Overview

URLwww.paulaschoice.com/
IP 23.72.139.66 (Sweden)
ASN#20940 Akamai International B.V.
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Report completed2022-12-09 08:21:04 UTC
StatusLoading report..
IDS alerts0
Blocklist alert1
urlquery alerts No alerts detected
Tags None

Domain Summary (76)

Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
google.com (1) 1 2013-10-02 15:25:49 UTC 2022-12-08 17:47:21 UTC 216.58.207.206
googleads.g.doubleclick.net (8) 42 2012-05-21 07:15:40 UTC 2022-12-08 17:20:04 UTC 142.250.74.130
s.pinimg.com (2) 732 2017-01-13 22:40:08 UTC 2022-12-08 17:29:30 UTC 2.18.172.195
www.paulaschoice.com (38) 256282 2012-08-07 22:32:57 UTC 2022-12-09 01:49:37 UTC 95.101.10.192
status.geotrust.com (1) 3662 2017-12-01 08:55:31 UTC 2022-12-08 17:25:04 UTC 93.184.220.29
ocsp.sca1b.amazontrust.com (10) 1015 2016-02-14 02:37:56 UTC 2019-03-27 04:05:54 UTC 54.230.245.39
vars.hotjar.com (1) 1014 2020-11-05 10:13:14 UTC 2022-12-08 17:12:53 UTC 143.204.55.105
www.googletagmanager.com (1) 75 2012-10-04 01:07:32 UTC 2022-12-08 17:14:43 UTC 142.250.74.8
region1.google-analytics.com (1) 0 2022-03-17 11:26:33 UTC 2022-12-08 17:12:10 UTC 216.239.34.36 Domain (google-analytics.com) ranked at: 8401
www.google.no (9) 25607 2012-06-26 23:22:08 UTC 2022-12-08 17:14:59 UTC 142.250.74.35
ct.pinterest.com (5) 852 2015-03-12 08:12:48 UTC 2022-12-08 17:12:06 UTC 2.18.172.195
cdn.siftscience.com (1) 7858 2013-08-02 08:58:58 UTC 2022-12-08 22:24:27 UTC 34.96.67.224
gs.mountain.com (1) 17855 2021-07-16 12:27:00 UTC 2022-12-08 11:42:17 UTC 52.12.117.226
ocsp.globalsign.com (2) 2075 2012-05-25 06:20:55 UTC 2022-12-08 17:15:03 UTC 104.18.20.226
aly.jst.ai (1) 14494 2021-04-14 16:41:23 UTC 2022-12-08 23:06:15 UTC 104.17.203.53
checkoutshopper-live.adyen.com (2) 19619 2017-10-25 13:40:54 UTC 2022-12-08 17:48:53 UTC 193.67.130.68
bat.bing.com (3) 387 2014-04-08 09:23:16 UTC 2022-12-08 17:12:06 UTC 204.79.197.200
www.google-analytics.com (1) 40 2012-05-21 09:41:50 UTC 2022-12-08 17:20:06 UTC 142.250.74.110
ssl.luckyorange.com (1) 50412 2012-11-10 03:19:30 UTC 2022-12-08 15:23:03 UTC 104.26.5.244
static.narrativ.com (1) 8338 2018-02-16 11:19:07 UTC 2022-12-08 19:41:56 UTC 143.204.55.50
www.sjwoe.com (1) 11166 2019-07-24 17:54:43 UTC 2022-12-08 17:27:04 UTC 143.204.55.2
www.facebook.com (1) 99 No data No data 157.240.221.35
cdn.nytrng.com (1) 25486 2020-10-02 18:00:48 UTC 2022-12-08 14:43:04 UTC 143.204.55.58
d.impactradius-event.com (1) 2612 2016-11-05 16:00:49 UTC 2022-12-08 17:35:07 UTC 35.186.249.72
paulaschoiceamerpublic.blob.core.windows.net (2) 0 2022-06-20 16:17:00 UTC 2022-11-22 23:25:38 UTC 20.60.153.132 Domain (windows.net) ranked at: 687
my.jst.ai (1) 14833 2020-01-23 04:36:55 UTC 2022-12-08 23:01:12 UTC 104.17.203.53
cdn.jst.ai (1) 15576 2020-01-23 03:29:37 UTC 2022-12-09 01:57:17 UTC 104.17.203.53
d3rr3d0n31t48m.cloudfront.net (2) 0 2015-04-02 01:14:22 UTC 2022-12-08 23:22:31 UTC 143.204.55.117 Unknown ranking
na-library.klarnaservices.com (1) 8425 2020-03-10 08:01:33 UTC 2022-12-08 16:15:57 UTC 143.204.55.56
static.myshlf.us (1) 154947 2020-09-29 08:51:28 UTC 2022-12-06 00:35:28 UTC 54.230.111.91
shop.pe (1) 10635 2012-07-24 18:16:22 UTC 2022-12-08 23:22:31 UTC 35.227.244.1
cdn.pbbl.co (1) 8838 2015-03-04 17:07:22 UTC 2022-12-09 02:37:33 UTC 143.204.55.99
js-agent.newrelic.com (1) 378 2017-01-30 05:00:15 UTC 2022-12-08 17:12:05 UTC 151.101.66.137
firefox.settings.services.mozilla.com (2) 867 2020-05-25 20:06:39 UTC 2022-12-08 17:12:32 UTC 35.241.9.150
nova.collect.igodigital.com (1) 5107 2015-10-16 17:21:14 UTC 2022-12-08 20:00:07 UTC 34.203.18.187
44.238.122.172 (1) 0 No data No data 44.238.122.172 Unknown ranking
content-signature-2.cdn.mozilla.net (1) 1152 2020-11-03 12:26:46 UTC 2022-12-08 17:21:04 UTC 34.160.144.191
cdn.attn.tv (2) 4920 2018-06-13 10:37:11 UTC 2022-12-08 17:29:23 UTC 143.204.55.4
tags.tiqcdn.com (22) 969 2013-01-15 05:04:26 UTC 2022-12-08 17:12:32 UTC 2.18.173.203
ocsp.godaddy.com (1) 698 2012-05-20 19:28:57 UTC 2022-12-08 17:15:00 UTC 192.124.249.23
settings.luckyorange.net (1) 7516 2015-03-18 03:45:16 UTC 2022-12-08 16:44:54 UTC 172.67.75.100
ocsp.sectigo.com (3) 487 2018-12-17 11:31:55 UTC 2022-12-08 17:18:07 UTC 104.18.32.68
www.google.com (3) 7 2012-11-08 00:08:21 UTC 2022-12-08 17:22:52 UTC 216.58.207.228
bam.nr-data.net (2) 630 2015-02-10 00:06:27 UTC 2022-12-08 17:12:06 UTC 162.247.241.14
contile.services.mozilla.com (1) 1114 2021-05-27 18:32:35 UTC 2022-12-08 17:14:01 UTC 34.117.237.239
www.paulaschoice.com (38) 256282 2012-08-07 22:32:57 UTC 2022-12-09 01:49:37 UTC 95.101.10.209
paulaschoicesupport.zendesk.com (2) 384093 2019-10-01 07:35:34 UTC 2022-12-09 01:46:12 UTC 104.16.53.111
widget-mediator.zopim.com (1) 2693 2019-04-23 08:46:17 UTC 2022-12-08 17:24:35 UTC 3.127.53.156
analytics.tiktok.com (4) 1182 2020-02-29 13:09:05 UTC 2022-12-08 17:18:07 UTC 95.101.10.128
d10lpsik1i8c69.cloudfront.net (1) 0 2016-05-17 21:03:51 UTC 2022-12-08 16:44:53 UTC 54.230.245.48 Unknown ranking
www.ojrq.net (1) 8784 2012-06-28 12:56:03 UTC 2022-12-08 17:48:28 UTC 34.95.127.121
shopper.shop.pe (1) 12886 2017-07-18 19:28:17 UTC 2022-12-08 23:22:34 UTC 35.190.54.17
match.adsrvr.org (1) 349 2012-05-21 08:27:04 UTC 2022-12-08 17:41:44 UTC 15.197.193.217
ekr.zdassets.com (1) 2396 2018-06-13 23:52:57 UTC 2022-12-08 17:13:38 UTC 104.18.72.113
dx.mountain.com (1) 12081 2021-06-28 08:59:34 UTC 2022-12-08 18:47:28 UTC 52.88.179.26
p.typekit.net (1) 620 2012-05-23 14:28:57 UTC 2022-12-08 17:12:18 UTC 23.36.76.122
img-getpocket.cdn.mozilla.net (5) 1631 2017-09-01 03:40:57 UTC 2022-12-08 15:50:00 UTC 34.120.237.76
datacloud.tealiumiq.com (1) 6058 2013-08-05 08:22:00 UTC 2022-12-08 20:20:51 UTC 3.69.39.109
ocsp.pki.goog (16) 175 2017-06-14 07:23:31 UTC 2022-12-08 17:12:01 UTC 142.250.74.131
connect.facebook.net (1) 139 2012-05-22 02:51:28 UTC 2022-12-08 17:12:05 UTC 31.13.72.12
ocsp.digicert.com (22) 86 2012-05-21 07:02:23 UTC 2022-12-08 17:15:52 UTC 93.184.220.29
push.services.mozilla.com (1) 2140 2014-10-24 08:27:06 UTC 2022-12-08 17:20:00 UTC 35.163.1.35
static.zdassets.com (6) 2154 2018-06-23 22:11:55 UTC 2022-12-08 17:21:08 UTC 104.18.70.113
events.release.narrativ.com (6) 8222 2021-08-23 15:53:16 UTC 2022-12-08 19:41:57 UTC 50.19.57.126
hexagon-analytics.com (1) 5444 2016-10-14 13:29:03 UTC 2022-12-08 17:37:37 UTC 34.102.232.42
534000930.collect.igodigital.com (1) 360103 2022-06-14 13:28:01 UTC 2022-11-29 12:09:22 UTC 34.203.18.187
paulaschoice.attn.tv (2) 362442 2018-03-13 17:35:53 UTC 2022-11-29 12:10:28 UTC 172.64.150.25
cdn.mouseflow.com (2) 6644 2012-07-27 09:45:11 UTC 2022-12-08 17:42:40 UTC 151.139.128.10
addshoppers.s3.amazonaws.com (2) 15696 2014-06-11 07:08:46 UTC 2022-12-08 23:22:34 UTC 52.216.213.241
static.hotjar.com (1) 641 2014-11-01 05:14:27 UTC 2022-12-08 17:12:15 UTC 143.204.55.54
px.mountain.com (2) 11897 2021-07-08 20:56:16 UTC 2022-12-08 18:47:30 UTC 44.235.191.156
r3.o.lencr.org (6) 344 2020-12-02 08:52:13 UTC 2022-12-08 17:12:06 UTC 23.36.77.32
use.typekit.net (4) 494 2012-07-05 01:42:39 UTC 2022-12-08 17:12:18 UTC 23.36.76.122
events.attentivemobile.com (1) 4579 2017-09-14 06:58:51 UTC 2022-12-08 17:29:27 UTC 104.18.43.48
paulachoiceusca.l3km.net (1) 540627 2019-12-02 11:09:26 UTC 2022-11-29 12:10:26 UTC 54.154.56.4
addstrap-ui.addshoppers.com (1) 28122 2018-05-23 21:44:03 UTC 2022-12-09 02:25:56 UTC 35.190.71.216

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
 No alerts detected

Blocklists

OpenPhish
 No alerts detected

PhishTank
 No alerts detected

Fortinet's Web Filter
 No alerts detected

mnemonic secure dns
 No alerts detected

Quad9 DNS
Scan Date Severity Indicator Comment
2022-12-08 2 44.238.122.172 Sinkholed


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 4 reports on IP: 23.72.139.66
Date UQ / IDS / BL URL IP
2022-12-09 08:21:04 +0000 0 - 0 - 1 www.paulaschoice.com/ 23.72.139.66
2022-12-08 18:03:58 +0000 0 - 0 - 0 www.xerox.com/ 23.72.139.66
2022-11-11 18:04:22 +0000 0 - 0 - 0 acrobat.adobe.com/link/track?uri=urn:aaid:scd (...) 23.72.139.66
2022-10-24 16:36:06 +0000 0 - 0 - 0 acrobat.adobe.com/link/track?uri=urn:aaid:scd (...) 23.72.139.66


Last 5 reports on ASN: Akamai International B.V.
Date UQ / IDS / BL URL IP
2023-02-08 13:25:48 +0000 0 - 1 - 0 dl.simplestar.com/tools/simplestar/releases/d (...) 23.36.79.11
2023-02-08 13:16:15 +0000 0 - 1 - 0 www.zfx.com/wp-content/uploads/zealcapitalmar (...) 95.101.10.40
2023-02-08 13:15:52 +0000 0 - 1 - 0 www.zfx.com/wp-content/uploads/zealcapitalmar (...) 95.101.10.40
2023-02-08 13:15:27 +0000 0 - 1 - 0 rhost1.zfx.com/homeaway/www.paypal.com/websc- (...) 23.197.207.74
2023-02-08 13:14:48 +0000 0 - 1 - 0 rhost1.zfx.com/xcomm/www.paypal.com/websc-log (...) 23.197.207.74


Last 1 reports on domain: paulaschoice.com
Date UQ / IDS / BL URL IP
2022-12-09 08:21:04 +0000 0 - 0 - 1 www.paulaschoice.com/ 23.72.139.66


No other reports with similar screenshot

JavaScript

Executed Scripts (89)

Executed Evals (15)
#1 JavaScript::Eval (size: 362) - SHA256: 76095f13630492a4b97dbf94e9694f0d38eb82c6207e69401ed47dbf79610eb6
let sh_cart_audience = (...comma_separated_cart_urls) => {
    let sh_audience_type = null;
    let path = window.location.pathname;
    let url = window.location.href;
    for (let x of comma_separated_cart_urls) {
        if (path.indexOf(x) > -1 || url.indexOf(x) > -1) {
            sh_audience_type = "sh_audience_type=cart";
            break;
        };
    };
    return sh_audience_type;
};
sh_cart_audience("/cart");
#2 JavaScript::Eval (size: 199) - SHA256: a0463a9bb898b109504a90fc4a010720475807d568d201f157930a9c703fa75d
var block = null;
var url = window.location.href.toLowerCase();
var check = ["gtm-msr"];
for (var i = 0; i < check.length; i++) {
    if (url.indexOf(check[i]) > -1) {
        block = "sh_conversion=SHBLOCK";
        break;
    }
};
block;
#3 JavaScript::Eval (size: 412) - SHA256: 0a2ac96622dc575085d6170765fc0774d7620105fb41cfec389c303233c9169c
let mapCartSku = (cssPath) => {
    let cartSku = "";
    let y = /[0-9a-zA-Z,]+/g;
    let aA = document.querySelectorAll(cssPath);
    for (let i = 0; i < aA.length; i++) {
        cartSku += "," + aA[i].textContent.trim()
    };
    cartSku = cartSku.substring(1, cartSku.length);
    cartSku = cartSku.match(y).join("");
    return cartSku
};
mapCartSku("div.Hover__HoverChildren-fexziu-0 > div > div > div > div > a > div > div.small1.normalcase")
#4 JavaScript::Eval (size: 444) - SHA256: 4185018b713f65706d5a89dbdf5980d2f558c4c0e096da5cde7f0a7c721a9d93
let mapPrice = () => {
    let price = null;
    let check = null;
    let priceArray = null;
    if (appData && appData.customerPage.dataLayer) {
        check = appData.customerPage.dataLayer.product_current_price;
        if (check.indexOf(".") == -1) {
            price = check + ".00";
            return price;
        }
        if (check.indexOf(".") > -1 && check.split(".")[1].length < 2) {
            priceArray = check.split("");
            priceArray.push("0");
            price = priceArray.join("");
            return price;
        }
        price = check;
    }
    return price
};
mapPrice()
#5 JavaScript::Eval (size: 18092) - SHA256: b33969952324045ac082c42d612cd1b6df9bb2d6386bdb351e215a571ac4bf41
// START SECTION TO EDIT
var addshopSettings = {
    emailInputsToExclude: [ // array of document.querySelectorAll objects
        //document.querySelectorAll('[name=newsletter-email]')
    ],
    emailUtmsToExclude: [], // optional, include array of all utm codes that client has requested we suppress
    asAnonCartCampaignIds: ["5f63b5ec0ff4c32ce01e0a0f"], // array of all Cart Abandon ERC campaigns (include more than one for A/B testing)
    asAnonProdCampaignIds: ["5fb58c8573efc31675a73241"], // array of all Browse (aka product) Abandon ERC campaigns (include more than one for A/B testing)
    asAnonGenCampaignIds: [], // array of all General Abandon ERC campaigns (include more than one for A/B testing)
    checkoutSuccessUrl: '', // optional, leave blank if you don't know it (but ROI Tracking must be installed if you leave it blank)
    daysToClearSavedProducts: 30, // optional, set to a number of days greater than 0 to clear out old saved products viewed
    daysToClearSavedCartData: 30, // optional, set to a number of days greater than 0 to clear out old cart data (products & campaign ID)
    minPageviewsForGen: 1,
    onProductPage: function() {
        // IMPORTANT
        // Make sure to check for the presence of an add to cart button (and further, make sure it's an add to cart button
        // for the main product, not a recommended/suggested/accessory product)
        if (document.querySelector("[class^='ProductDetailsPage']")) {
            localStorage.setItem('asHasViewedProductPage', 'true');
            return true;
        }
        return false;
    },
    getProductPageDetails: function() {
        // return the product details
        return {
            'product_name': document.querySelector("[class^='ProductDetailsPage__ProductName']").textContent.replace(';', ',').trim(),
            'image': document.querySelector("[class^='desktop-product-image']").src,
            'price': parseFloat(document.querySelector("[class^='Price__Wrapper']").textContent.replace(';', ',').replace(/[^0-9\.]/g, '')),
            'quantity': 1,
            'sku': document.URL.split('?')[0]
        }
    },
    onCartPage: function() {
        // return true if on cart page, false if not
        //if (document.URL.search('/cart') > -1) { return true }
        if (parseInt(document.querySelector("[class*='HeaderBanner__BagQuantity']").innerText) > 0) {
            return true
        }
        return false;
    },
    getCartRows: function() {
        // return array of all cart item elements
        //return document.querySelectorAll("[class^='CartPage__Items'] [class^='CartPage__Item-']"); 
        return document.querySelectorAll("[class^='BagPreview__Items'] a");
    },
    getCartItemDetails: function(row) {
        // each row from getCartRows gets passed into this function
        // the row variable contains the cart item element 
        return {
            'product_name': row.querySelector("[class^='BagPreview__ItemDetails'] .normalcase").innerText.trim().replace(/\r?\n|\r/g, ''),
            'price': row.querySelectorAll("[class^='BagPreview__QuantityAndPrice'] div")[1].innerText.replace(/[^0-9\.]/g, ''),
            'image': row.querySelector("[class^='BagPreview__ItemImage']").src,
            'quantity': row.querySelectorAll("[class^='BagPreview__QuantityAndPrice'] div")[0].innerText.replace("Qty: ", ""),
            'sku': "https://www.paulaschoice.com/cart"
        }
    },
    getCartTotal: function() {
        // return the order grand total (called on cart page only)
        return document.querySelector("[class^='BagPreview__Total']").innerText.replace("Total: ", "").replace(/[^0-9\.]/g, '');
    },
    isLoggedIn: function() {
        // if we don't have to exclude signed in people, just always return false here
        // otherwise, return true if the user is signed in
        // if ( document.querySelector(".is-loggedin") !== null && document.querySelector(".is-loggedin") !== undefined) {
        //     return true;
        // }
        if (document.querySelector(".HeaderBanner__IconText-sc-2h0ak1-7.HeaderBanner__AccountText-sc-2h0ak1-8.fgmUDe.hGUSpi.smallS.normalcase") !== null) {
            if (document.querySelector(".HeaderBanner__IconText-sc-2h0ak1-7.HeaderBanner__AccountText-sc-2h0ak1-8.fgmUDe.hGUSpi.smallS.normalcase").textContent.toLowerCase() !== 'sign in') {
                return true;
            } else {
                return false;
            }
        } else {
            return false
        }
    },
    isExcludedPage: function() {
        // function here to exclude any pages from tracking
        // if you return true, the script won't run (but it won't exclude the user completely)
        return false;
    },
    addPushCustom: function(addPushObject) {
        // customizations to _add.push
        return addPushObject;
    },
    trackCustom: function() {
        // do anything custom here
    }
}

// END SECTION TO EDIT

document.addEventListener('addshopNetworkReady', function(e) {
    addshopNetwork(addshopSettings);
}, false);

var lastTriggerTime = '';
const observer = new MutationObserver(function() {
    if (new Date().getTime() > lastTriggerTime + 9000 || lastTriggerTime === '') {
        AddShoppersWidget.onload();
        lastTriggerTime = new Date().getTime();
        addshopNetwork(addshopSettings);
    }
});
observer.observe(document.body, {
    attributes: true,
    childList: true,
    subtree: true
});



try {
    var addshopNetwork = function(settings) {
        //---------START NETWORK EMAILS

        var emailInputsTracked = [];

        var asPageViews = parseInt(localStorage.getItem('asPageViews') || 1);

        if (settings.daysToClearSavedProducts > 0) {
            var asLastUpdatedStoredProducts = localStorage.getItem('asLastSavedProducts');

            // if it's been longer than 30 days since the products have been saved, clear them
            if ((asLastUpdatedStoredProducts && new Date() - new Date(asLastUpdatedStoredProducts) > (86400000 * settings.daysToClearSavedProducts)) || !asLastUpdatedStoredProducts) {
                localStorage.removeItem('asProductsViewed');
                localStorage.removeItem('asProdCampaignId');
                localStorage.setItem('asLastSavedProducts', new Date().toString());
            }
        }

        if (settings.daysToClearSavedCartData > 0) {
            var asLastPushedCart = localStorage.getItem('asLastPushedCart');

            // if it's been longer than 30 days since the products have been saved, clear them
            if ((asLastPushedCart && new Date() - new Date(asLastPushedCart) > (86400000 * settings.daysToClearSavedCartData)) || !asLastPushedCart) {
                localStorage.removeItem('asCartCampaignId');
                localStorage.setItem('asLastPushedCart', new Date().toString());
            }
        }

        if (localStorage.getItem('asAnonDisable') == '1' || settings.isExcludedPage()) {
            return;
        }

        //general visitor
        if (localStorage.getItem('asAnonPushed') !== '1') {
            var to_push = {
                "active_cart": true,
                'custom_values': {
                    'as_network': true
                }
            }
            if (settings.asAnonGenCampaignIds.length > 0 && asPageViews >= settings.minPageviewsForGen) {
                to_push.campaign_id = settings.asAnonGenCampaignIds[Math.floor(Math.random() * settings.asAnonGenCampaignIds.length)];
                localStorage.setItem('asGenCampaignId', to_push.campaign_id);
            }
            _add.push(settings.addPushCustom(to_push))
            localStorage.setItem('asAnonPushed', '1');
        }

        //-------url marketing restrictions
        var urlsToExclude = ["youtube-aa-bridge", "youtube-c15-bridge", "youtube-resist-bridge", "youtube-acne-bridge", "youtube-2bha-exfoliant-bridge", "youtube-enlarged-pores-bridge", "youtube-20-niacinamide-bridge", "exfoliants/glowing-skin", "/vitamin-c-booster"];

        for (i = 0; i < urlsToExclude.length; i++) {
            if (document.URL.search(urlsToExclude[i]) > 0) {
                console.log(urlsToExclude[i]);
                //set campaign to false and cookies
                _add.push({
                    "custom_values": {
                        "as_network": false
                    },
                    "active_cart": false,
                });
                localStorage.setItem('asAnonPushed', '1');
                localStorage.setItem('asAnonDisable', '1');
                break;
            }
        }

        //-------if converted turn off anon email
        if (typeof AddShoppersConversion != "undefined" || (typeof settings.checkoutSuccessUrl == "string" && settings.checkoutSuccessUrl.length > 0 && document.URL.toLowerCase().search(settings.checkoutSuccessUrl.toLowerCase()) > -1)) {
            _add.push({
                "custom_values": {
                    "as_network": false
                },
                "active_cart": false,
                //"campaign_id": "",
                //"cart_contents": []
            });
            localStorage.setItem('asAnonPushed', '1');
            localStorage.setItem('asAnonDisable', '1');
            return;
        }
        // trigger general abandon if it meets the criteria (if it wasn't called on first pageview)
        else if (settings.asAnonGenCampaignIds.length > 0 && asPageViews >= settings.minPageviewsForGen && localStorage.getItem('asGenCampaignId') === null) {
            if (!settings.onCartPage() && !settings.onProductPage()) {
                var asGenCampaignId = settings.asAnonGenCampaignIds[Math.floor(Math.random() * settings.asAnonGenCampaignIds.length)];
                _add.push({
                    campaign_id: asGenCampaignId
                });
                localStorage.setItem('asGenCampaignId', asGenCampaignId);
            }
        }

        //-------if user came from an email, disable
        if (excludeEmailUtm()) {
            _add.push({
                "custom_values": {
                    "as_network": false
                },
                "active_cart": false
            });
            localStorage.setItem('asAnonDisable', '1');
            return;
        }


        //-------if user is signed in set anon to false
        if (settings.isLoggedIn()) {
            _add.push({
                "custom_values": {
                    "as_network": false
                },
                "active_cart": false
            });
            localStorage.setItem('asAnonPushed', '1');
            localStorage.setItem('asAnonDisable', '1');
            return;
        }

        //***************has cart***************
        document.querySelector("[class*='HeaderBanner__BagQuantity']").addEventListener('DOMSubtreeModified', function() {
            //console.log('-------CART COUNT changed');
            setTimeout(function() {

                if (settings.onCartPage() && settings.asAnonCartCampaignIds.length > 0) {
                    //cart contents
                    var cart_contents = settings.getCartRows();
                    var asCartValue = parseFloat(settings.getCartTotal());
                    var cartContentsArray = [];

                    for (i = 0; i < cart_contents.length; i++) {
                        var cart_item = settings.getCartItemDetails(cart_contents[i]);

                        if (!cart_item) {
                            continue
                        }

                        if (typeof cart_item.sku == "string") {
                            var productsViewed = JSON.parse(localStorage.getItem('asProductsViewed')) || [];
                            if (productsViewed.length > 0) {
                                check_products_loop: for (var prod = 0; prod < productsViewed.length; prod++) {
                                    if (productsViewed[prod].sku.toLowerCase() == cart_item.sku.toLowerCase()) {
                                        cart_item.image = productsViewed[prod].image;
                                        break check_products_loop;
                                    }
                                }
                            }
                        }

                        cart_item.price = parseFloat(cart_item.price);
                        cart_item.quantity = parseInt(cart_item.quantity);
                        cartContentsArray.push(cart_item);
                    }

                    if (localStorage.getItem('asCartCampaignId') === null) {
                        var campaign_id = settings.asAnonCartCampaignIds[Math.floor(Math.random() * settings.asAnonCartCampaignIds.length)];
                        localStorage.setItem('asCartCampaignId', campaign_id);
                    } else {
                        var campaign_id = localStorage.getItem('asCartCampaignId');
                    }

                    asPushCartContents(cartContentsArray, asCartValue, campaign_id);

                    localStorage.setItem('asCartPushed', '1');
                    localStorage.setItem('asLastPushedCart', new Date().toString());
                }

            }, 2000);
        }, false);

        // product page
        if ((localStorage.getItem('asHasViewedProductPage') === 'true' || settings.onProductPage()) && localStorage.getItem('asCartPushed') !== '1' && settings.asAnonProdCampaignIds.length > 0) {
            var productsViewed = JSON.parse(localStorage.getItem('asProductsViewed')) || [];
            var trackProduct = true;

            if (settings.onProductPage()) {
                var productDetails = settings.getProductPageDetails();
                for (var i = productsViewed.length - 1; i >= 0; i--) {
                    if (productsViewed[i].sku == productDetails.sku) {
                        if (productsViewed[i].product_name == productDetails.product_name && productsViewed[i].price == productDetails.price) {
                            trackProduct = false;
                        }
                        productsViewed.splice(i, 1);
                    }
                }
            }

            if (trackProduct) {
                if (settings.onProductPage()) {
                    productsViewed.push(productDetails);
                }

                // console.log(productsViewed)
                if (localStorage.getItem('asProdCampaignId') === null) {
                    var campaign_id = settings.asAnonProdCampaignIds[Math.floor(Math.random() * settings.asAnonProdCampaignIds.length)];
                    localStorage.setItem('asProdCampaignId', campaign_id);
                } else {
                    var campaign_id = localStorage.getItem('asProdCampaignId');
                }

                if (asPageViews >= settings.minPageviewsForGen) {
                    asPushCartContents(productsViewed, 0, campaign_id);
                }

                localStorage.setItem('asProductsViewed', JSON.stringify(productsViewed));
                localStorage.setItem('asLastSavedProducts', new Date().toString());
            }
        }

        // Exclude email inputs
        for (var i = 0; i < settings.emailInputsToExclude.length; i++) {
            xloop: for (var x = 0; x < settings.emailInputsToExclude[i].length; x++) {
                if (emailInputsTracked.includes(settings.emailInputsToExclude[i][x])) {
                    continue xloop;
                }
                settings.emailInputsToExclude[i][x].addEventListener('blur', function(event) {
                    if (addshopValidateEmail(event.srcElement.value)) {
                        _add.push({
                            "custom_values": {
                                "as_network": false
                            },
                            "active_cart": false
                        });
                        localStorage.setItem('asAnonPushed', '1');
                        localStorage.setItem('asAnonDisable', '1');
                    }
                });
                emailInputsTracked.push(settings.emailInputsToExclude[i][x]);
            }
        }

        function excludeEmailUtm() {
            if (settings.emailUtmsToExclude.length == 0) {
                return false;
            }
            for (i = 0; i < settings.emailUtmsToExclude.length; i++) {
                if (document.URL.toLowerCase().search(settings.emailUtmsToExclude[i].toLowerCase()) > -1) {
                    return true;
                }
            }
            return false;
        }

        function asPushCartContents(cartRay, cartValue, campaignId) {
            _add.push(settings.addPushCustom({
                'campaign_id': campaignId,
                'active_cart': true,
                'cart_contents': cartRay,
                'cart_value': parseFloat(cartValue)
            }));
        }


        // load_mfid_pixel_for_persistentid();
        // function load_mfid_pixel_for_persistentid(){
        //     var delayInMsecs = 3600000;
        //     return AddShoppersWidget._add_tag_on_timeout('pixelLastLoadedDatetimeMfid', delayInMsecs, function() {
        //         //var url = 'https://cdn.nytrng.com/4dd5h0m?as_id=' + AddShoppersWidget.session_id;
        //         var url = 'https://nytrng.com/iframe?vcp=4dd5h0m&as_id=' + AddShoppersWidget.session_id;
        //         var tag = document.createElement('iframe');
        //         tag.src = url;
        //         tag.width = 1;
        //         tag.height = 1;
        //         tag.style.display = 'none';
        //         tag.style.visibility = 'hidden';
        //         document.body.appendChild(tag);

        // //      var tag = document.createElement('script');
        // //      tag.type = 'text/javascript';
        // //      tag.src = url;
        // //      tag.async = true;
        // //      var head = document.getElementsByTagName('head')[0];
        // //      head.appendChild(tag);
        //     });
        // }



        if (typeof settings.trackCustom == "function") {
            settings.trackCustom()
        }

    };

    function addshopValidateEmail(email) {
        var re = /^(([^<>()\[\]\\.,;:\s@"]+(\.[^<>()\[\]\\.,;:\s@"]+)*)|(".+"))@((\[[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}])|(([a-zA-Z\-0-9]+\.)+[a-zA-Z]{2,}))$/;
        return re.test(email);
    }

    var addshopReadyEvent = document.createEvent('Event');
    addshopReadyEvent.initEvent('addshopNetworkReady', true, true);
    document.dispatchEvent(addshopReadyEvent);


    //---------END NETWORK EMAILS

} catch (e) {
    console.log(e);
}
#6 JavaScript::Eval (size: 226) - SHA256: 37ebb9684c5680250b71c5763b11647b6cc2b299cc777c10104f7ebb6f00931b
let mapName = (...selectors) => {
    let name = null;
    for (let i of selectors) {
        if (document.querySelector(i)) {
            name = document.querySelector(i).textContent.trim();
            break;
        }
    }
    return name
};
mapName("div > div > div > div > div > h1")
#7 JavaScript::Eval (size: 335) - SHA256: f8d19fb21335c2dc4010b0ab5ed48ee7505756fdf8454e9f1bdb0c4edf97c322
let mapCartQuantity = (...selectors) => {
    let quant = null;
    let r = /[0-9,.]+/g;
    for (let i of selectors) {
        if (document.querySelector(i)) {
            quant = document.querySelector(i).textContent.match(r).join("").trim();
        }
    }
    return quant
};
mapCartQuantity("div > div > div.HeaderBanner__Bag-sc-17rrqv7-17 > div > div.HeaderBanner__BagQuantity-sc-17rrqv7-19")
#8 JavaScript::Eval (size: 792) - SHA256: be95c8d79151c70258c07974285ecbec353f917fa5054c668968d1e81295a6f0
let searchForTags = (...compTags) => {
    let data = {};
    let scriptNodes = document.getElementsByTagName("script");
    let imageNodes = document.getElementsByTagName("img");
    let nodesArray = [...scriptNodes, ...imageNodes];
    for (let node of nodesArray) {
        for (let i = 0; i < compTags.length; i++) {
            if (node.src && node.src.indexOf(compTags[i].id) > -1) {
                data[compTags[i].id] = compTags[i].name;
            }
        }
    };
    return Object.values(data).join(",");
};
searchForTags({
    id: "criteo",
    name: "criteo=true"
}, {
    id: "shopify",
    name: "shopify=true"
}, {
    id: "adroll",
    name: "adroll=true"
}, {
    id: "adnxs.com",
    name: "appnexus=true"
}, {
    id: "googletagmanager",
    name: "googletagmanager=true"
}, {
    id: "googletagmanager.com/gtag/js?id=G-",
    name: "ga4=true"
}, {
    id: "pixel.mathtag.com",
    name: "mediamath=true"
});
#9 JavaScript::Eval (size: 251) - SHA256: a521d7391a3428a1bd1b7b1844276187d8ac1a1392c0c31ab0f1cfd640fe18df
let mapImage = (...selectors) => {
    let image = null;
    for (let i of selectors) {
        if (document.querySelector(i)) {
            image = document.querySelector(i).src;
        }
    }
    return image
};
mapImage("div > div.ProductImageViewer__Wrapper-sc-8748ik-0 > div > div > img")
#10 JavaScript::Eval (size: 2305) - SHA256: 35223ed47967e2283fd6d72e6df29900535b5a94cd466b851b7a50a226618c26
(function() {
    if (typeof irongate == 'undefined') irongate = {};
    irongate.gr = function(callback) {
        if (typeof irongate.g != 'undefined') {
            callback()
        } else {
            if (typeof irongate.gcb == 'undefined') {
                irongate.gcb = []
            }
            irongate.gcb.push(callback)
        }
    };
    irongate.gsl = function() {
        var st = document.createElement("script");
        st.type = "text/javascript";
        st.src = "https://gs.mountain.com/gs";
        var list = document.getElementsByTagName("script");
        var last = Number(list.length) - 1;
        var scpt = document.getElementsByTagName("script")[last];
        scpt.parentNode.insertBefore(st, scpt);
        irongate.timeout = setInterval(irongate.dl, 2000)
    };
    irongate.dl = function() {
        if (typeof irongate.g != 'undefined') {
            clearInterval(irongate.timeout)
        }
        while (irongate.gcb.length > 0) {
            var callback = irongate.gcb.pop();
            callback()
        }
    };
    var request = function() {
        var st = document.createElement('script');
        st.type = 'text/javascript';
        var g = (typeof irongate.g != 'undefined' ? irongate.g() : 'null');
        var gt = (typeof irongate.gt != 'undefined' ? irongate.gt() : 'null');
        var sturl = 'px.mountain.com/st?ga_tracking_id=UA-2088543-5&ga_client_id=1674089749.1670574056&shpt=Shop%20Paula%27s%20Choice%20%7C%20Paula%27s%20Choice&ga_info=%7B%22status%22%3A%22OK%22%2C%22ga_tracking_id%22%3A%22UA-2088543-5%22%2C%22ga_client_id%22%3A%221674089749.1670574056%22%2C%22shpt%22%3A%22Shop%20Paula%27s%20Choice%20%7C%20Paula%27s%20Choice%22%2C%22dcm_cid%22%3A%221670574056.1%22%2C%22dcm_gid%22%3A%221803697937.1670574057%22%2C%22mntnis%22%3A%22wFoJsVtUn605YWVVm2AtRYeo2HiJ36Bt%22%2C%22execution_workflow%22%3A%7B%22iteration%22%3A8%2C%22getClientIdByGA%22%3A%22FAILED%22%2C%22getClientIdByTracker%22%3A%22FAILED%22%2C%22getClientIdByGAData%22%3A%22FAILED%22%2C%22getClientIdByCookie%22%3A%22FAILED%22%2C%22shpt%22%3A%22OK%22%2C%22dcm_cid%22%3A%22OK%22%2C%22dcm_gid%22%3A%22OK%22%7D%2C%22message%22%3A%7B%7D%7D&dcm_cid=1670574056.1&dcm_gid=1803697937.1670574057&dxver=4.0.0&shaid=32614&plh=https%3A%2F%2Fwww.paulaschoice.com%2F&shpn=Effective,%20research-based%20skin%20care%20that%20keeps%20its%20promises:%20100%25%32%35%20guaranteed%20&shguid=' + g + '&shgts=' + gt;
        st.src = ('https:' == document.location.protocol ? 'https://' : 'http://') + sturl;
        var list = document.getElementsByTagName('script');
        var last = Number(list.length) - 1;
        var scpt = document.getElementsByTagName('script')[last];
        scpt.parentNode.insertBefore(st, scpt)
    };
    irongate.gr(request);
    irongate.gsl()
})();
#11 JavaScript::Eval (size: 264) - SHA256: 51f46c7f840e477145174cb8407e7c9d584dd5c9da392d8761caaa1124da93f0
let mapSku = (...selectors) => {
    let sku = null;
    let r = /[a-zA-Z0-9]+/g;
    for (let i of selectors) {
        if (document.querySelector(i)) {
            sku = document.querySelector(i).textContent.match(r).join("").trim();
        }
    }
    return sku
};
mapSku("div > div > div > div > div > h1")
#12 JavaScript::Eval (size: 462) - SHA256: a4eec1f8bf643dd17172511296bc7928054837ef9b206fc8d322abfe62703015
/*no else clause*/
let mapPrice = (...selectors) => {
    let price = null;
    let check = null;
    let count = 0;
    for (let i of selectors) {
        if (document.querySelector(i)) {
            check = document.querySelector(i).textContent;
            count = (check.match(/$/g) || []).length;
            if (count > 1) {
                price = check.substring(1, check.length).split("$")[1].replace(/[,]+/g, "");
                return price;
            }
            break;
        }
    }
    return price
};
mapPrice("div > div > div > div > div.Price__Wrapper-sc-1a08nql-0.cnYVkO")
#13 JavaScript::Eval (size: 437) - SHA256: 57f63971213f5fca5afa61293dde8e5b4f39767d59a9b1da0b5e0fb6e35a4107
let mapCartValue = (currencySymbol = "$", ...selectors) => {
    let cartVal = null;
    for (let i of selectors) {
        if (document.querySelector(i)) {
            cartVal = document.querySelector(i).textContent.trim();
            cartVal = cartVal.indexOf(currencySymbol) > -1 ? /[0-9,.]+/.exec(cartVal)[0].replace(/[,]/g, "") : null;
        }
    }
    return cartVal
};
mapCartValue("", "div.Hover__HoverChildren-fexziu-0.iaIPSp > div > div > div > div.BagPreview__Total-sc-1vprkiq-2")
#14 JavaScript::Eval (size: 1829) - SHA256: bdee5259d98b8b49ecc951932f2e0ba187bd41f61cd6142929c7dcb9ab8096df
let mntn_add_to_cart_click_listener = (aid, ...selectors) => {
    let mntn_add_to_cart_clicked = (aid) => {
        window.mntn_cart_click = 1;
        var e = null,
            b = "4.0.0",
            n = aid,
            additional = "&shadditional=sh_audience_type=cart",
            t, r, i;
        try {
            t = top.document.referer !== "" ? encodeURIComponent(top.document.referrer.substring(0, 2048)) : ""
        } catch (o) {
            t = document.referrer !== null ? document.referrer.toString().substring(0, 2048) : ""
        }
        try {
            r = window && window.top && document.location && window.top.location === document.location ? document.location : window && window.top && window.top.location && "" !== window.top.location ? window.top.location : document.location
        } catch (u) {
            r = document.location
        }
        try {
            i = parent.location.href !== "" ? encodeURIComponent(parent.location.href.toString().substring(0, 2048)) : ""
        } catch (a) {
            try {
                i = r !== null ? encodeURIComponent(r.toString().substring(0, 2048)) : ""
            } catch (f) {
                i = ""
            }
        }
        var l, c = document.createElement("script"),
            h = null,
            p = document.getElementsByTagName("script"),
            d = Number(p.length) - 1,
            v = document.getElementsByTagName("script")[d];
        if (typeof l === "undefined") {
            l = Math.floor(Math.random() * 1e17)
        }
        h = "dx.mountain.com/spx?" + "dxver=" + b + "&shaid=" + n + "&tdr=" + t + "&plh=" + i + "&cb=" + l + additional;
        c.type = "text/javascript";
        c.src = ("https:" === document.location.protocol ? "https://" : "http://") + h;
        v.parentNode.insertBefore(c, v)
    };
    let listenForCartClick = setInterval(() => {
        for (selector of selectors) {
            if (document.querySelector(selector)) {
                document.querySelector(selector).addEventListener("click", () => {
                    if (!window.mntn_cart_click) {
                        mntn_add_to_cart_clicked(aid);
                        clearInterval(listenForCartClick);
                    };
                });
            }
        }
    }, 1500);
};
mntn_add_to_cart_click_listener("32614", "div> div > div.ProductDetailsPage__AddToBagWrapper-sc-1j1lrfq-32.heuCml > div > button");
#15 JavaScript::Eval (size: 2289) - SHA256: 29f0bf877241255c0b34aad354dfe9b55302b45f983e14a5bc22447d9783611f
;
(function(trigger, id, start, end) {
    var now = Date.now();
    if (now > start && (end == null || now < end)) {
        window.AddShoppersTriggerRunner(trigger, function() {
            window.AddShoppersTriggerRunner.updateUsersActiveEmailCampaign(id);
            _add.push({
                campaign_id: id,
                active_cart: true
            })
        })
    }
})({
    "id": null,
    "rules": [],
    "combinator": "all"
}, "5f63b5ec0ff4c32ce01e0a0f", 1664282743468, null);;
(function(trigger, id, start, end) {
    var now = Date.now();
    if (now > start && (end == null || now < end)) {
        window.AddShoppersTriggerRunner(trigger, function() {
            window.AddShoppersTriggerRunner.updateUsersActiveEmailCampaign(id);
            _add.push({
                campaign_id: id,
                active_cart: true
            })
        })
    }
})({
    "id": null,
    "rules": [],
    "combinator": "all"
}, "5fb58c8573efc31675a73241", 1663948816243, null);;
(function(trigger, id, start, end) {
    var now = Date.now();
    if (now > start && (end == null || now < end)) {
        window.AddShoppersTriggerRunner(trigger, function() {
            window.AddShoppersTriggerRunner.updateUsersActiveEmailCampaign(id);
            _add.push({
                campaign_id: id,
                active_cart: true
            })
        })
    }
})({
    "id": null,
    "rules": [],
    "combinator": "all"
}, "60db627bbbf6c31e54fc9188", 1664282715031, null);;
(function(trigger, id, start, end) {
    var now = Date.now();
    if (now > start && (end == null || now < end)) {
        window.AddShoppersTriggerRunner(trigger, function() {
            window.AddShoppersTriggerRunner.updateUsersActiveEmailCampaign(id);
            _add.push({
                campaign_id: id,
                active_cart: true
            })
        })
    }
})({
    "id": null,
    "combinator": "all",
    "rules": []
}, "60db6410bbf6c31e54fc918d", 1664282739512, null);

(function() {
    // User code
    function asOfferRedemption(callback) {
            var element = document.querySelector('[name="couponCode"]')
            if (typeof(element) != 'undefined' && element != null) {
                element.addEventListener('change', (event) => {
                    callback(element.value);
                });
            }
        }
        // End of user code
    if (typeof asOfferRedemption === 'function') {
        window.asOfferRedemption = asOfferRedemption;
    }
})();;
AddShoppersTriggerRunner.dataLayerLoaded();
AddShoppersWidget && AddShoppersWidget.dataLayerLoaded && AddShoppersWidget.dataLayerLoaded();

Executed Writes (0)


HTTP Transactions (241)


Request Response
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "A597AFB4D4F7F3C82F0F2857322226FC69DC92E099BFD0605F7A0CD562BE9D21"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8649
Expires: Fri, 09 Dec 2022 10:45:01 GMT
Date: Fri, 09 Dec 2022 08:20:52 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "51148FED95CC00D60DC3640350F135B1B2763FF0E3CFBFFC40F0948317894BE9"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11055
Expires: Fri, 09 Dec 2022 11:25:07 GMT
Date: Fri, 09 Dec 2022 08:20:52 GMT
Connection: keep-alive

                                        
                                            GET / HTTP/1.1 
Host: www.paulaschoice.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

search
                                         95.101.10.192
HTTP/1.1 301 Moved Permanently
                                        
Location: https://www.paulaschoice.com/
Vary: Accept-Encoding
CF-RAY: 776c52f40bb892a5-FRA
Content-Length: 0
Expires: Fri, 09 Dec 2022 08:20:52 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Fri, 09 Dec 2022 08:20:52 GMT
Connection: keep-alive
Akamai-Cache-Status: Miss from child, Miss from parent

                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         35.241.9.150
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-origin: *
access-control-expose-headers: Alert, Content-Length, Content-Type, Retry-After, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Fri, 09 Dec 2022 08:08:18 GMT
age: 754
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    bf0c602d32b3c14606f22a86183b5e3c
Sha1:   6eabd8d83475eba731968abe1a05a8bfd272f160
Sha256: 6c6a7c519a9e950c2445ed874a25211a94dd4d3cf3afb0103af9dcd1dbd5ff9e
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "4819229FD8F502A0C68C80BD7409E104C1B4D1A98CA8A6CD9DEBA629B1511AEA"
Last-Modified: Thu, 08 Dec 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8332
Expires: Fri, 09 Dec 2022 10:39:44 GMT
Date: Fri, 09 Dec 2022 08:20:52 GMT
Connection: keep-alive

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         34.160.144.191
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
x-amz-id-2: f/6xYDtPpSnpbCNJHX9xSar9Lc1NnVrwTDEXjxTdCDVmkRW4QVslWG8uVNPAUzGWEV0atwGN6XQ=
x-amz-request-id: XQVHZCWT18ZRSF5J
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 09 Dec 2022 07:48:15 GMT
age: 1957
last-modified: Wed, 30 Nov 2022 10:06:34 GMT
etag: "53341dea33f4f3d9b4966f80589f429a"
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    53341dea33f4f3d9b4966f80589f429a
Sha1:   20f7b07c686c986d2ed1e3e9ad1bb2aef8edaf0d
Sha256: 651683e52cdbc96b289f8f123155f0b96d9f67432689e89156fa56f5a346c6a0
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Fri, 09 Dec 2022 08:20:52 GMT
content-length: 12
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET / HTTP/1.1 
Host: www.paulaschoice.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

search
                                         95.101.10.209
HTTP/2 200 OK
content-type: text/html;charset=UTF-8
                                        
accept-ranges: bytes
x-dw-request-base-id: WXQOFuTvkmMBAAB_
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
vary: accept-encoding
content-encoding: gzip
cf-cache-status: DYNAMIC
strict-transport-security: max-age=31536000; includeSubDomains
cf-ray: 776c52f51bf89104-FRA
content-length: 40328
expires: Fri, 09 Dec 2022 08:20:52 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Fri, 09 Dec 2022 08:20:52 GMT
set-cookie: dwac_1dddfe3d24e60db025cd316ffb=B6ujOwiiTGPKS336qHCNCn_JFrP2GiYaSNI%3D|dw-only|||USD|false|US%2FPacific|true; Path=/; Secure; SameSite=None cqcid=aditEub1hqh4qvFQGaDVqS9bUJ; Path=/; Secure; SameSite=None cquid=||; Path=/; Secure; SameSite=None sid=B6ujOwiiTGPKS336qHCNCn_JFrP2GiYaSNI; Path=/; Secure; SameSite=None dwanonymous_ef0ecd72b896f083bfc97bf06fa6e424=aditEub1hqh4qvFQGaDVqS9bUJ; Version=1; Comment="Demandware anonymous cookie for site Sites-paulaschoice_us-Site"; Max-Age=15552000; Expires=Wed, 07-Jun-2023 08:20:52 GMT; Path=/; Secure; SameSite=None __cq_dnt=0; Path=/; Secure; SameSite=None dw_dnt=0; Path=/; Secure; SameSite=None dwsid=Q2mtmoc9frP0mJYLLUUO5jsLGBJ5hRTKdgHPgZui7xjmNbZ0_raLhdzXOJjrBojXMw8HxYa72Ab3nej-WJn39g==; path=/; HttpOnly; Secure; SameSite=None ak_bmsc=73A5130AE46340066CFE45C721038D58~000000000000000000000000000000~YAAQzQplXwmQaXyEAQAAChb59RLN4wFwkk0MvLqycjvkN9Arr6uXVcm81smlp7tnQWAuYusuxNY5xpAvXR36YO9EOd0uMWZbo5sIkiwVlVHXQzEUOzOd4uaB4RiC3AVi0SnzTnZXIUI5jpziA4vfV1lb7THrO+zhdCe71k2BAb1vUAlE3BA7Hznmiu9Og2Px2vDHdxgi9MJXITK86Wkmm91Zm+cMU0qR7grVDxRZplw81xxllbC4tePj0rPq1Q5+9yTXhtyDUqUhshCF+LZG65qMG7JGpd9kABq8FN3LwKbNDsCYT8TZ964Of0cXo/g9d0qBl5c5nLRGPkWXJU288qCTcLvLn6YnHjeLUyVeeRuya2IPMZiHrVV3yAKMfAfknot1Prw97MR9LL5l1XoG; Domain=.paulaschoice.com; Path=/; Expires=Fri, 09 Dec 2022 10:20:52 GMT; Max-Age=7200; HttpOnly
akamai-cache-status: Miss from child, Miss from parent
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (26974), with CRLF, LF line terminators
Size:   40328
Md5:    13264fd659fe042947a9a1c9ae1f098b
Sha1:   42aae8c8136f60e863d9928d0faa55cc13f3a246
Sha256: e9ad31f5427b8b8a9394abbf5e05aa0f861225daeafe60d3ad65ee478daefb30
                                        
                                            GET /on/demandware.static/-/Library-Sites-paulachoice/default/dw3b5b0769/images/header/logo.svg HTTP/1.1 
Host: www.paulaschoice.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paulaschoice.com/
Cookie: dwac_1dddfe3d24e60db025cd316ffb=B6ujOwiiTGPKS336qHCNCn_JFrP2GiYaSNI%3D|dw-only|||USD|false|US%2FPacific|true; cqcid=aditEub1hqh4qvFQGaDVqS9bUJ; cquid=||; sid=B6ujOwiiTGPKS336qHCNCn_JFrP2GiYaSNI; dwanonymous_ef0ecd72b896f083bfc97bf06fa6e424=aditEub1hqh4qvFQGaDVqS9bUJ; __cq_dnt=0; dw_dnt=0; dwsid=Q2mtmoc9frP0mJYLLUUO5jsLGBJ5hRTKdgHPgZui7xjmNbZ0_raLhdzXOJjrBojXMw8HxYa72Ab3nej-WJn39g==; ak_bmsc=73A5130AE46340066CFE45C721038D58~000000000000000000000000000000~YAAQzQplXwmQaXyEAQAAChb59RLN4wFwkk0MvLqycjvkN9Arr6uXVcm81smlp7tnQWAuYusuxNY5xpAvXR36YO9EOd0uMWZbo5sIkiwVlVHXQzEUOzOd4uaB4RiC3AVi0SnzTnZXIUI5jpziA4vfV1lb7THrO+zhdCe71k2BAb1vUAlE3BA7Hznmiu9Og2Px2vDHdxgi9MJXITK86Wkmm91Zm+cMU0qR7grVDxRZplw81xxllbC4tePj0rPq1Q5+9yTXhtyDUqUhshCF+LZG65qMG7JGpd9kABq8FN3LwKbNDsCYT8TZ964Of0cXo/g9d0qBl5c5nLRGPkWXJU288qCTcLvLn6YnHjeLUyVeeRuya2IPMZiHrVV3yAKMfAfknot1Prw97MR9LL5l1XoG
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         95.101.10.209
HTTP/2 200 OK
content-type: image/svg+xml
                                        
cf-ray: 6ab5457d3d482bc6-FRA
last-modified: Mon, 17 Dec 2018 18:16:59 GMT
strict-transport-security: max-age=31536000; includeSubDomains
vary: Accept-Encoding
cf-cache-status: HIT
cross-origin-resource-policy: cross-origin
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
x-dw-request-base-id: Gaj7LrFMe2EBAAB_
content-encoding: gzip
content-length: 1567
cache-control: public, max-age=2485124
date: Fri, 09 Dec 2022 08:20:52 GMT
akamai-cache-status: Hit from child
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (3571), with no line terminators
Size:   1567
Md5:    594f7c42c4ddaf8c866d949dd0615b41
Sha1:   98ddb751a84e50cf6c236b23e2f97d02f7479d3e
Sha256: 4971fb3c3e30159faec7ba8d151e9c02d14775ae03be2280fa450977f4dd7018
                                        
                                            GET /on/demandware.static/Sites-paulaschoice_us-Site/-/en_US/v1670536945119/static/js/main.js?v=197 HTTP/1.1 
Host: www.paulaschoice.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paulaschoice.com/
Cookie: dwac_1dddfe3d24e60db025cd316ffb=B6ujOwiiTGPKS336qHCNCn_JFrP2GiYaSNI%3D|dw-only|||USD|false|US%2FPacific|true; cqcid=aditEub1hqh4qvFQGaDVqS9bUJ; cquid=||; sid=B6ujOwiiTGPKS336qHCNCn_JFrP2GiYaSNI; dwanonymous_ef0ecd72b896f083bfc97bf06fa6e424=aditEub1hqh4qvFQGaDVqS9bUJ; __cq_dnt=0; dw_dnt=0; dwsid=Q2mtmoc9frP0mJYLLUUO5jsLGBJ5hRTKdgHPgZui7xjmNbZ0_raLhdzXOJjrBojXMw8HxYa72Ab3nej-WJn39g==; ak_bmsc=73A5130AE46340066CFE45C721038D58~000000000000000000000000000000~YAAQzQplXwmQaXyEAQAAChb59RLN4wFwkk0MvLqycjvkN9Arr6uXVcm81smlp7tnQWAuYusuxNY5xpAvXR36YO9EOd0uMWZbo5sIkiwVlVHXQzEUOzOd4uaB4RiC3AVi0SnzTnZXIUI5jpziA4vfV1lb7THrO+zhdCe71k2BAb1vUAlE3BA7Hznmiu9Og2Px2vDHdxgi9MJXITK86Wkmm91Zm+cMU0qR7grVDxRZplw81xxllbC4tePj0rPq1Q5+9yTXhtyDUqUhshCF+LZG65qMG7JGpd9kABq8FN3LwKbNDsCYT8TZ964Of0cXo/g9d0qBl5c5nLRGPkWXJU288qCTcLvLn6YnHjeLUyVeeRuya2IPMZiHrVV3yAKMfAfknot1Prw97MR9LL5l1XoG
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         95.101.10.209
HTTP/2 200 OK
content-type: application/javascript
                                        
cf-ray: 7768cba21d02bb43-FRA
content-encoding: gzip
last-modified: Wed, 23 Nov 2022 19:55:35 GMT
strict-transport-security: max-age=31536000; includeSubDomains
vary: accept-encoding
cf-cache-status: MISS
cross-origin-resource-policy: cross-origin
x-dw-request-base-id: WXQeuC9fkmMBAAB_
content-length: 405380
cache-control: public, max-age=567889
date: Fri, 09 Dec 2022 08:20:52 GMT
akamai-cache-status: Hit from child
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65474)
Size:   405380
Md5:    d0f08c653c06fb9e10c9a50b08c50226
Sha1:   21906b076c8de6e71310247bceaa62380329c8a6
Sha256: ac396d0ad8deecd7408b584474efec41f6fd9311c3ffd2f3160de74bff9eff84
                                        
                                            GET /kna4cxr.css HTTP/1.1 
Host: use.typekit.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paulaschoice.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         23.36.76.122
HTTP/2 200 OK
content-type: text/css;charset=utf-8
                                        
server: nginx
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains;
cache-control: private, max-age=600, stale-while-revalidate=604800
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
content-encoding: gzip
content-length: 726
date: Fri, 09 Dec 2022 08:20:53 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (516)
Size:   726
Md5:    10d01faec4eb2e054338840733eb063e
Sha1:   380aadbb763303843fbc354875f9d4e2a5f13cc5
Sha256: 3559f7dc2c1956a88c8c2cab6594294a4cf3bd152c9ff750481fa6c1bc018ff0
                                        
                                            GET /p.css?s=1&k=kna4cxr&ht=tk&f=139.173.175.176&a=102704082&app=typekit&e=css HTTP/1.1 
Host: p.typekit.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://use.typekit.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

search
                                         23.36.76.122
HTTP/2 200 OK
content-type: text/css
                                        
accept-ranges: bytes
access-control-allow-origin: *
cache-control: public, max-age=604800
cross-origin-resource-policy: cross-origin
etag: "613bee4d-5"
last-modified: Fri, 10 Sep 2021 23:46:21 GMT
server: nginx
content-length: 5
unused62: 8096267
date: Fri, 09 Dec 2022 08:20:53 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   5
Md5:    83d24d4b43cc7eef2b61e66c95f3d158
Sha1:   f0cafc285ee23bb6c28c5166f305493c4331c84d
Sha256: 1c0ff118a4290c99f39c90abb38703a866e47251b23cca20266c69c812ccafeb
                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         35.241.9.150
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-origin: *
access-control-expose-headers: Expires, Last-Modified, ETag, Cache-Control, Alert, Content-Length, Pragma, Content-Type, Retry-After, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Fri, 09 Dec 2022 08:07:59 GMT
age: 774
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 6507
Cache-Control: max-age=95666
Date: Fri, 09 Dec 2022 08:20:53 GMT
Etag: "6391a92c-1d7"
Expires: Sat, 10 Dec 2022 10:55:19 GMT
Last-Modified: Thu, 08 Dec 2022 09:06:52 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /af/efe4a5/00000000000000007735e609/30/l?primer=7fa3915bdafdf03041871920a205bef951d72bf64dd4c4460fb992e3ecc3a862&fvd=n4&v=3 HTTP/1.1 
Host: use.typekit.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.paulaschoice.com
Connection: keep-alive
Referer: https://use.typekit.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         23.36.76.122
HTTP/2 200 OK
content-type: application/font-woff2
                                        
server: nginx
content-length: 16560
etag: "ef52ad3657e4d4a42c21db6c00d5c7ccc649bc94"
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=31536000
date: Fri, 09 Dec 2022 08:20:53 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), CFF, length 16560, version 1.0\012- data
Size:   16560
Md5:    21776237ce9fa23dd98ad23252d6a3fa
Sha1:   bedf8f707c96c0cdb609c652828e797dcd214308
Sha256: b4096925f34c85d0c0e934ad77c44165dcd66fecc354c153784d246f00911da5
                                        
                                            GET /af/78aca8/00000000000000007735e60d/30/l?primer=7fa3915bdafdf03041871920a205bef951d72bf64dd4c4460fb992e3ecc3a862&fvd=n6&v=3 HTTP/1.1 
Host: use.typekit.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.paulaschoice.com
Connection: keep-alive
Referer: https://use.typekit.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         23.36.76.122
HTTP/2 200 OK
content-type: application/font-woff2
                                        
server: nginx
content-length: 16744
etag: "e054ee68ef06f627cc7e34fb951cfa3a80cc5aa0"
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=31536000
date: Fri, 09 Dec 2022 08:20:53 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), CFF, length 16744, version 1.0\012- data
Size:   16744
Md5:    c34e4b3d18f559ba9b9d10bac63b3557
Sha1:   8b218af2d391d3169b113deff9f8a9b2e59f4cef
Sha256: 5c9f600b175a870a39e534669ba425e642b0e3b79946273b04f36278fb14c89d
                                        
                                            GET /af/2555e1/00000000000000007735e603/30/l?primer=7fa3915bdafdf03041871920a205bef951d72bf64dd4c4460fb992e3ecc3a862&fvd=n7&v=3 HTTP/1.1 
Host: use.typekit.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.paulaschoice.com
Connection: keep-alive
Referer: https://use.typekit.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         23.36.76.122
HTTP/2 200 OK
content-type: application/font-woff2
                                        
server: nginx
content-length: 16832
etag: "96c7595dad6bb306bf9cc4c7a3b3d28654c7d636"
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=31536000
date: Fri, 09 Dec 2022 08:20:53 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), CFF, length 16832, version 1.0\012- data
Size:   16832
Md5:    99cfcab4e91c1bc97731bcfe27ac5b29
Sha1:   740fcbaba11d23a5b9daa66fbd99ed8c4250fe6d
Sha256: 81a6361b1f6ff5f9f6ca05b773fb993d7b7b3f668635ccba4379fa3ecb9a7e3e
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 5378
Cache-Control: 'max-age=158059'
Date: Fri, 09 Dec 2022 08:20:53 GMT
Last-Modified: Fri, 09 Dec 2022 06:51:15 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 279

                                        
                                            GET /on/demandware.static/-/Sites-pc-catalog-nav/default/dw7ab6942b/Star%202021.svg HTTP/1.1 
Host: www.paulaschoice.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paulaschoice.com/
Cookie: dwac_1dddfe3d24e60db025cd316ffb=B6ujOwiiTGPKS336qHCNCn_JFrP2GiYaSNI%3D|dw-only|||USD|false|US%2FPacific|true; cqcid=aditEub1hqh4qvFQGaDVqS9bUJ; cquid=||; sid=B6ujOwiiTGPKS336qHCNCn_JFrP2GiYaSNI; dwanonymous_ef0ecd72b896f083bfc97bf06fa6e424=aditEub1hqh4qvFQGaDVqS9bUJ; __cq_dnt=0; dw_dnt=0; dwsid=Q2mtmoc9frP0mJYLLUUO5jsLGBJ5hRTKdgHPgZui7xjmNbZ0_raLhdzXOJjrBojXMw8HxYa72Ab3nej-WJn39g==; ak_bmsc=73A5130AE46340066CFE45C721038D58~000000000000000000000000000000~YAAQzQplXwmQaXyEAQAAChb59RLN4wFwkk0MvLqycjvkN9Arr6uXVcm81smlp7tnQWAuYusuxNY5xpAvXR36YO9EOd0uMWZbo5sIkiwVlVHXQzEUOzOd4uaB4RiC3AVi0SnzTnZXIUI5jpziA4vfV1lb7THrO+zhdCe71k2BAb1vUAlE3BA7Hznmiu9Og2Px2vDHdxgi9MJXITK86Wkmm91Zm+cMU0qR7grVDxRZplw81xxllbC4tePj0rPq1Q5+9yTXhtyDUqUhshCF+LZG65qMG7JGpd9kABq8FN3LwKbNDsCYT8TZ964Of0cXo/g9d0qBl5c5nLRGPkWXJU288qCTcLvLn6YnHjeLUyVeeRuya2IPMZiHrVV3yAKMfAfknot1Prw97MR9LL5l1XoG
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         95.101.10.209
HTTP/2 200 OK
content-type: image/svg+xml
                                        
cf-ray: 6ab53f87efe0435d-FRA
last-modified: Thu, 14 Oct 2021 20:45:26 GMT
strict-transport-security: max-age=31536000; includeSubDomains
vary: Accept-Encoding
cf-cache-status: HIT
cross-origin-resource-policy: cross-origin
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
x-dw-request-base-id: xTfXbMSaaGEBAAB_
content-encoding: gzip
content-length: 229
cache-control: public, max-age=1550565
date: Fri, 09 Dec 2022 08:20:53 GMT
akamai-cache-status: Hit from child
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- , ASCII text, with no line terminators
Size:   229
Md5:    b203bd6577770dd0878aee1a0541fc1b
Sha1:   a758fef4cb77d1d9a38cc5250baeb415962f3654
Sha256: e8060cf521c560366df54533fda627f64d1faf98396004a67ea15364d5c7eb6a
                                        
                                            GET /on/demandware.static/-/Sites-pc-catalog-nav/default/dw6d06b8ea/awardRibbon.svg HTTP/1.1 
Host: www.paulaschoice.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paulaschoice.com/
Cookie: dwac_1dddfe3d24e60db025cd316ffb=B6ujOwiiTGPKS336qHCNCn_JFrP2GiYaSNI%3D|dw-only|||USD|false|US%2FPacific|true; cqcid=aditEub1hqh4qvFQGaDVqS9bUJ; cquid=||; sid=B6ujOwiiTGPKS336qHCNCn_JFrP2GiYaSNI; dwanonymous_ef0ecd72b896f083bfc97bf06fa6e424=aditEub1hqh4qvFQGaDVqS9bUJ; __cq_dnt=0; dw_dnt=0; dwsid=Q2mtmoc9frP0mJYLLUUO5jsLGBJ5hRTKdgHPgZui7xjmNbZ0_raLhdzXOJjrBojXMw8HxYa72Ab3nej-WJn39g==; ak_bmsc=73A5130AE46340066CFE45C721038D58~000000000000000000000000000000~YAAQzQplXwmQaXyEAQAAChb59RLN4wFwkk0MvLqycjvkN9Arr6uXVcm81smlp7tnQWAuYusuxNY5xpAvXR36YO9EOd0uMWZbo5sIkiwVlVHXQzEUOzOd4uaB4RiC3AVi0SnzTnZXIUI5jpziA4vfV1lb7THrO+zhdCe71k2BAb1vUAlE3BA7Hznmiu9Og2Px2vDHdxgi9MJXITK86Wkmm91Zm+cMU0qR7grVDxRZplw81xxllbC4tePj0rPq1Q5+9yTXhtyDUqUhshCF+LZG65qMG7JGpd9kABq8FN3LwKbNDsCYT8TZ964Of0cXo/g9d0qBl5c5nLRGPkWXJU288qCTcLvLn6YnHjeLUyVeeRuya2IPMZiHrVV3yAKMfAfknot1Prw97MR9LL5l1XoG
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         95.101.10.209
HTTP/2 200 OK
content-type: image/svg+xml
                                        
cf-ray: 6ab53f87eeca4eaf-FRA
last-modified: Mon, 21 Sep 2020 17:37:31 GMT
strict-transport-security: max-age=31536000; includeSubDomains
vary: Accept-Encoding
cf-cache-status: HIT
cross-origin-resource-policy: cross-origin
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
x-dw-request-base-id: pLy_nkyUHmEBAAB_
content-encoding: gzip
content-length: 625
cache-control: public, max-age=741591
date: Fri, 09 Dec 2022 08:20:53 GMT
akamai-cache-status: Hit from child
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (1298), with no line terminators
Size:   625
Md5:    64acfa7d5c0a8211b6ebbdbeebffb3e0
Sha1:   fec85ddde0813250dbf6caa9a4cefd85dbeb5d08
Sha256: 001dc8e32eb4dc94677c5d879569d8a89d86c61a2c81ad4460a18e3f2a7b1174
                                        
                                            GET /on/demandware.static/-/Sites-pc-catalog-nav/default/dw9230e913/twoBottles.svg HTTP/1.1 
Host: www.paulaschoice.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paulaschoice.com/
Cookie: dwac_1dddfe3d24e60db025cd316ffb=B6ujOwiiTGPKS336qHCNCn_JFrP2GiYaSNI%3D|dw-only|||USD|false|US%2FPacific|true; cqcid=aditEub1hqh4qvFQGaDVqS9bUJ; cquid=||; sid=B6ujOwiiTGPKS336qHCNCn_JFrP2GiYaSNI; dwanonymous_ef0ecd72b896f083bfc97bf06fa6e424=aditEub1hqh4qvFQGaDVqS9bUJ; __cq_dnt=0; dw_dnt=0; dwsid=Q2mtmoc9frP0mJYLLUUO5jsLGBJ5hRTKdgHPgZui7xjmNbZ0_raLhdzXOJjrBojXMw8HxYa72Ab3nej-WJn39g==; ak_bmsc=73A5130AE46340066CFE45C721038D58~000000000000000000000000000000~YAAQzQplXwmQaXyEAQAAChb59RLN4wFwkk0MvLqycjvkN9Arr6uXVcm81smlp7tnQWAuYusuxNY5xpAvXR36YO9EOd0uMWZbo5sIkiwVlVHXQzEUOzOd4uaB4RiC3AVi0SnzTnZXIUI5jpziA4vfV1lb7THrO+zhdCe71k2BAb1vUAlE3BA7Hznmiu9Og2Px2vDHdxgi9MJXITK86Wkmm91Zm+cMU0qR7grVDxRZplw81xxllbC4tePj0rPq1Q5+9yTXhtyDUqUhshCF+LZG65qMG7JGpd9kABq8FN3LwKbNDsCYT8TZ964Of0cXo/g9d0qBl5c5nLRGPkWXJU288qCTcLvLn6YnHjeLUyVeeRuya2IPMZiHrVV3yAKMfAfknot1Prw97MR9LL5l1XoG
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         95.101.10.209
HTTP/2 200 OK
content-type: image/svg+xml
                                        
cf-ray: 6ab539d4aa24c2ea-FRA
last-modified: Mon, 21 Sep 2020 17:36:09 GMT
strict-transport-security: max-age=31536000; includeSubDomains
vary: Accept-Encoding
cf-cache-status: HIT
cross-origin-resource-policy: cross-origin
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
x-dw-request-base-id: GvleP0KTRWEBAAB_
content-encoding: gzip
content-length: 607
cache-control: public, max-age=1568747
date: Fri, 09 Dec 2022 08:20:53 GMT
akamai-cache-status: Hit from child
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (1445), with no line terminators
Size:   607
Md5:    c6b9722598947f2c3cd0748d8f2fa509
Sha1:   f2ad090ccb21e2d61816b6f4618712f8db1d291f
Sha256: bae9f9f998349299e65ff6039fba8b409579e9cefee2e8f7bedd9832ba0fcee8
                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 3KPGxgv1YjUpNkF8PvlULA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

search
                                         35.163.1.35
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 9SveuqMQFM610CouI3N3HhviTQM=

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 1813
Cache-Control: 'max-age=158059'
Date: Fri, 09 Dec 2022 08:20:53 GMT
Last-Modified: Fri, 09 Dec 2022 07:50:41 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 280

                                        
                                            GET /on/demandware.static/-/Library-Sites-paulachoice/default/dw34c7c4ef/images/footer/desktop-payment-icons.png HTTP/1.1 
Host: www.paulaschoice.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paulaschoice.com/
Cookie: dwac_1dddfe3d24e60db025cd316ffb=B6ujOwiiTGPKS336qHCNCn_JFrP2GiYaSNI%3D|dw-only|||USD|false|US%2FPacific|true; cqcid=aditEub1hqh4qvFQGaDVqS9bUJ; cquid=||; sid=B6ujOwiiTGPKS336qHCNCn_JFrP2GiYaSNI; dwanonymous_ef0ecd72b896f083bfc97bf06fa6e424=aditEub1hqh4qvFQGaDVqS9bUJ; __cq_dnt=0; dw_dnt=0; dwsid=Q2mtmoc9frP0mJYLLUUO5jsLGBJ5hRTKdgHPgZui7xjmNbZ0_raLhdzXOJjrBojXMw8HxYa72Ab3nej-WJn39g==; ak_bmsc=73A5130AE46340066CFE45C721038D58~000000000000000000000000000000~YAAQzQplXwmQaXyEAQAAChb59RLN4wFwkk0MvLqycjvkN9Arr6uXVcm81smlp7tnQWAuYusuxNY5xpAvXR36YO9EOd0uMWZbo5sIkiwVlVHXQzEUOzOd4uaB4RiC3AVi0SnzTnZXIUI5jpziA4vfV1lb7THrO+zhdCe71k2BAb1vUAlE3BA7Hznmiu9Og2Px2vDHdxgi9MJXITK86Wkmm91Zm+cMU0qR7grVDxRZplw81xxllbC4tePj0rPq1Q5+9yTXhtyDUqUhshCF+LZG65qMG7JGpd9kABq8FN3LwKbNDsCYT8TZ964Of0cXo/g9d0qBl5c5nLRGPkWXJU288qCTcLvLn6YnHjeLUyVeeRuya2IPMZiHrVV3yAKMfAfknot1Prw97MR9LL5l1XoG
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         95.101.10.209
HTTP/2 200 OK
content-type: image/webp
                                        
content-length: 2888
cf-ray: 776c52fabe3e9104-FRA
accept-ranges: bytes
content-disposition: inline; filename="desktop-payment-icons.webp"
last-modified: Thu, 18 Aug 2022 16:36:06 GMT
strict-transport-security: max-age=31536000; includeSubDomains
vary: Accept, Accept-Encoding
cf-cache-status: HIT
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=6105
cross-origin-resource-policy: cross-origin
x-dw-request-base-id: WXQKwGTPkGMBAAB_
cache-control: public, max-age=2456872
date: Fri, 09 Dec 2022 08:20:53 GMT
akamai-cache-status: Miss from child, Miss from parent
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   2888
Md5:    23478e6f1a39e2ab7db628d1c558a2d1
Sha1:   a35c3a09f03bd351f3349e44e8c394118542761b
Sha256: 1d9ced8194cd814938d5fa90662ea0e4b59e5265e8d88cdd746160c3dd6b8e2a
                                        
                                            GET /on/demandware.static/-/Sites-pc-catalog-nav/default/dw5629913e/minis.svg HTTP/1.1 
Host: www.paulaschoice.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paulaschoice.com/
Cookie: dwac_1dddfe3d24e60db025cd316ffb=B6ujOwiiTGPKS336qHCNCn_JFrP2GiYaSNI%3D|dw-only|||USD|false|US%2FPacific|true; cqcid=aditEub1hqh4qvFQGaDVqS9bUJ; cquid=||; sid=B6ujOwiiTGPKS336qHCNCn_JFrP2GiYaSNI; dwanonymous_ef0ecd72b896f083bfc97bf06fa6e424=aditEub1hqh4qvFQGaDVqS9bUJ; __cq_dnt=0; dw_dnt=0; dwsid=Q2mtmoc9frP0mJYLLUUO5jsLGBJ5hRTKdgHPgZui7xjmNbZ0_raLhdzXOJjrBojXMw8HxYa72Ab3nej-WJn39g==; ak_bmsc=73A5130AE46340066CFE45C721038D58~000000000000000000000000000000~YAAQzQplXwmQaXyEAQAAChb59RLN4wFwkk0MvLqycjvkN9Arr6uXVcm81smlp7tnQWAuYusuxNY5xpAvXR36YO9EOd0uMWZbo5sIkiwVlVHXQzEUOzOd4uaB4RiC3AVi0SnzTnZXIUI5jpziA4vfV1lb7THrO+zhdCe71k2BAb1vUAlE3BA7Hznmiu9Og2Px2vDHdxgi9MJXITK86Wkmm91Zm+cMU0qR7grVDxRZplw81xxllbC4tePj0rPq1Q5+9yTXhtyDUqUhshCF+LZG65qMG7JGpd9kABq8FN3LwKbNDsCYT8TZ964Of0cXo/g9d0qBl5c5nLRGPkWXJU288qCTcLvLn6YnHjeLUyVeeRuya2IPMZiHrVV3yAKMfAfknot1Prw97MR9LL5l1XoG
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         95.101.10.209
HTTP/2 200 OK
content-type: image/svg+xml
                                        
cf-ray: 6ab53f87fef64eaf-FRA
last-modified: Mon, 21 Sep 2020 20:03:57 GMT
strict-transport-security: max-age=31536000; includeSubDomains
vary: Accept-Encoding
cf-cache-status: HIT
cross-origin-resource-policy: cross-origin
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
x-dw-request-base-id: DwoGuLI592ABAAB_
content-encoding: gzip
content-length: 552
cache-control: public, max-age=890641
date: Fri, 09 Dec 2022 08:20:53 GMT
akamai-cache-status: Hit from child
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (523)
Size:   552
Md5:    b80665a5f9eb7189e203f9c68beae715
Sha1:   75b11f34fa570c29df15ff5760a5b9e25b759ebb
Sha256: c6e611f5004f667992da39b8ff8a0c359a31a315d956e8eee87ecf12d27d0173
                                        
                                            GET /on/demandware.static/-/Sites-pc-catalog-nav/default/dw6f84987c/tag.svg HTTP/1.1 
Host: www.paulaschoice.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paulaschoice.com/
Cookie: dwac_1dddfe3d24e60db025cd316ffb=B6ujOwiiTGPKS336qHCNCn_JFrP2GiYaSNI%3D|dw-only|||USD|false|US%2FPacific|true; cqcid=aditEub1hqh4qvFQGaDVqS9bUJ; cquid=||; sid=B6ujOwiiTGPKS336qHCNCn_JFrP2GiYaSNI; dwanonymous_ef0ecd72b896f083bfc97bf06fa6e424=aditEub1hqh4qvFQGaDVqS9bUJ; __cq_dnt=0; dw_dnt=0; dwsid=Q2mtmoc9frP0mJYLLUUO5jsLGBJ5hRTKdgHPgZui7xjmNbZ0_raLhdzXOJjrBojXMw8HxYa72Ab3nej-WJn39g==; ak_bmsc=73A5130AE46340066CFE45C721038D58~000000000000000000000000000000~YAAQzQplXwmQaXyEAQAAChb59RLN4wFwkk0MvLqycjvkN9Arr6uXVcm81smlp7tnQWAuYusuxNY5xpAvXR36YO9EOd0uMWZbo5sIkiwVlVHXQzEUOzOd4uaB4RiC3AVi0SnzTnZXIUI5jpziA4vfV1lb7THrO+zhdCe71k2BAb1vUAlE3BA7Hznmiu9Og2Px2vDHdxgi9MJXITK86Wkmm91Zm+cMU0qR7grVDxRZplw81xxllbC4tePj0rPq1Q5+9yTXhtyDUqUhshCF+LZG65qMG7JGpd9kABq8FN3LwKbNDsCYT8TZ964Of0cXo/g9d0qBl5c5nLRGPkWXJU288qCTcLvLn6YnHjeLUyVeeRuya2IPMZiHrVV3yAKMfAfknot1Prw97MR9LL5l1XoG
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         95.101.10.209
HTTP/2 200 OK
content-type: image/svg+xml
                                        
cf-ray: 6ab539d48fb64eda-FRA
last-modified: Mon, 21 Sep 2020 20:04:32 GMT
strict-transport-security: max-age=31536000; includeSubDomains
vary: Accept-Encoding
cf-cache-status: HIT
cross-origin-resource-policy: cross-origin
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
x-dw-request-base-id: GvlrQP0cRmEBAAB_
content-encoding: gzip
content-length: 473
cache-control: public, max-age=1462895
date: Fri, 09 Dec 2022 08:20:53 GMT
akamai-cache-status: Hit from child
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (435)
Size:   473
Md5:    278c0a3c8b49446cdcaeb3a06cab44e3
Sha1:   ea6eebf517788ce300c6f84e78d75e9a1bda52ab
Sha256: 6c3eecb38cb145e451a5ee7ff433d5d26d48b5b2be848857e31104c14ac1fad6
                                        
                                            GET /on/demandware.static/-/Library-Sites-paulachoice/default/dw636b6b54/images/app/chevron-right.svg HTTP/1.1 
Host: www.paulaschoice.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paulaschoice.com/
Cookie: dwac_1dddfe3d24e60db025cd316ffb=B6ujOwiiTGPKS336qHCNCn_JFrP2GiYaSNI%3D|dw-only|||USD|false|US%2FPacific|true; cqcid=aditEub1hqh4qvFQGaDVqS9bUJ; cquid=||; sid=B6ujOwiiTGPKS336qHCNCn_JFrP2GiYaSNI; dwanonymous_ef0ecd72b896f083bfc97bf06fa6e424=aditEub1hqh4qvFQGaDVqS9bUJ; __cq_dnt=0; dw_dnt=0; dwsid=Q2mtmoc9frP0mJYLLUUO5jsLGBJ5hRTKdgHPgZui7xjmNbZ0_raLhdzXOJjrBojXMw8HxYa72Ab3nej-WJn39g==; ak_bmsc=73A5130AE46340066CFE45C721038D58~000000000000000000000000000000~YAAQzQplXwmQaXyEAQAAChb59RLN4wFwkk0MvLqycjvkN9Arr6uXVcm81smlp7tnQWAuYusuxNY5xpAvXR36YO9EOd0uMWZbo5sIkiwVlVHXQzEUOzOd4uaB4RiC3AVi0SnzTnZXIUI5jpziA4vfV1lb7THrO+zhdCe71k2BAb1vUAlE3BA7Hznmiu9Og2Px2vDHdxgi9MJXITK86Wkmm91Zm+cMU0qR7grVDxRZplw81xxllbC4tePj0rPq1Q5+9yTXhtyDUqUhshCF+LZG65qMG7JGpd9kABq8FN3LwKbNDsCYT8TZ964Of0cXo/g9d0qBl5c5nLRGPkWXJU288qCTcLvLn6YnHjeLUyVeeRuya2IPMZiHrVV3yAKMfAfknot1Prw97MR9LL5l1XoG
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         95.101.10.209
HTTP/2 200 OK
content-type: image/svg+xml
                                        
cf-ray: 6ab53f88189e435d-FRA
last-modified: Mon, 17 Dec 2018 18:17:01 GMT
strict-transport-security: max-age=31536000; includeSubDomains
vary: Accept-Encoding
cf-cache-status: HIT
cross-origin-resource-policy: cross-origin
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
x-dw-request-base-id: TBQ19iLNemEBAAB_
content-encoding: gzip
content-length: 236
cache-control: public, max-age=2482097
date: Fri, 09 Dec 2022 08:20:53 GMT
akamai-cache-status: Hit from child
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (367), with no line terminators
Size:   236
Md5:    2460bb060cfa64c84cb16e9f7a97311b
Sha1:   a4fba5bcba87e48aa1bbebfbb0b96624bc4e1b59
Sha256: a91469dfb553b9f028ee1142dea6dfe67f1f6294b270eb9e550b3367acb472bf
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 5378
Cache-Control: 'max-age=158059'
Date: Fri, 09 Dec 2022 08:20:53 GMT
Last-Modified: Fri, 09 Dec 2022 06:51:15 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 279

                                        
                                            GET /lib.js HTTP/1.1 
Host: na-library.klarnaservices.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paulaschoice.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         143.204.55.56
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Thu, 08 Dec 2022 11:03:08 GMT
x-amz-server-side-encryption: AES256
server: AmazonS3
content-encoding: br
date: Fri, 09 Dec 2022 08:14:52 GMT
cache-control: max-age=900
etag: W/"cd43359fff642fe005312b38134db889"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 501ad2910f631f0520a6d389d6f053e8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: LwWrevC3VPtEUAlvIURRE5FmN2QUj0r1Yl69cdrX3yjhiQDIdGo9ag==
age: 364
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (34094), with no line terminators
Size:   11171
Md5:    aeb6e5b24c4782e6c790bcaf0ecd0e58
Sha1:   2cce845aa086236f46204bfffd90c27f41d1e69d
Sha256: 52b7d3813014b482c7550ee576ee5e41635973bea3d41fb2bb6b6afb674fb77d
                                        
                                            POST / HTTP/1.1 
Host: status.geotrust.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 5411
Cache-Control: max-age=122681
Date: Fri, 09 Dec 2022 08:20:53 GMT
Etag: "639216fb-1d7"
Expires: Sat, 10 Dec 2022 18:25:34 GMT
Last-Modified: Thu, 08 Dec 2022 16:55:23 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /ekr/snippet.js?key=544af24e-9423-4303-8ecc-988c7ce2e17c HTTP/1.1 
Host: static.zdassets.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paulaschoice.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         104.18.70.113
HTTP/2 200 OK
content-type: application/javascript
                                        
date: Fri, 09 Dec 2022 08:20:53 GMT
x-amz-id-2: 2vczt6VEQAujZh2Sn1saK7Q0yPHQMRKRQuuC+kOwLnJ40itjD1HXfy2Id85tVz8wD4O1ArN10VQ=
x-amz-request-id: 4MARQ9YY8PDZ70A8
x-amz-replication-status: PENDING
last-modified: Thu, 28 Jul 2022 23:44:02 GMT
etag: W/"5cae6ce528dce0c327b2bcbaad459fdb"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=3600, s-maxage=60
x-amz-version-id: TCAqq4sghBBBAAXd3MLZ8Fy8XIds..vO
cf-cache-status: HIT
age: 30
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FbOjJKVUYqvNYskn5bZrjLfEmEvO0aw51r2FFZnKonATyOpDWi3Ww7l%2B7aCWRzLP50r3W6%2Bm2%2B%2Fc7MwSkpljsa%2B%2BLBBLOxX5rgRJBbfIKW%2Fs1%2B%2BUvEzvPt8TGH70h5KMuvJkpLU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0
server: cloudflare
cf-ray: 776c52fb5e3c1c06-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (23416), with no line terminators
Size:   6490
Md5:    a02021656a022c4f7d033e882c66584d
Sha1:   e8fed7c5fdec49780ca9cbf08159a5eb3df22cdf
Sha256: 7cb98394d5413fb422fbdc3870b03a4d18a36a7f4b2a71df0ab795cc43584ba8
                                        
                                            GET /checkoutshopper/sdk/4.2.3/adyen.css HTTP/1.1 
Host: checkoutshopper-live.adyen.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.paulaschoice.com
Connection: keep-alive
Referer: https://www.paulaschoice.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         193.67.130.68
HTTP/1.1 200
Content-Type: text/css;charset=UTF8
                                        
traceparent: 00-de645018a1c8c1f260d239f382bf2e93-e5528098fe60e9ae-01
cross-origin-resource-policy: cross-origin
Cache-Control: max-age=600
content-encoding: gzip
Transfer-Encoding: chunked
Date: Fri, 09 Dec 2022 08:20:53 GMT
access-control-allow-origin: *


--- Additional Info ---
Magic:  ASCII text, with very long lines (930)
Size:   10196
Md5:    112df4313bfad1b3588b99423d09cf01
Sha1:   c15e0d8c7c61df901fc6f731fc346649d165e83f
Sha256: 19290234f272962563497bf49f02261f50c4e1db621f2f9861677ee1be895c4f
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sca1b.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         54.230.245.39
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=154178
Date: Fri, 09 Dec 2022 08:20:53 GMT
Etag: "63929575-1d7"
Expires: Sun, 11 Dec 2022 03:10:31 GMT
Last-Modified: Fri, 09 Dec 2022 01:55:01 GMT
Server: ECS (dcb/7EA7)
X-Cache: Miss from cloudfront
Via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: wgFEEeVx_YAUMl2Af5vRc4KjCl8CCgkTEBpiMfcbsJ5AA-gEFQIm9w==
Age: 4530

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 6120
Cache-Control: max-age=149267
Date: Fri, 09 Dec 2022 08:20:53 GMT
Etag: "63927c10-117"
Expires: Sun, 11 Dec 2022 01:48:40 GMT
Last-Modified: Fri, 09 Dec 2022 00:06:40 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 279

                                        
                                            GET /checkoutshopper/sdk/4.2.3/adyen.js HTTP/1.1 
Host: checkoutshopper-live.adyen.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.paulaschoice.com
Connection: keep-alive
Referer: https://www.paulaschoice.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         193.67.130.68
HTTP/1.1 200
Content-Type: text/javascript;charset=UTF8
                                        
traceparent: 00-32641e378573582ef472cde6d9bbc216-257ed8ceee02b48a-01
cross-origin-resource-policy: cross-origin
Cache-Control: max-age=600
content-encoding: gzip
Transfer-Encoding: chunked
Date: Fri, 09 Dec 2022 08:20:53 GMT
access-control-allow-origin: *


--- Additional Info ---
Magic:  ASCII text, with very long lines (65536), with no line terminators
Size:   155389
Md5:    2985e5d5916e5c1d5d0483514e083640
Sha1:   7fc9bc99f5dc4fc96a0b7266f6c66ad513632859
Sha256: 89735a275805382f7a0280bccb4a485973ee41f8cdb9157178aa510c36b5dbd9
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sca1b.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         54.230.245.39
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=167680
Date: Fri, 09 Dec 2022 08:20:53 GMT
Etag: "6392c96d-1d7"
Expires: Sun, 11 Dec 2022 06:55:33 GMT
Last-Modified: Fri, 09 Dec 2022 05:36:45 GMT
Server: ECS (nyb/1D1F)
X-Cache: Miss from cloudfront
Via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: EYx_KqG5eVgTI4mnZlWYkzgm5KG9yNHx5A1O19IVGWH7lWWMikU6xQ==
Age: 4728

                                        
                                            GET /internal-api/app/slots?ajax=true HTTP/1.1 
Host: www.paulaschoice.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paulaschoice.com/
Cookie: dwac_1dddfe3d24e60db025cd316ffb=B6ujOwiiTGPKS336qHCNCn_JFrP2GiYaSNI%3D|dw-only|||USD|false|US%2FPacific|true; cqcid=aditEub1hqh4qvFQGaDVqS9bUJ; cquid=||; sid=B6ujOwiiTGPKS336qHCNCn_JFrP2GiYaSNI; dwanonymous_ef0ecd72b896f083bfc97bf06fa6e424=aditEub1hqh4qvFQGaDVqS9bUJ; __cq_dnt=0; dw_dnt=0; dwsid=Q2mtmoc9frP0mJYLLUUO5jsLGBJ5hRTKdgHPgZui7xjmNbZ0_raLhdzXOJjrBojXMw8HxYa72Ab3nej-WJn39g==; ak_bmsc=73A5130AE46340066CFE45C721038D58~000000000000000000000000000000~YAAQzQplXwmQaXyEAQAAChb59RLN4wFwkk0MvLqycjvkN9Arr6uXVcm81smlp7tnQWAuYusuxNY5xpAvXR36YO9EOd0uMWZbo5sIkiwVlVHXQzEUOzOd4uaB4RiC3AVi0SnzTnZXIUI5jpziA4vfV1lb7THrO+zhdCe71k2BAb1vUAlE3BA7Hznmiu9Og2Px2vDHdxgi9MJXITK86Wkmm91Zm+cMU0qR7grVDxRZplw81xxllbC4tePj0rPq1Q5+9yTXhtyDUqUhshCF+LZG65qMG7JGpd9kABq8FN3LwKbNDsCYT8TZ964Of0cXo/g9d0qBl5c5nLRGPkWXJU288qCTcLvLn6YnHjeLUyVeeRuya2IPMZiHrVV3yAKMfAfknot1Prw97MR9LL5l1XoG
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         95.101.10.209
HTTP/2 200 OK
content-type: application/json;charset=UTF-8
                                        
accept-ranges: bytes
x-dw-request-base-id: WXQUFuXvkmMBAAB_
vary: accept-encoding
content-encoding: gzip
cf-cache-status: DYNAMIC
strict-transport-security: max-age=31536000; includeSubDomains
cf-ray: 776c52fb7fc09104-FRA
content-length: 5742
expires: Fri, 09 Dec 2022 08:20:54 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Fri, 09 Dec 2022 08:20:54 GMT
set-cookie: __cq_dnt=0; Path=/; Secure; SameSite=None dw_dnt=0; Path=/; Secure; SameSite=None bm_sv=8EB8AEE88059F85E43E001C6304AF64C~YAAQzQplXxGQaXyEAQAAfhr59RJxcNRSVXfB2/ihq84cKTVXSEGSB92gLbb1aqqKLg83hTitJc1gZuPpclnnsoBiMwtN5tydBtZ54KZ6HaGr0kZGqlqrEdq+ZnP7r2Visk9Yc0bXxV5pox2wmqSKQPVAVyJhjIR3XcFPELUlHMhvLuiJ5U1ilXyg4xPJp6ExSs3cFdep/G7ODmCicF3JOvw5M1P/gWDalVOsYu7mDVQ53g4cUJGOSJ0B4YdkZTaJNvcO65A+~1; Domain=.paulaschoice.com; Path=/; Expires=Fri, 09 Dec 2022 10:20:54 GMT; Max-Age=7200; Secure
akamai-cache-status: Miss from child, Miss from parent
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (9571)
Size:   5742
Md5:    4fc89784f83ac7c9054de2a75eeb4cb1
Sha1:   6d956f03dfd44b02f13d47159b59d5ba4027229b
Sha256: 54f3ae87ee530eed0c86a023b0add0579c4ec832a9d91bdc4a4706b671143e87
                                        
                                            GET /on/demandware.static/-/Library-Sites-paulachoice/default/dwe4b33d4d/images/promotion-tray/pc_221007_mobile_promotion-tray_holiday22-site-version_pc-perks.jpg HTTP/1.1 
Host: www.paulaschoice.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paulaschoice.com/
Cookie: dwac_1dddfe3d24e60db025cd316ffb=B6ujOwiiTGPKS336qHCNCn_JFrP2GiYaSNI%3D|dw-only|||USD|false|US%2FPacific|true; cqcid=aditEub1hqh4qvFQGaDVqS9bUJ; cquid=||; sid=B6ujOwiiTGPKS336qHCNCn_JFrP2GiYaSNI; dwanonymous_ef0ecd72b896f083bfc97bf06fa6e424=aditEub1hqh4qvFQGaDVqS9bUJ; __cq_dnt=0; dw_dnt=0; dwsid=Q2mtmoc9frP0mJYLLUUO5jsLGBJ5hRTKdgHPgZui7xjmNbZ0_raLhdzXOJjrBojXMw8HxYa72Ab3nej-WJn39g==; ak_bmsc=73A5130AE46340066CFE45C721038D58~000000000000000000000000000000~YAAQzQplXwmQaXyEAQAAChb59RLN4wFwkk0MvLqycjvkN9Arr6uXVcm81smlp7tnQWAuYusuxNY5xpAvXR36YO9EOd0uMWZbo5sIkiwVlVHXQzEUOzOd4uaB4RiC3AVi0SnzTnZXIUI5jpziA4vfV1lb7THrO+zhdCe71k2BAb1vUAlE3BA7Hznmiu9Og2Px2vDHdxgi9MJXITK86Wkmm91Zm+cMU0qR7grVDxRZplw81xxllbC4tePj0rPq1Q5+9yTXhtyDUqUhshCF+LZG65qMG7JGpd9kABq8FN3LwKbNDsCYT8TZ964Of0cXo/g9d0qBl5c5nLRGPkWXJU288qCTcLvLn6YnHjeLUyVeeRuya2IPMZiHrVV3yAKMfAfknot1Prw97MR9LL5l1XoG; _ju_v=4.1_5.47; _ju_dm=cookie; _ju_dn=1; bm_sv=8EB8AEE88059F85E43E001C6304AF64C~YAAQzQplXxGQaXyEAQAAfhr59RJxcNRSVXfB2/ihq84cKTVXSEGSB92gLbb1aqqKLg83hTitJc1gZuPpclnnsoBiMwtN5tydBtZ54KZ6HaGr0kZGqlqrEdq+ZnP7r2Visk9Yc0bXxV5pox2wmqSKQPVAVyJhjIR3XcFPELUlHMhvLuiJ5U1ilXyg4xPJp6ExSs3cFdep/G7ODmCicF3JOvw5M1P/gWDalVOsYu7mDVQ53g4cUJGOSJ0B4YdkZTaJNvcO65A+~1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         95.101.10.209
HTTP/2 200 OK
content-type: image/jpeg
                                        
content-length: 105758
cf-ray: 776c52fefe9d9104-FRA
accept-ranges: bytes
last-modified: Fri, 14 Oct 2022 16:13:18 GMT
strict-transport-security: max-age=31536000; includeSubDomains
vary: Accept-Encoding
cf-cache-status: HIT
cf-bgj: imgq:100,h2pri
cf-polished: status=not_needed
cross-origin-resource-policy: cross-origin
x-dw-request-base-id: WXT3GPvEfWMBAAB_
cache-control: public, max-age=1204863
date: Fri, 09 Dec 2022 08:20:54 GMT
akamai-cache-status: Miss from child, Miss from parent
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1448x764, components 3\012- data
Size:   105758
Md5:    1579e5954b8b7deda38ad4ff8973c0e0
Sha1:   99df2c9849ad3eadf2c59ed36f19a16ba0ccb8bb
Sha256: cad2b83617a97f09b38563ee568efa2db842366d60ddb72b5cdabefe8e5b1948
                                        
                                            POST /internal-api/customer/get-CSRF-token HTTP/1.1 
Host: www.paulaschoice.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 2
Origin: https://www.paulaschoice.com
Connection: keep-alive
Referer: https://www.paulaschoice.com/
Cookie: dwac_1dddfe3d24e60db025cd316ffb=B6ujOwiiTGPKS336qHCNCn_JFrP2GiYaSNI%3D|dw-only|||USD|false|US%2FPacific|true; cqcid=aditEub1hqh4qvFQGaDVqS9bUJ; cquid=||; sid=B6ujOwiiTGPKS336qHCNCn_JFrP2GiYaSNI; dwanonymous_ef0ecd72b896f083bfc97bf06fa6e424=aditEub1hqh4qvFQGaDVqS9bUJ; __cq_dnt=0; dw_dnt=0; dwsid=Q2mtmoc9frP0mJYLLUUO5jsLGBJ5hRTKdgHPgZui7xjmNbZ0_raLhdzXOJjrBojXMw8HxYa72Ab3nej-WJn39g==; ak_bmsc=73A5130AE46340066CFE45C721038D58~000000000000000000000000000000~YAAQzQplXwmQaXyEAQAAChb59RLN4wFwkk0MvLqycjvkN9Arr6uXVcm81smlp7tnQWAuYusuxNY5xpAvXR36YO9EOd0uMWZbo5sIkiwVlVHXQzEUOzOd4uaB4RiC3AVi0SnzTnZXIUI5jpziA4vfV1lb7THrO+zhdCe71k2BAb1vUAlE3BA7Hznmiu9Og2Px2vDHdxgi9MJXITK86Wkmm91Zm+cMU0qR7grVDxRZplw81xxllbC4tePj0rPq1Q5+9yTXhtyDUqUhshCF+LZG65qMG7JGpd9kABq8FN3LwKbNDsCYT8TZ964Of0cXo/g9d0qBl5c5nLRGPkWXJU288qCTcLvLn6YnHjeLUyVeeRuya2IPMZiHrVV3yAKMfAfknot1Prw97MR9LL5l1XoG; _ju_v=4.1_5.47; _ju_dm=cookie; _ju_dn=1; bm_sv=8EB8AEE88059F85E43E001C6304AF64C~YAAQzQplXxGQaXyEAQAAfhr59RJxcNRSVXfB2/ihq84cKTVXSEGSB92gLbb1aqqKLg83hTitJc1gZuPpclnnsoBiMwtN5tydBtZ54KZ6HaGr0kZGqlqrEdq+ZnP7r2Visk9Yc0bXxV5pox2wmqSKQPVAVyJhjIR3XcFPELUlHMhvLuiJ5U1ilXyg4xPJp6ExSs3cFdep/G7ODmCicF3JOvw5M1P/gWDalVOsYu7mDVQ53g4cUJGOSJ0B4YdkZTaJNvcO65A+~1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         95.101.10.209
HTTP/2 200 OK
content-type: application/json;charset=UTF-8
                                        
x-dw-request-base-id: -WB-a-XvkmMBAAB_
cf-cache-status: DYNAMIC
strict-transport-security: max-age=31536000; includeSubDomains
cf-ray: 776c52fe4def694f-FRA
content-encoding: gzip
content-length: 164
vary: Accept-Encoding
expires: Fri, 09 Dec 2022 08:20:54 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Fri, 09 Dec 2022 08:20:54 GMT
set-cookie: __cq_dnt=0; Path=/; Secure; SameSite=None dw_dnt=0; Path=/; Secure; SameSite=None bm_sv=8EB8AEE88059F85E43E001C6304AF64C~YAAQzQplXxSQaXyEAQAAnBv59RLVa2XY4Ycb/zlK6Z6icfdNMQ3ehPyp2sy2GbSJtJEs6A9iw6p7Wp2LuhguMYgQjCASjxr39ZR071u+aZCUWlxRDzY/AQbl32ZaMdWRbe6GMjC2d+A+k7SHgrcGjOXmrVi7KD/hEzajmSSgbJRjKzEETTO94N5gTrMC/1OEveVMpauBHdS5VsXwQXRe6OWMhjlEQJITjsSBb2wLUG9oeUhC6QBe3BEux8fjSbt/HDuvudiq~1; Domain=.paulaschoice.com; Path=/; Expires=Fri, 09 Dec 2022 10:20:54 GMT; Max-Age=7200; Secure
akamai-cache-status: Miss from child, Miss from parent
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   164
Md5:    957a4ba19229c3dd49de9b94b13c12c0
Sha1:   b207820c855174f502c7f5f06addd7528fc60272
Sha256: bdb55d9e6aea2c12362d698a655ddd0578d3f311c8adccf597798e0e4a2a5e53
                                        
                                            GET /on/demandware.static/-/Library-Sites-paulachoice/default/dw3223bd9d/images/promotion-tray/pc_221024_mobile_promotion-tray_holiday-gift-guide-site.jpg HTTP/1.1 
Host: www.paulaschoice.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paulaschoice.com/
Cookie: dwac_1dddfe3d24e60db025cd316ffb=B6ujOwiiTGPKS336qHCNCn_JFrP2GiYaSNI%3D|dw-only|||USD|false|US%2FPacific|true; cqcid=aditEub1hqh4qvFQGaDVqS9bUJ; cquid=||; sid=B6ujOwiiTGPKS336qHCNCn_JFrP2GiYaSNI; dwanonymous_ef0ecd72b896f083bfc97bf06fa6e424=aditEub1hqh4qvFQGaDVqS9bUJ; __cq_dnt=0; dw_dnt=0; dwsid=Q2mtmoc9frP0mJYLLUUO5jsLGBJ5hRTKdgHPgZui7xjmNbZ0_raLhdzXOJjrBojXMw8HxYa72Ab3nej-WJn39g==; ak_bmsc=73A5130AE46340066CFE45C721038D58~000000000000000000000000000000~YAAQzQplXwmQaXyEAQAAChb59RLN4wFwkk0MvLqycjvkN9Arr6uXVcm81smlp7tnQWAuYusuxNY5xpAvXR36YO9EOd0uMWZbo5sIkiwVlVHXQzEUOzOd4uaB4RiC3AVi0SnzTnZXIUI5jpziA4vfV1lb7THrO+zhdCe71k2BAb1vUAlE3BA7Hznmiu9Og2Px2vDHdxgi9MJXITK86Wkmm91Zm+cMU0qR7grVDxRZplw81xxllbC4tePj0rPq1Q5+9yTXhtyDUqUhshCF+LZG65qMG7JGpd9kABq8FN3LwKbNDsCYT8TZ964Of0cXo/g9d0qBl5c5nLRGPkWXJU288qCTcLvLn6YnHjeLUyVeeRuya2IPMZiHrVV3yAKMfAfknot1Prw97MR9LL5l1XoG; _ju_v=4.1_5.47; _ju_dm=cookie; _ju_dn=1; bm_sv=8EB8AEE88059F85E43E001C6304AF64C~YAAQzQplXxGQaXyEAQAAfhr59RJxcNRSVXfB2/ihq84cKTVXSEGSB92gLbb1aqqKLg83hTitJc1gZuPpclnnsoBiMwtN5tydBtZ54KZ6HaGr0kZGqlqrEdq+ZnP7r2Visk9Yc0bXxV5pox2wmqSKQPVAVyJhjIR3XcFPELUlHMhvLuiJ5U1ilXyg4xPJp6ExSs3cFdep/G7ODmCicF3JOvw5M1P/gWDalVOsYu7mDVQ53g4cUJGOSJ0B4YdkZTaJNvcO65A+~1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         95.101.10.209
HTTP/2 200 OK
content-type: image/jpeg
                                        
content-length: 76270
cf-ray: 776c52ff2ba06907-FRA
accept-ranges: bytes
last-modified: Sun, 16 Oct 2022 16:16:09 GMT
strict-transport-security: max-age=31536000; includeSubDomains
vary: Accept-Encoding
cf-cache-status: HIT
cf-bgj: imgq:100,h2pri
cf-polished: origSize=82960, status=webp_bigger
cross-origin-resource-policy: cross-origin
x-dw-request-base-id: WXTG-iKZfWMBAAB_
cache-control: public, max-age=1194646
date: Fri, 09 Dec 2022 08:20:54 GMT
akamai-cache-status: Miss from child, Miss from parent
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1448x764, components 3\012- data
Size:   76270
Md5:    bf2c0cf1c38d47632fc6497f16bef9f5
Sha1:   c1d2fe57f558d9ee378eca16ed69b6bbf9f8ac2e
Sha256: 5202392aca576f32cd28407f06d270bfebf8306aa3857c56f859b18c0253312d
                                        
                                            GET /on/demandware.static/-/Library-Sites-paulachoice/default/dw95df1b76/images/promotion-tray/us_221207_mobile_promotion-tray-npl_npl-plus-gwp.jpg HTTP/1.1 
Host: www.paulaschoice.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paulaschoice.com/
Cookie: dwac_1dddfe3d24e60db025cd316ffb=B6ujOwiiTGPKS336qHCNCn_JFrP2GiYaSNI%3D|dw-only|||USD|false|US%2FPacific|true; cqcid=aditEub1hqh4qvFQGaDVqS9bUJ; cquid=||; sid=B6ujOwiiTGPKS336qHCNCn_JFrP2GiYaSNI; dwanonymous_ef0ecd72b896f083bfc97bf06fa6e424=aditEub1hqh4qvFQGaDVqS9bUJ; __cq_dnt=0; dw_dnt=0; dwsid=Q2mtmoc9frP0mJYLLUUO5jsLGBJ5hRTKdgHPgZui7xjmNbZ0_raLhdzXOJjrBojXMw8HxYa72Ab3nej-WJn39g==; ak_bmsc=73A5130AE46340066CFE45C721038D58~000000000000000000000000000000~YAAQzQplXwmQaXyEAQAAChb59RLN4wFwkk0MvLqycjvkN9Arr6uXVcm81smlp7tnQWAuYusuxNY5xpAvXR36YO9EOd0uMWZbo5sIkiwVlVHXQzEUOzOd4uaB4RiC3AVi0SnzTnZXIUI5jpziA4vfV1lb7THrO+zhdCe71k2BAb1vUAlE3BA7Hznmiu9Og2Px2vDHdxgi9MJXITK86Wkmm91Zm+cMU0qR7grVDxRZplw81xxllbC4tePj0rPq1Q5+9yTXhtyDUqUhshCF+LZG65qMG7JGpd9kABq8FN3LwKbNDsCYT8TZ964Of0cXo/g9d0qBl5c5nLRGPkWXJU288qCTcLvLn6YnHjeLUyVeeRuya2IPMZiHrVV3yAKMfAfknot1Prw97MR9LL5l1XoG; _ju_v=4.1_5.47; _ju_dm=cookie; _ju_dn=1; bm_sv=8EB8AEE88059F85E43E001C6304AF64C~YAAQzQplXxGQaXyEAQAAfhr59RJxcNRSVXfB2/ihq84cKTVXSEGSB92gLbb1aqqKLg83hTitJc1gZuPpclnnsoBiMwtN5tydBtZ54KZ6HaGr0kZGqlqrEdq+ZnP7r2Visk9Yc0bXxV5pox2wmqSKQPVAVyJhjIR3XcFPELUlHMhvLuiJ5U1ilXyg4xPJp6ExSs3cFdep/G7ODmCicF3JOvw5M1P/gWDalVOsYu7mDVQ53g4cUJGOSJ0B4YdkZTaJNvcO65A+~1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         95.101.10.209
HTTP/2 200 OK
content-type: image/jpeg
                                        
content-length: 86135
cf-ray: 776c52ff2de29bfe-FRA
accept-ranges: bytes
last-modified: Mon, 28 Nov 2022 18:53:59 GMT
strict-transport-security: max-age=31536000; includeSubDomains
vary: Accept-Encoding
cf-cache-status: HIT
cf-bgj: imgq:100,h2pri
cf-polished: origSize=93937, status=webp_bigger
cross-origin-resource-policy: cross-origin
x-dw-request-base-id: -WC_VQRIkGMBAAB_
cache-control: public, max-age=2418237
date: Fri, 09 Dec 2022 08:20:54 GMT
akamai-cache-status: Miss from child, Miss from parent
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1448x764, components 3\012- data
Size:   86135
Md5:    64d2f98b4479844ea562f9505efb243b
Sha1:   c362dc00bcc6efb5cd651b1c2422a052f6014c9f
Sha256: c5359f715e425579abad1a870bfb7902746601dd2cb712178fc64fb4f4105b4e
                                        
                                            GET /on/demandware.static/-/Library-Sites-paulachoice/default/dw675afd9e/images/promotion-tray/pc_221130_mobile_promotion-tray_25-off-self-care-kits-plus-fs.jpg HTTP/1.1 
Host: www.paulaschoice.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paulaschoice.com/
Cookie: dwac_1dddfe3d24e60db025cd316ffb=B6ujOwiiTGPKS336qHCNCn_JFrP2GiYaSNI%3D|dw-only|||USD|false|US%2FPacific|true; cqcid=aditEub1hqh4qvFQGaDVqS9bUJ; cquid=||; sid=B6ujOwiiTGPKS336qHCNCn_JFrP2GiYaSNI; dwanonymous_ef0ecd72b896f083bfc97bf06fa6e424=aditEub1hqh4qvFQGaDVqS9bUJ; __cq_dnt=0; dw_dnt=0; dwsid=Q2mtmoc9frP0mJYLLUUO5jsLGBJ5hRTKdgHPgZui7xjmNbZ0_raLhdzXOJjrBojXMw8HxYa72Ab3nej-WJn39g==; ak_bmsc=73A5130AE46340066CFE45C721038D58~000000000000000000000000000000~YAAQzQplXwmQaXyEAQAAChb59RLN4wFwkk0MvLqycjvkN9Arr6uXVcm81smlp7tnQWAuYusuxNY5xpAvXR36YO9EOd0uMWZbo5sIkiwVlVHXQzEUOzOd4uaB4RiC3AVi0SnzTnZXIUI5jpziA4vfV1lb7THrO+zhdCe71k2BAb1vUAlE3BA7Hznmiu9Og2Px2vDHdxgi9MJXITK86Wkmm91Zm+cMU0qR7grVDxRZplw81xxllbC4tePj0rPq1Q5+9yTXhtyDUqUhshCF+LZG65qMG7JGpd9kABq8FN3LwKbNDsCYT8TZ964Of0cXo/g9d0qBl5c5nLRGPkWXJU288qCTcLvLn6YnHjeLUyVeeRuya2IPMZiHrVV3yAKMfAfknot1Prw97MR9LL5l1XoG; _ju_v=4.1_5.47; _ju_dm=cookie; _ju_dn=1; bm_sv=8EB8AEE88059F85E43E001C6304AF64C~YAAQzQplXxGQaXyEAQAAfhr59RJxcNRSVXfB2/ihq84cKTVXSEGSB92gLbb1aqqKLg83hTitJc1gZuPpclnnsoBiMwtN5tydBtZ54KZ6HaGr0kZGqlqrEdq+ZnP7r2Visk9Yc0bXxV5pox2wmqSKQPVAVyJhjIR3XcFPELUlHMhvLuiJ5U1ilXyg4xPJp6ExSs3cFdep/G7ODmCicF3JOvw5M1P/gWDalVOsYu7mDVQ53g4cUJGOSJ0B4YdkZTaJNvcO65A+~1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         95.101.10.209
HTTP/2 200 OK
content-type: image/jpeg
                                        
content-length: 70243
cf-ray: 776c52ff2c70bbb5-FRA
accept-ranges: bytes
last-modified: Mon, 21 Nov 2022 19:26:07 GMT
strict-transport-security: max-age=31536000; includeSubDomains
vary: Accept-Encoding
cf-cache-status: HIT
cf-bgj: imgq:100,h2pri
cf-polished: origSize=75754, status=webp_bigger
cross-origin-resource-policy: cross-origin
x-dw-request-base-id: -WDwxojQhmMBAAB_
cache-control: public, max-age=1814338
date: Fri, 09 Dec 2022 08:20:54 GMT
akamai-cache-status: Miss from child, Miss from parent
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1448x764, components 3\012- data
Size:   70243
Md5:    83f0251469b5c2240bb5f420abaed3c7
Sha1:   a202d87eb89c4df3b89cf7f224dc1111c42b7b4c
Sha256: a3bf506da5b34c2bd6be85ec5b59a756ff1d073be9bec550971036099b99704a
                                        
                                            GET /on/demandware.static/-/Library-Sites-paulachoice/default/dw09b4cb9a/images/plp-card/pc_221024_desktop_navigation-card_holiday-gift-guide-site.jpg HTTP/1.1 
Host: www.paulaschoice.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paulaschoice.com/
Cookie: dwac_1dddfe3d24e60db025cd316ffb=B6ujOwiiTGPKS336qHCNCn_JFrP2GiYaSNI%3D|dw-only|||USD|false|US%2FPacific|true; cqcid=aditEub1hqh4qvFQGaDVqS9bUJ; cquid=||; sid=B6ujOwiiTGPKS336qHCNCn_JFrP2GiYaSNI; dwanonymous_ef0ecd72b896f083bfc97bf06fa6e424=aditEub1hqh4qvFQGaDVqS9bUJ; __cq_dnt=0; dw_dnt=0; dwsid=Q2mtmoc9frP0mJYLLUUO5jsLGBJ5hRTKdgHPgZui7xjmNbZ0_raLhdzXOJjrBojXMw8HxYa72Ab3nej-WJn39g==; ak_bmsc=73A5130AE46340066CFE45C721038D58~000000000000000000000000000000~YAAQzQplXwmQaXyEAQAAChb59RLN4wFwkk0MvLqycjvkN9Arr6uXVcm81smlp7tnQWAuYusuxNY5xpAvXR36YO9EOd0uMWZbo5sIkiwVlVHXQzEUOzOd4uaB4RiC3AVi0SnzTnZXIUI5jpziA4vfV1lb7THrO+zhdCe71k2BAb1vUAlE3BA7Hznmiu9Og2Px2vDHdxgi9MJXITK86Wkmm91Zm+cMU0qR7grVDxRZplw81xxllbC4tePj0rPq1Q5+9yTXhtyDUqUhshCF+LZG65qMG7JGpd9kABq8FN3LwKbNDsCYT8TZ964Of0cXo/g9d0qBl5c5nLRGPkWXJU288qCTcLvLn6YnHjeLUyVeeRuya2IPMZiHrVV3yAKMfAfknot1Prw97MR9LL5l1XoG; _ju_v=4.1_5.47; _ju_dm=cookie; _ju_dn=1; bm_sv=8EB8AEE88059F85E43E001C6304AF64C~YAAQzQplXxGQaXyEAQAAfhr59RJxcNRSVXfB2/ihq84cKTVXSEGSB92gLbb1aqqKLg83hTitJc1gZuPpclnnsoBiMwtN5tydBtZ54KZ6HaGr0kZGqlqrEdq+ZnP7r2Visk9Yc0bXxV5pox2wmqSKQPVAVyJhjIR3XcFPELUlHMhvLuiJ5U1ilXyg4xPJp6ExSs3cFdep/G7ODmCicF3JOvw5M1P/gWDalVOsYu7mDVQ53g4cUJGOSJ0B4YdkZTaJNvcO65A+~1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         95.101.10.209
HTTP/2 200 OK
content-type: image/jpeg
                                        
content-length: 40150
cf-ray: 776c52ff3f1b9104-FRA
accept-ranges: bytes
last-modified: Thu, 20 Oct 2022 19:12:13 GMT
strict-transport-security: max-age=31536000; includeSubDomains
vary: Accept-Encoding
cf-cache-status: HIT
cf-bgj: imgq:100,h2pri
cf-polished: origSize=43065, status=webp_bigger
cross-origin-resource-policy: cross-origin
x-dw-request-base-id: WXRHLnQUfWMBAAB_
cache-control: public, max-age=1194621
date: Fri, 09 Dec 2022 08:20:54 GMT
akamai-cache-status: Miss from child, Miss from parent
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 520x720, components 3\012- data
Size:   40150
Md5:    2d82a02d4a47f847bed5043ec18064a4
Sha1:   d029a3f288933ce78b83c9768b41f34930d9a155
Sha256: fc6d474792d9dac2c96b44844623d28d9fc6a045525d654d4922a95c88ae7298
                                        
                                            GET /on/demandware.static/-/Library-Sites-paulachoice/default/dwbe66abb8/images/promotion-tray/us_221207_mobile_promotion-tray-gwp_npl-plus-gwp_v2.jpg HTTP/1.1 
Host: www.paulaschoice.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paulaschoice.com/
Cookie: dwac_1dddfe3d24e60db025cd316ffb=B6ujOwiiTGPKS336qHCNCn_JFrP2GiYaSNI%3D|dw-only|||USD|false|US%2FPacific|true; cqcid=aditEub1hqh4qvFQGaDVqS9bUJ; cquid=||; sid=B6ujOwiiTGPKS336qHCNCn_JFrP2GiYaSNI; dwanonymous_ef0ecd72b896f083bfc97bf06fa6e424=aditEub1hqh4qvFQGaDVqS9bUJ; __cq_dnt=0; dw_dnt=0; dwsid=Q2mtmoc9frP0mJYLLUUO5jsLGBJ5hRTKdgHPgZui7xjmNbZ0_raLhdzXOJjrBojXMw8HxYa72Ab3nej-WJn39g==; ak_bmsc=73A5130AE46340066CFE45C721038D58~000000000000000000000000000000~YAAQzQplXwmQaXyEAQAAChb59RLN4wFwkk0MvLqycjvkN9Arr6uXVcm81smlp7tnQWAuYusuxNY5xpAvXR36YO9EOd0uMWZbo5sIkiwVlVHXQzEUOzOd4uaB4RiC3AVi0SnzTnZXIUI5jpziA4vfV1lb7THrO+zhdCe71k2BAb1vUAlE3BA7Hznmiu9Og2Px2vDHdxgi9MJXITK86Wkmm91Zm+cMU0qR7grVDxRZplw81xxllbC4tePj0rPq1Q5+9yTXhtyDUqUhshCF+LZG65qMG7JGpd9kABq8FN3LwKbNDsCYT8TZ964Of0cXo/g9d0qBl5c5nLRGPkWXJU288qCTcLvLn6YnHjeLUyVeeRuya2IPMZiHrVV3yAKMfAfknot1Prw97MR9LL5l1XoG; _ju_v=4.1_5.47; _ju_dm=cookie; _ju_dn=1; bm_sv=8EB8AEE88059F85E43E001C6304AF64C~YAAQzQplXxGQaXyEAQAAfhr59RJxcNRSVXfB2/ihq84cKTVXSEGSB92gLbb1aqqKLg83hTitJc1gZuPpclnnsoBiMwtN5tydBtZ54KZ6HaGr0kZGqlqrEdq+ZnP7r2Visk9Yc0bXxV5pox2wmqSKQPVAVyJhjIR3XcFPELUlHMhvLuiJ5U1ilXyg4xPJp6ExSs3cFdep/G7ODmCicF3JOvw5M1P/gWDalVOsYu7mDVQ53g4cUJGOSJ0B4YdkZTaJNvcO65A+~1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         95.101.10.209
HTTP/2 200 OK
content-type: image/jpeg
                                        
content-length: 73710
cf-ray: 776c52ff2eb7915e-FRA
accept-ranges: bytes
last-modified: Mon, 05 Dec 2022 20:58:37 GMT
strict-transport-security: max-age=31536000; includeSubDomains
vary: Accept-Encoding
cf-cache-status: HIT
cf-bgj: imgq:100,h2pri
cf-polished: origSize=78186, status=webp_bigger
cross-origin-resource-policy: cross-origin
x-dw-request-base-id: -WC-VQRIkGMBAAB_
cache-control: public, max-age=2418113
date: Fri, 09 Dec 2022 08:20:54 GMT
akamai-cache-status: Miss from child, Miss from parent
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1448x764, components 3\012- data
Size:   73710
Md5:    311b55657fa24cc9203b0ba5b9017581
Sha1:   0115d51c99c2cc105354d4d9ad34c7cf66d9b329
Sha256: b3b75d8110c8d5c2a2bbb8ec7585e1560cb5357d1608462e37c28ffb047b98d6
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=93141
Date: Fri, 09 Dec 2022 08:20:54 GMT
Etag: "6391b8bb-116"
Expires: Sat, 10 Dec 2022 10:13:15 GMT
Last-Modified: Thu, 08 Dec 2022 10:13:15 GMT
Server: nginx
Content-Length: 278

                                        
                                            GET /on/demandware.static/-/Library-Sites-paulachoice/default/dw23bbe7d5/images/favicons/favicon-512.png HTTP/1.1 
Host: www.paulaschoice.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paulaschoice.com/
Cookie: dwac_1dddfe3d24e60db025cd316ffb=B6ujOwiiTGPKS336qHCNCn_JFrP2GiYaSNI%3D|dw-only|||USD|false|US%2FPacific|true; cqcid=aditEub1hqh4qvFQGaDVqS9bUJ; cquid=||; sid=B6ujOwiiTGPKS336qHCNCn_JFrP2GiYaSNI; dwanonymous_ef0ecd72b896f083bfc97bf06fa6e424=aditEub1hqh4qvFQGaDVqS9bUJ; __cq_dnt=0; dw_dnt=0; dwsid=Q2mtmoc9frP0mJYLLUUO5jsLGBJ5hRTKdgHPgZui7xjmNbZ0_raLhdzXOJjrBojXMw8HxYa72Ab3nej-WJn39g==; ak_bmsc=73A5130AE46340066CFE45C721038D58~000000000000000000000000000000~YAAQzQplXwmQaXyEAQAAChb59RLN4wFwkk0MvLqycjvkN9Arr6uXVcm81smlp7tnQWAuYusuxNY5xpAvXR36YO9EOd0uMWZbo5sIkiwVlVHXQzEUOzOd4uaB4RiC3AVi0SnzTnZXIUI5jpziA4vfV1lb7THrO+zhdCe71k2BAb1vUAlE3BA7Hznmiu9Og2Px2vDHdxgi9MJXITK86Wkmm91Zm+cMU0qR7grVDxRZplw81xxllbC4tePj0rPq1Q5+9yTXhtyDUqUhshCF+LZG65qMG7JGpd9kABq8FN3LwKbNDsCYT8TZ964Of0cXo/g9d0qBl5c5nLRGPkWXJU288qCTcLvLn6YnHjeLUyVeeRuya2IPMZiHrVV3yAKMfAfknot1Prw97MR9LL5l1XoG; _ju_v=4.1_5.47; _ju_dm=cookie; _ju_dn=1; bm_sv=8EB8AEE88059F85E43E001C6304AF64C~YAAQzQplXxSQaXyEAQAAnBv59RLVa2XY4Ycb/zlK6Z6icfdNMQ3ehPyp2sy2GbSJtJEs6A9iw6p7Wp2LuhguMYgQjCASjxr39ZR071u+aZCUWlxRDzY/AQbl32ZaMdWRbe6GMjC2d+A+k7SHgrcGjOXmrVi7KD/hEzajmSSgbJRjKzEETTO94N5gTrMC/1OEveVMpauBHdS5VsXwQXRe6OWMhjlEQJITjsSBb2wLUG9oeUhC6QBe3BEux8fjSbt/HDuvudiq~1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         95.101.10.209
HTTP/2 200 OK
content-type: image/png
                                        
content-length: 6898
cf-ray: 6dfaaa5e5db96939-FRA
accept-ranges: bytes
last-modified: Thu, 17 Feb 2022 22:25:15 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cf-cache-status: HIT
cf-bgj: imgq:100,h2pri
cf-polished: origSize=15272
cross-origin-resource-policy: cross-origin
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
x-dw-request-base-id: dW2kb38XEGIBAAB_
cache-control: public, max-age=569414
date: Fri, 09 Dec 2022 08:20:54 GMT
akamai-cache-status: Hit from child
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 513 x 513, 8-bit colormap, non-interlaced\012- data
Size:   6898
Md5:    c2d4ba9bcd56e5b49c475b3377776981
Sha1:   62af3bb4e48b0dfb8a612f820713f21b5f017509
Sha256: 1dea8064bc23bb318c5118cf7337b329fd2212dd609190435e248e3c7dee1048
                                        
                                            GET /on/demandware.static/-/Library-Sites-paulachoice/default/dwec013a97/images/favicons/favicon-32.png HTTP/1.1 
Host: www.paulaschoice.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paulaschoice.com/
Cookie: dwac_1dddfe3d24e60db025cd316ffb=B6ujOwiiTGPKS336qHCNCn_JFrP2GiYaSNI%3D|dw-only|||USD|false|US%2FPacific|true; cqcid=aditEub1hqh4qvFQGaDVqS9bUJ; cquid=||; sid=B6ujOwiiTGPKS336qHCNCn_JFrP2GiYaSNI; dwanonymous_ef0ecd72b896f083bfc97bf06fa6e424=aditEub1hqh4qvFQGaDVqS9bUJ; __cq_dnt=0; dw_dnt=0; dwsid=Q2mtmoc9frP0mJYLLUUO5jsLGBJ5hRTKdgHPgZui7xjmNbZ0_raLhdzXOJjrBojXMw8HxYa72Ab3nej-WJn39g==; ak_bmsc=73A5130AE46340066CFE45C721038D58~000000000000000000000000000000~YAAQzQplXwmQaXyEAQAAChb59RLN4wFwkk0MvLqycjvkN9Arr6uXVcm81smlp7tnQWAuYusuxNY5xpAvXR36YO9EOd0uMWZbo5sIkiwVlVHXQzEUOzOd4uaB4RiC3AVi0SnzTnZXIUI5jpziA4vfV1lb7THrO+zhdCe71k2BAb1vUAlE3BA7Hznmiu9Og2Px2vDHdxgi9MJXITK86Wkmm91Zm+cMU0qR7grVDxRZplw81xxllbC4tePj0rPq1Q5+9yTXhtyDUqUhshCF+LZG65qMG7JGpd9kABq8FN3LwKbNDsCYT8TZ964Of0cXo/g9d0qBl5c5nLRGPkWXJU288qCTcLvLn6YnHjeLUyVeeRuya2IPMZiHrVV3yAKMfAfknot1Prw97MR9LL5l1XoG; _ju_v=4.1_5.47; _ju_dm=cookie; _ju_dn=1; bm_sv=8EB8AEE88059F85E43E001C6304AF64C~YAAQzQplXxSQaXyEAQAAnBv59RLVa2XY4Ycb/zlK6Z6icfdNMQ3ehPyp2sy2GbSJtJEs6A9iw6p7Wp2LuhguMYgQjCASjxr39ZR071u+aZCUWlxRDzY/AQbl32ZaMdWRbe6GMjC2d+A+k7SHgrcGjOXmrVi7KD/hEzajmSSgbJRjKzEETTO94N5gTrMC/1OEveVMpauBHdS5VsXwQXRe6OWMhjlEQJITjsSBb2wLUG9oeUhC6QBe3BEux8fjSbt/HDuvudiq~1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         95.101.10.209
HTTP/2 200 OK
content-type: image/png
                                        
content-length: 485
cf-ray: 6dfaaa5ebc5e90ba-FRA
accept-ranges: bytes
last-modified: Thu, 17 Feb 2022 22:25:15 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cf-cache-status: HIT
cf-bgj: imgq:100,h2pri
cf-polished: origSize=844
cross-origin-resource-policy: cross-origin
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
x-dw-request-base-id: dW2lb38XEGIBAAB_
cache-control: public, max-age=1234156
date: Fri, 09 Dec 2022 08:20:54 GMT
akamai-cache-status: Hit from child
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 33 x 33, 8-bit colormap, non-interlaced\012- data
Size:   485
Md5:    14f6800674c4b5d93d40b74c61b96b7c
Sha1:   bb8ddb87cdc320aac82d20f918e6d3218aa6416d
Sha256: 7090213f66e0e53fbef41b492fbd6b034bebd83825b34743556e5a0d7e996415
                                        
                                            POST /internal-api/customer/get HTTP/1.1 
Host: www.paulaschoice.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 52
Origin: https://www.paulaschoice.com
Connection: keep-alive
Referer: https://www.paulaschoice.com/
Cookie: dwac_1dddfe3d24e60db025cd316ffb=B6ujOwiiTGPKS336qHCNCn_JFrP2GiYaSNI%3D|dw-only|||USD|false|US%2FPacific|true; cqcid=aditEub1hqh4qvFQGaDVqS9bUJ; cquid=||; sid=B6ujOwiiTGPKS336qHCNCn_JFrP2GiYaSNI; dwanonymous_ef0ecd72b896f083bfc97bf06fa6e424=aditEub1hqh4qvFQGaDVqS9bUJ; __cq_dnt=0; dw_dnt=0; dwsid=Q2mtmoc9frP0mJYLLUUO5jsLGBJ5hRTKdgHPgZui7xjmNbZ0_raLhdzXOJjrBojXMw8HxYa72Ab3nej-WJn39g==; ak_bmsc=73A5130AE46340066CFE45C721038D58~000000000000000000000000000000~YAAQzQplXwmQaXyEAQAAChb59RLN4wFwkk0MvLqycjvkN9Arr6uXVcm81smlp7tnQWAuYusuxNY5xpAvXR36YO9EOd0uMWZbo5sIkiwVlVHXQzEUOzOd4uaB4RiC3AVi0SnzTnZXIUI5jpziA4vfV1lb7THrO+zhdCe71k2BAb1vUAlE3BA7Hznmiu9Og2Px2vDHdxgi9MJXITK86Wkmm91Zm+cMU0qR7grVDxRZplw81xxllbC4tePj0rPq1Q5+9yTXhtyDUqUhshCF+LZG65qMG7JGpd9kABq8FN3LwKbNDsCYT8TZ964Of0cXo/g9d0qBl5c5nLRGPkWXJU288qCTcLvLn6YnHjeLUyVeeRuya2IPMZiHrVV3yAKMfAfknot1Prw97MR9LL5l1XoG; _ju_v=4.1_5.47; _ju_dm=cookie; _ju_dn=1; bm_sv=8EB8AEE88059F85E43E001C6304AF64C~YAAQzQplXxSQaXyEAQAAnBv59RLVa2XY4Ycb/zlK6Z6icfdNMQ3ehPyp2sy2GbSJtJEs6A9iw6p7Wp2LuhguMYgQjCASjxr39ZR071u+aZCUWlxRDzY/AQbl32ZaMdWRbe6GMjC2d+A+k7SHgrcGjOXmrVi7KD/hEzajmSSgbJRjKzEETTO94N5gTrMC/1OEveVMpauBHdS5VsXwQXRe6OWMhjlEQJITjsSBb2wLUG9oeUhC6QBe3BEux8fjSbt/HDuvudiq~1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         95.101.10.209
HTTP/2 200 OK
content-type: application/json;charset=UTF-8
                                        
x-dw-request-base-id: WXQbFubvkmMBAAB_
cf-cache-status: DYNAMIC
strict-transport-security: max-age=31536000; includeSubDomains
cf-ray: 776c530028e79104-FRA
content-encoding: gzip
content-length: 375
vary: Accept-Encoding
expires: Fri, 09 Dec 2022 08:20:54 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Fri, 09 Dec 2022 08:20:54 GMT
set-cookie: __cq_dnt=0; Path=/; Secure; SameSite=None dw_dnt=0; Path=/; Secure; SameSite=None bm_sv=8EB8AEE88059F85E43E001C6304AF64C~YAAQzQplXxeQaXyEAQAARR359RKoxiWvEGRkdGs61rduD2OiqgBrgLZvYudJA0UNQb1xmzN8LCyABaLnohAOWI7F6SOwgfMaSCN6t8NBSYk35WdSJuSAcoZu3lDEj6r/N2NfZ4Pcm5B3KQlRBRFqHKPpd63zX40maIG62x9+AL0M3JNhSK9PpRDRhT5f0xjO2o4cCX8h2lzlTtvpItWP5PDy4/kTyTvbN5XNEm/kL/ZUMY9nFyIADBE4TpPYy+FGFNv6Gq2/~1; Domain=.paulaschoice.com; Path=/; Expires=Fri, 09 Dec 2022 10:20:54 GMT; Max-Age=7200; Secure
akamai-cache-status: Miss from child, Miss from parent
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (520), with no line terminators
Size:   375
Md5:    cce84a5f9158a75b7a99edd24aef1c29
Sha1:   8a09d78b7edafc2924c957fcb2a1875c2412919b
Sha256: 020c67818dba02aeb29ca19e9a05f4d179915c19b922101d2488c77067d834ed
                                        
                                            GET /box-5e66f98b4ee957db209dc6f63e3d59dd.html HTTP/1.1 
Host: vars.hotjar.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paulaschoice.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

search
                                         143.204.55.105
HTTP/2 200 OK
content-type: text/html
                                        
content-length: 1035
date: Wed, 23 Nov 2022 13:10:06 GMT
accept-ranges: bytes
cache-control: max-age=31536000
content-encoding: br
cross-origin-embedder-policy: require-corp
cross-origin-resource-policy: cross-origin
etag: "e0652b84b7b3b650769c759fc520c3f8"
last-modified: Wed, 23 Nov 2022 13:09:18 GMT
strict-transport-security: max-age=2592000; includeSubDomains
x-robots-tag: none
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 f00e3524edcdf61801454f2bb21e71ce.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: SdGlSQGhu2A3n06mIGwPYDJ-Tu7fLSBFczczjxDwyvbZGyruYIXb5w==
age: 1365048
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2368), with no line terminators
Size:   1035
Md5:    e0652b84b7b3b650769c759fc520c3f8
Sha1:   0b55d6e28613350c7f41b88f19e726e6751ad03b
Sha256: 94b4c240f83065223dcacdd3f8b69cb229d0616edc3e2041eef3e270d859fc3d
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "F43702CD363447680D545D928F9EA6F997A770228108B4C9312999B76891BB38"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12336
Expires: Fri, 09 Dec 2022 11:46:30 GMT
Date: Fri, 09 Dec 2022 08:20:54 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "F43702CD363447680D545D928F9EA6F997A770228108B4C9312999B76891BB38"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12336
Expires: Fri, 09 Dec 2022 11:46:30 GMT
Date: Fri, 09 Dec 2022 08:20:54 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "F43702CD363447680D545D928F9EA6F997A770228108B4C9312999B76891BB38"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12336
Expires: Fri, 09 Dec 2022 11:46:30 GMT
Date: Fri, 09 Dec 2022 08:20:54 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcf07b4f3-8986-4a9c-8c85-b126338852d2.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 12748
x-amzn-requestid: edd028e3-c23e-4985-b12d-d3ebe760df47
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cjuciEptIAMFj9A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638af783-1c151eb66f590c9c0e0c4c82;Sampled=0
x-amzn-remapped-date: Sat, 03 Dec 2022 07:15:15 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: -y4-_OwHl5_OFykJYYZSqwIopjKoYy1MhaGTpVXd4Grq2EsUP2c3IA==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Thu, 08 Dec 2022 13:49:59 GMT
age: 66655
etag: "55a236fedf6f5f7ca2bb88ae13e20846a50fd36d"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   12748
Md5:    730ba1a8edb79ba6f83b46d1ba5aed7b
Sha1:   55a236fedf6f5f7ca2bb88ae13e20846a50fd36d
Sha256: f8043e76265c59073d111987fd4c08d05a3ac80989af9269cca9ebcc21af4013
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F60d2c55a-1a85-4fbf-b256-9d812a2b5ec2.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 5188
x-amzn-requestid: afb8cbd2-3674-4dac-9cd9-9ff83618ac0a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ck2-5G9joAMFlPA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638b6b92-2979ff216b9028aa70baef8b;Sampled=0
x-amzn-remapped-date: Sat, 03 Dec 2022 15:30:26 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 7Dp35PIr_WYUI1bBa21AvmCMEPi0d3jnhuS8eEk3Q3CXRcGWAnkD8g==
via: 1.1 8ae6af4d17aae7471e5fe2792eb6abcc.cloudfront.net (CloudFront), 1.1 7eb3b782ab09047ce0d11ee03763894c.cloudfront.net (CloudFront), 1.1 google
date: Thu, 08 Dec 2022 17:01:04 GMT
age: 55190
etag: "8fbff7725c842d70e047c635a725723a9dc9c55a"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   5188
Md5:    fba9a3854df65740512f96efe7442e58
Sha1:   8fbff7725c842d70e047c635a725723a9dc9c55a
Sha256: 6e639298ebc82343cee9267d2910d15735af55f910e2c3de9218266b7c6fffc9
                                        
                                            GET /Affiliates/sms_aff_clicktrack.js HTTP/1.1 
Host: static.myshlf.us
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paulaschoice.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         54.230.111.91
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Tue, 21 Dec 2021 16:46:02 GMT
server: AmazonS3
content-encoding: gzip
date: Fri, 09 Dec 2022 02:49:11 GMT
etag: W/"d989db17a826565d651b1ae968c945ff"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 b053873243f91b1bb6dc406ce0c67db4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: bS_P6ISZqdXnkAk1AW9z5vSY3PZOCK8PK0loiIBMhwv6EUl7oDZSDg==
age: 20470
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   9133
Md5:    9508fe25ce2bb6ec39bad0ebb9d6cc65
Sha1:   06c027f53791b38c0651fd986ca183f5dddc60c4
Sha256: f11682b8bb450c528e9986916d7a24958ed7387dca32ff79f4e133fff14ceb8b
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F49a0678c-8bda-434a-a337-63696994d79c.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 5530
x-amzn-requestid: adecbb8c-cec3-46a0-b32c-0026b8421fe5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cw4d8Fg6IAMF61g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63903abf-4bcb385f27cb438c36a2cd5e;Sampled=0
x-amzn-remapped-date: Wed, 07 Dec 2022 07:03:27 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: UDD0v-1I1sFVMsJl64nQDe_hHExMrSLXPrbou_J79YEQf3YwS2oklA==
via: 1.1 000f4a2f631bace380a0afa747a82482.cloudfront.net (CloudFront), 1.1 5565a51537c689d1d16f6b4d41f40082.cloudfront.net (CloudFront), 1.1 google
date: Fri, 09 Dec 2022 06:50:54 GMT
age: 5400
etag: "0d5969394b370a5c77c53ed58f55e5f8a45da3ab"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   5530
Md5:    a22fc7807fb3337f0af5e546c7ad366a
Sha1:   0d5969394b370a5c77c53ed58f55e5f8a45da3ab
Sha256: 98b4f4fd27dc036697fb0328083bce6e691b7493428f3a54991087d9d1165d97
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbe602fad-66c2-48db-acd3-371ca6dcb8f6.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 7897
x-amzn-requestid: 032fd8ae-b7e9-4e12-8546-838191a73688
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cwVM_F51IAMFunw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63900252-345ae6cd107d207f5dbe29a8;Sampled=0
x-amzn-remapped-date: Wed, 07 Dec 2022 03:02:42 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: N-zFZ8yeL7RrOZ5xfqvfBaE3zcXWecvr6Jd-93nKiUZlCXp2n2_Bgw==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 325ed3ba58a560748d886354beef39c0.cloudfront.net (CloudFront), 1.1 google
date: Fri, 09 Dec 2022 03:41:46 GMT
age: 16748
etag: "7558222788f06623ddae6e883413e38e1146281e"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7897
Md5:    8c3214044657f3b876d1f1848bca5684
Sha1:   7558222788f06623ddae6e883413e38e1146281e
Sha256: e1f9c9c445bba7765f371dbb655cab43c1e12de7cbd015f8034c494118f7f708
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Faf0d40ad-816d-4ea8-aef7-00a5af1b8c9b.png HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 4840
x-amzn-requestid: 26914070-22ad-49fd-bacb-7842dcb203b8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: c2LZPGd-oAMF5OA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63925907-5c62555a65327ff934ae232e;Sampled=0
x-amzn-remapped-date: Thu, 08 Dec 2022 21:37:11 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: gGT6ZP9a7ENOcyGNek_ac8WlyRoiYeB4KdqC2UHHlwLdWBQUhHsw7w==
via: 1.1 1cc6ed0d2d3dd9529ce544f9dfe61a52.cloudfront.net (CloudFront), 1.1 b2f9564ebf9c745cc2ceae96d434977e.cloudfront.net (CloudFront), 1.1 google
date: Thu, 08 Dec 2022 22:00:01 GMT
age: 37253
etag: "433e295328d6c821a1df907c232bff4195e2860b"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   4840
Md5:    34a9b9b25e57f612db5560cd05e44cce
Sha1:   433e295328d6c821a1df907c232bff4195e2860b
Sha256: 139dc677e5725c98a5d90d19b206a34a4c9f43ad87cf1d322881381e992bd5b5
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 4678
Cache-Control: max-age=129452
Date: Fri, 09 Dec 2022 08:20:54 GMT
Etag: "6392344c-1d7"
Expires: Sat, 10 Dec 2022 20:18:26 GMT
Last-Modified: Thu, 08 Dec 2022 19:00:28 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /on/demandware.static/-/Library-Sites-paulachoice/default/dw0f07a73e/images/footer/mcafee-60.png HTTP/1.1 
Host: www.paulaschoice.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paulaschoice.com/
Cookie: dwac_1dddfe3d24e60db025cd316ffb=B6ujOwiiTGPKS336qHCNCn_JFrP2GiYaSNI%3D|dw-only|||USD|false|US%2FPacific|true; cqcid=aditEub1hqh4qvFQGaDVqS9bUJ; cquid=||; sid=B6ujOwiiTGPKS336qHCNCn_JFrP2GiYaSNI; dwanonymous_ef0ecd72b896f083bfc97bf06fa6e424=aditEub1hqh4qvFQGaDVqS9bUJ; __cq_dnt=0; dw_dnt=0; dwsid=Q2mtmoc9frP0mJYLLUUO5jsLGBJ5hRTKdgHPgZui7xjmNbZ0_raLhdzXOJjrBojXMw8HxYa72Ab3nej-WJn39g==; ak_bmsc=73A5130AE46340066CFE45C721038D58~000000000000000000000000000000~YAAQzQplXwmQaXyEAQAAChb59RLN4wFwkk0MvLqycjvkN9Arr6uXVcm81smlp7tnQWAuYusuxNY5xpAvXR36YO9EOd0uMWZbo5sIkiwVlVHXQzEUOzOd4uaB4RiC3AVi0SnzTnZXIUI5jpziA4vfV1lb7THrO+zhdCe71k2BAb1vUAlE3BA7Hznmiu9Og2Px2vDHdxgi9MJXITK86Wkmm91Zm+cMU0qR7grVDxRZplw81xxllbC4tePj0rPq1Q5+9yTXhtyDUqUhshCF+LZG65qMG7JGpd9kABq8FN3LwKbNDsCYT8TZ964Of0cXo/g9d0qBl5c5nLRGPkWXJU288qCTcLvLn6YnHjeLUyVeeRuya2IPMZiHrVV3yAKMfAfknot1Prw97MR9LL5l1XoG; _ju_v=4.1_5.47; _ju_dm=cookie; _ju_dn=1; bm_sv=8EB8AEE88059F85E43E001C6304AF64C~YAAQzQplXxeQaXyEAQAARR359RKoxiWvEGRkdGs61rduD2OiqgBrgLZvYudJA0UNQb1xmzN8LCyABaLnohAOWI7F6SOwgfMaSCN6t8NBSYk35WdSJuSAcoZu3lDEj6r/N2NfZ4Pcm5B3KQlRBRFqHKPpd63zX40maIG62x9+AL0M3JNhSK9PpRDRhT5f0xjO2o4cCX8h2lzlTtvpItWP5PDy4/kTyTvbN5XNEm/kL/ZUMY9nFyIADBE4TpPYy+FGFNv6Gq2/~1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         95.101.10.209
HTTP/2 200 OK
content-type: image/png
                                        
content-length: 2532
cf-ray: 6ad5f7a98a4fc2ef-FRA
accept-ranges: bytes
last-modified: Mon, 30 Mar 2020 23:07:35 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cf-cache-status: HIT
cf-bgj: imgq:100,h2pri
cf-polished: origSize=2871
cross-origin-resource-policy: cross-origin
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
x-dw-request-base-id: GailxmXxiGEBAAB_
cache-control: public, max-age=1081833
date: Fri, 09 Dec 2022 08:20:54 GMT
akamai-cache-status: Hit from child
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 60 x 22, 8-bit/color RGBA, non-interlaced\012- data
Size:   2532
Md5:    b415d48c10b9f3ad32bfc79f025e624f
Sha1:   963abe1b582fd8146028fa4915473652e1be35a7
Sha256: 75e9fe851b6cb70c128a9a99029b0b8bd2d296b93f5d6c21bad6c7baeed98a57
                                        
                                            GET /s.js HTTP/1.1 
Host: cdn.siftscience.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paulaschoice.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         34.96.67.224
HTTP/2 200 OK
content-type: application/javascript
                                        
x-guploader-uploadid: ADPycdvF8ofSvVKBc5bWhTX8yUFsZ03DqHyreT7Ugwv5s9OnGKvvrFI9dskHbIz2pbTItl4tGDBGLfHUvfp6dQbtESdrUwHwGcii
x-goog-generation: 1586469553682331
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 20452
content-encoding: gzip
x-goog-hash: crc32c=fIrBTA==, md5=B8uCAxWKuyazwYMYNQ57Ng==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
vary: Accept-Encoding
content-length: 20452
server: UploadServer
date: Fri, 09 Dec 2022 02:17:42 GMT
expires: Sat, 10 Dec 2022 02:17:42 GMT
cache-control: public, max-age=86400
age: 21792
last-modified: Thu, 09 Apr 2020 21:59:13 GMT
etag: "07cb8203158abb26b3c18318350e7b36"
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (881)
Size:   20452
Md5:    07cb8203158abb26b3c18318350e7b36
Sha1:   e6358e099b70081c2cbc9ded90be18da28386e90
Sha256: cecc3d075f40d84bbb5f93d506117d31ae9f9dbaacda83a7078e2c7bc61283fb
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 4678
Cache-Control: max-age=129452
Date: Fri, 09 Dec 2022 08:20:54 GMT
Etag: "6392344c-1d7"
Expires: Sat, 10 Dec 2022 20:18:26 GMT
Last-Modified: Thu, 08 Dec 2022 19:00:28 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /collect.js HTTP/1.1 
Host: 534000930.collect.igodigital.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paulaschoice.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         34.203.18.187
HTTP/2 200 OK
content-type: application/javascript
                                        
date: Fri, 09 Dec 2022 08:20:53 GMT
last-modified: Thu, 08 Dec 2022 21:40:46 GMT
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (587)
Size:   2621
Md5:    af5171a765c37f8fde214f229d5eb9c3
Sha1:   a082a66dc9dfaf72d3880a5bf87ffa20c0f94fd5
Sha256: 1286921322dff7217ef9d493b46cff8f5ea331448c0299cd46856ce3420ec613
                                        
                                            GET /embeddable/config HTTP/1.1 
Host: paulaschoicesupport.zendesk.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.paulaschoice.com/
Origin: https://www.paulaschoice.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         104.16.53.111
HTTP/2 200 OK
content-type: application/json; charset=utf-8
                                        
date: Fri, 09 Dec 2022 08:20:54 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-expose-headers:
access-control-max-age: 7200
cache-control: public, max-age=60, stale-while-revalidate=600, stale-if-error=3600
x-zendesk-origin-server: embeddable-app-server-5f94879b9-7b849
x-request-id: 776c5301cb3fb518-IAD
x-runtime: 0.002129
vary: Origin, Accept-Encoding
x-cached: MISS
last-modified: Fri, 09 Dec 2022 07:59:42 GMT
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=EaM4UrvYWK2O3ijT1Yqv58ArZwtpqG3GOJ0GBR3LX9tfgHkV9zIzrXzV10AK5igjsEbwnCq%2B5kZX1PX01nSZP8gvu1p3cOd9eZq%2Fk7Ds9M8rVwmD4aZ%2BAXO3U275DcVmusNGRQS9jNBw4dRrgJ2RDSM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
set-cookie: __cfruid=5f2c37a072040db599bf44c2bd46ba25663ddaf3-1670574054; path=/; domain=.paulaschoicesupport.zendesk.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 776c5301cb3fb518-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (857), with no line terminators
Size:   100558
Md5:    f4ae357dd83ccdf93fad50b9ff46d0d9
Sha1:   a47b64b17e476f595a6675ba081ee7716dc7cc50
Sha256: a4bce243b28dd63dd5ab46e4bf373f0963d0c3c42d38cb90d8c8e6575baa78b6
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 5207
Cache-Control: max-age=166342
Date: Fri, 09 Dec 2022 08:20:55 GMT
Etag: "6392c256-117"
Expires: Sun, 11 Dec 2022 06:33:17 GMT
Last-Modified: Fri, 09 Dec 2022 05:06:30 GMT
Server: ECS (amb/6BBA)
X-Cache: HIT
Content-Length: 279

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 5905
Cache-Control: max-age=100848
Date: Fri, 09 Dec 2022 08:20:55 GMT
Etag: "6391bfc6-117"
Expires: Sat, 10 Dec 2022 12:21:43 GMT
Last-Modified: Thu, 08 Dec 2022 10:43:18 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 279

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 4985
Cache-Control: max-age=121498
Date: Fri, 09 Dec 2022 08:20:55 GMT
Etag: "63921408-117"
Expires: Sat, 10 Dec 2022 18:05:53 GMT
Last-Modified: Thu, 08 Dec 2022 16:42:48 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 279

                                        
                                            POST /e?v=4.16.19_9cbd9be652&pd=https%3A%2F%2Fwww.paulaschoice.com%2F&u=db30c84e1e6c4513bac1dfbff7b4b211&c=paulaschoice&ceid=4_r&lt=1670574054219&tag=modern&cs=515623685&t=v&r=&m=%7B%22source%22%3A%22a%22%7D&cb=1670574054224 HTTP/1.1 
Host: events.attentivemobile.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.paulaschoice.com
Connection: keep-alive
Referer: https://www.paulaschoice.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0

search
                                         104.18.43.48
HTTP/2 200 OK
content-type: text/plain;charset=UTF-8
                                        
date: Fri, 09 Dec 2022 08:20:55 GMT
content-length: 0
x-envoy-upstream-service-time: 3
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 776c5304c853b50f-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 5207
Cache-Control: max-age=166342
Date: Fri, 09 Dec 2022 08:20:55 GMT
Etag: "6392c256-117"
Expires: Sun, 11 Dec 2022 06:33:17 GMT
Last-Modified: Fri, 09 Dec 2022 05:06:30 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 279

                                        
                                            GET /on/demandware.static/-/Library-Sites-paulachoice/default/dw0095d527/images/mini-cart/us_221207_desktop_mini-cart_npl-plus-gwp.jpg HTTP/1.1 
Host: www.paulaschoice.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paulaschoice.com/
Cookie: dwac_1dddfe3d24e60db025cd316ffb=B6ujOwiiTGPKS336qHCNCn_JFrP2GiYaSNI%3D|dw-only|||USD|false|US%2FPacific|true; cqcid=aditEub1hqh4qvFQGaDVqS9bUJ; cquid=||; sid=B6ujOwiiTGPKS336qHCNCn_JFrP2GiYaSNI; dwanonymous_ef0ecd72b896f083bfc97bf06fa6e424=aditEub1hqh4qvFQGaDVqS9bUJ; __cq_dnt=0; dw_dnt=0; dwsid=Q2mtmoc9frP0mJYLLUUO5jsLGBJ5hRTKdgHPgZui7xjmNbZ0_raLhdzXOJjrBojXMw8HxYa72Ab3nej-WJn39g==; ak_bmsc=73A5130AE46340066CFE45C721038D58~000000000000000000000000000000~YAAQzQplXwmQaXyEAQAAChb59RLN4wFwkk0MvLqycjvkN9Arr6uXVcm81smlp7tnQWAuYusuxNY5xpAvXR36YO9EOd0uMWZbo5sIkiwVlVHXQzEUOzOd4uaB4RiC3AVi0SnzTnZXIUI5jpziA4vfV1lb7THrO+zhdCe71k2BAb1vUAlE3BA7Hznmiu9Og2Px2vDHdxgi9MJXITK86Wkmm91Zm+cMU0qR7grVDxRZplw81xxllbC4tePj0rPq1Q5+9yTXhtyDUqUhshCF+LZG65qMG7JGpd9kABq8FN3LwKbNDsCYT8TZ964Of0cXo/g9d0qBl5c5nLRGPkWXJU288qCTcLvLn6YnHjeLUyVeeRuya2IPMZiHrVV3yAKMfAfknot1Prw97MR9LL5l1XoG; _ju_v=4.1_5.47; _ju_dm=cookie; _ju_dn=1; bm_sv=8EB8AEE88059F85E43E001C6304AF64C~YAAQzQplXxyQaXyEAQAAph759RLMzXE0CI+UNt6B3eaeUq2pHje5zoICxi6wa9UbmQgOKkP/rSzpi1fh21lTiabZSxRamfGmQCx/IrBdlPTd6vlkuz/WdWHoD/Bfnj+yEJYmVtpULNEFA3mAaPqWK7XCmTwtkIXWTgWIbvuhXCRgnYjcjBun4kG5kExR4uq2X8JL524Corx0DGUrTrUQBLrA/dDvwNWalT2A/XO/2pyaLC0ImWYDWtJam2HlSMJHg8OFe57+~1; _attn_=eyJ1Ijoie1wiY29cIjoxNjcwNTc0MDU0MjIxLFwidW9cIjoxNjcwNTc0MDU0MjIxLFwibWFcIjoyMTkwMCxcImluXCI6ZmFsc2UsXCJ2YWxcIjpcImRiMzBjODRlMWU2YzQ1MTNiYWMxZGZiZmY3YjRiMjExXCJ9In0=; __attentive_id=db30c84e1e6c4513bac1dfbff7b4b211; __attentive_cco=1670574054222
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         95.101.10.209
HTTP/2 200 OK
content-type: image/jpeg
                                        
content-length: 37310
cf-ray: 776c530579c1694f-FRA
accept-ranges: bytes
last-modified: Wed, 30 Nov 2022 19:00:48 GMT
strict-transport-security: max-age=31536000; includeSubDomains
vary: Accept-Encoding
cf-cache-status: HIT
cf-bgj: imgq:100,h2pri
cf-polished: status=not_needed
cross-origin-resource-policy: cross-origin
x-dw-request-base-id: -WDdVQZIkGMBAAB_
cache-control: public, max-age=2417923
date: Fri, 09 Dec 2022 08:20:55 GMT
akamai-cache-status: Miss from child, Miss from parent
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 800x360, components 3\012- data
Size:   37310
Md5:    df1b323b5518c20db1866b7d8f3d2409
Sha1:   4baad7bd3d195f357bf868b749441d9fbb8d4c33
Sha256: 09cfd34d1f04815d0283719f4a90bbb6b1a321202780d8dac1ea152414a874fd
                                        
                                            GET /web_widget/latest/classic/web-widget-5324-4212808.js HTTP/1.1 
Host: static.zdassets.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         104.18.70.113
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                        
date: Fri, 09 Dec 2022 08:20:55 GMT
x-amz-id-2: Yxda4rTUCK5tfUyHyqBrXl257NQYXNZX0o/5hjTgkHcFvlCjEtPPHE7dT2+JFS4xsC6oiGlfbzw=
x-amz-request-id: MJA49NTZ2SWD6TVJ
x-amz-replication-status: COMPLETED
last-modified: Wed, 07 Dec 2022 02:11:15 GMT
etag: W/"e1a5eb43c758a5aa0a97b3533d076fe4"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=31536000
expires: Thu, 07 Dec 2023 02:11:14 GMT
x-amz-version-id: uC88k1onX06vCw4ldk2U9IU3BlwUL_5l
cf-cache-status: HIT
age: 184514
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=CQjr28i9TpfUrLVuQ2lgtaE%2BDKLQbq4kKAkuHBIgRYX42i9aAExKwLp7h99cFznpNZpPBvOrb6LdLRwsDwftMHCS%2FTXGv%2FV8J6%2B75kOVPBMcDYBbBJiAPmypTULFn4kU8hR6ZqI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0
server: cloudflare
cf-ray: 776c5305e8041c06-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65536), with no line terminators
Size:   110579
Md5:    d693b9b16edccb059968896cc9f775aa
Sha1:   96254e7093fab9a278f7deafbdd3ea5564c42111
Sha256: 21271cb1ec3b70c9ecac19479e707c0f1dc88d0f1b6b6e71ea0d59fc48430d15
                                        
                                            GET /growth-tag-assets/client-configs/paulaschoice.attn.tv.js HTTP/1.1 
Host: cdn.attn.tv
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paulaschoice.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         143.204.55.4
HTTP/2 200 OK
content-type: text/javascript
                                        
content-length: 0
last-modified: Mon, 17 Dec 2018 20:59:49 GMT
content-encoding:
x-amz-version-id: kGJjc2HxNgGNuk_7UqP1h9o.liqWLb8I
accept-ranges: bytes
server: AmazonS3
date: Thu, 08 Dec 2022 14:05:19 GMT
etag: "d41d8cd98f00b204e9800998ecf8427e"
vary: Accept-Encoding
x-cache: Error from cloudfront
via: 1.1 a7d2a4ec2f50830f128dc406960aef9a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: V21c8rvyZcDpoyaJ_gE6l_lyWLpnElZOBjxLUSlh_0yl8BwB9-F34Q==
age: 85644
X-Firefox-Spdy: h2

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 5905
Cache-Control: max-age=100848
Date: Fri, 09 Dec 2022 08:20:55 GMT
Etag: "6391bfc6-117"
Expires: Sat, 10 Dec 2022 12:21:43 GMT
Last-Modified: Thu, 08 Dec 2022 10:43:18 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 279

                                        
                                            GET /?customer=true HTTP/1.1 
Host: www.paulaschoice.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paulaschoice.com/
Cookie: dwac_1dddfe3d24e60db025cd316ffb=B6ujOwiiTGPKS336qHCNCn_JFrP2GiYaSNI%3D|dw-only|||USD|false|US%2FPacific|true; cqcid=aditEub1hqh4qvFQGaDVqS9bUJ; cquid=||; sid=B6ujOwiiTGPKS336qHCNCn_JFrP2GiYaSNI; dwanonymous_ef0ecd72b896f083bfc97bf06fa6e424=aditEub1hqh4qvFQGaDVqS9bUJ; __cq_dnt=0; dw_dnt=0; dwsid=Q2mtmoc9frP0mJYLLUUO5jsLGBJ5hRTKdgHPgZui7xjmNbZ0_raLhdzXOJjrBojXMw8HxYa72Ab3nej-WJn39g==; ak_bmsc=73A5130AE46340066CFE45C721038D58~000000000000000000000000000000~YAAQzQplXwmQaXyEAQAAChb59RLN4wFwkk0MvLqycjvkN9Arr6uXVcm81smlp7tnQWAuYusuxNY5xpAvXR36YO9EOd0uMWZbo5sIkiwVlVHXQzEUOzOd4uaB4RiC3AVi0SnzTnZXIUI5jpziA4vfV1lb7THrO+zhdCe71k2BAb1vUAlE3BA7Hznmiu9Og2Px2vDHdxgi9MJXITK86Wkmm91Zm+cMU0qR7grVDxRZplw81xxllbC4tePj0rPq1Q5+9yTXhtyDUqUhshCF+LZG65qMG7JGpd9kABq8FN3LwKbNDsCYT8TZ964Of0cXo/g9d0qBl5c5nLRGPkWXJU288qCTcLvLn6YnHjeLUyVeeRuya2IPMZiHrVV3yAKMfAfknot1Prw97MR9LL5l1XoG; _ju_v=4.1_5.47; _ju_dm=cookie; _ju_dn=1; bm_sv=8EB8AEE88059F85E43E001C6304AF64C~YAAQzQplXxyQaXyEAQAAph759RLMzXE0CI+UNt6B3eaeUq2pHje5zoICxi6wa9UbmQgOKkP/rSzpi1fh21lTiabZSxRamfGmQCx/IrBdlPTd6vlkuz/WdWHoD/Bfnj+yEJYmVtpULNEFA3mAaPqWK7XCmTwtkIXWTgWIbvuhXCRgnYjcjBun4kG5kExR4uq2X8JL524Corx0DGUrTrUQBLrA/dDvwNWalT2A/XO/2pyaLC0ImWYDWtJam2HlSMJHg8OFe57+~1; _attn_=eyJ1Ijoie1wiY29cIjoxNjcwNTc0MDU0MjIxLFwidW9cIjoxNjcwNTc0MDU0MjIxLFwibWFcIjoyMTkwMCxcImluXCI6ZmFsc2UsXCJ2YWxcIjpcImRiMzBjODRlMWU2YzQ1MTNiYWMxZGZiZmY3YjRiMjExXCJ9In0=; __attentive_id=db30c84e1e6c4513bac1dfbff7b4b211; __attentive_cco=1670574054222
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         95.101.10.209
HTTP/2 200 OK
content-type: application/json;charset=UTF-8
                                        
accept-ranges: bytes
x-dw-request-base-id: WXQgFufvkmMBAAB_
vary: accept-encoding
content-encoding: gzip
cf-cache-status: DYNAMIC
strict-transport-security: max-age=31536000; includeSubDomains
cf-ray: 776c53055a489104-FRA
content-length: 4410
expires: Fri, 09 Dec 2022 08:20:55 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Fri, 09 Dec 2022 08:20:55 GMT
set-cookie: __cq_dnt=0; Path=/; Secure; SameSite=None dw_dnt=0; Path=/; Secure; SameSite=None bm_sv=8EB8AEE88059F85E43E001C6304AF64C~YAAQzQplXyWQaXyEAQAAQyH59RKwlaWFUyAruHT9ssFb75HHslpzim9I92X0e5WxNV8+ZM2J5JtxnujKr78bojoNkpCV+LuZ83Lsj4L/64BjvObOFp+pQV0ishb4oftu9psRmOXTZoJiZovCVoL/p4W6RbzkfllkF2Hp1UjkWtkdMiY9KE976jrctAd1sGv7lTsZ3PLAv02JCdBMU4dMjWRceQebeLY/UW6E5FDNwv7XAHnLBy4tuvAK/wSrgg9KRhGVsvX+~1; Domain=.paulaschoice.com; Path=/; Expires=Fri, 09 Dec 2022 10:20:54 GMT; Max-Age=7199; Secure
akamai-cache-status: Miss from child, Miss from parent
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (6391)
Size:   4410
Md5:    f9b2d0868f0a9fbe67a56be95016c630
Sha1:   7617114b060f81697d2f43c15bc2a0b28fa31090
Sha256: 9f0037471db188e2f701effc585fe91a7e1ecb5f8462bc2a3426ec1870a4517c
                                        
                                            POST /unrenderedCreative?v=4.16.19&r=&id=db30c84e1e6c4513bac1dfbff7b4b211&pv=1&l=https%3A%2F%2Fwww.paulaschoice.com%2F&w=1280&h=939&ss_ref=ORGANIC&m=marketing&m=live-sms HTTP/1.1 
Host: paulaschoice.attn.tv
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.paulaschoice.com/
Content-Type: text/plain;charset=UTF-8
Origin: https://www.paulaschoice.com
Content-Length: 29
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         172.64.150.25
HTTP/2 204 No Content
                                        
date: Fri, 09 Dec 2022 08:20:55 GMT
vary: Origin,Access-Control-Request-Method,Access-Control-Request-Headers
access-control-allow-origin: *
cache-control: no-cache, no-store, must-revalidate
x-envoy-upstream-service-time: 13
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 776c53086c69b518-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

                                        
                                            GET /utag/paulaschoice/re-boot/prod/utag.js HTTP/1.1 
Host: tags.tiqcdn.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paulaschoice.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         2.18.173.203
HTTP/2 200 OK
content-type: application/x-javascript
                                        
accept-ranges: bytes
etag: "0dfb1d78c63becdcbb8d221655db55a9:1668703890.296282"
last-modified: Thu, 17 Nov 2022 16:51:30 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=300
expires: Fri, 09 Dec 2022 08:25:55 GMT
date: Fri, 09 Dec 2022 08:20:55 GMT
content-length: 16126
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document, ASCII text, with very long lines (12100)
Size:   16126
Md5:    901d803a105d3ffaaa690e4d1039fcdc
Sha1:   e09c900d63539a8af57c6860e470515c2c22c2dc
Sha256: 553b63556ee9f58cfddfe3bc75d70db961e0bbf9c427351248632aac306b3423
                                        
                                            GET /embeddable_blip?type=settings&data=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 HTTP/1.1 
Host: paulaschoicesupport.zendesk.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.paulaschoice.com
Connection: keep-alive
Referer: https://www.paulaschoice.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         104.16.53.111
HTTP/2 200 OK
                                        
date: Fri, 09 Dec 2022 08:20:55 GMT
content-length: 0
access-control-allow-origin: *
vary: Origin, Accept-Encoding
x-zendesk-zorg: yes
x-request-id: 776c53080bfab518-IAD
last-modified: Fri, 09 Dec 2022 08:20:55 GMT
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JhTvWGtKzs90uQ4ZOn9Xxvjvw7D30q7ZtYvuLmzpRFkBL633RMOA%2FNULwEUBnRowsTZCc8PvdohkvFeziWVQQk%2B3n%2BirTYVQQTk9DnivsLwJiGduYk%2FtA8uxf5B94wsHZk7E0vJ9xeevQej0jF%2FfQs0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
set-cookie: __cfruid=6a6f2c6854984b5af6b0b4c35f46001e073502fa-1670574055; path=/; domain=.paulaschoicesupport.zendesk.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 776c53080bfab518-OSL
X-Firefox-Spdy: h2

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 5179
Cache-Control: 'max-age=158059'
Date: Fri, 09 Dec 2022 08:20:56 GMT
Last-Modified: Fri, 09 Dec 2022 06:54:37 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /utag/paulaschoice/re-boot/prod/utag.235.js?utv=ut4.46.202208301810 HTTP/1.1 
Host: tags.tiqcdn.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paulaschoice.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         2.18.173.203
HTTP/2 200 OK
content-type: application/x-javascript
                                        
accept-ranges: bytes
etag: "c046f1622db473d9d81661ee401bfed9:1596697556.14751"
last-modified: Thu, 06 Aug 2020 07:05:56 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=1296000
expires: Sat, 24 Dec 2022 08:20:56 GMT
date: Fri, 09 Dec 2022 08:20:56 GMT
content-length: 3034
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1615)
Size:   3034
Md5:    467971ff7754e03bfa5f2ea25b9820ee
Sha1:   730f09fa8fc7500d4902308eac56bb56bb310429
Sha256: 65404cefe48431bfe1190579a78330c82ec0b8f00d0891d166f23e0762ac3be4
                                        
                                            GET /utag/paulaschoice/re-boot/prod/utag.26.js?utv=ut4.46.202208102208 HTTP/1.1 
Host: tags.tiqcdn.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paulaschoice.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         2.18.173.203
HTTP/2 200 OK
content-type: application/x-javascript
                                        
accept-ranges: bytes
etag: "3d37989d55b6da26dedc5e8772ae1985:1660169306.165828"
last-modified: Wed, 10 Aug 2022 22:08:26 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=1296000
expires: Sat, 24 Dec 2022 08:20:56 GMT
date: Fri, 09 Dec 2022 08:20:56 GMT
content-length: 6030
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (2136)
Size:   6030
Md5:    8fc7aef928b02a8d145c2df18e754e45
Sha1:   05773a42d74bec513790145ebb3dfbbc5ab89ffe
Sha256: 442b473912848a2a514087faa135c465bf39aea3e74b7e9c1aa80d6eead823ba
                                        
                                            GET /utag/paulaschoice/re-boot/prod/utag.315.js?utv=ut4.46.202205180149 HTTP/1.1 
Host: tags.tiqcdn.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paulaschoice.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         2.18.173.203
HTTP/2 200 OK
content-type: application/x-javascript
                                        
accept-ranges: bytes
etag: "e7001cf8eb51329362270a558ddbbf98:1649782704.756895"
last-modified: Tue, 12 Apr 2022 16:58:24 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=1296000
expires: Sat, 24 Dec 2022 08:20:56 GMT
date: Fri, 09 Dec 2022 08:20:56 GMT
content-length: 3714
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (2866)
Size:   3714
Md5:    b2f88fe6b5b933110bd152e826cfe64e
Sha1:   259c5990c672f2bd7425319e2912bd46639af390
Sha256: 2cccd01d504c589c9164f5f4db295f52040c7586b7dea8f88913bb8d6e459624
                                        
                                            GET /utag/paulaschoice/re-boot/prod/utag.252.js?utv=ut4.46.201911281719 HTTP/1.1 
Host: tags.tiqcdn.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paulaschoice.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         2.18.173.203
HTTP/2 200 OK
content-type: application/x-javascript
                                        
accept-ranges: bytes
etag: "5e7a68eec8dfba5bad14fe6a03fa00e1:1596697556.599937"
last-modified: Thu, 06 Aug 2020 07:05:56 GMT
server: AkamaiNetStorage
unused62: 8096267
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=1296000
expires: Sat, 24 Dec 2022 08:20:56 GMT
date: Fri, 09 Dec 2022 08:20:56 GMT
content-length: 3124
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1932)
Size:   3124
Md5:    a59baa427e611ebe142241529b320454
Sha1:   dd104963cabf6c8b30bb5948f438077cd95af3ae
Sha256: 996c352d90d3b3dda562ad3e0d9a31e226a0cd126be7e8efe14b87a53d3690ec
                                        
                                            GET /utag/paulaschoice/re-boot/prod/utag.277.js?utv=ut4.46.202011042303 HTTP/1.1 
Host: tags.tiqcdn.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paulaschoice.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         2.18.173.203
HTTP/2 200 OK
content-type: application/x-javascript
                                        
accept-ranges: bytes
etag: "09d09767cf8821b150988be5d9301d7a:1604531034.894717"
last-modified: Wed, 04 Nov 2020 23:03:54 GMT
server: AkamaiNetStorage
unused62: 8096267
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=1296000
expires: Sat, 24 Dec 2022 08:20:56 GMT
date: Fri, 09 Dec 2022 08:20:56 GMT
content-length: 1103
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (995)
Size:   1103
Md5:    5ecb222cf2607790bce6db9c69a47af1
Sha1:   100623c6cb6233a5c4ca2ffe965833bc903b33fe
Sha256: d1ebeae6bff9b04dc51c02543f1fefe5d2dc414d66bb271347a2a6d83d5e88f6
                                        
                                            GET /utag/paulaschoice/re-boot/prod/utag.304.js?utv=ut4.46.202201312219 HTTP/1.1 
Host: tags.tiqcdn.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paulaschoice.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         2.18.173.203
HTTP/2 200 OK
content-type: application/x-javascript
                                        
accept-ranges: bytes
etag: "5476eface2b870a786d8df9aca78f116:1643667582.125962"
last-modified: Mon, 31 Jan 2022 22:19:42 GMT
server: AkamaiNetStorage
unused62: 8096267
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=1296000
expires: Sat, 24 Dec 2022 08:20:56 GMT
date: Fri, 09 Dec 2022 08:20:56 GMT
content-length: 1519
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1048)
Size:   1519
Md5:    3cfc207b0fd830af1655e4e5d9801d65
Sha1:   6ff3f651623a135984642a57a3254b9baf626dff
Sha256: 429eb28e40e28a036d2016903b4f607c3e9fee473cda4607cc8a6bd4327c8f46
                                        
                                            GET /utag/paulaschoice/re-boot/prod/utag.328.js?utv=ut4.46.202208301810 HTTP/1.1 
Host: tags.tiqcdn.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paulaschoice.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         2.18.173.203
HTTP/2 200 OK
content-type: application/x-javascript
                                        
accept-ranges: bytes
etag: "7d35ae4962f81621528607526f49483f:1656350319.345164"
last-modified: Mon, 27 Jun 2022 17:18:39 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=1296000
expires: Sat, 24 Dec 2022 08:20:56 GMT
date: Fri, 09 Dec 2022 08:20:56 GMT
content-length: 3599
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1579)
Size:   3599
Md5:    97ecea3ac67206babc3c6c0f607d4a4c
Sha1:   87661feee77c36651149cac25c476f23d151c185
Sha256: 35ebddd82557dc3b4636514734059285d6b4cc389c9ea31afc19312ca0d2516f
                                        
                                            GET /utag/paulaschoice/re-boot/prod/utag.78.js?utv=ut4.46.202205122224 HTTP/1.1 
Host: tags.tiqcdn.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paulaschoice.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         2.18.173.203
HTTP/2 200 OK
content-type: application/x-javascript
                                        
accept-ranges: bytes
etag: "564855f31f34d598c9ed72ebf864cc6b:1610660204.709916"
last-modified: Thu, 14 Jan 2021 21:36:44 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=1296000
expires: Sat, 24 Dec 2022 08:20:56 GMT
date: Fri, 09 Dec 2022 08:20:56 GMT
content-length: 5143
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1253)
Size:   5143
Md5:    86a73b974149e9909340b0ad01c885b8
Sha1:   c25be78212dddc0d8f931fa105cd27c2779f8a16
Sha256: 858ca82a2ab4b6ba0254d75fe6a019ab7bf079604cb24f2332e14a347c52de35
                                        
                                            GET /utag/paulaschoice/re-boot/prod/utag.329.js?utv=ut4.46.202208301810 HTTP/1.1 
Host: tags.tiqcdn.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paulaschoice.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         2.18.173.203
HTTP/2 200 OK
content-type: application/x-javascript
                                        
accept-ranges: bytes
etag: "6581e07c70469f5e5df92e5828387b77:1634228628.595615"
last-modified: Thu, 14 Oct 2021 16:23:48 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=1296000
expires: Sat, 24 Dec 2022 08:20:56 GMT
date: Fri, 09 Dec 2022 08:20:56 GMT
content-length: 3579
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1579)
Size:   3579
Md5:    bd817290d6daee7a97b9c2fbc88b06cf
Sha1:   7eae5e69438aa0bdfdae94467a1b1deb1717bc30
Sha256: 00ce4a38a91c67796ca4f7b95390fedb7204612e2faf8aef91b3f9eb64817c70
                                        
                                            GET /dw/image/v2/BBNX_PRD/on/demandware.static/-/Sites-pc-catalog/en_US/dw437e76a1/images/products/tighten-reshape-pores-kit-34220-L.png?sw=360&sfrm=jpg HTTP/1.1 
Host: www.paulaschoice.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paulaschoice.com/
Cookie: dwac_1dddfe3d24e60db025cd316ffb=B6ujOwiiTGPKS336qHCNCn_JFrP2GiYaSNI%3D|dw-only|||USD|false|US%2FPacific|true; cqcid=aditEub1hqh4qvFQGaDVqS9bUJ; cquid=||; sid=B6ujOwiiTGPKS336qHCNCn_JFrP2GiYaSNI; dwanonymous_ef0ecd72b896f083bfc97bf06fa6e424=aditEub1hqh4qvFQGaDVqS9bUJ; __cq_dnt=0; dw_dnt=0; dwsid=Q2mtmoc9frP0mJYLLUUO5jsLGBJ5hRTKdgHPgZui7xjmNbZ0_raLhdzXOJjrBojXMw8HxYa72Ab3nej-WJn39g==; ak_bmsc=73A5130AE46340066CFE45C721038D58~000000000000000000000000000000~YAAQzQplXwmQaXyEAQAAChb59RLN4wFwkk0MvLqycjvkN9Arr6uXVcm81smlp7tnQWAuYusuxNY5xpAvXR36YO9EOd0uMWZbo5sIkiwVlVHXQzEUOzOd4uaB4RiC3AVi0SnzTnZXIUI5jpziA4vfV1lb7THrO+zhdCe71k2BAb1vUAlE3BA7Hznmiu9Og2Px2vDHdxgi9MJXITK86Wkmm91Zm+cMU0qR7grVDxRZplw81xxllbC4tePj0rPq1Q5+9yTXhtyDUqUhshCF+LZG65qMG7JGpd9kABq8FN3LwKbNDsCYT8TZ964Of0cXo/g9d0qBl5c5nLRGPkWXJU288qCTcLvLn6YnHjeLUyVeeRuya2IPMZiHrVV3yAKMfAfknot1Prw97MR9LL5l1XoG; _ju_v=4.1_5.47; _ju_dm=cookie; _ju_dn=1; bm_sv=8EB8AEE88059F85E43E001C6304AF64C~YAAQzQplXyWQaXyEAQAAQyH59RKwlaWFUyAruHT9ssFb75HHslpzim9I92X0e5WxNV8+ZM2J5JtxnujKr78bojoNkpCV+LuZ83Lsj4L/64BjvObOFp+pQV0ishb4oftu9psRmOXTZoJiZovCVoL/p4W6RbzkfllkF2Hp1UjkWtkdMiY9KE976jrctAd1sGv7lTsZ3PLAv02JCdBMU4dMjWRceQebeLY/UW6E5FDNwv7XAHnLBy4tuvAK/wSrgg9KRhGVsvX+~1; _attn_=eyJ1Ijoie1wiY29cIjoxNjcwNTc0MDU0MjIxLFwidW9cIjoxNjcwNTc0MDU0MjIxLFwibWFcIjoyMTkwMCxcImluXCI6ZmFsc2UsXCJ2YWxcIjpcImRiMzBjODRlMWU2YzQ1MTNiYWMxZGZiZmY3YjRiMjExXCJ9In0=; __attentive_id=db30c84e1e6c4513bac1dfbff7b4b211; __attentive_cco=1670574054222; _hjSessionUser_1118926=eyJpZCI6Ijg4NmQ5NDVjLWRjNTUtNWY0NS04NmQ1LTIyZjg4YmVjOGRlNCIsImNyZWF0ZWQiOjE2NzA1NzQwNTQyOTQsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample=0; _hjSession_1118926=eyJpZCI6IjdjZGYxMTc4LWJmNDAtNGQ3MS05YTk2LWQ3NTY0MjA0M2UwNCIsImNyZWF0ZWQiOjE2NzA1NzQwNTQ0MDksImluU2FtcGxlIjpmYWxzZX0=; _hjAbsoluteSessionInProgress=0; _ju_dc=66edb293-779a-11ed-ba97-57e9dc04ee15; _ju_pn=1; __attentive_pv=1; __attentive_ss_referrer="ORGANIC"; __attentive_dv=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         95.101.10.209
HTTP/2 200 OK
content-type: image/webp
                                        
content-length: 111858
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=158816
content-disposition: inline; filename="tighten-reshape-pores-kit-34220-L.webp"
etag: "e720f7e93a7c4ae63c88ea5bf8ad53d9"
last-modified: Fri, 04 Nov 2022 17:28:38 GMT
vary: Accept
x-amz-cf-id: h9D7DbDoIwiHDP6EfKlml8VmUBlb_TCQl1nErFTl4LM6dOiMdIjxog==
x-amz-cf-pop: MAD51-C1
x-amz-expiration: expiry-date="Tue, 05 Dec 2023 00:00:00 GMT", rule-id="transform_cache_ttl"
x-amz-meta-cleanquerystring: sfrm=jpg&sw=360
cf-cache-status: HIT
accept-ranges: bytes
strict-transport-security: max-age=31536000; includeSubDomains
cf-ray: 776c530b6de49b9b-FRA
cache-control: public, max-age=2453674
date: Fri, 09 Dec 2022 08:20:56 GMT
akamai-cache-status: Miss from child, Miss from parent
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   111858
Md5:    3ec710cedfc219caed2bb9f274a4c0a7
Sha1:   2beb90c21ec6db52c1f26de0f26b526e5815fdea
Sha256: 00dfe311df4b096f82ebbfdd399f2b29c62aa88f386b834f4db3adcc9f7700ba
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sca1b.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         54.230.245.39
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=123325
Date: Fri, 09 Dec 2022 08:20:56 GMT
Etag: "63921c6d-1d7"
Expires: Sat, 10 Dec 2022 18:36:21 GMT
Last-Modified: Thu, 08 Dec 2022 17:18:37 GMT
Server: ECS (nyb/1D1F)
X-Cache: Miss from cloudfront
Via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: s26VtNDJG7dgp5IZjmKiB0ZW6xC443h1C5SiBH388oCZeeZ3Ihv48g==
Age: 4664

                                        
                                            GET /dw/image/v2/BBNX_PRD/on/demandware.static/-/Sites-pc-catalog/en_US/dwaa2d95e8/images/products/best-of-anti-aging-dry-kit-117-B.png?sw=360&sfrm=jpg HTTP/1.1 
Host: www.paulaschoice.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paulaschoice.com/
Cookie: dwac_1dddfe3d24e60db025cd316ffb=B6ujOwiiTGPKS336qHCNCn_JFrP2GiYaSNI%3D|dw-only|||USD|false|US%2FPacific|true; cqcid=aditEub1hqh4qvFQGaDVqS9bUJ; cquid=||; sid=B6ujOwiiTGPKS336qHCNCn_JFrP2GiYaSNI; dwanonymous_ef0ecd72b896f083bfc97bf06fa6e424=aditEub1hqh4qvFQGaDVqS9bUJ; __cq_dnt=0; dw_dnt=0; dwsid=Q2mtmoc9frP0mJYLLUUO5jsLGBJ5hRTKdgHPgZui7xjmNbZ0_raLhdzXOJjrBojXMw8HxYa72Ab3nej-WJn39g==; ak_bmsc=73A5130AE46340066CFE45C721038D58~000000000000000000000000000000~YAAQzQplXwmQaXyEAQAAChb59RLN4wFwkk0MvLqycjvkN9Arr6uXVcm81smlp7tnQWAuYusuxNY5xpAvXR36YO9EOd0uMWZbo5sIkiwVlVHXQzEUOzOd4uaB4RiC3AVi0SnzTnZXIUI5jpziA4vfV1lb7THrO+zhdCe71k2BAb1vUAlE3BA7Hznmiu9Og2Px2vDHdxgi9MJXITK86Wkmm91Zm+cMU0qR7grVDxRZplw81xxllbC4tePj0rPq1Q5+9yTXhtyDUqUhshCF+LZG65qMG7JGpd9kABq8FN3LwKbNDsCYT8TZ964Of0cXo/g9d0qBl5c5nLRGPkWXJU288qCTcLvLn6YnHjeLUyVeeRuya2IPMZiHrVV3yAKMfAfknot1Prw97MR9LL5l1XoG; _ju_v=4.1_5.47; _ju_dm=cookie; _ju_dn=1; bm_sv=8EB8AEE88059F85E43E001C6304AF64C~YAAQzQplXyWQaXyEAQAAQyH59RKwlaWFUyAruHT9ssFb75HHslpzim9I92X0e5WxNV8+ZM2J5JtxnujKr78bojoNkpCV+LuZ83Lsj4L/64BjvObOFp+pQV0ishb4oftu9psRmOXTZoJiZovCVoL/p4W6RbzkfllkF2Hp1UjkWtkdMiY9KE976jrctAd1sGv7lTsZ3PLAv02JCdBMU4dMjWRceQebeLY/UW6E5FDNwv7XAHnLBy4tuvAK/wSrgg9KRhGVsvX+~1; _attn_=eyJ1Ijoie1wiY29cIjoxNjcwNTc0MDU0MjIxLFwidW9cIjoxNjcwNTc0MDU0MjIxLFwibWFcIjoyMTkwMCxcImluXCI6ZmFsc2UsXCJ2YWxcIjpcImRiMzBjODRlMWU2YzQ1MTNiYWMxZGZiZmY3YjRiMjExXCJ9In0=; __attentive_id=db30c84e1e6c4513bac1dfbff7b4b211; __attentive_cco=1670574054222; _hjSessionUser_1118926=eyJpZCI6Ijg4NmQ5NDVjLWRjNTUtNWY0NS04NmQ1LTIyZjg4YmVjOGRlNCIsImNyZWF0ZWQiOjE2NzA1NzQwNTQyOTQsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample=0; _hjSession_1118926=eyJpZCI6IjdjZGYxMTc4LWJmNDAtNGQ3MS05YTk2LWQ3NTY0MjA0M2UwNCIsImNyZWF0ZWQiOjE2NzA1NzQwNTQ0MDksImluU2FtcGxlIjpmYWxzZX0=; _hjAbsoluteSessionInProgress=0; _ju_dc=66edb293-779a-11ed-ba97-57e9dc04ee15; _ju_pn=1; __attentive_pv=1; __attentive_ss_referrer="ORGANIC"; __attentive_dv=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         95.101.10.209
HTTP/2 200 OK
content-type: image/webp
                                        
content-length: 111672
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=151531
content-disposition: inline; filename="best-of-anti-aging-dry-kit-117-B.webp"
etag: "c8f036071165852a6a1775b3c7a87638"
last-modified: Wed, 30 Nov 2022 07:59:47 GMT
vary: Accept
x-amz-cf-id: BJhArWMlASz0HsXYpAAk_BonaTkdNkNskmLSB85scK5pDHJa1uDGvw==
x-amz-cf-pop: BOM78-P6
x-amz-expiration: expiry-date="Sun, 31 Dec 2023 00:00:00 GMT", rule-id="transform_cache_ttl"
x-amz-meta-cleanquerystring: sfrm=jpg&sw=360
cf-cache-status: HIT
accept-ranges: bytes
strict-transport-security: max-age=31536000; includeSubDomains
cf-ray: 776c530b5ed192b1-FRA
cache-control: public, max-age=2454394
date: Fri, 09 Dec 2022 08:20:56 GMT
akamai-cache-status: Miss from child, Miss from parent
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   111672
Md5:    1be46b9499744bee2dc4507e67fca450
Sha1:   d9e7fc47a1b9291910a886979bc01871806ecc28
Sha256: 1a9e50738bbb4631f1a8c5900612b387dc6433da384a9fc3efa4a39cb3ffa65d
                                        
                                            GET /utag/paulaschoice/re-boot/prod/utag.330.js?utv=ut4.46.202208301810 HTTP/1.1 
Host: tags.tiqcdn.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paulaschoice.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         2.18.173.203
HTTP/2 200 OK
content-type: application/x-javascript
                                        
accept-ranges: bytes
etag: "425f2ea6e506fec8305e6463f338e3e6:1634149311.175606"
last-modified: Wed, 13 Oct 2021 18:21:51 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=1296000
expires: Sat, 24 Dec 2022 08:20:56 GMT
date: Fri, 09 Dec 2022 08:20:56 GMT
content-length: 3570
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1579)
Size:   3570
Md5:    37bdbefe50d94971bbb72c96a96bfb09
Sha1:   1b56271fe7035c0ae3a33a11fb77708a125e0c2f
Sha256: 9fef68b1a892f89486cf996da2fae42b28302d3179d78cdd325f05730811ecf9
                                        
                                            GET /utag/paulaschoice/re-boot/prod/utag.333.js?utv=ut4.46.202112102019 HTTP/1.1 
Host: tags.tiqcdn.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paulaschoice.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         2.18.173.203
HTTP/2 200 OK
content-type: application/x-javascript
                                        
accept-ranges: bytes
etag: "4d6fc7a7b4a016fef53be8a6996ca921:1639167565.561814"
last-modified: Fri, 10 Dec 2021 20:19:25 GMT
server: AkamaiNetStorage
unused62: 8096267
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=1296000
expires: Sat, 24 Dec 2022 08:20:56 GMT
date: Fri, 09 Dec 2022 08:20:56 GMT
content-length: 1172
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (472)
Size:   1172
Md5:    1eaecfa5317470f65c4352218486bbc5
Sha1:   2bbabf9162f400073f2fd2449f9aa4ace41cbe2b
Sha256: b42b42209f85f79e76bde92ac992c4539763479e3bd524ba2c1c2964013f71ce
                                        
                                            GET /utag/paulaschoice/re-boot/prod/utag.334.js?utv=ut4.46.202201101902 HTTP/1.1 
Host: tags.tiqcdn.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paulaschoice.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         2.18.173.203
HTTP/2 200 OK
content-type: application/x-javascript
                                        
accept-ranges: bytes
etag: "7e4febc9fbce365fcbcf2ffcad3d48b0:1641841380.304455"
last-modified: Mon, 10 Jan 2022 19:03:00 GMT
server: AkamaiNetStorage
unused62: 8096267
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=1296000
expires: Sat, 24 Dec 2022 08:20:56 GMT
date: Fri, 09 Dec 2022 08:20:56 GMT
content-length: 2435
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1117)
Size:   2435
Md5:    419ad2b13c877117515dc446973d467b
Sha1:   e8cf4d796a2d9b5dbab2299d4c4ec8af2b046017
Sha256: 06c83b5cfc26900db9d2e85e690a9c8946dbfa26277de2e9eb8d6ad9b58127a3
                                        
                                            GET /utag/paulaschoice/re-boot/prod/utag.332.js?utv=ut4.46.202210071656 HTTP/1.1 
Host: tags.tiqcdn.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paulaschoice.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         2.18.173.203
HTTP/2 200 OK
content-type: application/x-javascript
                                        
accept-ranges: bytes
etag: "26c922c788beddcbda021c3a898232bd:1665161816.768704"
last-modified: Fri, 07 Oct 2022 16:56:56 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=1296000
expires: Sat, 24 Dec 2022 08:20:56 GMT
date: Fri, 09 Dec 2022 08:20:56 GMT
content-length: 7217
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (2887)
Size:   7217
Md5:    59e85d8d2dcf592a33285424d847601d
Sha1:   3b117e41e390c7e14f8711129520bc2d69ede5d9
Sha256: 5e77fdba07f15f445092b84d5d8690032e23337facd9c643ca2a82ade8e9282c
                                        
                                            GET /utag/paulaschoice/re-boot/prod/utag.345.js?utv=ut4.46.202205251229 HTTP/1.1 
Host: tags.tiqcdn.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paulaschoice.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         2.18.173.203
HTTP/2 200 OK
content-type: application/x-javascript
                                        
accept-ranges: bytes
etag: "2c825c90d1469af614b0cf7ac7b8e8d6:1653481777.136365"
last-modified: Wed, 25 May 2022 12:29:37 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=1296000
expires: Sat, 24 Dec 2022 08:20:56 GMT
date: Fri, 09 Dec 2022 08:20:56 GMT
content-length: 1940
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1163)
Size:   1940
Md5:    bba47d60c01a7ff9dfc7be4ff2e21270
Sha1:   069114a20d1baecc855b2d6196c2accd7cea6265
Sha256: 17865694c78e21ed37f3f6fd98ca1ac1a0959738c227d03c9a6324d15cc9ddf4
                                        
                                            GET /utag/paulaschoice/re-boot/prod/utag.350.js?utv=ut4.46.202208301810 HTTP/1.1 
Host: tags.tiqcdn.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paulaschoice.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         2.18.173.203
HTTP/2 200 OK
content-type: application/x-javascript
                                        
accept-ranges: bytes
etag: "8b54f37ff4a1f0416a30a263118fa5e7:1650998432.019268"
last-modified: Tue, 26 Apr 2022 18:40:32 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=1296000
expires: Sat, 24 Dec 2022 08:20:56 GMT
date: Fri, 09 Dec 2022 08:20:56 GMT
content-length: 3578
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1579)
Size:   3578
Md5:    42c587054203b310829764704c618d78
Sha1:   c26e2353f901273b0f2d3cb6a37a776783386017
Sha256: 4c5273535bd5a636044d8d4eaeccc80314450271b46edce9a7da84d04a9c5df5
                                        
                                            GET /dw/image/v2/BBNX_PRD/on/demandware.static/-/Sites-pc-catalog/en_US/dw9c8d0762/images/products/keep-calm-dry-kit-114-B.png?sw=360&sfrm=jpg HTTP/1.1 
Host: www.paulaschoice.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paulaschoice.com/
Cookie: dwac_1dddfe3d24e60db025cd316ffb=B6ujOwiiTGPKS336qHCNCn_JFrP2GiYaSNI%3D|dw-only|||USD|false|US%2FPacific|true; cqcid=aditEub1hqh4qvFQGaDVqS9bUJ; cquid=||; sid=B6ujOwiiTGPKS336qHCNCn_JFrP2GiYaSNI; dwanonymous_ef0ecd72b896f083bfc97bf06fa6e424=aditEub1hqh4qvFQGaDVqS9bUJ; __cq_dnt=0; dw_dnt=0; dwsid=Q2mtmoc9frP0mJYLLUUO5jsLGBJ5hRTKdgHPgZui7xjmNbZ0_raLhdzXOJjrBojXMw8HxYa72Ab3nej-WJn39g==; ak_bmsc=73A5130AE46340066CFE45C721038D58~000000000000000000000000000000~YAAQzQplXwmQaXyEAQAAChb59RLN4wFwkk0MvLqycjvkN9Arr6uXVcm81smlp7tnQWAuYusuxNY5xpAvXR36YO9EOd0uMWZbo5sIkiwVlVHXQzEUOzOd4uaB4RiC3AVi0SnzTnZXIUI5jpziA4vfV1lb7THrO+zhdCe71k2BAb1vUAlE3BA7Hznmiu9Og2Px2vDHdxgi9MJXITK86Wkmm91Zm+cMU0qR7grVDxRZplw81xxllbC4tePj0rPq1Q5+9yTXhtyDUqUhshCF+LZG65qMG7JGpd9kABq8FN3LwKbNDsCYT8TZ964Of0cXo/g9d0qBl5c5nLRGPkWXJU288qCTcLvLn6YnHjeLUyVeeRuya2IPMZiHrVV3yAKMfAfknot1Prw97MR9LL5l1XoG; _ju_v=4.1_5.47; _ju_dm=cookie; _ju_dn=1; bm_sv=8EB8AEE88059F85E43E001C6304AF64C~YAAQzQplXyWQaXyEAQAAQyH59RKwlaWFUyAruHT9ssFb75HHslpzim9I92X0e5WxNV8+ZM2J5JtxnujKr78bojoNkpCV+LuZ83Lsj4L/64BjvObOFp+pQV0ishb4oftu9psRmOXTZoJiZovCVoL/p4W6RbzkfllkF2Hp1UjkWtkdMiY9KE976jrctAd1sGv7lTsZ3PLAv02JCdBMU4dMjWRceQebeLY/UW6E5FDNwv7XAHnLBy4tuvAK/wSrgg9KRhGVsvX+~1; _attn_=eyJ1Ijoie1wiY29cIjoxNjcwNTc0MDU0MjIxLFwidW9cIjoxNjcwNTc0MDU0MjIxLFwibWFcIjoyMTkwMCxcImluXCI6ZmFsc2UsXCJ2YWxcIjpcImRiMzBjODRlMWU2YzQ1MTNiYWMxZGZiZmY3YjRiMjExXCJ9In0=; __attentive_id=db30c84e1e6c4513bac1dfbff7b4b211; __attentive_cco=1670574054222; _hjSessionUser_1118926=eyJpZCI6Ijg4NmQ5NDVjLWRjNTUtNWY0NS04NmQ1LTIyZjg4YmVjOGRlNCIsImNyZWF0ZWQiOjE2NzA1NzQwNTQyOTQsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample=0; _hjSession_1118926=eyJpZCI6IjdjZGYxMTc4LWJmNDAtNGQ3MS05YTk2LWQ3NTY0MjA0M2UwNCIsImNyZWF0ZWQiOjE2NzA1NzQwNTQ0MDksImluU2FtcGxlIjpmYWxzZX0=; _hjAbsoluteSessionInProgress=0; _ju_dc=66edb293-779a-11ed-ba97-57e9dc04ee15; _ju_pn=1; __attentive_pv=1; __attentive_ss_referrer="ORGANIC"; __attentive_dv=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         95.101.10.209
HTTP/2 200 OK
content-type: image/webp
                                        
content-length: 126734
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=166432
content-disposition: inline; filename="keep-calm-dry-kit-114-B.webp"
etag: "4c5b02cd5079d5c337b346fdeae78763"
last-modified: Wed, 30 Nov 2022 08:00:16 GMT
vary: Accept
x-amz-cf-id: fe7Cu_OC5dWQOcg7zjhadpzPjVXEZrSrINe3K6AYVhdUROtJ7Pl1dA==
x-amz-cf-pop: FRA60-P1
x-amz-expiration: expiry-date="Sun, 31 Dec 2023 00:00:00 GMT", rule-id="transform_cache_ttl"
x-amz-meta-cleanquerystring: sfrm=jpg&sw=360
cf-cache-status: HIT
accept-ranges: bytes
strict-transport-security: max-age=31536000; includeSubDomains
cf-ray: 776c530b6ebf9104-FRA
cache-control: public, max-age=1813604
date: Fri, 09 Dec 2022 08:20:56 GMT
akamai-cache-status: Miss from child, Miss from parent
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   126734
Md5:    63cb3e6335179552b9638684907d2456
Sha1:   a08f6b3044437c078e8b99c581788df2f96a4bd1
Sha256: a9177ea7415f960fb0333db164dc6f79be8cf741a9504ddb41b52bf772e5f742
                                        
                                            GET /utag/paulaschoice/re-boot/prod/utag.337.js?utv=ut4.46.202203212056 HTTP/1.1 
Host: tags.tiqcdn.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paulaschoice.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         2.18.173.203
HTTP/2 200 OK
content-type: application/x-javascript
                                        
accept-ranges: bytes
etag: "e62c2af7c399acd3d2a59a34df689d4d:1647896192.839389"
last-modified: Mon, 21 Mar 2022 20:56:32 GMT
server: AkamaiNetStorage
unused62: 8096267
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=1296000
expires: Sat, 24 Dec 2022 08:20:56 GMT
date: Fri, 09 Dec 2022 08:20:56 GMT
content-length: 3071
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (2637)
Size:   3071
Md5:    73aba897b11cc515e76d385f7858a968
Sha1:   180eef20dc1c9246bfd4d4a2f501551bb3f6edde
Sha256: 830d41756fd129394f03089079b3cff1bf3582273149b2a4512e37310dab2813
                                        
                                            GET /dw/image/v2/BBNX_PRD/on/demandware.static/-/Sites-pc-catalog/en_US/dw1e4a5fad/c15-super-booster-2-pack-122-B.png?sw=360&sfrm=png HTTP/1.1 
Host: www.paulaschoice.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paulaschoice.com/
Cookie: dwac_1dddfe3d24e60db025cd316ffb=B6ujOwiiTGPKS336qHCNCn_JFrP2GiYaSNI%3D|dw-only|||USD|false|US%2FPacific|true; cqcid=aditEub1hqh4qvFQGaDVqS9bUJ; cquid=||; sid=B6ujOwiiTGPKS336qHCNCn_JFrP2GiYaSNI; dwanonymous_ef0ecd72b896f083bfc97bf06fa6e424=aditEub1hqh4qvFQGaDVqS9bUJ; __cq_dnt=0; dw_dnt=0; dwsid=Q2mtmoc9frP0mJYLLUUO5jsLGBJ5hRTKdgHPgZui7xjmNbZ0_raLhdzXOJjrBojXMw8HxYa72Ab3nej-WJn39g==; ak_bmsc=73A5130AE46340066CFE45C721038D58~000000000000000000000000000000~YAAQzQplXwmQaXyEAQAAChb59RLN4wFwkk0MvLqycjvkN9Arr6uXVcm81smlp7tnQWAuYusuxNY5xpAvXR36YO9EOd0uMWZbo5sIkiwVlVHXQzEUOzOd4uaB4RiC3AVi0SnzTnZXIUI5jpziA4vfV1lb7THrO+zhdCe71k2BAb1vUAlE3BA7Hznmiu9Og2Px2vDHdxgi9MJXITK86Wkmm91Zm+cMU0qR7grVDxRZplw81xxllbC4tePj0rPq1Q5+9yTXhtyDUqUhshCF+LZG65qMG7JGpd9kABq8FN3LwKbNDsCYT8TZ964Of0cXo/g9d0qBl5c5nLRGPkWXJU288qCTcLvLn6YnHjeLUyVeeRuya2IPMZiHrVV3yAKMfAfknot1Prw97MR9LL5l1XoG; _ju_v=4.1_5.47; _ju_dm=cookie; _ju_dn=1; bm_sv=8EB8AEE88059F85E43E001C6304AF64C~YAAQzQplXyWQaXyEAQAAQyH59RKwlaWFUyAruHT9ssFb75HHslpzim9I92X0e5WxNV8+ZM2J5JtxnujKr78bojoNkpCV+LuZ83Lsj4L/64BjvObOFp+pQV0ishb4oftu9psRmOXTZoJiZovCVoL/p4W6RbzkfllkF2Hp1UjkWtkdMiY9KE976jrctAd1sGv7lTsZ3PLAv02JCdBMU4dMjWRceQebeLY/UW6E5FDNwv7XAHnLBy4tuvAK/wSrgg9KRhGVsvX+~1; _attn_=eyJ1Ijoie1wiY29cIjoxNjcwNTc0MDU0MjIxLFwidW9cIjoxNjcwNTc0MDU0MjIxLFwibWFcIjoyMTkwMCxcImluXCI6ZmFsc2UsXCJ2YWxcIjpcImRiMzBjODRlMWU2YzQ1MTNiYWMxZGZiZmY3YjRiMjExXCJ9In0=; __attentive_id=db30c84e1e6c4513bac1dfbff7b4b211; __attentive_cco=1670574054222; _hjSessionUser_1118926=eyJpZCI6Ijg4NmQ5NDVjLWRjNTUtNWY0NS04NmQ1LTIyZjg4YmVjOGRlNCIsImNyZWF0ZWQiOjE2NzA1NzQwNTQyOTQsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample=0; _hjSession_1118926=eyJpZCI6IjdjZGYxMTc4LWJmNDAtNGQ3MS05YTk2LWQ3NTY0MjA0M2UwNCIsImNyZWF0ZWQiOjE2NzA1NzQwNTQ0MDksImluU2FtcGxlIjpmYWxzZX0=; _hjAbsoluteSessionInProgress=0; _ju_dc=66edb293-779a-11ed-ba97-57e9dc04ee15; _ju_pn=1; __attentive_pv=1; __attentive_ss_referrer="ORGANIC"; __attentive_dv=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         95.101.10.209
HTTP/2 200 OK
content-type: image/webp
                                        
content-length: 27514
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=48856
content-disposition: inline; filename="c15-super-booster-2-pack-122-B.webp"
etag: "6f63a2f0a636ce357fdb8d76b7f76cb9"
last-modified: Fri, 18 Nov 2022 07:59:53 GMT
vary: Accept
x-amz-cf-id: X_ibYnq_Bijk-51Lms3w98KhiAP8TWuH8YjkaEhVNMSyvGZzTe71WQ==
x-amz-cf-pop: FRA56-P5
x-amz-expiration: expiry-date="Tue, 19 Dec 2023 00:00:00 GMT", rule-id="transform_cache_ttl"
x-amz-meta-cleanquerystring: sfrm=png&sw=360
cf-cache-status: HIT
accept-ranges: bytes
strict-transport-security: max-age=31536000; includeSubDomains
cf-ray: 776c530b6a41bb5c-FRA
cache-control: public, max-age=1942075
date: Fri, 09 Dec 2022 08:20:56 GMT
akamai-cache-status: Miss from child, Miss from parent
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   27514
Md5:    e13ede061ec4e4af92218ec1e828ab7c
Sha1:   1a0755b175d0c1f3b00550ad485497d27c1d67be
Sha256: dde67fa27d9845642391c715cf1f38f680bfd28941f8145bc75550415bb8565e
                                        
                                            GET /utag/paulaschoice/re-boot/prod/utag.360.js?utv=ut4.46.202208302014 HTTP/1.1 
Host: tags.tiqcdn.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paulaschoice.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         2.18.173.203
HTTP/2 200 OK
content-type: application/x-javascript
                                        
accept-ranges: bytes
etag: "b281b2f72512a84e634b56cfe835d32f:1661890463.145814"
last-modified: Tue, 30 Aug 2022 20:14:23 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=1296000
expires: Sat, 24 Dec 2022 08:20:56 GMT
date: Fri, 09 Dec 2022 08:20:56 GMT
content-length: 4342
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (8054)
Size:   4342
Md5:    ceb14f9b8d2c6de4cb42cfeac60317b4
Sha1:   fa0ce09172833f6b74ae8b64ac2dc24168cd2f55
Sha256: b37decbf2541091c4e44a973abb7a385cc81d03f380991344b608d8f8195c2eb
                                        
                                            GET /dw/image/v2/BBNX_PRD/on/demandware.static/-/Sites-pc-catalog/en_US/dwa6b397f5/images/products/ultra-soft-washcloth-9972-L_hero.png?sw=360&sfrm=png HTTP/1.1 
Host: www.paulaschoice.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paulaschoice.com/
Cookie: dwac_1dddfe3d24e60db025cd316ffb=B6ujOwiiTGPKS336qHCNCn_JFrP2GiYaSNI%3D|dw-only|||USD|false|US%2FPacific|true; cqcid=aditEub1hqh4qvFQGaDVqS9bUJ; cquid=||; sid=B6ujOwiiTGPKS336qHCNCn_JFrP2GiYaSNI; dwanonymous_ef0ecd72b896f083bfc97bf06fa6e424=aditEub1hqh4qvFQGaDVqS9bUJ; __cq_dnt=0; dw_dnt=0; dwsid=Q2mtmoc9frP0mJYLLUUO5jsLGBJ5hRTKdgHPgZui7xjmNbZ0_raLhdzXOJjrBojXMw8HxYa72Ab3nej-WJn39g==; ak_bmsc=73A5130AE46340066CFE45C721038D58~000000000000000000000000000000~YAAQzQplXwmQaXyEAQAAChb59RLN4wFwkk0MvLqycjvkN9Arr6uXVcm81smlp7tnQWAuYusuxNY5xpAvXR36YO9EOd0uMWZbo5sIkiwVlVHXQzEUOzOd4uaB4RiC3AVi0SnzTnZXIUI5jpziA4vfV1lb7THrO+zhdCe71k2BAb1vUAlE3BA7Hznmiu9Og2Px2vDHdxgi9MJXITK86Wkmm91Zm+cMU0qR7grVDxRZplw81xxllbC4tePj0rPq1Q5+9yTXhtyDUqUhshCF+LZG65qMG7JGpd9kABq8FN3LwKbNDsCYT8TZ964Of0cXo/g9d0qBl5c5nLRGPkWXJU288qCTcLvLn6YnHjeLUyVeeRuya2IPMZiHrVV3yAKMfAfknot1Prw97MR9LL5l1XoG; _ju_v=4.1_5.47; _ju_dm=cookie; _ju_dn=1; bm_sv=8EB8AEE88059F85E43E001C6304AF64C~YAAQzQplXyWQaXyEAQAAQyH59RKwlaWFUyAruHT9ssFb75HHslpzim9I92X0e5WxNV8+ZM2J5JtxnujKr78bojoNkpCV+LuZ83Lsj4L/64BjvObOFp+pQV0ishb4oftu9psRmOXTZoJiZovCVoL/p4W6RbzkfllkF2Hp1UjkWtkdMiY9KE976jrctAd1sGv7lTsZ3PLAv02JCdBMU4dMjWRceQebeLY/UW6E5FDNwv7XAHnLBy4tuvAK/wSrgg9KRhGVsvX+~1; _attn_=eyJ1Ijoie1wiY29cIjoxNjcwNTc0MDU0MjIxLFwidW9cIjoxNjcwNTc0MDU0MjIxLFwibWFcIjoyMTkwMCxcImluXCI6ZmFsc2UsXCJ2YWxcIjpcImRiMzBjODRlMWU2YzQ1MTNiYWMxZGZiZmY3YjRiMjExXCJ9In0=; __attentive_id=db30c84e1e6c4513bac1dfbff7b4b211; __attentive_cco=1670574054222; _hjSessionUser_1118926=eyJpZCI6Ijg4NmQ5NDVjLWRjNTUtNWY0NS04NmQ1LTIyZjg4YmVjOGRlNCIsImNyZWF0ZWQiOjE2NzA1NzQwNTQyOTQsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample=0; _hjSession_1118926=eyJpZCI6IjdjZGYxMTc4LWJmNDAtNGQ3MS05YTk2LWQ3NTY0MjA0M2UwNCIsImNyZWF0ZWQiOjE2NzA1NzQwNTQ0MDksImluU2FtcGxlIjpmYWxzZX0=; _hjAbsoluteSessionInProgress=0; _ju_dc=66edb293-779a-11ed-ba97-57e9dc04ee15; _ju_pn=1; __attentive_pv=1; __attentive_ss_referrer="ORGANIC"; __attentive_dv=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         95.101.10.209
HTTP/2 200 OK
content-type: image/webp
                                        
content-length: 71960
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=120269
content-disposition: inline; filename="ultra-soft-washcloth-9972-L_hero.webp"
etag: "a5dae6b5b787f756155b477d1996053b"
last-modified: Sat, 11 Jun 2022 06:59:06 GMT
vary: Accept
x-amz-cf-id: stxr051dbmpbF0fpHCg2jf8TjxkOHICoXAURanq_153dBAfKwh-L_w==
x-amz-cf-pop: EWR53-P1
x-amz-expiration: expiry-date="Wed, 12 Jul 2023 00:00:00 GMT", rule-id="transform_cache_ttl"
x-amz-meta-cleanquerystring: sfrm=png&sw=360
cf-cache-status: HIT
accept-ranges: bytes
strict-transport-security: max-age=31536000; includeSubDomains
cf-ray: 776c530b6efc6922-FRA
cache-control: public, max-age=2368409
date: Fri, 09 Dec 2022 08:20:56 GMT
akamai-cache-status: Miss from child, Miss from parent
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   71960
Md5:    eb17963d7f024c686ade296366cd82b5
Sha1:   401aab4e9bf4ed20445cabe3643ea16a890686c2
Sha256: c28784692b41417f3da2e150e26cb56a3a12483789d1500e935636ab2536771d
                                        
                                            GET /utag/paulaschoice/re-boot/prod/utag.368.js?utv=ut4.46.202209291915 HTTP/1.1 
Host: tags.tiqcdn.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paulaschoice.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         2.18.173.203
HTTP/2 200 OK
content-type: application/x-javascript
                                        
accept-ranges: bytes
etag: "c52b5122b9edfec557f2fe1e46f3d576:1664478951.095485"
last-modified: Thu, 29 Sep 2022 19:15:51 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=1296000
expires: Sat, 24 Dec 2022 08:20:56 GMT
date: Fri, 09 Dec 2022 08:20:56 GMT
content-length: 1407
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1117)
Size:   1407
Md5:    59399735a2cc2a2cca7113a80387f254
Sha1:   2f20390cfe51c2d83006bba309d7602dd54c2c44
Sha256: d9c4cdb0c9609dc0cf9196e5156be423b0f2cf0f542583f26ee3ddfbaa6ec369
                                        
                                            GET /web_widget/latest/classic/web-widget-8165-4212808.js HTTP/1.1 
Host: static.zdassets.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         104.18.70.113
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                        
date: Fri, 09 Dec 2022 08:20:55 GMT
x-amz-id-2: qetaW30z8PDoz51vrFZTdIrI8eI5VmK/cAmsNTgKeGpBmGRv4ygt5107GJGLcZIOShTAnjV+jsM=
x-amz-request-id: MJA95499P2DANQB9
x-amz-replication-status: COMPLETED
last-modified: Wed, 07 Dec 2022 02:11:15 GMT
etag: W/"d519ea27f763cb6ec80aeec5b45213a7"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=31536000
expires: Thu, 07 Dec 2023 02:11:14 GMT
x-amz-version-id: VqNkD3Z7Y3yN06zeOVNHtMoSr7PkASZj
cf-cache-status: HIT
age: 184514
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4WeQp77Il18WcSXVxtUcG8676A6yt97Rx2SPYUqW3xu117fCIn1YHfFEhT7%2Fy4LQXbLq8WSVOFcu%2FK%2B21Wy6r%2BYEDxOUtO9MbMFOIIBj3G1nNQZdBt5W181Kc6mWRBSlqokXXP8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0
server: cloudflare
cf-ray: 776c5305d8021c06-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65307)
Size:   239516
Md5:    0f2ce28141e547b16860313032bbb7ee
Sha1:   1ef854bd8b8dc9118bc8c729ffcececd915f29d8
Sha256: 14ea735613136f6253f3e69069fe48120e6cca52bb3915a661e41158f3908b43
                                        
                                            GET /utag/paulaschoice/re-boot/prod/utag.369.js?utv=ut4.46.202209302207 HTTP/1.1 
Host: tags.tiqcdn.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paulaschoice.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         2.18.173.203
HTTP/2 200 OK
content-type: application/x-javascript
                                        
accept-ranges: bytes
etag: "dab72e10f9824da3ff84d773cda59d42:1664575683.557945"
last-modified: Fri, 30 Sep 2022 22:08:03 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=1296000
expires: Sat, 24 Dec 2022 08:20:56 GMT
date: Fri, 09 Dec 2022 08:20:56 GMT
content-length: 1090
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (995)
Size:   1090
Md5:    1fec1fcec97b22ca4d4a1edaeac4fbcd
Sha1:   a60386fd3f41e609c7d2fed2639ef6da5e6dacec
Sha256: 67a0e942fa99f78e693e329618c63ea0d772562a995adadbc92cb4223a1f41e8
                                        
                                            GET /on/demandware.static/-/Library-Sites-paulachoice/default/dw0dfb8ae0/images/homepage-new/us_221207_desktop_hp-panel_npl-plus-gwp_v2.jpg HTTP/1.1 
Host: www.paulaschoice.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paulaschoice.com/
Cookie: dwac_1dddfe3d24e60db025cd316ffb=B6ujOwiiTGPKS336qHCNCn_JFrP2GiYaSNI%3D|dw-only|||USD|false|US%2FPacific|true; cqcid=aditEub1hqh4qvFQGaDVqS9bUJ; cquid=||; sid=B6ujOwiiTGPKS336qHCNCn_JFrP2GiYaSNI; dwanonymous_ef0ecd72b896f083bfc97bf06fa6e424=aditEub1hqh4qvFQGaDVqS9bUJ; __cq_dnt=0; dw_dnt=0; dwsid=Q2mtmoc9frP0mJYLLUUO5jsLGBJ5hRTKdgHPgZui7xjmNbZ0_raLhdzXOJjrBojXMw8HxYa72Ab3nej-WJn39g==; ak_bmsc=73A5130AE46340066CFE45C721038D58~000000000000000000000000000000~YAAQzQplXwmQaXyEAQAAChb59RLN4wFwkk0MvLqycjvkN9Arr6uXVcm81smlp7tnQWAuYusuxNY5xpAvXR36YO9EOd0uMWZbo5sIkiwVlVHXQzEUOzOd4uaB4RiC3AVi0SnzTnZXIUI5jpziA4vfV1lb7THrO+zhdCe71k2BAb1vUAlE3BA7Hznmiu9Og2Px2vDHdxgi9MJXITK86Wkmm91Zm+cMU0qR7grVDxRZplw81xxllbC4tePj0rPq1Q5+9yTXhtyDUqUhshCF+LZG65qMG7JGpd9kABq8FN3LwKbNDsCYT8TZ964Of0cXo/g9d0qBl5c5nLRGPkWXJU288qCTcLvLn6YnHjeLUyVeeRuya2IPMZiHrVV3yAKMfAfknot1Prw97MR9LL5l1XoG; _ju_v=4.1_5.47; _ju_dm=cookie; _ju_dn=1; bm_sv=8EB8AEE88059F85E43E001C6304AF64C~YAAQzQplXyWQaXyEAQAAQyH59RKwlaWFUyAruHT9ssFb75HHslpzim9I92X0e5WxNV8+ZM2J5JtxnujKr78bojoNkpCV+LuZ83Lsj4L/64BjvObOFp+pQV0ishb4oftu9psRmOXTZoJiZovCVoL/p4W6RbzkfllkF2Hp1UjkWtkdMiY9KE976jrctAd1sGv7lTsZ3PLAv02JCdBMU4dMjWRceQebeLY/UW6E5FDNwv7XAHnLBy4tuvAK/wSrgg9KRhGVsvX+~1; _attn_=eyJ1Ijoie1wiY29cIjoxNjcwNTc0MDU0MjIxLFwidW9cIjoxNjcwNTc0MDU0MjIxLFwibWFcIjoyMTkwMCxcImluXCI6ZmFsc2UsXCJ2YWxcIjpcImRiMzBjODRlMWU2YzQ1MTNiYWMxZGZiZmY3YjRiMjExXCJ9In0=; __attentive_id=db30c84e1e6c4513bac1dfbff7b4b211; __attentive_cco=1670574054222; _hjSessionUser_1118926=eyJpZCI6Ijg4NmQ5NDVjLWRjNTUtNWY0NS04NmQ1LTIyZjg4YmVjOGRlNCIsImNyZWF0ZWQiOjE2NzA1NzQwNTQyOTQsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample=0; _hjSession_1118926=eyJpZCI6IjdjZGYxMTc4LWJmNDAtNGQ3MS05YTk2LWQ3NTY0MjA0M2UwNCIsImNyZWF0ZWQiOjE2NzA1NzQwNTQ0MDksImluU2FtcGxlIjpmYWxzZX0=; _hjAbsoluteSessionInProgress=0; _ju_dc=66edb293-779a-11ed-ba97-57e9dc04ee15; _ju_pn=1; __attentive_pv=1; __attentive_ss_referrer="ORGANIC"; __attentive_dv=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Range: bytes=17826-
If-Range: Mon, 05 Dec 2022 20:53:15 GMT
TE: trailers

search
                                         95.101.10.209
HTTP/2 206 Partial Content
content-type: image/jpeg
                                        
cf-ray: 776c530b6c7690a6-FRA
accept-ranges: bytes
last-modified: Mon, 05 Dec 2022 20:53:15 GMT
strict-transport-security: max-age=31536000; includeSubDomains
vary: Accept-Encoding
cf-cache-status: HIT
cf-bgj: imgq:100,h2pri
cf-polished: origSize=97951, status=webp_bigger
cross-origin-resource-policy: cross-origin
x-dw-request-base-id: -WCNVQFIkGMBAAB_
cache-control: public, max-age=2418335
date: Fri, 09 Dec 2022 08:20:56 GMT
content-range: bytes 17826-97905/97906
content-length: 80080
akamai-cache-status: Miss from child, Miss from parent
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   80080
Md5:    74bda7e53aee7d9aeba407efdd9e2473
Sha1:   ae763c969f5c37ca01ab479d03ba6cc442aa48aa
Sha256: 7e96e30bffe0afe1343852a801490630adac7e6fdd4b4d20352bf5c12c4112de
                                        
                                            GET /utag/paulaschoice/re-boot/prod/utag.373.js?utv=ut4.46.202211152335 HTTP/1.1 
Host: tags.tiqcdn.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paulaschoice.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         2.18.173.203
HTTP/2 200 OK
content-type: application/x-javascript
                                        
accept-ranges: bytes
etag: "44ff4e82376764cbcd6880e14afb11b1:1668555319.969874"
last-modified: Tue, 15 Nov 2022 23:35:19 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=1296000
expires: Sat, 24 Dec 2022 08:20:56 GMT
date: Fri, 09 Dec 2022 08:20:56 GMT
content-length: 1359
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1117)
Size:   1359
Md5:    31578169245a2892d4f47b9d8ebbf084
Sha1:   a5ee02a89d93bb3a8149e927ce233d01d28388b0
Sha256: 3f41ef6d31832c2a0a7e9db1607771385ee048f96ae20a50e250d1d3e6b2bde4
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 5179
Cache-Control: 'max-age=158059'
Date: Fri, 09 Dec 2022 08:20:56 GMT
Last-Modified: Fri, 09 Dec 2022 06:54:37 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /on/demandware.static/-/Library-Sites-paulachoice/default/dw5536c574/images/homepage-new/pc_221128_desktop_launchpad_holiday22.jpg HTTP/1.1 
Host: www.paulaschoice.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paulaschoice.com/
Cookie: dwac_1dddfe3d24e60db025cd316ffb=B6ujOwiiTGPKS336qHCNCn_JFrP2GiYaSNI%3D|dw-only|||USD|false|US%2FPacific|true; cqcid=aditEub1hqh4qvFQGaDVqS9bUJ; cquid=||; sid=B6ujOwiiTGPKS336qHCNCn_JFrP2GiYaSNI; dwanonymous_ef0ecd72b896f083bfc97bf06fa6e424=aditEub1hqh4qvFQGaDVqS9bUJ; __cq_dnt=0; dw_dnt=0; dwsid=Q2mtmoc9frP0mJYLLUUO5jsLGBJ5hRTKdgHPgZui7xjmNbZ0_raLhdzXOJjrBojXMw8HxYa72Ab3nej-WJn39g==; ak_bmsc=73A5130AE46340066CFE45C721038D58~000000000000000000000000000000~YAAQzQplXwmQaXyEAQAAChb59RLN4wFwkk0MvLqycjvkN9Arr6uXVcm81smlp7tnQWAuYusuxNY5xpAvXR36YO9EOd0uMWZbo5sIkiwVlVHXQzEUOzOd4uaB4RiC3AVi0SnzTnZXIUI5jpziA4vfV1lb7THrO+zhdCe71k2BAb1vUAlE3BA7Hznmiu9Og2Px2vDHdxgi9MJXITK86Wkmm91Zm+cMU0qR7grVDxRZplw81xxllbC4tePj0rPq1Q5+9yTXhtyDUqUhshCF+LZG65qMG7JGpd9kABq8FN3LwKbNDsCYT8TZ964Of0cXo/g9d0qBl5c5nLRGPkWXJU288qCTcLvLn6YnHjeLUyVeeRuya2IPMZiHrVV3yAKMfAfknot1Prw97MR9LL5l1XoG; _ju_v=4.1_5.47; _ju_dm=cookie; _ju_dn=1; bm_sv=8EB8AEE88059F85E43E001C6304AF64C~YAAQzQplXyWQaXyEAQAAQyH59RKwlaWFUyAruHT9ssFb75HHslpzim9I92X0e5WxNV8+ZM2J5JtxnujKr78bojoNkpCV+LuZ83Lsj4L/64BjvObOFp+pQV0ishb4oftu9psRmOXTZoJiZovCVoL/p4W6RbzkfllkF2Hp1UjkWtkdMiY9KE976jrctAd1sGv7lTsZ3PLAv02JCdBMU4dMjWRceQebeLY/UW6E5FDNwv7XAHnLBy4tuvAK/wSrgg9KRhGVsvX+~1; _attn_=eyJ1Ijoie1wiY29cIjoxNjcwNTc0MDU0MjIxLFwidW9cIjoxNjcwNTc0MDU0MjIxLFwibWFcIjoyMTkwMCxcImluXCI6ZmFsc2UsXCJ2YWxcIjpcImRiMzBjODRlMWU2YzQ1MTNiYWMxZGZiZmY3YjRiMjExXCJ9In0=; __attentive_id=db30c84e1e6c4513bac1dfbff7b4b211; __attentive_cco=1670574054222; _hjSessionUser_1118926=eyJpZCI6Ijg4NmQ5NDVjLWRjNTUtNWY0NS04NmQ1LTIyZjg4YmVjOGRlNCIsImNyZWF0ZWQiOjE2NzA1NzQwNTQyOTQsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample=0; _hjSession_1118926=eyJpZCI6IjdjZGYxMTc4LWJmNDAtNGQ3MS05YTk2LWQ3NTY0MjA0M2UwNCIsImNyZWF0ZWQiOjE2NzA1NzQwNTQ0MDksImluU2FtcGxlIjpmYWxzZX0=; _hjAbsoluteSessionInProgress=0; _ju_dc=66edb293-779a-11ed-ba97-57e9dc04ee15; _ju_pn=1; __attentive_pv=1; __attentive_ss_referrer="ORGANIC"; __attentive_dv=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         95.101.10.209
HTTP/2 200 OK
content-type: image/jpeg
                                        
content-length: 111466
cf-ray: 776c530b79df6927-FRA
accept-ranges: bytes
last-modified: Thu, 01 Dec 2022 18:50:48 GMT
strict-transport-security: max-age=31536000; includeSubDomains
vary: Accept-Encoding
cf-cache-status: HIT
cf-bgj: imgq:100,h2pri
cf-polished: origSize=119782, status=webp_bigger
cross-origin-resource-policy: cross-origin
x-dw-request-base-id: -WBb6LK8j2MBAAB_
cache-control: public, max-age=2382450
date: Fri, 09 Dec 2022 08:20:56 GMT
akamai-cache-status: Miss from child, Miss from parent
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 2554x900, components 3\012- data
Size:   111466
Md5:    4994ba5cf07f6e8d2f8a6a8ab24cc2ad
Sha1:   6d9113f012b44629459123c074210dea79d17bc8
Sha256: 18fa811776a1a7460f49adbe713111726e19c9bbb8fd2a6de8ef25b031613b79
                                        
                                            GET /utag/tiqapp/utag.v.js?a=paulaschoice/re-boot/202211171651&cb=1670574055625 HTTP/1.1 
Host: tags.tiqcdn.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paulaschoice.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         2.18.173.203
HTTP/2 200 OK
content-type: application/x-javascript
                                        
accept-ranges: bytes
etag: "7bc0ee636b3b83484fc3b9348863bd22:1460653071"
last-modified: Thu, 14 Apr 2016 16:57:51 GMT
server: AkamaiNetStorage
content-length: 2
unused62: 8096267
cache-control: max-age=600
expires: Fri, 09 Dec 2022 08:30:56 GMT
date: Fri, 09 Dec 2022 08:20:56 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   2
Md5:    7bc0ee636b3b83484fc3b9348863bd22
Sha1:   ebbffb7d7ea5362a22bfa1bab0bfdeb1617cd610
Sha256: a2c2339691fc48fbd14fb307292dff3e21222712d9240810742d7df0c6d74dfb
                                        
                                            GET /s/W/ws/VGTpF2Ce7mFx6Dha/c/1670574055210 HTTP/1.1 
Host: widget-mediator.zopim.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://www.paulaschoice.com
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: u7ni6ldjqfBlGYKWJyoQ0Q==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

search
                                         3.127.53.156
HTTP/1.1 101 Switching Protocols
                                        
Date: Fri, 09 Dec 2022 08:20:56 GMT
Connection: upgrade
Set-Cookie: AWSALB=qsF/uv4ZIqAytj/hWI6v4QkzwxIpU7EIqll8BETWJcotrchWGkDTxUT1SMYgEiG5WOhq65YV8UaTlVXSsdcuvTWL2UgFyBXkD4pvDEj0+AUwTx7hGZ2SeVL9Paqo; Expires=Fri, 16 Dec 2022 08:20:56 GMT; Path=/ AWSALBCORS=qsF/uv4ZIqAytj/hWI6v4QkzwxIpU7EIqll8BETWJcotrchWGkDTxUT1SMYgEiG5WOhq65YV8UaTlVXSsdcuvTWL2UgFyBXkD4pvDEj0+AUwTx7hGZ2SeVL9Paqo; Expires=Fri, 16 Dec 2022 08:20:56 GMT; Path=/; SameSite=None; Secure
Upgrade: websocket
Sec-WebSocket-Accept: Lt6ZM21Tlmoyc/BXaEr4tKEcews=
Sec-WebSocket-Version: 13
WebSocket-Server: uWebSockets

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 4123
Cache-Control: max-age=131453
Date: Fri, 09 Dec 2022 08:20:56 GMT
Etag: "63923e4a-2d7"
Expires: Sat, 10 Dec 2022 20:51:49 GMT
Last-Modified: Thu, 08 Dec 2022 19:43:06 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 727

                                        
                                            GET /tags/narrativ-brand.1.0.0.js HTTP/1.1 
Host: static.narrativ.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paulaschoice.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         143.204.55.50
HTTP/1.1 200 OK
Content-Type: application/octet-stream
                                        
Content-Length: 30182
Connection: keep-alive
Last-Modified: Mon, 05 Dec 2022 18:26:37 GMT
Server: AmazonS3
Date: Thu, 08 Dec 2022 18:26:45 GMT
ETag: "098e3e56a4be98eb7ff1216640bd3f35"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 a034aae43a19aef875fa395182990970.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: _SaSZHDxOVy8XPC-UmoU3ZYDXLpiHk0NZ3bOab2oieln9tXRvmS2aA==
Age: 50055


--- Additional Info ---
Magic:  ASCII text, with very long lines (30182), with no line terminators
Size:   30182
Md5:    098e3e56a4be98eb7ff1216640bd3f35
Sha1:   d6f8c3a870bb314cccc529b46a531f1ef53d70c4
Sha256: a971e423daca6be418d84a250f11525573549a3a1807e49d3c6a0e61c54ca1ab
                                        
                                            GET /dw/image/v2/BBNX_PRD/on/demandware.static/-/Sites-pc-catalog/en_US/dw0ab8211f/images/products/keep-calm-oily-kit-115-B.png?sw=360&sfrm=jpg HTTP/1.1 
Host: www.paulaschoice.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paulaschoice.com/
Cookie: dwac_1dddfe3d24e60db025cd316ffb=B6ujOwiiTGPKS336qHCNCn_JFrP2GiYaSNI%3D|dw-only|||USD|false|US%2FPacific|true; cqcid=aditEub1hqh4qvFQGaDVqS9bUJ; cquid=||; sid=B6ujOwiiTGPKS336qHCNCn_JFrP2GiYaSNI; dwanonymous_ef0ecd72b896f083bfc97bf06fa6e424=aditEub1hqh4qvFQGaDVqS9bUJ; __cq_dnt=0; dw_dnt=0; dwsid=Q2mtmoc9frP0mJYLLUUO5jsLGBJ5hRTKdgHPgZui7xjmNbZ0_raLhdzXOJjrBojXMw8HxYa72Ab3nej-WJn39g==; ak_bmsc=73A5130AE46340066CFE45C721038D58~000000000000000000000000000000~YAAQzQplXwmQaXyEAQAAChb59RLN4wFwkk0MvLqycjvkN9Arr6uXVcm81smlp7tnQWAuYusuxNY5xpAvXR36YO9EOd0uMWZbo5sIkiwVlVHXQzEUOzOd4uaB4RiC3AVi0SnzTnZXIUI5jpziA4vfV1lb7THrO+zhdCe71k2BAb1vUAlE3BA7Hznmiu9Og2Px2vDHdxgi9MJXITK86Wkmm91Zm+cMU0qR7grVDxRZplw81xxllbC4tePj0rPq1Q5+9yTXhtyDUqUhshCF+LZG65qMG7JGpd9kABq8FN3LwKbNDsCYT8TZ964Of0cXo/g9d0qBl5c5nLRGPkWXJU288qCTcLvLn6YnHjeLUyVeeRuya2IPMZiHrVV3yAKMfAfknot1Prw97MR9LL5l1XoG; _ju_v=4.1_5.47; _ju_dm=cookie; _ju_dn=1; bm_sv=8EB8AEE88059F85E43E001C6304AF64C~YAAQzQplXyWQaXyEAQAAQyH59RKwlaWFUyAruHT9ssFb75HHslpzim9I92X0e5WxNV8+ZM2J5JtxnujKr78bojoNkpCV+LuZ83Lsj4L/64BjvObOFp+pQV0ishb4oftu9psRmOXTZoJiZovCVoL/p4W6RbzkfllkF2Hp1UjkWtkdMiY9KE976jrctAd1sGv7lTsZ3PLAv02JCdBMU4dMjWRceQebeLY/UW6E5FDNwv7XAHnLBy4tuvAK/wSrgg9KRhGVsvX+~1; _attn_=eyJ1Ijoie1wiY29cIjoxNjcwNTc0MDU0MjIxLFwidW9cIjoxNjcwNTc0MDU0MjIxLFwibWFcIjoyMTkwMCxcImluXCI6ZmFsc2UsXCJ2YWxcIjpcImRiMzBjODRlMWU2YzQ1MTNiYWMxZGZiZmY3YjRiMjExXCJ9In0=; __attentive_id=db30c84e1e6c4513bac1dfbff7b4b211; __attentive_cco=1670574054222; _hjSessionUser_1118926=eyJpZCI6Ijg4NmQ5NDVjLWRjNTUtNWY0NS04NmQ1LTIyZjg4YmVjOGRlNCIsImNyZWF0ZWQiOjE2NzA1NzQwNTQyOTQsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample=0; _hjSession_1118926=eyJpZCI6IjdjZGYxMTc4LWJmNDAtNGQ3MS05YTk2LWQ3NTY0MjA0M2UwNCIsImNyZWF0ZWQiOjE2NzA1NzQwNTQ0MDksImluU2FtcGxlIjpmYWxzZX0=; _hjAbsoluteSessionInProgress=0; _ju_dc=66edb293-779a-11ed-ba97-57e9dc04ee15; _ju_pn=1; __attentive_pv=1; __attentive_ss_referrer="ORGANIC"; __attentive_dv=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         95.101.10.209
HTTP/2 200 OK
content-type: image/webp
                                        
content-length: 127356
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=167260
content-disposition: inline; filename="keep-calm-oily-kit-115-B.webp"
etag: "ecd84079867497a3cb8a9e6ca31cae2b"
last-modified: Wed, 30 Nov 2022 07:59:46 GMT
vary: Accept
x-amz-cf-id: 5BR5XMKYJ8RWSf4puaTqqPP7JXCUQc9CWP5aLDVXjbwnzh3UVEAlpg==
x-amz-cf-pop: FRA56-P5
x-amz-expiration: expiry-date="Sun, 31 Dec 2023 00:00:00 GMT", rule-id="transform_cache_ttl"
x-amz-meta-cleanquerystring: sfrm=jpg&sw=360
cf-cache-status: HIT
accept-ranges: bytes
strict-transport-security: max-age=31536000; includeSubDomains
cf-ray: 776c530b6a586907-FRA
cache-control: public, max-age=2363094
date: Fri, 09 Dec 2022 08:20:56 GMT
akamai-cache-status: Miss from child, Miss from parent
X-Firefox-Spdy: h2

                                        
                                            GET /dw/image/v2/BBNX_PRD/on/demandware.static/-/Sites-pc-catalog/default/dwe96bd871/images/products/best-of-anti-aging-oily-kit-120-B.png?sw=360&sfrm=jpg HTTP/1.1 
Host: www.paulaschoice.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paulaschoice.com/
Cookie: dwac_1dddfe3d24e60db025cd316ffb=B6ujOwiiTGPKS336qHCNCn_JFrP2GiYaSNI%3D|dw-only|||USD|false|US%2FPacific|true; cqcid=aditEub1hqh4qvFQGaDVqS9bUJ; cquid=||; sid=B6ujOwiiTGPKS336qHCNCn_JFrP2GiYaSNI; dwanonymous_ef0ecd72b896f083bfc97bf06fa6e424=aditEub1hqh4qvFQGaDVqS9bUJ; __cq_dnt=0; dw_dnt=0; dwsid=Q2mtmoc9frP0mJYLLUUO5jsLGBJ5hRTKdgHPgZui7xjmNbZ0_raLhdzXOJjrBojXMw8HxYa72Ab3nej-WJn39g==; ak_bmsc=73A5130AE46340066CFE45C721038D58~000000000000000000000000000000~YAAQzQplXwmQaXyEAQAAChb59RLN4wFwkk0MvLqycjvkN9Arr6uXVcm81smlp7tnQWAuYusuxNY5xpAvXR36YO9EOd0uMWZbo5sIkiwVlVHXQzEUOzOd4uaB4RiC3AVi0SnzTnZXIUI5jpziA4vfV1lb7THrO+zhdCe71k2BAb1vUAlE3BA7Hznmiu9Og2Px2vDHdxgi9MJXITK86Wkmm91Zm+cMU0qR7grVDxRZplw81xxllbC4tePj0rPq1Q5+9yTXhtyDUqUhshCF+LZG65qMG7JGpd9kABq8FN3LwKbNDsCYT8TZ964Of0cXo/g9d0qBl5c5nLRGPkWXJU288qCTcLvLn6YnHjeLUyVeeRuya2IPMZiHrVV3yAKMfAfknot1Prw97MR9LL5l1XoG; _ju_v=4.1_5.47; _ju_dm=cookie; _ju_dn=1; bm_sv=8EB8AEE88059F85E43E001C6304AF64C~YAAQzQplXyWQaXyEAQAAQyH59RKwlaWFUyAruHT9ssFb75HHslpzim9I92X0e5WxNV8+ZM2J5JtxnujKr78bojoNkpCV+LuZ83Lsj4L/64BjvObOFp+pQV0ishb4oftu9psRmOXTZoJiZovCVoL/p4W6RbzkfllkF2Hp1UjkWtkdMiY9KE976jrctAd1sGv7lTsZ3PLAv02JCdBMU4dMjWRceQebeLY/UW6E5FDNwv7XAHnLBy4tuvAK/wSrgg9KRhGVsvX+~1; _attn_=eyJ1Ijoie1wiY29cIjoxNjcwNTc0MDU0MjIxLFwidW9cIjoxNjcwNTc0MDU0MjIxLFwibWFcIjoyMTkwMCxcImluXCI6ZmFsc2UsXCJ2YWxcIjpcImRiMzBjODRlMWU2YzQ1MTNiYWMxZGZiZmY3YjRiMjExXCJ9In0=; __attentive_id=db30c84e1e6c4513bac1dfbff7b4b211; __attentive_cco=1670574054222; _hjSessionUser_1118926=eyJpZCI6Ijg4NmQ5NDVjLWRjNTUtNWY0NS04NmQ1LTIyZjg4YmVjOGRlNCIsImNyZWF0ZWQiOjE2NzA1NzQwNTQyOTQsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample=0; _hjSession_1118926=eyJpZCI6IjdjZGYxMTc4LWJmNDAtNGQ3MS05YTk2LWQ3NTY0MjA0M2UwNCIsImNyZWF0ZWQiOjE2NzA1NzQwNTQ0MDksImluU2FtcGxlIjpmYWxzZX0=; _hjAbsoluteSessionInProgress=0; _ju_dc=66edb293-779a-11ed-ba97-57e9dc04ee15; _ju_pn=1; __attentive_pv=1; __attentive_ss_referrer="ORGANIC"; __attentive_dv=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         95.101.10.209
HTTP/2 200 OK
content-type: image/webp
                                        
content-length: 107876
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=147095
content-disposition: inline; filename="best-of-anti-aging-oily-kit-120-B.webp"
etag: "9b41b6ee85da66dd8637eb007c301552"
last-modified: Wed, 30 Nov 2022 07:59:46 GMT
vary: Accept
x-amz-cf-id: MkZPbubuvYlbCTRy9Bj_Vj3i4HhffThly6VehwRmW8fD0vD-mjQFWg==
x-amz-cf-pop: FRA53-C1
x-amz-expiration: expiry-date="Sun, 31 Dec 2023 00:00:00 GMT", rule-id="transform_cache_ttl"
x-amz-meta-cleanquerystring: sfrm=jpg&sw=360