Report - go.goodlifestylenews.com/biocomplete1123/1a428d1bd18b06caec5f71f539eea2fc/55/leadsource/2407/1610/e666fab8a5525af3f47a112a31db65c9/mpmta

Report Overview

Visited public
2023-12-08 01:17:22
Tags
URL
go.goodlifestylenews.com/biocomplete1123/1a428d1bd18b06caec5f71f539eea2fc/55/leadsource/2407/1610/e666fab8a5525af3f47a112a31db65c9/mpmta
Finishing URL
gutcleanseprotocol.com/230914a/video/video.php?origexperimentalOrig=true&step=1&funnelSTPId=a0q3w00000DGs1lAAD&origuidOrig=db_bc3_vslstart_html_230922&origspidOrig=null&step=1&origdsidOrig=&origmainFunnelIdOrig=a0q3w00000DGs1kAAD&origExternalOrig=true&origExternalIDOrig=a0q3w00000DGs1kAAD&genericUrl=os220325a_ap-db_bc3_vslstart_html_230922&orignameOrig=os220325a_ap-db_bc3_vslstart_html_230922&origbrandOrig=Gundry%20MD&business_unit=a00f400000dk8tnaab&n=dbtcr&utm_campaign=gmd-db-biocomplete3-cpaeml-all-vsltcr-qqq-none&utm_campaign_id=7013w000001vCcoAAE&utm_content=banner_ad&utm_medium=cpa&utm_source=email&subid1=04a5712012674201a82424c14afc2e73&subid2=439&subid3=3415202737506852333&subid5=everflow&sessionid=988270353948
IP / ASN
172.67.172.49
#13335 CLOUDFLARENET
Title
Gundry MD - “My Insides Feel Clean Again” - Top Doctor Shares His Method (Do This)

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
vjs.zencdn.net	4968	2011-12-27	2012-05-21 10:26:59	2023-12-07 05:22:27	438 B	7.8 kB	151.101.194.217
static.cloudflareinsights.com	1294	2019-08-30	2019-09-24 16:34:56	2023-12-07 08:02:22	522 B	20 kB	104.16.57.101
ocsp.starfieldtech.com	6616	2003-03-06	2012-06-22 20:08:50	2023-12-07 05:10:23	692 B	5.3 kB	192.124.249.24
verifiedwebpage.com	unknown	2022-03-23	2022-03-23 19:03:14	2023-12-07 08:30:48	627 B	1.1 kB	104.21.55.80
fonts.googleapis.com	8877	2005-01-25	2013-06-10 22:14:26	2023-12-07 07:16:25	472 B	1.2 kB	142.250.74.106
www.unfytrk.com	unknown	2020-05-25	2020-07-30 16:37:47	2023-12-05 00:54:52	521 B	973 B	34.107.202.36
cdn.gundrymd.com	203560	2015-08-07	2019-03-26 20:04:54	2023-12-04 22:08:05	3.4 kB	535 kB	172.64.144.175
www2.ultimategutprotocol.com	unknown	2020-04-07	2022-06-22 12:15:02	2023-12-05 04:33:00	613 B	1.3 kB	172.64.152.168
app.upsellit.com	unknown	2005-01-15	2022-08-03 04:52:08	2023-12-07 14:29:42	472 B	826 B	208.118.62.69
fonts.gstatic.com	unknown	2008-02-11	2014-09-09 02:40:21	2023-12-07 07:59:33	566 B	16 kB	142.250.74.131
www2.gutcleanseprotocol.com	247035	2019-09-10	2020-07-18 00:24:35	2023-12-07 10:20:21	11 kB	17 kB	172.64.152.117
players.brightcove.net	3805	2005-02-08	2014-10-07 19:45:09	2023-12-07 19:02:47	460 B	230 kB	2.19.13.16
www.googletagmanager.com	75	2011-11-11	2013-05-22 04:07:37	2023-12-07 08:07:58	1.4 kB	329 kB	142.250.74.136
go.goodlifestylenews.com	unknown	2020-07-10	2022-06-02 23:11:17	2023-12-06 13:51:43	891 B	1.7 kB	104.21.30.61
cdn.gutcleanseprotocol.com	329660	2019-09-10	2021-10-22 19:21:44	2023-11-30 15:03:25	2.6 kB	35 kB	172.64.152.117
gutcleanseprotocol.com	231208	2019-09-10	2019-10-15 22:16:24	2023-12-05 07:51:20	16 kB	60 kB	172.64.152.117
www.upsellit.com	10480	2005-01-15	2017-01-30 02:46:53	2023-12-07 17:40:01	432 B	22 kB	34.117.39.58
stat.youniverssl.com	unknown	2021-11-10	2022-03-26 09:58:39	2023-12-04 22:22:16	3.9 kB	47 kB	172.64.144.222
status.rapidssl.com	6946	2002-04-05	2018-06-15 22:49:00	2023-12-07 05:09:06	343 B	735 B	192.229.221.95
bcboltgoldenh-a.akamaihd.net	192535	2009-09-14	2019-11-11 19:30:07	2023-12-04 22:08:07	1.2 kB	1.8 MB	104.123.68.154
region1.analytics.google.com	unknown	1997-09-15	2022-03-17 12:26:33	2023-12-07 08:05:07	1.7 kB	453 B	216.239.34.36
cf-images.us-east-1.prod.boltdns.net	4551	2015-09-22	2017-08-26 10:18:59	2023-12-07 21:07:44	549 B	23 kB	143.204.55.124
manifest.prod.boltdns.net	4807	2015-09-22	2016-08-20 16:15:56	2023-12-06 23:18:13	2.1 kB	137 kB	151.101.66.27
metrics.brightcove.com	3864	2005-02-04	2012-09-30 05:01:05	2023-12-07 22:51:47	14 kB	3.4 kB	35.244.232.184
www.google.no	25607	2001-02-26	2016-04-05 21:50:59	2023-12-07 07:13:36	599 B	578 B	142.250.74.163
thenewgutfix.com	142457	2017-11-15	2018-01-06 07:46:30	2023-12-07 10:32:48	458 B	101 kB	104.18.37.47
ajax.googleapis.com	12905	2005-01-25	2013-08-16 11:51:31	2023-12-07 08:17:45	449 B	31 kB	142.250.74.74
edge.api.brightcove.com	5023	2005-02-04	2016-06-01 19:26:23	2023-12-07 18:04:44	1.3 kB	5.7 kB	151.101.66.27

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2023-12-07	medium	goodlifestylenews.com	Sinkholed
2023-12-07	medium	goodlifestylenews.com	Sinkholed

ThreatFox

No alerts detected

JavaScript (31)

	URL	From	Size	First Seen	Last Seen
	stat.youniverssl.com/stat?callback=siteStatHandler&consume=%7B%22affParameters%22%3A%7B%22utmSource%22%3A%22email%22%2C%22utmMedium%22%3A%22cpa%22%2C%22utmCampaign%22%3A%22gmd-db-biocomplete3-cpaeml-all-vsltcr-qqq-none%22%2C%22utmCampaignId%22%3A%227013w000001vCcoAAE%22%2C%22utmContent%22%3A%22banner_ad%22%2C%22utmTerm%22%3Anull%2C%22subId1%22%3A%2204a5712012674201a82424c14afc2e73%22%2C%22subId2%22%3A%22439%22%2C%22subId3%22%3A%223415202737506852333%22%2C%22subId4%22%3Anull%2C%22subId5%22%3A%22everflow%22%7D%2C%22sessionid%22%3A%22988270353948%22%2C%22url%22%3A%22https%3A%2F%2Fgutcleanseprotocol.com%2F230914a%2Fvideo%2Fvideo.php%3ForigexperimentalOrig%3Dtrue%26step%3D1%26funnelSTPId%3Da0q3w00000DGs1lAAD%26origuidOrig%3Ddb_bc3_vslstart_html_230922%26origspidOrig%3Dnull%26step%3D1%26origdsidOrig%3D%26origmainFunnelIdOrig%3Da0q3w00000DGs1kAAD%26origExternalOrig%3Dtrue%26origExternalIDOrig%3Da0q3w00000DGs1kAAD%26genericUrl%3Dos220325a_ap-db_bc3_vslstart_html_230922%26orignameOrig%3Dos220325a_ap-db_bc3_vslstart_html_230922%26origbrandOrig%3DGundry%2520MD%26business_unit%3Da00f400000dk8tnaab%26n%3Ddbtcr%26utm_campaign%3Dgmd-db-biocomplete3-cpaeml-all-vsltcr-qqq-none%26utm_campaign_id%3D7013w000001vCcoAAE%26utm_content%3Dbanner_ad%26utm_medium%3Dcpa%26utm_source%3Demail%26subid1%3D04a5712012674201a82424c14afc2e73%26subid2%3D439%26subid3%3D3415202737506852333%26subid5%3Deverflow%26sessionid%3D988270353948%22%7D&id=4cb725660c43031e3b06c75892d96c5a&url=https%3A%2F%2Fgutcleanseprotocol.com%2F230914a%2Fvideo%2Fvideo.php%3ForigexperimentalOrig%3Dtrue%26step%3D1%26funnelSTPId%3Da0q3w00000DGs1lAAD%26origuidOrig%3Ddb_bc3_vslstart_html_230922%26origspidOrig%3Dnull%26step%3D1%26origdsidOrig%3D%26origmainFunnelIdOrig%3Da0q3w00000DGs1kAAD%26origExternalOrig%3Dtrue%26origExternalIDOrig%3Da0q3w00000DGs1kAAD%26genericUrl%3Dos220325a_ap-db_bc3_vslstart_html_230922%26orignameOrig%3Dos220325a_ap-db_bc3_vslstart_html_230922%26origbrandOrig%3DGundry%2520MD%26business_unit%3Da00f400000dk8tnaab%26n%3Ddbtcr%26utm_campaign%3Dgmd-db-biocomplete3-cpaeml-all-vsltcr-qqq-none%26utm_campaign_id%3D7013w000001vCcoAAE%26utm_content%3Dbanner_ad%26utm_medium%3Dcpa%26utm_source%3Demail%26subid1%3D04a5712012674201a82424c14afc2e73%26subid2%3D439%26subid3%3D3415202737506852333%26subid5%3Deverflow%26sessionid%3D988270353948&sessionid=988270353948	ScriptElement	4.7 kB	2024-08-20	2024-08-20
Pretty URL stat.youniverssl.com/stat?callback=siteStatHandler&consume=%7B%22affParameters%22%3A%7B%22utmSource%22%3A%22email%22%2C%22utmMedium%22%3A%22cpa%22%2C%22utmCampaign%22%3A%22gmd-db-biocomplete3-cpaeml-all-vsltcr-qqq-none%22%2C%22utmCampaignId%22%3A%227013w000001vCcoAAE%22%2C%22utmContent%22%3A%22banner_ad%22%2C%22utmTerm%22%3Anull%2C%22subId1%22%3A%2204a5712012674201a82424c14afc2e73%22%2C%22subId2%22%3A%22439%22%2C%22subId3%22%3A%223415202737506852333%22%2C%22subId4%22%3Anull%2C%22subId5%22%3A%22everflow%22%7D%2C%22sessionid%22%3A%22988270353948%22%2C%22url%22%3A%22https%3A%2F%2Fgutcleanseprotocol.com%2F230914a%2Fvideo%2Fvideo.php%3ForigexperimentalOrig%3Dtrue%26step%3D1%26funnelSTPId%3Da0q3w00000DGs1lAAD%26origuidOrig%3Ddb_bc3_vslstart_html_230922%26origspidOrig%3Dnull%26step%3D1%26origdsidOrig%3D%26origmainFunnelIdOrig%3Da0q3w00000DGs1kAAD%26origExternalOrig%3Dtrue%26origExternalIDOrig%3Da0q3w00000DGs1kAAD%26genericUrl%3Dos220325a_ap-db_bc3_vslstart_html_230922%26orignameOrig%3Dos220325a_ap-db_bc3_vslstart_html_230922%26origbrandOrig%3DGundry%2520MD%26business_unit%3Da00f400000dk8tnaab%26n%3Ddbtcr%26utm_campaign%3Dgmd-db-biocomplete3-cpaeml-all-vsltcr-qqq-none%26utm_campaign_id%3D7013w000001vCcoAAE%26utm_content%3Dbanner_ad%26utm_medium%3Dcpa%26utm_source%3Demail%26subid1%3D04a5712012674201a82424c14afc2e73%26subid2%3D439%26subid3%3D3415202737506852333%26subid5%3Deverflow%26sessionid%3D988270353948%22%7D&id=4cb725660c43031e3b06c75892d96c5a&url=https%3A%2F%2Fgutcleanseprotocol.com%2F230914a%2Fvideo%2Fvideo.php%3ForigexperimentalOrig%3Dtrue%26step%3D1%26funnelSTPId%3Da0q3w00000DGs1lAAD%26origuidOrig%3Ddb_bc3_vslstart_html_230922%26origspidOrig%3Dnull%26step%3D1%26origdsidOrig%3D%26origmainFunnelIdOrig%3Da0q3w00000DGs1kAAD%26origExternalOrig%3Dtrue%26origExternalIDOrig%3Da0q3w00000DGs1kAAD%26genericUrl%3Dos220325a_ap-db_bc3_vslstart_html_230922%26orignameOrig%3Dos220325a_ap-db_bc3_vslstart_html_230922%26origbrandOrig%3DGundry%2520MD%26business_unit%3Da00f400000dk8tnaab%26n%3Ddbtcr%26utm_campaign%3Dgmd-db-biocomplete3-cpaeml-all-vsltcr-qqq-none%26utm_campaign_id%3D7013w000001vCcoAAE%26utm_content%3Dbanner_ad%26utm_medium%3Dcpa%26utm_source%3Demail%26subid1%3D04a5712012674201a82424c14afc2e73%26subid2%3D439%26subid3%3D3415202737506852333%26subid5%3Deverflow%26sessionid%3D988270353948&sessionid=988270353948 IP 172.64.144.222 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-08-20 16:24 Last Seen2024-08-20 16:24 Times Seen1 Hash 9eba520fad0e896aaff9a3f44ca460ac ce6c2d6f4315dcd7d549fa5139b5d199cbee64c7 d30c01d83aa30f188c170c8d8624b623772241c1e557a2c81e69206815f8eaff Loading...

	www.googletagmanager.com/gtm.js?id=GTM-5PNTFNV	ScriptElement	552 kB	2023-12-08	2023-12-08
Pretty URL www.googletagmanager.com/gtm.js?id=GTM-5PNTFNV IP 142.250.74.136 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-12-08 02:17 Last Seen2023-12-08 02:17 Times Seen2 Hash c426282f9fc84d916b4ac14cefb43e5d e88f98d87f14f9fed986d75257b52eb05ab0c9ea 264e538d553d0f49a2b080a00690c300dde8f48d902c3896100ccb6247f7eb14 Loading...

	unknown	ScriptElement	891 B	2023-12-05	2024-08-20
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-12-05 00:55 Last Seen2024-08-20 16:45 Times Seen48 Hash 7b24ce978032e78c0bfe1c165c10bb06 2abdfc89035045a26993fd25e5ae19ed881bc5ac c11c803ae9727112829803d3fb3d88eb066291316ea492bbe2de9f2ac670b5ef Loading...

	www2.gutcleanseprotocol.com/assets/js/site.js	ScriptElement	20 kB	2023-10-24	2024-08-21
Pretty URL www2.gutcleanseprotocol.com/assets/js/site.js IP 172.64.152.117 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-10-24 21:35 Last Seen2024-08-21 03:34 Times Seen60 Hash c8efeddbb2df37d093edb9c02e28cf9d 7eda232215d9c585c8e59ddd74a4421056bd6866 ec7c87790e05cec895a71acbf832f2bfce04157414cca4b8123e41d35df9e29e Loading...

	www.googletagmanager.com/gtag/js?id=G-5MM7TKXSPX&l=dataLayer&cx=c	ScriptElement	259 kB	2023-12-08	2023-12-08
Pretty URL www.googletagmanager.com/gtag/js?id=G-5MM7TKXSPX&l=dataLayer&cx=c IP 142.250.74.136 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-12-08 02:17 Last Seen2023-12-08 02:17 Times Seen2 Hash e0932d5ea3ecf0ca0bf8fa77abd90510 002b4d9b7710244fa20be14dac3acbe6af9f8b10 12bf81dd77ed6708dbe4cf40aab5915949272a6e956f1d5cc7da2120d5baae78 Loading...

	gutcleanseprotocol.com/js/jquery.cookie.js	ScriptElement	2.0 kB	2023-03-07	2025-04-27
Pretty URL gutcleanseprotocol.com/js/jquery.cookie.js IP 172.64.152.117 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 12:11 Last Seen2025-04-27 09:23 Times Seen327 Hash aaa7ca61325b28ea8ea9a12809d65cb9 97184896aad9b79a44646ee6a92553d5d9f3ded3 0caab7de2b6d190e7fad15e5e81b2e8130ac073fe1960149c597b9ac12509d1c Loading...

	www2.gutcleanseprotocol.com/request-ip	ScriptElement	61 B	2023-10-21	2025-05-09
Pretty URL www2.gutcleanseprotocol.com/request-ip IP 172.64.152.117 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-10-21 14:49 Last Seen2025-05-09 16:24 Times Seen743 Hash 8f3cdbb688ba1ff445fe6aed6254addf b6028270dcd610eac5265784bc14e8d335d6ed74 fcfdbef4c7fa2b9fca91e95c121bd9fc29e6ebe20273c86c274c5b1b7e4470f3 Loading...

	players.brightcove.net/6058004206001/LemwzE05e_default/index.min.js	ScriptElement	858 kB	2023-09-16	2025-04-17
Pretty URL players.brightcove.net/6058004206001/LemwzE05e_default/index.min.js IP 2.19.13.16 ASN #719 Elisa Oyj Introduced by scriptElement Embedded in HTML false Observations First Seen2023-09-16 14:58 Last Seen2025-04-17 17:00 Times Seen285 Hash a87ecf03665a5e5e5d49ab133eca6a8a ed052c79ab5c629cdfcd66c056cb45d596fdc299 99ea74ff5e691834103a93e70695b511096743d33abe9302b44c6b72e74bed3c Loading...

	www.googletagmanager.com/gtm.js?id=GTM-5WLKKPD	ScriptElement	555 kB	2023-12-08	2023-12-08
Pretty URL www.googletagmanager.com/gtm.js?id=GTM-5WLKKPD IP 142.250.74.136 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-12-08 02:17 Last Seen2023-12-08 02:17 Times Seen1 Hash f3b83d3b9cc45e2aea3618bc74a685cd 33db8d50cea9eca504dd23afe91a33e3d8f55fc5 82ac22ab43f9f4c925b4ca8920b2e9c808c08714491658031cb65a3d12d5c7a9 Loading...

	www.upsellit.com/active/goldenhippo.jsp	ScriptElement	94 kB	2023-12-08	2023-12-09
Pretty URL www.upsellit.com/active/goldenhippo.jsp IP 34.117.39.58 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-12-08 02:17 Last Seen2023-12-09 02:04 Times Seen11 Hash ad2fcf8907b3a3ac4095e72be3aa2c56 7d83c052bacf287ed26f1e59cd6396d7d771d933 5b04c962a7caa67ff4a238d15057b9fccbb0da9239b60cfdca0296e93652dcc2 Loading...

	gutcleanseprotocol.com/theme/js/brightcove.js	ScriptElement	313 B	2023-03-29	2024-09-19
Pretty URL gutcleanseprotocol.com/theme/js/brightcove.js IP 172.64.152.117 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-29 21:40 Last Seen2024-09-19 21:20 Times Seen87 Hash 48934ef147981d87f63966f99994225f bf212513d8ae91a2103777b40bc88f60f9834fc1 abe6168b8ab36cb045f6aa1c713f69a9278cd29628377a46102a3d6655821bda Loading...

	static.cloudflareinsights.com/beacon.min.js/v84a3a4012de94ce1a686ba8c167c359c1696973893317	ScriptElement	20 kB	2023-10-13	2025-05-09
Pretty URL static.cloudflareinsights.com/beacon.min.js/v84a3a4012de94ce1a686ba8c167c359c1696973893317 IP 104.16.57.101 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-10-13 06:51 Last Seen2025-05-09 13:23 Times Seen17152 Hash dd1d068fdb5fe90b6c05a5b3940e088c 0d96f9df8772633a9df4c81cf323a4ef8998ba59 6153d13804862b0fc1c016cf1129f34cb7c6185f2cf4bf1a3a862eecdab50101 Loading...

	unknown	ScriptElement	769 B	2023-09-16	2025-04-17
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-09-16 14:58 Last Seen2025-04-17 16:50 Times Seen91 Hash f4eb9c486784731548804f2024d7c751 160064d7358e03854e81eefa1f67ab516358415f aed9be7fd7d74c51c159bcdd12cd4b7ee56caea4072a998bd0cfba0c9b5f6ba7 Loading...

	gutcleanseprotocol.com/230914a/video/video.php?origexperimentalOrig=true&step=1&funnelSTPId=a0q3w00000DGs1lAAD&origuidOrig=db_bc3_vslstart_html_230922&origspidOrig=null&step=1&origdsidOrig=&origmainFunnelIdOrig=a0q3w00000DGs1kAAD&origExternalOrig=true&origExternalIDOrig=a0q3w00000DGs1kAAD&genericUrl=os220325a_ap-db_bc3_vslstart_html_230922&orignameOrig=os220325a_ap-db_bc3_vslstart_html_230922&origbrandOrig=Gundry%20MD&business_unit=a00f400000dk8tnaab&n=dbtcr&utm_campaign=gmd-db-biocomplete3-cpaeml-all-vsltcr-qqq-none&utm_campaign_id=7013w000001vCcoAAE&utm_content=banner_ad&utm_medium=cpa&utm_source=email&subid1=04a5712012674201a82424c14afc2e73&subid2=439&subid3=3415202737506852333&subid5=everflow&sessionid=988270353948	ScriptElement	412 B	2023-12-05	2024-09-19
Pretty URL gutcleanseprotocol.com/230914a/video/video.php?origexperimentalOrig=true&step=1&funnelSTPId=a0q3w00000DGs1lAAD&origuidOrig=db_bc3_vslstart_html_230922&origspidOrig=null&step=1&origdsidOrig=&origmainFunnelIdOrig=a0q3w00000DGs1kAAD&origExternalOrig=true&origExternalIDOrig=a0q3w00000DGs1kAAD&genericUrl=os220325a_ap-db_bc3_vslstart_html_230922&orignameOrig=os220325a_ap-db_bc3_vslstart_html_230922&origbrandOrig=Gundry%20MD&business_unit=a00f400000dk8tnaab&n=dbtcr&utm_campaign=gmd-db-biocomplete3-cpaeml-all-vsltcr-qqq-none&utm_campaign_id=7013w000001vCcoAAE&utm_content=banner_ad&utm_medium=cpa&utm_source=email&subid1=04a5712012674201a82424c14afc2e73&subid2=439&subid3=3415202737506852333&subid5=everflow&sessionid=988270353948 IP 172.64.152.117 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-12-05 00:55 Last Seen2024-09-19 21:19 Times Seen32 Hash 525abda61dd3c4a01bf9fc473776d011 8178d1fbd9bff484e5bbb125ace927605d055363 afa2e94fe3758b07a437d3e9241ce85b256f4e30a250828c6c35355d77470adb Loading...

	vjs.zencdn.net/vttjs/0.15.3/vtt.global.min.js	ScriptElement	21 kB	2023-03-07	2025-05-09
Pretty URL vjs.zencdn.net/vttjs/0.15.3/vtt.global.min.js IP 151.101.194.217 ASN #54113 FASTLY Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 13:01 Last Seen2025-05-09 16:24 Times Seen1329 Hash 9ab357d51e365493dab6cf243489069b 10869d59b20d631a6b6d31bd2112ad55c3a3206c 2782883aa2e55fe305dd71c4b8a79cdecd0e3c7b62880f7adf37aafb33739a4a Loading...

	www2.gutcleanseprotocol.com/proxy/funnel/stats/alternsave/?event=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	ScriptElement	29 B	2023-03-07	2025-04-17
Pretty URL www2.gutcleanseprotocol.com/proxy/funnel/stats/alternsave/?event=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 IP 172.64.152.117 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 23:57 Last Seen2025-04-17 17:00 Times Seen301 Hash 666c82637166f160b430c3a13caf3b30 45f23499be7924955fa257ce10c2a76412e0a16c b5b1625932b3d2b242b95c8680756c5d79135956bb1f6fd0b9544261a9d56389 Loading...

	gutcleanseprotocol.com/230914a/video/video.php?origexperimentalOrig=true&step=1&funnelSTPId=a0q3w00000DGs1lAAD&origuidOrig=db_bc3_vslstart_html_230922&origspidOrig=null&step=1&origdsidOrig=&origmainFunnelIdOrig=a0q3w00000DGs1kAAD&origExternalOrig=true&origExternalIDOrig=a0q3w00000DGs1kAAD&genericUrl=os220325a_ap-db_bc3_vslstart_html_230922&orignameOrig=os220325a_ap-db_bc3_vslstart_html_230922&origbrandOrig=Gundry%20MD&business_unit=a00f400000dk8tnaab&n=dbtcr&utm_campaign=gmd-db-biocomplete3-cpaeml-all-vsltcr-qqq-none&utm_campaign_id=7013w000001vCcoAAE&utm_content=banner_ad&utm_medium=cpa&utm_source=email&subid1=04a5712012674201a82424c14afc2e73&subid2=439&subid3=3415202737506852333&subid5=everflow&sessionid=988270353948	ScriptElement	416 B	2023-12-05	2025-04-17
Pretty URL gutcleanseprotocol.com/230914a/video/video.php?origexperimentalOrig=true&step=1&funnelSTPId=a0q3w00000DGs1lAAD&origuidOrig=db_bc3_vslstart_html_230922&origspidOrig=null&step=1&origdsidOrig=&origmainFunnelIdOrig=a0q3w00000DGs1kAAD&origExternalOrig=true&origExternalIDOrig=a0q3w00000DGs1kAAD&genericUrl=os220325a_ap-db_bc3_vslstart_html_230922&orignameOrig=os220325a_ap-db_bc3_vslstart_html_230922&origbrandOrig=Gundry%20MD&business_unit=a00f400000dk8tnaab&n=dbtcr&utm_campaign=gmd-db-biocomplete3-cpaeml-all-vsltcr-qqq-none&utm_campaign_id=7013w000001vCcoAAE&utm_content=banner_ad&utm_medium=cpa&utm_source=email&subid1=04a5712012674201a82424c14afc2e73&subid2=439&subid3=3415202737506852333&subid5=everflow&sessionid=988270353948 IP 172.64.152.117 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-12-05 00:55 Last Seen2025-04-17 16:50 Times Seen134 Hash 65eab126543f2a45e8d99577fd914172 46f4888a05bde8b35288451ea188faafdaecf1f6 390ba86eb1ba52bcbc32124d89151c028f2304e1e705142c1ec65fba05323e77 Loading...

	gutcleanseprotocol.com/theme/js/network.js	ScriptElement	979 B	2023-09-16	2024-09-19
Pretty URL gutcleanseprotocol.com/theme/js/network.js IP 172.64.152.117 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-09-16 14:58 Last Seen2024-09-19 21:19 Times Seen34 Hash 25a089112c1f71297e405e1c54bf0fb2 90b05cca3cadff4b31cd3e632c71667926a76e93 853cc483dc280b86450ed03d838d16a30bb17ae4ef9c51db5f22069072aa73ab Loading...

	gutcleanseprotocol.com/230914a/video/video.php?origexperimentalOrig=true&step=1&funnelSTPId=a0q3w00000DGs1lAAD&origuidOrig=db_bc3_vslstart_html_230922&origspidOrig=null&step=1&origdsidOrig=&origmainFunnelIdOrig=a0q3w00000DGs1kAAD&origExternalOrig=true&origExternalIDOrig=a0q3w00000DGs1kAAD&genericUrl=os220325a_ap-db_bc3_vslstart_html_230922&orignameOrig=os220325a_ap-db_bc3_vslstart_html_230922&origbrandOrig=Gundry%20MD&business_unit=a00f400000dk8tnaab&n=dbtcr&utm_campaign=gmd-db-biocomplete3-cpaeml-all-vsltcr-qqq-none&utm_campaign_id=7013w000001vCcoAAE&utm_content=banner_ad&utm_medium=cpa&utm_source=email&subid1=04a5712012674201a82424c14afc2e73&subid2=439&subid3=3415202737506852333&subid5=everflow&sessionid=988270353948	ScriptElement	1.1 kB	2023-12-05	2024-08-20
Pretty URL gutcleanseprotocol.com/230914a/video/video.php?origexperimentalOrig=true&step=1&funnelSTPId=a0q3w00000DGs1lAAD&origuidOrig=db_bc3_vslstart_html_230922&origspidOrig=null&step=1&origdsidOrig=&origmainFunnelIdOrig=a0q3w00000DGs1kAAD&origExternalOrig=true&origExternalIDOrig=a0q3w00000DGs1kAAD&genericUrl=os220325a_ap-db_bc3_vslstart_html_230922&orignameOrig=os220325a_ap-db_bc3_vslstart_html_230922&origbrandOrig=Gundry%20MD&business_unit=a00f400000dk8tnaab&n=dbtcr&utm_campaign=gmd-db-biocomplete3-cpaeml-all-vsltcr-qqq-none&utm_campaign_id=7013w000001vCcoAAE&utm_content=banner_ad&utm_medium=cpa&utm_source=email&subid1=04a5712012674201a82424c14afc2e73&subid2=439&subid3=3415202737506852333&subid5=everflow&sessionid=988270353948 IP 172.64.152.117 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-12-05 00:55 Last Seen2024-08-20 16:45 Times Seen17 Hash cd03c623be1aeabb79de5b7d7de6d76b 6505c1675bd342b5e9f022f849f6b54b0cafc973 ba2c9d8d3acddf2ca765fce99fb06f5782f7cdf5c20045664e572b0cffe72517 Loading...

	gutcleanseprotocol.com/230914a/video/video.php?origexperimentalOrig=true&step=1&funnelSTPId=a0q3w00000DGs1lAAD&origuidOrig=db_bc3_vslstart_html_230922&origspidOrig=null&step=1&origdsidOrig=&origmainFunnelIdOrig=a0q3w00000DGs1kAAD&origExternalOrig=true&origExternalIDOrig=a0q3w00000DGs1kAAD&genericUrl=os220325a_ap-db_bc3_vslstart_html_230922&orignameOrig=os220325a_ap-db_bc3_vslstart_html_230922&origbrandOrig=Gundry%20MD&business_unit=a00f400000dk8tnaab&n=dbtcr&utm_campaign=gmd-db-biocomplete3-cpaeml-all-vsltcr-qqq-none&utm_campaign_id=7013w000001vCcoAAE&utm_content=banner_ad&utm_medium=cpa&utm_source=email&subid1=04a5712012674201a82424c14afc2e73&subid2=439&subid3=3415202737506852333&subid5=everflow&sessionid=988270353948	ScriptElement	243 B	2023-12-05	2024-08-20
Pretty URL gutcleanseprotocol.com/230914a/video/video.php?origexperimentalOrig=true&step=1&funnelSTPId=a0q3w00000DGs1lAAD&origuidOrig=db_bc3_vslstart_html_230922&origspidOrig=null&step=1&origdsidOrig=&origmainFunnelIdOrig=a0q3w00000DGs1kAAD&origExternalOrig=true&origExternalIDOrig=a0q3w00000DGs1kAAD&genericUrl=os220325a_ap-db_bc3_vslstart_html_230922&orignameOrig=os220325a_ap-db_bc3_vslstart_html_230922&origbrandOrig=Gundry%20MD&business_unit=a00f400000dk8tnaab&n=dbtcr&utm_campaign=gmd-db-biocomplete3-cpaeml-all-vsltcr-qqq-none&utm_campaign_id=7013w000001vCcoAAE&utm_content=banner_ad&utm_medium=cpa&utm_source=email&subid1=04a5712012674201a82424c14afc2e73&subid2=439&subid3=3415202737506852333&subid5=everflow&sessionid=988270353948 IP 172.64.152.117 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-12-05 00:55 Last Seen2024-08-20 16:45 Times Seen23 Hash 10d70d3669b867366e51bb3202ee4874 c18dd774fe47b3657ab28ef2a4392241289fa2d9 bf599eb990e8aef1be090bd6e721b3e70d715cdc815fdc52483220a4e6515bc1 Loading...

	unknown	ScriptElement	649 B	2023-11-07	2025-04-17
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-11-07 16:28 Last Seen2025-04-17 17:00 Times Seen747 Hash e7698504eec5d01462862fbb30a8333a 9ba7fb5a2afce9d667a5f1f3b7e90b7cce533ebb 4d7624c0d2923fa76af8b6a0e710c317c07dad079788d1782cb0b1500fc84cf8 Loading...

	unknown	EventHandler	22 B	2023-05-21	2025-04-17
Pretty Introduced by eventHandler Embedded in HTML false Observations First Seen2023-05-21 19:04 Last Seen2025-04-17 16:50 Times Seen153 Hash a803887219588df2ecea7db2b75262af 4530d9929df6450b1ecd24547e595619d80a8abd f26c2cd52d8d348aecabd42a0c4934c466192462076d7ae17b04a3e1ad91ec23 Loading...

	ajax.googleapis.com/ajax/libs/jquery/3.1.0/jquery.min.js	ScriptElement	86 kB	2023-03-07	2025-05-11
Pretty URL ajax.googleapis.com/ajax/libs/jquery/3.1.0/jquery.min.js IP 142.250.74.74 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02 Last Seen2025-05-11 07:21 Times Seen4555 Hash 05e51b1db558320f1939f9789ccf5c8f c72c1735b4d903d90dd51225ebefb8c74ebbc51f 702b9e051e82b32038ffdb33a4f7eb5f7b38f4cf6f514e4182d8898f4eb0b7fb Loading...

	gutcleanseprotocol.com/theme/js/videoHelpers.js	ScriptElement	206 B	2023-09-16	2024-09-19
Pretty URL gutcleanseprotocol.com/theme/js/videoHelpers.js IP 172.64.152.117 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-09-16 14:58 Last Seen2024-09-19 21:19 Times Seen33 Hash ce4903d67c2b3d7a357c274f3ee8af82 64afc24d2b69a8f81611754c47f7c473a51c7513 99730c1b144723d7a2fe27c1f710ae49953656e227266c21845379f8a6530730 Loading...

	gutcleanseprotocol.com/230914a/video/video.php?origexperimentalOrig=true&step=1&funnelSTPId=a0q3w00000DGs1lAAD&origuidOrig=db_bc3_vslstart_html_230922&origspidOrig=null&step=1&origdsidOrig=&origmainFunnelIdOrig=a0q3w00000DGs1kAAD&origExternalOrig=true&origExternalIDOrig=a0q3w00000DGs1kAAD&genericUrl=os220325a_ap-db_bc3_vslstart_html_230922&orignameOrig=os220325a_ap-db_bc3_vslstart_html_230922&origbrandOrig=Gundry%20MD&business_unit=a00f400000dk8tnaab&n=dbtcr&utm_campaign=gmd-db-biocomplete3-cpaeml-all-vsltcr-qqq-none&utm_campaign_id=7013w000001vCcoAAE&utm_content=banner_ad&utm_medium=cpa&utm_source=email&subid1=04a5712012674201a82424c14afc2e73&subid2=439&subid3=3415202737506852333&subid5=everflow&sessionid=988270353948	ScriptElement	1.8 kB	2023-12-05	2025-04-17
Pretty URL gutcleanseprotocol.com/230914a/video/video.php?origexperimentalOrig=true&step=1&funnelSTPId=a0q3w00000DGs1lAAD&origuidOrig=db_bc3_vslstart_html_230922&origspidOrig=null&step=1&origdsidOrig=&origmainFunnelIdOrig=a0q3w00000DGs1kAAD&origExternalOrig=true&origExternalIDOrig=a0q3w00000DGs1kAAD&genericUrl=os220325a_ap-db_bc3_vslstart_html_230922&orignameOrig=os220325a_ap-db_bc3_vslstart_html_230922&origbrandOrig=Gundry%20MD&business_unit=a00f400000dk8tnaab&n=dbtcr&utm_campaign=gmd-db-biocomplete3-cpaeml-all-vsltcr-qqq-none&utm_campaign_id=7013w000001vCcoAAE&utm_content=banner_ad&utm_medium=cpa&utm_source=email&subid1=04a5712012674201a82424c14afc2e73&subid2=439&subid3=3415202737506852333&subid5=everflow&sessionid=988270353948 IP 172.64.152.117 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-12-05 00:55 Last Seen2025-04-17 16:50 Times Seen79 Hash c3af5ee0d936d539ac46228ac4dd76b5 1c10890d22a24a5a47ae67640df1ffd9324cdbf6 94fb825b220a9533a0d9e5ff320f7948eb4effac9531d8a83d3b6c49a6dfd640 Loading...

	stat.youniverssl.com/js/cscript.js?v=1	ScriptElement	8.8 kB	2023-03-07	2024-09-20
Pretty URL stat.youniverssl.com/js/cscript.js?v=1 IP 172.64.144.222 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 13:01 Last Seen2024-09-20 19:53 Times Seen267 Hash 838091920c5ca36b093c86693ff62940 7f9aa226771df451fbe4a38d5671d5294c25b776 b078999f1e87fb1a80a941371723dc584673d28de33c3d69a8d98688f4dbdea1 Loading...

	app.upsellit.com/utility/session_data.jsp?extended=false&si=ml90mg_1701998235	ScriptElement	523 B	2023-03-07	2025-03-26
Pretty URL app.upsellit.com/utility/session_data.jsp?extended=false&si=ml90mg_1701998235 IP 208.118.62.69 ASN #7296 ALCHEMYNET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:31 Last Seen2025-03-26 16:12 Times Seen603 Hash a60fc4fa7a7e9171a6186a270dbf41ed 23b9453393d4949554b1a03ef95a21bc04c143a4 c7b3b7d0d799ec1b798e80938a5be07a28f0b31dc2ed62c402cd84446ce8b6a7 Loading...

	stat.youniverssl.com/js/fp.min.js	ScriptElement	32 kB	2023-04-06	2025-05-06
Pretty URL stat.youniverssl.com/js/fp.min.js IP 172.64.144.222 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-04-06 17:21 Last Seen2025-05-06 10:02 Times Seen490 Hash cc9c5b0862e4e039957bbc0f6c08a3c9 e9edca8399e0b760271972bb37bf573fb224bbdd 561df1b2a900c7564a7c7ce397c38d145d1fd19e9dace210902125bd5b5a8df4 Loading...

	gutcleanseprotocol.com/230914a/video/js/video.js	ScriptElement	757 B	2023-09-16	2024-08-21
Pretty URL gutcleanseprotocol.com/230914a/video/js/video.js IP 172.64.152.117 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-09-16 14:58 Last Seen2024-08-21 06:43 Times Seen69 Hash c1358d4f1e1a87177fd934ba8f0130ae a3479b723c49a9d0b6c1657b069df249ffebfb1b 6c7d9204baa7b9148fcc7881f799cf0a4f1ad543e67dad7b43955b1aa8c99b40 Loading...

	unknown	ScriptElement	437 B	2023-03-07	2025-04-17
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 23:57 Last Seen2025-04-17 17:00 Times Seen290 Hash 27052a404aab3892f5788ec60541a3ed dca1bea0185d875be22e17b46076c78599eca269 0b0a69e82241b26958b8b12c6e2e1977419c54f788a4d9810a8ff4790341a2d9 Loading...

		Size	First Seen	Last Seen
	#1 Eval - 59eba45f82957d24d8acc413fe2c9f5c	259 B	2023-07-14 23:22	2025-05-09 16:24
Pretty Observations First Seen2023-07-14 23:22 Last Seen2025-05-09 16:24 Times Seen587 Hash 59eba45f82957d24d8acc413fe2c9f5c 2aadd1cc717c77fb670d687956adea826270baaf b15a381f431696bae7f5b1d67c5327de431a1d469aff62e526676586ff5410fa Loading...

HTTP Transactions (73)

URL IP Response Size

ocsp.starfieldtech.com/

192.124.249.24

2.1 kB

URL
ocsp.starfieldtech.com/
IP
192.124.249.24:0
ASN
#30148 SUCURI-SEC

File type
data
Size
2.1 kB (2149 bytes)
Hash
6b049d460619d9e0fa3f02034505e200
de0a2831cc036091a563f085aa8bfae93cc41072
68cae5446a64f1b9d275c103cfdcd1d07696c18838f2c92d19f85eee43f061d0

HTTP Headers

POST / HTTP/1.1
Host: ocsp.starfieldtech.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Fri, 08 Dec 2023 01:17:03 GMT
Content-Type: application/ocsp-response
Content-Length: 2149
Connection: keep-alive
X-Sucuri-ID: 19024
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Thu, 07 Dec 2023 11:16:15 GMT
Expires: Fri, 08 Dec 2023 11:16:15 GMT
ETag: "de0a2831cc036091a563f085aa8bfae93cc41072"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"

www.unfytrk.com/NX2GBD/641ZRJ/?sub1=3415202737506852333

34.107.202.36

302 Found

188 B

URL User Request GET HTTP/2
www.unfytrk.com/NX2GBD/641ZRJ/?sub1=3415202737506852333
IP
34.107.202.36:443
ASN
#15169 GOOGLE

Certificate
IssuerStarfield Technologies, Inc.
Subjectactitrk.com
Fingerprint70:1E:22:66:6F:72:54:D0:24:31:22:2F:3F:7E:E3:28:22:93:64:99
ValidityThu, 21 Sep 2023 18:15:59 GMT - Fri, 19 Jan 2024 12:27:41 GMT

File type
HTML document, ASCII text
Size
188 B (188 bytes)
Hash
416c8127199348371b95dd9731b3bdd2
13bc1ac5985f1db2fa1ccbaed233dbbba43169a2
7cfdc47c6bcd98d28e9d490ba00609af6933bbc2d15eefca1a165d0b04a3298b

HTTP Headers

GET /NX2GBD/641ZRJ/?sub1=3415202737506852333 HTTP/1.1
Host: www.unfytrk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
server: nginx
date: Fri, 08 Dec 2023 01:17:03 GMT
content-type: text/html; charset=utf-8
content-length: 188
accept-ch: Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Model
location: https://www2.ultimategutprotocol.com/cid/7013w000001vCcoAAE?subid1=04a5712012674201a82424c14afc2e73&subid2=439&subid3=3415202737506852333&subid5=everflow
set-cookie: uniqueClick_641ZRJ=1d6270dc-501b-46f9-95d3-c04437a75948:1701998223; Path=/; Expires=Sat, 09 Dec 2023 01:17:03 GMT; Secure; SameSite=None
transaction_id=04a5712012674201a82424c14afc2e73; Path=/; Expires=Thu, 07 Mar 2024 01:17:03 GMT; Secure; SameSite=None
vary: Origin
x-eflow-request-id: 9795ff18-7bde-4515-bfec-97dbe077dfc0
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

ocsp.starfieldtech.com/

192.124.249.36

2.1 kB

URL
ocsp.starfieldtech.com/
IP
192.124.249.36:0
ASN
#30148 SUCURI-SEC

File type
data
Size
2.1 kB (2149 bytes)
Hash
6b049d460619d9e0fa3f02034505e200
de0a2831cc036091a563f085aa8bfae93cc41072
68cae5446a64f1b9d275c103cfdcd1d07696c18838f2c92d19f85eee43f061d0

HTTP Headers

POST / HTTP/1.1
Host: ocsp.starfieldtech.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Fri, 08 Dec 2023 01:17:03 GMT
Content-Type: application/ocsp-response
Content-Length: 2149
Connection: keep-alive
X-Sucuri-ID: 19036
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Thu, 07 Dec 2023 11:16:15 GMT
Expires: Fri, 08 Dec 2023 11:16:15 GMT
ETag: "de0a2831cc036091a563f085aa8bfae93cc41072"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"

verifiedwebpage.com/go?ehash=1a428d1bd18b06caec5f71f539eea2fc&product=34852&ar=55&cid=2407&lid=1610&slhash=e666fab8a5525af3f47a112a31db65c9&mtaid=mpmta&cid2=[s8]

104.21.55.80

302 Found

0 B

URL User Request GET HTTP/2
verifiedwebpage.com/go?ehash=1a428d1bd18b06caec5f71f539eea2fc&product=34852&ar=55&cid=2407&lid=1610&slhash=e666fab8a5525af3f47a112a31db65c9&mtaid=mpmta&cid2=[s8]
IP
104.21.55.80:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjectverifiedwebpage.com
Fingerprint0D:F8:EF:F4:23:CD:FB:7E:DE:C7:29:3C:B4:F7:A4:CE:6A:FB:89:AB
ValiditySat, 14 Oct 2023 13:52:56 GMT - Fri, 12 Jan 2024 13:52:55 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /go?ehash=1a428d1bd18b06caec5f71f539eea2fc&product=34852&ar=55&cid=2407&lid=1610&slhash=e666fab8a5525af3f47a112a31db65c9&mtaid=mpmta&cid2=[s8] HTTP/1.1
Host: verifiedwebpage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
date: Fri, 08 Dec 2023 01:17:03 GMT
content-type: text/html; charset=UTF-8
location: https://www.unfytrk.com/NX2GBD/641ZRJ/?sub1=3415202737506852333
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
set-cookie: PHPSESSID=b0b3c5365cd879192203ae18d65283fc; path=/
pixel_session_hash_34852=3415202737506852333; expires=Sun, 07-Jan-2024 01:17:02 GMT; Max-Age=2592000; path=/; secure; HttpOnly; SameSite=None
bt_tracking_product_34852=fa95a2467c5715bc3389f25735123127da2f5cdaabcd8c0263a042994ad1f583; expires=Sun, 10-Dec-2023 01:17:02 GMT; Max-Age=172800
vary: User-Agent
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=H%2BHso3TetpyY2RILMtxIkxg%2B%2FGFCyMudIO0SNjMgOa%2FVLbztsRy6Dx%2Fd8Ih1YmsAWuQ4zyFMEVagCtHFKTkyTvgghd6MbHEqYfoSXZbePKJ9kM6qiagJJZkguTmKNp3mObsU2zn1"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 83212a9b1bb05691-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

go.goodlifestylenews.com/

104.21.30.61

143 B

URL
go.goodlifestylenews.com/
IP
104.21.30.61:0
ASN
#13335 CLOUDFLARENET

File type
HTML document text\012- HTML document, ASCII text
Size
143 B (143 bytes)
Hash
f1fb042c62910c34be16ad91cbbd71fa
5bc7aceba9a8704ef4b1d427d7d08b140afcd866
9278d16ed2fdcd5dc651615b0b8adc6b55fb667a9d106a9891b861d4561d9a24

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: go.goodlifestylenews.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Fri, 08 Dec 2023 01:17:05 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 14 Nov 2023 15:41:05 GMT
Cache-Control: no-cache, no-store, must-revalidate
Expires: 0
Vary: Accept-Encoding,User-Agent
Pragma: no-cache
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fyu8nw1KmEMoUhj8K1E%2F1kCqpplf%2FmRUD8zx1Ffq8WUV2lN8qrI2rWk5gzpTmMXVw5FDi54A9mXNmfAcTt1PdLG%2BdHPG8qcWSXlZftCTmnaO58IHpSWGlQ%2BUIQz%2FhXvfYnwdPKEn8x5s5yY%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 83212aa909155696-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60

www2.gutcleanseprotocol.com/fst/d_bc3_vslstart_qqq?business_unit=a00f400000dk8tnaab&experimental=true&n=dbtcr&utm_campaign=gmd-db-biocomplete3-cpaeml-all-vsltcr-qqq-none&utm_campaign_id=7013w000001vCcoAAE&utm_content=banner_ad&utm_medium=cpa&utm_source=email&subid1=04a5712012674201a82424c14afc2e73&subid2=439&subid3=3415202737506852333&subid5=everflow

172.64.152.117

302 Found

0 B

URL User Request GET HTTP/2
www2.gutcleanseprotocol.com/fst/d_bc3_vslstart_qqq?business_unit=a00f400000dk8tnaab&experimental=true&n=dbtcr&utm_campaign=gmd-db-biocomplete3-cpaeml-all-vsltcr-qqq-none&utm_campaign_id=7013w000001vCcoAAE&utm_content=banner_ad&utm_medium=cpa&utm_source=email&subid1=04a5712012674201a82424c14afc2e73&subid2=439&subid3=3415202737506852333&subid5=everflow
IP
172.64.152.117:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintB7:45:AA:C9:5E:75:6C:63:8E:77:4E:E5:6F:56:48:24:05:8E:95:5D
ValidityMon, 10 Apr 2023 00:00:00 GMT - Tue, 09 Apr 2024 23:59:59 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /fst/d_bc3_vslstart_qqq?business_unit=a00f400000dk8tnaab&experimental=true&n=dbtcr&utm_campaign=gmd-db-biocomplete3-cpaeml-all-vsltcr-qqq-none&utm_campaign_id=7013w000001vCcoAAE&utm_content=banner_ad&utm_medium=cpa&utm_source=email&subid1=04a5712012674201a82424c14afc2e73&subid2=439&subid3=3415202737506852333&subid5=everflow HTTP/1.1
Host: www2.gutcleanseprotocol.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 301 Moved Permanently
Date: Fri, 08 Dec 2023 01:17:05 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Fri, 08 Dec 2023 02:17:05 GMT
Location: https://www2.gutcleanseprotocol.com/fst/d_bc3_vslstart_qqq?business_unit=a00f400000dk8tnaab&experimental=true&n=dbtcr&utm_campaign=gmd-db-biocomplete3-cpaeml-all-vsltcr-qqq-none&utm_campaign_id=7013w000001vCcoAAE&utm_content=banner_ad&utm_medium=cpa&utm_source=email&subid1=04a5712012674201a82424c14afc2e73&subid2=439&subid3=3415202737506852333&subid5=everflow
Set-Cookie: __cf_bm=cBsPmThB9RUOyRFy99DYZKBqTViI9KYXpwxKBXsF2Vw-1701998225-0-AeJ7ZJvNmn92D3Deb8B35eyAHfhWr6xFok4Ly3Ljf/0gSdihXbilEK5KZJbIoLXT73MPPzKowPyZN/U7lEws4s0=; path=/; expires=Fri, 08-Dec-23 01:47:05 GMT; domain=.gutcleanseprotocol.com; HttpOnly; SameSite=None
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 83212aadad285688-OSL
alt-svc: h2=":443"; ma=60

172.64.152.117

302 Found

0 B

URL User Request GET HTTP/2
www2.gutcleanseprotocol.com/fst/d_bc3_vslstart_qqq?business_unit=a00f400000dk8tnaab&experimental=true&n=dbtcr&utm_campaign=gmd-db-biocomplete3-cpaeml-all-vsltcr-qqq-none&utm_campaign_id=7013w000001vCcoAAE&utm_content=banner_ad&utm_medium=cpa&utm_source=email&subid1=04a5712012674201a82424c14afc2e73&subid2=439&subid3=3415202737506852333&subid5=everflow
IP
172.64.152.117:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintB7:45:AA:C9:5E:75:6C:63:8E:77:4E:E5:6F:56:48:24:05:8E:95:5D
ValidityMon, 10 Apr 2023 00:00:00 GMT - Tue, 09 Apr 2024 23:59:59 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /fst/d_bc3_vslstart_qqq?business_unit=a00f400000dk8tnaab&experimental=true&n=dbtcr&utm_campaign=gmd-db-biocomplete3-cpaeml-all-vsltcr-qqq-none&utm_campaign_id=7013w000001vCcoAAE&utm_content=banner_ad&utm_medium=cpa&utm_source=email&subid1=04a5712012674201a82424c14afc2e73&subid2=439&subid3=3415202737506852333&subid5=everflow HTTP/1.1
Host: www2.gutcleanseprotocol.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 302 Found
date: Fri, 08 Dec 2023 01:17:06 GMT
content-length: 0
location: https://gutcleanseprotocol.com/230914a/video/video.php?origexperimentalOrig=true&step=1&funnelSTPId=a0q3w00000DGs1lAAD&origuidOrig=db_bc3_vslstart_html_230922&origspidOrig=null&step=1&origdsidOrig=&origmainFunnelIdOrig=a0q3w00000DGs1kAAD&origExternalOrig=true&origExternalIDOrig=a0q3w00000DGs1kAAD&genericUrl=os220325a_ap-db_bc3_vslstart_html_230922&orignameOrig=os220325a_ap-db_bc3_vslstart_html_230922&origbrandOrig=Gundry%20MD&business_unit=a00f400000dk8tnaab&n=dbtcr&utm_campaign=gmd-db-biocomplete3-cpaeml-all-vsltcr-qqq-none&utm_campaign_id=7013w000001vCcoAAE&utm_content=banner_ad&utm_medium=cpa&utm_source=email&subid1=04a5712012674201a82424c14afc2e73&subid2=439&subid3=3415202737506852333&subid5=everflow&sessionid=988270353948
cache-control: private, no-cache, max-age = 0
strict-transport-security: max-age=15552000; includeSubDomains
via: 1.1 spaces-router (devel)
x-content-type-options: nosniff
x-dns-prefetch-control: off
x-download-options: noopen
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
cf-cache-status: DYNAMIC
set-cookie: _csrf=-wYum7HqTNLnF2KIdVHubEhV; Path=/
_csrf=GpDOP58Sp_eTeb6gDswlFiVg; Path=/
XSRF-TOKEN=h5U58I6C-TnfO7coP6l2R-r9M5QAAIr8Mbjc; Path=/; Secure
__cf_bm=CHoT.s3yJb16Qt.N8xxOGcUq6Zcr0AqzvnezfRmKHLA-1701998226-0-ATeSMh8fUxOjtvrtdfHe7owtrmuNKMBEtv41zcNFvJHk8O7DT5Q2V3gC7f/YY3X+Gs9GFpie0w6WR3srM++N1MI=; path=/; expires=Fri, 08-Dec-23 01:47:06 GMT; domain=.gutcleanseprotocol.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 83212aaddb47b4eb-OSL
X-Firefox-Spdy: h2

www2.gutcleanseprotocol.com/assets/img/gundry-logo.jpg

172.64.152.117

200 OK

3.3 kB

URL GET HTTP/2
www2.gutcleanseprotocol.com/assets/img/gundry-logo.jpg
IP
172.64.152.117:443
ASN
#13335 CLOUDFLARENET

Requested by
https://gutcleanseprotocol.com/230914a/video/video.php?origexperimentalOrig=true&step=1&funnelSTPId=a0q3w00000DGs1lAAD&origuidOrig=db_bc3_vslstart_html_230922&origspidOrig=null&step=1&origdsidOrig=&origmainFunnelIdOrig=a0q3w00000DGs1kAAD&origExternalOrig=true&origExternalIDOrig=a0q3w00000DGs1kAAD&genericUrl=os220325a_ap-db_bc3_vslstart_html_230922&orignameOrig=os220325a_ap-db_bc3_vslstart_html_230922&origbrandOrig=Gundry%20MD&business_unit=a00f400000dk8tnaab&n=dbtcr&utm_campaign=gmd-db-biocomplete3-cpaeml-all-vsltcr-qqq-none&utm_campaign_id=7013w000001vCcoAAE&utm_content=banner_ad&utm_medium=cpa&utm_source=email&subid1=04a5712012674201a82424c14afc2e73&subid2=439&subid3=3415202737506852333&subid5=everflow&sessionid=988270353948
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintB7:45:AA:C9:5E:75:6C:63:8E:77:4E:E5:6F:56:48:24:05:8E:95:5D
ValidityMon, 10 Apr 2023 00:00:00 GMT - Tue, 09 Apr 2024 23:59:59 GMT

File type
RIFF (little-endian) data, Web/P image, VP8 encoding, 302x79, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Size
3.3 kB (3280 bytes)
Hash
36d239d1e2733d1a975edfe008cb419b
17b9d20b98483d31a2330cdd3d5e4420227c170a
4a2914b51918db5968e25efb198b1b94e9be28dd3356751255544954e8f29df7

HTTP Headers

GET /assets/img/gundry-logo.jpg HTTP/1.1
Host: www2.gutcleanseprotocol.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gutcleanseprotocol.com/
Cookie: _csrf=GpDOP58Sp_eTeb6gDswlFiVg; XSRF-TOKEN=h5U58I6C-TnfO7coP6l2R-r9M5QAAIr8Mbjc; __cf_bm=CHoT.s3yJb16Qt.N8xxOGcUq6Zcr0AqzvnezfRmKHLA-1701998226-0-ATeSMh8fUxOjtvrtdfHe7owtrmuNKMBEtv41zcNFvJHk8O7DT5Q2V3gC7f/YY3X+Gs9GFpie0w6WR3srM++N1MI=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 08 Dec 2023 01:17:06 GMT
content-type: image/webp
content-length: 3280
cache-control: public, max-age=3600
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=4571
content-disposition: inline; filename="gundry-logo.webp"
etag: W/"11db-18c4679d618"
last-modified: Thu, 07 Dec 2023 22:50:39 GMT
strict-transport-security: max-age=15552000; includeSubDomains
vary: Accept
via: 1.1 spaces-router (devel)
x-content-type-options: nosniff
x-dns-prefetch-control: off
x-download-options: noopen
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 6
expires: Fri, 08 Dec 2023 02:17:06 GMT
accept-ranges: bytes
server: cloudflare
cf-ray: 83212ab54db9b4eb-OSL
X-Firefox-Spdy: h2

www2.gutcleanseprotocol.com/assets/img/phone.png

172.64.152.117

200 OK

368 B

URL GET HTTP/2
www2.gutcleanseprotocol.com/assets/img/phone.png
IP
172.64.152.117:443
ASN
#13335 CLOUDFLARENET

Requested by
https://gutcleanseprotocol.com/230914a/video/video.php?origexperimentalOrig=true&step=1&funnelSTPId=a0q3w00000DGs1lAAD&origuidOrig=db_bc3_vslstart_html_230922&origspidOrig=null&step=1&origdsidOrig=&origmainFunnelIdOrig=a0q3w00000DGs1kAAD&origExternalOrig=true&origExternalIDOrig=a0q3w00000DGs1kAAD&genericUrl=os220325a_ap-db_bc3_vslstart_html_230922&orignameOrig=os220325a_ap-db_bc3_vslstart_html_230922&origbrandOrig=Gundry%20MD&business_unit=a00f400000dk8tnaab&n=dbtcr&utm_campaign=gmd-db-biocomplete3-cpaeml-all-vsltcr-qqq-none&utm_campaign_id=7013w000001vCcoAAE&utm_content=banner_ad&utm_medium=cpa&utm_source=email&subid1=04a5712012674201a82424c14afc2e73&subid2=439&subid3=3415202737506852333&subid5=everflow&sessionid=988270353948
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintB7:45:AA:C9:5E:75:6C:63:8E:77:4E:E5:6F:56:48:24:05:8E:95:5D
ValidityMon, 10 Apr 2023 00:00:00 GMT - Tue, 09 Apr 2024 23:59:59 GMT

File type
RIFF (little-endian) data, Web/P image\012- data
Size
368 B (368 bytes)
Hash
b5824a09d3585de6ecbd1985e49658e2
b81f1fa5ac85253f609ce176eb81d393405778dc
500106b3726d2de95d4aabe2539023db34bb562ea126baaf943c7188ee6cc599

HTTP Headers

GET /assets/img/phone.png HTTP/1.1
Host: www2.gutcleanseprotocol.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gutcleanseprotocol.com/
Cookie: _csrf=GpDOP58Sp_eTeb6gDswlFiVg; XSRF-TOKEN=h5U58I6C-TnfO7coP6l2R-r9M5QAAIr8Mbjc; __cf_bm=CHoT.s3yJb16Qt.N8xxOGcUq6Zcr0AqzvnezfRmKHLA-1701998226-0-ATeSMh8fUxOjtvrtdfHe7owtrmuNKMBEtv41zcNFvJHk8O7DT5Q2V3gC7f/YY3X+Gs9GFpie0w6WR3srM++N1MI=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 08 Dec 2023 01:17:06 GMT
content-type: image/webp
content-length: 368
cache-control: public, max-age=3600
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=489
content-disposition: inline; filename="phone.webp"
etag: W/"1e9-18c4679d618"
last-modified: Thu, 07 Dec 2023 22:50:39 GMT
strict-transport-security: max-age=15552000; includeSubDomains
vary: Accept
via: 1.1 spaces-router (devel)
x-content-type-options: nosniff
x-dns-prefetch-control: off
x-download-options: noopen
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 4
expires: Fri, 08 Dec 2023 02:17:06 GMT
accept-ranges: bytes
server: cloudflare
cf-ray: 83212ab54dbdb4eb-OSL
X-Firefox-Spdy: h2

cdn.gutcleanseprotocol.com/images/speaker.png

172.64.152.117

200 OK

312 B

URL GET HTTP/2
cdn.gutcleanseprotocol.com/images/speaker.png
IP
172.64.152.117:443
ASN
#13335 CLOUDFLARENET

Requested by
https://gutcleanseprotocol.com/230914a/video/video.php?origexperimentalOrig=true&step=1&funnelSTPId=a0q3w00000DGs1lAAD&origuidOrig=db_bc3_vslstart_html_230922&origspidOrig=null&step=1&origdsidOrig=&origmainFunnelIdOrig=a0q3w00000DGs1kAAD&origExternalOrig=true&origExternalIDOrig=a0q3w00000DGs1kAAD&genericUrl=os220325a_ap-db_bc3_vslstart_html_230922&orignameOrig=os220325a_ap-db_bc3_vslstart_html_230922&origbrandOrig=Gundry%20MD&business_unit=a00f400000dk8tnaab&n=dbtcr&utm_campaign=gmd-db-biocomplete3-cpaeml-all-vsltcr-qqq-none&utm_campaign_id=7013w000001vCcoAAE&utm_content=banner_ad&utm_medium=cpa&utm_source=email&subid1=04a5712012674201a82424c14afc2e73&subid2=439&subid3=3415202737506852333&subid5=everflow&sessionid=988270353948
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintB7:45:AA:C9:5E:75:6C:63:8E:77:4E:E5:6F:56:48:24:05:8E:95:5D
ValidityMon, 10 Apr 2023 00:00:00 GMT - Tue, 09 Apr 2024 23:59:59 GMT

File type
RIFF (little-endian) data, Web/P image\012- data
Size
312 B (312 bytes)
Hash
24f11589fbf6294260e2baaf69f07928
1dfe2562c4d8f55b55dfe26306bc06abe14771ba
ffe4154eab6a2d0b914f0e0efd5f5275c20642f79a3eb6646ce9ae05edfc5586

HTTP Headers

GET /images/speaker.png HTTP/1.1
Host: cdn.gutcleanseprotocol.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gutcleanseprotocol.com/
Cookie: __cf_bm=CHoT.s3yJb16Qt.N8xxOGcUq6Zcr0AqzvnezfRmKHLA-1701998226-0-ATeSMh8fUxOjtvrtdfHe7owtrmuNKMBEtv41zcNFvJHk8O7DT5Q2V3gC7f/YY3X+Gs9GFpie0w6WR3srM++N1MI=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 08 Dec 2023 01:17:06 GMT
content-type: image/webp
content-length: 312
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=515
content-disposition: inline; filename="speaker.webp"
etag: "b1ae3768ee2ebdc63b163f7e6d9adee7"
last-modified: Wed, 07 Oct 2020 19:44:01 GMT
vary: Accept
x-amz-id-2: +J9hl1Ai66bzBf7ydmZd0WhCCKovZu2N1QXTTtphVDdqDUMYxoMfmVEKoLC+H8o9LTMRS+lRGek=
x-amz-request-id: 253Q05KP0MWG5QNF
cf-cache-status: HIT
age: 6
expires: Fri, 08 Dec 2023 02:17:06 GMT
cache-control: public, max-age=3600
accept-ranges: bytes
server: cloudflare
cf-ray: 83212ab54dbfb4eb-OSL
X-Firefox-Spdy: h2

cdn.gutcleanseprotocol.com/images/PRlogos-mobile.png

172.64.152.117

200 OK

11 kB

URL GET HTTP/2
cdn.gutcleanseprotocol.com/images/PRlogos-mobile.png
IP
172.64.152.117:443
ASN
#13335 CLOUDFLARENET

Requested by
https://gutcleanseprotocol.com/230914a/video/video.php?origexperimentalOrig=true&step=1&funnelSTPId=a0q3w00000DGs1lAAD&origuidOrig=db_bc3_vslstart_html_230922&origspidOrig=null&step=1&origdsidOrig=&origmainFunnelIdOrig=a0q3w00000DGs1kAAD&origExternalOrig=true&origExternalIDOrig=a0q3w00000DGs1kAAD&genericUrl=os220325a_ap-db_bc3_vslstart_html_230922&orignameOrig=os220325a_ap-db_bc3_vslstart_html_230922&origbrandOrig=Gundry%20MD&business_unit=a00f400000dk8tnaab&n=dbtcr&utm_campaign=gmd-db-biocomplete3-cpaeml-all-vsltcr-qqq-none&utm_campaign_id=7013w000001vCcoAAE&utm_content=banner_ad&utm_medium=cpa&utm_source=email&subid1=04a5712012674201a82424c14afc2e73&subid2=439&subid3=3415202737506852333&subid5=everflow&sessionid=988270353948
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintB7:45:AA:C9:5E:75:6C:63:8E:77:4E:E5:6F:56:48:24:05:8E:95:5D
ValidityMon, 10 Apr 2023 00:00:00 GMT - Tue, 09 Apr 2024 23:59:59 GMT

File type
RIFF (little-endian) data, Web/P image\012- data
Size
11 kB (10924 bytes)
Hash
1546b124fd02478fbfd69303add9c66d
175092f950635481aa9060f7c00b0b0a22559b8d
cb03416da7bb25e743c7c08cf8b8954f5a7ab3bd8d192662714b6ec227f8d302

HTTP Headers

GET /images/PRlogos-mobile.png HTTP/1.1
Host: cdn.gutcleanseprotocol.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gutcleanseprotocol.com/
Cookie: __cf_bm=CHoT.s3yJb16Qt.N8xxOGcUq6Zcr0AqzvnezfRmKHLA-1701998226-0-ATeSMh8fUxOjtvrtdfHe7owtrmuNKMBEtv41zcNFvJHk8O7DT5Q2V3gC7f/YY3X+Gs9GFpie0w6WR3srM++N1MI=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 08 Dec 2023 01:17:06 GMT
content-type: image/webp
content-length: 10924
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=25273
content-disposition: inline; filename="PRlogos-mobile.webp"
etag: "0c0b47a5bb8498ec72c7e9811023e183"
last-modified: Mon, 12 Oct 2020 16:51:54 GMT
vary: Accept
x-amz-id-2: aYkQjCyV4iTG5kce4bR1h9mlEOeUk8/+s1BehCA1USy0mkatlNupSAhB0mmE2MGQ+ghZ0cjNAwU=
x-amz-request-id: 253YY1H8GQP4RBFE
cf-cache-status: HIT
age: 6
expires: Fri, 08 Dec 2023 02:17:06 GMT
cache-control: public, max-age=3600
accept-ranges: bytes
server: cloudflare
cf-ray: 83212ab55dc5b4eb-OSL
X-Firefox-Spdy: h2

cdn.gutcleanseprotocol.com/images/speaker2.png

172.64.152.117

200 OK

372 B

URL GET HTTP/2
cdn.gutcleanseprotocol.com/images/speaker2.png
IP
172.64.152.117:443
ASN
#13335 CLOUDFLARENET

Requested by
https://gutcleanseprotocol.com/230914a/video/video.php?origexperimentalOrig=true&step=1&funnelSTPId=a0q3w00000DGs1lAAD&origuidOrig=db_bc3_vslstart_html_230922&origspidOrig=null&step=1&origdsidOrig=&origmainFunnelIdOrig=a0q3w00000DGs1kAAD&origExternalOrig=true&origExternalIDOrig=a0q3w00000DGs1kAAD&genericUrl=os220325a_ap-db_bc3_vslstart_html_230922&orignameOrig=os220325a_ap-db_bc3_vslstart_html_230922&origbrandOrig=Gundry%20MD&business_unit=a00f400000dk8tnaab&n=dbtcr&utm_campaign=gmd-db-biocomplete3-cpaeml-all-vsltcr-qqq-none&utm_campaign_id=7013w000001vCcoAAE&utm_content=banner_ad&utm_medium=cpa&utm_source=email&subid1=04a5712012674201a82424c14afc2e73&subid2=439&subid3=3415202737506852333&subid5=everflow&sessionid=988270353948
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintB7:45:AA:C9:5E:75:6C:63:8E:77:4E:E5:6F:56:48:24:05:8E:95:5D
ValidityMon, 10 Apr 2023 00:00:00 GMT - Tue, 09 Apr 2024 23:59:59 GMT

File type
RIFF (little-endian) data, Web/P image\012- data
Size
372 B (372 bytes)
Hash
fb54c3108a16aa9338616ee6b518c3cb
333aab92fae0476fec9095606a74dd2fcdb2fe8f
71441f488b66e36aaefda8f6f035d04ed340ba05b8eddc89116c058503feae92

HTTP Headers

GET /images/speaker2.png HTTP/1.1
Host: cdn.gutcleanseprotocol.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gutcleanseprotocol.com/
Cookie: __cf_bm=CHoT.s3yJb16Qt.N8xxOGcUq6Zcr0AqzvnezfRmKHLA-1701998226-0-ATeSMh8fUxOjtvrtdfHe7owtrmuNKMBEtv41zcNFvJHk8O7DT5Q2V3gC7f/YY3X+Gs9GFpie0w6WR3srM++N1MI=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 08 Dec 2023 01:17:06 GMT
content-type: image/webp
content-length: 372
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=1101
content-disposition: inline; filename="speaker2.webp"
etag: "ca33d16bce352360595561f7599771b2"
last-modified: Mon, 06 Mar 2023 18:58:13 GMT
vary: Accept
x-amz-id-2: t4+C93OSrEZPFZ+bM8YPm5me1FnHgZtmt03v7YwCqAI4BpKQN1xhoOz465N0oW91XuQUYfXVa5w=
x-amz-request-id: 253GR3BB5JH0F9T3
x-amz-server-side-encryption: AES256
cf-cache-status: HIT
age: 4157
expires: Fri, 08 Dec 2023 02:17:06 GMT
cache-control: public, max-age=3600
accept-ranges: bytes
server: cloudflare
cf-ray: 83212ab54dc0b4eb-OSL
X-Firefox-Spdy: h2

cdn.gutcleanseprotocol.com/images/PRlogos-desktop.png

172.64.152.117

200 OK

21 kB

URL GET HTTP/2
cdn.gutcleanseprotocol.com/images/PRlogos-desktop.png
IP
172.64.152.117:443
ASN
#13335 CLOUDFLARENET

Requested by
https://gutcleanseprotocol.com/230914a/video/video.php?origexperimentalOrig=true&step=1&funnelSTPId=a0q3w00000DGs1lAAD&origuidOrig=db_bc3_vslstart_html_230922&origspidOrig=null&step=1&origdsidOrig=&origmainFunnelIdOrig=a0q3w00000DGs1kAAD&origExternalOrig=true&origExternalIDOrig=a0q3w00000DGs1kAAD&genericUrl=os220325a_ap-db_bc3_vslstart_html_230922&orignameOrig=os220325a_ap-db_bc3_vslstart_html_230922&origbrandOrig=Gundry%20MD&business_unit=a00f400000dk8tnaab&n=dbtcr&utm_campaign=gmd-db-biocomplete3-cpaeml-all-vsltcr-qqq-none&utm_campaign_id=7013w000001vCcoAAE&utm_content=banner_ad&utm_medium=cpa&utm_source=email&subid1=04a5712012674201a82424c14afc2e73&subid2=439&subid3=3415202737506852333&subid5=everflow&sessionid=988270353948
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintB7:45:AA:C9:5E:75:6C:63:8E:77:4E:E5:6F:56:48:24:05:8E:95:5D
ValidityMon, 10 Apr 2023 00:00:00 GMT - Tue, 09 Apr 2024 23:59:59 GMT

File type
RIFF (little-endian) data, Web/P image\012- data
Size
21 kB (20696 bytes)
Hash
953d40765acfb692394c9306626da6ec
2271f1eb274088380dba69debdeaf097b95bb32d
6fb2aa150d4fcbbd74922ccf3bfe3ec1a353d2bc7ba8d9dcde9f31bfdd15a3c9

HTTP Headers

GET /images/PRlogos-desktop.png HTTP/1.1
Host: cdn.gutcleanseprotocol.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gutcleanseprotocol.com/
Cookie: __cf_bm=CHoT.s3yJb16Qt.N8xxOGcUq6Zcr0AqzvnezfRmKHLA-1701998226-0-ATeSMh8fUxOjtvrtdfHe7owtrmuNKMBEtv41zcNFvJHk8O7DT5Q2V3gC7f/YY3X+Gs9GFpie0w6WR3srM++N1MI=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 08 Dec 2023 01:17:06 GMT
content-type: image/webp
content-length: 20696
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=46688
content-disposition: inline; filename="PRlogos-desktop.webp"
etag: "bab7dc01c19573f5288a70167b8c97fd"
last-modified: Mon, 12 Oct 2020 16:33:26 GMT
vary: Accept
x-amz-id-2: eqR7lKPwf804d1TaBuVGPEDfSJSt4HK3VUxcLy6kyjrUkqR3l7HTnEHHEJlDG6MfRun3Icz1G5c=
x-amz-request-id: 253M99Z9BJHD2Y01
cf-cache-status: HIT
age: 6
expires: Fri, 08 Dec 2023 02:17:06 GMT
cache-control: public, max-age=3600
accept-ranges: bytes
server: cloudflare
cf-ray: 83212ab55dc4b4eb-OSL
X-Firefox-Spdy: h2

cdn.gundrymd.com/images/Playbutton.png

172.64.144.175

200 OK

11 kB

URL GET HTTP/2
cdn.gundrymd.com/images/Playbutton.png
IP
172.64.144.175:443
ASN
#13335 CLOUDFLARENET

Requested by
https://gutcleanseprotocol.com/230914a/video/video.php?origexperimentalOrig=true&step=1&funnelSTPId=a0q3w00000DGs1lAAD&origuidOrig=db_bc3_vslstart_html_230922&origspidOrig=null&step=1&origdsidOrig=&origmainFunnelIdOrig=a0q3w00000DGs1kAAD&origExternalOrig=true&origExternalIDOrig=a0q3w00000DGs1kAAD&genericUrl=os220325a_ap-db_bc3_vslstart_html_230922&orignameOrig=os220325a_ap-db_bc3_vslstart_html_230922&origbrandOrig=Gundry%20MD&business_unit=a00f400000dk8tnaab&n=dbtcr&utm_campaign=gmd-db-biocomplete3-cpaeml-all-vsltcr-qqq-none&utm_campaign_id=7013w000001vCcoAAE&utm_content=banner_ad&utm_medium=cpa&utm_source=email&subid1=04a5712012674201a82424c14afc2e73&subid2=439&subid3=3415202737506852333&subid5=everflow&sessionid=988270353948
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintB1:F8:53:82:00:D1:17:E3:D2:1A:FB:92:F5:E9:55:CD:92:2D:ED:B5
ValidityFri, 28 Apr 2023 00:00:00 GMT - Sat, 27 Apr 2024 23:59:59 GMT

File type
RIFF (little-endian) data, Web/P image\012- data
Size
11 kB (10982 bytes)
Hash
d117132268132f8a3fe3f2758bcfc902
e979510d2cf175abd28e04a5cb8a08a214860fde
41f4ed6900c10e6aedff52f7ba28af740d0a57524d1a5c78163bf58151be1bd1

HTTP Headers

GET /images/Playbutton.png HTTP/1.1
Host: cdn.gundrymd.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gutcleanseprotocol.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 08 Dec 2023 01:17:06 GMT
content-type: image/webp
content-length: 10982
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=31455
content-disposition: inline; filename="Playbutton.webp"
etag: "94f19f0c88361f988382b41db9dd5c8b"
last-modified: Mon, 13 Jul 2020 19:33:32 GMT
vary: Accept
x-amz-id-2: +Gqqemz79uxOpRNaRoYVFUGT6gXRPFNIepgVFWEPP54XG/aXhTwOPHJ4orcY1eu4BAzPxNYX4jA=
x-amz-request-id: 8XN6CXF9C6W7ETY2
x-amz-version-id: null
cf-cache-status: HIT
age: 6
expires: Fri, 08 Dec 2023 05:17:06 GMT
cache-control: public, max-age=14400
accept-ranges: bytes
set-cookie: __cf_bm=Axj30jjUFDcOQpzinjgD2ebkPGJwZTlGuJALXjphPko-1701998226-1-AdjftVmr5NM/Y+F1Q6MKfq+N+pLV4UY7Ab0gSJmokKOWRfokX05xt9vyWW5PCECtMZuBbN8pvfCh/UIiKYT4lMA=; path=/; expires=Fri, 08-Dec-23 01:47:06 GMT; domain=.gundrymd.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 83212ab5d94a56b7-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

thenewgutfix.com/images/gundry-309x300_2.png

104.18.37.47

200 OK

99 kB

URL GET HTTP/2
thenewgutfix.com/images/gundry-309x300_2.png
IP
104.18.37.47:443
ASN
#13335 CLOUDFLARENET

Requested by
https://gutcleanseprotocol.com/230914a/video/video.php?origexperimentalOrig=true&step=1&funnelSTPId=a0q3w00000DGs1lAAD&origuidOrig=db_bc3_vslstart_html_230922&origspidOrig=null&step=1&origdsidOrig=&origmainFunnelIdOrig=a0q3w00000DGs1kAAD&origExternalOrig=true&origExternalIDOrig=a0q3w00000DGs1kAAD&genericUrl=os220325a_ap-db_bc3_vslstart_html_230922&orignameOrig=os220325a_ap-db_bc3_vslstart_html_230922&origbrandOrig=Gundry%20MD&business_unit=a00f400000dk8tnaab&n=dbtcr&utm_campaign=gmd-db-biocomplete3-cpaeml-all-vsltcr-qqq-none&utm_campaign_id=7013w000001vCcoAAE&utm_content=banner_ad&utm_medium=cpa&utm_source=email&subid1=04a5712012674201a82424c14afc2e73&subid2=439&subid3=3415202737506852333&subid5=everflow&sessionid=988270353948
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint8D:09:D6:04:2F:1F:DE:FF:71:3D:8D:AF:4C:3D:48:9A:CF:D2:DD:F2
ValidityMon, 15 May 2023 00:00:00 GMT - Tue, 14 May 2024 23:59:59 GMT

File type
RIFF (little-endian) data, Web/P image\012- data
Size
99 kB (99320 bytes)
Hash
5763156802da1d80c3b9a6d47033ae15
1908773ef3996e3ba655bfbc8f33bd5511b528cc
6f74250c40c1d2e53d4361d7715a7b04b6cbf0b282eea71d5496337a2d189535

HTTP Headers

GET /images/gundry-309x300_2.png HTTP/1.1
Host: thenewgutfix.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gutcleanseprotocol.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 08 Dec 2023 01:17:06 GMT
content-type: image/webp
content-length: 99320
cf-ray: 83212ab5ea9d56a8-OSL
cf-cache-status: HIT
accept-ranges: bytes
age: 4159
cache-control: public, max-age=3600
content-disposition: inline; filename="gundry-309x300_2.webp"
etag: "21526-60bf35ee09940"
expires: Fri, 08 Dec 2023 02:17:06 GMT
last-modified: Thu, 07 Dec 2023 22:55:57 GMT
vary: Accept, Accept-Encoding
via: 1.1 vegur
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=136486
nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]}
report-to: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1701994067&sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add&s=%2F681o8QnRnBX2JQaca%2FkXZ9xVm1VPGB%2BDqfTiK%2F3HY4%3D"}]}
reporting-endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1701994067&sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add&s=%2F681o8QnRnBX2JQaca%2FkXZ9xVm1VPGB%2BDqfTiK%2F3HY4%3D
set-cookie: __cf_bm=Cs.0TuHLyweulT.QD5DfkOuGhZksDdhrroMDRF7S4QQ-1701998226-0-AS8qhocHpRMYDK4VYBlJZP5NCFklqZ8Qjq9FnwmiTX7CFqnWnDeIoJEP/a00UCEYakAis9EDdwFsXviHq+J0IkE=; path=/; expires=Fri, 08-Dec-23 01:47:06 GMT; domain=.thenewgutfix.com; HttpOnly; Secure; SameSite=None
server: cloudflare
X-Firefox-Spdy: h2

players.brightcove.net/6058004206001/LemwzE05e_default/index.min.js

2.19.13.16

200 OK

229 kB

URL GET HTTP/1.1
players.brightcove.net/6058004206001/LemwzE05e_default/index.min.js
IP
2.19.13.16:443
ASN
#719 Elisa Oyj

Requested by
https://gutcleanseprotocol.com/230914a/video/video.php?origexperimentalOrig=true&step=1&funnelSTPId=a0q3w00000DGs1lAAD&origuidOrig=db_bc3_vslstart_html_230922&origspidOrig=null&step=1&origdsidOrig=&origmainFunnelIdOrig=a0q3w00000DGs1kAAD&origExternalOrig=true&origExternalIDOrig=a0q3w00000DGs1kAAD&genericUrl=os220325a_ap-db_bc3_vslstart_html_230922&orignameOrig=os220325a_ap-db_bc3_vslstart_html_230922&origbrandOrig=Gundry%20MD&business_unit=a00f400000dk8tnaab&n=dbtcr&utm_campaign=gmd-db-biocomplete3-cpaeml-all-vsltcr-qqq-none&utm_campaign_id=7013w000001vCcoAAE&utm_content=banner_ad&utm_medium=cpa&utm_source=email&subid1=04a5712012674201a82424c14afc2e73&subid2=439&subid3=3415202737506852333&subid5=everflow&sessionid=988270353948
Certificate
IssuerDigiCert Inc
Subjectplayers.brightcove.net
FingerprintB5:0D:E8:28:5F:34:C0:BB:B3:CF:43:E8:12:E7:D8:C6:6A:B9:E5:3C
ValidityTue, 30 May 2023 00:00:00 GMT - Thu, 30 May 2024 23:59:59 GMT

File type
ASCII text, with very long lines (65536), with no line terminators
Size
229 kB (228765 bytes)
Hash
a87ecf03665a5e5e5d49ab133eca6a8a
ed052c79ab5c629cdfcd66c056cb45d596fdc299
99ea74ff5e691834103a93e70695b511096743d33abe9302b44c6b72e74bed3c

HTTP Headers

GET /6058004206001/LemwzE05e_default/index.min.js HTTP/1.1
Host: players.brightcove.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gutcleanseprotocol.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Length: 228765
x-amz-id-2: TVmDgqQJtw4xEn9uJLzUmJXTelEtdzVeClg33rlIoyzpXYkRpbRi1glbtLaLcumLK5G5fbpgrJY=
x-amz-request-id: 3XG5TN63FBT0CV83
x-amz-replication-status: COMPLETED
Last-Modified: Fri, 08 Sep 2023 18:42:11 GMT
ETag: "f39547c485623f95896bd3451846c735"
x-amz-server-side-encryption: AES256
Content-Encoding: gzip
x-amz-version-id: OAAxdAMJUPV.qVaVfD3TgyDj7Qk6bu8e
Content-Type: application/javascript; charset=utf-8
Server: AmazonS3
Accept-Ranges: bytes
X-Served-By: cache-bma1633-BMA
X-Cache-Hits: 0
X-Timer: S1694199837.018240,VS0,VE712
Vary: Accept-Encoding
X-BCOV-Response-Mode: 1
Cache-Control: public, max-age=76
Date: Fri, 08 Dec 2023 01:17:06 GMT
Connection: keep-alive
Access-Control-Allow-Origin: *

gutcleanseprotocol.com/js/jquery.cookie.js

172.64.152.117

200 OK

1.4 kB

URL GET HTTP/2
gutcleanseprotocol.com/js/jquery.cookie.js
IP
172.64.152.117:443
ASN
#13335 CLOUDFLARENET

Requested by
https://gutcleanseprotocol.com/230914a/video/video.php?origexperimentalOrig=true&step=1&funnelSTPId=a0q3w00000DGs1lAAD&origuidOrig=db_bc3_vslstart_html_230922&origspidOrig=null&step=1&origdsidOrig=&origmainFunnelIdOrig=a0q3w00000DGs1kAAD&origExternalOrig=true&origExternalIDOrig=a0q3w00000DGs1kAAD&genericUrl=os220325a_ap-db_bc3_vslstart_html_230922&orignameOrig=os220325a_ap-db_bc3_vslstart_html_230922&origbrandOrig=Gundry%20MD&business_unit=a00f400000dk8tnaab&n=dbtcr&utm_campaign=gmd-db-biocomplete3-cpaeml-all-vsltcr-qqq-none&utm_campaign_id=7013w000001vCcoAAE&utm_content=banner_ad&utm_medium=cpa&utm_source=email&subid1=04a5712012674201a82424c14afc2e73&subid2=439&subid3=3415202737506852333&subid5=everflow&sessionid=988270353948
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintB7:45:AA:C9:5E:75:6C:63:8E:77:4E:E5:6F:56:48:24:05:8E:95:5D
ValidityMon, 10 Apr 2023 00:00:00 GMT - Tue, 09 Apr 2024 23:59:59 GMT

File type
ASCII text
Size
1.4 kB (1362 bytes)
Hash
aaa7ca61325b28ea8ea9a12809d65cb9
97184896aad9b79a44646ee6a92553d5d9f3ded3
0caab7de2b6d190e7fad15e5e81b2e8130ac073fe1960149c597b9ac12509d1c

HTTP Headers

GET /js/jquery.cookie.js HTTP/1.1
Host: gutcleanseprotocol.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gutcleanseprotocol.com/230914a/video/video.php?origexperimentalOrig=true&step=1&funnelSTPId=a0q3w00000DGs1lAAD&origuidOrig=db_bc3_vslstart_html_230922&origspidOrig=null&step=1&origdsidOrig=&origmainFunnelIdOrig=a0q3w00000DGs1kAAD&origExternalOrig=true&origExternalIDOrig=a0q3w00000DGs1kAAD&genericUrl=os220325a_ap-db_bc3_vslstart_html_230922&orignameOrig=os220325a_ap-db_bc3_vslstart_html_230922&origbrandOrig=Gundry%20MD&business_unit=a00f400000dk8tnaab&n=dbtcr&utm_campaign=gmd-db-biocomplete3-cpaeml-all-vsltcr-qqq-none&utm_campaign_id=7013w000001vCcoAAE&utm_content=banner_ad&utm_medium=cpa&utm_source=email&subid1=04a5712012674201a82424c14afc2e73&subid2=439&subid3=3415202737506852333&subid5=everflow&sessionid=988270353948
Cookie: __cf_bm=CHoT.s3yJb16Qt.N8xxOGcUq6Zcr0AqzvnezfRmKHLA-1701998226-0-ATeSMh8fUxOjtvrtdfHe7owtrmuNKMBEtv41zcNFvJHk8O7DT5Q2V3gC7f/YY3X+Gs9GFpie0w6WR3srM++N1MI=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 08 Dec 2023 01:17:06 GMT
content-type: text/javascript
cf-bgj: minify
cf-polished: origSize=3121
etag: W/"c31-60bf31c6b0c80"
last-modified: Thu, 07 Dec 2023 22:37:22 GMT
nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]}
report-to: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1701994538&sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add&s=Ozy3%2FNWHEvQQI1qzR%2FNS%2BXwLm%2BlC%2Fd21UkHuC6L3r5A%3D"}]}
reporting-endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1701994538&sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add&s=Ozy3%2FNWHEvQQI1qzR%2FNS%2BXwLm%2BlC%2Fd21UkHuC6L3r5A%3D
via: 1.1 vegur
cf-cache-status: HIT
age: 7
expires: Fri, 08 Dec 2023 02:17:06 GMT
cache-control: public, max-age=3600
vary: Accept-Encoding
server: cloudflare
cf-ray: 83212ab55dc8b4eb-OSL
content-encoding: br
X-Firefox-Spdy: h2

ajax.googleapis.com/ajax/libs/jquery/3.1.0/jquery.min.js

142.250.74.74

200 OK

30 kB

URL GET HTTP/2
ajax.googleapis.com/ajax/libs/jquery/3.1.0/jquery.min.js
IP
142.250.74.74:443
ASN
#15169 GOOGLE

Requested by
https://gutcleanseprotocol.com/230914a/video/video.php?origexperimentalOrig=true&step=1&funnelSTPId=a0q3w00000DGs1lAAD&origuidOrig=db_bc3_vslstart_html_230922&origspidOrig=null&step=1&origdsidOrig=&origmainFunnelIdOrig=a0q3w00000DGs1kAAD&origExternalOrig=true&origExternalIDOrig=a0q3w00000DGs1kAAD&genericUrl=os220325a_ap-db_bc3_vslstart_html_230922&orignameOrig=os220325a_ap-db_bc3_vslstart_html_230922&origbrandOrig=Gundry%20MD&business_unit=a00f400000dk8tnaab&n=dbtcr&utm_campaign=gmd-db-biocomplete3-cpaeml-all-vsltcr-qqq-none&utm_campaign_id=7013w000001vCcoAAE&utm_content=banner_ad&utm_medium=cpa&utm_source=email&subid1=04a5712012674201a82424c14afc2e73&subid2=439&subid3=3415202737506852333&subid5=everflow&sessionid=988270353948
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT

File type
ASCII text, with very long lines (32014)
Size
30 kB (30211 bytes)
Hash
05e51b1db558320f1939f9789ccf5c8f
c72c1735b4d903d90dd51225ebefb8c74ebbc51f
702b9e051e82b32038ffdb33a4f7eb5f7b38f4cf6f514e4182d8898f4eb0b7fb

HTTP Headers

GET /ajax/libs/jquery/3.1.0/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gutcleanseprotocol.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30211
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 07 Dec 2023 23:24:20 GMT
expires: Fri, 06 Dec 2024 23:24:20 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 6767
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

gutcleanseprotocol.com/theme/css/variables.css

172.64.152.117

200 OK

524 B

URL GET HTTP/2
gutcleanseprotocol.com/theme/css/variables.css
IP
172.64.152.117:443
ASN
#13335 CLOUDFLARENET

Requested by
https://gutcleanseprotocol.com/230914a/video/video.php?origexperimentalOrig=true&step=1&funnelSTPId=a0q3w00000DGs1lAAD&origuidOrig=db_bc3_vslstart_html_230922&origspidOrig=null&step=1&origdsidOrig=&origmainFunnelIdOrig=a0q3w00000DGs1kAAD&origExternalOrig=true&origExternalIDOrig=a0q3w00000DGs1kAAD&genericUrl=os220325a_ap-db_bc3_vslstart_html_230922&orignameOrig=os220325a_ap-db_bc3_vslstart_html_230922&origbrandOrig=Gundry%20MD&business_unit=a00f400000dk8tnaab&n=dbtcr&utm_campaign=gmd-db-biocomplete3-cpaeml-all-vsltcr-qqq-none&utm_campaign_id=7013w000001vCcoAAE&utm_content=banner_ad&utm_medium=cpa&utm_source=email&subid1=04a5712012674201a82424c14afc2e73&subid2=439&subid3=3415202737506852333&subid5=everflow&sessionid=988270353948
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintB7:45:AA:C9:5E:75:6C:63:8E:77:4E:E5:6F:56:48:24:05:8E:95:5D
ValidityMon, 10 Apr 2023 00:00:00 GMT - Tue, 09 Apr 2024 23:59:59 GMT

File type
ASCII text, with no line terminators
Size
524 B (524 bytes)
Hash
6c8e7102e6017963de00fb98eb2e1f78
3bad126629f1b3598b42f9013eb9f86fbf10ff5e
e7645e843621a446e7333f854f2311d810ee36357ec05284861ac66f95b1c1d9

HTTP Headers

GET /theme/css/variables.css HTTP/1.1
Host: gutcleanseprotocol.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gutcleanseprotocol.com/230914a/video/css/videoMobile.css
Cookie: __cf_bm=CHoT.s3yJb16Qt.N8xxOGcUq6Zcr0AqzvnezfRmKHLA-1701998226-0-ATeSMh8fUxOjtvrtdfHe7owtrmuNKMBEtv41zcNFvJHk8O7DT5Q2V3gC7f/YY3X+Gs9GFpie0w6WR3srM++N1MI=
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 08 Dec 2023 01:17:07 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=71
etag: W/"47-60bf31c6b0c80"
last-modified: Thu, 07 Dec 2023 22:37:22 GMT
nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]}
report-to: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1701994538&sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add&s=Ozy3%2FNWHEvQQI1qzR%2FNS%2BXwLm%2BlC%2Fd21UkHuC6L3r5A%3D"}]}
reporting-endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1701994538&sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add&s=Ozy3%2FNWHEvQQI1qzR%2FNS%2BXwLm%2BlC%2Fd21UkHuC6L3r5A%3D
via: 1.1 vegur
cf-cache-status: HIT
age: 7
expires: Fri, 08 Dec 2023 02:17:07 GMT
cache-control: public, max-age=3600
vary: Accept-Encoding
server: cloudflare
cf-ray: 83212ab72e9bb4eb-OSL
content-encoding: br
X-Firefox-Spdy: h2

fonts.googleapis.com/css2?family=Montserrat:wght@600&display=swap

142.250.74.106

200 OK

575 B

URL GET HTTP/2
fonts.googleapis.com/css2?family=Montserrat:wght@600&display=swap
IP
142.250.74.106:443
ASN
#15169 GOOGLE

Requested by
https://gutcleanseprotocol.com/230914a/video/video.php?origexperimentalOrig=true&step=1&funnelSTPId=a0q3w00000DGs1lAAD&origuidOrig=db_bc3_vslstart_html_230922&origspidOrig=null&step=1&origdsidOrig=&origmainFunnelIdOrig=a0q3w00000DGs1kAAD&origExternalOrig=true&origExternalIDOrig=a0q3w00000DGs1kAAD&genericUrl=os220325a_ap-db_bc3_vslstart_html_230922&orignameOrig=os220325a_ap-db_bc3_vslstart_html_230922&origbrandOrig=Gundry%20MD&business_unit=a00f400000dk8tnaab&n=dbtcr&utm_campaign=gmd-db-biocomplete3-cpaeml-all-vsltcr-qqq-none&utm_campaign_id=7013w000001vCcoAAE&utm_content=banner_ad&utm_medium=cpa&utm_source=email&subid1=04a5712012674201a82424c14afc2e73&subid2=439&subid3=3415202737506852333&subid5=everflow&sessionid=988270353948
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT

File type
gzip compressed data, max compression\012- data
Size
575 B (575 bytes)
Hash
57dcbd9170e0dc948357e9406151e44e
6668589abd509a2e68ac2680fe3b1ae0728610e8
48c40d2c4fa600372dfc433f7964fa7d291652f7b2511ea898c376a62c1caa87

HTTP Headers

GET /css2?family=Montserrat:wght@600&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gutcleanseprotocol.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 08 Dec 2023 01:17:07 GMT
date: Fri, 08 Dec 2023 01:17:07 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

www.googletagmanager.com/gtm.js?id=GTM-5PNTFNV

142.250.74.136

200 OK

122 kB

URL GET HTTP/2
www.googletagmanager.com/gtm.js?id=GTM-5PNTFNV
IP
142.250.74.136:443
ASN
#15169 GOOGLE

Requested by
https://gutcleanseprotocol.com/230914a/video/video.php?origexperimentalOrig=true&step=1&funnelSTPId=a0q3w00000DGs1lAAD&origuidOrig=db_bc3_vslstart_html_230922&origspidOrig=null&step=1&origdsidOrig=&origmainFunnelIdOrig=a0q3w00000DGs1kAAD&origExternalOrig=true&origExternalIDOrig=a0q3w00000DGs1kAAD&genericUrl=os220325a_ap-db_bc3_vslstart_html_230922&orignameOrig=os220325a_ap-db_bc3_vslstart_html_230922&origbrandOrig=Gundry%20MD&business_unit=a00f400000dk8tnaab&n=dbtcr&utm_campaign=gmd-db-biocomplete3-cpaeml-all-vsltcr-qqq-none&utm_campaign_id=7013w000001vCcoAAE&utm_content=banner_ad&utm_medium=cpa&utm_source=email&subid1=04a5712012674201a82424c14afc2e73&subid2=439&subid3=3415202737506852333&subid5=everflow&sessionid=988270353948
Certificate
IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT

File type
ASCII text, with very long lines (56730)
Size
122 kB (121655 bytes)
Hash
c426282f9fc84d916b4ac14cefb43e5d
e88f98d87f14f9fed986d75257b52eb05ab0c9ea
264e538d553d0f49a2b080a00690c300dde8f48d902c3896100ccb6247f7eb14

HTTP Headers

GET /gtm.js?id=GTM-5PNTFNV HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gutcleanseprotocol.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: gzip
vary: Accept-Encoding
date: Fri, 08 Dec 2023 01:17:07 GMT
expires: Fri, 08 Dec 2023 01:17:07 GMT
cache-control: private, max-age=900
last-modified: Fri, 08 Dec 2023 00:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 121655
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

gutcleanseprotocol.com/theme/css/general.css

172.64.152.117

200 OK

15 kB

URL GET HTTP/2
gutcleanseprotocol.com/theme/css/general.css
IP
172.64.152.117:443
ASN
#13335 CLOUDFLARENET

Requested by
https://gutcleanseprotocol.com/230914a/video/video.php?origexperimentalOrig=true&step=1&funnelSTPId=a0q3w00000DGs1lAAD&origuidOrig=db_bc3_vslstart_html_230922&origspidOrig=null&step=1&origdsidOrig=&origmainFunnelIdOrig=a0q3w00000DGs1kAAD&origExternalOrig=true&origExternalIDOrig=a0q3w00000DGs1kAAD&genericUrl=os220325a_ap-db_bc3_vslstart_html_230922&orignameOrig=os220325a_ap-db_bc3_vslstart_html_230922&origbrandOrig=Gundry%20MD&business_unit=a00f400000dk8tnaab&n=dbtcr&utm_campaign=gmd-db-biocomplete3-cpaeml-all-vsltcr-qqq-none&utm_campaign_id=7013w000001vCcoAAE&utm_content=banner_ad&utm_medium=cpa&utm_source=email&subid1=04a5712012674201a82424c14afc2e73&subid2=439&subid3=3415202737506852333&subid5=everflow&sessionid=988270353948
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintB7:45:AA:C9:5E:75:6C:63:8E:77:4E:E5:6F:56:48:24:05:8E:95:5D
ValidityMon, 10 Apr 2023 00:00:00 GMT - Tue, 09 Apr 2024 23:59:59 GMT

File type
ASCII text, with very long lines (743), with no line terminators
Size
15 kB (15336 bytes)
Hash
31a59677e8261f22cae591e4f2e3eac1
c0b4acf500405dd8f609c74164f9ac21d72f10aa
a3e0d09f062887e591ef2a04bc083c96a53012ac2dbdf0b4904f3f9dc48879a3

HTTP Headers

GET /theme/css/general.css HTTP/1.1
Host: gutcleanseprotocol.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gutcleanseprotocol.com/theme/css/variables.css
Cookie: __cf_bm=CHoT.s3yJb16Qt.N8xxOGcUq6Zcr0AqzvnezfRmKHLA-1701998226-0-ATeSMh8fUxOjtvrtdfHe7owtrmuNKMBEtv41zcNFvJHk8O7DT5Q2V3gC7f/YY3X+Gs9GFpie0w6WR3srM++N1MI=
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 08 Dec 2023 01:17:07 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=875
etag: W/"36b-60bf31c6b0c80"
last-modified: Thu, 07 Dec 2023 22:37:22 GMT
nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]}
report-to: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1701994538&sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add&s=Ozy3%2FNWHEvQQI1qzR%2FNS%2BXwLm%2BlC%2Fd21UkHuC6L3r5A%3D"}]}
reporting-endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1701994538&sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add&s=Ozy3%2FNWHEvQQI1qzR%2FNS%2BXwLm%2BlC%2Fd21UkHuC6L3r5A%3D
via: 1.1 vegur
cf-cache-status: HIT
age: 7
expires: Fri, 08 Dec 2023 02:17:07 GMT
cache-control: public, max-age=3600
vary: Accept-Encoding
server: cloudflare
cf-ray: 83212ab79ec8b4eb-OSL
content-encoding: br
X-Firefox-Spdy: h2

www.googletagmanager.com/gtm.js?id=GTM-5WLKKPD

142.250.74.136

200 OK

117 kB

URL GET HTTP/2
www.googletagmanager.com/gtm.js?id=GTM-5WLKKPD
IP
142.250.74.136:443
ASN
#15169 GOOGLE

Requested by
https://gutcleanseprotocol.com/230914a/video/video.php?origexperimentalOrig=true&step=1&funnelSTPId=a0q3w00000DGs1lAAD&origuidOrig=db_bc3_vslstart_html_230922&origspidOrig=null&step=1&origdsidOrig=&origmainFunnelIdOrig=a0q3w00000DGs1kAAD&origExternalOrig=true&origExternalIDOrig=a0q3w00000DGs1kAAD&genericUrl=os220325a_ap-db_bc3_vslstart_html_230922&orignameOrig=os220325a_ap-db_bc3_vslstart_html_230922&origbrandOrig=Gundry%20MD&business_unit=a00f400000dk8tnaab&n=dbtcr&utm_campaign=gmd-db-biocomplete3-cpaeml-all-vsltcr-qqq-none&utm_campaign_id=7013w000001vCcoAAE&utm_content=banner_ad&utm_medium=cpa&utm_source=email&subid1=04a5712012674201a82424c14afc2e73&subid2=439&subid3=3415202737506852333&subid5=everflow&sessionid=988270353948
Certificate
IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT

File type
ASCII text, with very long lines (60144)
Size
117 kB (117375 bytes)
Hash
f3b83d3b9cc45e2aea3618bc74a685cd
33db8d50cea9eca504dd23afe91a33e3d8f55fc5
82ac22ab43f9f4c925b4ca8920b2e9c808c08714491658031cb65a3d12d5c7a9

HTTP Headers

GET /gtm.js?id=GTM-5WLKKPD HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gutcleanseprotocol.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: gzip
vary: Accept-Encoding
date: Fri, 08 Dec 2023 01:17:07 GMT
expires: Fri, 08 Dec 2023 01:17:07 GMT
cache-control: private, max-age=900
last-modified: Fri, 08 Dec 2023 00:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 117375
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

vjs.zencdn.net/vttjs/0.15.3/vtt.global.min.js

151.101.194.217

200 OK

7.4 kB

URL GET HTTP/2
vjs.zencdn.net/vttjs/0.15.3/vtt.global.min.js
IP
151.101.194.217:443
ASN
#54113 FASTLY

Requested by
https://gutcleanseprotocol.com/230914a/video/video.php?origexperimentalOrig=true&step=1&funnelSTPId=a0q3w00000DGs1lAAD&origuidOrig=db_bc3_vslstart_html_230922&origspidOrig=null&step=1&origdsidOrig=&origmainFunnelIdOrig=a0q3w00000DGs1kAAD&origExternalOrig=true&origExternalIDOrig=a0q3w00000DGs1kAAD&genericUrl=os220325a_ap-db_bc3_vslstart_html_230922&orignameOrig=os220325a_ap-db_bc3_vslstart_html_230922&origbrandOrig=Gundry%20MD&business_unit=a00f400000dk8tnaab&n=dbtcr&utm_campaign=gmd-db-biocomplete3-cpaeml-all-vsltcr-qqq-none&utm_campaign_id=7013w000001vCcoAAE&utm_content=banner_ad&utm_medium=cpa&utm_source=email&subid1=04a5712012674201a82424c14afc2e73&subid2=439&subid3=3415202737506852333&subid5=everflow&sessionid=988270353948
Certificate
IssuerGlobalSign nv-sa
Subjectvjs.zencdn.net
FingerprintF0:70:0B:AF:84:8A:AB:25:98:72:B0:E7:EE:F8:2C:2C:6B:58:8E:4E
ValiditySat, 03 Jun 2023 21:48:23 GMT - Thu, 04 Jul 2024 21:48:22 GMT

File type
ASCII text, with very long lines (20915)
Size
7.4 kB (7354 bytes)
Hash
9ab357d51e365493dab6cf243489069b
10869d59b20d631a6b6d31bd2112ad55c3a3206c
2782883aa2e55fe305dd71c4b8a79cdecd0e3c7b62880f7adf37aafb33739a4a

HTTP Headers

GET /vttjs/0.15.3/vtt.global.min.js HTTP/1.1
Host: vjs.zencdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gutcleanseprotocol.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
last-modified: Wed, 11 May 2022 18:56:37 GMT
etag: "9ab357d51e365493dab6cf243489069b"
cache-control: public, max-age=31536000
content-type: application/javascript; charset=utf-8
content-encoding: gzip
date: Fri, 08 Dec 2023 01:17:07 GMT
x-served-by: cache-bma1679-BMA
x-cache: HIT
x-cache-hits: 34722
vary: Accept-Encoding
access-control-allow-origin: *
timing-allow-origin: *
content-length: 7354
X-Firefox-Spdy: h2

cdn.gundrymd.com/fonts/Figtree-LightItalic.ttf

172.64.144.175

200 OK

41 kB

URL GET HTTP/3
cdn.gundrymd.com/fonts/Figtree-LightItalic.ttf
IP
172.64.144.175:443
ASN
#13335 CLOUDFLARENET

Requested by
https://gutcleanseprotocol.com/230914a/video/video.php?origexperimentalOrig=true&step=1&funnelSTPId=a0q3w00000DGs1lAAD&origuidOrig=db_bc3_vslstart_html_230922&origspidOrig=null&step=1&origdsidOrig=&origmainFunnelIdOrig=a0q3w00000DGs1kAAD&origExternalOrig=true&origExternalIDOrig=a0q3w00000DGs1kAAD&genericUrl=os220325a_ap-db_bc3_vslstart_html_230922&orignameOrig=os220325a_ap-db_bc3_vslstart_html_230922&origbrandOrig=Gundry%20MD&business_unit=a00f400000dk8tnaab&n=dbtcr&utm_campaign=gmd-db-biocomplete3-cpaeml-all-vsltcr-qqq-none&utm_campaign_id=7013w000001vCcoAAE&utm_content=banner_ad&utm_medium=cpa&utm_source=email&subid1=04a5712012674201a82424c14afc2e73&subid2=439&subid3=3415202737506852333&subid5=everflow&sessionid=988270353948
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintB1:F8:53:82:00:D1:17:E3:D2:1A:FB:92:F5:E9:55:CD:92:2D:ED:B5
ValidityFri, 28 Apr 2023 00:00:00 GMT - Sat, 27 Apr 2024 23:59:59 GMT

File type
TrueType Font data, 16 tables, 1st "GDEF", 32 names, Microsoft, language 0x409\012- data
Size
41 kB (40836 bytes)
Hash
74f56265e258c624b80e70ff23821dd5
3ec17afc0633a3a5fe9ffe7bf6ae43b53465ce0b
2ca436515dbf33a0082678a894bc4554d74f83c7f7745bb611edbda357bacd74

HTTP Headers

GET /fonts/Figtree-LightItalic.ttf HTTP/1.1
Host: cdn.gundrymd.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://gutcleanseprotocol.com
DNT: 1
Connection: keep-alive
Referer: https://gutcleanseprotocol.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 08 Dec 2023 01:17:07 GMT
content-type: binary/octet-stream
content-length: 40836
x-amz-id-2: VDCeEr2RR79UhFpH5Qw2Fc+gVz+fEK92+WfFji6xCKPFIID592o9zKprUh+xiTWAKKODmZW0b6c=
x-amz-request-id: TNM3WAHG9XDX9NFV
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-max-age: 3000
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
last-modified: Fri, 28 Jul 2023 21:10:35 GMT
etag: "74f56265e258c624b80e70ff23821dd5"
x-amz-server-side-encryption: AES256
x-amz-version-id: GFj.Qe5cEfK6Rn6rt53boLqAnG3h5amJ
cf-cache-status: HIT
age: 6
expires: Fri, 08 Dec 2023 05:17:07 GMT
cache-control: public, max-age=14400
accept-ranges: bytes
set-cookie: __cf_bm=b4nzhdGeJvKlR11Q0Gt2.Pq2EX5ldYqZj_pgoi0LUfM-1701998227-0-AUpEcuLXWq+LU9X8lP6jYsZaoSr2gMrkZ55f1aYK3A2IoqYGIi3UnNJc8AHB3vWqz+7RG5NaGO3xOIbBCbDsYsM=; path=/; expires=Fri, 08-Dec-23 01:47:07 GMT; domain=.gundrymd.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 83212abacc520b45-OSL
alt-svc: h3=":443"; ma=86400

edge.api.brightcove.com/playback/v1/accounts/6058004206001/videos/6312000596112

151.101.66.27

200 OK

0 B

URL OPTIONS HTTP/2
edge.api.brightcove.com/playback/v1/accounts/6058004206001/videos/6312000596112
IP
151.101.66.27:443
ASN
#54113 FASTLY

Requested by
https://gutcleanseprotocol.com/230914a/video/video.php?origexperimentalOrig=true&step=1&funnelSTPId=a0q3w00000DGs1lAAD&origuidOrig=db_bc3_vslstart_html_230922&origspidOrig=null&step=1&origdsidOrig=&origmainFunnelIdOrig=a0q3w00000DGs1kAAD&origExternalOrig=true&origExternalIDOrig=a0q3w00000DGs1kAAD&genericUrl=os220325a_ap-db_bc3_vslstart_html_230922&orignameOrig=os220325a_ap-db_bc3_vslstart_html_230922&origbrandOrig=Gundry%20MD&business_unit=a00f400000dk8tnaab&n=dbtcr&utm_campaign=gmd-db-biocomplete3-cpaeml-all-vsltcr-qqq-none&utm_campaign_id=7013w000001vCcoAAE&utm_content=banner_ad&utm_medium=cpa&utm_source=email&subid1=04a5712012674201a82424c14afc2e73&subid2=439&subid3=3415202737506852333&subid5=everflow&sessionid=988270353948
Certificate
IssuerGlobalSign nv-sa
Subjectbrightcove.com
FingerprintEC:EC:9B:0A:26:4C:47:76:30:5F:94:29:38:97:A2:25:49:81:99:71
ValiditySun, 12 Mar 2023 18:08:11 GMT - Fri, 12 Apr 2024 18:08:10 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

OPTIONS /playback/v1/accounts/6058004206001/videos/6312000596112 HTTP/1.1
Host: edge.api.brightcove.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: accept
Referer: https://gutcleanseprotocol.com/
Origin: https://gutcleanseprotocol.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: Varnish
retry-after: 0
access-control-max-age: 86400
accept-ranges: bytes
date: Fri, 08 Dec 2023 01:17:07 GMT
via: 1.1 varnish
x-served-by: cache-bma1631-BMA
x-cache: HIT
x-cache-hits: 0
x-timer: S1701998228.787615,VS0,VE0
access-control-allow-origin: *
access-control-expose-headers: cache-control,content-type,powered-by,powered-from,via,x-cache,x-cache-hits,x-served-by,x-timer,bcov-debug-cache-stats,bcov-instance,x-amz-cf-id,Policy-Key-Geo-Countries,Policy-Key-Geo-Exclude-Countries,Policy-Key-IP-Whitelist,Account-Status,Policy-Key-Raw,Policy-Key-Domains,Policy-Key-Require-Ad-Config,Policy-Key-AccountID,BCOV-Request-ID,BCOV-Error-Code,soapaction
access-control-allow-headers: content-type,accept,accept-language,content-language,bcov-policy,soapaction
access-control-allow-methods: HEAD,GET,OPTIONS
cache-control: max-age=0, no-cache, no-store
content-length: 0
X-Firefox-Spdy: h2

edge.api.brightcove.com/playback/v1/accounts/6058004206001/videos/6312000596112

151.101.66.27

200 OK

3.5 kB

URL OPTIONS HTTP/2
edge.api.brightcove.com/playback/v1/accounts/6058004206001/videos/6312000596112
IP
151.101.66.27:443
ASN
#54113 FASTLY

Requested by
https://gutcleanseprotocol.com/230914a/video/video.php?origexperimentalOrig=true&step=1&funnelSTPId=a0q3w00000DGs1lAAD&origuidOrig=db_bc3_vslstart_html_230922&origspidOrig=null&step=1&origdsidOrig=&origmainFunnelIdOrig=a0q3w00000DGs1kAAD&origExternalOrig=true&origExternalIDOrig=a0q3w00000DGs1kAAD&genericUrl=os220325a_ap-db_bc3_vslstart_html_230922&orignameOrig=os220325a_ap-db_bc3_vslstart_html_230922&origbrandOrig=Gundry%20MD&business_unit=a00f400000dk8tnaab&n=dbtcr&utm_campaign=gmd-db-biocomplete3-cpaeml-all-vsltcr-qqq-none&utm_campaign_id=7013w000001vCcoAAE&utm_content=banner_ad&utm_medium=cpa&utm_source=email&subid1=04a5712012674201a82424c14afc2e73&subid2=439&subid3=3415202737506852333&subid5=everflow&sessionid=988270353948
Certificate
IssuerGlobalSign nv-sa
Subjectbrightcove.com
FingerprintEC:EC:9B:0A:26:4C:47:76:30:5F:94:29:38:97:A2:25:49:81:99:71
ValiditySun, 12 Mar 2023 18:08:11 GMT - Fri, 12 Apr 2024 18:08:10 GMT

File type
JSON data\012- , ASCII text, with very long lines (3522)
Size
3.5 kB (3523 bytes)
Hash
70d01a3140abc1b35012b78ffdae3e5b
bc2463d03e0c4137e4fbfbaefb3e49be158b2ffa
3f0b8237e57dbb1d1107e4c9f0d64f39995e6cacf643144116851b1e8bc5ef96

HTTP Headers

GET /playback/v1/accounts/6058004206001/videos/6312000596112 HTTP/1.1
Host: edge.api.brightcove.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json;pk=BCpkADawqM1xV1MNL_N5fmbsfxkoSYIVpSiiclr_CxXM_dnMY3mrR1Uz5YDP_xqpWEiVjjVyAI0MrKPM8R4IQUSrpj-3znsS8epdzR0naL5hMZ33xYxH0FzRflAKgjmYHslX4TS-WAKkmr3j
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://gutcleanseprotocol.com
DNT: 1
Connection: keep-alive
Referer: https://gutcleanseprotocol.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
account-status: APPROVED
bc-override-client-ip: 91.90.42.154
bcov-request-id: c83df67d-4c83-4d3f-99cd-cab04c5acc42
content-type: application/json; charset=UTF-8
policy-key-accountid: 6058004206001
policy-key-raw: BCpkADawqM1xV1MNL_N5fmbsfxkoSYIVpSiiclr_CxXM_dnMY3mrR1Uz5YDP_xqpWEiVjjVyAI0MrKPM8R4IQUSrpj-3znsS8epdzR0naL5hMZ33xYxH0FzRflAKgjmYHslX4TS-WAKkmr3j
powered-by: BC
powered-from: eu-central-1a
accept-ranges: bytes
date: Fri, 08 Dec 2023 01:17:07 GMT
via: 1.1 varnish
age: 7
x-served-by: cache-bma1631-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1701998228.801159,VS0,VE1
access-control-allow-origin: *
access-control-expose-headers: cache-control,content-type,powered-by,powered-from,via,x-cache,x-cache-hits,x-served-by,x-timer,bcov-debug-cache-stats,bcov-instance,x-amz-cf-id,Policy-Key-Geo-Countries,Policy-Key-Geo-Exclude-Countries,Policy-Key-IP-Whitelist,Account-Status,Policy-Key-Raw,Policy-Key-Domains,Policy-Key-Require-Ad-Config,Policy-Key-AccountID,BCOV-Request-ID,BCOV-Error-Code,soapaction
access-control-allow-headers: content-type,accept,accept-language,content-language,bcov-policy,soapaction
access-control-allow-methods: HEAD,GET,OPTIONS
cache-control: max-age=0, no-cache, no-store
content-length: 3523
X-Firefox-Spdy: h2

www.googletagmanager.com/gtag/js?id=G-5MM7TKXSPX&l=dataLayer&cx=c

142.250.74.136

200 OK

88 kB

URL GET HTTP/3
www.googletagmanager.com/gtag/js?id=G-5MM7TKXSPX&l=dataLayer&cx=c
IP
142.250.74.136:443
ASN
#15169 GOOGLE

Requested by
https://gutcleanseprotocol.com/230914a/video/video.php?origexperimentalOrig=true&step=1&funnelSTPId=a0q3w00000DGs1lAAD&origuidOrig=db_bc3_vslstart_html_230922&origspidOrig=null&step=1&origdsidOrig=&origmainFunnelIdOrig=a0q3w00000DGs1kAAD&origExternalOrig=true&origExternalIDOrig=a0q3w00000DGs1kAAD&genericUrl=os220325a_ap-db_bc3_vslstart_html_230922&orignameOrig=os220325a_ap-db_bc3_vslstart_html_230922&origbrandOrig=Gundry%20MD&business_unit=a00f400000dk8tnaab&n=dbtcr&utm_campaign=gmd-db-biocomplete3-cpaeml-all-vsltcr-qqq-none&utm_campaign_id=7013w000001vCcoAAE&utm_content=banner_ad&utm_medium=cpa&utm_source=email&subid1=04a5712012674201a82424c14afc2e73&subid2=439&subid3=3415202737506852333&subid5=everflow&sessionid=988270353948
Certificate
IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT

File type
ASCII text, with very long lines (7711)
Size
88 kB (88366 bytes)
Hash
e0932d5ea3ecf0ca0bf8fa77abd90510
002b4d9b7710244fa20be14dac3acbe6af9f8b10
12bf81dd77ed6708dbe4cf40aab5915949272a6e956f1d5cc7da2120d5baae78

HTTP Headers

GET /gtag/js?id=G-5MM7TKXSPX&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gutcleanseprotocol.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 08 Dec 2023 01:17:07 GMT
expires: Fri, 08 Dec 2023 01:17:07 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 88366
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

cdn.gundrymd.com/fonts/TiemposHeadline-Semibold.otf

172.64.144.175

200 OK

48 kB

URL GET HTTP/3
cdn.gundrymd.com/fonts/TiemposHeadline-Semibold.otf
IP
172.64.144.175:443
ASN
#13335 CLOUDFLARENET

Requested by
https://gutcleanseprotocol.com/230914a/video/video.php?origexperimentalOrig=true&step=1&funnelSTPId=a0q3w00000DGs1lAAD&origuidOrig=db_bc3_vslstart_html_230922&origspidOrig=null&step=1&origdsidOrig=&origmainFunnelIdOrig=a0q3w00000DGs1kAAD&origExternalOrig=true&origExternalIDOrig=a0q3w00000DGs1kAAD&genericUrl=os220325a_ap-db_bc3_vslstart_html_230922&orignameOrig=os220325a_ap-db_bc3_vslstart_html_230922&origbrandOrig=Gundry%20MD&business_unit=a00f400000dk8tnaab&n=dbtcr&utm_campaign=gmd-db-biocomplete3-cpaeml-all-vsltcr-qqq-none&utm_campaign_id=7013w000001vCcoAAE&utm_content=banner_ad&utm_medium=cpa&utm_source=email&subid1=04a5712012674201a82424c14afc2e73&subid2=439&subid3=3415202737506852333&subid5=everflow&sessionid=988270353948
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintB1:F8:53:82:00:D1:17:E3:D2:1A:FB:92:F5:E9:55:CD:92:2D:ED:B5
ValidityFri, 28 Apr 2023 00:00:00 GMT - Sat, 27 Apr 2024 23:59:59 GMT

File type
OpenType font data\012- data
Size
48 kB (47520 bytes)
Hash
bb18cef5c7f67f5269b3cbcd08df9659
715b3f4937c92240ebe2c1c0bd8ec11edc3fbe54
8c40d00ea030f2401dc677701045b9ffcd2116366a4bafb4777020bf9d9cb30a

HTTP Headers

GET /fonts/TiemposHeadline-Semibold.otf HTTP/1.1
Host: cdn.gundrymd.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://gutcleanseprotocol.com
DNT: 1
Connection: keep-alive
Referer: https://gutcleanseprotocol.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 08 Dec 2023 01:17:07 GMT
content-type: font/otf
x-amz-id-2: /ITBy61YRlOpSNNk1zBIu+wHK4Wp0OVwg25SxYWGc/r9dPBXe9Z3ojXGG5a8b5cSotlRArkjZ6k=
x-amz-request-id: VG4ZFGXS33126VMR
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-max-age: 3000
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
last-modified: Thu, 07 Dec 2023 13:51:54 GMT
etag: W/"bb18cef5c7f67f5269b3cbcd08df9659"
x-amz-server-side-encryption: AES256
x-amz-version-id: VcqqDs6xwy5nYyxu9inSs5d19rfXI5RZ
cf-cache-status: HIT
age: 6
expires: Fri, 08 Dec 2023 05:17:07 GMT
cache-control: public, max-age=14400
set-cookie: __cf_bm=G9AS4w1b5hMZrVlnfiBGVG90iCukRoksempx11ny6v8-1701998227-0-AYHtPZ9/HeUUOy1UqMfTPUD8Z+uDxNQ8lDG5G09eMvkSqLqqOXAxVey1q4F2Uas/25I38lIRt5/6TkUfWnjyZsw=; path=/; expires=Fri, 08-Dec-23 01:47:07 GMT; domain=.gundrymd.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 83212abacc500b45-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

cf-images.us-east-1.prod.boltdns.net/v1/jit/6058004206001/8796ee93-0025-4d33-8f25-a477263c6950/main/640x360/30m52s395ms/match/image.jpg

143.204.55.124

200 OK

23 kB

URL GET HTTP/1.1
cf-images.us-east-1.prod.boltdns.net/v1/jit/6058004206001/8796ee93-0025-4d33-8f25-a477263c6950/main/640x360/30m52s395ms/match/image.jpg
IP
143.204.55.124:443
ASN
#16509 AMAZON-02

Requested by
https://gutcleanseprotocol.com/230914a/video/video.php?origexperimentalOrig=true&step=1&funnelSTPId=a0q3w00000DGs1lAAD&origuidOrig=db_bc3_vslstart_html_230922&origspidOrig=null&step=1&origdsidOrig=&origmainFunnelIdOrig=a0q3w00000DGs1kAAD&origExternalOrig=true&origExternalIDOrig=a0q3w00000DGs1kAAD&genericUrl=os220325a_ap-db_bc3_vslstart_html_230922&orignameOrig=os220325a_ap-db_bc3_vslstart_html_230922&origbrandOrig=Gundry%20MD&business_unit=a00f400000dk8tnaab&n=dbtcr&utm_campaign=gmd-db-biocomplete3-cpaeml-all-vsltcr-qqq-none&utm_campaign_id=7013w000001vCcoAAE&utm_content=banner_ad&utm_medium=cpa&utm_source=email&subid1=04a5712012674201a82424c14afc2e73&subid2=439&subid3=3415202737506852333&subid5=everflow&sessionid=988270353948
Certificate
IssuerAmazon
Subject*.prod.boltdns.net
Fingerprint06:23:CB:D0:4F:70:8E:EE:E6:99:36:D9:08:C2:72:4D:28:50:1D:4C
ValidityWed, 20 Sep 2023 00:00:00 GMT - Sat, 19 Oct 2024 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Lavc60.3.100", baseline, precision 8, 640x360, components 3\012- data
Size
23 kB (22823 bytes)
Hash
bad1689e217e4f6ad2a16b4209d6eadc
dbc3ea8db9c0d5e97c077874f2247c410a78c6f4
e5b1bab3d3025e4b5b1111ed05c30c1e0bc40becf6f26f95fe81d72f728b0efc

HTTP Headers

GET /v1/jit/6058004206001/8796ee93-0025-4d33-8f25-a477263c6950/main/640x360/30m52s395ms/match/image.jpg HTTP/1.1
Host: cf-images.us-east-1.prod.boltdns.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gutcleanseprotocol.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: image/jpeg
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=31536000
Date: Sun, 24 Sep 2023 03:54:11 GMT
Expires: Tue, 24 Sep 2024 03:54:11 GMT
Last-Modified: Fri, 01 Jan 2016 00:00:00 GMT
X-Powered-By: BC
X-Powered-From: gantry
X-Cache: Hit from cloudfront
Via: 1.1 41dc61beb3fe8e8c2c299a2522d8330c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: pyryKmJw_uosvvR1cDOssQ1_XJ_8MRBUm0l26NpmWLZ6bTkslFSHpA==
Age: 6470577

cdn.gundrymd.com/images/bio-complete-3/Gundry-whiteboardthumbnail.gif

172.64.144.175

200 OK

314 kB

URL GET HTTP/3
cdn.gundrymd.com/images/bio-complete-3/Gundry-whiteboardthumbnail.gif
IP
172.64.144.175:443
ASN
#13335 CLOUDFLARENET

Requested by
https://gutcleanseprotocol.com/230914a/video/video.php?origexperimentalOrig=true&step=1&funnelSTPId=a0q3w00000DGs1lAAD&origuidOrig=db_bc3_vslstart_html_230922&origspidOrig=null&step=1&origdsidOrig=&origmainFunnelIdOrig=a0q3w00000DGs1kAAD&origExternalOrig=true&origExternalIDOrig=a0q3w00000DGs1kAAD&genericUrl=os220325a_ap-db_bc3_vslstart_html_230922&orignameOrig=os220325a_ap-db_bc3_vslstart_html_230922&origbrandOrig=Gundry%20MD&business_unit=a00f400000dk8tnaab&n=dbtcr&utm_campaign=gmd-db-biocomplete3-cpaeml-all-vsltcr-qqq-none&utm_campaign_id=7013w000001vCcoAAE&utm_content=banner_ad&utm_medium=cpa&utm_source=email&subid1=04a5712012674201a82424c14afc2e73&subid2=439&subid3=3415202737506852333&subid5=everflow&sessionid=988270353948
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintB1:F8:53:82:00:D1:17:E3:D2:1A:FB:92:F5:E9:55:CD:92:2D:ED:B5
ValidityFri, 28 Apr 2023 00:00:00 GMT - Sat, 27 Apr 2024 23:59:59 GMT

File type
GIF image data, version 89a, 533 x 300\012- data
Size
314 kB (314246 bytes)
Hash
5c88b239e3fca345272fe10f93c2663c
569a2e989dccb253502d1ddca37c5018dfb6bb2a
e608c5b1ec168f04b643a14d39ac342139064947355b8053f80aa82d32acbb74

HTTP Headers

GET /images/bio-complete-3/Gundry-whiteboardthumbnail.gif HTTP/1.1
Host: cdn.gundrymd.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gutcleanseprotocol.com/
Cookie: __cf_bm=C0mMlHki35d_aTYm0leMbjRKqBaU5CWSssWCAUbDxOI-1701998227-0-AY2ywhP6OjHjuLahzqZItIHI6T7oV7kX7AZZSOrAR7yPwz3Rv8Ov7NraieMh7ZmTzVM8IocPN6S24LvphcmhGpE=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 08 Dec 2023 01:17:08 GMT
content-type: image/gif
content-length: 314246
cf-bgj: imgq:100,h2pri
cf-polished: status=not_needed
etag: "5c88b239e3fca345272fe10f93c2663c"
last-modified: Tue, 14 Jul 2020 18:09:28 GMT
x-amz-id-2: jCmdMW6GB4W6/NYvAmq/KXB3WNA4ua+xGQbnxsxHv/lSC3bXjukiRVFca/thhNyZ6UChuW3iHuFYTGA6vTMFsA==
x-amz-request-id: ABZ59ZSY0B7M11J1
x-amz-version-id: null
cf-cache-status: HIT
age: 7
expires: Fri, 08 Dec 2023 05:17:08 GMT
cache-control: public, max-age=14400
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 83212abd2e5db512-OSL
alt-svc: h3=":443"; ma=86400

manifest.prod.boltdns.net/manifest/v1/hls/v4/clear/6058004206001/8796ee93-0025-4d33-8f25-a477263c6950/10s/master.m3u8?fastly_token=NjU3MmQ3NTJfZDFiZGE2ZTdiOWNjNDNiYWYzZmVlYzcxOTUyZTJkNTc4NDliNTk0OTFhZGUzYWUyMjUyMzQzMDBlNjBiODE3Zg%3D%3D

151.101.66.27

200 OK

2.0 kB

URL GET HTTP/2
manifest.prod.boltdns.net/manifest/v1/hls/v4/clear/6058004206001/8796ee93-0025-4d33-8f25-a477263c6950/10s/master.m3u8?fastly_token=NjU3MmQ3NTJfZDFiZGE2ZTdiOWNjNDNiYWYzZmVlYzcxOTUyZTJkNTc4NDliNTk0OTFhZGUzYWUyMjUyMzQzMDBlNjBiODE3Zg%3D%3D
IP
151.101.66.27:443
ASN
#54113 FASTLY

Requested by
https://gutcleanseprotocol.com/230914a/video/video.php?origexperimentalOrig=true&step=1&funnelSTPId=a0q3w00000DGs1lAAD&origuidOrig=db_bc3_vslstart_html_230922&origspidOrig=null&step=1&origdsidOrig=&origmainFunnelIdOrig=a0q3w00000DGs1kAAD&origExternalOrig=true&origExternalIDOrig=a0q3w00000DGs1kAAD&genericUrl=os220325a_ap-db_bc3_vslstart_html_230922&orignameOrig=os220325a_ap-db_bc3_vslstart_html_230922&origbrandOrig=Gundry%20MD&business_unit=a00f400000dk8tnaab&n=dbtcr&utm_campaign=gmd-db-biocomplete3-cpaeml-all-vsltcr-qqq-none&utm_campaign_id=7013w000001vCcoAAE&utm_content=banner_ad&utm_medium=cpa&utm_source=email&subid1=04a5712012674201a82424c14afc2e73&subid2=439&subid3=3415202737506852333&subid5=everflow&sessionid=988270353948
Certificate
IssuerGlobalSign nv-sa
Subjectbrightcove.com
FingerprintEC:EC:9B:0A:26:4C:47:76:30:5F:94:29:38:97:A2:25:49:81:99:71
ValiditySun, 12 Mar 2023 18:08:11 GMT - Fri, 12 Apr 2024 18:08:10 GMT

File type
M3U playlist, ASCII text, with very long lines (390)
Size
2.0 kB (2032 bytes)
Hash
d4bc12b380358ff0a8622f7d23b4d0ae
d4552bef4e5304a2cbe03ffebb961ca1b2597ee6
f116ba2b81bda149721c67325db1c44d49d7d5f465b6ec3ef920369d462878c3

HTTP Headers

GET /manifest/v1/hls/v4/clear/6058004206001/8796ee93-0025-4d33-8f25-a477263c6950/10s/master.m3u8?fastly_token=NjU3MmQ3NTJfZDFiZGE2ZTdiOWNjNDNiYWYzZmVlYzcxOTUyZTJkNTc4NDliNTk0OTFhZGUzYWUyMjUyMzQzMDBlNjBiODE3Zg%3D%3D HTTP/1.1
Host: manifest.prod.boltdns.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://gutcleanseprotocol.com
DNT: 1
Connection: keep-alive
Referer: https://gutcleanseprotocol.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
access-control-allow-headers: X-Requested-With,Origin,Range,Accept-Encoding,Referer
access-control-allow-methods: GET,HEAD,OPTIONS
access-control-allow-origin: *
access-control-expose-headers: Server,Range,Content-Length,Content-Range
cache-control: s-maxage=10800, max-age=10800
content-type: application/x-mpegURL
x-bolt-device-group: desktop-firefox
x-powered-by: BC
x-powered-from: gantry
accept-ranges: bytes
date: Fri, 08 Dec 2023 01:17:08 GMT
via: 1.1 varnish
age: 7
x-served-by: cache-bma1631-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1701998228.043096,VS0,VE1
x-device-group: desktop-firefox
content-length: 2032
X-Firefox-Spdy: h2

www2.gutcleanseprotocol.com/assets/js/site.js

172.64.152.117

200 OK

5.5 kB

URL GET HTTP/2
www2.gutcleanseprotocol.com/assets/js/site.js
IP
172.64.152.117:443
ASN
#13335 CLOUDFLARENET

Requested by
https://gutcleanseprotocol.com/230914a/video/video.php?origexperimentalOrig=true&step=1&funnelSTPId=a0q3w00000DGs1lAAD&origuidOrig=db_bc3_vslstart_html_230922&origspidOrig=null&step=1&origdsidOrig=&origmainFunnelIdOrig=a0q3w00000DGs1kAAD&origExternalOrig=true&origExternalIDOrig=a0q3w00000DGs1kAAD&genericUrl=os220325a_ap-db_bc3_vslstart_html_230922&orignameOrig=os220325a_ap-db_bc3_vslstart_html_230922&origbrandOrig=Gundry%20MD&business_unit=a00f400000dk8tnaab&n=dbtcr&utm_campaign=gmd-db-biocomplete3-cpaeml-all-vsltcr-qqq-none&utm_campaign_id=7013w000001vCcoAAE&utm_content=banner_ad&utm_medium=cpa&utm_source=email&subid1=04a5712012674201a82424c14afc2e73&subid2=439&subid3=3415202737506852333&subid5=everflow&sessionid=988270353948
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintB7:45:AA:C9:5E:75:6C:63:8E:77:4E:E5:6F:56:48:24:05:8E:95:5D
ValidityMon, 10 Apr 2023 00:00:00 GMT - Tue, 09 Apr 2024 23:59:59 GMT

File type
ASCII text, with very long lines (1525)
Size
5.5 kB (5499 bytes)
Hash
c8efeddbb2df37d093edb9c02e28cf9d
7eda232215d9c585c8e59ddd74a4421056bd6866
ec7c87790e05cec895a71acbf832f2bfce04157414cca4b8123e41d35df9e29e

HTTP Headers

GET /assets/js/site.js HTTP/1.1
Host: www2.gutcleanseprotocol.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gutcleanseprotocol.com/
Cookie: _csrf=GpDOP58Sp_eTeb6gDswlFiVg; XSRF-TOKEN=h5U58I6C-TnfO7coP6l2R-r9M5QAAIr8Mbjc; __cf_bm=CHoT.s3yJb16Qt.N8xxOGcUq6Zcr0AqzvnezfRmKHLA-1701998226-0-ATeSMh8fUxOjtvrtdfHe7owtrmuNKMBEtv41zcNFvJHk8O7DT5Q2V3gC7f/YY3X+Gs9GFpie0w6WR3srM++N1MI=; _gcl_au=1.1.1453483039.1701998234; tcrFed=false
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 08 Dec 2023 01:17:07 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=3600
cf-bgj: minify
cf-polished: origSize=32662
etag: W/"7f96-18c4679d618"
last-modified: Thu, 07 Dec 2023 22:50:39 GMT
strict-transport-security: max-age=15552000; includeSubDomains
vary: Accept-Encoding
via: 1.1 spaces-router (devel)
x-content-type-options: nosniff
x-dns-prefetch-control: off
x-download-options: noopen
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 6
expires: Fri, 08 Dec 2023 02:17:07 GMT
server: cloudflare
cf-ray: 83212abcb866b4eb-OSL
content-encoding: br
X-Firefox-Spdy: h2

35.244.232.184

200 OK

35 B

URL GET HTTP/2
metrics.brightcove.com/v2/tracker?domain=videocloud&platform=video-js&session=9c8d72cdc40406c72e9a42ba&account=6058004206001&destination=https%3A%2F%2Fgutcleanseprotocol.com%2F230914a%2Fvideo%2Fvideo.php%3ForigexperimentalOrig%3Dtrue%26step%3D1%26funnelSTPId%3Da0q3w00000DGs1lAAD%26origuidOrig%3Ddb_bc3_vslstart_html_230922%26origspidOrig%3Dnull%26step%3D1%26origdsidOrig%3D%26origmainFunnelIdOrig%3Da0q3w00000DGs1kAAD%26origExternalOrig%3Dtrue%26origExternalIDOrig%3Da0q3w00000DGs1kAAD%26genericUrl%3Dos220325a_ap-db_bc3_vslstart_html_230922%26orignameOrig%3Dos220325a_ap-db_bc3_vslstart_html_230922%26origbrandOrig%3DGundry%2520MD%26business_unit%3Da00f400000dk8tnaab%26n%3Ddbtcr%26utm_campaign%3Dgmd-db-biocomplete3-cpaeml-all-vsltcr-qqq-none%26utm_campaign_id%3D7013w000001vCcoAAE%26utm_content%3Dbanner_ad%26utm_medium%3Dcpa%26utm_source%3Demail%26subid1%3D04a5712012674201a82424c14afc2e73%26subid2%3D439%26subid3%3D3415202737506852333%26subid5%3Deverflow%26sessionid%3D988270353948&platform_version=6.67.7&player=players.brightcove.com%2F6058004206001%2FLemwzE05e_default&player_name=Brightcove%20Default%20Player%20autoplay&source=&event=player_init&time=1701998234033&autoplay=any&seq=0
IP
35.244.232.184:443
ASN
#15169 GOOGLE

Requested by
https://gutcleanseprotocol.com/230914a/video/video.php?origexperimentalOrig=true&step=1&funnelSTPId=a0q3w00000DGs1lAAD&origuidOrig=db_bc3_vslstart_html_230922&origspidOrig=null&step=1&origdsidOrig=&origmainFunnelIdOrig=a0q3w00000DGs1kAAD&origExternalOrig=true&origExternalIDOrig=a0q3w00000DGs1kAAD&genericUrl=os220325a_ap-db_bc3_vslstart_html_230922&orignameOrig=os220325a_ap-db_bc3_vslstart_html_230922&origbrandOrig=Gundry%20MD&business_unit=a00f400000dk8tnaab&n=dbtcr&utm_campaign=gmd-db-biocomplete3-cpaeml-all-vsltcr-qqq-none&utm_campaign_id=7013w000001vCcoAAE&utm_content=banner_ad&utm_medium=cpa&utm_source=email&subid1=04a5712012674201a82424c14afc2e73&subid2=439&subid3=3415202737506852333&subid5=everflow&sessionid=988270353948
Certificate
IssuerGoogle Trust Services LLC
Subjectmetrics.brightcove.com
FingerprintA5:42:62:94:62:B0:0A:A4:D0:70:78:B2:E4:39:72:BC:BA:E4:7F:56
ValidityThu, 23 Nov 2023 09:29:26 GMT - Wed, 21 Feb 2024 10:23:40 GMT

File type
GIF image data, version 89a, 1 x 1\012- data
Size
35 B (35 bytes)
Hash
c2196de8ba412c60c22ab491af7b1409
5fbd472222feb8a22cf5b8aa5dc5b8e13af88e2b
6adc3d4c1056996e4e8b765a62604c78b1f867cceb3b15d0b9bedb7c4857f992

HTTP Headers

GET /v2/tracker?domain=videocloud&platform=video-js&session=9c8d72cdc40406c72e9a42ba&account=6058004206001&destination=https%3A%2F%2Fgutcleanseprotocol.com%2F230914a%2Fvideo%2Fvideo.php%3ForigexperimentalOrig%3Dtrue%26step%3D1%26funnelSTPId%3Da0q3w00000DGs1lAAD%26origuidOrig%3Ddb_bc3_vslstart_html_230922%26origspidOrig%3Dnull%26step%3D1%26origdsidOrig%3D%26origmainFunnelIdOrig%3Da0q3w00000DGs1kAAD%26origExternalOrig%3Dtrue%26origExternalIDOrig%3Da0q3w00000DGs1kAAD%26genericUrl%3Dos220325a_ap-db_bc3_vslstart_html_230922%26orignameOrig%3Dos220325a_ap-db_bc3_vslstart_html_230922%26origbrandOrig%3DGundry%2520MD%26business_unit%3Da00f400000dk8tnaab%26n%3Ddbtcr%26utm_campaign%3Dgmd-db-biocomplete3-cpaeml-all-vsltcr-qqq-none%26utm_campaign_id%3D7013w000001vCcoAAE%26utm_content%3Dbanner_ad%26utm_medium%3Dcpa%26utm_source%3Demail%26subid1%3D04a5712012674201a82424c14afc2e73%26subid2%3D439%26subid3%3D3415202737506852333%26subid5%3Deverflow%26sessionid%3D988270353948&platform_version=6.67.7&player=players.brightcove.com%2F6058004206001%2FLemwzE05e_default&player_name=Brightcove%20Default%20Player%20autoplay&source=&event=player_init&time=1701998234033&autoplay=any&seq=0 HTTP/1.1
Host: metrics.brightcove.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gutcleanseprotocol.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-length: 35
content-type: image/gif
cache-control: must-revalidate,no-cache,no-store
strict-transport-security: max-age=300; includeSubDomains
access-control-allow-origin: *
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization
access-control-allow-methods: GET
date: Fri, 08 Dec 2023 01:17:08 GMT
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

metrics.brightcove.com/v2/tracker?domain=videocloud&platform=video-js&session=9c8d72cdc40406c72e9a42ba&account=6058004206001&destination=https%3A%2F%2Fgutcleanseprotocol.com%2F230914a%2Fvideo%2Fvideo.php%3ForigexperimentalOrig%3Dtrue%26step%3D1%26funnelSTPId%3Da0q3w00000DGs1lAAD%26origuidOrig%3Ddb_bc3_vslstart_html_230922%26origspidOrig%3Dnull%26step%3D1%26origdsidOrig%3D%26origmainFunnelIdOrig%3Da0q3w00000DGs1kAAD%26origExternalOrig%3Dtrue%26origExternalIDOrig%3Da0q3w00000DGs1kAAD%26genericUrl%3Dos220325a_ap-db_bc3_vslstart_html_230922%26orignameOrig%3Dos220325a_ap-db_bc3_vslstart_html_230922%26origbrandOrig%3DGundry%2520MD%26business_unit%3Da00f400000dk8tnaab%26n%3Ddbtcr%26utm_campaign%3Dgmd-db-biocomplete3-cpaeml-all-vsltcr-qqq-none%26utm_campaign_id%3D7013w000001vCcoAAE%26utm_content%3Dbanner_ad%26utm_medium%3Dcpa%26utm_source%3Demail%26subid1%3D04a5712012674201a82424c14afc2e73%26subid2%3D439%26subid3%3D3415202737506852333%26subid5%3Deverflow%26sessionid%3D988270353948&platform_version=6.67.7&player=players.brightcove.com%2F6058004206001%2FLemwzE05e_default&player_name=Brightcove%20Default%20Player%20autoplay&source=&autoplay=any&ads_enabled=false&usage=inpage-embed&event=player_load&time=1701998234161&qos.performance.navigation.redirectCount=0&qos.performance.navigation.type=0&qos.performance.navigation.directedMigration=false&qos.performance.timing.loadEventEnd=0&qos.performance.timing.loadEventStart=0&qos.performance.timing.domComplete=0&qos.performance.timing.domContentLoadedEventEnd=1701998234123&qos.performance.timing.domContentLoadedEventStart=1701998234115&qos.performance.timing.domInteractive=1701998234081&qos.performance.timing.domLoading=1701998233201&qos.performance.timing.responseEnd=1701998233175&qos.performance.timing.responseStart=1701998233174&qos.performance.timing.requestStart=1701998232944&qos.performance.timing.secureConnectionStart=1701998232941&qos.performance.timing.connectEnd=1701998232941&qos.performance.timing.connectStart=1701998232941&qos.performance.timing.domainLookupEnd=1701998232941&qos.performance.timing.domainLookupStart=1701998232941&qos.performance.timing.fetchStart=1701998232941&qos.performance.timing.redirectEnd=0&qos.performance.timing.redirectStart=0&qos.performance.timing.unloadEventEnd=0&qos.performance.timing.unloadEventStart=0&qos.performance.timing.navigationStart=1701998231724&qos.player.dimensions=%5B%5B1701998234160%2C%220x0%22%2C%22680x382.5%22%5D%5D&qos.player.pixelratio=%5B%5B1701998234160%2C1%5D%5D&qos.player.screendimensions=%5B%5B1701998234160%2C%221280x1024%22%5D%5D&seq=2

35.244.232.184

200 OK

35 B

URL GET HTTP/2
metrics.brightcove.com/v2/tracker?domain=videocloud&platform=video-js&session=9c8d72cdc40406c72e9a42ba&account=6058004206001&destination=https%3A%2F%2Fgutcleanseprotocol.com%2F230914a%2Fvideo%2Fvideo.php%3ForigexperimentalOrig%3Dtrue%26step%3D1%26funnelSTPId%3Da0q3w00000DGs1lAAD%26origuidOrig%3Ddb_bc3_vslstart_html_230922%26origspidOrig%3Dnull%26step%3D1%26origdsidOrig%3D%26origmainFunnelIdOrig%3Da0q3w00000DGs1kAAD%26origExternalOrig%3Dtrue%26origExternalIDOrig%3Da0q3w00000DGs1kAAD%26genericUrl%3Dos220325a_ap-db_bc3_vslstart_html_230922%26orignameOrig%3Dos220325a_ap-db_bc3_vslstart_html_230922%26origbrandOrig%3DGundry%2520MD%26business_unit%3Da00f400000dk8tnaab%26n%3Ddbtcr%26utm_campaign%3Dgmd-db-biocomplete3-cpaeml-all-vsltcr-qqq-none%26utm_campaign_id%3D7013w000001vCcoAAE%26utm_content%3Dbanner_ad%26utm_medium%3Dcpa%26utm_source%3Demail%26subid1%3D04a5712012674201a82424c14afc2e73%26subid2%3D439%26subid3%3D3415202737506852333%26subid5%3Deverflow%26sessionid%3D988270353948&platform_version=6.67.7&player=players.brightcove.com%2F6058004206001%2FLemwzE05e_default&player_name=Brightcove%20Default%20Player%20autoplay&source=&autoplay=any&ads_enabled=false&usage=inpage-embed&event=player_load&time=1701998234161&qos.performance.navigation.redirectCount=0&qos.performance.navigation.type=0&qos.performance.navigation.directedMigration=false&qos.performance.timing.loadEventEnd=0&qos.performance.timing.loadEventStart=0&qos.performance.timing.domComplete=0&qos.performance.timing.domContentLoadedEventEnd=1701998234123&qos.performance.timing.domContentLoadedEventStart=1701998234115&qos.performance.timing.domInteractive=1701998234081&qos.performance.timing.domLoading=1701998233201&qos.performance.timing.responseEnd=1701998233175&qos.performance.timing.responseStart=1701998233174&qos.performance.timing.requestStart=1701998232944&qos.performance.timing.secureConnectionStart=1701998232941&qos.performance.timing.connectEnd=1701998232941&qos.performance.timing.connectStart=1701998232941&qos.performance.timing.domainLookupEnd=1701998232941&qos.performance.timing.domainLookupStart=1701998232941&qos.performance.timing.fetchStart=1701998232941&qos.performance.timing.redirectEnd=0&qos.performance.timing.redirectStart=0&qos.performance.timing.unloadEventEnd=0&qos.performance.timing.unloadEventStart=0&qos.performance.timing.navigationStart=1701998231724&qos.player.dimensions=%5B%5B1701998234160%2C%220x0%22%2C%22680x382.5%22%5D%5D&qos.player.pixelratio=%5B%5B1701998234160%2C1%5D%5D&qos.player.screendimensions=%5B%5B1701998234160%2C%221280x1024%22%5D%5D&seq=2
IP
35.244.232.184:443
ASN
#15169 GOOGLE

Requested by
https://gutcleanseprotocol.com/230914a/video/video.php?origexperimentalOrig=true&step=1&funnelSTPId=a0q3w00000DGs1lAAD&origuidOrig=db_bc3_vslstart_html_230922&origspidOrig=null&step=1&origdsidOrig=&origmainFunnelIdOrig=a0q3w00000DGs1kAAD&origExternalOrig=true&origExternalIDOrig=a0q3w00000DGs1kAAD&genericUrl=os220325a_ap-db_bc3_vslstart_html_230922&orignameOrig=os220325a_ap-db_bc3_vslstart_html_230922&origbrandOrig=Gundry%20MD&business_unit=a00f400000dk8tnaab&n=dbtcr&utm_campaign=gmd-db-biocomplete3-cpaeml-all-vsltcr-qqq-none&utm_campaign_id=7013w000001vCcoAAE&utm_content=banner_ad&utm_medium=cpa&utm_source=email&subid1=04a5712012674201a82424c14afc2e73&subid2=439&subid3=3415202737506852333&subid5=everflow&sessionid=988270353948
Certificate
IssuerGoogle Trust Services LLC
Subjectmetrics.brightcove.com
FingerprintA5:42:62:94:62:B0:0A:A4:D0:70:78:B2:E4:39:72:BC:BA:E4:7F:56
ValidityThu, 23 Nov 2023 09:29:26 GMT - Wed, 21 Feb 2024 10:23:40 GMT

File type
GIF image data, version 89a, 1 x 1\012- data
Size
35 B (35 bytes)
Hash
c2196de8ba412c60c22ab491af7b1409
5fbd472222feb8a22cf5b8aa5dc5b8e13af88e2b
6adc3d4c1056996e4e8b765a62604c78b1f867cceb3b15d0b9bedb7c4857f992

HTTP Headers

GET /v2/tracker?domain=videocloud&platform=video-js&session=9c8d72cdc40406c72e9a42ba&account=6058004206001&destination=https%3A%2F%2Fgutcleanseprotocol.com%2F230914a%2Fvideo%2Fvideo.php%3ForigexperimentalOrig%3Dtrue%26step%3D1%26funnelSTPId%3Da0q3w00000DGs1lAAD%26origuidOrig%3Ddb_bc3_vslstart_html_230922%26origspidOrig%3Dnull%26step%3D1%26origdsidOrig%3D%26origmainFunnelIdOrig%3Da0q3w00000DGs1kAAD%26origExternalOrig%3Dtrue%26origExternalIDOrig%3Da0q3w00000DGs1kAAD%26genericUrl%3Dos220325a_ap-db_bc3_vslstart_html_230922%26orignameOrig%3Dos220325a_ap-db_bc3_vslstart_html_230922%26origbrandOrig%3DGundry%2520MD%26business_unit%3Da00f400000dk8tnaab%26n%3Ddbtcr%26utm_campaign%3Dgmd-db-biocomplete3-cpaeml-all-vsltcr-qqq-none%26utm_campaign_id%3D7013w000001vCcoAAE%26utm_content%3Dbanner_ad%26utm_medium%3Dcpa%26utm_source%3Demail%26subid1%3D04a5712012674201a82424c14afc2e73%26subid2%3D439%26subid3%3D3415202737506852333%26subid5%3Deverflow%26sessionid%3D988270353948&platform_version=6.67.7&player=players.brightcove.com%2F6058004206001%2FLemwzE05e_default&player_name=Brightcove%20Default%20Player%20autoplay&source=&autoplay=any&ads_enabled=false&usage=inpage-embed&event=player_load&time=1701998234161&qos.performance.navigation.redirectCount=0&qos.performance.navigation.type=0&qos.performance.navigation.directedMigration=false&qos.performance.timing.loadEventEnd=0&qos.performance.timing.loadEventStart=0&qos.performance.timing.domComplete=0&qos.performance.timing.domContentLoadedEventEnd=1701998234123&qos.performance.timing.domContentLoadedEventStart=1701998234115&qos.performance.timing.domInteractive=1701998234081&qos.performance.timing.domLoading=1701998233201&qos.performance.timing.responseEnd=1701998233175&qos.performance.timing.responseStart=1701998233174&qos.performance.timing.requestStart=1701998232944&qos.performance.timing.secureConnectionStart=1701998232941&qos.performance.timing.connectEnd=1701998232941&qos.performance.timing.connectStart=1701998232941&qos.performance.timing.domainLookupEnd=1701998232941&qos.performance.timing.domainLookupStart=1701998232941&qos.performance.timing.fetchStart=1701998232941&qos.performance.timing.redirectEnd=0&qos.performance.timing.redirectStart=0&qos.performance.timing.unloadEventEnd=0&qos.performance.timing.unloadEventStart=0&qos.performance.timing.navigationStart=1701998231724&qos.player.dimensions=%5B%5B1701998234160%2C%220x0%22%2C%22680x382.5%22%5D%5D&qos.player.pixelratio=%5B%5B1701998234160%2C1%5D%5D&qos.player.screendimensions=%5B%5B1701998234160%2C%221280x1024%22%5D%5D&seq=2 HTTP/1.1
Host: metrics.brightcove.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gutcleanseprotocol.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-length: 35
content-type: image/gif
cache-control: must-revalidate,no-cache,no-store
strict-transport-security: max-age=300; includeSubDomains
access-control-allow-origin: *
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization
access-control-allow-methods: GET
date: Fri, 08 Dec 2023 01:17:08 GMT
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

35.244.232.184

200 OK

35 B

URL GET HTTP/2
metrics.brightcove.com/v2/tracker?domain=videocloud&platform=video-js&session=9c8d72cdc40406c72e9a42ba&account=6058004206001&destination=https%3A%2F%2Fgutcleanseprotocol.com%2F230914a%2Fvideo%2Fvideo.php%3ForigexperimentalOrig%3Dtrue%26step%3D1%26funnelSTPId%3Da0q3w00000DGs1lAAD%26origuidOrig%3Ddb_bc3_vslstart_html_230922%26origspidOrig%3Dnull%26step%3D1%26origdsidOrig%3D%26origmainFunnelIdOrig%3Da0q3w00000DGs1kAAD%26origExternalOrig%3Dtrue%26origExternalIDOrig%3Da0q3w00000DGs1kAAD%26genericUrl%3Dos220325a_ap-db_bc3_vslstart_html_230922%26orignameOrig%3Dos220325a_ap-db_bc3_vslstart_html_230922%26origbrandOrig%3DGundry%2520MD%26business_unit%3Da00f400000dk8tnaab%26n%3Ddbtcr%26utm_campaign%3Dgmd-db-biocomplete3-cpaeml-all-vsltcr-qqq-none%26utm_campaign_id%3D7013w000001vCcoAAE%26utm_content%3Dbanner_ad%26utm_medium%3Dcpa%26utm_source%3Demail%26subid1%3D04a5712012674201a82424c14afc2e73%26subid2%3D439%26subid3%3D3415202737506852333%26subid5%3Deverflow%26sessionid%3D988270353948&platform_version=6.67.7&player=players.brightcove.com%2F6058004206001%2FLemwzE05e_default&player_name=Brightcove%20Default%20Player%20autoplay&source=&event=catalog_request&url=https%3A%2F%2Fedge.api.brightcove.com%2Fplayback%2Fv1%2Faccounts%2F6058004206001%2Fvideos%2F6312000596112&time=1701998234038&autoplay=any&seq=1
IP
35.244.232.184:443
ASN
#15169 GOOGLE

Requested by
https://gutcleanseprotocol.com/230914a/video/video.php?origexperimentalOrig=true&step=1&funnelSTPId=a0q3w00000DGs1lAAD&origuidOrig=db_bc3_vslstart_html_230922&origspidOrig=null&step=1&origdsidOrig=&origmainFunnelIdOrig=a0q3w00000DGs1kAAD&origExternalOrig=true&origExternalIDOrig=a0q3w00000DGs1kAAD&genericUrl=os220325a_ap-db_bc3_vslstart_html_230922&orignameOrig=os220325a_ap-db_bc3_vslstart_html_230922&origbrandOrig=Gundry%20MD&business_unit=a00f400000dk8tnaab&n=dbtcr&utm_campaign=gmd-db-biocomplete3-cpaeml-all-vsltcr-qqq-none&utm_campaign_id=7013w000001vCcoAAE&utm_content=banner_ad&utm_medium=cpa&utm_source=email&subid1=04a5712012674201a82424c14afc2e73&subid2=439&subid3=3415202737506852333&subid5=everflow&sessionid=988270353948
Certificate
IssuerGoogle Trust Services LLC
Subjectmetrics.brightcove.com
FingerprintA5:42:62:94:62:B0:0A:A4:D0:70:78:B2:E4:39:72:BC:BA:E4:7F:56
ValidityThu, 23 Nov 2023 09:29:26 GMT - Wed, 21 Feb 2024 10:23:40 GMT

File type
GIF image data, version 89a, 1 x 1\012- data
Size
35 B (35 bytes)
Hash
c2196de8ba412c60c22ab491af7b1409
5fbd472222feb8a22cf5b8aa5dc5b8e13af88e2b
6adc3d4c1056996e4e8b765a62604c78b1f867cceb3b15d0b9bedb7c4857f992

HTTP Headers

GET /v2/tracker?domain=videocloud&platform=video-js&session=9c8d72cdc40406c72e9a42ba&account=6058004206001&destination=https%3A%2F%2Fgutcleanseprotocol.com%2F230914a%2Fvideo%2Fvideo.php%3ForigexperimentalOrig%3Dtrue%26step%3D1%26funnelSTPId%3Da0q3w00000DGs1lAAD%26origuidOrig%3Ddb_bc3_vslstart_html_230922%26origspidOrig%3Dnull%26step%3D1%26origdsidOrig%3D%26origmainFunnelIdOrig%3Da0q3w00000DGs1kAAD%26origExternalOrig%3Dtrue%26origExternalIDOrig%3Da0q3w00000DGs1kAAD%26genericUrl%3Dos220325a_ap-db_bc3_vslstart_html_230922%26orignameOrig%3Dos220325a_ap-db_bc3_vslstart_html_230922%26origbrandOrig%3DGundry%2520MD%26business_unit%3Da00f400000dk8tnaab%26n%3Ddbtcr%26utm_campaign%3Dgmd-db-biocomplete3-cpaeml-all-vsltcr-qqq-none%26utm_campaign_id%3D7013w000001vCcoAAE%26utm_content%3Dbanner_ad%26utm_medium%3Dcpa%26utm_source%3Demail%26subid1%3D04a5712012674201a82424c14afc2e73%26subid2%3D439%26subid3%3D3415202737506852333%26subid5%3Deverflow%26sessionid%3D988270353948&platform_version=6.67.7&player=players.brightcove.com%2F6058004206001%2FLemwzE05e_default&player_name=Brightcove%20Default%20Player%20autoplay&source=&event=catalog_request&url=https%3A%2F%2Fedge.api.brightcove.com%2Fplayback%2Fv1%2Faccounts%2F6058004206001%2Fvideos%2F6312000596112&time=1701998234038&autoplay=any&seq=1 HTTP/1.1
Host: metrics.brightcove.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gutcleanseprotocol.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-length: 35
content-type: image/gif
cache-control: must-revalidate,no-cache,no-store
strict-transport-security: max-age=300; includeSubDomains
access-control-allow-origin: *
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization
access-control-allow-methods: GET
date: Fri, 08 Dec 2023 01:17:08 GMT
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

www.upsellit.com/active/goldenhippo.jsp

34.117.39.58

200 OK

22 kB

URL GET HTTP/2
www.upsellit.com/active/goldenhippo.jsp
IP
34.117.39.58:443
ASN
#15169 GOOGLE

Requested by
https://gutcleanseprotocol.com/230914a/video/video.php?origexperimentalOrig=true&step=1&funnelSTPId=a0q3w00000DGs1lAAD&origuidOrig=db_bc3_vslstart_html_230922&origspidOrig=null&step=1&origdsidOrig=&origmainFunnelIdOrig=a0q3w00000DGs1kAAD&origExternalOrig=true&origExternalIDOrig=a0q3w00000DGs1kAAD&genericUrl=os220325a_ap-db_bc3_vslstart_html_230922&orignameOrig=os220325a_ap-db_bc3_vslstart_html_230922&origbrandOrig=Gundry%20MD&business_unit=a00f400000dk8tnaab&n=dbtcr&utm_campaign=gmd-db-biocomplete3-cpaeml-all-vsltcr-qqq-none&utm_campaign_id=7013w000001vCcoAAE&utm_content=banner_ad&utm_medium=cpa&utm_source=email&subid1=04a5712012674201a82424c14afc2e73&subid2=439&subid3=3415202737506852333&subid5=everflow&sessionid=988270353948
Certificate
IssuerDigiCert Inc
Subject*.upsellit.com
FingerprintC1:23:66:EA:31:52:E6:DA:61:AB:28:E9:CB:5F:08:3F:D3:A5:41:86
ValidityMon, 11 Sep 2023 00:00:00 GMT - Thu, 03 Oct 2024 23:59:59 GMT

File type
ASCII text, with very long lines (8683), with CRLF, LF line terminators
Size
22 kB (21663 bytes)
Hash
ad2fcf8907b3a3ac4095e72be3aa2c56
7d83c052bacf287ed26f1e59cd6396d7d771d933
5b04c962a7caa67ff4a238d15057b9fccbb0da9239b60cfdca0296e93652dcc2

HTTP Headers

GET /active/goldenhippo.jsp HTTP/1.1
Host: www.upsellit.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gutcleanseprotocol.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
strict-transport-security: max-age=31536000; includeSubDomains
content-encoding: gzip
via: 1.1 google
date: Thu, 07 Dec 2023 23:16:10 GMT
expires: Fri, 08 Dec 2023 23:16:10 GMT
cache-control: max-age=86400
content-type: application/x-javascript;charset=ISO-8859-1
vary: Accept-Encoding
content-length: 21663
age: 7258
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

status.rapidssl.com/

192.229.221.95

471 B

URL
status.rapidssl.com/
IP
192.229.221.95:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
3b4c033349c51c35d70cee7ad6b89ddd
4f07f67f6428e737361c1b82315867c021cbd29f
de5ad2465bde2facb77c2e2b2df357798b2f3ea88f431ca6216fac3ebd78411d

HTTP Headers

POST / HTTP/1.1
Host: status.rapidssl.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2803
Cache-Control: max-age=7200
Content-Type: application/ocsp-response
Date: Fri, 08 Dec 2023 01:17:08 GMT
Last-Modified: Fri, 08 Dec 2023 00:30:25 GMT
Server: ECAcc (ska/F6E1)
X-Cache: HIT
Content-Length: 471

manifest.prod.boltdns.net/manifest/v1/hls/v4/clear/6058004206001/8796ee93-0025-4d33-8f25-a477263c6950/60914293-a9be-42b2-8af3-0844a9e96022/10s/rendition.m3u8?fastly_token=NjU3MmQ3NTNfYzcwNzM4YTViZWFlNzkzYmRhNmU4MTRlMjc5MmZmMjY3ODU4YjZkMjQ5YjE0YjBhN2NhY2M3OWNhNTYyNmMzNA%3D%3D

151.101.66.27

200 OK

67 kB

URL GET HTTP/2
manifest.prod.boltdns.net/manifest/v1/hls/v4/clear/6058004206001/8796ee93-0025-4d33-8f25-a477263c6950/60914293-a9be-42b2-8af3-0844a9e96022/10s/rendition.m3u8?fastly_token=NjU3MmQ3NTNfYzcwNzM4YTViZWFlNzkzYmRhNmU4MTRlMjc5MmZmMjY3ODU4YjZkMjQ5YjE0YjBhN2NhY2M3OWNhNTYyNmMzNA%3D%3D
IP
151.101.66.27:443
ASN
#54113 FASTLY

Requested by
https://gutcleanseprotocol.com/230914a/video/video.php?origexperimentalOrig=true&step=1&funnelSTPId=a0q3w00000DGs1lAAD&origuidOrig=db_bc3_vslstart_html_230922&origspidOrig=null&step=1&origdsidOrig=&origmainFunnelIdOrig=a0q3w00000DGs1kAAD&origExternalOrig=true&origExternalIDOrig=a0q3w00000DGs1kAAD&genericUrl=os220325a_ap-db_bc3_vslstart_html_230922&orignameOrig=os220325a_ap-db_bc3_vslstart_html_230922&origbrandOrig=Gundry%20MD&business_unit=a00f400000dk8tnaab&n=dbtcr&utm_campaign=gmd-db-biocomplete3-cpaeml-all-vsltcr-qqq-none&utm_campaign_id=7013w000001vCcoAAE&utm_content=banner_ad&utm_medium=cpa&utm_source=email&subid1=04a5712012674201a82424c14afc2e73&subid2=439&subid3=3415202737506852333&subid5=everflow&sessionid=988270353948
Certificate
IssuerGlobalSign nv-sa
Subjectbrightcove.com
FingerprintEC:EC:9B:0A:26:4C:47:76:30:5F:94:29:38:97:A2:25:49:81:99:71
ValiditySun, 12 Mar 2023 18:08:11 GMT - Fri, 12 Apr 2024 18:08:10 GMT

File type
M3U playlist, ASCII text
Size
67 kB (66783 bytes)
Hash
fa18444b7a51013327903bda7c3caf07
d53fe7efa63eb33aab37de941bda302309778114
4b6705b520e416471a951c86fea64e1149b130cbc58454c2de198ab3eee75406

HTTP Headers

GET /manifest/v1/hls/v4/clear/6058004206001/8796ee93-0025-4d33-8f25-a477263c6950/60914293-a9be-42b2-8af3-0844a9e96022/10s/rendition.m3u8?fastly_token=NjU3MmQ3NTNfYzcwNzM4YTViZWFlNzkzYmRhNmU4MTRlMjc5MmZmMjY3ODU4YjZkMjQ5YjE0YjBhN2NhY2M3OWNhNTYyNmMzNA%3D%3D HTTP/1.1
Host: manifest.prod.boltdns.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://gutcleanseprotocol.com
DNT: 1
Connection: keep-alive
Referer: https://gutcleanseprotocol.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
access-control-allow-headers: X-Requested-With,Origin,Range,Accept-Encoding,Referer
access-control-allow-methods: GET,HEAD,OPTIONS
access-control-allow-origin: *
access-control-expose-headers: Server,Range,Content-Length,Content-Range
cache-control: s-maxage=10800, max-age=10800
content-type: application/x-mpegURL
x-powered-by: BC
x-powered-from: gantry
accept-ranges: bytes
date: Fri, 08 Dec 2023 01:17:08 GMT
via: 1.1 varnish
age: 7
x-served-by: cache-bma1631-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1701998228.270010,VS0,VE1
x-device-group: desktop-firefox
content-length: 66783
X-Firefox-Spdy: h2

www2.gutcleanseprotocol.com/proxy/funnel/stats/alternsave/?event=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

172.64.152.117

200 OK

29 B

URL GET HTTP/2
www2.gutcleanseprotocol.com/proxy/funnel/stats/alternsave/?event=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
IP
172.64.152.117:443
ASN
#13335 CLOUDFLARENET

Requested by
https://gutcleanseprotocol.com/230914a/video/video.php?origexperimentalOrig=true&step=1&funnelSTPId=a0q3w00000DGs1lAAD&origuidOrig=db_bc3_vslstart_html_230922&origspidOrig=null&step=1&origdsidOrig=&origmainFunnelIdOrig=a0q3w00000DGs1kAAD&origExternalOrig=true&origExternalIDOrig=a0q3w00000DGs1kAAD&genericUrl=os220325a_ap-db_bc3_vslstart_html_230922&orignameOrig=os220325a_ap-db_bc3_vslstart_html_230922&origbrandOrig=Gundry%20MD&business_unit=a00f400000dk8tnaab&n=dbtcr&utm_campaign=gmd-db-biocomplete3-cpaeml-all-vsltcr-qqq-none&utm_campaign_id=7013w000001vCcoAAE&utm_content=banner_ad&utm_medium=cpa&utm_source=email&subid1=04a5712012674201a82424c14afc2e73&subid2=439&subid3=3415202737506852333&subid5=everflow&sessionid=988270353948
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintB7:45:AA:C9:5E:75:6C:63:8E:77:4E:E5:6F:56:48:24:05:8E:95:5D
ValidityMon, 10 Apr 2023 00:00:00 GMT - Tue, 09 Apr 2024 23:59:59 GMT

File type
ASCII text, with no line terminators
Size
29 B (29 bytes)
Hash
666c82637166f160b430c3a13caf3b30
45f23499be7924955fa257ce10c2a76412e0a16c
b5b1625932b3d2b242b95c8680756c5d79135956bb1f6fd0b9544261a9d56389

HTTP Headers

GET /proxy/funnel/stats/alternsave/?event=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 HTTP/1.1
Host: www2.gutcleanseprotocol.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gutcleanseprotocol.com/
Cookie: _csrf=GpDOP58Sp_eTeb6gDswlFiVg; XSRF-TOKEN=h5U58I6C-TnfO7coP6l2R-r9M5QAAIr8Mbjc; __cf_bm=CHoT.s3yJb16Qt.N8xxOGcUq6Zcr0AqzvnezfRmKHLA-1701998226-0-ATeSMh8fUxOjtvrtdfHe7owtrmuNKMBEtv41zcNFvJHk8O7DT5Q2V3gC7f/YY3X+Gs9GFpie0w6WR3srM++N1MI=; _gcl_au=1.1.1453483039.1701998234; tcrFed=false; alternaiGuestId=6541e9f1-0423-4efc-9322-c50a8b2a3e76,gutcleanseprotocol.com,,blob:https:; _ga_5MM7TKXSPX=GS1.1.1701998234.1.0.1701998234.60.0.0; _ga=GA1.1.1848370653.1701998235
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 08 Dec 2023 01:17:08 GMT
content-type: application/javascript; charset=utf-8
content-length: 29
cache-control: private, no-cache, max-age = 0
etag: W/"1d-RfI0mb55JJVfolfOEMKnZBLgoWw"
set-cookie: XSRF-TOKEN=3wRYattE-s-czMlYGgMmI2mCnupDfPlliJ8s; Path=/; Secure
strict-transport-security: max-age=15552000; includeSubDomains
vary: Accept-Encoding
via: 1.1 spaces-router (devel)
x-content-type-options: nosniff
x-dns-prefetch-control: off
x-download-options: noopen
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 83212abe58e7b4eb-OSL
X-Firefox-Spdy: h2

manifest.prod.boltdns.net/manifest/v1/hls/v4/clear/6058004206001/8796ee93-0025-4d33-8f25-a477263c6950/3f8964e2-3305-4d7e-a598-ada24cdf30d5/10s/rendition.m3u8?fastly_token=NjU3MmQ3NTNfMDhmOTk0NDZhYzk4N2U3MmJhNTc4ZjVmMjU1ODMwYTliYWVkNDAzNWQ1NDM2ZDY2OTIzYmZkYWE1NjQzOGEwNQ%3D%3D

151.101.66.27

200 OK

67 kB

URL GET HTTP/2
manifest.prod.boltdns.net/manifest/v1/hls/v4/clear/6058004206001/8796ee93-0025-4d33-8f25-a477263c6950/3f8964e2-3305-4d7e-a598-ada24cdf30d5/10s/rendition.m3u8?fastly_token=NjU3MmQ3NTNfMDhmOTk0NDZhYzk4N2U3MmJhNTc4ZjVmMjU1ODMwYTliYWVkNDAzNWQ1NDM2ZDY2OTIzYmZkYWE1NjQzOGEwNQ%3D%3D
IP
151.101.66.27:443
ASN
#54113 FASTLY

Requested by
https://gutcleanseprotocol.com/230914a/video/video.php?origexperimentalOrig=true&step=1&funnelSTPId=a0q3w00000DGs1lAAD&origuidOrig=db_bc3_vslstart_html_230922&origspidOrig=null&step=1&origdsidOrig=&origmainFunnelIdOrig=a0q3w00000DGs1kAAD&origExternalOrig=true&origExternalIDOrig=a0q3w00000DGs1kAAD&genericUrl=os220325a_ap-db_bc3_vslstart_html_230922&orignameOrig=os220325a_ap-db_bc3_vslstart_html_230922&origbrandOrig=Gundry%20MD&business_unit=a00f400000dk8tnaab&n=dbtcr&utm_campaign=gmd-db-biocomplete3-cpaeml-all-vsltcr-qqq-none&utm_campaign_id=7013w000001vCcoAAE&utm_content=banner_ad&utm_medium=cpa&utm_source=email&subid1=04a5712012674201a82424c14afc2e73&subid2=439&subid3=3415202737506852333&subid5=everflow&sessionid=988270353948
Certificate
IssuerGlobalSign nv-sa
Subjectbrightcove.com
FingerprintEC:EC:9B:0A:26:4C:47:76:30:5F:94:29:38:97:A2:25:49:81:99:71
ValiditySun, 12 Mar 2023 18:08:11 GMT - Fri, 12 Apr 2024 18:08:10 GMT

File type
M3U playlist, ASCII text
Size
67 kB (66592 bytes)
Hash
85d54699ec8d9054ff7d6190db36bedc
0565e3ed5dd2f8b365ca5ebff550da4161a45514
b1e755f75c877ce7285e71eb06df7049863d8cb8641ab552f0e67558ec06905e

HTTP Headers

GET /manifest/v1/hls/v4/clear/6058004206001/8796ee93-0025-4d33-8f25-a477263c6950/3f8964e2-3305-4d7e-a598-ada24cdf30d5/10s/rendition.m3u8?fastly_token=NjU3MmQ3NTNfMDhmOTk0NDZhYzk4N2U3MmJhNTc4ZjVmMjU1ODMwYTliYWVkNDAzNWQ1NDM2ZDY2OTIzYmZkYWE1NjQzOGEwNQ%3D%3D HTTP/1.1
Host: manifest.prod.boltdns.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://gutcleanseprotocol.com
DNT: 1
Connection: keep-alive
Referer: https://gutcleanseprotocol.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
access-control-allow-headers: X-Requested-With,Origin,Range,Accept-Encoding,Referer
access-control-allow-methods: GET,HEAD,OPTIONS
access-control-allow-origin: *
access-control-expose-headers: Server,Range,Content-Length,Content-Range
cache-control: s-maxage=10800, max-age=10800
content-type: application/x-mpegURL
x-powered-by: BC
x-powered-from: gantry
accept-ranges: bytes
date: Fri, 08 Dec 2023 01:17:08 GMT
via: 1.1 varnish
age: 6
x-served-by: cache-bma1631-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1701998228.326740,VS0,VE1
x-device-group: desktop-firefox
content-length: 66592
X-Firefox-Spdy: h2

bcboltgoldenh-a.akamaihd.net/media/v1/hls/v4/clear/6058004206001/8796ee93-0025-4d33-8f25-a477263c6950/60914293-a9be-42b2-8af3-0844a9e96022/5x/segment0.ts

104.123.68.154

200 OK

1.6 MB

URL GET HTTP/1.1
bcboltgoldenh-a.akamaihd.net/media/v1/hls/v4/clear/6058004206001/8796ee93-0025-4d33-8f25-a477263c6950/60914293-a9be-42b2-8af3-0844a9e96022/5x/segment0.ts
IP
104.123.68.154:443
ASN
#20940 Akamai International B.V.

Requested by
https://gutcleanseprotocol.com/230914a/video/video.php?origexperimentalOrig=true&step=1&funnelSTPId=a0q3w00000DGs1lAAD&origuidOrig=db_bc3_vslstart_html_230922&origspidOrig=null&step=1&origdsidOrig=&origmainFunnelIdOrig=a0q3w00000DGs1kAAD&origExternalOrig=true&origExternalIDOrig=a0q3w00000DGs1kAAD&genericUrl=os220325a_ap-db_bc3_vslstart_html_230922&orignameOrig=os220325a_ap-db_bc3_vslstart_html_230922&origbrandOrig=Gundry%20MD&business_unit=a00f400000dk8tnaab&n=dbtcr&utm_campaign=gmd-db-biocomplete3-cpaeml-all-vsltcr-qqq-none&utm_campaign_id=7013w000001vCcoAAE&utm_content=banner_ad&utm_medium=cpa&utm_source=email&subid1=04a5712012674201a82424c14afc2e73&subid2=439&subid3=3415202737506852333&subid5=everflow&sessionid=988270353948
Certificate
IssuerDigiCert Inc
Subjecta248.e.akamai.net
FingerprintA3:C7:B4:95:4E:16:BD:C5:8A:EE:85:53:5D:C1:C2:CD:43:E9:EC:B9
ValidityTue, 16 May 2023 00:00:00 GMT - Wed, 15 May 2024 23:59:59 GMT

File type
MPEG transport stream data\012- data
Size
1.6 MB (1597624 bytes)
Hash
3cf5dfbf12254bfb4b2b25628c6bce53
093975270f9bd2893406b34764e9c6018b4e30ec
fd07057cd480c0f0183eee49c8c47b414406169d0908930f8db311eb9319fa58

HTTP Headers

GET /media/v1/hls/v4/clear/6058004206001/8796ee93-0025-4d33-8f25-a477263c6950/60914293-a9be-42b2-8af3-0844a9e96022/5x/segment0.ts HTTP/1.1
Host: bcboltgoldenh-a.akamaihd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://gutcleanseprotocol.com
DNT: 1
Connection: keep-alive
Referer: https://gutcleanseprotocol.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Length: 1597624
ETag: "981a92f7eea7ca4fea43be98a9436342"
Last-Modified: Fri, 01 Jan 2016 00:00:00 GMT
X-Powered-By: BC
X-Powered-From: gantry
X-Amz-Cf-Pop: JFK50-P7
X-Amz-Cf-Id: A8zvOAVKWuvvDeQ4hfE_kuiu9XKT-_6Q4rpaywWHoMRc5NCBHr2wTw==
Backend-IP: 18.164.131.221
Fastly-Restarts: 1
Accept-Ranges: bytes
X-Served-By: cache-ewr18126-EWR
X-Cache-Hits: 0
X-Timer: S1691794980.676717,VS0,VE35
BC-MID: true
Cache-Control: public, max-age=31244647
Expires: Tue, 03 Dec 2024 16:21:15 GMT
Date: Fri, 08 Dec 2023 01:17:08 GMT
Connection: keep-alive
Akamai-Mon-Iucid-Del: 888514
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
Content-Type: video/MP2T
Access-Control-Allow-Methods: GET,HEAD,OPTIONS
Access-Control-Expose-Headers: Server,Range,Content-Length,Content-Range,Akamai-Mon-Iucid-Ing,Akamai-Mon-Iucid-Del
Access-Control-Allow-Headers: X-Requested-With,Origin,Range,Accept-Encoding,Referer
Access-Control-Allow-Origin: *

www2.gutcleanseprotocol.com/proxy/funnel/stats/alternsave/?event=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

172.64.152.117

200 OK

29 B

URL GET HTTP/2
www2.gutcleanseprotocol.com/proxy/funnel/stats/alternsave/?event=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
IP
172.64.152.117:443
ASN
#13335 CLOUDFLARENET

Requested by
https://gutcleanseprotocol.com/230914a/video/video.php?origexperimentalOrig=true&step=1&funnelSTPId=a0q3w00000DGs1lAAD&origuidOrig=db_bc3_vslstart_html_230922&origspidOrig=null&step=1&origdsidOrig=&origmainFunnelIdOrig=a0q3w00000DGs1kAAD&origExternalOrig=true&origExternalIDOrig=a0q3w00000DGs1kAAD&genericUrl=os220325a_ap-db_bc3_vslstart_html_230922&orignameOrig=os220325a_ap-db_bc3_vslstart_html_230922&origbrandOrig=Gundry%20MD&business_unit=a00f400000dk8tnaab&n=dbtcr&utm_campaign=gmd-db-biocomplete3-cpaeml-all-vsltcr-qqq-none&utm_campaign_id=7013w000001vCcoAAE&utm_content=banner_ad&utm_medium=cpa&utm_source=email&subid1=04a5712012674201a82424c14afc2e73&subid2=439&subid3=3415202737506852333&subid5=everflow&sessionid=988270353948
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintB7:45:AA:C9:5E:75:6C:63:8E:77:4E:E5:6F:56:48:24:05:8E:95:5D
ValidityMon, 10 Apr 2023 00:00:00 GMT - Tue, 09 Apr 2024 23:59:59 GMT

File type
ASCII text, with no line terminators
Size
29 B (29 bytes)
Hash
666c82637166f160b430c3a13caf3b30
45f23499be7924955fa257ce10c2a76412e0a16c
b5b1625932b3d2b242b95c8680756c5d79135956bb1f6fd0b9544261a9d56389

HTTP Headers

GET /proxy/funnel/stats/alternsave/?event=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 HTTP/1.1
Host: www2.gutcleanseprotocol.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gutcleanseprotocol.com/
Cookie: _csrf=GpDOP58Sp_eTeb6gDswlFiVg; XSRF-TOKEN=ia9WY0Fh-Gcm9nPdiKoTqz8M7NxgjMZi_nak; __cf_bm=CHoT.s3yJb16Qt.N8xxOGcUq6Zcr0AqzvnezfRmKHLA-1701998226-0-ATeSMh8fUxOjtvrtdfHe7owtrmuNKMBEtv41zcNFvJHk8O7DT5Q2V3gC7f/YY3X+Gs9GFpie0w6WR3srM++N1MI=; _gcl_au=1.1.1453483039.1701998234; tcrFed=false; alternaiGuestId=6541e9f1-0423-4efc-9322-c50a8b2a3e76,gutcleanseprotocol.com,,blob:https:; _ga_5MM7TKXSPX=GS1.1.1701998234.1.0.1701998234.60.0.0; _ga=GA1.1.1848370653.1701998235
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 08 Dec 2023 01:17:08 GMT
content-type: application/javascript; charset=utf-8
content-length: 29
cache-control: private, no-cache, max-age = 0
etag: W/"1d-RfI0mb55JJVfolfOEMKnZBLgoWw"
set-cookie: XSRF-TOKEN=dIKyotkU--X3vdKYZUp8ymNYPvzRaGAmqG_I; Path=/; Secure
strict-transport-security: max-age=15552000; includeSubDomains
vary: Accept-Encoding
via: 1.1 spaces-router (devel)
x-content-type-options: nosniff
x-dns-prefetch-control: off
x-download-options: noopen
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 83212abe78f0b4eb-OSL
X-Firefox-Spdy: h2

www2.gutcleanseprotocol.com/request-ip

172.64.152.117

200 OK

93 B

URL GET HTTP/2
www2.gutcleanseprotocol.com/request-ip
IP
172.64.152.117:443
ASN
#13335 CLOUDFLARENET

Requested by
https://gutcleanseprotocol.com/230914a/video/video.php?origexperimentalOrig=true&step=1&funnelSTPId=a0q3w00000DGs1lAAD&origuidOrig=db_bc3_vslstart_html_230922&origspidOrig=null&step=1&origdsidOrig=&origmainFunnelIdOrig=a0q3w00000DGs1kAAD&origExternalOrig=true&origExternalIDOrig=a0q3w00000DGs1kAAD&genericUrl=os220325a_ap-db_bc3_vslstart_html_230922&orignameOrig=os220325a_ap-db_bc3_vslstart_html_230922&origbrandOrig=Gundry%20MD&business_unit=a00f400000dk8tnaab&n=dbtcr&utm_campaign=gmd-db-biocomplete3-cpaeml-all-vsltcr-qqq-none&utm_campaign_id=7013w000001vCcoAAE&utm_content=banner_ad&utm_medium=cpa&utm_source=email&subid1=04a5712012674201a82424c14afc2e73&subid2=439&subid3=3415202737506852333&subid5=everflow&sessionid=988270353948
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintB7:45:AA:C9:5E:75:6C:63:8E:77:4E:E5:6F:56:48:24:05:8E:95:5D
ValidityMon, 10 Apr 2023 00:00:00 GMT - Tue, 09 Apr 2024 23:59:59 GMT

File type
ASCII text, with no line terminators
Size
93 B (93 bytes)
Hash
8f3cdbb688ba1ff445fe6aed6254addf
b6028270dcd610eac5265784bc14e8d335d6ed74
fcfdbef4c7fa2b9fca91e95c121bd9fc29e6ebe20273c86c274c5b1b7e4470f3

HTTP Headers

GET /request-ip HTTP/1.1
Host: www2.gutcleanseprotocol.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gutcleanseprotocol.com/
Cookie: _csrf=GpDOP58Sp_eTeb6gDswlFiVg; XSRF-TOKEN=h5U58I6C-TnfO7coP6l2R-r9M5QAAIr8Mbjc; __cf_bm=CHoT.s3yJb16Qt.N8xxOGcUq6Zcr0AqzvnezfRmKHLA-1701998226-0-ATeSMh8fUxOjtvrtdfHe7owtrmuNKMBEtv41zcNFvJHk8O7DT5Q2V3gC7f/YY3X+Gs9GFpie0w6WR3srM++N1MI=; _gcl_au=1.1.1453483039.1701998234; tcrFed=false; alternaiGuestId=6541e9f1-0423-4efc-9322-c50a8b2a3e76,gutcleanseprotocol.com,,blob:https:
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 08 Dec 2023 01:17:08 GMT
content-type: application/javascript; charset=utf-8
cache-control: private, no-cache, max-age = 0
etag: W/"3d-tgKCcNzWEOrFJleEvBTo0zXW7XQ"
set-cookie: XSRF-TOKEN=ia9WY0Fh-Gcm9nPdiKoTqz8M7NxgjMZi_nak; Path=/; Secure
strict-transport-security: max-age=15552000; includeSubDomains
vary: Accept-Encoding
via: 1.1 spaces-router (devel)
x-content-type-options: nosniff
x-dns-prefetch-control: off
x-download-options: noopen
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 83212abd4892b4eb-OSL
content-encoding: br
X-Firefox-Spdy: h2

bcboltgoldenh-a.akamaihd.net/media/v1/hls/v4/clear/6058004206001/8796ee93-0025-4d33-8f25-a477263c6950/3f8964e2-3305-4d7e-a598-ada24cdf30d5/5x/segment0.ts

104.123.68.154

200 OK

166 kB

URL GET HTTP/1.1
bcboltgoldenh-a.akamaihd.net/media/v1/hls/v4/clear/6058004206001/8796ee93-0025-4d33-8f25-a477263c6950/3f8964e2-3305-4d7e-a598-ada24cdf30d5/5x/segment0.ts
IP
104.123.68.154:443
ASN
#20940 Akamai International B.V.

Requested by
https://gutcleanseprotocol.com/230914a/video/video.php?origexperimentalOrig=true&step=1&funnelSTPId=a0q3w00000DGs1lAAD&origuidOrig=db_bc3_vslstart_html_230922&origspidOrig=null&step=1&origdsidOrig=&origmainFunnelIdOrig=a0q3w00000DGs1kAAD&origExternalOrig=true&origExternalIDOrig=a0q3w00000DGs1kAAD&genericUrl=os220325a_ap-db_bc3_vslstart_html_230922&orignameOrig=os220325a_ap-db_bc3_vslstart_html_230922&origbrandOrig=Gundry%20MD&business_unit=a00f400000dk8tnaab&n=dbtcr&utm_campaign=gmd-db-biocomplete3-cpaeml-all-vsltcr-qqq-none&utm_campaign_id=7013w000001vCcoAAE&utm_content=banner_ad&utm_medium=cpa&utm_source=email&subid1=04a5712012674201a82424c14afc2e73&subid2=439&subid3=3415202737506852333&subid5=everflow&sessionid=988270353948
Certificate
IssuerDigiCert Inc
Subjecta248.e.akamai.net
FingerprintA3:C7:B4:95:4E:16:BD:C5:8A:EE:85:53:5D:C1:C2:CD:43:E9:EC:B9
ValidityTue, 16 May 2023 00:00:00 GMT - Wed, 15 May 2024 23:59:59 GMT

File type
MPEG transport stream data\012- data
Size
166 kB (165816 bytes)
Hash
15028f63fa9c1757d1cf629e3823969f
e0a7f84580b34958cb8a9f9300a5af78a700165c
d048ff0795c92319b2ae200656101f698fe43fbe61e8d5913c8a63095f09c12d

HTTP Headers

GET /media/v1/hls/v4/clear/6058004206001/8796ee93-0025-4d33-8f25-a477263c6950/3f8964e2-3305-4d7e-a598-ada24cdf30d5/5x/segment0.ts HTTP/1.1
Host: bcboltgoldenh-a.akamaihd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://gutcleanseprotocol.com
DNT: 1
Connection: keep-alive
Referer: https://gutcleanseprotocol.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Length: 165816
ETag: "2fb7c0f267c6063390faf6a7988cdc45"
Last-Modified: Fri, 01 Jan 2016 00:00:00 GMT
X-Powered-By: BC
X-Powered-From: gantry
X-Amz-Cf-Pop: JFK50-P7
X-Amz-Cf-Id: aETexBETzDPNO7HJ4epraRnkrJfRcQdG76jEJxCmeuSHDwinNvwh_Q==
Backend-IP: 18.164.131.166
Fastly-Restarts: 1
Accept-Ranges: bytes
X-Served-By: cache-ewr18145-EWR
X-Cache-Hits: 0
X-Timer: S1691794980.779850,VS0,VE19
BC-MID: true
Cache-Control: public, max-age=29918224
Expires: Mon, 18 Nov 2024 07:54:12 GMT
Date: Fri, 08 Dec 2023 01:17:08 GMT
Connection: keep-alive
Akamai-Mon-Iucid-Del: 888514
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
Content-Type: video/MP2T
Access-Control-Allow-Methods: GET,HEAD,OPTIONS
Access-Control-Expose-Headers: Server,Range,Content-Length,Content-Range,Akamai-Mon-Iucid-Ing,Akamai-Mon-Iucid-Del
Access-Control-Allow-Headers: X-Requested-With,Origin,Range,Accept-Encoding,Referer
Access-Control-Allow-Origin: *

35.244.232.184

200 OK

35 B

URL GET HTTP/3
metrics.brightcove.com/v2/tracker?domain=videocloud&platform=video-js&session=9c8d72cdc40406c72e9a42ba&account=6058004206001&destination=https%3A%2F%2Fgutcleanseprotocol.com%2F230914a%2Fvideo%2Fvideo.php%3ForigexperimentalOrig%3Dtrue%26step%3D1%26funnelSTPId%3Da0q3w00000DGs1lAAD%26origuidOrig%3Ddb_bc3_vslstart_html_230922%26origspidOrig%3Dnull%26step%3D1%26origdsidOrig%3D%26origmainFunnelIdOrig%3Da0q3w00000DGs1kAAD%26origExternalOrig%3Dtrue%26origExternalIDOrig%3Da0q3w00000DGs1kAAD%26genericUrl%3Dos220325a_ap-db_bc3_vslstart_html_230922%26orignameOrig%3Dos220325a_ap-db_bc3_vslstart_html_230922%26origbrandOrig%3DGundry%2520MD%26business_unit%3Da00f400000dk8tnaab%26n%3Ddbtcr%26utm_campaign%3Dgmd-db-biocomplete3-cpaeml-all-vsltcr-qqq-none%26utm_campaign_id%3D7013w000001vCcoAAE%26utm_content%3Dbanner_ad%26utm_medium%3Dcpa%26utm_source%3Demail%26subid1%3D04a5712012674201a82424c14afc2e73%26subid2%3D439%26subid3%3D3415202737506852333%26subid5%3Deverflow%26sessionid%3D988270353948&platform_version=6.67.7&player=players.brightcove.com%2F6058004206001%2FLemwzE05e_default&player_name=Brightcove%20Default%20Player%20autoplay&source=&autoplay=any&ads_enabled=false&event=catalog_response&url=https%3A%2F%2Fedge.api.brightcove.com%2Fplayback%2Fv1%2Faccounts%2F6058004206001%2Fvideos%2F6312000596112&time=1701998234478&response_time_ms=440&seq=3
IP
35.244.232.184:443
ASN
#15169 GOOGLE

Requested by
https://gutcleanseprotocol.com/230914a/video/video.php?origexperimentalOrig=true&step=1&funnelSTPId=a0q3w00000DGs1lAAD&origuidOrig=db_bc3_vslstart_html_230922&origspidOrig=null&step=1&origdsidOrig=&origmainFunnelIdOrig=a0q3w00000DGs1kAAD&origExternalOrig=true&origExternalIDOrig=a0q3w00000DGs1kAAD&genericUrl=os220325a_ap-db_bc3_vslstart_html_230922&orignameOrig=os220325a_ap-db_bc3_vslstart_html_230922&origbrandOrig=Gundry%20MD&business_unit=a00f400000dk8tnaab&n=dbtcr&utm_campaign=gmd-db-biocomplete3-cpaeml-all-vsltcr-qqq-none&utm_campaign_id=7013w000001vCcoAAE&utm_content=banner_ad&utm_medium=cpa&utm_source=email&subid1=04a5712012674201a82424c14afc2e73&subid2=439&subid3=3415202737506852333&subid5=everflow&sessionid=988270353948
Certificate
IssuerGoogle Trust Services LLC
Subjectmetrics.brightcove.com
FingerprintA5:42:62:94:62:B0:0A:A4:D0:70:78:B2:E4:39:72:BC:BA:E4:7F:56
ValidityThu, 23 Nov 2023 09:29:26 GMT - Wed, 21 Feb 2024 10:23:40 GMT

File type
GIF image data, version 89a, 1 x 1\012- data
Size
35 B (35 bytes)
Hash
c2196de8ba412c60c22ab491af7b1409
5fbd472222feb8a22cf5b8aa5dc5b8e13af88e2b
6adc3d4c1056996e4e8b765a62604c78b1f867cceb3b15d0b9bedb7c4857f992

HTTP Headers

GET /v2/tracker?domain=videocloud&platform=video-js&session=9c8d72cdc40406c72e9a42ba&account=6058004206001&destination=https%3A%2F%2Fgutcleanseprotocol.com%2F230914a%2Fvideo%2Fvideo.php%3ForigexperimentalOrig%3Dtrue%26step%3D1%26funnelSTPId%3Da0q3w00000DGs1lAAD%26origuidOrig%3Ddb_bc3_vslstart_html_230922%26origspidOrig%3Dnull%26step%3D1%26origdsidOrig%3D%26origmainFunnelIdOrig%3Da0q3w00000DGs1kAAD%26origExternalOrig%3Dtrue%26origExternalIDOrig%3Da0q3w00000DGs1kAAD%26genericUrl%3Dos220325a_ap-db_bc3_vslstart_html_230922%26orignameOrig%3Dos220325a_ap-db_bc3_vslstart_html_230922%26origbrandOrig%3DGundry%2520MD%26business_unit%3Da00f400000dk8tnaab%26n%3Ddbtcr%26utm_campaign%3Dgmd-db-biocomplete3-cpaeml-all-vsltcr-qqq-none%26utm_campaign_id%3D7013w000001vCcoAAE%26utm_content%3Dbanner_ad%26utm_medium%3Dcpa%26utm_source%3Demail%26subid1%3D04a5712012674201a82424c14afc2e73%26subid2%3D439%26subid3%3D3415202737506852333%26subid5%3Deverflow%26sessionid%3D988270353948&platform_version=6.67.7&player=players.brightcove.com%2F6058004206001%2FLemwzE05e_default&player_name=Brightcove%20Default%20Player%20autoplay&source=&autoplay=any&ads_enabled=false&event=catalog_response&url=https%3A%2F%2Fedge.api.brightcove.com%2Fplayback%2Fv1%2Faccounts%2F6058004206001%2Fvideos%2F6312000596112&time=1701998234478&response_time_ms=440&seq=3 HTTP/1.1
Host: metrics.brightcove.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gutcleanseprotocol.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
content-length: 35
content-type: image/gif
cache-control: must-revalidate,no-cache,no-store
strict-transport-security: max-age=300; includeSubDomains
access-control-allow-origin: *
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization
access-control-allow-methods: GET
date: Fri, 08 Dec 2023 01:17:08 GMT
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

35.244.232.184

200 OK

35 B

URL GET HTTP/3
metrics.brightcove.com/v2/tracker?domain=videocloud&platform=video-js&session=9c8d72cdc40406c72e9a42ba&account=6058004206001&destination=https%3A%2F%2Fgutcleanseprotocol.com%2F230914a%2Fvideo%2Fvideo.php%3ForigexperimentalOrig%3Dtrue%26step%3D1%26funnelSTPId%3Da0q3w00000DGs1lAAD%26origuidOrig%3Ddb_bc3_vslstart_html_230922%26origspidOrig%3Dnull%26step%3D1%26origdsidOrig%3D%26origmainFunnelIdOrig%3Da0q3w00000DGs1kAAD%26origExternalOrig%3Dtrue%26origExternalIDOrig%3Da0q3w00000DGs1kAAD%26genericUrl%3Dos220325a_ap-db_bc3_vslstart_html_230922%26orignameOrig%3Dos220325a_ap-db_bc3_vslstart_html_230922%26origbrandOrig%3DGundry%2520MD%26business_unit%3Da00f400000dk8tnaab%26n%3Ddbtcr%26utm_campaign%3Dgmd-db-biocomplete3-cpaeml-all-vsltcr-qqq-none%26utm_campaign_id%3D7013w000001vCcoAAE%26utm_content%3Dbanner_ad%26utm_medium%3Dcpa%26utm_source%3Demail%26subid1%3D04a5712012674201a82424c14afc2e73%26subid2%3D439%26subid3%3D3415202737506852333%26subid5%3Deverflow%26sessionid%3D988270353948&platform_version=6.67.7&player=players.brightcove.com%2F6058004206001%2FLemwzE05e_default&player_name=Brightcove%20Default%20Player%20autoplay&source=&autoplay=any&ads_enabled=false&time=1701998234558&event=play_request&video=6312000596112&video_name=DB%20Duplicate_Gundry_BioComplete3_VSL_220907B&custom_fields=&video_data=&video_ads_supported=true&&video_duration=3704&media_url=https%3A%2F%2Fmanifest.prod.boltdns.net%2Fmanifest%2Fv1%2Fhls%2Fv4%2Fclear%2F6058004206001%2F8796ee93-0025-4d33-8f25-a477263c6950%2F10s%2Fmaster.m3u8%3Ffastly_token%3DNjU3MmQ3NTJfZDFiZGE2ZTdiOWNjNDNiYWYzZmVlYzcxOTUyZTJkNTc4NDliNTk0OTFhZGUzYWUyMjUyMzQzMDBlNjBiODE3Zg%253D%253D&seq=4_-1
IP
35.244.232.184:443
ASN
#15169 GOOGLE

Requested by
https://gutcleanseprotocol.com/230914a/video/video.php?origexperimentalOrig=true&step=1&funnelSTPId=a0q3w00000DGs1lAAD&origuidOrig=db_bc3_vslstart_html_230922&origspidOrig=null&step=1&origdsidOrig=&origmainFunnelIdOrig=a0q3w00000DGs1kAAD&origExternalOrig=true&origExternalIDOrig=a0q3w00000DGs1kAAD&genericUrl=os220325a_ap-db_bc3_vslstart_html_230922&orignameOrig=os220325a_ap-db_bc3_vslstart_html_230922&origbrandOrig=Gundry%20MD&business_unit=a00f400000dk8tnaab&n=dbtcr&utm_campaign=gmd-db-biocomplete3-cpaeml-all-vsltcr-qqq-none&utm_campaign_id=7013w000001vCcoAAE&utm_content=banner_ad&utm_medium=cpa&utm_source=email&subid1=04a5712012674201a82424c14afc2e73&subid2=439&subid3=3415202737506852333&subid5=everflow&sessionid=988270353948
Certificate
IssuerGoogle Trust Services LLC
Subjectmetrics.brightcove.com
FingerprintA5:42:62:94:62:B0:0A:A4:D0:70:78:B2:E4:39:72:BC:BA:E4:7F:56
ValidityThu, 23 Nov 2023 09:29:26 GMT - Wed, 21 Feb 2024 10:23:40 GMT

File type
GIF image data, version 89a, 1 x 1\012- data
Size
35 B (35 bytes)
Hash
c2196de8ba412c60c22ab491af7b1409
5fbd472222feb8a22cf5b8aa5dc5b8e13af88e2b
6adc3d4c1056996e4e8b765a62604c78b1f867cceb3b15d0b9bedb7c4857f992

HTTP Headers

GET /v2/tracker?domain=videocloud&platform=video-js&session=9c8d72cdc40406c72e9a42ba&account=6058004206001&destination=https%3A%2F%2Fgutcleanseprotocol.com%2F230914a%2Fvideo%2Fvideo.php%3ForigexperimentalOrig%3Dtrue%26step%3D1%26funnelSTPId%3Da0q3w00000DGs1lAAD%26origuidOrig%3Ddb_bc3_vslstart_html_230922%26origspidOrig%3Dnull%26step%3D1%26origdsidOrig%3D%26origmainFunnelIdOrig%3Da0q3w00000DGs1kAAD%26origExternalOrig%3Dtrue%26origExternalIDOrig%3Da0q3w00000DGs1kAAD%26genericUrl%3Dos220325a_ap-db_bc3_vslstart_html_230922%26orignameOrig%3Dos220325a_ap-db_bc3_vslstart_html_230922%26origbrandOrig%3DGundry%2520MD%26business_unit%3Da00f400000dk8tnaab%26n%3Ddbtcr%26utm_campaign%3Dgmd-db-biocomplete3-cpaeml-all-vsltcr-qqq-none%26utm_campaign_id%3D7013w000001vCcoAAE%26utm_content%3Dbanner_ad%26utm_medium%3Dcpa%26utm_source%3Demail%26subid1%3D04a5712012674201a82424c14afc2e73%26subid2%3D439%26subid3%3D3415202737506852333%26subid5%3Deverflow%26sessionid%3D988270353948&platform_version=6.67.7&player=players.brightcove.com%2F6058004206001%2FLemwzE05e_default&player_name=Brightcove%20Default%20Player%20autoplay&source=&autoplay=any&ads_enabled=false&time=1701998234558&event=play_request&video=6312000596112&video_name=DB%20Duplicate_Gundry_BioComplete3_VSL_220907B&custom_fields=&video_data=&video_ads_supported=true&&video_duration=3704&media_url=https%3A%2F%2Fmanifest.prod.boltdns.net%2Fmanifest%2Fv1%2Fhls%2Fv4%2Fclear%2F6058004206001%2F8796ee93-0025-4d33-8f25-a477263c6950%2F10s%2Fmaster.m3u8%3Ffastly_token%3DNjU3MmQ3NTJfZDFiZGE2ZTdiOWNjNDNiYWYzZmVlYzcxOTUyZTJkNTc4NDliNTk0OTFhZGUzYWUyMjUyMzQzMDBlNjBiODE3Zg%253D%253D&seq=4_-1 HTTP/1.1
Host: metrics.brightcove.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gutcleanseprotocol.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
content-length: 35
content-type: image/gif
cache-control: must-revalidate,no-cache,no-store
strict-transport-security: max-age=300; includeSubDomains
access-control-allow-origin: *
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization
access-control-allow-methods: GET
date: Fri, 08 Dec 2023 01:17:08 GMT
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

35.244.232.184

200 OK

35 B

URL GET HTTP/3
metrics.brightcove.com/v2/tracker?domain=videocloud&platform=video-js&session=9c8d72cdc40406c72e9a42ba&account=6058004206001&destination=https%3A%2F%2Fgutcleanseprotocol.com%2F230914a%2Fvideo%2Fvideo.php%3ForigexperimentalOrig%3Dtrue%26step%3D1%26funnelSTPId%3Da0q3w00000DGs1lAAD%26origuidOrig%3Ddb_bc3_vslstart_html_230922%26origspidOrig%3Dnull%26step%3D1%26origdsidOrig%3D%26origmainFunnelIdOrig%3Da0q3w00000DGs1kAAD%26origExternalOrig%3Dtrue%26origExternalIDOrig%3Da0q3w00000DGs1kAAD%26genericUrl%3Dos220325a_ap-db_bc3_vslstart_html_230922%26orignameOrig%3Dos220325a_ap-db_bc3_vslstart_html_230922%26origbrandOrig%3DGundry%2520MD%26business_unit%3Da00f400000dk8tnaab%26n%3Ddbtcr%26utm_campaign%3Dgmd-db-biocomplete3-cpaeml-all-vsltcr-qqq-none%26utm_campaign_id%3D7013w000001vCcoAAE%26utm_content%3Dbanner_ad%26utm_medium%3Dcpa%26utm_source%3Demail%26subid1%3D04a5712012674201a82424c14afc2e73%26subid2%3D439%26subid3%3D3415202737506852333%26subid5%3Deverflow%26sessionid%3D988270353948&platform_version=6.67.7&player=players.brightcove.com%2F6058004206001%2FLemwzE05e_default&player_name=Brightcove%20Default%20Player%20autoplay&source=&autoplay=any&ads_enabled=false&time=1701998234536&event=video_impression&video=6312000596112&video_name=DB%20Duplicate_Gundry_BioComplete3_VSL_220907B&custom_fields=&video_data=&video_ads_supported=true&&video_duration=3704&media_url=https%3A%2F%2Fmanifest.prod.boltdns.net%2Fmanifest%2Fv1%2Fhls%2Fv4%2Fclear%2F6058004206001%2F8796ee93-0025-4d33-8f25-a477263c6950%2F10s%2Fmaster.m3u8%3Ffastly_token%3DNjU3MmQ3NTJfZDFiZGE2ZTdiOWNjNDNiYWYzZmVlYzcxOTUyZTJkNTc4NDliNTk0OTFhZGUzYWUyMjUyMzQzMDBlNjBiODE3Zg%253D%253D&preload=auto&qos.content.sourceMimeType=application%2Fvnd.apple.mpegurl&seq=5_0
IP
35.244.232.184:443
ASN
#15169 GOOGLE

Requested by
https://gutcleanseprotocol.com/230914a/video/video.php?origexperimentalOrig=true&step=1&funnelSTPId=a0q3w00000DGs1lAAD&origuidOrig=db_bc3_vslstart_html_230922&origspidOrig=null&step=1&origdsidOrig=&origmainFunnelIdOrig=a0q3w00000DGs1kAAD&origExternalOrig=true&origExternalIDOrig=a0q3w00000DGs1kAAD&genericUrl=os220325a_ap-db_bc3_vslstart_html_230922&orignameOrig=os220325a_ap-db_bc3_vslstart_html_230922&origbrandOrig=Gundry%20MD&business_unit=a00f400000dk8tnaab&n=dbtcr&utm_campaign=gmd-db-biocomplete3-cpaeml-all-vsltcr-qqq-none&utm_campaign_id=7013w000001vCcoAAE&utm_content=banner_ad&utm_medium=cpa&utm_source=email&subid1=04a5712012674201a82424c14afc2e73&subid2=439&subid3=3415202737506852333&subid5=everflow&sessionid=988270353948
Certificate
IssuerGoogle Trust Services LLC
Subjectmetrics.brightcove.com
FingerprintA5:42:62:94:62:B0:0A:A4:D0:70:78:B2:E4:39:72:BC:BA:E4:7F:56
ValidityThu, 23 Nov 2023 09:29:26 GMT - Wed, 21 Feb 2024 10:23:40 GMT

File type
GIF image data, version 89a, 1 x 1\012- data
Size
35 B (35 bytes)
Hash
c2196de8ba412c60c22ab491af7b1409
5fbd472222feb8a22cf5b8aa5dc5b8e13af88e2b
6adc3d4c1056996e4e8b765a62604c78b1f867cceb3b15d0b9bedb7c4857f992

HTTP Headers

GET /v2/tracker?domain=videocloud&platform=video-js&session=9c8d72cdc40406c72e9a42ba&account=6058004206001&destination=https%3A%2F%2Fgutcleanseprotocol.com%2F230914a%2Fvideo%2Fvideo.php%3ForigexperimentalOrig%3Dtrue%26step%3D1%26funnelSTPId%3Da0q3w00000DGs1lAAD%26origuidOrig%3Ddb_bc3_vslstart_html_230922%26origspidOrig%3Dnull%26step%3D1%26origdsidOrig%3D%26origmainFunnelIdOrig%3Da0q3w00000DGs1kAAD%26origExternalOrig%3Dtrue%26origExternalIDOrig%3Da0q3w00000DGs1kAAD%26genericUrl%3Dos220325a_ap-db_bc3_vslstart_html_230922%26orignameOrig%3Dos220325a_ap-db_bc3_vslstart_html_230922%26origbrandOrig%3DGundry%2520MD%26business_unit%3Da00f400000dk8tnaab%26n%3Ddbtcr%26utm_campaign%3Dgmd-db-biocomplete3-cpaeml-all-vsltcr-qqq-none%26utm_campaign_id%3D7013w000001vCcoAAE%26utm_content%3Dbanner_ad%26utm_medium%3Dcpa%26utm_source%3Demail%26subid1%3D04a5712012674201a82424c14afc2e73%26subid2%3D439%26subid3%3D3415202737506852333%26subid5%3Deverflow%26sessionid%3D988270353948&platform_version=6.67.7&player=players.brightcove.com%2F6058004206001%2FLemwzE05e_default&player_name=Brightcove%20Default%20Player%20autoplay&source=&autoplay=any&ads_enabled=false&time=1701998234536&event=video_impression&video=6312000596112&video_name=DB%20Duplicate_Gundry_BioComplete3_VSL_220907B&custom_fields=&video_data=&video_ads_supported=true&&video_duration=3704&media_url=https%3A%2F%2Fmanifest.prod.boltdns.net%2Fmanifest%2Fv1%2Fhls%2Fv4%2Fclear%2F6058004206001%2F8796ee93-0025-4d33-8f25-a477263c6950%2F10s%2Fmaster.m3u8%3Ffastly_token%3DNjU3MmQ3NTJfZDFiZGE2ZTdiOWNjNDNiYWYzZmVlYzcxOTUyZTJkNTc4NDliNTk0OTFhZGUzYWUyMjUyMzQzMDBlNjBiODE3Zg%253D%253D&preload=auto&qos.content.sourceMimeType=application%2Fvnd.apple.mpegurl&seq=5_0 HTTP/1.1
Host: metrics.brightcove.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gutcleanseprotocol.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
content-length: 35
content-type: image/gif
cache-control: must-revalidate,no-cache,no-store
strict-transport-security: max-age=300; includeSubDomains
access-control-allow-origin: *
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization
access-control-allow-methods: GET
date: Fri, 08 Dec 2023 01:17:08 GMT
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

gutcleanseprotocol.com/theme/css/fonts.css

172.64.152.117

200 OK

1.1 kB

URL GET HTTP/2
gutcleanseprotocol.com/theme/css/fonts.css
IP
172.64.152.117:443
ASN
#13335 CLOUDFLARENET

Requested by
https://gutcleanseprotocol.com/230914a/video/video.php?origexperimentalOrig=true&step=1&funnelSTPId=a0q3w00000DGs1lAAD&origuidOrig=db_bc3_vslstart_html_230922&origspidOrig=null&step=1&origdsidOrig=&origmainFunnelIdOrig=a0q3w00000DGs1kAAD&origExternalOrig=true&origExternalIDOrig=a0q3w00000DGs1kAAD&genericUrl=os220325a_ap-db_bc3_vslstart_html_230922&orignameOrig=os220325a_ap-db_bc3_vslstart_html_230922&origbrandOrig=Gundry%20MD&business_unit=a00f400000dk8tnaab&n=dbtcr&utm_campaign=gmd-db-biocomplete3-cpaeml-all-vsltcr-qqq-none&utm_campaign_id=7013w000001vCcoAAE&utm_content=banner_ad&utm_medium=cpa&utm_source=email&subid1=04a5712012674201a82424c14afc2e73&subid2=439&subid3=3415202737506852333&subid5=everflow&sessionid=988270353948
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintB7:45:AA:C9:5E:75:6C:63:8E:77:4E:E5:6F:56:48:24:05:8E:95:5D
ValidityMon, 10 Apr 2023 00:00:00 GMT - Tue, 09 Apr 2024 23:59:59 GMT

File type
ASCII text, with very long lines (4327), with no line terminators
Size
1.1 kB (1084 bytes)
Hash
f346b1f714c9b9e158848e5b59aa5309
ec0b53c80484bf28dd2771db459f53ab7cb422b7
4c64e204f4b0eb874572430cb1fd8f3a1fb33a2e7eba6b550628eff087cf5d31

HTTP Headers

GET /theme/css/fonts.css HTTP/1.1
Host: gutcleanseprotocol.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gutcleanseprotocol.com/theme/css/variables.css
Cookie: __cf_bm=CHoT.s3yJb16Qt.N8xxOGcUq6Zcr0AqzvnezfRmKHLA-1701998226-0-ATeSMh8fUxOjtvrtdfHe7owtrmuNKMBEtv41zcNFvJHk8O7DT5Q2V3gC7f/YY3X+Gs9GFpie0w6WR3srM++N1MI=
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 08 Dec 2023 01:17:07 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=4955
etag: W/"135b-60bf31c6b0c80"
last-modified: Thu, 07 Dec 2023 22:37:22 GMT
nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]}
report-to: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1701994538&sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add&s=Ozy3%2FNWHEvQQI1qzR%2FNS%2BXwLm%2BlC%2Fd21UkHuC6L3r5A%3D"}]}
reporting-endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1701994538&sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add&s=Ozy3%2FNWHEvQQI1qzR%2FNS%2BXwLm%2BlC%2Fd21UkHuC6L3r5A%3D
via: 1.1 vegur
cf-cache-status: HIT
age: 7
expires: Fri, 08 Dec 2023 02:17:07 GMT
cache-control: public, max-age=3600
vary: Accept-Encoding
server: cloudflare
cf-ray: 83212ab79ec7b4eb-OSL
content-encoding: br
X-Firefox-Spdy: h2

35.244.232.184

200 OK

35 B

URL GET HTTP/3
metrics.brightcove.com/v2/tracker?domain=videocloud&platform=video-js&session=9c8d72cdc40406c72e9a42ba&account=6058004206001&destination=https%3A%2F%2Fgutcleanseprotocol.com%2F230914a%2Fvideo%2Fvideo.php%3ForigexperimentalOrig%3Dtrue%26step%3D1%26funnelSTPId%3Da0q3w00000DGs1lAAD%26origuidOrig%3Ddb_bc3_vslstart_html_230922%26origspidOrig%3Dnull%26step%3D1%26origdsidOrig%3D%26origmainFunnelIdOrig%3Da0q3w00000DGs1kAAD%26origExternalOrig%3Dtrue%26origExternalIDOrig%3Da0q3w00000DGs1kAAD%26genericUrl%3Dos220325a_ap-db_bc3_vslstart_html_230922%26orignameOrig%3Dos220325a_ap-db_bc3_vslstart_html_230922%26origbrandOrig%3DGundry%2520MD%26business_unit%3Da00f400000dk8tnaab%26n%3Ddbtcr%26utm_campaign%3Dgmd-db-biocomplete3-cpaeml-all-vsltcr-qqq-none%26utm_campaign_id%3D7013w000001vCcoAAE%26utm_content%3Dbanner_ad%26utm_medium%3Dcpa%26utm_source%3Demail%26subid1%3D04a5712012674201a82424c14afc2e73%26subid2%3D439%26subid3%3D3415202737506852333%26subid5%3Deverflow%26sessionid%3D988270353948&platform_version=6.67.7&player=players.brightcove.com%2F6058004206001%2FLemwzE05e_default&player_name=Brightcove%20Default%20Player%20autoplay&source=&autoplay=any&ads_enabled=false&event=error&error_code=MEDIA_ERR_DECODE&video=6312000596112&video_name=DB%20Duplicate_Gundry_BioComplete3_VSL_220907B&custom_fields=&video_data=&video_ads_supported=true&&video_duration=3704&media_url=https%3A%2F%2Fmanifest.prod.boltdns.net%2Fmanifest%2Fv1%2Fhls%2Fv4%2Fclear%2F6058004206001%2F8796ee93-0025-4d33-8f25-a477263c6950%2F10s%2Fmaster.m3u8%3Ffastly_token%3DNjU3MmQ3NTJfZDFiZGE2ZTdiOWNjNDNiYWYzZmVlYzcxOTUyZTJkNTc4NDliNTk0OTFhZGUzYWUyMjUyMzQzMDBlNjBiODE3Zg%253D%253D&time=1701998235283&seq=6_0
IP
35.244.232.184:443
ASN
#15169 GOOGLE

Requested by
https://gutcleanseprotocol.com/230914a/video/video.php?origexperimentalOrig=true&step=1&funnelSTPId=a0q3w00000DGs1lAAD&origuidOrig=db_bc3_vslstart_html_230922&origspidOrig=null&step=1&origdsidOrig=&origmainFunnelIdOrig=a0q3w00000DGs1kAAD&origExternalOrig=true&origExternalIDOrig=a0q3w00000DGs1kAAD&genericUrl=os220325a_ap-db_bc3_vslstart_html_230922&orignameOrig=os220325a_ap-db_bc3_vslstart_html_230922&origbrandOrig=Gundry%20MD&business_unit=a00f400000dk8tnaab&n=dbtcr&utm_campaign=gmd-db-biocomplete3-cpaeml-all-vsltcr-qqq-none&utm_campaign_id=7013w000001vCcoAAE&utm_content=banner_ad&utm_medium=cpa&utm_source=email&subid1=04a5712012674201a82424c14afc2e73&subid2=439&subid3=3415202737506852333&subid5=everflow&sessionid=988270353948
Certificate
IssuerGoogle Trust Services LLC
Subjectmetrics.brightcove.com
FingerprintA5:42:62:94:62:B0:0A:A4:D0:70:78:B2:E4:39:72:BC:BA:E4:7F:56
ValidityThu, 23 Nov 2023 09:29:26 GMT - Wed, 21 Feb 2024 10:23:40 GMT

File type
GIF image data, version 89a, 1 x 1\012- data
Size
35 B (35 bytes)
Hash
c2196de8ba412c60c22ab491af7b1409
5fbd472222feb8a22cf5b8aa5dc5b8e13af88e2b
6adc3d4c1056996e4e8b765a62604c78b1f867cceb3b15d0b9bedb7c4857f992

HTTP Headers

GET /v2/tracker?domain=videocloud&platform=video-js&session=9c8d72cdc40406c72e9a42ba&account=6058004206001&destination=https%3A%2F%2Fgutcleanseprotocol.com%2F230914a%2Fvideo%2Fvideo.php%3ForigexperimentalOrig%3Dtrue%26step%3D1%26funnelSTPId%3Da0q3w00000DGs1lAAD%26origuidOrig%3Ddb_bc3_vslstart_html_230922%26origspidOrig%3Dnull%26step%3D1%26origdsidOrig%3D%26origmainFunnelIdOrig%3Da0q3w00000DGs1kAAD%26origExternalOrig%3Dtrue%26origExternalIDOrig%3Da0q3w00000DGs1kAAD%26genericUrl%3Dos220325a_ap-db_bc3_vslstart_html_230922%26orignameOrig%3Dos220325a_ap-db_bc3_vslstart_html_230922%26origbrandOrig%3DGundry%2520MD%26business_unit%3Da00f400000dk8tnaab%26n%3Ddbtcr%26utm_campaign%3Dgmd-db-biocomplete3-cpaeml-all-vsltcr-qqq-none%26utm_campaign_id%3D7013w000001vCcoAAE%26utm_content%3Dbanner_ad%26utm_medium%3Dcpa%26utm_source%3Demail%26subid1%3D04a5712012674201a82424c14afc2e73%26subid2%3D439%26subid3%3D3415202737506852333%26subid5%3Deverflow%26sessionid%3D988270353948&platform_version=6.67.7&player=players.brightcove.com%2F6058004206001%2FLemwzE05e_default&player_name=Brightcove%20Default%20Player%20autoplay&source=&autoplay=any&ads_enabled=false&event=error&error_code=MEDIA_ERR_DECODE&video=6312000596112&video_name=DB%20Duplicate_Gundry_BioComplete3_VSL_220907B&custom_fields=&video_data=&video_ads_supported=true&&video_duration=3704&media_url=https%3A%2F%2Fmanifest.prod.boltdns.net%2Fmanifest%2Fv1%2Fhls%2Fv4%2Fclear%2F6058004206001%2F8796ee93-0025-4d33-8f25-a477263c6950%2F10s%2Fmaster.m3u8%3Ffastly_token%3DNjU3MmQ3NTJfZDFiZGE2ZTdiOWNjNDNiYWYzZmVlYzcxOTUyZTJkNTc4NDliNTk0OTFhZGUzYWUyMjUyMzQzMDBlNjBiODE3Zg%253D%253D&time=1701998235283&seq=6_0 HTTP/1.1
Host: metrics.brightcove.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gutcleanseprotocol.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
content-length: 35
content-type: image/gif
cache-control: must-revalidate,no-cache,no-store
strict-transport-security: max-age=300; includeSubDomains
access-control-allow-origin: *
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization
access-control-allow-methods: GET
date: Fri, 08 Dec 2023 01:17:08 GMT
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

region1.analytics.google.com/g/collect?v=2&tid=G-5MM7TKXSPX&gtm=45je3bt0v880739176z8811898462&_p=1701998233726&_gaz=1&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=1848370653.1701998235&ul=en-us&sr=1280x1024&_s=1&sid=1701998234&sct=1&seg=0&dl=https%3A%2F%2Fgutcleanseprotocol.com%2F230914a%2Fvideo%2Fvideo.php%3ForigexperimentalOrig%3Dtrue%26step%3D1%26funnelSTPId%3Da0q3w00000DGs1lAAD%26origuidOrig%3Ddb_bc3_vslstart_html_230922%26origspidOrig%3Dnull%26step%3D1%26origdsidOrig%3D%26origmainFunnelIdOrig%3Da0q3w00000DGs1kAAD%26origExternalOrig%3Dtrue%26origExternalIDOrig%3Da0q3w00000DGs1kAAD%26genericUrl%3Dos220325a_ap-db_bc3_vslstart_html_230922%26orignameOrig%3Dos220325a_ap-db_bc3_vslstart_html_230922%26origbrandOrig%3DGundry%2520MD%26business_unit%3Da00f400000dk8tnaab%26n%3Ddbtcr%26utm_campaign%3Dgmd-db-biocomplete3-cpaeml-all-vsltcr-qqq-none%26utm_campaign_id%3D7013w000001vCcoAAE%26utm_content%3Dbanner_ad%26utm_medium%3Dcpa%26utm_source%3Demail%26subid1%3D04a5712012674201a82424c14afc2e73%26subid2%3D439%26subid3%3D3415202737506852333%26subid5%3Deverflow%26sessionid%3D988270353948&dt=Gundry%20MD%20-%20%E2%80%9CMy%20Insides%20Feel%20Clean%20Again%E2%80%9D%20-%20Top%20Doctor%20Shares%20His%20Method%20(Do%20This)&en=page_view&_fv=1&_nsi=1&_ss=1&tfd=2981

216.239.34.36

204 No Content

0 B

URL POST HTTP/2
region1.analytics.google.com/g/collect?v=2&tid=G-5MM7TKXSPX&gtm=45je3bt0v880739176z8811898462&_p=1701998233726&_gaz=1&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=1848370653.1701998235&ul=en-us&sr=1280x1024&_s=1&sid=1701998234&sct=1&seg=0&dl=https%3A%2F%2Fgutcleanseprotocol.com%2F230914a%2Fvideo%2Fvideo.php%3ForigexperimentalOrig%3Dtrue%26step%3D1%26funnelSTPId%3Da0q3w00000DGs1lAAD%26origuidOrig%3Ddb_bc3_vslstart_html_230922%26origspidOrig%3Dnull%26step%3D1%26origdsidOrig%3D%26origmainFunnelIdOrig%3Da0q3w00000DGs1kAAD%26origExternalOrig%3Dtrue%26origExternalIDOrig%3Da0q3w00000DGs1kAAD%26genericUrl%3Dos220325a_ap-db_bc3_vslstart_html_230922%26orignameOrig%3Dos220325a_ap-db_bc3_vslstart_html_230922%26origbrandOrig%3DGundry%2520MD%26business_unit%3Da00f400000dk8tnaab%26n%3Ddbtcr%26utm_campaign%3Dgmd-db-biocomplete3-cpaeml-all-vsltcr-qqq-none%26utm_campaign_id%3D7013w000001vCcoAAE%26utm_content%3Dbanner_ad%26utm_medium%3Dcpa%26utm_source%3Demail%26subid1%3D04a5712012674201a82424c14afc2e73%26subid2%3D439%26subid3%3D3415202737506852333%26subid5%3Deverflow%26sessionid%3D988270353948&dt=Gundry%20MD%20-%20%E2%80%9CMy%20Insides%20Feel%20Clean%20Again%E2%80%9D%20-%20Top%20Doctor%20Shares%20His%20Method%20(Do%20This)&en=page_view&_fv=1&_nsi=1&_ss=1&tfd=2981
IP
216.239.34.36:443
ASN
#15169 GOOGLE

Requested by
https://gutcleanseprotocol.com/230914a/video/video.php?origexperimentalOrig=true&step=1&funnelSTPId=a0q3w00000DGs1lAAD&origuidOrig=db_bc3_vslstart_html_230922&origspidOrig=null&step=1&origdsidOrig=&origmainFunnelIdOrig=a0q3w00000DGs1kAAD&origExternalOrig=true&origExternalIDOrig=a0q3w00000DGs1kAAD&genericUrl=os220325a_ap-db_bc3_vslstart_html_230922&orignameOrig=os220325a_ap-db_bc3_vslstart_html_230922&origbrandOrig=Gundry%20MD&business_unit=a00f400000dk8tnaab&n=dbtcr&utm_campaign=gmd-db-biocomplete3-cpaeml-all-vsltcr-qqq-none&utm_campaign_id=7013w000001vCcoAAE&utm_content=banner_ad&utm_medium=cpa&utm_source=email&subid1=04a5712012674201a82424c14afc2e73&subid2=439&subid3=3415202737506852333&subid5=everflow&sessionid=988270353948
Certificate
IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

POST /g/collect?v=2&tid=G-5MM7TKXSPX&gtm=45je3bt0v880739176z8811898462&_p=1701998233726&_gaz=1&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=1848370653.1701998235&ul=en-us&sr=1280x1024&_s=1&sid=1701998234&sct=1&seg=0&dl=https%3A%2F%2Fgutcleanseprotocol.com%2F230914a%2Fvideo%2Fvideo.php%3ForigexperimentalOrig%3Dtrue%26step%3D1%26funnelSTPId%3Da0q3w00000DGs1lAAD%26origuidOrig%3Ddb_bc3_vslstart_html_230922%26origspidOrig%3Dnull%26step%3D1%26origdsidOrig%3D%26origmainFunnelIdOrig%3Da0q3w00000DGs1kAAD%26origExternalOrig%3Dtrue%26origExternalIDOrig%3Da0q3w00000DGs1kAAD%26genericUrl%3Dos220325a_ap-db_bc3_vslstart_html_230922%26orignameOrig%3Dos220325a_ap-db_bc3_vslstart_html_230922%26origbrandOrig%3DGundry%2520MD%26business_unit%3Da00f400000dk8tnaab%26n%3Ddbtcr%26utm_campaign%3Dgmd-db-biocomplete3-cpaeml-all-vsltcr-qqq-none%26utm_campaign_id%3D7013w000001vCcoAAE%26utm_content%3Dbanner_ad%26utm_medium%3Dcpa%26utm_source%3Demail%26subid1%3D04a5712012674201a82424c14afc2e73%26subid2%3D439%26subid3%3D3415202737506852333%26subid5%3Deverflow%26sessionid%3D988270353948&dt=Gundry%20MD%20-%20%E2%80%9CMy%20Insides%20Feel%20Clean%20Again%E2%80%9D%20-%20Top%20Doctor%20Shares%20His%20Method%20(Do%20This)&en=page_view&_fv=1&_nsi=1&_ss=1&tfd=2981 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://gutcleanseprotocol.com
DNT: 1
Connection: keep-alive
Referer: https://gutcleanseprotocol.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0

HTTP/2 204 No Content
access-control-allow-origin: https://gutcleanseprotocol.com
date: Fri, 08 Dec 2023 01:17:08 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-5MM7TKXSPX&cid=1848370653.1701998235&gtm=45je3bt0v880739176z8811898462&aip=1&dma=1&dma_cps=sypham&gcd=11l1l1l1l1&z=1432640670

142.250.74.163

200 OK

42 B

URL GET HTTP/2
www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-5MM7TKXSPX&cid=1848370653.1701998235&gtm=45je3bt0v880739176z8811898462&aip=1&dma=1&dma_cps=sypham&gcd=11l1l1l1l1&z=1432640670
IP
142.250.74.163:443
ASN
#15169 GOOGLE

Requested by
https://gutcleanseprotocol.com/230914a/video/video.php?origexperimentalOrig=true&step=1&funnelSTPId=a0q3w00000DGs1lAAD&origuidOrig=db_bc3_vslstart_html_230922&origspidOrig=null&step=1&origdsidOrig=&origmainFunnelIdOrig=a0q3w00000DGs1kAAD&origExternalOrig=true&origExternalIDOrig=a0q3w00000DGs1kAAD&genericUrl=os220325a_ap-db_bc3_vslstart_html_230922&orignameOrig=os220325a_ap-db_bc3_vslstart_html_230922&origbrandOrig=Gundry%20MD&business_unit=a00f400000dk8tnaab&n=dbtcr&utm_campaign=gmd-db-biocomplete3-cpaeml-all-vsltcr-qqq-none&utm_campaign_id=7013w000001vCcoAAE&utm_content=banner_ad&utm_medium=cpa&utm_source=email&subid1=04a5712012674201a82424c14afc2e73&subid2=439&subid3=3415202737506852333&subid5=everflow&sessionid=988270353948
Certificate
IssuerGoogle Trust Services LLC
Subject*.google.no
Fingerprint6E:E4:BC:4A:67:5E:46:6A:B3:E4:CA:61:A7:C0:97:AB:14:F0:34:32
ValidityMon, 23 Oct 2023 11:27:27 GMT - Mon, 15 Jan 2024 11:27:26 GMT

File type
GIF image data, version 89a, 1 x 1\012- data
Size
42 B (42 bytes)
Hash
d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629

HTTP Headers

GET /ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-5MM7TKXSPX&cid=1848370653.1701998235&gtm=45je3bt0v880739176z8811898462&aip=1&dma=1&dma_cps=sypham&gcd=11l1l1l1l1&z=1432640670 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gutcleanseprotocol.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 08 Dec 2023 01:17:08 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

gutcleanseprotocol.com/cdn-cgi/rum?

172.64.152.117

204 No Content

0 B

URL POST HTTP/2
gutcleanseprotocol.com/cdn-cgi/rum?
IP
172.64.152.117:443
ASN
#13335 CLOUDFLARENET

Requested by
https://gutcleanseprotocol.com/230914a/video/video.php?origexperimentalOrig=true&step=1&funnelSTPId=a0q3w00000DGs1lAAD&origuidOrig=db_bc3_vslstart_html_230922&origspidOrig=null&step=1&origdsidOrig=&origmainFunnelIdOrig=a0q3w00000DGs1kAAD&origExternalOrig=true&origExternalIDOrig=a0q3w00000DGs1kAAD&genericUrl=os220325a_ap-db_bc3_vslstart_html_230922&orignameOrig=os220325a_ap-db_bc3_vslstart_html_230922&origbrandOrig=Gundry%20MD&business_unit=a00f400000dk8tnaab&n=dbtcr&utm_campaign=gmd-db-biocomplete3-cpaeml-all-vsltcr-qqq-none&utm_campaign_id=7013w000001vCcoAAE&utm_content=banner_ad&utm_medium=cpa&utm_source=email&subid1=04a5712012674201a82424c14afc2e73&subid2=439&subid3=3415202737506852333&subid5=everflow&sessionid=988270353948
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintB7:45:AA:C9:5E:75:6C:63:8E:77:4E:E5:6F:56:48:24:05:8E:95:5D
ValidityMon, 10 Apr 2023 00:00:00 GMT - Tue, 09 Apr 2024 23:59:59 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

POST /cdn-cgi/rum? HTTP/1.1
Host: gutcleanseprotocol.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
content-type: application/json
Content-Length: 31985
Origin: https://gutcleanseprotocol.com
DNT: 1
Connection: keep-alive
Referer: https://gutcleanseprotocol.com/230914a/video/video.php?origexperimentalOrig=true&step=1&funnelSTPId=a0q3w00000DGs1lAAD&origuidOrig=db_bc3_vslstart_html_230922&origspidOrig=null&step=1&origdsidOrig=&origmainFunnelIdOrig=a0q3w00000DGs1kAAD&origExternalOrig=true&origExternalIDOrig=a0q3w00000DGs1kAAD&genericUrl=os220325a_ap-db_bc3_vslstart_html_230922&orignameOrig=os220325a_ap-db_bc3_vslstart_html_230922&origbrandOrig=Gundry%20MD&business_unit=a00f400000dk8tnaab&n=dbtcr&utm_campaign=gmd-db-biocomplete3-cpaeml-all-vsltcr-qqq-none&utm_campaign_id=7013w000001vCcoAAE&utm_content=banner_ad&utm_medium=cpa&utm_source=email&subid1=04a5712012674201a82424c14afc2e73&subid2=439&subid3=3415202737506852333&subid5=everflow&sessionid=988270353948
Cookie: __cf_bm=CHoT.s3yJb16Qt.N8xxOGcUq6Zcr0AqzvnezfRmKHLA-1701998226-0-ATeSMh8fUxOjtvrtdfHe7owtrmuNKMBEtv41zcNFvJHk8O7DT5Q2V3gC7f/YY3X+Gs9GFpie0w6WR3srM++N1MI=; visited=1; qa_cookie=1701998234309; _gcl_au=1.1.1453483039.1701998234; tcrFed=false; alternaiGuestId=6541e9f1-0423-4efc-9322-c50a8b2a3e76,gutcleanseprotocol.com,,blob:https:; _ga_5MM7TKXSPX=GS1.1.1701998234.1.0.1701998234.60.0.0; _ga=GA1.1.1848370653.1701998235
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 204 No Content
date: Fri, 08 Dec 2023 01:17:09 GMT
access-control-allow-origin: https://gutcleanseprotocol.com
access-control-allow-methods: POST,OPTIONS
access-control-max-age: 86400
vary: Origin
access-control-allow-credentials: true
server: cloudflare
cf-ray: 83212ac38aaab4eb-OSL
x-frame-options: DENY
x-content-type-options: nosniff
X-Firefox-Spdy: h2

gutcleanseprotocol.com/theme/js/brightcove.js

172.64.152.117

200 OK

313 B

URL GET HTTP/2
gutcleanseprotocol.com/theme/js/brightcove.js
IP
172.64.152.117:443
ASN
#13335 CLOUDFLARENET

Requested by
https://gutcleanseprotocol.com/230914a/video/video.php?origexperimentalOrig=true&step=1&funnelSTPId=a0q3w00000DGs1lAAD&origuidOrig=db_bc3_vslstart_html_230922&origspidOrig=null&step=1&origdsidOrig=&origmainFunnelIdOrig=a0q3w00000DGs1kAAD&origExternalOrig=true&origExternalIDOrig=a0q3w00000DGs1kAAD&genericUrl=os220325a_ap-db_bc3_vslstart_html_230922&orignameOrig=os220325a_ap-db_bc3_vslstart_html_230922&origbrandOrig=Gundry%20MD&business_unit=a00f400000dk8tnaab&n=dbtcr&utm_campaign=gmd-db-biocomplete3-cpaeml-all-vsltcr-qqq-none&utm_campaign_id=7013w000001vCcoAAE&utm_content=banner_ad&utm_medium=cpa&utm_source=email&subid1=04a5712012674201a82424c14afc2e73&subid2=439&subid3=3415202737506852333&subid5=everflow&sessionid=988270353948
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintB7:45:AA:C9:5E:75:6C:63:8E:77:4E:E5:6F:56:48:24:05:8E:95:5D
ValidityMon, 10 Apr 2023 00:00:00 GMT - Tue, 09 Apr 2024 23:59:59 GMT

File type
ASCII text, with very long lines (314), with no line terminators
Size
313 B (313 bytes)
Hash
9e69813a5bb62614ef0a0bce2dec46eb
89820d77905cfde92b1d8838c3a89abf59ba6e7b
e9eb2834c51ee847fe6fd385aeb1eaaab0c3e46798863b3912f59458e320106a

HTTP Headers

GET /theme/js/brightcove.js HTTP/1.1
Host: gutcleanseprotocol.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gutcleanseprotocol.com/230914a/video/video.php?origexperimentalOrig=true&step=1&funnelSTPId=a0q3w00000DGs1lAAD&origuidOrig=db_bc3_vslstart_html_230922&origspidOrig=null&step=1&origdsidOrig=&origmainFunnelIdOrig=a0q3w00000DGs1kAAD&origExternalOrig=true&origExternalIDOrig=a0q3w00000DGs1kAAD&genericUrl=os220325a_ap-db_bc3_vslstart_html_230922&orignameOrig=os220325a_ap-db_bc3_vslstart_html_230922&origbrandOrig=Gundry%20MD&business_unit=a00f400000dk8tnaab&n=dbtcr&utm_campaign=gmd-db-biocomplete3-cpaeml-all-vsltcr-qqq-none&utm_campaign_id=7013w000001vCcoAAE&utm_content=banner_ad&utm_medium=cpa&utm_source=email&subid1=04a5712012674201a82424c14afc2e73&subid2=439&subid3=3415202737506852333&subid5=everflow&sessionid=988270353948
Cookie: __cf_bm=CHoT.s3yJb16Qt.N8xxOGcUq6Zcr0AqzvnezfRmKHLA-1701998226-0-ATeSMh8fUxOjtvrtdfHe7owtrmuNKMBEtv41zcNFvJHk8O7DT5Q2V3gC7f/YY3X+Gs9GFpie0w6WR3srM++N1MI=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 08 Dec 2023 01:17:06 GMT
content-type: text/javascript
cf-bgj: minify
cf-polished: origSize=769
etag: W/"301-60bf31c6b0c80"
last-modified: Thu, 07 Dec 2023 22:37:22 GMT
nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]}
report-to: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1701994538&sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add&s=Ozy3%2FNWHEvQQI1qzR%2FNS%2BXwLm%2BlC%2Fd21UkHuC6L3r5A%3D"}]}
reporting-endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1701994538&sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add&s=Ozy3%2FNWHEvQQI1qzR%2FNS%2BXwLm%2BlC%2Fd21UkHuC6L3r5A%3D
via: 1.1 vegur
cf-cache-status: HIT
age: 7
expires: Fri, 08 Dec 2023 02:17:06 GMT
cache-control: public, max-age=3600
vary: Accept-Encoding
server: cloudflare
cf-ray: 83212ab54dc1b4eb-OSL
content-encoding: br
X-Firefox-Spdy: h2

gutcleanseprotocol.com/theme/js/videoHelpers.js

172.64.152.117

200 OK

206 B

URL GET HTTP/2
gutcleanseprotocol.com/theme/js/videoHelpers.js
IP
172.64.152.117:443
ASN
#13335 CLOUDFLARENET

Requested by
https://gutcleanseprotocol.com/230914a/video/video.php?origexperimentalOrig=true&step=1&funnelSTPId=a0q3w00000DGs1lAAD&origuidOrig=db_bc3_vslstart_html_230922&origspidOrig=null&step=1&origdsidOrig=&origmainFunnelIdOrig=a0q3w00000DGs1kAAD&origExternalOrig=true&origExternalIDOrig=a0q3w00000DGs1kAAD&genericUrl=os220325a_ap-db_bc3_vslstart_html_230922&orignameOrig=os220325a_ap-db_bc3_vslstart_html_230922&origbrandOrig=Gundry%20MD&business_unit=a00f400000dk8tnaab&n=dbtcr&utm_campaign=gmd-db-biocomplete3-cpaeml-all-vsltcr-qqq-none&utm_campaign_id=7013w000001vCcoAAE&utm_content=banner_ad&utm_medium=cpa&utm_source=email&subid1=04a5712012674201a82424c14afc2e73&subid2=439&subid3=3415202737506852333&subid5=everflow&sessionid=988270353948
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintB7:45:AA:C9:5E:75:6C:63:8E:77:4E:E5:6F:56:48:24:05:8E:95:5D
ValidityMon, 10 Apr 2023 00:00:00 GMT - Tue, 09 Apr 2024 23:59:59 GMT

File type
ASCII text, with no line terminators
Size
206 B (206 bytes)
Hash
ee3ed14b001d82abc6e5d4657d69bd49
2b5ca26f7ec9675efc35115cad54fa6939af5134
ae9713470b900ec86de2767035e1eef1d1d989f5d9f0e410c699c63d7045d92d

HTTP Headers

GET /theme/js/videoHelpers.js HTTP/1.1
Host: gutcleanseprotocol.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gutcleanseprotocol.com/230914a/video/video.php?origexperimentalOrig=true&step=1&funnelSTPId=a0q3w00000DGs1lAAD&origuidOrig=db_bc3_vslstart_html_230922&origspidOrig=null&step=1&origdsidOrig=&origmainFunnelIdOrig=a0q3w00000DGs1kAAD&origExternalOrig=true&origExternalIDOrig=a0q3w00000DGs1kAAD&genericUrl=os220325a_ap-db_bc3_vslstart_html_230922&orignameOrig=os220325a_ap-db_bc3_vslstart_html_230922&origbrandOrig=Gundry%20MD&business_unit=a00f400000dk8tnaab&n=dbtcr&utm_campaign=gmd-db-biocomplete3-cpaeml-all-vsltcr-qqq-none&utm_campaign_id=7013w000001vCcoAAE&utm_content=banner_ad&utm_medium=cpa&utm_source=email&subid1=04a5712012674201a82424c14afc2e73&subid2=439&subid3=3415202737506852333&subid5=everflow&sessionid=988270353948
Cookie: __cf_bm=CHoT.s3yJb16Qt.N8xxOGcUq6Zcr0AqzvnezfRmKHLA-1701998226-0-ATeSMh8fUxOjtvrtdfHe7owtrmuNKMBEtv41zcNFvJHk8O7DT5Q2V3gC7f/YY3X+Gs9GFpie0w6WR3srM++N1MI=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 08 Dec 2023 01:17:06 GMT
content-type: text/javascript
cf-bgj: minify
cf-polished: origSize=229
etag: W/"e5-60bf31c6b0c80"
last-modified: Thu, 07 Dec 2023 22:37:22 GMT
nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]}
report-to: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1701994538&sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add&s=Ozy3%2FNWHEvQQI1qzR%2FNS%2BXwLm%2BlC%2Fd21UkHuC6L3r5A%3D"}]}
reporting-endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1701994538&sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add&s=Ozy3%2FNWHEvQQI1qzR%2FNS%2BXwLm%2BlC%2Fd21UkHuC6L3r5A%3D
via: 1.1 vegur
cf-cache-status: HIT
age: 7
expires: Fri, 08 Dec 2023 02:17:06 GMT
cache-control: public, max-age=3600
vary: Accept-Encoding
server: cloudflare
cf-ray: 83212ab56dcab4eb-OSL
content-encoding: br
X-Firefox-Spdy: h2

app.upsellit.com/utility/session_data.jsp?extended=false&si=ml90mg_1701998235

208.118.62.69

200 OK

523 B

URL GET HTTP/2
app.upsellit.com/utility/session_data.jsp?extended=false&si=ml90mg_1701998235
IP
208.118.62.69:443
ASN
#7296 ALCHEMYNET

Requested by
https://gutcleanseprotocol.com/230914a/video/video.php?origexperimentalOrig=true&step=1&funnelSTPId=a0q3w00000DGs1lAAD&origuidOrig=db_bc3_vslstart_html_230922&origspidOrig=null&step=1&origdsidOrig=&origmainFunnelIdOrig=a0q3w00000DGs1kAAD&origExternalOrig=true&origExternalIDOrig=a0q3w00000DGs1kAAD&genericUrl=os220325a_ap-db_bc3_vslstart_html_230922&orignameOrig=os220325a_ap-db_bc3_vslstart_html_230922&origbrandOrig=Gundry%20MD&business_unit=a00f400000dk8tnaab&n=dbtcr&utm_campaign=gmd-db-biocomplete3-cpaeml-all-vsltcr-qqq-none&utm_campaign_id=7013w000001vCcoAAE&utm_content=banner_ad&utm_medium=cpa&utm_source=email&subid1=04a5712012674201a82424c14afc2e73&subid2=439&subid3=3415202737506852333&subid5=everflow&sessionid=988270353948
Certificate
IssuerDigiCert Inc
Subject*.upsellit.com
FingerprintC1:23:66:EA:31:52:E6:DA:61:AB:28:E9:CB:5F:08:3F:D3:A5:41:86
ValidityMon, 11 Sep 2023 00:00:00 GMT - Thu, 03 Oct 2024 23:59:59 GMT

File type
ASCII text, with very long lines (563), with no line terminators
Size
523 B (523 bytes)
Hash
5da9ff543de232702b15c07f56b198a0
cd47d9c21ce886507eaa92b9a07ee80273ea03ba
552d06b1cab354d8d7fdcde13f949c73699c625510ec027c115f0aff1a14a2e1

HTTP Headers

GET /utility/session_data.jsp?extended=false&si=ml90mg_1701998235 HTTP/1.1
Host: app.upsellit.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gutcleanseprotocol.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Fri, 08 Dec 2023 01:17:08 GMT
content-type: application/x-javascript;charset=ISO-8859-1
content-length: 523
expires: Sat, 09 Dec 2023 01:17:08 GMT
cache-control: max-age=86400
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2

gutcleanseprotocol.com/230914a/video/css/videoMobile.css

172.64.152.117

200 OK

5.6 kB

URL GET HTTP/2
gutcleanseprotocol.com/230914a/video/css/videoMobile.css
IP
172.64.152.117:443
ASN
#13335 CLOUDFLARENET

Requested by
https://gutcleanseprotocol.com/230914a/video/video.php?origexperimentalOrig=true&step=1&funnelSTPId=a0q3w00000DGs1lAAD&origuidOrig=db_bc3_vslstart_html_230922&origspidOrig=null&step=1&origdsidOrig=&origmainFunnelIdOrig=a0q3w00000DGs1kAAD&origExternalOrig=true&origExternalIDOrig=a0q3w00000DGs1kAAD&genericUrl=os220325a_ap-db_bc3_vslstart_html_230922&orignameOrig=os220325a_ap-db_bc3_vslstart_html_230922&origbrandOrig=Gundry%20MD&business_unit=a00f400000dk8tnaab&n=dbtcr&utm_campaign=gmd-db-biocomplete3-cpaeml-all-vsltcr-qqq-none&utm_campaign_id=7013w000001vCcoAAE&utm_content=banner_ad&utm_medium=cpa&utm_source=email&subid1=04a5712012674201a82424c14afc2e73&subid2=439&subid3=3415202737506852333&subid5=everflow&sessionid=988270353948
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintB7:45:AA:C9:5E:75:6C:63:8E:77:4E:E5:6F:56:48:24:05:8E:95:5D
ValidityMon, 10 Apr 2023 00:00:00 GMT - Tue, 09 Apr 2024 23:59:59 GMT

File type
Unicode text, UTF-8 text, with very long lines (5567), with no line terminators
Size
5.6 kB (5567 bytes)
Hash
43d0e5e62ce0c83dd465949a13fac7f0
e2a8be0cec9be774b66ca647ca4d1de485340e51
b2f7b21e1fb8457475093c4833e958b7591cec8dad88d224742e06771b433f0f

HTTP Headers

GET /230914a/video/css/videoMobile.css HTTP/1.1
Host: gutcleanseprotocol.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gutcleanseprotocol.com/230914a/video/video.php?origexperimentalOrig=true&step=1&funnelSTPId=a0q3w00000DGs1lAAD&origuidOrig=db_bc3_vslstart_html_230922&origspidOrig=null&step=1&origdsidOrig=&origmainFunnelIdOrig=a0q3w00000DGs1kAAD&origExternalOrig=true&origExternalIDOrig=a0q3w00000DGs1kAAD&genericUrl=os220325a_ap-db_bc3_vslstart_html_230922&orignameOrig=os220325a_ap-db_bc3_vslstart_html_230922&origbrandOrig=Gundry%20MD&business_unit=a00f400000dk8tnaab&n=dbtcr&utm_campaign=gmd-db-biocomplete3-cpaeml-all-vsltcr-qqq-none&utm_campaign_id=7013w000001vCcoAAE&utm_content=banner_ad&utm_medium=cpa&utm_source=email&subid1=04a5712012674201a82424c14afc2e73&subid2=439&subid3=3415202737506852333&subid5=everflow&sessionid=988270353948
Cookie: __cf_bm=CHoT.s3yJb16Qt.N8xxOGcUq6Zcr0AqzvnezfRmKHLA-1701998226-0-ATeSMh8fUxOjtvrtdfHe7owtrmuNKMBEtv41zcNFvJHk8O7DT5Q2V3gC7f/YY3X+Gs9GFpie0w6WR3srM++N1MI=
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 08 Dec 2023 01:17:06 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=7011
etag: W/"1b63-60bf31c6b0c80"
last-modified: Thu, 07 Dec 2023 22:37:22 GMT
nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]}
report-to: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1701994069&sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add&s=CO5j%2BOGACJKO%2FE5mTr0nJON%2F9w6X0MMbK9bUacGHFJk%3D"}]}
reporting-endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1701994069&sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add&s=CO5j%2BOGACJKO%2FE5mTr0nJON%2F9w6X0MMbK9bUacGHFJk%3D
via: 1.1 vegur
cf-cache-status: HIT
age: 4157
expires: Fri, 08 Dec 2023 02:17:06 GMT
cache-control: public, max-age=3600
vary: Accept-Encoding
server: cloudflare
cf-ray: 83212ab54db8b4eb-OSL
content-encoding: br
X-Firefox-Spdy: h2

gutcleanseprotocol.com/theme/js/network.js

172.64.152.117

200 OK

979 B

URL GET HTTP/2
gutcleanseprotocol.com/theme/js/network.js
IP
172.64.152.117:443
ASN
#13335 CLOUDFLARENET

Requested by
https://gutcleanseprotocol.com/230914a/video/video.php?origexperimentalOrig=true&step=1&funnelSTPId=a0q3w00000DGs1lAAD&origuidOrig=db_bc3_vslstart_html_230922&origspidOrig=null&step=1&origdsidOrig=&origmainFunnelIdOrig=a0q3w00000DGs1kAAD&origExternalOrig=true&origExternalIDOrig=a0q3w00000DGs1kAAD&genericUrl=os220325a_ap-db_bc3_vslstart_html_230922&orignameOrig=os220325a_ap-db_bc3_vslstart_html_230922&origbrandOrig=Gundry%20MD&business_unit=a00f400000dk8tnaab&n=dbtcr&utm_campaign=gmd-db-biocomplete3-cpaeml-all-vsltcr-qqq-none&utm_campaign_id=7013w000001vCcoAAE&utm_content=banner_ad&utm_medium=cpa&utm_source=email&subid1=04a5712012674201a82424c14afc2e73&subid2=439&subid3=3415202737506852333&subid5=everflow&sessionid=988270353948
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintB7:45:AA:C9:5E:75:6C:63:8E:77:4E:E5:6F:56:48:24:05:8E:95:5D
ValidityMon, 10 Apr 2023 00:00:00 GMT - Tue, 09 Apr 2024 23:59:59 GMT

File type
ASCII text, with very long lines (982), with no line terminators
Size
979 B (979 bytes)
Hash
bb1c50fcb8c787280fdf4f79883a507f
48ddf4f9169a51d95b062fb78f6dddd37860c169
96f9ba5e5642576b7b5920340aebe530d5fed270ab4ae9f1211eb7252ec802f0

HTTP Headers

GET /theme/js/network.js HTTP/1.1
Host: gutcleanseprotocol.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gutcleanseprotocol.com/230914a/video/video.php?origexperimentalOrig=true&step=1&funnelSTPId=a0q3w00000DGs1lAAD&origuidOrig=db_bc3_vslstart_html_230922&origspidOrig=null&step=1&origdsidOrig=&origmainFunnelIdOrig=a0q3w00000DGs1kAAD&origExternalOrig=true&origExternalIDOrig=a0q3w00000DGs1kAAD&genericUrl=os220325a_ap-db_bc3_vslstart_html_230922&orignameOrig=os220325a_ap-db_bc3_vslstart_html_230922&origbrandOrig=Gundry%20MD&business_unit=a00f400000dk8tnaab&n=dbtcr&utm_campaign=gmd-db-biocomplete3-cpaeml-all-vsltcr-qqq-none&utm_campaign_id=7013w000001vCcoAAE&utm_content=banner_ad&utm_medium=cpa&utm_source=email&subid1=04a5712012674201a82424c14afc2e73&subid2=439&subid3=3415202737506852333&subid5=everflow&sessionid=988270353948
Cookie: __cf_bm=CHoT.s3yJb16Qt.N8xxOGcUq6Zcr0AqzvnezfRmKHLA-1701998226-0-ATeSMh8fUxOjtvrtdfHe7owtrmuNKMBEtv41zcNFvJHk8O7DT5Q2V3gC7f/YY3X+Gs9GFpie0w6WR3srM++N1MI=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 08 Dec 2023 01:17:06 GMT
content-type: text/javascript
cf-bgj: minify
cf-polished: origSize=1099
etag: W/"44b-60bf31c6b0c80"
last-modified: Thu, 07 Dec 2023 22:37:22 GMT
nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]}
report-to: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1701994538&sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add&s=Ozy3%2FNWHEvQQI1qzR%2FNS%2BXwLm%2BlC%2Fd21UkHuC6L3r5A%3D"}]}
reporting-endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1701994538&sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add&s=Ozy3%2FNWHEvQQI1qzR%2FNS%2BXwLm%2BlC%2Fd21UkHuC6L3r5A%3D
via: 1.1 vegur
cf-cache-status: HIT
age: 7
expires: Fri, 08 Dec 2023 02:17:06 GMT
cache-control: public, max-age=3600
vary: Accept-Encoding
server: cloudflare
cf-ray: 83212ab55dc9b4eb-OSL
content-encoding: br
X-Firefox-Spdy: h2

stat.youniverssl.com/stat?callback=siteStatHandler&consume=%7B%22affParameters%22%3A%7B%22utmSource%22%3A%22email%22%2C%22utmMedium%22%3A%22cpa%22%2C%22utmCampaign%22%3A%22gmd-db-biocomplete3-cpaeml-all-vsltcr-qqq-none%22%2C%22utmCampaignId%22%3A%227013w000001vCcoAAE%22%2C%22utmContent%22%3A%22banner_ad%22%2C%22utmTerm%22%3Anull%2C%22subId1%22%3A%2204a5712012674201a82424c14afc2e73%22%2C%22subId2%22%3A%22439%22%2C%22subId3%22%3A%223415202737506852333%22%2C%22subId4%22%3Anull%2C%22subId5%22%3A%22everflow%22%7D%2C%22sessionid%22%3A%22988270353948%22%2C%22url%22%3A%22https%3A%2F%2Fgutcleanseprotocol.com%2F230914a%2Fvideo%2Fvideo.php%3ForigexperimentalOrig%3Dtrue%26step%3D1%26funnelSTPId%3Da0q3w00000DGs1lAAD%26origuidOrig%3Ddb_bc3_vslstart_html_230922%26origspidOrig%3Dnull%26step%3D1%26origdsidOrig%3D%26origmainFunnelIdOrig%3Da0q3w00000DGs1kAAD%26origExternalOrig%3Dtrue%26origExternalIDOrig%3Da0q3w00000DGs1kAAD%26genericUrl%3Dos220325a_ap-db_bc3_vslstart_html_230922%26orignameOrig%3Dos220325a_ap-db_bc3_vslstart_html_230922%26origbrandOrig%3DGundry%2520MD%26business_unit%3Da00f400000dk8tnaab%26n%3Ddbtcr%26utm_campaign%3Dgmd-db-biocomplete3-cpaeml-all-vsltcr-qqq-none%26utm_campaign_id%3D7013w000001vCcoAAE%26utm_content%3Dbanner_ad%26utm_medium%3Dcpa%26utm_source%3Demail%26subid1%3D04a5712012674201a82424c14afc2e73%26subid2%3D439%26subid3%3D3415202737506852333%26subid5%3Deverflow%26sessionid%3D988270353948%22%7D&id=4cb725660c43031e3b06c75892d96c5a&url=https%3A%2F%2Fgutcleanseprotocol.com%2F230914a%2Fvideo%2Fvideo.php%3ForigexperimentalOrig%3Dtrue%26step%3D1%26funnelSTPId%3Da0q3w00000DGs1lAAD%26origuidOrig%3Ddb_bc3_vslstart_html_230922%26origspidOrig%3Dnull%26step%3D1%26origdsidOrig%3D%26origmainFunnelIdOrig%3Da0q3w00000DGs1kAAD%26origExternalOrig%3Dtrue%26origExternalIDOrig%3Da0q3w00000DGs1kAAD%26genericUrl%3Dos220325a_ap-db_bc3_vslstart_html_230922%26orignameOrig%3Dos220325a_ap-db_bc3_vslstart_html_230922%26origbrandOrig%3DGundry%2520MD%26business_unit%3Da00f400000dk8tnaab%26n%3Ddbtcr%26utm_campaign%3Dgmd-db-biocomplete3-cpaeml-all-vsltcr-qqq-none%26utm_campaign_id%3D7013w000001vCcoAAE%26utm_content%3Dbanner_ad%26utm_medium%3Dcpa%26utm_source%3Demail%26subid1%3D04a5712012674201a82424c14afc2e73%26subid2%3D439%26subid3%3D3415202737506852333%26subid5%3Deverflow%26sessionid%3D988270353948&sessionid=988270353948

172.64.144.222

200 OK

4.7 kB

URL GET HTTP/3
stat.youniverssl.com/stat?callback=siteStatHandler&consume=%7B%22affParameters%22%3A%7B%22utmSource%22%3A%22email%22%2C%22utmMedium%22%3A%22cpa%22%2C%22utmCampaign%22%3A%22gmd-db-biocomplete3-cpaeml-all-vsltcr-qqq-none%22%2C%22utmCampaignId%22%3A%227013w000001vCcoAAE%22%2C%22utmContent%22%3A%22banner_ad%22%2C%22utmTerm%22%3Anull%2C%22subId1%22%3A%2204a5712012674201a82424c14afc2e73%22%2C%22subId2%22%3A%22439%22%2C%22subId3%22%3A%223415202737506852333%22%2C%22subId4%22%3Anull%2C%22subId5%22%3A%22everflow%22%7D%2C%22sessionid%22%3A%22988270353948%22%2C%22url%22%3A%22https%3A%2F%2Fgutcleanseprotocol.com%2F230914a%2Fvideo%2Fvideo.php%3ForigexperimentalOrig%3Dtrue%26step%3D1%26funnelSTPId%3Da0q3w00000DGs1lAAD%26origuidOrig%3Ddb_bc3_vslstart_html_230922%26origspidOrig%3Dnull%26step%3D1%26origdsidOrig%3D%26origmainFunnelIdOrig%3Da0q3w00000DGs1kAAD%26origExternalOrig%3Dtrue%26origExternalIDOrig%3Da0q3w00000DGs1kAAD%26genericUrl%3Dos220325a_ap-db_bc3_vslstart_html_230922%26orignameOrig%3Dos220325a_ap-db_bc3_vslstart_html_230922%26origbrandOrig%3DGundry%2520MD%26business_unit%3Da00f400000dk8tnaab%26n%3Ddbtcr%26utm_campaign%3Dgmd-db-biocomplete3-cpaeml-all-vsltcr-qqq-none%26utm_campaign_id%3D7013w000001vCcoAAE%26utm_content%3Dbanner_ad%26utm_medium%3Dcpa%26utm_source%3Demail%26subid1%3D04a5712012674201a82424c14afc2e73%26subid2%3D439%26subid3%3D3415202737506852333%26subid5%3Deverflow%26sessionid%3D988270353948%22%7D&id=4cb725660c43031e3b06c75892d96c5a&url=https%3A%2F%2Fgutcleanseprotocol.com%2F230914a%2Fvideo%2Fvideo.php%3ForigexperimentalOrig%3Dtrue%26step%3D1%26funnelSTPId%3Da0q3w00000DGs1lAAD%26origuidOrig%3Ddb_bc3_vslstart_html_230922%26origspidOrig%3Dnull%26step%3D1%26origdsidOrig%3D%26origmainFunnelIdOrig%3Da0q3w00000DGs1kAAD%26origExternalOrig%3Dtrue%26origExternalIDOrig%3Da0q3w00000DGs1kAAD%26genericUrl%3Dos220325a_ap-db_bc3_vslstart_html_230922%26orignameOrig%3Dos220325a_ap-db_bc3_vslstart_html_230922%26origbrandOrig%3DGundry%2520MD%26business_unit%3Da00f400000dk8tnaab%26n%3Ddbtcr%26utm_campaign%3Dgmd-db-biocomplete3-cpaeml-all-vsltcr-qqq-none%26utm_campaign_id%3D7013w000001vCcoAAE%26utm_content%3Dbanner_ad%26utm_medium%3Dcpa%26utm_source%3Demail%26subid1%3D04a5712012674201a82424c14afc2e73%26subid2%3D439%26subid3%3D3415202737506852333%26subid5%3Deverflow%26sessionid%3D988270353948&sessionid=988270353948
IP
172.64.144.222:443
ASN
#13335 CLOUDFLARENET

Requested by
https://gutcleanseprotocol.com/230914a/video/video.php?origexperimentalOrig=true&step=1&funnelSTPId=a0q3w00000DGs1lAAD&origuidOrig=db_bc3_vslstart_html_230922&origspidOrig=null&step=1&origdsidOrig=&origmainFunnelIdOrig=a0q3w00000DGs1kAAD&origExternalOrig=true&origExternalIDOrig=a0q3w00000DGs1kAAD&genericUrl=os220325a_ap-db_bc3_vslstart_html_230922&orignameOrig=os220325a_ap-db_bc3_vslstart_html_230922&origbrandOrig=Gundry%20MD&business_unit=a00f400000dk8tnaab&n=dbtcr&utm_campaign=gmd-db-biocomplete3-cpaeml-all-vsltcr-qqq-none&utm_campaign_id=7013w000001vCcoAAE&utm_content=banner_ad&utm_medium=cpa&utm_source=email&subid1=04a5712012674201a82424c14afc2e73&subid2=439&subid3=3415202737506852333&subid5=everflow&sessionid=988270353948
Certificate
IssuerCloudflare, Inc.
Subjectyouniverssl.com
Fingerprint77:94:01:1D:E1:36:C2:3E:45:73:C1:84:0E:32:E2:2B:77:12:5D:6C
ValiditySun, 10 Sep 2023 00:00:00 GMT - Mon, 09 Sep 2024 23:59:59 GMT

File type
ASCII text, with very long lines (5070), with no line terminators
Size
4.7 kB (4708 bytes)
Hash
2daff7c3ea070a5aee9dc23a8eabb059
3f6a27735eda9aecc68668b764cc669f29f56d29
59d3a0743b78adb7fd077a06509f26217969b2a5f5a57cc991f9adc0fd8cecd4

HTTP Headers

GET /stat?callback=siteStatHandler&consume=%7B%22affParameters%22%3A%7B%22utmSource%22%3A%22email%22%2C%22utmMedium%22%3A%22cpa%22%2C%22utmCampaign%22%3A%22gmd-db-biocomplete3-cpaeml-all-vsltcr-qqq-none%22%2C%22utmCampaignId%22%3A%227013w000001vCcoAAE%22%2C%22utmContent%22%3A%22banner_ad%22%2C%22utmTerm%22%3Anull%2C%22subId1%22%3A%2204a5712012674201a82424c14afc2e73%22%2C%22subId2%22%3A%22439%22%2C%22subId3%22%3A%223415202737506852333%22%2C%22subId4%22%3Anull%2C%22subId5%22%3A%22everflow%22%7D%2C%22sessionid%22%3A%22988270353948%22%2C%22url%22%3A%22https%3A%2F%2Fgutcleanseprotocol.com%2F230914a%2Fvideo%2Fvideo.php%3ForigexperimentalOrig%3Dtrue%26step%3D1%26funnelSTPId%3Da0q3w00000DGs1lAAD%26origuidOrig%3Ddb_bc3_vslstart_html_230922%26origspidOrig%3Dnull%26step%3D1%26origdsidOrig%3D%26origmainFunnelIdOrig%3Da0q3w00000DGs1kAAD%26origExternalOrig%3Dtrue%26origExternalIDOrig%3Da0q3w00000DGs1kAAD%26genericUrl%3Dos220325a_ap-db_bc3_vslstart_html_230922%26orignameOrig%3Dos220325a_ap-db_bc3_vslstart_html_230922%26origbrandOrig%3DGundry%2520MD%26business_unit%3Da00f400000dk8tnaab%26n%3Ddbtcr%26utm_campaign%3Dgmd-db-biocomplete3-cpaeml-all-vsltcr-qqq-none%26utm_campaign_id%3D7013w000001vCcoAAE%26utm_content%3Dbanner_ad%26utm_medium%3Dcpa%26utm_source%3Demail%26subid1%3D04a5712012674201a82424c14afc2e73%26subid2%3D439%26subid3%3D3415202737506852333%26subid5%3Deverflow%26sessionid%3D988270353948%22%7D&id=4cb725660c43031e3b06c75892d96c5a&url=https%3A%2F%2Fgutcleanseprotocol.com%2F230914a%2Fvideo%2Fvideo.php%3ForigexperimentalOrig%3Dtrue%26step%3D1%26funnelSTPId%3Da0q3w00000DGs1lAAD%26origuidOrig%3Ddb_bc3_vslstart_html_230922%26origspidOrig%3Dnull%26step%3D1%26origdsidOrig%3D%26origmainFunnelIdOrig%3Da0q3w00000DGs1kAAD%26origExternalOrig%3Dtrue%26origExternalIDOrig%3Da0q3w00000DGs1kAAD%26genericUrl%3Dos220325a_ap-db_bc3_vslstart_html_230922%26orignameOrig%3Dos220325a_ap-db_bc3_vslstart_html_230922%26origbrandOrig%3DGundry%2520MD%26business_unit%3Da00f400000dk8tnaab%26n%3Ddbtcr%26utm_campaign%3Dgmd-db-biocomplete3-cpaeml-all-vsltcr-qqq-none%26utm_campaign_id%3D7013w000001vCcoAAE%26utm_content%3Dbanner_ad%26utm_medium%3Dcpa%26utm_source%3Demail%26subid1%3D04a5712012674201a82424c14afc2e73%26subid2%3D439%26subid3%3D3415202737506852333%26subid5%3Deverflow%26sessionid%3D988270353948&sessionid=988270353948 HTTP/1.1
Host: stat.youniverssl.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gutcleanseprotocol.com/
Cookie: __cf_bm=SyF2xbGaUDRcYBwvldV78.9Aud8y207LX0inssLwsII-1701998232-0-AUJVywr1dS0Z58kfe0U18E1OvBxEHS4rprnGBLYMckCs3b4jSu5QhjVlstOwQHNMKZYil90MrZscbKLEv32R3fU=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 08 Dec 2023 01:17:14 GMT
content-type: application/javascript;charset=UTF-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
expires: 0
pragma: no-cache
vary: accept-encoding
via: 1.1 spaces-router (devel)
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 83212ae2ea30568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

stat.youniverssl.com/js/fp.min.js

172.64.144.222

200 OK

32 kB

URL GET HTTP/3
stat.youniverssl.com/js/fp.min.js
IP
172.64.144.222:443
ASN
#13335 CLOUDFLARENET

Requested by
https://gutcleanseprotocol.com/230914a/video/video.php?origexperimentalOrig=true&step=1&funnelSTPId=a0q3w00000DGs1lAAD&origuidOrig=db_bc3_vslstart_html_230922&origspidOrig=null&step=1&origdsidOrig=&origmainFunnelIdOrig=a0q3w00000DGs1kAAD&origExternalOrig=true&origExternalIDOrig=a0q3w00000DGs1kAAD&genericUrl=os220325a_ap-db_bc3_vslstart_html_230922&orignameOrig=os220325a_ap-db_bc3_vslstart_html_230922&origbrandOrig=Gundry%20MD&business_unit=a00f400000dk8tnaab&n=dbtcr&utm_campaign=gmd-db-biocomplete3-cpaeml-all-vsltcr-qqq-none&utm_campaign_id=7013w000001vCcoAAE&utm_content=banner_ad&utm_medium=cpa&utm_source=email&subid1=04a5712012674201a82424c14afc2e73&subid2=439&subid3=3415202737506852333&subid5=everflow&sessionid=988270353948
Certificate
IssuerCloudflare, Inc.
Subjectyouniverssl.com
Fingerprint77:94:01:1D:E1:36:C2:3E:45:73:C1:84:0E:32:E2:2B:77:12:5D:6C
ValiditySun, 10 Sep 2023 00:00:00 GMT - Mon, 09 Sep 2024 23:59:59 GMT

File type

Size
32 kB (31706 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /js/fp.min.js HTTP/1.1
Host: stat.youniverssl.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gutcleanseprotocol.com/
Cookie: __cf_bm=SyF2xbGaUDRcYBwvldV78.9Aud8y207LX0inssLwsII-1701998232-0-AUJVywr1dS0Z58kfe0U18E1OvBxEHS4rprnGBLYMckCs3b4jSu5QhjVlstOwQHNMKZYil90MrZscbKLEv32R3fU=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 08 Dec 2023 01:17:13 GMT
content-type: application/javascript
cache-control: no-cache, no-store, max-age=0, must-revalidate
expires: 0
last-modified: Wed, 15 Nov 2023 20:21:08 GMT
pragma: no-cache
vary: accept-encoding
via: 1.1 spaces-router (devel)
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
cf-cache-status: MISS
server: cloudflare
cf-ray: 83212add3843568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

www2.ultimategutprotocol.com/cid/7013w000001vCcoAAE?subid1=04a5712012674201a82424c14afc2e73&subid2=439&subid3=3415202737506852333&subid5=everflow

172.64.152.168

302 Found

0 B

URL User Request GET HTTP/2
www2.ultimategutprotocol.com/cid/7013w000001vCcoAAE?subid1=04a5712012674201a82424c14afc2e73&subid2=439&subid3=3415202737506852333&subid5=everflow
IP
172.64.152.168:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint61:8D:25:15:4D:5A:2D:68:63:65:A7:DF:D5:4A:C7:08:D4:4C:C5:88
ValidityFri, 12 May 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /cid/7013w000001vCcoAAE?subid1=04a5712012674201a82424c14afc2e73&subid2=439&subid3=3415202737506852333&subid5=everflow HTTP/1.1
Host: www2.ultimategutprotocol.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
date: Fri, 08 Dec 2023 01:17:03 GMT
content-length: 0
location: https://www2.gutcleanseprotocol.com/fst/d_bc3_vslstart_qqq?business_unit=a00f400000dk8tnaab&experimental=true&n=dbtcr&utm_campaign=gmd-db-biocomplete3-cpaeml-all-vsltcr-qqq-none&utm_campaign_id=7013w000001vCcoAAE&utm_content=banner_ad&utm_medium=cpa&utm_source=email&subid1=04a5712012674201a82424c14afc2e73&subid2=439&subid3=3415202737506852333&subid5=everflow
strict-transport-security: max-age=15552000; includeSubDomains
via: 1.1 spaces-router (devel)
x-content-type-options: nosniff
x-dns-prefetch-control: off
x-download-options: noopen
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
cf-cache-status: DYNAMIC
set-cookie: _csrf=cqPVN3Nskrqno9iDAHWLOhy3; Path=/
_csrf=2tJmbDnoUY1MKnQu4Gt_FdXY; Path=/
XSRF-TOKEN=MCOAIaM7-1to-uyWGQFrWYVuoAYTfCLPFDpg; Path=/; Secure
_csrf=r5Tf7nsNrabuTRl4M5Wn3CCS; Path=/
__cf_bm=hbQKiUBZ0bpP7UzDFfRnTsaSHNLsv_rZqu13nuTqmLk-1701998223-0-AS8k7z1iGa7NAgvDeY+THuKqzE7sxF8H+DQDY52H4Yftlyn1DhEHdU7+Zt8Rk1ZiZl6bA1AYizFOI09r4jAUVDY=; path=/; expires=Fri, 08-Dec-23 01:47:03 GMT; domain=.ultimategutprotocol.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 83212aa23eb65696-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

static.cloudflareinsights.com/beacon.min.js/v84a3a4012de94ce1a686ba8c167c359c1696973893317

104.16.57.101

200 OK

20 kB

URL GET HTTP/2
static.cloudflareinsights.com/beacon.min.js/v84a3a4012de94ce1a686ba8c167c359c1696973893317
IP
104.16.57.101:443
ASN
#13335 CLOUDFLARENET

Requested by
https://gutcleanseprotocol.com/230914a/video/video.php?origexperimentalOrig=true&step=1&funnelSTPId=a0q3w00000DGs1lAAD&origuidOrig=db_bc3_vslstart_html_230922&origspidOrig=null&step=1&origdsidOrig=&origmainFunnelIdOrig=a0q3w00000DGs1kAAD&origExternalOrig=true&origExternalIDOrig=a0q3w00000DGs1kAAD&genericUrl=os220325a_ap-db_bc3_vslstart_html_230922&orignameOrig=os220325a_ap-db_bc3_vslstart_html_230922&origbrandOrig=Gundry%20MD&business_unit=a00f400000dk8tnaab&n=dbtcr&utm_campaign=gmd-db-biocomplete3-cpaeml-all-vsltcr-qqq-none&utm_campaign_id=7013w000001vCcoAAE&utm_content=banner_ad&utm_medium=cpa&utm_source=email&subid1=04a5712012674201a82424c14afc2e73&subid2=439&subid3=3415202737506852333&subid5=everflow&sessionid=988270353948
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint89:79:35:ED:04:A2:CA:50:F7:9A:B8:FE:DF:A5:0C:B1:F2:E6:DD:E8
ValidityMon, 10 Apr 2023 00:00:00 GMT - Tue, 09 Apr 2024 23:59:59 GMT

File type
ASCII text, with very long lines (19986), with no line terminators
Size
20 kB (19986 bytes)
Hash
dd1d068fdb5fe90b6c05a5b3940e088c
0d96f9df8772633a9df4c81cf323a4ef8998ba59
6153d13804862b0fc1c016cf1129f34cb7c6185f2cf4bf1a3a862eecdab50101

HTTP Headers

GET /beacon.min.js/v84a3a4012de94ce1a686ba8c167c359c1696973893317 HTTP/1.1
Host: static.cloudflareinsights.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://gutcleanseprotocol.com
DNT: 1
Connection: keep-alive
Referer: https://gutcleanseprotocol.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 08 Dec 2023 01:17:06 GMT
content-type: text/javascript;charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=86400
etag: W/"2023.10.0"
last-modified: Tue, 10 Oct 2023 21:38:13 GMT
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
server: cloudflare
cf-ray: 83212ab5ed5e56a2-OSL
content-encoding: gzip
X-Firefox-Spdy: h2

gutcleanseprotocol.com/230914a/video/video.php?origexperimentalOrig=true&step=1&funnelSTPId=a0q3w00000DGs1lAAD&origuidOrig=db_bc3_vslstart_html_230922&origspidOrig=null&step=1&origdsidOrig=&origmainFunnelIdOrig=a0q3w00000DGs1kAAD&origExternalOrig=true&origExternalIDOrig=a0q3w00000DGs1kAAD&genericUrl=os220325a_ap-db_bc3_vslstart_html_230922&orignameOrig=os220325a_ap-db_bc3_vslstart_html_230922&origbrandOrig=Gundry%20MD&business_unit=a00f400000dk8tnaab&n=dbtcr&utm_campaign=gmd-db-biocomplete3-cpaeml-all-vsltcr-qqq-none&utm_campaign_id=7013w000001vCcoAAE&utm_content=banner_ad&utm_medium=cpa&utm_source=email&subid1=04a5712012674201a82424c14afc2e73&subid2=439&subid3=3415202737506852333&subid5=everflow&sessionid=988270353948

172.64.152.117

200 OK

12 kB

URL User Request GET HTTP/2
gutcleanseprotocol.com/230914a/video/video.php?origexperimentalOrig=true&step=1&funnelSTPId=a0q3w00000DGs1lAAD&origuidOrig=db_bc3_vslstart_html_230922&origspidOrig=null&step=1&origdsidOrig=&origmainFunnelIdOrig=a0q3w00000DGs1kAAD&origExternalOrig=true&origExternalIDOrig=a0q3w00000DGs1kAAD&genericUrl=os220325a_ap-db_bc3_vslstart_html_230922&orignameOrig=os220325a_ap-db_bc3_vslstart_html_230922&origbrandOrig=Gundry%20MD&business_unit=a00f400000dk8tnaab&n=dbtcr&utm_campaign=gmd-db-biocomplete3-cpaeml-all-vsltcr-qqq-none&utm_campaign_id=7013w000001vCcoAAE&utm_content=banner_ad&utm_medium=cpa&utm_source=email&subid1=04a5712012674201a82424c14afc2e73&subid2=439&subid3=3415202737506852333&subid5=everflow&sessionid=988270353948
IP
172.64.152.117:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintB7:45:AA:C9:5E:75:6C:63:8E:77:4E:E5:6F:56:48:24:05:8E:95:5D
ValidityMon, 10 Apr 2023 00:00:00 GMT - Tue, 09 Apr 2024 23:59:59 GMT

File type

Size
12 kB (12535 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /230914a/video/video.php?origexperimentalOrig=true&step=1&funnelSTPId=a0q3w00000DGs1lAAD&origuidOrig=db_bc3_vslstart_html_230922&origspidOrig=null&step=1&origdsidOrig=&origmainFunnelIdOrig=a0q3w00000DGs1kAAD&origExternalOrig=true&origExternalIDOrig=a0q3w00000DGs1kAAD&genericUrl=os220325a_ap-db_bc3_vslstart_html_230922&orignameOrig=os220325a_ap-db_bc3_vslstart_html_230922&origbrandOrig=Gundry%20MD&business_unit=a00f400000dk8tnaab&n=dbtcr&utm_campaign=gmd-db-biocomplete3-cpaeml-all-vsltcr-qqq-none&utm_campaign_id=7013w000001vCcoAAE&utm_content=banner_ad&utm_medium=cpa&utm_source=email&subid1=04a5712012674201a82424c14afc2e73&subid2=439&subid3=3415202737506852333&subid5=everflow&sessionid=988270353948 HTTP/1.1
Host: gutcleanseprotocol.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __cf_bm=CHoT.s3yJb16Qt.N8xxOGcUq6Zcr0AqzvnezfRmKHLA-1701998226-0-ATeSMh8fUxOjtvrtdfHe7owtrmuNKMBEtv41zcNFvJHk8O7DT5Q2V3gC7f/YY3X+Gs9GFpie0w6WR3srM++N1MI=
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 08 Dec 2023 01:17:06 GMT
content-type: text/html; charset=UTF-8
report-to: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1701998226&sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add&s=plImbyIQIvQKM%2FWxDakP87wKqver0Ti10cQagXn%2BnOI%3D"}]}
reporting-endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1701998226&sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add&s=plImbyIQIvQKM%2FWxDakP87wKqver0Ti10cQagXn%2BnOI%3D
nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]}
via: 1.1 vegur
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 83212ab2ecceb4eb-OSL
content-encoding: br
X-Firefox-Spdy: h2

gutcleanseprotocol.com/theme/css/brightcove.css

172.64.152.117

200 OK

632 B

URL GET HTTP/2
gutcleanseprotocol.com/theme/css/brightcove.css
IP
172.64.152.117:443
ASN
#13335 CLOUDFLARENET

Requested by
https://gutcleanseprotocol.com/230914a/video/video.php?origexperimentalOrig=true&step=1&funnelSTPId=a0q3w00000DGs1lAAD&origuidOrig=db_bc3_vslstart_html_230922&origspidOrig=null&step=1&origdsidOrig=&origmainFunnelIdOrig=a0q3w00000DGs1kAAD&origExternalOrig=true&origExternalIDOrig=a0q3w00000DGs1kAAD&genericUrl=os220325a_ap-db_bc3_vslstart_html_230922&orignameOrig=os220325a_ap-db_bc3_vslstart_html_230922&origbrandOrig=Gundry%20MD&business_unit=a00f400000dk8tnaab&n=dbtcr&utm_campaign=gmd-db-biocomplete3-cpaeml-all-vsltcr-qqq-none&utm_campaign_id=7013w000001vCcoAAE&utm_content=banner_ad&utm_medium=cpa&utm_source=email&subid1=04a5712012674201a82424c14afc2e73&subid2=439&subid3=3415202737506852333&subid5=everflow&sessionid=988270353948
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintB7:45:AA:C9:5E:75:6C:63:8E:77:4E:E5:6F:56:48:24:05:8E:95:5D
ValidityMon, 10 Apr 2023 00:00:00 GMT - Tue, 09 Apr 2024 23:59:59 GMT

File type
ASCII text, with very long lines (632), with no line terminators
Size
632 B (632 bytes)
Hash
329cf1ecd54a5534d2dcbbd3bf51fe20
250aebf3532751c3548b71391cd687905296f668
dfeb083505d6eef63a5d3fee7384226a7e54284ceb9d0e38de9a8b529280f2ae

HTTP Headers

GET /theme/css/brightcove.css HTTP/1.1
Host: gutcleanseprotocol.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gutcleanseprotocol.com/230914a/video/video.php?origexperimentalOrig=true&step=1&funnelSTPId=a0q3w00000DGs1lAAD&origuidOrig=db_bc3_vslstart_html_230922&origspidOrig=null&step=1&origdsidOrig=&origmainFunnelIdOrig=a0q3w00000DGs1kAAD&origExternalOrig=true&origExternalIDOrig=a0q3w00000DGs1kAAD&genericUrl=os220325a_ap-db_bc3_vslstart_html_230922&orignameOrig=os220325a_ap-db_bc3_vslstart_html_230922&origbrandOrig=Gundry%20MD&business_unit=a00f400000dk8tnaab&n=dbtcr&utm_campaign=gmd-db-biocomplete3-cpaeml-all-vsltcr-qqq-none&utm_campaign_id=7013w000001vCcoAAE&utm_content=banner_ad&utm_medium=cpa&utm_source=email&subid1=04a5712012674201a82424c14afc2e73&subid2=439&subid3=3415202737506852333&subid5=everflow&sessionid=988270353948
Cookie: __cf_bm=CHoT.s3yJb16Qt.N8xxOGcUq6Zcr0AqzvnezfRmKHLA-1701998226-0-ATeSMh8fUxOjtvrtdfHe7owtrmuNKMBEtv41zcNFvJHk8O7DT5Q2V3gC7f/YY3X+Gs9GFpie0w6WR3srM++N1MI=
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 08 Dec 2023 01:17:06 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=723
etag: W/"2d3-60bf31c6b0c80"
last-modified: Thu, 07 Dec 2023 22:37:22 GMT
nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]}
report-to: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1701994538&sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add&s=Ozy3%2FNWHEvQQI1qzR%2FNS%2BXwLm%2BlC%2Fd21UkHuC6L3r5A%3D"}]}
reporting-endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1701994538&sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add&s=Ozy3%2FNWHEvQQI1qzR%2FNS%2BXwLm%2BlC%2Fd21UkHuC6L3r5A%3D
via: 1.1 vegur
cf-cache-status: HIT
age: 7
expires: Fri, 08 Dec 2023 02:17:06 GMT
cache-control: public, max-age=3600
vary: Accept-Encoding
server: cloudflare
cf-ray: 83212ab54dbeb4eb-OSL
content-encoding: br
X-Firefox-Spdy: h2

gutcleanseprotocol.com/theme/css/colors.css

172.64.152.117

200 OK

30 B

URL GET HTTP/2
gutcleanseprotocol.com/theme/css/colors.css
IP
172.64.152.117:443
ASN
#13335 CLOUDFLARENET

Requested by
https://gutcleanseprotocol.com/230914a/video/video.php?origexperimentalOrig=true&step=1&funnelSTPId=a0q3w00000DGs1lAAD&origuidOrig=db_bc3_vslstart_html_230922&origspidOrig=null&step=1&origdsidOrig=&origmainFunnelIdOrig=a0q3w00000DGs1kAAD&origExternalOrig=true&origExternalIDOrig=a0q3w00000DGs1kAAD&genericUrl=os220325a_ap-db_bc3_vslstart_html_230922&orignameOrig=os220325a_ap-db_bc3_vslstart_html_230922&origbrandOrig=Gundry%20MD&business_unit=a00f400000dk8tnaab&n=dbtcr&utm_campaign=gmd-db-biocomplete3-cpaeml-all-vsltcr-qqq-none&utm_campaign_id=7013w000001vCcoAAE&utm_content=banner_ad&utm_medium=cpa&utm_source=email&subid1=04a5712012674201a82424c14afc2e73&subid2=439&subid3=3415202737506852333&subid5=everflow&sessionid=988270353948
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintB7:45:AA:C9:5E:75:6C:63:8E:77:4E:E5:6F:56:48:24:05:8E:95:5D
ValidityMon, 10 Apr 2023 00:00:00 GMT - Tue, 09 Apr 2024 23:59:59 GMT

File type
ASCII text, with no line terminators
Size
30 B (30 bytes)
Hash
37c7f307c65dc29cdefe7ed63e52d82c
d50faf2cf4b24d3c4eddb7946400965c37ccb030
9710b24243a15f095dfa868f577880046436f4a36a4e5e924cc1dbf3f085358c

HTTP Headers

GET /theme/css/colors.css HTTP/1.1
Host: gutcleanseprotocol.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gutcleanseprotocol.com/theme/css/variables.css
Cookie: __cf_bm=CHoT.s3yJb16Qt.N8xxOGcUq6Zcr0AqzvnezfRmKHLA-1701998226-0-ATeSMh8fUxOjtvrtdfHe7owtrmuNKMBEtv41zcNFvJHk8O7DT5Q2V3gC7f/YY3X+Gs9GFpie0w6WR3srM++N1MI=
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 08 Dec 2023 01:17:07 GMT
content-type: text/css
content-length: 30
cf-bgj: minify
cf-polished: origSize=35
etag: "23-60bf31c6b0c80"
last-modified: Thu, 07 Dec 2023 22:37:22 GMT
nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]}
report-to: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1701994538&sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add&s=Ozy3%2FNWHEvQQI1qzR%2FNS%2BXwLm%2BlC%2Fd21UkHuC6L3r5A%3D"}]}
reporting-endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1701994538&sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add&s=Ozy3%2FNWHEvQQI1qzR%2FNS%2BXwLm%2BlC%2Fd21UkHuC6L3r5A%3D
via: 1.1 vegur
cf-cache-status: HIT
age: 7
expires: Fri, 08 Dec 2023 02:17:07 GMT
cache-control: public, max-age=3600
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 83212ab79ec5b4eb-OSL
X-Firefox-Spdy: h2

stat.youniverssl.com/js/cscript.js?v=1

172.64.144.222

200 OK

8.8 kB

URL GET HTTP/2
stat.youniverssl.com/js/cscript.js?v=1
IP
172.64.144.222:443
ASN
#13335 CLOUDFLARENET

Requested by
https://gutcleanseprotocol.com/230914a/video/video.php?origexperimentalOrig=true&step=1&funnelSTPId=a0q3w00000DGs1lAAD&origuidOrig=db_bc3_vslstart_html_230922&origspidOrig=null&step=1&origdsidOrig=&origmainFunnelIdOrig=a0q3w00000DGs1kAAD&origExternalOrig=true&origExternalIDOrig=a0q3w00000DGs1kAAD&genericUrl=os220325a_ap-db_bc3_vslstart_html_230922&orignameOrig=os220325a_ap-db_bc3_vslstart_html_230922&origbrandOrig=Gundry%20MD&business_unit=a00f400000dk8tnaab&n=dbtcr&utm_campaign=gmd-db-biocomplete3-cpaeml-all-vsltcr-qqq-none&utm_campaign_id=7013w000001vCcoAAE&utm_content=banner_ad&utm_medium=cpa&utm_source=email&subid1=04a5712012674201a82424c14afc2e73&subid2=439&subid3=3415202737506852333&subid5=everflow&sessionid=988270353948
Certificate
IssuerCloudflare, Inc.
Subjectyouniverssl.com
Fingerprint77:94:01:1D:E1:36:C2:3E:45:73:C1:84:0E:32:E2:2B:77:12:5D:6C
ValiditySun, 10 Sep 2023 00:00:00 GMT - Mon, 09 Sep 2024 23:59:59 GMT

File type
ASCII text, with very long lines (9041), with no line terminators
Size
8.8 kB (8786 bytes)
Hash
268ded742f94b1182cde2c318e619e8f
1ef9e0f5c9946812b3f27a7f9483d7b488de8790
b450fb4102b656cfbd7f32753913140b06a87b6db01cb3e60b65025f32c25a77

HTTP Headers

GET /js/cscript.js?v=1 HTTP/1.1
Host: stat.youniverssl.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gutcleanseprotocol.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 08 Dec 2023 01:17:12 GMT
content-type: application/javascript
cache-control: no-cache, no-store, max-age=0, must-revalidate
expires: 0
last-modified: Wed, 15 Nov 2023 20:21:08 GMT
pragma: no-cache
vary: accept-encoding
via: 1.1 spaces-router (devel)
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
cf-cache-status: MISS
set-cookie: __cf_bm=SyF2xbGaUDRcYBwvldV78.9Aud8y207LX0inssLwsII-1701998232-0-AUJVywr1dS0Z58kfe0U18E1OvBxEHS4rprnGBLYMckCs3b4jSu5QhjVlstOwQHNMKZYil90MrZscbKLEv32R3fU=; path=/; expires=Fri, 08-Dec-23 01:47:12 GMT; domain=.youniverssl.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 83212adb68a8b517-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

gutcleanseprotocol.com/230914a/video/css/videoDesktop.css

172.64.152.117

200 OK

8.2 kB

URL GET HTTP/2
gutcleanseprotocol.com/230914a/video/css/videoDesktop.css
IP
172.64.152.117:443
ASN
#13335 CLOUDFLARENET

Requested by
https://gutcleanseprotocol.com/230914a/video/video.php?origexperimentalOrig=true&step=1&funnelSTPId=a0q3w00000DGs1lAAD&origuidOrig=db_bc3_vslstart_html_230922&origspidOrig=null&step=1&origdsidOrig=&origmainFunnelIdOrig=a0q3w00000DGs1kAAD&origExternalOrig=true&origExternalIDOrig=a0q3w00000DGs1kAAD&genericUrl=os220325a_ap-db_bc3_vslstart_html_230922&orignameOrig=os220325a_ap-db_bc3_vslstart_html_230922&origbrandOrig=Gundry%20MD&business_unit=a00f400000dk8tnaab&n=dbtcr&utm_campaign=gmd-db-biocomplete3-cpaeml-all-vsltcr-qqq-none&utm_campaign_id=7013w000001vCcoAAE&utm_content=banner_ad&utm_medium=cpa&utm_source=email&subid1=04a5712012674201a82424c14afc2e73&subid2=439&subid3=3415202737506852333&subid5=everflow&sessionid=988270353948
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintB7:45:AA:C9:5E:75:6C:63:8E:77:4E:E5:6F:56:48:24:05:8E:95:5D
ValidityMon, 10 Apr 2023 00:00:00 GMT - Tue, 09 Apr 2024 23:59:59 GMT

File type
Unicode text, UTF-8 text, with very long lines (8206), with no line terminators
Size
8.2 kB (8206 bytes)
Hash
4e68dcb48f6827b348c7e501b2f4b734
4d82f6dd3787266d28253492731df1d3a149cb97
9dae28f5d20f141a5403d2027de10ad14aa4de6705aab9e27f3514c88278fc70

HTTP Headers

GET /230914a/video/css/videoDesktop.css HTTP/1.1
Host: gutcleanseprotocol.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gutcleanseprotocol.com/230914a/video/video.php?origexperimentalOrig=true&step=1&funnelSTPId=a0q3w00000DGs1lAAD&origuidOrig=db_bc3_vslstart_html_230922&origspidOrig=null&step=1&origdsidOrig=&origmainFunnelIdOrig=a0q3w00000DGs1kAAD&origExternalOrig=true&origExternalIDOrig=a0q3w00000DGs1kAAD&genericUrl=os220325a_ap-db_bc3_vslstart_html_230922&orignameOrig=os220325a_ap-db_bc3_vslstart_html_230922&origbrandOrig=Gundry%20MD&business_unit=a00f400000dk8tnaab&n=dbtcr&utm_campaign=gmd-db-biocomplete3-cpaeml-all-vsltcr-qqq-none&utm_campaign_id=7013w000001vCcoAAE&utm_content=banner_ad&utm_medium=cpa&utm_source=email&subid1=04a5712012674201a82424c14afc2e73&subid2=439&subid3=3415202737506852333&subid5=everflow&sessionid=988270353948
Cookie: __cf_bm=CHoT.s3yJb16Qt.N8xxOGcUq6Zcr0AqzvnezfRmKHLA-1701998226-0-ATeSMh8fUxOjtvrtdfHe7owtrmuNKMBEtv41zcNFvJHk8O7DT5Q2V3gC7f/YY3X+Gs9GFpie0w6WR3srM++N1MI=
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 08 Dec 2023 01:17:06 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=10325
etag: W/"2855-60bf31c6b0c80"
last-modified: Thu, 07 Dec 2023 22:37:22 GMT
nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]}
report-to: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1701994069&sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add&s=CO5j%2BOGACJKO%2FE5mTr0nJON%2F9w6X0MMbK9bUacGHFJk%3D"}]}
reporting-endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1701994069&sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add&s=CO5j%2BOGACJKO%2FE5mTr0nJON%2F9w6X0MMbK9bUacGHFJk%3D
via: 1.1 vegur
cf-cache-status: HIT
age: 4157
expires: Fri, 08 Dec 2023 02:17:06 GMT
cache-control: public, max-age=3600
vary: Accept-Encoding
server: cloudflare
cf-ray: 83212ab54db7b4eb-OSL
content-encoding: br
X-Firefox-Spdy: h2

gutcleanseprotocol.com/230914a/video/js/video.js

172.64.152.117

200 OK

757 B

URL GET HTTP/2
gutcleanseprotocol.com/230914a/video/js/video.js
IP
172.64.152.117:443
ASN
#13335 CLOUDFLARENET

Requested by
https://gutcleanseprotocol.com/230914a/video/video.php?origexperimentalOrig=true&step=1&funnelSTPId=a0q3w00000DGs1lAAD&origuidOrig=db_bc3_vslstart_html_230922&origspidOrig=null&step=1&origdsidOrig=&origmainFunnelIdOrig=a0q3w00000DGs1kAAD&origExternalOrig=true&origExternalIDOrig=a0q3w00000DGs1kAAD&genericUrl=os220325a_ap-db_bc3_vslstart_html_230922&orignameOrig=os220325a_ap-db_bc3_vslstart_html_230922&origbrandOrig=Gundry%20MD&business_unit=a00f400000dk8tnaab&n=dbtcr&utm_campaign=gmd-db-biocomplete3-cpaeml-all-vsltcr-qqq-none&utm_campaign_id=7013w000001vCcoAAE&utm_content=banner_ad&utm_medium=cpa&utm_source=email&subid1=04a5712012674201a82424c14afc2e73&subid2=439&subid3=3415202737506852333&subid5=everflow&sessionid=988270353948
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintB7:45:AA:C9:5E:75:6C:63:8E:77:4E:E5:6F:56:48:24:05:8E:95:5D
ValidityMon, 10 Apr 2023 00:00:00 GMT - Tue, 09 Apr 2024 23:59:59 GMT

File type
ASCII text, with very long lines (757), with no line terminators
Size
757 B (757 bytes)
Hash
c1358d4f1e1a87177fd934ba8f0130ae
a3479b723c49a9d0b6c1657b069df249ffebfb1b
6c7d9204baa7b9148fcc7881f799cf0a4f1ad543e67dad7b43955b1aa8c99b40

HTTP Headers

GET /230914a/video/js/video.js HTTP/1.1
Host: gutcleanseprotocol.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gutcleanseprotocol.com/230914a/video/video.php?origexperimentalOrig=true&step=1&funnelSTPId=a0q3w00000DGs1lAAD&origuidOrig=db_bc3_vslstart_html_230922&origspidOrig=null&step=1&origdsidOrig=&origmainFunnelIdOrig=a0q3w00000DGs1kAAD&origExternalOrig=true&origExternalIDOrig=a0q3w00000DGs1kAAD&genericUrl=os220325a_ap-db_bc3_vslstart_html_230922&orignameOrig=os220325a_ap-db_bc3_vslstart_html_230922&origbrandOrig=Gundry%20MD&business_unit=a00f400000dk8tnaab&n=dbtcr&utm_campaign=gmd-db-biocomplete3-cpaeml-all-vsltcr-qqq-none&utm_campaign_id=7013w000001vCcoAAE&utm_content=banner_ad&utm_medium=cpa&utm_source=email&subid1=04a5712012674201a82424c14afc2e73&subid2=439&subid3=3415202737506852333&subid5=everflow&sessionid=988270353948
Cookie: __cf_bm=CHoT.s3yJb16Qt.N8xxOGcUq6Zcr0AqzvnezfRmKHLA-1701998226-0-ATeSMh8fUxOjtvrtdfHe7owtrmuNKMBEtv41zcNFvJHk8O7DT5Q2V3gC7f/YY3X+Gs9GFpie0w6WR3srM++N1MI=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 08 Dec 2023 01:17:06 GMT
content-type: text/javascript
cf-bgj: minify
cf-polished: origSize=812
etag: W/"32c-60bf31c6b0c80"
last-modified: Thu, 07 Dec 2023 22:37:22 GMT
nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]}
report-to: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1701994069&sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add&s=CO5j%2BOGACJKO%2FE5mTr0nJON%2F9w6X0MMbK9bUacGHFJk%3D"}]}
reporting-endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1701994069&sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add&s=CO5j%2BOGACJKO%2FE5mTr0nJON%2F9w6X0MMbK9bUacGHFJk%3D
via: 1.1 vegur
cf-cache-status: HIT
age: 4157
expires: Fri, 08 Dec 2023 02:17:06 GMT
cache-control: public, max-age=3600
vary: Accept-Encoding
server: cloudflare
cf-ray: 83212ab56dccb4eb-OSL
content-encoding: br
X-Firefox-Spdy: h2

fonts.gstatic.com/s/montserrat/v26/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCu173w5aXo.woff2

142.250.74.131

200 OK

15 kB

URL GET HTTP/2
fonts.gstatic.com/s/montserrat/v26/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCu173w5aXo.woff2
IP
142.250.74.131:443
ASN
#15169 GOOGLE

Requested by
https://gutcleanseprotocol.com/230914a/video/video.php?origexperimentalOrig=true&step=1&funnelSTPId=a0q3w00000DGs1lAAD&origuidOrig=db_bc3_vslstart_html_230922&origspidOrig=null&step=1&origdsidOrig=&origmainFunnelIdOrig=a0q3w00000DGs1kAAD&origExternalOrig=true&origExternalIDOrig=a0q3w00000DGs1kAAD&genericUrl=os220325a_ap-db_bc3_vslstart_html_230922&orignameOrig=os220325a_ap-db_bc3_vslstart_html_230922&origbrandOrig=Gundry%20MD&business_unit=a00f400000dk8tnaab&n=dbtcr&utm_campaign=gmd-db-biocomplete3-cpaeml-all-vsltcr-qqq-none&utm_campaign_id=7013w000001vCcoAAE&utm_content=banner_ad&utm_medium=cpa&utm_source=email&subid1=04a5712012674201a82424c14afc2e73&subid2=439&subid3=3415202737506852333&subid5=everflow&sessionid=988270353948
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT

File type
Web Open Font Format (Version 2), TrueType, length 15072, version 1.0\012- data
Size
15 kB (15072 bytes)
Hash
abb0e70f516579f1d3340707a949f76b
a35b9bb416d3cf79d45d7e6c7ac5ae84c57ed9ec
9f5f68f23573a4df9d5ce9fdd7c28154b326232e7dc31731a2a2deaa2ab6ca43

HTTP Headers

GET /s/montserrat/v26/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCu173w5aXo.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://gutcleanseprotocol.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15072
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 07 Dec 2023 15:43:48 GMT
expires: Fri, 06 Dec 2024 15:43:48 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 13 Sep 2023 22:52:02 GMT
content-type: font/woff2
age: 34399
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

www2.gutcleanseprotocol.com/proxy/funnel/stats/alternsave/?event=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

172.64.152.117

200 OK

29 B

URL GET HTTP/2
www2.gutcleanseprotocol.com/proxy/funnel/stats/alternsave/?event=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
IP
172.64.152.117:443
ASN
#13335 CLOUDFLARENET

Requested by
https://gutcleanseprotocol.com/230914a/video/video.php?origexperimentalOrig=true&step=1&funnelSTPId=a0q3w00000DGs1lAAD&origuidOrig=db_bc3_vslstart_html_230922&origspidOrig=null&step=1&origdsidOrig=&origmainFunnelIdOrig=a0q3w00000DGs1kAAD&origExternalOrig=true&origExternalIDOrig=a0q3w00000DGs1kAAD&genericUrl=os220325a_ap-db_bc3_vslstart_html_230922&orignameOrig=os220325a_ap-db_bc3_vslstart_html_230922&origbrandOrig=Gundry%20MD&business_unit=a00f400000dk8tnaab&n=dbtcr&utm_campaign=gmd-db-biocomplete3-cpaeml-all-vsltcr-qqq-none&utm_campaign_id=7013w000001vCcoAAE&utm_content=banner_ad&utm_medium=cpa&utm_source=email&subid1=04a5712012674201a82424c14afc2e73&subid2=439&subid3=3415202737506852333&subid5=everflow&sessionid=988270353948
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintB7:45:AA:C9:5E:75:6C:63:8E:77:4E:E5:6F:56:48:24:05:8E:95:5D
ValidityMon, 10 Apr 2023 00:00:00 GMT - Tue, 09 Apr 2024 23:59:59 GMT

File type
ASCII text, with no line terminators
Size
29 B (29 bytes)
Hash
54e4dfc1cd1441de3772039e7abf3161
733b1fa0806c84748be2341667d3b78a6299b958
be7d99ed4865c62780aad3f7edf1ab088dffe7bb1cb3561ddcee3d841347469b

HTTP Headers

GET /proxy/funnel/stats/alternsave/?event=eyJmdW5uZWxTVEZJZCI6ImEwcTN3MDAwMDBER3Mxa0FBRCIsInVybCI6InZpZGVvLnBocCIsImV2ZW50VHlwZSI6IkRlc3RpbmF0aW9uIiwic2Vzc2lvbklkIjoiOTg4MjcwMzUzOTQ4IiwiZGVzdGluYXRpb25JZCI6bnVsbCwiZnVubmVsU1RQSWQiOiJhMHEzdzAwMDAwREdzMWxBQUQiLCJzcGxpdFRlc3RpbmdJZCI6bnVsbCwic3BsaXRUZXN0aW5nRnVubmVsSWQiOm51bGwsIm1haW5GdW5uZWxJRCI6ImEwcTN3MDAwMDBER3Mxa0FBRCIsImN1c3RvbVBheUxvYWQxIjoie30iLCJjdXN0b21QYXlMb2FkMiI6IntcImV4cGVyaW1lbnRhbFwiOnRydWUsXCJzaXRlXCI6dHJ1ZSxcIm5vbi1ldmVudFwiOjB9IiwidXRtU291cmNlIjoiZW1haWwiLCJ1dG1NZWRpdW0iOiJjcGEiLCJ1dG1DYW1wYWlnbiI6ImdtZC1kYi1iaW9jb21wbGV0ZTMtY3BhZW1sLWFsbC12c2x0Y3ItcXFxLW5vbmUiLCJ1dG1DYW1wYWlnbklkIjoiNzAxM3cwMDAwMDF2Q2NvQUFFIiwidXRtQ29udGVudCI6ImJhbm5lcl9hZCIsInV0bVRlcm0iOm51bGwsImFmZklkIjoiIiwib2ZmSWQiOiIiLCJzdWJJZDEiOiIwNGE1NzEyMDEyNjc0MjAxYTgyNDI0YzE0YWZjMmU3MyIsInN1YklkMiI6IjQzOSIsInN1YklkMyI6IjM0MTUyMDI3Mzc1MDY4NTIzMzMiLCJzdWJJZDQiOm51bGwsInN1YklkNSI6ImV2ZXJmbG93Iiwic2FsZXNGdW5uZWwiOiJGdW5uZWwiLCJ2aXNpdG9ySWQiOm51bGwsInJlZmVycmFsVXJsIjoiIiwiYnJhbmQiOiJHdW5kcnkgTUQiLCJicm93c2VyIjoiU2FmYXJpIiwib3MiOiJMaW51eCIsImRldmljZSI6IkRlc2t0b3AifQ== HTTP/1.1
Host: www2.gutcleanseprotocol.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gutcleanseprotocol.com/
Cookie: _csrf=GpDOP58Sp_eTeb6gDswlFiVg; XSRF-TOKEN=ia9WY0Fh-Gcm9nPdiKoTqz8M7NxgjMZi_nak; __cf_bm=CHoT.s3yJb16Qt.N8xxOGcUq6Zcr0AqzvnezfRmKHLA-1701998226-0-ATeSMh8fUxOjtvrtdfHe7owtrmuNKMBEtv41zcNFvJHk8O7DT5Q2V3gC7f/YY3X+Gs9GFpie0w6WR3srM++N1MI=; _gcl_au=1.1.1453483039.1701998234; tcrFed=false; alternaiGuestId=6541e9f1-0423-4efc-9322-c50a8b2a3e76,gutcleanseprotocol.com,,blob:https:; _ga_5MM7TKXSPX=GS1.1.1701998234.1.0.1701998234.60.0.0; _ga=GA1.1.1848370653.1701998235
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 08 Dec 2023 01:17:08 GMT
content-type: application/javascript; charset=utf-8
content-length: 29
cache-control: private, no-cache, max-age = 0
etag: W/"1d-RfI0mb55JJVfolfOEMKnZBLgoWw"
set-cookie: XSRF-TOKEN=1Yo5TfNv-Ms7JS4bqznwQoz5l8vGjoCV_ixA; Path=/; Secure
strict-transport-security: max-age=15552000; includeSubDomains
vary: Accept-Encoding
via: 1.1 spaces-router (devel)
x-content-type-options: nosniff
x-dns-prefetch-control: off
x-download-options: noopen
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 83212abe78f3b4eb-OSL
X-Firefox-Spdy: h2

go.goodlifestylenews.com/biocomplete1123/1a428d1bd18b06caec5f71f539eea2fc/55/leadsource/2407/1610/e666fab8a5525af3f47a112a31db65c9/mpmta

172.67.172.49

302 Found

0 B

URL User Request GET HTTP/2
go.goodlifestylenews.com/biocomplete1123/1a428d1bd18b06caec5f71f539eea2fc/55/leadsource/2407/1610/e666fab8a5525af3f47a112a31db65c9/mpmta
IP
172.67.172.49:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjectgoodlifestylenews.com
Fingerprint6F:1A:61:CC:60:1F:26:F1:38:1B:42:D6:62:31:00:BC:39:7F:73:8B
ValidityFri, 24 Nov 2023 10:01:12 GMT - Thu, 22 Feb 2024 10:01:11 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /biocomplete1123/1a428d1bd18b06caec5f71f539eea2fc/55/leadsource/2407/1610/e666fab8a5525af3f47a112a31db65c9/mpmta HTTP/1.1
Host: go.goodlifestylenews.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
date: Fri, 08 Dec 2023 01:17:02 GMT
content-type: text/html; charset=UTF-8
location: https://verifiedwebpage.com/go?ehash=1a428d1bd18b06caec5f71f539eea2fc&product=34852&ar=55&cid=2407&lid=1610&slhash=e666fab8a5525af3f47a112a31db65c9&mtaid=mpmta&cid2=[s8]
cache-control: max-age=600
expires: Fri, 08 Dec 2023 01:27:02 GMT
vary: User-Agent
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wypPtSPntJMuZvURd9A2ZCtegGO%2FwtcZbz7ShjnN08vPkwQq%2FQDAzhHrPsU3Ok%2BMG%2Bc1%2Fal16bL%2FNboP8IemXYOPguYutcuvgSVTVbaTOKaBeamD2cYVCpPJPwhoRSM%2FOsU%2BBaQi0s54gW0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 83212a969bec5697-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

cdn.gundrymd.com/fonts/TiemposHeadline-Regular.otf

172.64.144.175

200 OK

116 kB

URL GET HTTP/3
cdn.gundrymd.com/fonts/TiemposHeadline-Regular.otf
IP
172.64.144.175:443
ASN
#13335 CLOUDFLARENET

Requested by
https://gutcleanseprotocol.com/230914a/video/video.php?origexperimentalOrig=true&step=1&funnelSTPId=a0q3w00000DGs1lAAD&origuidOrig=db_bc3_vslstart_html_230922&origspidOrig=null&step=1&origdsidOrig=&origmainFunnelIdOrig=a0q3w00000DGs1kAAD&origExternalOrig=true&origExternalIDOrig=a0q3w00000DGs1kAAD&genericUrl=os220325a_ap-db_bc3_vslstart_html_230922&orignameOrig=os220325a_ap-db_bc3_vslstart_html_230922&origbrandOrig=Gundry%20MD&business_unit=a00f400000dk8tnaab&n=dbtcr&utm_campaign=gmd-db-biocomplete3-cpaeml-all-vsltcr-qqq-none&utm_campaign_id=7013w000001vCcoAAE&utm_content=banner_ad&utm_medium=cpa&utm_source=email&subid1=04a5712012674201a82424c14afc2e73&subid2=439&subid3=3415202737506852333&subid5=everflow&sessionid=988270353948
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintB1:F8:53:82:00:D1:17:E3:D2:1A:FB:92:F5:E9:55:CD:92:2D:ED:B5
ValidityFri, 28 Apr 2023 00:00:00 GMT - Sat, 27 Apr 2024 23:59:59 GMT

File type
OpenType font data\012- data
Size
116 kB (116060 bytes)
Hash
1f2f9aab9b2dd7ddf565be934bb753e2
7fcb24f62e3f3e26123e45c50294be1f15beb02c
11cf6f8d61cb030b32ca8725d83518499fec39584e25fdafea23798c1394674f

HTTP Headers

GET /fonts/TiemposHeadline-Regular.otf HTTP/1.1
Host: cdn.gundrymd.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://gutcleanseprotocol.com
DNT: 1
Connection: keep-alive
Referer: https://gutcleanseprotocol.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 08 Dec 2023 01:17:07 GMT
content-type: font/otf
x-amz-id-2: IdW/7t4KKSCDNXVd/GuJjE2uqS+AkC3TUu2x4wtd38UKwuJa8i3yhGoD0vS6v+tHlcDYvgLYSeE=
x-amz-request-id: TNMDKV2XPBMHKWH1
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-max-age: 3000
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
last-modified: Thu, 07 Dec 2023 13:51:53 GMT
etag: W/"1f2f9aab9b2dd7ddf565be934bb753e2"
x-amz-server-side-encryption: AES256
x-amz-version-id: Z7RRdCBIrpnatNPoEYhgvfsmWyhO7kXV
cf-cache-status: HIT
age: 6
expires: Fri, 08 Dec 2023 05:17:07 GMT
cache-control: public, max-age=14400
set-cookie: __cf_bm=bUtxQOlC9XNudhX2eXde6LvnMYXECnvH8G2VOTaz.kk-1701998227-0-AQol3wN5292ISYJqUeEHOhCmgBv8800iyiEUUFMN76Ko9lCNNPecgX2VVChcM74iADZZnqvaHtKyPs616dCLD2Y=; path=/; expires=Fri, 08-Dec-23 01:47:07 GMT; domain=.gundrymd.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 83212abacc4e0b45-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

cdn.gundrymd.com/images/favicon.ico

0.0.0.0

0 B

URL GET
cdn.gundrymd.com/images/favicon.ico
IP
0.0.0.0:0
ASN
#0

Requested by
https://gutcleanseprotocol.com/230914a/video/video.php?origexperimentalOrig=true&step=1&funnelSTPId=a0q3w00000DGs1lAAD&origuidOrig=db_bc3_vslstart_html_230922&origspidOrig=null&step=1&origdsidOrig=&origmainFunnelIdOrig=a0q3w00000DGs1kAAD&origExternalOrig=true&origExternalIDOrig=a0q3w00000DGs1kAAD&genericUrl=os220325a_ap-db_bc3_vslstart_html_230922&orignameOrig=os220325a_ap-db_bc3_vslstart_html_230922&origbrandOrig=Gundry%20MD&business_unit=a00f400000dk8tnaab&n=dbtcr&utm_campaign=gmd-db-biocomplete3-cpaeml-all-vsltcr-qqq-none&utm_campaign_id=7013w000001vCcoAAE&utm_content=banner_ad&utm_medium=cpa&utm_source=email&subid1=04a5712012674201a82424c14afc2e73&subid2=439&subid3=3415202737506852333&subid5=everflow&sessionid=988270353948
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintB1:F8:53:82:00:D1:17:E3:D2:1A:FB:92:F5:E9:55:CD:92:2D:ED:B5
ValidityFri, 28 Apr 2023 00:00:00 GMT - Sat, 27 Apr 2024 23:59:59 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /images/favicon.ico HTTP/1.1
Host: cdn.gundrymd.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gutcleanseprotocol.com/
Cookie: __cf_bm=Axj30jjUFDcOQpzinjgD2ebkPGJwZTlGuJALXjphPko-1701998226-1-AdjftVmr5NM/Y+F1Q6MKfq+N+pLV4UY7Ab0gSJmokKOWRfokX05xt9vyWW5PCECtMZuBbN8pvfCh/UIiKYT4lMA=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 08 Dec 2023 01:17:07 GMT
content-type: image/x-icon
x-amz-id-2: vyinKNwWc/YV8nsXmCqj3IrdCRQ4z6kL+DFgli+xC/Y55tbhaaqN6fnl8jhfMyTQCW7bCd5xKEM=
x-amz-request-id: CTPANJ7GGYT1812B
last-modified: Wed, 16 Aug 2023 21:39:19 GMT
etag: W/"3f5bb41c1f0549f2f58c505af405fdfc"
x-amz-server-side-encryption: AES256
x-amz-version-id: UotW7tN7ERSHgl810vWgQQVzi.XjG2rM
cf-cache-status: HIT
age: 4160
expires: Fri, 08 Dec 2023 05:17:07 GMT
cache-control: public, max-age=14400
set-cookie: __cf_bm=C0mMlHki35d_aTYm0leMbjRKqBaU5CWSssWCAUbDxOI-1701998227-0-AY2ywhP6OjHjuLahzqZItIHI6T7oV7kX7AZZSOrAR7yPwz3Rv8Ov7NraieMh7ZmTzVM8IocPN6S24LvphcmhGpE=; path=/; expires=Fri, 08-Dec-23 01:47:07 GMT; domain=.gundrymd.com; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
server: cloudflare
cf-ray: 83212abc8e27b512-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (31)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash