 B IP
Hash e2edca22ec94765b68e59bf809d810b8
2728079f012ffd7152de5e49d4c4e6ae5b84670a
4084df6de14fe903c67951e8521d6465eb80a46d6456ec5445d531494b26773d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 22 Sep 2022 00:07:59 GMT
Server: ECS (amb/6B81)
Content-Length: 279
www.bestforlife.life/images/email.png
200 OK 396 B URL HTTP/2 www.bestforlife.life/images/email.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 70dae42092fa6a05978ff6a0620ee93f
9c16adafce76241c3d46ac182ad0b7452b6b7bfa
b7feff2ccba89704f5d3452349e19be7360a7b8f9702daad4c0813f8c5f3ef90
GET /images/email.png HTTP/1.1
Host: www.bestforlife.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bestforlife.life/assets/lander.css
Cookie: __cf_bm=NPCwFmZFOmm199B7.8tCOm.oyVak9pjphXKBMko4fmw-1663805279-0-AULvZLObgjNnzyY4oOcl1dE8k7asC0nLN3TJv28i+SHDNb9HHyMDTmXMD73luy2HTNVNYljLIKKwBrOu+kfcLseT0khEPBF2uHUbM3DJcMly
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 22 Sep 2022 00:07:59 GMT
content-type: image/webp
content-length: 396
cf-ray: 74e6cdb33c9c0b61-OSL
accept-ranges: bytes
access-control-allow-origin: *
age: 72090
cache-control: public, max-age=2678400
content-disposition: inline; filename="email.webp"
etag: "632a4cc7-21c"
expires: Sun, 23 Oct 2022 00:07:59 GMT
last-modified: Tue, 20 Sep 2022 23:29:11 GMT
strict-transport-security: max-age=0
vary: Accept, Accept-Encoding
cf-cache-status: HIT
access-control-allow-credentials: true
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
access-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=540
server: cloudflare
X-Firefox-Spdy: h2
assets.clickfunnels.com/images/blurredhandbg.png
200 OK 227 kB URL HTTP/2 assets.clickfunnels.com/images/blurredhandbg.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Size 227 kB (227280 bytes)
Hash b9395b15d16b8ecad083ea6a86dac64f
93773bab99a8ca8b4096741408f00f583a31b345
ce51573bb0622cc284a692d8af8f4c47e7bd27a31a6f0a61ed5439edb3ed85c0
GET /images/blurredhandbg.png HTTP/1.1
Host: assets.clickfunnels.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bestforlife.life/
Cookie: __cf_bm=h9SBx.kSR5NftC6cqQghCa8SfTSBnYOBzEuqb4g5GnA-1663805278-0-AU7CnnvgxgWN6sqc0tuuO800tDyVrcirkVdujAwZhpHq/Hvrx80gsmtt3uoKzIrw4cQH2Vnd583wIKkY0RSgzrFOQhUIRSyF29PtZi1E8R2t
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 22 Sep 2022 00:07:59 GMT
content-type: image/webp
content-length: 227280
cf-ray: 74e6cdb33e85b4f3-OSL
accept-ranges: bytes
access-control-allow-origin: *
age: 298044
cache-control: public, max-age=2678400
content-disposition: inline; filename="blurredhandbg.webp"
etag: "630e9cfc-581e8"
expires: Sun, 23 Oct 2022 00:07:59 GMT
last-modified: Tue, 30 Aug 2022 23:27:56 GMT
strict-transport-security: max-age=0
vary: Accept, Accept-Encoding
cf-cache-status: HIT
access-control-allow-credentials: true
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
access-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=360936
server: cloudflare
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash f85caa32cfc5c68ae9d37dac5075d086
d98cb95e042dfdf7fcfe0bef3d83624a970ee7ab
c1d5882e2ccbee35dfb5d42d78ef6fd843882cbbbe5653cd686ff768e697ac84
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 22 Sep 2022 00:07:59 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.bestforlife.life/hosted/images/b7/0344e2a543416b818d21be670a9db5/home-reg-form-bg_IN.jpg
200 OK 156 kB URL HTTP/2 www.bestforlife.life/hosted/images/b7/0344e2a543416b818d21be670a9db5/home-reg-form-bg_IN.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], progressive, precision 8, 3000x941, components 3\012- data
Size 156 kB (155668 bytes)
Hash 65824abc7994521b4abe998544c68fa2
e6be12bee707d7219c427aea9cc8b54d5e3eaae7
879bfa9b6fa35b98fdc794778c185fa5fbe926b144cdf6f20519893016d91ff5
GET /hosted/images/b7/0344e2a543416b818d21be670a9db5/home-reg-form-bg_IN.jpg HTTP/1.1
Host: www.bestforlife.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bestforlife.life/
Cookie: __cf_bm=NPCwFmZFOmm199B7.8tCOm.oyVak9pjphXKBMko4fmw-1663805279-0-AULvZLObgjNnzyY4oOcl1dE8k7asC0nLN3TJv28i+SHDNb9HHyMDTmXMD73luy2HTNVNYljLIKKwBrOu+kfcLseT0khEPBF2uHUbM3DJcMly
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Thu, 22 Sep 2022 00:07:59 GMT
content-type: image/jpeg
content-length: 155668
cf-ray: 74e6cdb33c9d0b61-OSL
accept-ranges: bytes
cache-control: max-age=31536000
etag: "65824abc7994521b4abe998544c68fa2"
last-modified: Tue, 20 Sep 2022 07:23:35 GMT
vary: Accept, Accept-Encoding
cf-cache-status: REVALIDATED
cf-bgj: imgq:85,h2pri
cf-polished: status=not_needed
x-amz-cf-pop: SOF50-C1
server: cloudflare
X-Firefox-Spdy: h2
www.youtube.com/s/player/64947e15/www-player.css
200 OK 50 kB URL HTTP/2 www.youtube.com/s/player/64947e15/www-player.css
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash e82302120581bfc2b2bf7671a35750f7
b27bddbc7416555378933e4ecc32bc2347523c60
7c45ed3daa3f0a578f09bca102a32bea35919104d567cf74f7761a3dd7d43ac9
GET /s/player/64947e15/www-player.css HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/embed/okEUYy2PvHY?autoplay=0&modestbranding=1&controls=1&showinfo=0&rel=0&hd=1&wmode=transparent
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding, Origin
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 49662
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 21 Sep 2022 14:49:24 GMT
expires: Thu, 21 Sep 2023 14:49:24 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 21 Sep 2022 00:22:17 GMT
content-type: text/css
age: 33515
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.youtube.com/s/player/64947e15/www-embed-player.vflset/www-embed-player.js
200 OK 98 kB URL HTTP/2 www.youtube.com/s/player/64947e15/www-embed-player.vflset/www-embed-player.js
IP
File type ASCII text, with very long lines (570)
Hash faf7cb6fdef7f573ad65139bd560afed
e01ff9c1ab3e3a94d92db4c8580b18558256c5ba
e0912caa0cba25c0e92c231d528c723f7bf7d7479c53a8505858c79284013e9e
GET /s/player/64947e15/www-embed-player.vflset/www-embed-player.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/embed/okEUYy2PvHY?autoplay=0&modestbranding=1&controls=1&showinfo=0&rel=0&hd=1&wmode=transparent
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding, Origin
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 97978
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 21 Sep 2022 14:49:24 GMT
expires: Thu, 21 Sep 2023 14:49:24 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 21 Sep 2022 00:22:17 GMT
content-type: text/javascript
age: 33515
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash f85caa32cfc5c68ae9d37dac5075d086
d98cb95e042dfdf7fcfe0bef3d83624a970ee7ab
c1d5882e2ccbee35dfb5d42d78ef6fd843882cbbbe5653cd686ff768e697ac84
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 22 Sep 2022 00:07:59 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 5149084af9bb01e5471e0be93a009ab0
1aaae44973461346130015cba0c36e9d1b5b77f2
db8a390c5bb50072d57429a45c470496139deb98e04b175f45600e5e4b2ac884
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 22 Sep 2022 00:07:59 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8ebb267e443b81854ef9a01b3eb6489d
b932e9e5679da5a9160da5429458041765509b52
4ac5aa5b4fb4a85282b825c5c0ed7b1aaf2b39ffe77d69dec5123a84709f3fe2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4AC5AA5B4FB4A85282B825C5C0ED7B1AAF2B39FFE77D69DEC5123A84709F3FE2"
Last-Modified: Tue, 20 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21229
Expires: Thu, 22 Sep 2022 06:01:48 GMT
Date: Thu, 22 Sep 2022 00:07:59 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8ebb267e443b81854ef9a01b3eb6489d
b932e9e5679da5a9160da5429458041765509b52
4ac5aa5b4fb4a85282b825c5c0ed7b1aaf2b39ffe77d69dec5123a84709f3fe2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4AC5AA5B4FB4A85282B825C5C0ED7B1AAF2B39FFE77D69DEC5123A84709F3FE2"
Last-Modified: Tue, 20 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21229
Expires: Thu, 22 Sep 2022 06:01:48 GMT
Date: Thu, 22 Sep 2022 00:07:59 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8ebb267e443b81854ef9a01b3eb6489d
b932e9e5679da5a9160da5429458041765509b52
4ac5aa5b4fb4a85282b825c5c0ed7b1aaf2b39ffe77d69dec5123a84709f3fe2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4AC5AA5B4FB4A85282B825C5C0ED7B1AAF2B39FFE77D69DEC5123A84709F3FE2"
Last-Modified: Tue, 20 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21229
Expires: Thu, 22 Sep 2022 06:01:48 GMT
Date: Thu, 22 Sep 2022 00:07:59 GMT
Connection: keep-alive
www.bestforlife.life/assets/userevents/application.js
200 OK 8.5 kB URL HTTP/2 www.bestforlife.life/assets/userevents/application.js
IP
File type ASCII text, with very long lines (4947), with no line terminators
Hash d13b2d867e753d9723d6ff3f119447c8
8f3397df85236be583c35842de3bc4ae2742d369
eb651357e3d0ef016349e4b0c34bf960ba8e8c93f8c393d1d531da2899602b94
Analyzer Verdict Alert fortinet Phishing
GET /assets/userevents/application.js HTTP/1.1
Host: www.bestforlife.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bestforlife.life/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Thu, 22 Sep 2022 00:07:59 GMT
content-type: application/x-javascript
cf-ray: 74e6cdb28c5c0b61-OSL
access-control-allow-origin: *
age: 590
cache-control: public, max-age=1200
etag: W/"632b3357-1353"
expires: Thu, 22 Sep 2022 00:27:59 GMT
last-modified: Wed, 21 Sep 2022 15:52:55 GMT
strict-transport-security: max-age=0
vary: Accept-Encoding
cf-cache-status: HIT
access-control-allow-credentials: true
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
access-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
set-cookie: __cf_bm=NPCwFmZFOmm199B7.8tCOm.oyVak9pjphXKBMko4fmw-1663805279-0-AULvZLObgjNnzyY4oOcl1dE8k7asC0nLN3TJv28i+SHDNb9HHyMDTmXMD73luy2HTNVNYljLIKKwBrOu+kfcLseT0khEPBF2uHUbM3DJcMly; path=/; expires=Thu, 22-Sep-22 00:37:59 GMT; domain=.www.bestforlife.life; HttpOnly; Secure; SameSite=None
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F60ffb31d-d07d-4e81-9477-522f011ae13e.jpeg
200 OK 8.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F60ffb31d-d07d-4e81-9477-522f011ae13e.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a504981ee10d8341b64f19001464ae8a
56f228d7358ba9deef000f53214dc7c1dc358109
0ea3b6ed12f3adf9d56e7d9b61f284d28107d99f28ee4e66b4c078a9a1a0cbee
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F60ffb31d-d07d-4e81-9477-522f011ae13e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8861
x-amzn-requestid: 873e88ab-7afc-4b14-b428-d90ec2079741
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YO2wuE0AoAMF7Gw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631c3804-0d25ab397a16c78907914e23;Sampled=0
x-amzn-remapped-date: Sat, 10 Sep 2022 07:08:52 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: UStTyIXPucbY9WmDl3W5bTyeT-2SJ5CTUjv8TLeexqZtKd1p2sJrNA==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 28390a4d24ed4fdccd685d99cd06cf4e.cloudfront.net (CloudFront), 1.1 google
date: Wed, 21 Sep 2022 03:25:34 GMT
age: 74545
etag: "56f228d7358ba9deef000f53214dc7c1dc358109"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Faa5fccb8-005e-4a27-aee2-802639e26592.jpeg
200 OK 7.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Faa5fccb8-005e-4a27-aee2-802639e26592.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 095da54b533e1dbad223f820b7018ff5
d0859402a9e0c61d6193995130db553995c1be9d
aadbdba88629367686d44a660ff1bf3969643bed29546553d0d22837aba38543
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Faa5fccb8-005e-4a27-aee2-802639e26592.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7206
x-amzn-requestid: cb23bf7a-e726-44c8-8952-c3edc9411989
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Y1Gu-EyEoAMFtFA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632b84c6-2d9be9e7136d8223377efa43;Sampled=0
x-amzn-remapped-date: Wed, 21 Sep 2022 21:40:22 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: S1pxBVRSjKELqBLhf1JDSrHfK49tRMGaTjeXHDCuildb4A0knsTEow==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 5397b304713f6301c7c94ac084b6ed08.cloudfront.net (CloudFront), 1.1 google
date: Wed, 21 Sep 2022 21:48:19 GMT
age: 8380
etag: "d0859402a9e0c61d6193995130db553995c1be9d"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffd654e30-611f-4c64-b1ad-43ca9fdedc0e.jpeg
200 OK 14 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffd654e30-611f-4c64-b1ad-43ca9fdedc0e.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c0201d377c57a684452c0d26372e674d
3829f81048cc63b5f0d1e82dfbe3b8e31646e733
efa055dc93267be2dddd94b334c0655c2e1f1682467fd738e013a778aea175b9
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffd654e30-611f-4c64-b1ad-43ca9fdedc0e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 14397
x-amzn-requestid: 18122f14-4c48-43b3-b312-218f3ae84d93
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Yv1B8EVfoAMF3dQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63296872-3d23a04565d70f3c5403007b;Sampled=0
x-amzn-remapped-date: Tue, 20 Sep 2022 07:14:58 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: 9zc5SsL1SB9GtwMkVWcNLJzC-MfOd-5TiQck5s6-MV23RWPqWPAgtA==
via: 1.1 95b0ac620fa3a80ee590ecf1cda1c698.cloudfront.net (CloudFront), 1.1 ead78c395f4bede3ec6cd7ea180e3d3a.cloudfront.net (CloudFront), 1.1 google
date: Wed, 21 Sep 2022 08:16:24 GMT
age: 57095
etag: "3829f81048cc63b5f0d1e82dfbe3b8e31646e733"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fde54bd1a-30ec-48fe-9030-6f74a0a3df22.jpeg
200 OK 5.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fde54bd1a-30ec-48fe-9030-6f74a0a3df22.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c902cc0f7926e1098e7212b2a2d08e1a
e2b90ecd1dec02c5a0a25c5bb2661fa4f4fec642
9dab48a6114233316eb80c10994b645877f2677f6500dca61095c17c103dc7c3
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fde54bd1a-30ec-48fe-9030-6f74a0a3df22.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5291
x-amzn-requestid: 3a510054-bb53-4003-acd1-fdedc8bd02d4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Y1GVBHXioAMFnlA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632b841f-7a24dca27f6ad2ed0b0e267c;Sampled=0
x-amzn-remapped-date: Wed, 21 Sep 2022 21:37:35 GMT
x-amz-cf-pop: SEA73-P2, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: aU5wnFAN1vEBwSS7knyKUDU1g1MQDB10UyM6OYQlJQPSoGFEmMPSuQ==
via: 1.1 bd6f70221217681265382902c6157c76.cloudfront.net (CloudFront), 1.1 5397b304713f6301c7c94ac084b6ed08.cloudfront.net (CloudFront), 1.1 google
date: Wed, 21 Sep 2022 22:05:41 GMT
age: 7338
etag: "e2b90ecd1dec02c5a0a25c5bb2661fa4f4fec642"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1dee9427-1c1b-4ddc-9f89-8c6e254bd0f1.jpeg
200 OK 8.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1dee9427-1c1b-4ddc-9f89-8c6e254bd0f1.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 62818de3c50f957b2e5680851a1768c9
80e48c9ae48c89598780736b089c98e22d58df9a
16f2c2d23e8641a3f297a175730343d11120a228c0fe846c0fdf1e39212c522c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1dee9427-1c1b-4ddc-9f89-8c6e254bd0f1.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8549
x-amzn-requestid: 6d44626b-16c6-4f19-ae52-d5350065b390
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Y1GwPHJJoAMFdfA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632b84ce-46ebc35612eb7a4473b36189;Sampled=0
x-amzn-remapped-date: Wed, 21 Sep 2022 21:40:30 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: UoQTXSP0LgR4LwELp2Avm27hUekfO9TU9yfvNbIlmUtB-FrU9MGRbg==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 b36bf2c460ac693ce304817aed073112.cloudfront.net (CloudFront), 1.1 google
date: Wed, 21 Sep 2022 21:48:19 GMT
age: 8380
etag: "80e48c9ae48c89598780736b089c98e22d58df9a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
bestforlife.life/favicon.ico
302 Found 0 B URL HTTP/2 bestforlife.life/favicon.ico
IP
ASN #46606 UNIFIEDLAYER-AS-1
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: bestforlife.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bestforlife.life/india?cep=Ncjr1IBwEpaVCDR7gb1W-FGPfyBDcFKrvsN3TnUtKC3-YBpBZeA8K4I8aCQppDpOCh4X5YDyGxZZWBn4AgGWX4VJ_-u2PH-Fe1mMx7Ic55i2jwzIb3UZz0K-7U1j1TMcutJ3YQ7R976S284DLwimzH966zMkmJ9rZyHUAbUJccXBDtoAah4hwbnE7EcTJNHzmRHNpMzldPx6i9wW8T_gw8zk9YPz5Xqdy_0WpwAdR1Czt7BnDU4JX41f5JrUCrFQMEBD2aLDnTT_wWE6ceLuct25kNbpUG5Zg6PR_AvCsuxVfZd1nExlCJp4poF-Qun30uhMN3RK1jpIHZULEXZzQMMIqCaQnNIpveyc9kzJB8IU2zVs3mbBB4Xq5zGEzfGM
Cookie: PHPSESSID=29ce99ff562836a607b9e351ef3fcb35
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 302 Found
link: <https://bestforlife.life/wp-json/>; rel="https://api.w.org/"
x-redirect-by: WordPress
location: https://bestforlife.life/wp-includes/images/w-logo-blue-white-bg.png
content-length: 0
content-type: text/html; charset=UTF-8
date: Thu, 22 Sep 2022 00:08:00 GMT
server: Apache
X-Firefox-Spdy: h2
app.clickfunnels.com/userevents/?funnel_id=T3kxNWpxVDU0TkpRcHduRHV2ck9tQT09LS1NWncyMVBaRHh5USt5S04vZjRVdlVRPT0%3D--90b784ebfdf066c78a0b3a18f131a6795b49b925&page_id=czRCdkYwNWhWNlhGdnU5MWdOVWtsdz09LS0xZTdZVVIrU1hOcmhkQWhXL3RZajRnPT0%3D--b4e34e5e1e58227c26d98c1d746bcbaeed313a13&funnel_step_id=djd5ZHdxMlUxTXJsVlA1cGtNUkhGZz09LS1LaG81ZGNQZDVDVzRzT0ExYjVzQTJnPT0%3D--4c45d3905f3160f3a997e8c995b74241831da20d&user_id=aElSeVJsMnV1a3pNcDR6TjdHeGtUUT09LS1ObzBXdUFrcnBoUFRhZ3VDZTdCZVhBPT0%3D--3904afd23ccc9d6c12cc8ac33a8d3864190bd1d5&account_id=d2QydEVFRVh5dGZGNC9LUHBuS2pIdz09LS1pdjA3YjVLeHVqMk9ma1hQSDF6dXFRPT0%3D--b21a62eba126483145d8803d9d05ffa91da1be31&page_code=NTYzNjYzNjU%3D&mode_id=1&time_zone=UTC&app_domain=app.clickfunnels.com&aff_sub2=&aff_sub3=&aff_sub=&affiliate_id=&cf_affiliate_id=&content=&medium=&name=&source=&term=&client_width=1268&type=Userevents::UniqueVisitorsCreatedSummary&nonce=35c9a7f0-d5c8-4f92-b66d-818c9b678b79&url=https%3A%2F%2Fbestforlife.life%2Findia%3Fcep%3DNcjr1IBwEpaVCDR7gb1W-FGPfyBDcFKrvsN3TnUtKC3-YBpBZeA8K4I8aCQppDpOCh4X5YDyGxZZWBn4AgGWX4VJ_-u2PH-Fe1mMx7Ic55i2jwzIb3UZz0K-7U1j1TMcutJ3YQ7R976S284DLwimzH966zMkmJ9rZyHUAbUJccXBDtoAah4hwbnE7EcTJNHzmRHNpMzldPx6i9wW8T_gw8zk9YPz5Xqdy_0WpwAdR1Czt7BnDU4JX41f5JrUCrFQMEBD2aLDnTT_wWE6ceLuct25kNbpUG5Zg6PR_AvCsuxVfZd1nExlCJp4poF-Qun30uhMN3RK1jpIHZULEXZzQMMIqCaQnNIpveyc9kzJB8IU2zVs3mbBB4Xq5zGEzfGM
202 Accepted 54 kB URL HTTP/2 app.clickfunnels.com/userevents/?funnel_id=T3kxNWpxVDU0TkpRcHduRHV2ck9tQT09LS1NWncyMVBaRHh5USt5S04vZjRVdlVRPT0%3D--90b784ebfdf066c78a0b3a18f131a6795b49b925&page_id=czRCdkYwNWhWNlhGdnU5MWdOVWtsdz09LS0xZTdZVVIrU1hOcmhkQWhXL3RZajRnPT0%3D--b4e34e5e1e58227c26d98c1d746bcbaeed313a13&funnel_step_id=djd5ZHdxMlUxTXJsVlA1cGtNUkhGZz09LS1LaG81ZGNQZDVDVzRzT0ExYjVzQTJnPT0%3D--4c45d3905f3160f3a997e8c995b74241831da20d&user_id=aElSeVJsMnV1a3pNcDR6TjdHeGtUUT09LS1ObzBXdUFrcnBoUFRhZ3VDZTdCZVhBPT0%3D--3904afd23ccc9d6c12cc8ac33a8d3864190bd1d5&account_id=d2QydEVFRVh5dGZGNC9LUHBuS2pIdz09LS1pdjA3YjVLeHVqMk9ma1hQSDF6dXFRPT0%3D--b21a62eba126483145d8803d9d05ffa91da1be31&page_code=NTYzNjYzNjU%3D&mode_id=1&time_zone=UTC&app_domain=app.clickfunnels.com&aff_sub2=&aff_sub3=&aff_sub=&affiliate_id=&cf_affiliate_id=&content=&medium=&name=&source=&term=&client_width=1268&type=Userevents::UniqueVisitorsCreatedSummary&nonce=35c9a7f0-d5c8-4f92-b66d-818c9b678b79&url=https%3A%2F%2Fbestforlife.life%2Findia%3Fcep%3DNcjr1IBwEpaVCDR7gb1W-FGPfyBDcFKrvsN3TnUtKC3-YBpBZeA8K4I8aCQppDpOCh4X5YDyGxZZWBn4AgGWX4VJ_-u2PH-Fe1mMx7Ic55i2jwzIb3UZz0K-7U1j1TMcutJ3YQ7R976S284DLwimzH966zMkmJ9rZyHUAbUJccXBDtoAah4hwbnE7EcTJNHzmRHNpMzldPx6i9wW8T_gw8zk9YPz5Xqdy_0WpwAdR1Czt7BnDU4JX41f5JrUCrFQMEBD2aLDnTT_wWE6ceLuct25kNbpUG5Zg6PR_AvCsuxVfZd1nExlCJp4poF-Qun30uhMN3RK1jpIHZULEXZzQMMIqCaQnNIpveyc9kzJB8IU2zVs3mbBB4Xq5zGEzfGM
IP
Hash dff831c9e542467435335fa6605ebc68
0d2f0cf62629a1b454e43768f392f003a6daeba9
6d836009645c304f6f88cd8421c76377e249dbc49692ab2404a2647f3ff2a614
GET /userevents/?funnel_id=T3kxNWpxVDU0TkpRcHduRHV2ck9tQT09LS1NWncyMVBaRHh5USt5S04vZjRVdlVRPT0%3D--90b784ebfdf066c78a0b3a18f131a6795b49b925&page_id=czRCdkYwNWhWNlhGdnU5MWdOVWtsdz09LS0xZTdZVVIrU1hOcmhkQWhXL3RZajRnPT0%3D--b4e34e5e1e58227c26d98c1d746bcbaeed313a13&funnel_step_id=djd5ZHdxMlUxTXJsVlA1cGtNUkhGZz09LS1LaG81ZGNQZDVDVzRzT0ExYjVzQTJnPT0%3D--4c45d3905f3160f3a997e8c995b74241831da20d&user_id=aElSeVJsMnV1a3pNcDR6TjdHeGtUUT09LS1ObzBXdUFrcnBoUFRhZ3VDZTdCZVhBPT0%3D--3904afd23ccc9d6c12cc8ac33a8d3864190bd1d5&account_id=d2QydEVFRVh5dGZGNC9LUHBuS2pIdz09LS1pdjA3YjVLeHVqMk9ma1hQSDF6dXFRPT0%3D--b21a62eba126483145d8803d9d05ffa91da1be31&page_code=NTYzNjYzNjU%3D&mode_id=1&time_zone=UTC&app_domain=app.clickfunnels.com&aff_sub2=&aff_sub3=&aff_sub=&affiliate_id=&cf_affiliate_id=&content=&medium=&name=&source=&term=&client_width=1268&type=Userevents::UniqueVisitorsCreatedSummary&nonce=35c9a7f0-d5c8-4f92-b66d-818c9b678b79&url=https%3A%2F%2Fbestforlife.life%2Findia%3Fcep%3DNcjr1IBwEpaVCDR7gb1W-FGPfyBDcFKrvsN3TnUtKC3-YBpBZeA8K4I8aCQppDpOCh4X5YDyGxZZWBn4AgGWX4VJ_-u2PH-Fe1mMx7Ic55i2jwzIb3UZz0K-7U1j1TMcutJ3YQ7R976S284DLwimzH966zMkmJ9rZyHUAbUJccXBDtoAah4hwbnE7EcTJNHzmRHNpMzldPx6i9wW8T_gw8zk9YPz5Xqdy_0WpwAdR1Czt7BnDU4JX41f5JrUCrFQMEBD2aLDnTT_wWE6ceLuct25kNbpUG5Zg6PR_AvCsuxVfZd1nExlCJp4poF-Qun30uhMN3RK1jpIHZULEXZzQMMIqCaQnNIpveyc9kzJB8IU2zVs3mbBB4Xq5zGEzfGM HTTP/1.1
Host: app.clickfunnels.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://bestforlife.life
Connection: keep-alive
Referer: https://bestforlife.life/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 202 Accepted
date: Thu, 22 Sep 2022 00:08:00 GMT
content-type: text/html
cf-ray: 74e6cdb84a15b4f3-OSL
access-control-allow-origin: *
cache-control: no-cache, no-store
strict-transport-security: max-age=0
vary: Accept-Encoding
cf-cache-status: BYPASS
access-control-allow-credentials: true
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
access-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
access-control-request-method: *
pragma: no-cache
status: 202 Accepted
x-frame-options: ALLOWALL
x-powered-by: Phusion Passenger Enterprise 6.0.7
x-rack-cache: miss
x-request-id: a5ba30a8abc72ac49a9017fe31300b32
x-runtime: 0.041758
set-cookie: __cf_bm=LuSljb.cgI2kPsznv84eTFKc17GmJI3JvCklUvt7xNc-1663805280-0-AWO/szMBllSfGSwfOCL9rAC3VDKo22xPZTZ2JO+8jrSD5jt7tuLWg/f0/2iD4JyCNpAzSAK/NeltCWsCJurn5cvCaMj2SNgJ9uIdskpSM0Tx; path=/; expires=Thu, 22-Sep-22 00:38:00 GMT; domain=.clickfunnels.com; HttpOnly; Secure; SameSite=None
server: cloudflare
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e1b099985efaf8c67552ba2a67ae2a21
b464042a8dd957fd751bc03701e5907b85a02099
e715e3919eba0991fffa4e7123e5561c7190ec5cd6d10d64430be810650486a9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 22 Sep 2022 00:08:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 15af330272b65861c93c7f989a284e90
e3cf4e4108bc8e68819f82722fb6ca11392cdb34
7ebccd17f3283cfcd086121a089c9de4699284acf5809695d7a364835518ec1a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 22 Sep 2022 00:08:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
static.doubleclick.net/instream/ad_status.js
200 OK 28 kB URL HTTP/2 static.doubleclick.net/instream/ad_status.js
IP
Hash 65d730cfd0271a4569a489bcd109536d
933089461db01524be31a7b1afa0da4c88de3c22
c58c8e12cb82db8141e1ee3f04a12d1a586dc7c6da353dcb213c2c97122410ea
GET /instream/ad_status.js HTTP/1.1
Host: static.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="ads-doubleclick-media"
report-to: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]}
timing-allow-origin: *
content-length: 29
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 22 Sep 2022 00:03:04 GMT
expires: Thu, 22 Sep 2022 00:18:04 GMT
cache-control: public, max-age=900
age: 296
last-modified: Thu, 12 Dec 2013 23:40:16 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/id
302 Found 0 B URL HTTP/2 googleads.g.doubleclick.net/pagead/id
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pagead/id HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
location: https://googleads.g.doubleclick.net/pagead/id?slf_rd=1
access-control-allow-credentials: true
access-control-allow-origin: https://www.youtube.com
date: Thu, 22 Sep 2022 00:08:00 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
server: cafe
content-length: 0
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
app.clickfunnels.com/userevents/?funnel_id=T3kxNWpxVDU0TkpRcHduRHV2ck9tQT09LS1NWncyMVBaRHh5USt5S04vZjRVdlVRPT0%3D--90b784ebfdf066c78a0b3a18f131a6795b49b925&page_id=czRCdkYwNWhWNlhGdnU5MWdOVWtsdz09LS0xZTdZVVIrU1hOcmhkQWhXL3RZajRnPT0%3D--b4e34e5e1e58227c26d98c1d746bcbaeed313a13&funnel_step_id=djd5ZHdxMlUxTXJsVlA1cGtNUkhGZz09LS1LaG81ZGNQZDVDVzRzT0ExYjVzQTJnPT0%3D--4c45d3905f3160f3a997e8c995b74241831da20d&user_id=aElSeVJsMnV1a3pNcDR6TjdHeGtUUT09LS1ObzBXdUFrcnBoUFRhZ3VDZTdCZVhBPT0%3D--3904afd23ccc9d6c12cc8ac33a8d3864190bd1d5&account_id=d2QydEVFRVh5dGZGNC9LUHBuS2pIdz09LS1pdjA3YjVLeHVqMk9ma1hQSDF6dXFRPT0%3D--b21a62eba126483145d8803d9d05ffa91da1be31&page_code=NTYzNjYzNjU%3D&mode_id=1&time_zone=UTC&app_domain=app.clickfunnels.com&aff_sub2=&aff_sub3=&aff_sub=&affiliate_id=&cf_affiliate_id=&content=&medium=&name=&source=&term=&client_width=1268&type=Userevents::UniquePageviewsCreatedSummary&nonce=88fc05c6-d319-470c-b3c1-252ebf41b5a1&url=https%3A%2F%2Fbestforlife.life%2Findia%3Fcep%3DNcjr1IBwEpaVCDR7gb1W-FGPfyBDcFKrvsN3TnUtKC3-YBpBZeA8K4I8aCQppDpOCh4X5YDyGxZZWBn4AgGWX4VJ_-u2PH-Fe1mMx7Ic55i2jwzIb3UZz0K-7U1j1TMcutJ3YQ7R976S284DLwimzH966zMkmJ9rZyHUAbUJccXBDtoAah4hwbnE7EcTJNHzmRHNpMzldPx6i9wW8T_gw8zk9YPz5Xqdy_0WpwAdR1Czt7BnDU4JX41f5JrUCrFQMEBD2aLDnTT_wWE6ceLuct25kNbpUG5Zg6PR_AvCsuxVfZd1nExlCJp4poF-Qun30uhMN3RK1jpIHZULEXZzQMMIqCaQnNIpveyc9kzJB8IU2zVs3mbBB4Xq5zGEzfGM
202 Accepted 0 B URL HTTP/2 app.clickfunnels.com/userevents/?funnel_id=T3kxNWpxVDU0TkpRcHduRHV2ck9tQT09LS1NWncyMVBaRHh5USt5S04vZjRVdlVRPT0%3D--90b784ebfdf066c78a0b3a18f131a6795b49b925&page_id=czRCdkYwNWhWNlhGdnU5MWdOVWtsdz09LS0xZTdZVVIrU1hOcmhkQWhXL3RZajRnPT0%3D--b4e34e5e1e58227c26d98c1d746bcbaeed313a13&funnel_step_id=djd5ZHdxMlUxTXJsVlA1cGtNUkhGZz09LS1LaG81ZGNQZDVDVzRzT0ExYjVzQTJnPT0%3D--4c45d3905f3160f3a997e8c995b74241831da20d&user_id=aElSeVJsMnV1a3pNcDR6TjdHeGtUUT09LS1ObzBXdUFrcnBoUFRhZ3VDZTdCZVhBPT0%3D--3904afd23ccc9d6c12cc8ac33a8d3864190bd1d5&account_id=d2QydEVFRVh5dGZGNC9LUHBuS2pIdz09LS1pdjA3YjVLeHVqMk9ma1hQSDF6dXFRPT0%3D--b21a62eba126483145d8803d9d05ffa91da1be31&page_code=NTYzNjYzNjU%3D&mode_id=1&time_zone=UTC&app_domain=app.clickfunnels.com&aff_sub2=&aff_sub3=&aff_sub=&affiliate_id=&cf_affiliate_id=&content=&medium=&name=&source=&term=&client_width=1268&type=Userevents::UniquePageviewsCreatedSummary&nonce=88fc05c6-d319-470c-b3c1-252ebf41b5a1&url=https%3A%2F%2Fbestforlife.life%2Findia%3Fcep%3DNcjr1IBwEpaVCDR7gb1W-FGPfyBDcFKrvsN3TnUtKC3-YBpBZeA8K4I8aCQppDpOCh4X5YDyGxZZWBn4AgGWX4VJ_-u2PH-Fe1mMx7Ic55i2jwzIb3UZz0K-7U1j1TMcutJ3YQ7R976S284DLwimzH966zMkmJ9rZyHUAbUJccXBDtoAah4hwbnE7EcTJNHzmRHNpMzldPx6i9wW8T_gw8zk9YPz5Xqdy_0WpwAdR1Czt7BnDU4JX41f5JrUCrFQMEBD2aLDnTT_wWE6ceLuct25kNbpUG5Zg6PR_AvCsuxVfZd1nExlCJp4poF-Qun30uhMN3RK1jpIHZULEXZzQMMIqCaQnNIpveyc9kzJB8IU2zVs3mbBB4Xq5zGEzfGM
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /userevents/?funnel_id=T3kxNWpxVDU0TkpRcHduRHV2ck9tQT09LS1NWncyMVBaRHh5USt5S04vZjRVdlVRPT0%3D--90b784ebfdf066c78a0b3a18f131a6795b49b925&page_id=czRCdkYwNWhWNlhGdnU5MWdOVWtsdz09LS0xZTdZVVIrU1hOcmhkQWhXL3RZajRnPT0%3D--b4e34e5e1e58227c26d98c1d746bcbaeed313a13&funnel_step_id=djd5ZHdxMlUxTXJsVlA1cGtNUkhGZz09LS1LaG81ZGNQZDVDVzRzT0ExYjVzQTJnPT0%3D--4c45d3905f3160f3a997e8c995b74241831da20d&user_id=aElSeVJsMnV1a3pNcDR6TjdHeGtUUT09LS1ObzBXdUFrcnBoUFRhZ3VDZTdCZVhBPT0%3D--3904afd23ccc9d6c12cc8ac33a8d3864190bd1d5&account_id=d2QydEVFRVh5dGZGNC9LUHBuS2pIdz09LS1pdjA3YjVLeHVqMk9ma1hQSDF6dXFRPT0%3D--b21a62eba126483145d8803d9d05ffa91da1be31&page_code=NTYzNjYzNjU%3D&mode_id=1&time_zone=UTC&app_domain=app.clickfunnels.com&aff_sub2=&aff_sub3=&aff_sub=&affiliate_id=&cf_affiliate_id=&content=&medium=&name=&source=&term=&client_width=1268&type=Userevents::UniquePageviewsCreatedSummary&nonce=88fc05c6-d319-470c-b3c1-252ebf41b5a1&url=https%3A%2F%2Fbestforlife.life%2Findia%3Fcep%3DNcjr1IBwEpaVCDR7gb1W-FGPfyBDcFKrvsN3TnUtKC3-YBpBZeA8K4I8aCQppDpOCh4X5YDyGxZZWBn4AgGWX4VJ_-u2PH-Fe1mMx7Ic55i2jwzIb3UZz0K-7U1j1TMcutJ3YQ7R976S284DLwimzH966zMkmJ9rZyHUAbUJccXBDtoAah4hwbnE7EcTJNHzmRHNpMzldPx6i9wW8T_gw8zk9YPz5Xqdy_0WpwAdR1Czt7BnDU4JX41f5JrUCrFQMEBD2aLDnTT_wWE6ceLuct25kNbpUG5Zg6PR_AvCsuxVfZd1nExlCJp4poF-Qun30uhMN3RK1jpIHZULEXZzQMMIqCaQnNIpveyc9kzJB8IU2zVs3mbBB4Xq5zGEzfGM HTTP/1.1
Host: app.clickfunnels.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://bestforlife.life
Connection: keep-alive
Referer: https://bestforlife.life/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 202 Accepted
date: Thu, 22 Sep 2022 00:08:00 GMT
content-type: text/html
cf-ray: 74e6cdb84a13b4f3-OSL
access-control-allow-origin: *
cache-control: no-cache, no-store
strict-transport-security: max-age=0
vary: Accept-Encoding
cf-cache-status: BYPASS
access-control-allow-credentials: true
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
access-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
access-control-request-method: *
pragma: no-cache
status: 202 Accepted
x-frame-options: ALLOWALL
x-powered-by: Phusion Passenger Enterprise 6.0.7
x-rack-cache: miss
x-request-id: 97590d54dd7fdfc6a952001219a28f16
x-runtime: 0.031015
set-cookie: __cf_bm=4wq5LOlHaVEYxLgc4DWw75.SOXEkZavIWCORAk3jYIc-1663805280-0-Aa9lVp2DG0eK6IPMLXE3AxSXp2iqMHh4Bn4IBf8u8zPQpGH79JWnV8I7M6zeHndbAbKifPsbRiaFJsF7Zkjwop1BQvpjmmaSZF8jZUzbc6nk; path=/; expires=Thu, 22-Sep-22 00:38:00 GMT; domain=.clickfunnels.com; HttpOnly; Secure; SameSite=None
server: cloudflare
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e1b099985efaf8c67552ba2a67ae2a21
b464042a8dd957fd751bc03701e5907b85a02099
e715e3919eba0991fffa4e7123e5561c7190ec5cd6d10d64430be810650486a9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 22 Sep 2022 00:08:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 15af330272b65861c93c7f989a284e90
e3cf4e4108bc8e68819f82722fb6ca11392cdb34
7ebccd17f3283cfcd086121a089c9de4699284acf5809695d7a364835518ec1a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 22 Sep 2022 00:08:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
200 OK 31 kB URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
IP
File type JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Hash d1d371f2b74e2c3d8fcf3cb391bf4b93
353e8d7efff00f47b823f7b1dbaf71f5ff85618f
8948c09dcfa528edeef8da27a553f33bf39be57906c67c7dfb91a978951991a0
POST /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 24
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Thu, 22 Sep 2022 00:08:00 GMT
server: ESF
cache-control: private
content-length: 30888
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 41630fb2c7ef9e435a8762b0943e0980
04b6c8bfe97bc5408e1450b5921331c6ae6de682
e9e83895eef14a5a26e91c9574fc9f60eb2f47959406eabe87b4618412519476
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 22 Sep 2022 00:08:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/js/th/0Q0sPaTf27KkVV0qBrYI7cmJeSJkpG4CF1zVddAZEjs.js
200 OK 14 kB URL HTTP/2 www.google.com/js/th/0Q0sPaTf27KkVV0qBrYI7cmJeSJkpG4CF1zVddAZEjs.js
IP
File type ASCII text, with very long lines (36110)
Hash d348ea7c67cf70cc27add8ec15920c5f
46b2db74425f5c6c10c69831277b83c76c8c24b8
e9198b139add4e4683e04549366c63b57000c4e9d719c0e5820124d63d0fccff
GET /js/th/0Q0sPaTf27KkVV0qBrYI7cmJeSJkpG4CF1zVddAZEjs.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="botguard-scs"
report-to: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]}
content-length: 14308
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 21 Sep 2022 05:09:26 GMT
expires: Thu, 21 Sep 2023 05:09:26 GMT
cache-control: public, max-age=31536000
age: 68315
last-modified: Tue, 13 Sep 2022 11:00:00 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 8812bd1fa7aae4e1a1c07c8e83f169a8
343e735a6c9d78e904456984e4ad1c427ad9ff36
ff7c0bdf2f9bdc0eb48771a456424c8fa595ae398e1ba110f4fb54f1a1caaf8e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 22 Sep 2022 00:08:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
i.ytimg.com/vi_webp/okEUYy2PvHY/sddefault.webp
200 OK 16 kB URL HTTP/2 i.ytimg.com/vi_webp/okEUYy2PvHY/sddefault.webp
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 69490c2522e8f333f950460495642d0f
38cc10f4f16e24740ad20e5913e36fe93f7c47d6
d77c14b639141cdf468d350a5c658a02e81b37493aa20e4c7f164e61aa0bb585
GET /vi_webp/okEUYy2PvHY/sddefault.webp HTTP/1.1
Host: i.ytimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Origin
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 16380
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 22 Sep 2022 00:08:01 GMT
expires: Thu, 22 Sep 2022 00:13:01 GMT
cache-control: public, max-age=300
etag: "0"
content-type: image/webp
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 1b33d59cf038a3fe7273f78fda2cce3a
0b367731ef6df8e1f6c1b8774198daa9959d7cf5
b02b1756112479f92786994de8e884986b0a7eb3d5885300bfd8a64f597f7cc4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 22 Sep 2022 00:08:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
200 OK 31 kB URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
IP
File type JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Hash 5888eb1e18deb8be1d5dbb64eab68c54
5bd90bdf4e7bbe69e67c2fccf9f35edfae5bdbc4
e0b263d2787578289807db6c7c39e160ec7a8f0abd3db79f0bb5ef628f4355fc
POST /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 24
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Thu, 22 Sep 2022 00:08:01 GMT
server: ESF
cache-control: private
content-length: 31004
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 1d744c3eee332d1413a76a05a14fe480
16b898402c9d9ddcc10960cae7a3a65f4569fd88
6461977f05a68482f643f0d0bc859aa77197ff8ab66e28a0f5caafa19fcaa963
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 22 Sep 2022 00:08:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 8812bd1fa7aae4e1a1c07c8e83f169a8
343e735a6c9d78e904456984e4ad1c427ad9ff36
ff7c0bdf2f9bdc0eb48771a456424c8fa595ae398e1ba110f4fb54f1a1caaf8e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 22 Sep 2022 00:08:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
yt3.ggpht.com/ytc/AMLnZu-VhLl8DuOuhoCwoqc99mMiJSpIWXd7c2W6VYuICB8zmwo2CC9Jeuovuvv2Xu9E=s68-c-k-c0x00ffffff-no-rj
200 OK 651 B URL HTTP/2 yt3.ggpht.com/ytc/AMLnZu-VhLl8DuOuhoCwoqc99mMiJSpIWXd7c2W6VYuICB8zmwo2CC9Jeuovuvv2Xu9E=s68-c-k-c0x00ffffff-no-rj
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 68x68, components 3\012- data
Hash 2b339402c32cd376de085bea391a76f2
b168d4d86e0b1380f03f31423ec2942d8bff8bda
5c12a35795f3b83184c70cb5014aecafdf916e0e1de447693a68b3681a0a0758
GET /ytc/AMLnZu-VhLl8DuOuhoCwoqc99mMiJSpIWXd7c2W6VYuICB8zmwo2CC9Jeuovuvv2Xu9E=s68-c-k-c0x00ffffff-no-rj HTTP/1.1
Host: yt3.ggpht.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="unnamed.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 651
x-xss-protection: 0
date: Wed, 21 Sep 2022 21:21:35 GMT
expires: Thu, 22 Sep 2022 21:21:35 GMT
cache-control: public, max-age=86400, no-transform
content-type: image/jpeg
age: 9986
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 1d744c3eee332d1413a76a05a14fe480
16b898402c9d9ddcc10960cae7a3a65f4569fd88
6461977f05a68482f643f0d0bc859aa77197ff8ab66e28a0f5caafa19fcaa963
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 22 Sep 2022 00:08:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.bestforlife.life/hosted/images/31/feeb7ef4754395a22472356af89d12/yg4-winner-ir.jpg
200 OK 11 kB URL HTTP/2 www.bestforlife.life/hosted/images/31/feeb7ef4754395a22472356af89d12/yg4-winner-ir.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, orientation=upper-left], progressive, precision 8, 380x220, components 3\012- data
Hash 2741cb7ef995804be21818c42bef4b52
3d7b57a79949d7b8b804bd65479b8989b1fa72e2
31ed2d20c48e3be84b70c5da50add44e104fba41cf78d8a7968116dbb8c00062
GET /hosted/images/31/feeb7ef4754395a22472356af89d12/yg4-winner-ir.jpg HTTP/1.1
Host: www.bestforlife.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bestforlife.life/
Cookie: __cf_bm=NPCwFmZFOmm199B7.8tCOm.oyVak9pjphXKBMko4fmw-1663805279-0-AULvZLObgjNnzyY4oOcl1dE8k7asC0nLN3TJv28i+SHDNb9HHyMDTmXMD73luy2HTNVNYljLIKKwBrOu+kfcLseT0khEPBF2uHUbM3DJcMly
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Thu, 22 Sep 2022 00:08:01 GMT
content-type: image/jpeg
content-length: 10672
cf-ray: 74e6cdbf28ce0b61-OSL
accept-ranges: bytes
cache-control: max-age=31536000
etag: "f8203edaf825f12c9f2878733a17eefc"
last-modified: Tue, 20 Sep 2022 22:38:08 GMT
cf-cache-status: REVALIDATED
cf-bgj: imgq:85,h2pri
cf-polished: origSize=10869, status=webp_bigger
x-amz-cf-pop: OSL50-C1
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2
www.bestforlife.life/hosted/images/4a/259d6d557944a3ba32a71896c0821d/yg4-winner-gm-1-.jpg
200 OK 16 kB URL HTTP/2 www.bestforlife.life/hosted/images/4a/259d6d557944a3ba32a71896c0821d/yg4-winner-gm-1-.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, orientation=upper-left], progressive, precision 8, 380x220, components 3\012- data
Hash 6daee3627af104a5e773670f97a121ed
5c372c62d44b2fe3b5384eb2e3758f3d08f6225d
4a72e05fd533338e7e89bc0b84d580271937b8a0c2f6e0d106dceb4a6ab31b33
GET /hosted/images/4a/259d6d557944a3ba32a71896c0821d/yg4-winner-gm-1-.jpg HTTP/1.1
Host: www.bestforlife.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bestforlife.life/
Cookie: __cf_bm=NPCwFmZFOmm199B7.8tCOm.oyVak9pjphXKBMko4fmw-1663805279-0-AULvZLObgjNnzyY4oOcl1dE8k7asC0nLN3TJv28i+SHDNb9HHyMDTmXMD73luy2HTNVNYljLIKKwBrOu+kfcLseT0khEPBF2uHUbM3DJcMly
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Thu, 22 Sep 2022 00:08:01 GMT
content-type: image/jpeg
content-length: 15535
cf-ray: 74e6cdbf28d00b61-OSL
accept-ranges: bytes
cache-control: max-age=31536000
etag: "9ee74e7d730fc9f1a89a85f37e686db4"
last-modified: Tue, 20 Sep 2022 22:38:25 GMT
cf-cache-status: REVALIDATED
cf-bgj: imgq:85,h2pri
cf-polished: origSize=15644, status=webp_bigger
x-amz-cf-pop: OSL50-C1
report-to: {"endpoints":[{"url":"https:\/\/csp-reporting.cloudflare.com\/cdn-cgi\/script_monitor\/report?m=OGy0RZfig5RdGJ7IyBm5TF00HJ2VuckTAGFBebof8o8-1663805281-0-AQEfjS1Erp2Y5bb5HFZAKEDe1eQDhislTV3Ih9bGs2kvJEf9ZgXP85MEDTQ5ZJIMxX9CYiNtP4752KgZRMOn2bFAqEsuW4YKmGEaO3tCj5-R"}],"group":"cf-csp-endpoint","max_age":86400}
content-security-policy-report-only: script-src 'none'; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=OGy0RZfig5RdGJ7IyBm5TF00HJ2VuckTAGFBebof8o8-1663805281-0-AQEfjS1Erp2Y5bb5HFZAKEDe1eQDhislTV3Ih9bGs2kvJEf9ZgXP85MEDTQ5ZJIMxX9CYiNtP4752KgZRMOn2bFAqEsuW4YKmGEaO3tCj5-R; report-to cf-csp-endpoint
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2
www.bestforlife.life/hosted/images/a3/84941e79e749d98e6d053f0260b788/award-4_en.png
200 OK 14 kB URL HTTP/2 www.bestforlife.life/hosted/images/a3/84941e79e749d98e6d053f0260b788/award-4_en.png
IP
File type PNG image data, 400 x 400, 8-bit colormap, non-interlaced\012- data
Hash b23f8f54ca7abb700b60d729aa501b59
67d4177852367711d469014b4d6ad628f1c7ef37
73d59114ada9ae1fcca329c92713cd294e29c6471ed1e5b1cec036182ad94da2
GET /hosted/images/a3/84941e79e749d98e6d053f0260b788/award-4_en.png HTTP/1.1
Host: www.bestforlife.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bestforlife.life/
Cookie: __cf_bm=NPCwFmZFOmm199B7.8tCOm.oyVak9pjphXKBMko4fmw-1663805279-0-AULvZLObgjNnzyY4oOcl1dE8k7asC0nLN3TJv28i+SHDNb9HHyMDTmXMD73luy2HTNVNYljLIKKwBrOu+kfcLseT0khEPBF2uHUbM3DJcMly
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Thu, 22 Sep 2022 00:08:01 GMT
content-type: image/png
content-length: 13514
cf-ray: 74e6cdbf38d60b61-OSL
accept-ranges: bytes
cache-control: max-age=31536000
etag: "937cf3f8584c35e27f97d9354fb41312"
last-modified: Mon, 12 Sep 2022 06:40:44 GMT
vary: Accept, Accept-Encoding
cf-cache-status: REVALIDATED
cf-bgj: imgq:85,h2pri
cf-polished: origSize=13535
x-amz-cf-pop: SOF50-C1
report-to: {"endpoints":[{"url":"https:\/\/csp-reporting.cloudflare.com\/cdn-cgi\/script_monitor\/report?m=AHduLtdW6_BgNdW9soKroYOBYdtGRyWSvkWsQg_r0wE-1663805281-0-AZnya2sCdNWjkTg2RVWhe_TKeGlGL97EAixX0rXisBS7rg6RYdne8MAxQyf9Js8n8ERTYzVpODKmrUkDzIq7G8dwMR_zhmywG2P0pdQ88hon"}],"group":"cf-csp-endpoint","max_age":86400}
content-security-policy-report-only: script-src 'none'; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=AHduLtdW6_BgNdW9soKroYOBYdtGRyWSvkWsQg_r0wE-1663805281-0-AZnya2sCdNWjkTg2RVWhe_TKeGlGL97EAixX0rXisBS7rg6RYdne8MAxQyf9Js8n8ERTYzVpODKmrUkDzIq7G8dwMR_zhmywG2P0pdQ88hon; report-to cf-csp-endpoint
server: cloudflare
X-Firefox-Spdy: h2
www.bestforlife.life/hosted/images/5f/9d9fd2f7b542179fd44868c1151845/award-1_en.png
200 OK 28 kB URL HTTP/2 www.bestforlife.life/hosted/images/5f/9d9fd2f7b542179fd44868c1151845/award-1_en.png
IP
File type PNG image data, 400 x 400, 8-bit colormap, non-interlaced\012- data
Hash 7019715972c14ccc264916cb5797dc48
44f3faf4e591cc9ef9ad3761da4fbc2f0f3302db
a4902f16ae13da544d75eafbb37de6d71bda8ae9b19f90bfb03f38a80d99e6ad
GET /hosted/images/5f/9d9fd2f7b542179fd44868c1151845/award-1_en.png HTTP/1.1
Host: www.bestforlife.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bestforlife.life/
Cookie: __cf_bm=NPCwFmZFOmm199B7.8tCOm.oyVak9pjphXKBMko4fmw-1663805279-0-AULvZLObgjNnzyY4oOcl1dE8k7asC0nLN3TJv28i+SHDNb9HHyMDTmXMD73luy2HTNVNYljLIKKwBrOu+kfcLseT0khEPBF2uHUbM3DJcMly
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Thu, 22 Sep 2022 00:08:01 GMT
content-type: image/png
content-length: 27840
cf-ray: 74e6cdbf28d20b61-OSL
accept-ranges: bytes
cache-control: max-age=31536000
etag: "1929b0d827ebdc6e911d585c21a34cf5"
last-modified: Mon, 12 Sep 2022 06:40:43 GMT
vary: Accept, Accept-Encoding
cf-cache-status: REVALIDATED
cf-bgj: imgq:85,h2pri
cf-polished: origSize=27861
x-amz-cf-pop: SOF50-C1
report-to: {"endpoints":[{"url":"https:\/\/csp-reporting.cloudflare.com\/cdn-cgi\/script_monitor\/report?m=mi7inGgp9IkDBwjLLBGAzNn7lO422dDskzQ5EQwo0oQ-1663805281-0-AUcsN_ezIHVCVIDVHxynhg5rxj1uSzwQ5Z68eMteosYnabhLwQukp1n1ta9_iVknj-QvM09L_O8A6FjEAWi8afrFKL_wq-RqH6QM7wxxC5v0"}],"group":"cf-csp-endpoint","max_age":86400}
content-security-policy-report-only: script-src 'none'; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=mi7inGgp9IkDBwjLLBGAzNn7lO422dDskzQ5EQwo0oQ-1663805281-0-AUcsN_ezIHVCVIDVHxynhg5rxj1uSzwQ5Z68eMteosYnabhLwQukp1n1ta9_iVknj-QvM09L_O8A6FjEAWi8afrFKL_wq-RqH6QM7wxxC5v0; report-to cf-csp-endpoint
server: cloudflare
X-Firefox-Spdy: h2
www.bestforlife.life/hosted/images/19/5fbfa939824f7cb34e20bc7c93965f/yg4-winner-dp-1-.jpg
200 OK 18 kB URL HTTP/2 www.bestforlife.life/hosted/images/19/5fbfa939824f7cb34e20bc7c93965f/yg4-winner-dp-1-.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, orientation=upper-left], progressive, precision 8, 380x220, components 3\012- data
Hash 9afa309d09d421cb5e6982c086b657bb
82da08a6ee5e57a15396f5bfebf3175ebe2330fa
a20841a87de609409625b9b8ee4b2e7e0e33c9c74353ad848af8b71d1a1860ac
GET /hosted/images/19/5fbfa939824f7cb34e20bc7c93965f/yg4-winner-dp-1-.jpg HTTP/1.1
Host: www.bestforlife.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bestforlife.life/
Cookie: __cf_bm=NPCwFmZFOmm199B7.8tCOm.oyVak9pjphXKBMko4fmw-1663805279-0-AULvZLObgjNnzyY4oOcl1dE8k7asC0nLN3TJv28i+SHDNb9HHyMDTmXMD73luy2HTNVNYljLIKKwBrOu+kfcLseT0khEPBF2uHUbM3DJcMly
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Thu, 22 Sep 2022 00:08:01 GMT
content-type: image/jpeg
content-length: 17961
cf-ray: 74e6cdbf28d10b61-OSL
accept-ranges: bytes
cache-control: max-age=31536000
etag: "9607c8474129e1d5ab5dde2c92007ffe"
last-modified: Tue, 20 Sep 2022 22:38:50 GMT
cf-cache-status: REVALIDATED
cf-bgj: imgq:85,h2pri
cf-polished: origSize=18118, status=webp_bigger
x-amz-cf-pop: OSL50-C1
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2
www.bestforlife.life/hosted/images/e7/9c5e6dbb284b419f2581a72d8f3e84/award-5_en.png
200 OK 38 kB URL HTTP/2 www.bestforlife.life/hosted/images/e7/9c5e6dbb284b419f2581a72d8f3e84/award-5_en.png
IP
File type PNG image data, 400 x 400, 8-bit colormap, non-interlaced\012- data
Hash ce7b869474e06a1514a28029fe8fa9bc
ea6626ab98fc9c58b2c4e41f1d409aded8697e2b
e55d0a706f85ff9918f5d1c5f8edbb291fe4b4d33991e10ce9f6fc43c5a3cf0c
GET /hosted/images/e7/9c5e6dbb284b419f2581a72d8f3e84/award-5_en.png HTTP/1.1
Host: www.bestforlife.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bestforlife.life/
Cookie: __cf_bm=NPCwFmZFOmm199B7.8tCOm.oyVak9pjphXKBMko4fmw-1663805279-0-AULvZLObgjNnzyY4oOcl1dE8k7asC0nLN3TJv28i+SHDNb9HHyMDTmXMD73luy2HTNVNYljLIKKwBrOu+kfcLseT0khEPBF2uHUbM3DJcMly
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Thu, 22 Sep 2022 00:08:01 GMT
content-type: image/png
content-length: 37891
cf-ray: 74e6cdbf38d50b61-OSL
accept-ranges: bytes
cache-control: max-age=31536000
etag: "bef47ae0e5472d7cd0e2217b855bca7e"
last-modified: Mon, 12 Sep 2022 06:40:44 GMT
vary: Accept, Accept-Encoding
cf-cache-status: REVALIDATED
cf-bgj: imgq:85,h2pri
cf-polished: origSize=37912
x-amz-cf-pop: SOF50-C1
server: cloudflare
X-Firefox-Spdy: h2
js-agent.newrelic.com/nr-1216.min.js
200 OK 14 kB URL HTTP/2 js-agent.newrelic.com/nr-1216.min.js
IP
File type ASCII text, with very long lines (32022)
Hash b7c09cc097b2847f9edc784adba62dcb
5aa648623cf5e3b4b215fe5d068a7904c59f2925
6da450b6a3ba53bdab36f6529e987a245cdfca9a37b77790f06dfd8d5797bdaa
GET /nr-1216.min.js HTTP/1.1
Host: js-agent.newrelic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bestforlife.life/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: Vf9xsFZHH0UI6bmTnW+KeBzegICGOxvtMLIWtbljNKoJtdkUEk/MfmbYPFui+bgtiUf/4lC5dk8=
x-amz-request-id: 4AV5AVKCCR961CNG
last-modified: Thu, 14 Apr 2022 16:45:57 GMT
etag: "9f533d8cd24b2c5e3b4dc886ecbd43e8"
x-amz-version-id: mHHzJIqOizHibcYt0xqAszRr0gQRiNYy
content-type: application/javascript
server: AmazonS3
cache-control: public, max-age=7200, stale-if-error=604800
content-encoding: gzip
accept-ranges: bytes
date: Thu, 22 Sep 2022 00:08:01 GMT
via: 1.1 varnish
x-served-by: cache-bma1672-BMA
x-cache: HIT
x-cache-hits: 532
x-timer: S1663805281.370381,VS0,VE0
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
content-length: 14391
X-Firefox-Spdy: h2
www.bestforlife.life/images/background.png?_unique=0.6392323826454296&_uniqueVisitorID=null&_type=WINDOW&_location=ttps%3A//bestforlife.life/india%3Fcep%3DNcjr1IBwEpaVCDR7gb1W-FGPfyBDcFKrvsN3TnUtKC3-YBpBZeA8K4I8aCQppDpOCh4X5YDyGxZZWBn4AgGWX4VJ_-u2PH-Fe1mMx7Ic55i2jwzIb3UZz0K-7U1j1TMcutJ3YQ7R976S284DLwimzH966zMkmJ9rZyHUAbUJccXBDtoAah4hwbnE7EcTJNHzmRHNpMzldPx6i9wW8T_gw8zk9YPz5Xqdy_0WpwAdR1Czt7BnDU4JX41f5JrUCrFQMEBD2aLDnTT_wWE6ceLuct25kNbpUG5Zg6PR_AvCsuxVfZd1nExlCJp4poF-Qun30uhMN3RK1jpIHZULEXZzQMMIqCaQnNIpveyc9kzJB8IU2zVs3mbBB4Xq5zGEzfGM&_title=Jeetcity%20Casino&_key=fyzzeg1v&_page_key=knabb6fl8kqpwjea&_fid=12446350&_fspos=2&_fvrs=1&_funnel_stat=0&_location=https://bestforlife.life/india?cep=Ncjr1IBwEpaVCDR7gb1W-FGPfyBDcFKrvsN3TnUtKC3-YBpBZeA8K4I8aCQppDpOCh4X5YDyGxZZWBn4AgGWX4VJ_-u2PH-Fe1mMx7Ic55i2jwzIb3UZz0K-7U1j1TMcutJ3YQ7R976S284DLwimzH966zMkmJ9rZyHUAbUJccXBDtoAah4hwbnE7EcTJNHzmRHNpMzldPx6i9wW8T_gw8zk9YPz5Xqdy_0WpwAdR1Czt7BnDU4JX41f5JrUCrFQMEBD2aLDnTT_wWE6ceLuct25kNbpUG5Zg6PR_AvCsuxVfZd1nExlCJp4poF-Qun30uhMN3RK1jpIHZULEXZzQMMIqCaQnNIpveyc9kzJB8IU2zVs3mbBB4Xq5zGEzfGM&_referrer=
200 OK 89 B URL HTTP/2 www.bestforlife.life/images/background.png?_unique=0.6392323826454296&_uniqueVisitorID=null&_type=WINDOW&_location=ttps%3A//bestforlife.life/india%3Fcep%3DNcjr1IBwEpaVCDR7gb1W-FGPfyBDcFKrvsN3TnUtKC3-YBpBZeA8K4I8aCQppDpOCh4X5YDyGxZZWBn4AgGWX4VJ_-u2PH-Fe1mMx7Ic55i2jwzIb3UZz0K-7U1j1TMcutJ3YQ7R976S284DLwimzH966zMkmJ9rZyHUAbUJccXBDtoAah4hwbnE7EcTJNHzmRHNpMzldPx6i9wW8T_gw8zk9YPz5Xqdy_0WpwAdR1Czt7BnDU4JX41f5JrUCrFQMEBD2aLDnTT_wWE6ceLuct25kNbpUG5Zg6PR_AvCsuxVfZd1nExlCJp4poF-Qun30uhMN3RK1jpIHZULEXZzQMMIqCaQnNIpveyc9kzJB8IU2zVs3mbBB4Xq5zGEzfGM&_title=Jeetcity%20Casino&_key=fyzzeg1v&_page_key=knabb6fl8kqpwjea&_fid=12446350&_fspos=2&_fvrs=1&_funnel_stat=0&_location=https://bestforlife.life/india?cep=Ncjr1IBwEpaVCDR7gb1W-FGPfyBDcFKrvsN3TnUtKC3-YBpBZeA8K4I8aCQppDpOCh4X5YDyGxZZWBn4AgGWX4VJ_-u2PH-Fe1mMx7Ic55i2jwzIb3UZz0K-7U1j1TMcutJ3YQ7R976S284DLwimzH966zMkmJ9rZyHUAbUJccXBDtoAah4hwbnE7EcTJNHzmRHNpMzldPx6i9wW8T_gw8zk9YPz5Xqdy_0WpwAdR1Czt7BnDU4JX41f5JrUCrFQMEBD2aLDnTT_wWE6ceLuct25kNbpUG5Zg6PR_AvCsuxVfZd1nExlCJp4poF-Qun30uhMN3RK1jpIHZULEXZzQMMIqCaQnNIpveyc9kzJB8IU2zVs3mbBB4Xq5zGEzfGM&_referrer=
IP
File type ASCII text, with no line terminators
Hash 5a35afeb4fbc0b5bc738b34e441fc611
4579c620d1dd36cc3075fddb7b98df285ba0b2f7
8b48e24c20e3fd85ad9cb0fd682209f02fe78ff75948eb166d4de858d4b03e45
GET /images/background.png?_unique=0.6392323826454296&_uniqueVisitorID=null&_type=WINDOW&_location=ttps%3A//bestforlife.life/india%3Fcep%3DNcjr1IBwEpaVCDR7gb1W-FGPfyBDcFKrvsN3TnUtKC3-YBpBZeA8K4I8aCQppDpOCh4X5YDyGxZZWBn4AgGWX4VJ_-u2PH-Fe1mMx7Ic55i2jwzIb3UZz0K-7U1j1TMcutJ3YQ7R976S284DLwimzH966zMkmJ9rZyHUAbUJccXBDtoAah4hwbnE7EcTJNHzmRHNpMzldPx6i9wW8T_gw8zk9YPz5Xqdy_0WpwAdR1Czt7BnDU4JX41f5JrUCrFQMEBD2aLDnTT_wWE6ceLuct25kNbpUG5Zg6PR_AvCsuxVfZd1nExlCJp4poF-Qun30uhMN3RK1jpIHZULEXZzQMMIqCaQnNIpveyc9kzJB8IU2zVs3mbBB4Xq5zGEzfGM&_title=Jeetcity%20Casino&_key=fyzzeg1v&_page_key=knabb6fl8kqpwjea&_fid=12446350&_fspos=2&_fvrs=1&_funnel_stat=0&_location=https://bestforlife.life/india?cep=Ncjr1IBwEpaVCDR7gb1W-FGPfyBDcFKrvsN3TnUtKC3-YBpBZeA8K4I8aCQppDpOCh4X5YDyGxZZWBn4AgGWX4VJ_-u2PH-Fe1mMx7Ic55i2jwzIb3UZz0K-7U1j1TMcutJ3YQ7R976S284DLwimzH966zMkmJ9rZyHUAbUJccXBDtoAah4hwbnE7EcTJNHzmRHNpMzldPx6i9wW8T_gw8zk9YPz5Xqdy_0WpwAdR1Czt7BnDU4JX41f5JrUCrFQMEBD2aLDnTT_wWE6ceLuct25kNbpUG5Zg6PR_AvCsuxVfZd1nExlCJp4poF-Qun30uhMN3RK1jpIHZULEXZzQMMIqCaQnNIpveyc9kzJB8IU2zVs3mbBB4Xq5zGEzfGM&_referrer= HTTP/1.1
Host: www.bestforlife.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://bestforlife.life
Connection: keep-alive
Referer: https://bestforlife.life/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Thu, 22 Sep 2022 00:08:01 GMT
content-type: text/javascript; charset=utf-8
cf-ray: 74e6cdbf38d90b61-OSL
access-control-allow-origin: *
cache-control: no-cache, no-store
strict-transport-security: max-age=0
cf-cache-status: DYNAMIC
access-control-allow-credentials: true
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
access-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
access-control-request-method: *
status: 200 OK
x-frame-options: ALLOWALL
x-powered-by: Phusion Passenger Enterprise 6.0.7
x-rack-cache: miss
x-request-id: d59f0a0c70ab867304530b1ed8426d38
x-runtime: 0.031352
set-cookie: __cf_bm=ogf85RWyqrKMxrc6wneewsKlmwMOGJOTSDGxKFieDY8-1663805281-0-AVyFGTvFDSoctFekF2Lz6iDjfE4BDD3oCk8/QZcm4UYVW8yZxFs1AWAInVFV1rgC2Pbij8aQt7itivFgxWQClNn4NLorHvCqHKv/o9X3Kykz; path=/; expires=Thu, 22-Sep-22 00:38:01 GMT; domain=.www.bestforlife.life; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash d42f2291100fe0703a7eebdc6de8acc3
6b03000e82ddf4dad3af2236ff1943ca40054fc3
6b2dc77e7380de5c977c4185321775d078038f2e48f7c8feb7cbcc6f3cb444e8
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5400
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 22 Sep 2022 00:08:01 GMT
Last-Modified: Wed, 21 Sep 2022 22:38:01 GMT
Server: ECS (ska/F705)
X-Cache: HIT
Content-Length: 471
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
200 OK 0 B URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-goog-api-key,x-user-agent
Referer: https://www.youtube.com/
Origin: https://www.youtube.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://www.youtube.com
vary: origin, referer, x-origin
access-control-allow-credentials: true
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
access-control-allow-headers: content-type,x-goog-api-key,x-user-agent
access-control-max-age: 3600
date: Thu, 22 Sep 2022 00:08:01 GMT
content-type: text/html
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
200 OK 0 B URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-goog-api-key,x-user-agent
Referer: https://www.youtube.com/
Origin: https://www.youtube.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://www.youtube.com
vary: origin, referer, x-origin
access-control-allow-credentials: true
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
access-control-allow-headers: content-type,x-goog-api-key,x-user-agent
access-control-max-age: 3600
date: Thu, 22 Sep 2022 00:08:01 GMT
content-type: text/html
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
200 OK 114 B URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 3d87f42c9d4aff3f150c02409d1a4238
521bf56d1e6d0718130ed4b9ea803887944f21a5
badb58c649721c5de6427117e61bb92743a2e181f989e2127ed183e1b79ee1f1
POST /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 1092
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Thu, 22 Sep 2022 00:08:01 GMT
server: ESF
cache-control: private
content-length: 114
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
200 OK 110 B URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 61da02e33c4cf8983aca37720296e088
a1030137850ac38fc4ae2215d6dfe20e142c8c08
9f6b625e7e6d4284855120b1ebaac29503a334ba578ef7bb9cdbf438e08a132e
POST /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 1256
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Thu, 22 Sep 2022 00:08:01 GMT
server: ESF
cache-control: private
content-length: 110
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
bestforlife.life/cdn-cgi/rum?
404 Not Found 14 kB URL HTTP/2 bestforlife.life/cdn-cgi/rum?
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (16728), with CRLF, LF line terminators
Hash 2fd342c93cb312faa1ba677916751786
73332a4af13a51ba7fef8f3b9e1e3f5829a216f4
1e8faf0b838b733a2bfaca8da5ed5b38140a6eddcbd290d6844224a364ab15c1
Analyzer Verdict Alert fortinet Phishing
POST /cdn-cgi/rum? HTTP/1.1
Host: bestforlife.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
content-type: application/json
Content-Length: 14669
Origin: https://bestforlife.life
Connection: keep-alive
Referer: https://bestforlife.life/india?cep=Ncjr1IBwEpaVCDR7gb1W-FGPfyBDcFKrvsN3TnUtKC3-YBpBZeA8K4I8aCQppDpOCh4X5YDyGxZZWBn4AgGWX4VJ_-u2PH-Fe1mMx7Ic55i2jwzIb3UZz0K-7U1j1TMcutJ3YQ7R976S284DLwimzH966zMkmJ9rZyHUAbUJccXBDtoAah4hwbnE7EcTJNHzmRHNpMzldPx6i9wW8T_gw8zk9YPz5Xqdy_0WpwAdR1Czt7BnDU4JX41f5JrUCrFQMEBD2aLDnTT_wWE6ceLuct25kNbpUG5Zg6PR_AvCsuxVfZd1nExlCJp4poF-Qun30uhMN3RK1jpIHZULEXZzQMMIqCaQnNIpveyc9kzJB8IU2zVs3mbBB4Xq5zGEzfGM
Cookie: PHPSESSID=29ce99ff562836a607b9e351ef3fcb35; cf:aff_sub2=; cf:aff_sub3=; cf:aff_sub=; cf:affiliate_id=; cf:cf_affiliate_id=; cf:content=; cf:medium=; cf:name=; cf:source=; cf:term=; cf:NTYzNjYzNjU=:visited=true; cf:visitor_id=caa8ab28-248c-47cf-8793-11dc5905e4ba; cep=Ncjr1IBwEpaVCDR7gb1W-FGPfyBDcFKrvsN3TnUtKC3-YBpBZeA8K4I8aCQppDpOCh4X5YDyGxZZWBn4AgGWX4VJ_-u2PH-Fe1mMx7Ic55i2jwzIb3UZz0K-7U1j1TMcutJ3YQ7R976S284DLwimzH966zMkmJ9rZyHUAbUJccXBDtoAah4hwbnE7EcTJNHzmRHNpMzldPx6i9wW8T_gw8zk9YPz5Xqdy_0WpwAdR1Czt7BnDU4JX41f5JrUCrFQMEBD2aLDnTT_wWE6ceLuct25kNbpUG5Zg6PR_AvCsuxVfZd1nExlCJp4poF-Qun30uhMN3RK1jpIHZULEXZzQMMIqCaQnNIpveyc9kzJB8IU2zVs3mbBB4Xq5zGEzfGM; addevent_track_cookie=1a4f8b59-9ac6-499e-2c28-354ff59bc62f; is_eu=false; knabb6fl8kqpwjea=true; 12446350_viewed_2=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
link: <https://bestforlife.life/wp-json/>; rel="https://api.w.org/"
vary: Accept-Encoding
content-encoding: gzip
content-length: 14262
content-type: text/html; charset=UTF-8
date: Thu, 22 Sep 2022 00:08:01 GMT
server: Apache
X-Firefox-Spdy: h2
bam.nr-data.net/1/NRJS-fc902efb332119fff33?a=367981416&v=1216.487a282&to=dFZWTENWVQ9QExdNRlJLSFlWXEpMRQBfXUYYSU1aXVBKC1AF&rst=3990&ck=1&ref=https://bestforlife.life/india&ap=316&be=1191&fe=3652&dc=2545&perf=%7B%22timing%22:%7B%22of%22:1663805277251,%22n%22:0,%22f%22:367,%22dn%22:383,%22dne%22:383,%22c%22:385,%22s%22:524,%22ce%22:673,%22rq%22:673,%22rp%22:1168,%22rpe%22:1168,%22dl%22:1179,%22di%22:2522,%22ds%22:2544,%22de%22:2738,%22dc%22:3651,%22l%22:3651,%22le%22:3768%7D,%22navigation%22:%7B%7D%7D&fcp=1835&jsonp=NREUM.setToken
200 OK 29 kB URL HTTP/1.1 bam.nr-data.net/1/NRJS-fc902efb332119fff33?a=367981416&v=1216.487a282&to=dFZWTENWVQ9QExdNRlJLSFlWXEpMRQBfXUYYSU1aXVBKC1AF&rst=3990&ck=1&ref=https://bestforlife.life/india&ap=316&be=1191&fe=3652&dc=2545&perf=%7B%22timing%22:%7B%22of%22:1663805277251,%22n%22:0,%22f%22:367,%22dn%22:383,%22dne%22:383,%22c%22:385,%22s%22:524,%22ce%22:673,%22rq%22:673,%22rp%22:1168,%22rpe%22:1168,%22dl%22:1179,%22di%22:2522,%22ds%22:2544,%22de%22:2738,%22dc%22:3651,%22l%22:3651,%22le%22:3768%7D,%22navigation%22:%7B%7D%7D&fcp=1835&jsonp=NREUM.setToken
IP
Hash 9a86806f121ba7a65d508e460dd62409
ab58d55adb29085db6d9c69d5018b49e0ff60adf
85263f58eb54557816d5ad6962f3342dc350a60478f337277ca284928aaf14bc
GET /1/NRJS-fc902efb332119fff33?a=367981416&v=1216.487a282&to=dFZWTENWVQ9QExdNRlJLSFlWXEpMRQBfXUYYSU1aXVBKC1AF&rst=3990&ck=1&ref=https://bestforlife.life/india&ap=316&be=1191&fe=3652&dc=2545&perf=%7B%22timing%22:%7B%22of%22:1663805277251,%22n%22:0,%22f%22:367,%22dn%22:383,%22dne%22:383,%22c%22:385,%22s%22:524,%22ce%22:673,%22rq%22:673,%22rp%22:1168,%22rpe%22:1168,%22dl%22:1179,%22di%22:2522,%22ds%22:2544,%22de%22:2738,%22dc%22:3651,%22l%22:3651,%22le%22:3768%7D,%22navigation%22:%7B%7D%7D&fcp=1835&jsonp=NREUM.setToken HTTP/1.1
Host: bam.nr-data.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bestforlife.life/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Thu, 22 Sep 2022 00:08:01 GMT
Content-Type: text/javascript
Transfer-Encoding: chunked
Connection: keep-alive
CF-Ray: 74e6cdc209d00b4d-OSL
Access-Control-Allow-Origin: *
Set-Cookie: JSESSIONID=f0780ed13f73958a; Path=/; Domain=.nr-data.net; Secure; SameSite=None
CF-Cache-Status: DYNAMIC
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS
Cross-Origin-Resource-Policy: cross-origin
Vary: Accept-Encoding
Server: cloudflare
Content-Encoding: gzip
app.clickfunnels.com/userevents/?funnel_id=T3kxNWpxVDU0TkpRcHduRHV2ck9tQT09LS1NWncyMVBaRHh5USt5S04vZjRVdlVRPT0%3D--90b784ebfdf066c78a0b3a18f131a6795b49b925&page_id=czRCdkYwNWhWNlhGdnU5MWdOVWtsdz09LS0xZTdZVVIrU1hOcmhkQWhXL3RZajRnPT0%3D--b4e34e5e1e58227c26d98c1d746bcbaeed313a13&funnel_step_id=djd5ZHdxMlUxTXJsVlA1cGtNUkhGZz09LS1LaG81ZGNQZDVDVzRzT0ExYjVzQTJnPT0%3D--4c45d3905f3160f3a997e8c995b74241831da20d&user_id=aElSeVJsMnV1a3pNcDR6TjdHeGtUUT09LS1ObzBXdUFrcnBoUFRhZ3VDZTdCZVhBPT0%3D--3904afd23ccc9d6c12cc8ac33a8d3864190bd1d5&account_id=d2QydEVFRVh5dGZGNC9LUHBuS2pIdz09LS1pdjA3YjVLeHVqMk9ma1hQSDF6dXFRPT0%3D--b21a62eba126483145d8803d9d05ffa91da1be31&page_code=NTYzNjYzNjU%3D&mode_id=1&time_zone=UTC&app_domain=app.clickfunnels.com&aff_sub2=&aff_sub3=&aff_sub=&affiliate_id=&cf_affiliate_id=&content=&medium=&name=&source=&term=&client_width=1268&type=Userevents::PageviewsCreatedSummary&nonce=b8d8dc0f-6271-4528-9468-a661b2ed2683&url=https%3A%2F%2Fbestforlife.life%2Findia%3Fcep%3DNcjr1IBwEpaVCDR7gb1W-FGPfyBDcFKrvsN3TnUtKC3-YBpBZeA8K4I8aCQppDpOCh4X5YDyGxZZWBn4AgGWX4VJ_-u2PH-Fe1mMx7Ic55i2jwzIb3UZz0K-7U1j1TMcutJ3YQ7R976S284DLwimzH966zMkmJ9rZyHUAbUJccXBDtoAah4hwbnE7EcTJNHzmRHNpMzldPx6i9wW8T_gw8zk9YPz5Xqdy_0WpwAdR1Czt7BnDU4JX41f5JrUCrFQMEBD2aLDnTT_wWE6ceLuct25kNbpUG5Zg6PR_AvCsuxVfZd1nExlCJp4poF-Qun30uhMN3RK1jpIHZULEXZzQMMIqCaQnNIpveyc9kzJB8IU2zVs3mbBB4Xq5zGEzfGM
202 Accepted 0 B URL HTTP/2 app.clickfunnels.com/userevents/?funnel_id=T3kxNWpxVDU0TkpRcHduRHV2ck9tQT09LS1NWncyMVBaRHh5USt5S04vZjRVdlVRPT0%3D--90b784ebfdf066c78a0b3a18f131a6795b49b925&page_id=czRCdkYwNWhWNlhGdnU5MWdOVWtsdz09LS0xZTdZVVIrU1hOcmhkQWhXL3RZajRnPT0%3D--b4e34e5e1e58227c26d98c1d746bcbaeed313a13&funnel_step_id=djd5ZHdxMlUxTXJsVlA1cGtNUkhGZz09LS1LaG81ZGNQZDVDVzRzT0ExYjVzQTJnPT0%3D--4c45d3905f3160f3a997e8c995b74241831da20d&user_id=aElSeVJsMnV1a3pNcDR6TjdHeGtUUT09LS1ObzBXdUFrcnBoUFRhZ3VDZTdCZVhBPT0%3D--3904afd23ccc9d6c12cc8ac33a8d3864190bd1d5&account_id=d2QydEVFRVh5dGZGNC9LUHBuS2pIdz09LS1pdjA3YjVLeHVqMk9ma1hQSDF6dXFRPT0%3D--b21a62eba126483145d8803d9d05ffa91da1be31&page_code=NTYzNjYzNjU%3D&mode_id=1&time_zone=UTC&app_domain=app.clickfunnels.com&aff_sub2=&aff_sub3=&aff_sub=&affiliate_id=&cf_affiliate_id=&content=&medium=&name=&source=&term=&client_width=1268&type=Userevents::PageviewsCreatedSummary&nonce=b8d8dc0f-6271-4528-9468-a661b2ed2683&url=https%3A%2F%2Fbestforlife.life%2Findia%3Fcep%3DNcjr1IBwEpaVCDR7gb1W-FGPfyBDcFKrvsN3TnUtKC3-YBpBZeA8K4I8aCQppDpOCh4X5YDyGxZZWBn4AgGWX4VJ_-u2PH-Fe1mMx7Ic55i2jwzIb3UZz0K-7U1j1TMcutJ3YQ7R976S284DLwimzH966zMkmJ9rZyHUAbUJccXBDtoAah4hwbnE7EcTJNHzmRHNpMzldPx6i9wW8T_gw8zk9YPz5Xqdy_0WpwAdR1Czt7BnDU4JX41f5JrUCrFQMEBD2aLDnTT_wWE6ceLuct25kNbpUG5Zg6PR_AvCsuxVfZd1nExlCJp4poF-Qun30uhMN3RK1jpIHZULEXZzQMMIqCaQnNIpveyc9kzJB8IU2zVs3mbBB4Xq5zGEzfGM
IP
GET /userevents/?funnel_id=T3kxNWpxVDU0TkpRcHduRHV2ck9tQT09LS1NWncyMVBaRHh5USt5S04vZjRVdlVRPT0%3D--90b784ebfdf066c78a0b3a18f131a6795b49b925&page_id=czRCdkYwNWhWNlhGdnU5MWdOVWtsdz09LS0xZTdZVVIrU1hOcmhkQWhXL3RZajRnPT0%3D--b4e34e5e1e58227c26d98c1d746bcbaeed313a13&funnel_step_id=djd5ZHdxMlUxTXJsVlA1cGtNUkhGZz09LS1LaG81ZGNQZDVDVzRzT0ExYjVzQTJnPT0%3D--4c45d3905f3160f3a997e8c995b74241831da20d&user_id=aElSeVJsMnV1a3pNcDR6TjdHeGtUUT09LS1ObzBXdUFrcnBoUFRhZ3VDZTdCZVhBPT0%3D--3904afd23ccc9d6c12cc8ac33a8d3864190bd1d5&account_id=d2QydEVFRVh5dGZGNC9LUHBuS2pIdz09LS1pdjA3YjVLeHVqMk9ma1hQSDF6dXFRPT0%3D--b21a62eba126483145d8803d9d05ffa91da1be31&page_code=NTYzNjYzNjU%3D&mode_id=1&time_zone=UTC&app_domain=app.clickfunnels.com&aff_sub2=&aff_sub3=&aff_sub=&affiliate_id=&cf_affiliate_id=&content=&medium=&name=&source=&term=&client_width=1268&type=Userevents::PageviewsCreatedSummary&nonce=b8d8dc0f-6271-4528-9468-a661b2ed2683&url=https%3A%2F%2Fbestforlife.life%2Findia%3Fcep%3DNcjr1IBwEpaVCDR7gb1W-FGPfyBDcFKrvsN3TnUtKC3-YBpBZeA8K4I8aCQppDpOCh4X5YDyGxZZWBn4AgGWX4VJ_-u2PH-Fe1mMx7Ic55i2jwzIb3UZz0K-7U1j1TMcutJ3YQ7R976S284DLwimzH966zMkmJ9rZyHUAbUJccXBDtoAah4hwbnE7EcTJNHzmRHNpMzldPx6i9wW8T_gw8zk9YPz5Xqdy_0WpwAdR1Czt7BnDU4JX41f5JrUCrFQMEBD2aLDnTT_wWE6ceLuct25kNbpUG5Zg6PR_AvCsuxVfZd1nExlCJp4poF-Qun30uhMN3RK1jpIHZULEXZzQMMIqCaQnNIpveyc9kzJB8IU2zVs3mbBB4Xq5zGEzfGM HTTP/1.1
Host: app.clickfunnels.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://bestforlife.life
Connection: keep-alive
Referer: https://bestforlife.life/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 202 Accepted
date: Thu, 22 Sep 2022 00:08:00 GMT
content-type: text/html
cf-ray: 74e6cdb84a10b4f3-OSL
access-control-allow-origin: *
cache-control: no-cache, no-store
strict-transport-security: max-age=0
vary: Accept-Encoding
cf-cache-status: BYPASS
access-control-allow-credentials: true
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
access-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
access-control-request-method: *
pragma: no-cache
status: 202 Accepted
x-frame-options: ALLOWALL
x-powered-by: Phusion Passenger Enterprise 6.0.7
x-rack-cache: miss
x-request-id: e394cf5ccd92fe35b346bd59cc5df9f8
x-runtime: 0.039088
set-cookie: __cf_bm=7.SAuvUclWEg0hasWG_89LwpV25mCCtg1s6.aMj4pyo-1663805280-0-AYDDWKC8SOIgTOPRkbGMytlpD6HMsbYoXHQFh20Pl55UjMeRZw5PL7XidEtmLhDmxEkEuYhbpLbJcrsrNtaOvR2NOZBKq1QdSdqxWbN1UGF4; path=/; expires=Thu, 22-Sep-22 00:38:00 GMT; domain=.clickfunnels.com; HttpOnly; Secure; SameSite=None
server: cloudflare
X-Firefox-Spdy: h2
app.clickfunnels.com/images/closemodal.png
200 OK 0 B URL HTTP/2 app.clickfunnels.com/images/closemodal.png
IP
GET /images/closemodal.png HTTP/1.1
Host: app.clickfunnels.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bestforlife.life/
Cookie: __cf_bm=h9SBx.kSR5NftC6cqQghCa8SfTSBnYOBzEuqb4g5GnA-1663805278-0-AU7CnnvgxgWN6sqc0tuuO800tDyVrcirkVdujAwZhpHq/Hvrx80gsmtt3uoKzIrw4cQH2Vnd583wIKkY0RSgzrFOQhUIRSyF29PtZi1E8R2t
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 22 Sep 2022 00:08:01 GMT
content-type: image/webp
cf-ray: 74e6cdbf2d74b4f3-OSL
accept-ranges: bytes
access-control-allow-origin: *
age: 1834943
cache-control: public, max-age=2678400
content-disposition: inline; filename="closemodal.webp"
etag: "630e9cfc-314"
expires: Sun, 23 Oct 2022 00:08:01 GMT
last-modified: Tue, 30 Aug 2022 23:27:56 GMT
strict-transport-security: max-age=0
vary: Accept, Accept-Encoding
cf-cache-status: HIT
access-control-allow-credentials: true
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
access-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=788
report-to: {"endpoints":[{"url":"https:\/\/csp-reporting.cloudflare.com\/cdn-cgi\/script_monitor\/report?m=ZZ7F.07rc7_VB0TeBKqZL3mlmrfG.KoWN2Qkb63TcDo-1663805281-0-AfaGxcPOcGWVYeexV-BCABAA6Kti3z4Pe-7hGCWmCyreB2qTkfTQ9J21LPfnv-aGdQw_Gg2c_hwMkSVlicNH6qZF-53wdhKfUaLtkTMAJ_Ba"}],"group":"cf-csp-endpoint","max_age":86400}
content-security-policy-report-only: script-src 'none'; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=ZZ7F.07rc7_VB0TeBKqZL3mlmrfG.KoWN2Qkb63TcDo-1663805281-0-AfaGxcPOcGWVYeexV-BCABAA6Kti3z4Pe-7hGCWmCyreB2qTkfTQ9J21LPfnv-aGdQw_Gg2c_hwMkSVlicNH6qZF-53wdhKfUaLtkTMAJ_Ba; report-to cf-csp-endpoint
server: cloudflare
X-Firefox-Spdy: h2
use.fontawesome.com/releases/v5.9.0/css/v4-shims.css
200 OK 0 B URL HTTP/2 use.fontawesome.com/releases/v5.9.0/css/v4-shims.css
IP
GET /releases/v5.9.0/css/v4-shims.css HTTP/1.1
Host: use.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bestforlife.life/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 22 Sep 2022 00:07:58 GMT
content-type: text/css
x-amz-id-2: gCI0BCd4N0Ze41wUUC9fQ5XlRt+jkrB7evHnqcM8HM5N2U+Yr/0Hi6JfxMBuYiohKnNmeTq+oho=
x-amz-request-id: RB5BPRT48JBAE6TP
last-modified: Wed, 30 Jun 2021 15:48:06 GMT
etag: W/"e140a7d32f343530f016095df3cc2ae4"
cache-control: max-age=31556926
cf-cache-status: HIT
age: 20693275
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=t%2BS%2BC1NEhz4kHqhjuzCzn3ZI4t%2BLjFgZJe8zULPPSiaYdZOzAt6gWitfMO5RtdDZLLZgqmtz4No5UzXwLXHV5Hti5aMMQCja%2Bxi%2BXKt77wfTz06DHlG7ZHAdAAwuWft0ox2e5CD0"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74e6cdb0bf3692ad-FRA
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.bestforlife.life/assets/lander.css
200 OK 0 B URL HTTP/2 www.bestforlife.life/assets/lander.css
IP
GET /assets/lander.css HTTP/1.1
Host: www.bestforlife.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bestforlife.life/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Thu, 22 Sep 2022 00:07:59 GMT
content-type: text/css
cf-ray: 74e6cdb28c5b0b61-OSL
access-control-allow-origin: *
age: 591
cache-control: public, max-age=1200
etag: W/"632b3357-6a514"
expires: Thu, 22 Sep 2022 00:27:59 GMT
last-modified: Wed, 21 Sep 2022 15:52:55 GMT
strict-transport-security: max-age=0
vary: Accept-Encoding
cf-cache-status: HIT
access-control-allow-credentials: true
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
access-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
set-cookie: __cf_bm=c15az5KSOoJUfeH.x7X0VadyIbnMAe_JH6MgQmh1mnU-1663805279-0-Ae5oFhANDfzTXl8bS9sV6HnSXPUIRBWPdkXsd8/6PO0O6gsD+ZovsB9epRS4EatyqWI+y7RCmd6x0V7uQCaclrG2/Rp02noOYhsaYqmZ84oI; path=/; expires=Thu, 22-Sep-22 00:37:59 GMT; domain=.www.bestforlife.life; HttpOnly; Secure; SameSite=None
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
www.youtube.com/embed/okEUYy2PvHY?autoplay=0&modestbranding=1&controls=1&showinfo=0&rel=0&hd=1&wmode=transparent
200 OK 0 B URL HTTP/2 www.youtube.com/embed/okEUYy2PvHY?autoplay=0&modestbranding=1&controls=1&showinfo=0&rel=0&hd=1&wmode=transparent
IP
GET /embed/okEUYy2PvHY?autoplay=0&modestbranding=1&controls=1&showinfo=0&rel=0&hd=1&wmode=transparent HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bestforlife.life/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html; charset=utf-8
x-content-type-options: nosniff
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Thu, 22 Sep 2022 00:07:59 GMT
strict-transport-security: max-age=31536000
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-platform=*, ch-ua-platform-version=*
report-to: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]}
cross-origin-opener-policy-report-only: same-origin; report-to="youtube_main"
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info."
content-encoding: br
server: ESF
x-xss-protection: 0
set-cookie: YSC=bYYHg1xEclE; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none
VISITOR_INFO1_LIVE=Wq8UAW3rEYs; Domain=.youtube.com; Expires=Tue, 21-Mar-2023 00:07:59 GMT; Path=/; Secure; HttpOnly; SameSite=none
CONSENT=PENDING+551; expires=Sat, 21-Sep-2024 00:07:59 GMT; path=/; domain=.youtube.com; Secure
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
use.fontawesome.com/releases/v5.9.0/css/all.css
200 OK 0 B URL HTTP/2 use.fontawesome.com/releases/v5.9.0/css/all.css
IP
GET /releases/v5.9.0/css/all.css HTTP/1.1
Host: use.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bestforlife.life/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 22 Sep 2022 00:07:58 GMT
content-type: text/css
x-amz-id-2: YvyDEF9RwOKoVX9ilTSnEO476EfDUauhjRsEvlnZj91UKY3m7ApNR7Q9ILbsNrCa4nEBnhdPwPw=
x-amz-request-id: T1Z11V0ES6ASKZQB
last-modified: Wed, 30 Jun 2021 15:48:06 GMT
etag: W/"dbf9d822cefe851ba6f66e1ad57e8987"
cache-control: max-age=31556926
cf-cache-status: HIT
age: 1315678
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=d39QAF5AOkR5sWawkIc%2F8TR2IUBbuZJ1XrzBPWSAWTOf%2B8BUJEBO8kMgYry9zACRPoA2eluG8hbaA6ZOSaA7VMp0YZ1HOp%2Fo8WfROYll26q0hhxXnTqWyKCSUTnpHRWEWUhioaze"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74e6cdb0bf2f92ad-FRA
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.youtube.com/s/player/64947e15/player_ias.vflset/en_US/base.js
200 OK 0 B URL HTTP/2 www.youtube.com/s/player/64947e15/player_ias.vflset/en_US/base.js
IP
GET /s/player/64947e15/player_ias.vflset/en_US/base.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/embed/okEUYy2PvHY?autoplay=0&modestbranding=1&controls=1&showinfo=0&rel=0&hd=1&wmode=transparent
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
vary: Accept-Encoding, Origin
content-encoding: br
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 589483
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 21 Sep 2022 14:49:24 GMT
expires: Thu, 21 Sep 2023 14:49:24 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 21 Sep 2022 00:22:17 GMT
content-type: text/javascript
age: 33515
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.bestforlife.life/vendor.js
200 OK 0 B URL HTTP/2 www.bestforlife.life/vendor.js
IP
Analyzer Verdict Alert fortinet Phishing
GET /vendor.js HTTP/1.1
Host: www.bestforlife.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bestforlife.life/
Cookie: __cf_bm=NPCwFmZFOmm199B7.8tCOm.oyVak9pjphXKBMko4fmw-1663805279-0-AULvZLObgjNnzyY4oOcl1dE8k7asC0nLN3TJv28i+SHDNb9HHyMDTmXMD73luy2HTNVNYljLIKKwBrOu+kfcLseT0khEPBF2uHUbM3DJcMly
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Thu, 22 Sep 2022 00:08:00 GMT
content-type: application/javascript
cf-ray: 74e6cdb82e6a0b61-OSL
access-control-allow-origin: *
cache-control: max-age=900, public
etag: W/"7422e50efbaea439fda7ef3b0eb54ee1"
strict-transport-security: max-age=0
vary: Accept-Encoding
cf-cache-status: REVALIDATED
access-control-allow-credentials: true
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
access-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
status: 200 OK
x-content-digest: 581e49c9b7bdd06dab54c00931f4256b223e620e
x-frame-options: ALLOWALL
x-powered-by: Phusion Passenger Enterprise 6.0.7
x-rack-cache: fresh
x-request-id: ea5ed2d59b93be697c73cb5778d2a3a5
x-runtime: 0.018745
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
static.cloudflareinsights.com/beacon.min.js/v652eace1692a40cfa3763df669d7439c1639079717194
200 OK 0 B URL HTTP/2 static.cloudflareinsights.com/beacon.min.js/v652eace1692a40cfa3763df669d7439c1639079717194
IP
GET /beacon.min.js/v652eace1692a40cfa3763df669d7439c1639079717194 HTTP/1.1
Host: static.cloudflareinsights.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://bestforlife.life
Connection: keep-alive
Referer: https://bestforlife.life/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 22 Sep 2022 00:07:58 GMT
content-type: text/javascript;charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=86400
etag: W/2021.12.0
last-modified: Thu, 09 Dec 2021 19:55:17 GMT
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
server: cloudflare
cf-ray: 74e6cdb0a98d1bfa-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Open+Sans:400,700%7COswald:400,700%7CDroid+Sans:400,700%7CRoboto:400,700%7CLato:400,700%7CPT+Sans:400,700%7CSource+Sans+Pro:400,600,700%7CNoto+Sans:400,700%7CPT+Sans:400,700%7CUbuntu:400,700%7CBitter:400,700%7CPT+Serif:400,700%7CRokkitt:400,700%7CDroid+Serif:400,700%7CRaleway:400,700%7CInconsolata:400,700
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Open+Sans:400,700%7COswald:400,700%7CDroid+Sans:400,700%7CRoboto:400,700%7CLato:400,700%7CPT+Sans:400,700%7CSource+Sans+Pro:400,600,700%7CNoto+Sans:400,700%7CPT+Sans:400,700%7CUbuntu:400,700%7CBitter:400,700%7CPT+Serif:400,700%7CRokkitt:400,700%7CDroid+Serif:400,700%7CRaleway:400,700%7CInconsolata:400,700
IP
GET /css?family=Open+Sans:400,700%7COswald:400,700%7CDroid+Sans:400,700%7CRoboto:400,700%7CLato:400,700%7CPT+Sans:400,700%7CSource+Sans+Pro:400,600,700%7CNoto+Sans:400,700%7CPT+Sans:400,700%7CUbuntu:400,700%7CBitter:400,700%7CPT+Serif:400,700%7CRokkitt:400,700%7CDroid+Serif:400,700%7CRaleway:400,700%7CInconsolata:400,700 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bestforlife.life/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 22 Sep 2022 00:07:58 GMT
date: Thu, 22 Sep 2022 00:07:58 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.bestforlife.life/assets/lander.js
200 OK 0 B URL HTTP/2 www.bestforlife.life/assets/lander.js
IP
Analyzer Verdict Alert fortinet Phishing
GET /assets/lander.js HTTP/1.1
Host: www.bestforlife.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bestforlife.life/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Thu, 22 Sep 2022 00:07:59 GMT
content-type: application/x-javascript
cf-ray: 74e6cdb28c5a0b61-OSL
access-control-allow-origin: *
age: 590
cache-control: public, max-age=1200
etag: W/"632b33c5-238fd1"
expires: Thu, 22 Sep 2022 00:27:59 GMT
last-modified: Wed, 21 Sep 2022 15:54:45 GMT
strict-transport-security: max-age=0
vary: Accept-Encoding
cf-cache-status: HIT
access-control-allow-credentials: true
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
access-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
set-cookie: __cf_bm=TavycXXISVRtiSBkRxNX0lu9mhb0mozkY.naLEuiP1A-1663805279-0-AZiVw88R/0U8SKR9kwYpzR08n0u37bgtfttKTg9yzkwC37FynYADiSwyJC070jA0mN0QT2qAcRJjsi6P0k0IMh+H3GMJlW3igfBEi+bSNc7B; path=/; expires=Thu, 22-Sep-22 00:37:59 GMT; domain=.www.bestforlife.life; HttpOnly; Secure; SameSite=None
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
bestforlife.life/india?cep=Ncjr1IBwEpaVCDR7gb1W-FGPfyBDcFKrvsN3TnUtKC3-YBpBZeA8K4I8aCQppDpOCh4X5YDyGxZZWBn4AgGWX4VJ_-u2PH-Fe1mMx7Ic55i2jwzIb3UZz0K-7U1j1TMcutJ3YQ7R976S284DLwimzH966zMkmJ9rZyHUAbUJccXBDtoAah4hwbnE7EcTJNHzmRHNpMzldPx6i9wW8T_gw8zk9YPz5Xqdy_0WpwAdR1Czt7BnDU4JX41f5JrUCrFQMEBD2aLDnTT_wWE6ceLuct25kNbpUG5Zg6PR_AvCsuxVfZd1nExlCJp4poF-Qun30uhMN3RK1jpIHZULEXZzQMMIqCaQnNIpveyc9kzJB8IU2zVs3mbBB4Xq5zGEzfGM
200 OK 0 B URL HTTP/2 bestforlife.life/india?cep=Ncjr1IBwEpaVCDR7gb1W-FGPfyBDcFKrvsN3TnUtKC3-YBpBZeA8K4I8aCQppDpOCh4X5YDyGxZZWBn4AgGWX4VJ_-u2PH-Fe1mMx7Ic55i2jwzIb3UZz0K-7U1j1TMcutJ3YQ7R976S284DLwimzH966zMkmJ9rZyHUAbUJccXBDtoAah4hwbnE7EcTJNHzmRHNpMzldPx6i9wW8T_gw8zk9YPz5Xqdy_0WpwAdR1Czt7BnDU4JX41f5JrUCrFQMEBD2aLDnTT_wWE6ceLuct25kNbpUG5Zg6PR_AvCsuxVfZd1nExlCJp4poF-Qun30uhMN3RK1jpIHZULEXZzQMMIqCaQnNIpveyc9kzJB8IU2zVs3mbBB4Xq5zGEzfGM
IP
ASN #46606 UNIFIEDLAYER-AS-1
Analyzer Verdict Alert fortinet Phishing
GET /india?cep=Ncjr1IBwEpaVCDR7gb1W-FGPfyBDcFKrvsN3TnUtKC3-YBpBZeA8K4I8aCQppDpOCh4X5YDyGxZZWBn4AgGWX4VJ_-u2PH-Fe1mMx7Ic55i2jwzIb3UZz0K-7U1j1TMcutJ3YQ7R976S284DLwimzH966zMkmJ9rZyHUAbUJccXBDtoAah4hwbnE7EcTJNHzmRHNpMzldPx6i9wW8T_gw8zk9YPz5Xqdy_0WpwAdR1Czt7BnDU4JX41f5JrUCrFQMEBD2aLDnTT_wWE6ceLuct25kNbpUG5Zg6PR_AvCsuxVfZd1nExlCJp4poF-Qun30uhMN3RK1jpIHZULEXZzQMMIqCaQnNIpveyc9kzJB8IU2zVs3mbBB4Xq5zGEzfGM HTTP/1.1
Host: bestforlife.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
set-cookie: PHPSESSID=29ce99ff562836a607b9e351ef3fcb35; path=/; secure; HttpOnly
__cf_bm=3RdQ4z5LmKU2RFoLMw6vKnYmlrTBAeLVO4PHFi3beBc-1663805278-0-AZdd+NthYvTnsVZB+6YfUK99qXAnxBkCPm5jHQ15pJ44/jEnbd237lbZ7n8xZWUeWC9dfA47ePH4QQdYryaLC0vGcPud1PHIrIivyRve6DZC; path=/; expires=Thu, 22-Sep-22 00:37:58 GMT; domain=.www.bestforlife.life; HttpOnly; Secure
vary: Accept-Encoding
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Thu, 22 Sep 2022 00:07:58 GMT
server: Apache
X-Firefox-Spdy: h2
www.bestforlife.life/assets/pushcrew.js
200 OK 0 B URL HTTP/2 www.bestforlife.life/assets/pushcrew.js
IP
Analyzer Verdict Alert fortinet Phishing
GET /assets/pushcrew.js HTTP/1.1
Host: www.bestforlife.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bestforlife.life/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Thu, 22 Sep 2022 00:07:59 GMT
content-type: application/x-javascript
cf-ray: 74e6cdb20c360b61-OSL
access-control-allow-origin: *
age: 72
cache-control: public, max-age=1200
etag: W/"632b3356-27d"
expires: Thu, 22 Sep 2022 00:27:59 GMT
last-modified: Wed, 21 Sep 2022 15:52:54 GMT
strict-transport-security: max-age=0
vary: Accept-Encoding
cf-cache-status: HIT
access-control-allow-credentials: true
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
access-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
set-cookie: __cf_bm=IRkZtlhy7GA8jfXn6gSuYp1A.3_7el4KKHSRURG14X8-1663805279-0-AdOHlUnv2K+ylyrlo+5Ymz6bWH8Ygbvyk+JgN6d9IB7kDEKcIuHWKLuiyMQbKlahIgvcibg4i3rcn5IztARSJiNb6CdmyxfcJEWg1ql1Il96; path=/; expires=Thu, 22-Sep-22 00:37:59 GMT; domain=.www.bestforlife.life; HttpOnly; Secure; SameSite=None
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
www.youtube.com/embed/SQLxNY7LnIg?autoplay=0&modestbranding=1&controls=1&showinfo=0&rel=0&hd=1&wmode=transparent
200 OK 0 B URL HTTP/2 www.youtube.com/embed/SQLxNY7LnIg?autoplay=0&modestbranding=1&controls=1&showinfo=0&rel=0&hd=1&wmode=transparent
IP
GET /embed/SQLxNY7LnIg?autoplay=0&modestbranding=1&controls=1&showinfo=0&rel=0&hd=1&wmode=transparent HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bestforlife.life/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html; charset=utf-8
x-content-type-options: nosniff
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Thu, 22 Sep 2022 00:07:59 GMT
strict-transport-security: max-age=31536000
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-platform=*, ch-ua-platform-version=*
report-to: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]}
cross-origin-opener-policy-report-only: same-origin; report-to="youtube_main"
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info."
content-encoding: br
server: ESF
x-xss-protection: 0
set-cookie: YSC=E3FSYJP5lO4; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none
VISITOR_INFO1_LIVE=_BiBq8XViWo; Domain=.youtube.com; Expires=Tue, 21-Mar-2023 00:07:59 GMT; Path=/; Secure; HttpOnly; SameSite=none
CONSENT=PENDING+339; expires=Sat, 21-Sep-2024 00:07:59 GMT; path=/; domain=.youtube.com; Secure
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
162.241.63.77
104.16.15.194
151.101.86.137
23.36.76.226
93.184.220.29