{"report_id":"7d719350-2146-4b0a-abac-bd2c52a77f7d","version":6,"status":"done","tags":[],"date":"2025-11-30T23:54:52Z","url":{"schema":"http","addr":"www3.totalmetabolicreset.com/video250902a_la_ap?origexperimentalOrig=true\u0026step=1\u0026funnelSTPId=a0qVo00000WbjCFIAZ\u0026origuidOrig=mr_db_vsl_a15_250902\u0026origspidOrig=null\u0026step=1\u0026origdsidOrig=\u0026origmainFunnelIdOrig=a0qVo00000WbmtKIAR\u0026origExternalOrig=true\u0026origExternalIDOrig=a0qVo00000WbmtKIAR\u0026genericUrl=video250902a_la_ap-mr_db_vsl_a15_250902\u0026orignameOrig=video250902a_la_ap-mr_db_vsl_a15_250902\u0026origbrandOrig=Beverly%20Hills%20MD\u0026business_unit=a00f400000jv55aaat\u0026utm_campaign=bhmd-db-metreset-cpaeml-all--250902\u0026utm_campaign_id=701Vo00000rCqdrIAC\u0026utm_content=3rd_party_email\u0026utm_source=email\u0026subid1=8398a1215b3d43708c54a4686e489f07\u0026subid2=16\u0026subid3=catmetaresetdonut1130\u0026subid5=everflow\u0026sessionid=936099273179","fqdn":"www3.totalmetabolicreset.com","domain":"totalmetabolicreset.com","tld":"com"},"ip":{"addr":"104.18.38.143","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"www3.totalmetabolicreset.com/video250902a_la_ap?origexperimentalOrig=true\u0026step=1\u0026step=1\u0026funnelSTPId=a0qVo00000WbjCFIAZ\u0026origuidOrig=mr_db_vsl_a15_250902\u0026origspidOrig=null\u0026origdsidOrig=\u0026origmainFunnelIdOrig=a0qVo00000WbmtKIAR\u0026origExternalOrig=true\u0026origExternalIDOrig=a0qVo00000WbmtKIAR\u0026genericUrl=video250902a_la_ap-mr_db_vsl_a15_250902\u0026orignameOrig=video250902a_la_ap-mr_db_vsl_a15_250902\u0026origbrandOrig=Beverly%20Hills%20MD\u0026business_unit=a00f400000jv55aaat\u0026utm_campaign=bhmd-db-metreset-cpaeml-all--250902\u0026utm_campaign_id=701Vo00000rCqdrIAC\u0026utm_content=3rd_party_email\u0026utm_source=email\u0026subid1=8398a1215b3d43708c54a4686e489f07\u0026subid2=16\u0026subid3=catmetaresetdonut1130\u0026subid5=everflow\u0026sessionid=936099273179","fqdn":"www3.totalmetabolicreset.com","domain":"totalmetabolicreset.com","tld":"com"},"title":"Beverly Hills MD","dom":{"size":186795,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (57993)","md5":"7fd29b05b514396919f53de943f2df27","sha1":"4d25d444ac86ddc93c28fabfa3c46ca1998c521a","sha256":"70aed7b5d5d370d83c90bce29bc0b8784cd8beabf24dc2349a636f57805cc663","sha512":"c480b07f62108ea161b2c3c309dab28b08890c790e76b29a66a637869c9e4dad03894f92075f96d4d611b8cc32ceb2d2f9585a83581c882a1ad9a76ff6e5baa0","ssdeep":"1536:aP2Ci5UxsHR0dwdAxzVMiyfwlxxKtUu+RwYwPtuSVBOn/jJC:ujHdwdAxdDSVBO/dC","tlshash":"8d04858117a43c3e955b799e5ac70800e3b94b50d43518eebfea7f8b43e4f993687848","dom_hash":"domhash4166872c6f1386a09b7c18e18c7a206b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"www3.totalmetabolicreset.com/video250902a_la_ap?origexperimentalOrig=true\u0026step=1\u0026funnelSTPId=a0qVo00000WbjCFIAZ\u0026origuidOrig=mr_db_vsl_a15_250902\u0026origspidOrig=null\u0026step=1\u0026origdsidOrig=\u0026origmainFunnelIdOrig=a0qVo00000WbmtKIAR\u0026origExternalOrig=true\u0026origExternalIDOrig=a0qVo00000WbmtKIAR\u0026genericUrl=video250902a_la_ap-mr_db_vsl_a15_250902\u0026orignameOrig=video250902a_la_ap-mr_db_vsl_a15_250902\u0026origbrandOrig=Beverly%20Hills%20MD\u0026business_unit=a00f400000jv55aaat\u0026utm_campaign=bhmd-db-metreset-cpaeml-all--250902\u0026utm_campaign_id=701Vo00000rCqdrIAC\u0026utm_content=3rd_party_email\u0026utm_source=email\u0026subid1=8398a1215b3d43708c54a4686e489f07\u0026subid2=16\u0026subid3=catmetaresetdonut1130\u0026subid5=everflow\u0026sessionid=936099273179","fqdn":"www3.totalmetabolicreset.com","domain":"totalmetabolicreset.com","tld":"com"},"ip":{"addr":"104.18.38.143","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-01-04T23:54:52Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"cdn.beverlyhillsmd.com","ip":{"addr":"104.18.36.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2001-07-01","domain_rank":0,"first_seen":"2019-02-21T06:25:23Z","last_seen":"2025-11-30T23:54:37.651976Z","alert_count":0,"request_count":14,"received_data":379281,"sent_data":8885,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]},{"fqdn":"cdn.activatedyou.com","ip":{"addr":"172.64.144.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-09-22","domain_rank":0,"first_seen":"2018-11-12T02:20:25Z","last_seen":"2025-11-27T13:00:22.939345Z","alert_count":0,"request_count":1,"received_data":169404,"sent_data":550,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www2.totalmetabolicreset.com","ip":{"addr":"172.64.149.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-08-21","domain_rank":0,"first_seen":"2025-10-30T04:48:52.363948Z","last_seen":"2025-11-24T22:35:57.18246Z","alert_count":0,"request_count":7,"received_data":41950,"sent_data":8562,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"innerskinresearch.com","ip":{"addr":"172.64.145.52","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-09-19","domain_rank":1432089,"first_seen":"2017-02-03T07:47:48Z","last_seen":"2025-11-30T23:54:37.660503Z","alert_count":0,"request_count":2,"received_data":118677,"sent_data":925,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2025-11-30T22:16:05.472311Z","alert_count":0,"request_count":1,"received_data":717108,"sent_data":447,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www3.totalmetabolicreset.com","ip":{"addr":"172.64.149.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-08-21","domain_rank":0,"first_seen":"2025-10-30T04:48:52.362129Z","last_seen":"2025-11-24T22:34:12.532139Z","alert_count":0,"request_count":10,"received_data":3337863,"sent_data":12986,"comment":"","tags":null,"fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]}]},{"fqdn":"fast.vidalytics.com","ip":{"addr":"205.234.175.175","port":443,"asn":30081,"as":"CACHENETWORKS","country":"United States","country_code":"US"},"domain_registered":"2007-05-15","domain_rank":540423,"first_seen":"2017-02-08T02:49:35Z","last_seen":"2025-11-24T14:53:25.707809Z","alert_count":0,"request_count":14,"received_data":5135864,"sent_data":7477,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"CacheFly","description":"CacheFly is a content delivery network (CDN) which offers CDN service that relies solely on IP anycast for routing, rather than DNS based global load balancing.","website":"https://www.cachefly.com","common_platform_enumeration":"","icon":"CacheFly.svg","categories":["CDN"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"stats.vidalytics.com","ip":{"addr":"107.178.211.97","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"2007-05-15","domain_rank":521623,"first_seen":"2017-02-08T02:49:35Z","last_seen":"2025-11-24T14:53:25.688108Z","alert_count":0,"request_count":9,"received_data":4157,"sent_data":4865,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"funnel-config-loader.ghm.cloud","ip":{"addr":"172.66.43.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-03-19","domain_rank":1939282,"first_seen":"2024-12-22T23:18:13.671917Z","last_seen":"2025-11-27T11:52:39.734306Z","alert_count":0,"request_count":2,"received_data":3370,"sent_data":1142,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-11-30T22:14:19.793229Z","alert_count":0,"request_count":1,"received_data":1251,"sent_data":462,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www3.totalmetabolicreset.com/9769.js","fqdn":"www3.totalmetabolicreset.com","domain":"totalmetabolicreset.com","tld":"com"},"ip":{"addr":"172.64.149.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"001cabde8ca7a4e5e224473ac3e5bd4a","sha1":"b5a88426f91f0dd28edea1182ef49685de80c5cc","sha256":"8a60952f34915eff962ac763069f156ae726de582f5f8619cb0d07403081651a","sha512":"53f64c2519b59e246d7c14beeb23e9c690d72d2a98145e40c278a2b1890e42b739dfa4e55dc1e1815e816165c4bc9ac7da7e7e11724a7868c5f8093e66b23875","ssdeep":"1536:vQo06cLnKVvxGzc6u1AyMS5Q30QOnvmJgWsvSfjcL7esY/uo20udcUpFe+F+xqPa:Z0znKVYyM+blynujZzPK","tlshash":"37e3b5ceb291b5a24297a1b5603f090be2377dc5540d40acf255e8ee7c7c48892bbf79","size":153951,"data":"","first_seen":"2025-11-30T23:54:43.477493Z","last_seen":"2026-02-12T18:25:45.699874Z","times_seen":102,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www2.totalmetabolicreset.com/proxy/funnel/stats/alternsave/?event=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","fqdn":"www2.totalmetabolicreset.com","domain":"totalmetabolicreset.com","tld":"com"},"ip":{"addr":"172.64.149.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"666c82637166f160b430c3a13caf3b30","sha1":"45f23499be7924955fa257ce10c2a76412e0a16c","sha256":"b5b1625932b3d2b242b95c8680756c5d79135956bb1f6fd0b9544261a9d56389","sha512":"5093d6e86bc27101dc8bd7efb9f910e2e39a949c3673c709b68793586b143764f37a7f8fae74169e0af56b0be04270ec40e5f7258cca1b66f375e4b9c644864e","ssdeep":"","tlshash":"b38000a00a820b30a08020280c28008328080e22200a300020a808aca0a083bb002020","size":29,"data":"","first_seen":"2023-03-07T23:57:52Z","last_seen":"2026-04-03T06:11:11.704056Z","times_seen":2127,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www2.totalmetabolicreset.com/tcrorderforms/?callback=tcrrouter\u0026names=video250902a_la_ap-mr_db_vsl_a15_250902","fqdn":"www2.totalmetabolicreset.com","domain":"totalmetabolicreset.com","tld":"com"},"ip":{"addr":"172.64.149.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"83c15a7e5d04adb7613af94620d9ac9d","sha1":"9a2e8e87b5caf7ea6808f09388fa1023f3a073d0","sha256":"2472dce01f7c9af3099e962cf486ac74b0ef6f3b6ccfaafe7e8b940c75517942","sha512":"6e035c7a79e069f7f77e278f8b83ecc46c2101f19b61c2873d2bdd8953a51a18a5fef40a740fed16aee6cef9de692a6eb3934c8af8b32d756af4c75732d7c220","ssdeep":"","tlshash":"70419e586b007d7ceb4996e1aebcff0e020c74eb85dc4c3e24a85f5856f497a0325693","size":1905,"data":"","first_seen":"2025-11-30T23:54:43.417441Z","last_seen":"2025-11-30T23:55:05.010462Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www3.totalmetabolicreset.com/runtime.js?ver=1764094619562","fqdn":"www3.totalmetabolicreset.com","domain":"totalmetabolicreset.com","tld":"com"},"ip":{"addr":"172.64.149.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a8579f7248d9fc8c18f18b68ddb3ab6e","sha1":"4571e33a2f178bc06f67372ec7642449584e011e","sha256":"b4a8b88ff25a4d804afe988629ee69eaa1a5954eb00c54eead074dced0bb7e89","sha512":"879add50445f1ccb02371cbb9667ee225a5683ce31b0845d73a5da44374b8747c5f15c0105755acedcb76e93bb988f4a914998ada2fa3c221bc2fee42fec3451","ssdeep":"","tlshash":"8c61a5f12b68edf267e108c55d3dc542e2156432552fece0eb0beebaa864cd14852eb1","size":3250,"data":"","first_seen":"2025-09-30T13:29:08.953385Z","last_seen":"2026-02-12T18:25:45.703661Z","times_seen":180,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www3.totalmetabolicreset.com/video250902a_la_ap?origexperimentalOrig=true\u0026step=1\u0026funnelSTPId=a0qVo00000WbjCFIAZ\u0026origuidOrig=mr_db_vsl_a15_250902\u0026origspidOrig=null\u0026step=1\u0026origdsidOrig=\u0026origmainFunnelIdOrig=a0qVo00000WbmtKIAR\u0026origExternalOrig=true\u0026origExternalIDOrig=a0qVo00000WbmtKIAR\u0026genericUrl=video250902a_la_ap-mr_db_vsl_a15_250902\u0026orignameOrig=video250902a_la_ap-mr_db_vsl_a15_250902\u0026origbrandOrig=Beverly%20Hills%20MD\u0026business_unit=a00f400000jv55aaat\u0026utm_campaign=bhmd-db-metreset-cpaeml-all--250902\u0026utm_campaign_id=701Vo00000rCqdrIAC\u0026utm_content=3rd_party_email\u0026utm_source=email\u0026subid1=8398a1215b3d43708c54a4686e489f07\u0026subid2=16\u0026subid3=catmetaresetdonut1130\u0026subid5=everflow\u0026sessionid=936099273179","fqdn":"www3.totalmetabolicreset.com","domain":"totalmetabolicreset.com","tld":"com"},"ip":{"addr":"172.64.149.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e7698504eec5d01462862fbb30a8333a","sha1":"9ba7fb5a2afce9d667a5f1f3b7e90b7cce533ebb","sha256":"4d7624c0d2923fa76af8b6a0e710c317c07dad079788d1782cb0b1500fc84cf8","sha512":"285ae6f5ebe19f4336310dae956e09a0dad7e5b152dcdd831877a96138c19800866f243cbd0ffb7d203aff15d348c249977a62ca4f72b30dc8a1a172e576f60c","ssdeep":"","tlshash":"f2f023e41392ca1ce39e15022f1ee6036274df493443f99ce641e2b06230f4f1eb94b9","size":649,"data":"","first_seen":"2023-11-07T16:28:42Z","last_seen":"2026-04-03T06:11:11.823988Z","times_seen":2485,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www3.totalmetabolicreset.com/video250902a_la_ap?origexperimentalOrig=true\u0026step=1\u0026funnelSTPId=a0qVo00000WbjCFIAZ\u0026origuidOrig=mr_db_vsl_a15_250902\u0026origspidOrig=null\u0026step=1\u0026origdsidOrig=\u0026origmainFunnelIdOrig=a0qVo00000WbmtKIAR\u0026origExternalOrig=true\u0026origExternalIDOrig=a0qVo00000WbmtKIAR\u0026genericUrl=video250902a_la_ap-mr_db_vsl_a15_250902\u0026orignameOrig=video250902a_la_ap-mr_db_vsl_a15_250902\u0026origbrandOrig=Beverly%20Hills%20MD\u0026business_unit=a00f400000jv55aaat\u0026utm_campaign=bhmd-db-metreset-cpaeml-all--250902\u0026utm_campaign_id=701Vo00000rCqdrIAC\u0026utm_content=3rd_party_email\u0026utm_source=email\u0026subid1=8398a1215b3d43708c54a4686e489f07\u0026subid2=16\u0026subid3=catmetaresetdonut1130\u0026subid5=everflow\u0026sessionid=936099273179","fqdn":"www3.totalmetabolicreset.com","domain":"totalmetabolicreset.com","tld":"com"},"ip":{"addr":"172.64.149.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"27052a404aab3892f5788ec60541a3ed","sha1":"dca1bea0185d875be22e17b46076c78599eca269","sha256":"0b0a69e82241b26958b8b12c6e2e1977419c54f788a4d9810a8ff4790341a2d9","sha512":"36631160aa6e4a5fd148e8ddd79f9026ed1561de706a137496286323407f003c5ca94eb1b88340f4eadc3f05ecde68bb487d28af8eff5326adabb48e0d9656a2","ssdeep":"","tlshash":"19e05cba0525d62453ea22c63c2be38213b24b1e204064248408ac597521f2f9f2d754","size":437,"data":"","first_seen":"2023-03-07T23:57:52Z","last_seen":"2026-03-15T10:43:41.490992Z","times_seen":534,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www2.totalmetabolicreset.com/proxy/funnel/stats/alternsave/?event=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","fqdn":"www2.totalmetabolicreset.com","domain":"totalmetabolicreset.com","tld":"com"},"ip":{"addr":"172.64.149.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"666c82637166f160b430c3a13caf3b30","sha1":"45f23499be7924955fa257ce10c2a76412e0a16c","sha256":"b5b1625932b3d2b242b95c8680756c5d79135956bb1f6fd0b9544261a9d56389","sha512":"5093d6e86bc27101dc8bd7efb9f910e2e39a949c3673c709b68793586b143764f37a7f8fae74169e0af56b0be04270ec40e5f7258cca1b66f375e4b9c644864e","ssdeep":"","tlshash":"b38000a00a820b30a08020280c28008328080e22200a300020a808aca0a083bb002020","size":29,"data":"","first_seen":"2023-03-07T23:57:52Z","last_seen":"2026-04-03T06:11:11.704056Z","times_seen":2127,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fast.vidalytics.com/embeds/DXNWe2Do/NX7sxHgNztzqfSXb/loader.min.js","fqdn":"fast.vidalytics.com","domain":"vidalytics.com","tld":"com"},"ip":{"addr":"205.234.175.175","port":443,"asn":30081,"as":"CACHENETWORKS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1ae2072572880f2dee22f46835d6ddf9","sha1":"2c18303180e9c191f36f3e29456cbc2ae4ec75db","sha256":"712cc6643d80b85ea4731dad6e9bdbf254126691fd8613aba51d9b3b1339908e","sha512":"d5bd8ed68e7ecd83e8e489aa4312c424b5697dfd1998cc04818b7919f1acfd21e0e6d1950d0338dc5ce69f50dbef0d4f67277cc16b8333b5244a9ad8e5c00046","ssdeep":"768:k9OlwI3ABb8R5uGcpCfCZAqBX+CcNl/RDdRf0Ss9vAp6+ZI6TaTVjtcdskkNZk:S8R5FcJBjYl/vRfMKnI6UVjYskk3k","tlshash":"2d5309c8b695f06143f750b6813f2607f33e6a26a448c550a523e9d47cb978ee263f39","size":65764,"data":"","first_seen":"2025-11-30T23:54:43.495888Z","last_seen":"2025-11-30T23:55:05.003408Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www3.totalmetabolicreset.com/video250902a_la_ap?origexperimentalOrig=true\u0026step=1\u0026funnelSTPId=a0qVo00000WbjCFIAZ\u0026origuidOrig=mr_db_vsl_a15_250902\u0026origspidOrig=null\u0026step=1\u0026origdsidOrig=\u0026origmainFunnelIdOrig=a0qVo00000WbmtKIAR\u0026origExternalOrig=true\u0026origExternalIDOrig=a0qVo00000WbmtKIAR\u0026genericUrl=video250902a_la_ap-mr_db_vsl_a15_250902\u0026orignameOrig=video250902a_la_ap-mr_db_vsl_a15_250902\u0026origbrandOrig=Beverly%20Hills%20MD\u0026business_unit=a00f400000jv55aaat\u0026utm_campaign=bhmd-db-metreset-cpaeml-all--250902\u0026utm_campaign_id=701Vo00000rCqdrIAC\u0026utm_content=3rd_party_email\u0026utm_source=email\u0026subid1=8398a1215b3d43708c54a4686e489f07\u0026subid2=16\u0026subid3=catmetaresetdonut1130\u0026subid5=everflow\u0026sessionid=936099273179","fqdn":"www3.totalmetabolicreset.com","domain":"totalmetabolicreset.com","tld":"com"},"ip":{"addr":"172.64.149.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4a5a010fae281f206189b15ed82e2eb1","sha1":"2fb4f91ef3b3bb3348229fa7acb44371969b7b76","sha256":"1d8506828af64c655e399caf35f7eb4fadeeb9b3ab89e521b827db9cff57cb0e","sha512":"699dc2974179fbebee7e4da15968b0181c1db393bb0dca867f8bf89b421259d3c945c378f666c7beffa470732ede790a289867aab8b6d3580950bff94e22e580","ssdeep":"","tlshash":"c0e0c0db701248b166af86f623b5a1287153250d78092822edfd89242e58687486719c","size":360,"data":"","first_seen":"2025-04-15T07:53:07.07292Z","last_seen":"2026-02-12T18:25:45.734749Z","times_seen":206,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www3.totalmetabolicreset.com/main.js?ver=1764094619562","fqdn":"www3.totalmetabolicreset.com","domain":"totalmetabolicreset.com","tld":"com"},"ip":{"addr":"172.64.149.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d55a0b2bb239612a50088e5a7259ccc9","sha1":"16c2f2042da105b8e47339aaa1a64101a5545ef1","sha256":"844c56ea377bffec5fb7b7d264cee566d80ef85fa9d8531292e753e74d8c744a","sha512":"99f5c3d27ee281075345d0466d3238f572724d21cdb897a4392c47ff54ea7eeb4f8abeed68e5d427ee6dfe7b6b9e9f5a7919048016c476963b6dfa2f45a29241","ssdeep":"49152:qVxSftky+U4jAygToDOrDJxQFFdvt9xExjJRFxhPmEUxwxnh8/xlAhs8mjx+mPLK:obmp","tlshash":"47d56c4ba2d0317a079344d93fdf3bcbf7799459a381ca34b57c885c27a2968403b7a9","size":2865933,"data":"","first_seen":"2025-11-30T23:54:43.52981Z","last_seen":"2025-11-30T23:55:05.0292Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www3.totalmetabolicreset.com/video250902a_la_ap?origexperimentalOrig=true\u0026step=1\u0026step=1\u0026funnelSTPId=a0qVo00000WbjCFIAZ\u0026origuidOrig=mr_db_vsl_a15_250902\u0026origspidOrig=null\u0026origdsidOrig=\u0026origmainFunnelIdOrig=a0qVo00000WbmtKIAR\u0026origExternalOrig=true\u0026origExternalIDOrig=a0qVo00000WbmtKIAR\u0026genericUrl=video250902a_la_ap-mr_db_vsl_a15_250902\u0026orignameOrig=video250902a_la_ap-mr_db_vsl_a15_250902\u0026origbrandOrig=Beverly%20Hills%20MD\u0026business_unit=a00f400000jv55aaat\u0026utm_campaign=bhmd-db-metreset-cpaeml-all--250902\u0026utm_campaign_id=701Vo00000rCqdrIAC\u0026utm_content=3rd_party_email\u0026utm_source=email\u0026subid1=8398a1215b3d43708c54a4686e489f07\u0026subid2=16\u0026subid3=catmetaresetdonut1130\u0026subid5=everflow\u0026sessionid=936099273179","fqdn":"www3.totalmetabolicreset.com","domain":"totalmetabolicreset.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f78c350e16efc82ede31446b54799eae","sha1":"f4ddf587d302a61dfa7f03a7a5df432741987c50","sha256":"230de92e7da2e34fafbb2d268cd4947df8946affc0becaa289bd7e947e218152","sha512":"4beabb1d1a42cf5a60af72ec9cc117c0643ee7a4fda983da27babd74d5fe41d5bd623aeb4fc7522dda8a66eedcb62dc4d12142dffb8d737df0be8eb4872ae7e8","ssdeep":"96:mlQiGpF22G++FEpaXI4DJd8FrsSCpLgMybRK1G:mlQppF22G+u0wDJdzzptSRKw","tlshash":"f681208ee4fb2575482770bc5b9f910576319007211ccb607d6e87041f8a37586abbea","size":4165,"data":"","first_seen":"2025-11-30T23:54:43.525457Z","last_seen":"2025-11-30T23:55:05.0254Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www3.totalmetabolicreset.com/5177.js","fqdn":"www3.totalmetabolicreset.com","domain":"totalmetabolicreset.com","tld":"com"},"ip":{"addr":"172.64.149.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"487a0fc7bdb1cc722889dac7cdc0e5a8","sha1":"0a9fab01b9c9fe05fbd495973c8d821dc8859eb3","sha256":"944a968ef8a1b3202b40311e85f92f81d348d44418d6173ae9965504a41bb7b3","sha512":"1730743aa9dcd0f09aadb205d6ce8e55e6ade5af7fe00ef66a9bfe7d6e76c6b97d947647f17b880c454067ce300e0626c1cbad82065e54a9075cfe4fae18b3d9","ssdeep":"384:GdhFu0PDQjPt4JKbXmGPLqdRjTLFJhSJzFbYdM:ahFpQjPHW4qdRjHFJhSJxbYdM","tlshash":"91a2d5ae325438f241cba2b5503f2807d27738e74088419cf6a2d8de5d6c989569ff7e","size":21503,"data":"","first_seen":"2025-09-30T13:29:08.918898Z","last_seen":"2026-02-12T18:25:45.705345Z","times_seen":179,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www3.totalmetabolicreset.com/8115.js","fqdn":"www3.totalmetabolicreset.com","domain":"totalmetabolicreset.com","tld":"com"},"ip":{"addr":"172.64.149.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"606aa0c351169a46cb539242b920cfe8","sha1":"bc0b70bb4929d271c96cebdab743cf337c31e0bc","sha256":"894adf3e1b95bb7ae88e131154090076383b142f18528041592a843a857ef2c0","sha512":"ca11522ebf9c37b9c9b1db762e367672d53297b10820cd2e832c6e9ed00e936b706e33712914f6d0088a4d9b54ca11404b7c75fd5d20c8e53a03393d5e4e1a1c","ssdeep":"768:6HDiiNOQSaUmjSsKNLFr/LZqz7h2DyM8Oneo91lm4QEjCs:ybTBjD0Cs","tlshash":"d3c2f90bb14511fac353a0d8bffbad44e72d7c8e75469af1f8ac8e946f4864493a3124","size":26961,"data":"","first_seen":"2025-11-30T23:54:43.434408Z","last_seen":"2025-11-30T23:55:05.024593Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www2.totalmetabolicreset.com/request-ip","fqdn":"www2.totalmetabolicreset.com","domain":"totalmetabolicreset.com","tld":"com"},"ip":{"addr":"172.64.149.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8f3cdbb688ba1ff445fe6aed6254addf","sha1":"b6028270dcd610eac5265784bc14e8d335d6ed74","sha256":"fcfdbef4c7fa2b9fca91e95c121bd9fc29e6ebe20273c86c274c5b1b7e4470f3","sha512":"727c1342a75d4614b229dd64cdcd1b7623a11985c13f2ca01cdf5821b6bfd8b7618b168451dbf8cfc4cc719dc1e70a7e03d2d57caf2c06b6aa7b2e870a8bf58c","ssdeep":"","tlshash":"26a0023611110e2fedd98159958a135363d0138ac71f15a885800b65ad28af819440a6","size":61,"data":"","first_seen":"2023-10-21T14:49:15Z","last_seen":"2026-04-03T06:11:11.706756Z","times_seen":2510,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www3.totalmetabolicreset.com/839ed82e-b0e5-41bf-8148-f8633f1c28d7","fqdn":"www3.totalmetabolicreset.com","domain":"totalmetabolicreset.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"57b71c621afd6eb75b9c5a1dcb3a0a12","sha1":"14b955c5373d1d066dd165f1a560ce1480c65d26","sha256":"1c0bcbfbd91ae24c8cd306f83b1030239a8477aa2a8ce39f36c8667a05ce7d90","sha512":"d8fb0af2e0bbd0316fdce83bd5e2963c7ce19ee0267c5d0e8f8b174e7756ae713de1d662009beb1f40af6fb565f9c33beb29d78a276af5a4f596f30d3dcebb80","ssdeep":"12288:odwdAxlY2r1hIm68AVpK0vClEUdolPWgtNdDKZjDrAek4uO71J:y3r1hIm6DVpK/lEUolPWENsZjQeJzn","tlshash":"0b354cd97395743d869365aa447b0111f33e2f11740cc09cfa7aadcb29a5a4eb237e38","size":1084255,"data":"","first_seen":"2025-10-30T04:48:59.386678Z","last_seen":"2025-12-26T16:33:23.277891Z","times_seen":466,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www2.totalmetabolicreset.com/assets/content/events.json?callback=processEvents","fqdn":"www2.totalmetabolicreset.com","domain":"totalmetabolicreset.com","tld":"com"},"ip":{"addr":"172.64.149.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"76665a314c0ba96363766b3779f88716","sha1":"55bf5700afa8cdcb914815138bdca45722872270","sha256":"a57cf3b27f85ac74cc6997a70d11a3980170b156edceba9af0d723e69e25e45b","sha512":"8fe2fe7b8f379dcc243330ade56570ecc63d8db916159ec2557746481b10f5e96b93f5b6d8ab5d4f7094f09a79f6a03dc1b15cad20908f456c40cc7e65e2a97c","ssdeep":"48:JhG3hYmBhG3hiA3hpPg3h03hg3hH3hLiQI3hjQt3hcI3hct3h4oJ7:JhqBhTvUDt","tlshash":"10914c9da4301dff0abee9b26c5a18cde06050dbe3de4d6536c9a8155c84a9cc323d6f","size":4359,"data":"","first_seen":"2024-04-08T00:55:18Z","last_seen":"2026-04-03T06:11:11.709007Z","times_seen":1683,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www2.totalmetabolicreset.com/assets/js/site.js","fqdn":"www2.totalmetabolicreset.com","domain":"totalmetabolicreset.com","tld":"com"},"ip":{"addr":"172.64.149.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9f4635fdf29cf0db99eafb181723873d","sha1":"612dcad86274feabbd11d4133b38c9a78eeb5d83","sha256":"2af6f31931ece477b66c3692d45a46c7054226b6d481bc849e7eb71680adec2c","sha512":"aaac84a49bfc9870afdd92bfa5fa20e6a1585c3be09d4e9942d962ecc6688d28954dd45ac66dd615f369210c296bada7f3ec00e2b79ab19e6c5966f422f01c7d","ssdeep":"384:baSNJGcVUbrDLTr3cS3MO9b7nPLaUnT0RXcqG6Yp9r8MV3sW31C/aOZqMA:pNAcUnTicqEb31C/WMA","tlshash":"a4d273a959f360308667717d9faf62007232a0533885cd14bc8c9f406f59e2b97b6bf8","size":29546,"data":"","first_seen":"2024-06-05T19:17:27Z","last_seen":"2026-04-03T06:11:11.705411Z","times_seen":1460,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www2.totalmetabolicreset.com/proxy/funnel/stats/alternsave/?event=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","fqdn":"www2.totalmetabolicreset.com","domain":"totalmetabolicreset.com","tld":"com"},"ip":{"addr":"172.64.149.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"666c82637166f160b430c3a13caf3b30","sha1":"45f23499be7924955fa257ce10c2a76412e0a16c","sha256":"b5b1625932b3d2b242b95c8680756c5d79135956bb1f6fd0b9544261a9d56389","sha512":"5093d6e86bc27101dc8bd7efb9f910e2e39a949c3673c709b68793586b143764f37a7f8fae74169e0af56b0be04270ec40e5f7258cca1b66f375e4b9c644864e","ssdeep":"","tlshash":"b38000a00a820b30a08020280c28008328080e22200a300020a808aca0a083bb002020","size":29,"data":"","first_seen":"2023-03-07T23:57:52Z","last_seen":"2026-04-03T06:11:11.704056Z","times_seen":2127,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www3.totalmetabolicreset.com/polyfills.js?ver=1764094619562","fqdn":"www3.totalmetabolicreset.com","domain":"totalmetabolicreset.com","tld":"com"},"ip":{"addr":"172.64.149.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"daccfaec89c4c479b73e40ed78a3dd5e","sha1":"fbea116d20287c8e95bb34084a419abffe993715","sha256":"ac38f6adea95ea8cd623b17d91321175036acebf677fe1cdde9f997ba0bd7be4","sha512":"1706b8da34e05b510adc3977ab33e81faa08db283732e943b1314341b12369c3226a2b4ae4ec43f40b647440076a9710b1807e4f9f34abbd5156b6a4416cad13","ssdeep":"768:VXT1F24GL3V61r3wg2Mby0x01sUHoHPvXV+SIM1Iih+GorlrzOI9resXPpyVdAO2:B+KzEp6tSTQ+","tlshash":"35e21ad973d1b0b687fa59f1c03b8007f63665a47c4c88d8f15c88ea3937049a5a6f2d","size":34157,"data":"","first_seen":"2024-06-17T18:20:23Z","last_seen":"2026-02-12T18:25:45.700434Z","times_seen":186,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-NHMV223","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0825874e0419bd4d2d23625fa665f080","sha1":"67f3703a4140a99f636158615256c54b0fae1337","sha256":"13067d43332086b5674b89a41b46b67ea959e3594ee794181c14c03a2198266d","sha512":"91e1d2d3a31945df6518777b8c1582f5111c0024deb3d17d492c56e071f03cb1dafc35b7292f2493f5cc3082e6e2f7c64938912e5c90475b09c326541a078386","ssdeep":"12288:qFyLwuwL4r7DWQKYrObWEpBITbm2zQEVUnJUUHrO7J:qFy0uwL4r7DWQKYrObWEpBITbm2tVMUJ","tlshash":"65e429ce7589a876c3966c64c43f494e293914b2754cac50f8ddc8e81e705ba2263fbf","size":716456,"data":"","first_seen":"2025-11-30T23:54:43.447426Z","last_seen":"2025-11-30T23:54:59.587041Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"www3.totalmetabolicreset.com/env/","fqdn":"www3.totalmetabolicreset.com","domain":"totalmetabolicreset.com","tld":"com"},"ip":{"addr":"172.64.149.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www3.totalmetabolicreset.com/video250902a_la_ap?origexperimentalOrig=true\u0026step=1\u0026funnelSTPId=a0qVo00000WbjCFIAZ\u0026origuidOrig=mr_db_vsl_a15_250902\u0026origspidOrig=null\u0026step=1\u0026origdsidOrig=\u0026origmainFunnelIdOrig=a0qVo00000WbmtKIAR\u0026origExternalOrig=true\u0026origExternalIDOrig=a0qVo00000WbmtKIAR\u0026genericUrl=video250902a_la_ap-mr_db_vsl_a15_250902\u0026orignameOrig=video250902a_la_ap-mr_db_vsl_a15_250902\u0026origbrandOrig=Beverly%20Hills%20MD\u0026business_unit=a00f400000jv55aaat\u0026utm_campaign=bhmd-db-metreset-cpaeml-all--250902\u0026utm_campaign_id=701Vo00000rCqdrIAC\u0026utm_content=3rd_party_email\u0026utm_source=email\u0026subid1=8398a1215b3d43708c54a4686e489f07\u0026subid2=16\u0026subid3=catmetaresetdonut1130\u0026subid5=everflow\u0026sessionid=936099273179","date":"2025-11-30T23:54:29.000Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"totalmetabolicreset.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 20:42:52 GMT","end":"Wed, 14 Jan 2026 21:42:41 GMT"},"fingerprint":{"sha1":"1A:08:7D:E4:80:5E:99:26:40:1D:85:3A:AE:9E:9A:65:4A:97:5E:A8","sha256":"B0:E0:A6:12:07:32:2F:E9:00:19:12:32:E5:53:D0:0B:8A:C7:FF:27:BC:F7:CE:2E:C5:E8:16:C9:14:17:A1:B0"}}},"request":{"raw":"GET /env/ HTTP/1.1\r\nHost: www3.totalmetabolicreset.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www3.totalmetabolicreset.com/video250902a_la_ap?origexperimentalOrig=true\u0026step=1\u0026funnelSTPId=a0qVo00000WbjCFIAZ\u0026origuidOrig=mr_db_vsl_a15_250902\u0026origspidOrig=null\u0026step=1\u0026origdsidOrig=\u0026origmainFunnelIdOrig=a0qVo00000WbmtKIAR\u0026origExternalOrig=true\u0026origExternalIDOrig=a0qVo00000WbmtKIAR\u0026genericUrl=video250902a_la_ap-mr_db_vsl_a15_250902\u0026orignameOrig=video250902a_la_ap-mr_db_vsl_a15_250902\u0026origbrandOrig=Beverly%20Hills%20MD\u0026business_unit=a00f400000jv55aaat\u0026utm_campaign=bhmd-db-metreset-cpaeml-all--250902\u0026utm_campaign_id=701Vo00000rCqdrIAC\u0026utm_content=3rd_party_email\u0026utm_source=email\u0026subid1=8398a1215b3d43708c54a4686e489f07\u0026subid2=16\u0026subid3=catmetaresetdonut1130\u0026subid5=everflow\u0026sessionid=936099273179\r\nCookie: __cf_bm=K2G9mXA4YmQ_g7_1sv6FlSCruMObW3tb8uvEtdWzbf0-1764546868-1.0.1.1-q1IPWCjey2Q96xjkfLC3t5cpV9UeqEw0b.AsKCi33jibqZtR7QrPr2OQsi83SC2D17y2CK3MoFrA8oEhchKp8QklGny63gvlETjllx.VLJU\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 30 Nov 2025 23:54:29 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-encoding: gzip\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\netag: W/\"9c-A833g/07kidGbtedvcEcYbuS0GI\"\r\nexpires: 0\r\npragma: no-cache\r\nvary: Accept-Encoding\r\nvia: 1.1 spaces-router (001c5eea6469)\r\nx-powered-by: Express\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 9a6e452b3ecb712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":156,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"bdf9fa04c458224a989ffd133c9f7010","sha1":"03cdf783fd3b9227466ed79dbdc11c61bb92d062","sha256":"1afc573182f24676d345c3a78d09d3f599d0b76d351eb92cacf834b7d8476f3e","sha512":"4cb8bfcb760559925333c63ce38e5ec92fac2b910140d7a0b76a1bd9a7ae9bc5cb960f46f818cd6de9ccd7a57a65832b374755b8e58e5800a5227896a60b5829","ssdeep":"","tlshash":"71c0807351c7f14d075055894638378987c9c90915d154e34540d9485c70811c56c704","first_seen":"2025-04-15T07:53:07.046805Z","last_seen":"2026-02-12T18:25:45.71737Z","times_seen":206,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fast.vidalytics.com/video/DXNWe2Do/vkFWiNdWnUZl0nEn/210618/197647__FFMPEG/stream.m3u8","fqdn":"fast.vidalytics.com","domain":"vidalytics.com","tld":"com"},"ip":{"addr":"205.234.175.175","port":443,"asn":30081,"as":"CACHENETWORKS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www3.totalmetabolicreset.com/video250902a_la_ap?origexperimentalOrig=true\u0026step=1\u0026funnelSTPId=a0qVo00000WbjCFIAZ\u0026origuidOrig=mr_db_vsl_a15_250902\u0026origspidOrig=null\u0026step=1\u0026origdsidOrig=\u0026origmainFunnelIdOrig=a0qVo00000WbmtKIAR\u0026origExternalOrig=true\u0026origExternalIDOrig=a0qVo00000WbmtKIAR\u0026genericUrl=video250902a_la_ap-mr_db_vsl_a15_250902\u0026orignameOrig=video250902a_la_ap-mr_db_vsl_a15_250902\u0026origbrandOrig=Beverly%20Hills%20MD\u0026business_unit=a00f400000jv55aaat\u0026utm_campaign=bhmd-db-metreset-cpaeml-all--250902\u0026utm_campaign_id=701Vo00000rCqdrIAC\u0026utm_content=3rd_party_email\u0026utm_source=email\u0026subid1=8398a1215b3d43708c54a4686e489f07\u0026subid2=16\u0026subid3=catmetaresetdonut1130\u0026subid5=everflow\u0026sessionid=936099273179","date":"2025-11-30T23:54:30.243Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vidalytics.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Mon, 07 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C6:52:A8:37:80:94:C0:4F:E8:20:81:85:2F:D5:64:FD:B1:DF:66:B2","sha256":"64:1D:1A:89:A4:A0:E4:28:77:CB:72:DF:AA:04:B3:59:79:65:3A:B7:95:50:B4:01:2C:BC:90:11:27:C5:80:10"}}},"request":{"raw":"GET /video/DXNWe2Do/vkFWiNdWnUZl0nEn/210618/197647__FFMPEG/stream.m3u8 HTTP/1.1\r\nHost: fast.vidalytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www3.totalmetabolicreset.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www3.totalmetabolicreset.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 30 Nov 2025 23:54:30 GMT\r\ncontent-type: application/vnd.apple.mpegurl\r\ncontent-length: 459\r\nx-cff: B\r\nx-guploader-uploadid: AOCedOHMASNzmEvLytFb8Rj_imvWC0OXZhGNUiUg1RtyLwlCoXvw6n7tlmPuxegml3-tGj4\r\ncache-control: public, max-age=31104000\r\nexpires: Mon, 26 Oct 2026 14:35:16 GMT\r\nlast-modified: Wed, 10 Sep 2025 21:39:58 GMT\r\netag: \"4085cfd6e836b03dc0da29a257bc2d1d\"\r\nx-goog-generation: 1757540398756604\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 459\r\nx-goog-hash: crc32c=RXeZCw==, md5=QIXP1ug2sD3A2imiV7wtHQ==\r\nx-goog-storage-class: STANDARD\r\naccess-control-allow-origin: *\r\nx-lb-backend: gcs-prod\r\nx-lb-cache: miss\r\nx-cf3: H\r\ncf4age: 2554371\r\nx-cf-tsc: 1764546870\r\ncf4ttl: 28549628.000\r\nx-cdn: 8\r\nx-cdn-site: c8-prod\r\naccess-control-expose-headers: Content-Type, server, x-hw, x-cdn, x-cdn-info, x-cache, x-cache-hits, x-served-by, x-goog-stored-content-length, content-length, x-lb-backend, x-lb-cache, x-cf1, x-cf2, x-cf3, x-cff\r\nx-cf2: M\r\naccept-ranges: bytes\r\nserver: CFS 1124\r\nx-cf1: 42305:fB.arn1:co:1736526511:cacheN.arn1-01:M\r\nx-cf-reqid: 5cdef43e6aba024a85d589c6788f3fcb\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"CacheFly","description":"CacheFly is a content delivery network (CDN) which offers CDN service that relies solely on IP anycast for routing, rather than DNS based global load balancing.","website":"https://www.cachefly.com","common_platform_enumeration":"","icon":"CacheFly.svg","categories":["CDN"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}],"data":{"size":459,"size_decoded":0,"mime_type":"application/vnd.apple.mpegurl","magic":"M3U playlist, ASCII text","md5":"4085cfd6e836b03dc0da29a257bc2d1d","sha1":"80fe12dfeeaa8828a9cf490b3fba19906fed01d2","sha256":"608c9dd94fdf0682ef9a31bca1aa0821d485ad258f4b2dd3fc3b1a979554a6cc","sha512":"362759627f14f18e4192a34b57fd231accb252aa05294e8606b48895d90e304646b8900af7972c8212ebc8290e6f9feb08970d9c1cc898de19b523cd1efb31c3","ssdeep":"","tlshash":"b3f0e984e22fe00f648c9ca964a972617c5934e686d4631061fe20485497da93bd7838","first_seen":"2025-11-30T23:54:43.506725Z","last_seen":"2025-11-30T23:55:04.985877Z","times_seen":3,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":37,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fast.vidalytics.com/video/DXNWe2Do/vkFWiNdWnUZl0nEn/210618/197647__FFMPEG/video_TS_h264_aac_96000_1280x720_2400000_variant.m3u8","fqdn":"fast.vidalytics.com","domain":"vidalytics.com","tld":"com"},"ip":{"addr":"205.234.175.175","port":443,"asn":30081,"as":"CACHENETWORKS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www3.totalmetabolicreset.com/video250902a_la_ap?origexperimentalOrig=true\u0026step=1\u0026funnelSTPId=a0qVo00000WbjCFIAZ\u0026origuidOrig=mr_db_vsl_a15_250902\u0026origspidOrig=null\u0026step=1\u0026origdsidOrig=\u0026origmainFunnelIdOrig=a0qVo00000WbmtKIAR\u0026origExternalOrig=true\u0026origExternalIDOrig=a0qVo00000WbmtKIAR\u0026genericUrl=video250902a_la_ap-mr_db_vsl_a15_250902\u0026orignameOrig=video250902a_la_ap-mr_db_vsl_a15_250902\u0026origbrandOrig=Beverly%20Hills%20MD\u0026business_unit=a00f400000jv55aaat\u0026utm_campaign=bhmd-db-metreset-cpaeml-all--250902\u0026utm_campaign_id=701Vo00000rCqdrIAC\u0026utm_content=3rd_party_email\u0026utm_source=email\u0026subid1=8398a1215b3d43708c54a4686e489f07\u0026subid2=16\u0026subid3=catmetaresetdonut1130\u0026subid5=everflow\u0026sessionid=936099273179","date":"2025-11-30T23:54:30.532Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vidalytics.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Mon, 07 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C6:52:A8:37:80:94:C0:4F:E8:20:81:85:2F:D5:64:FD:B1:DF:66:B2","sha256":"64:1D:1A:89:A4:A0:E4:28:77:CB:72:DF:AA:04:B3:59:79:65:3A:B7:95:50:B4:01:2C:BC:90:11:27:C5:80:10"}}},"request":{"raw":"GET /video/DXNWe2Do/vkFWiNdWnUZl0nEn/210618/197647__FFMPEG/video_TS_h264_aac_96000_1280x720_2400000_variant.m3u8 HTTP/1.1\r\nHost: fast.vidalytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www3.totalmetabolicreset.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www3.totalmetabolicreset.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 30 Nov 2025 23:54:30 GMT\r\ncontent-type: application/vnd.apple.mpegurl\r\ncontent-length: 27168\r\nx-cff: B\r\nx-guploader-uploadid: AOCedOE4XsGwSxiiDKn2gMWdlgDTniNtZ-tM7ybanWqGWKRoYpvWELJuOjtl39k4UMigdHjjn9dVm7L71i_S\r\ncache-control: public, max-age=31104000\r\nexpires: Wed, 28 Oct 2026 03:48:23 GMT\r\nlast-modified: Wed, 10 Sep 2025 21:39:54 GMT\r\netag: \"871f0f8a44624b653bde9a85fa2bb3f1\"\r\nx-goog-generation: 1757540394735923\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 27168\r\nx-goog-hash: crc32c=EFSMpw==, md5=hx8PikRiS2U73pqF+iuz8Q==\r\nx-goog-storage-class: STANDARD\r\naccess-control-allow-origin: *\r\nx-lb-backend: gcs-prod\r\nx-lb-cache: miss\r\nx-cf3: H\r\ncf4age: 771658\r\nx-cf-tsc: 1762942353\r\ncf4ttl: 30332342.000\r\nx-cdn: 8\r\nx-cdn-site: c8-prod\r\naccess-control-expose-headers: Content-Type, server, x-hw, x-cdn, x-cdn-info, x-cache, x-cache-hits, x-served-by, x-goog-stored-content-length, content-length, x-lb-backend, x-lb-cache, x-cf1, x-cf2, x-cf3, x-cff\r\nx-cf2: H\r\naccept-ranges: bytes\r\nserver: CFS 1124\r\nx-cf1: 42305:fB.arn1:co:1736526511:cacheN.arn1-01:M\r\nx-cf-reqid: f4fe5ce08cd085bee32bebfb27de2baa\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"CacheFly","description":"CacheFly is a content delivery network (CDN) which offers CDN service that relies solely on IP anycast for routing, rather than DNS based global load balancing.","website":"https://www.cachefly.com","common_platform_enumeration":"","icon":"CacheFly.svg","categories":["CDN"]}],"data":{"size":27168,"size_decoded":0,"mime_type":"application/vnd.apple.mpegurl","magic":"M3U playlist, ASCII text","md5":"871f0f8a44624b653bde9a85fa2bb3f1","sha1":"135829a38464d9effabc7c89ca6be744413cae55","sha256":"184186579e2a6912e4be3951b18453181a049fd1a0ce106d228eef6ef187de8c","sha512":"6b1f79c53f02e145b1b030b4e6da9fee6acc56af2108de66577a490c058211533f0fff8db0e3b4cf84bd7eb3966ea9a216b2200ef31cc10bf76a870dd335b510","ssdeep":"384:w7wvyp0D2to0p2DwVyvMBNIHqhs7O1Q6XYdeb/8xifbuBMnKtoD2AlC/E5GT49JN:wtfUU","tlshash":"7ec2d7acd1b93454d28e0db2bb95f1728510799faceb9b4513fb46400e6bd831e88dbc","first_seen":"2025-11-30T23:54:43.468947Z","last_seen":"2025-11-30T23:55:04.980206Z","times_seen":3,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stats.vidalytics.com/scribe","fqdn":"stats.vidalytics.com","domain":"vidalytics.com","tld":"com"},"ip":{"addr":"107.178.211.97","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www3.totalmetabolicreset.com/video250902a_la_ap?origexperimentalOrig=true\u0026step=1\u0026funnelSTPId=a0qVo00000WbjCFIAZ\u0026origuidOrig=mr_db_vsl_a15_250902\u0026origspidOrig=null\u0026step=1\u0026origdsidOrig=\u0026origmainFunnelIdOrig=a0qVo00000WbmtKIAR\u0026origExternalOrig=true\u0026origExternalIDOrig=a0qVo00000WbmtKIAR\u0026genericUrl=video250902a_la_ap-mr_db_vsl_a15_250902\u0026orignameOrig=video250902a_la_ap-mr_db_vsl_a15_250902\u0026origbrandOrig=Beverly%20Hills%20MD\u0026business_unit=a00f400000jv55aaat\u0026utm_campaign=bhmd-db-metreset-cpaeml-all--250902\u0026utm_campaign_id=701Vo00000rCqdrIAC\u0026utm_content=3rd_party_email\u0026utm_source=email\u0026subid1=8398a1215b3d43708c54a4686e489f07\u0026subid2=16\u0026subid3=catmetaresetdonut1130\u0026subid5=everflow\u0026sessionid=936099273179","date":"2025-11-30T23:54:31.334Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vidalytics.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Mon, 07 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C6:52:A8:37:80:94:C0:4F:E8:20:81:85:2F:D5:64:FD:B1:DF:66:B2","sha256":"64:1D:1A:89:A4:A0:E4:28:77:CB:72:DF:AA:04:B3:59:79:65:3A:B7:95:50:B4:01:2C:BC:90:11:27:C5:80:10"}}},"request":{"raw":"POST /scribe HTTP/1.1\r\nHost: stats.vidalytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain; charset=utf-8\r\nContent-Length: 1284\r\nOrigin: https://www3.totalmetabolicreset.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www3.totalmetabolicreset.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1284,"data":"{\"customerId\":\"DXNWe2Do\",\"videoId\":\"vkFWiNdWnUZl0nEn\",\"timestamp\":1764546871,\"timeSinceNav\":3306,\"eventIndex\":3,\"sessionId\":\"Th2wOlCwqT\",\"userId\":\"J2agbNFNeXcES95d\",\"player\":\"hls\",\"event\":\"Vidalytics.Player.EVENT_ERROR\",\"videoTime\":0,\"referer\":\"\",\"site\":\"https://www3.totalmetabolicreset.com/video250902a_la_ap?origexperimentalOrig=true\u0026step=1\u0026step=1\u0026funnelSTPId=a0qVo00000WbjCFIAZ\u0026origuidOrig=mr_db_vsl_a15_250902\u0026origspidOrig=null\u0026origdsidOrig=\u0026origmainFunnelIdOrig=a0qVo00000WbmtKIAR\u0026origExternalOrig=true\u0026origExternalIDOrig=a0qVo00000WbmtKIAR\u0026genericUrl=video250902a_la_ap-mr_db_vsl_a15_250902\u0026orignameOrig=video250902a_la_ap-mr_db_vsl_a15_250902\u0026origbrandOrig=Beverly%20Hills%20MD\u0026business_unit=a00f400000jv55aaat\u0026utm_campaign=bhmd-db-metreset-cpaeml-all--250902\u0026utm_campaign_id=701Vo00000rCqdrIAC\u0026utm_content=3rd_party_email\u0026utm_source=email\u0026subid1=8398a1215b3d43708c54a4686e489f07\u0026subid2=16\u0026subid3=catmetaresetdonut1130\u0026subid5=everflow\u0026sessionid=936099273179\",\"errorCategory\":\"mediaError\",\"errorType\":\"critical\",\"errorCode\":\"mediaError\",\"errorMessage\":\"bufferAppendError\",\"cdnProvider\":\"CacheFly\",\"performance\":{\"performanceData\":{\"cache\":1,\"info\":\"42305:fB.arn1:co:1736526511:cacheN.arn1-01:M||H||H||B\",\"cdn\":8,\"fileSize\":297448,\"statusCode\":200,\"latency\":27,\"totalTime\":47}}}"}},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-methods: POST,OPTIONS\r\ncontent-type: application/json\r\ndate: Sun, 30 Nov 2025 23:54:31 GMT\r\ncontent-length: 16\r\nx-envoy-upstream-service-time: 4\r\nserver: istio-envoy\r\naccess-control-allow-origin: https://www3.totalmetabolicreset.com\r\naccess-control-expose-headers: Access-Control-Allow-Origin,Cache-Control,Content-Length,Content-Type,ETag,If-None-Match\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":16,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"a1cbd35d4488ac8cc6f959d4c633dc37","sha1":"11844023759429ec785ae1c18e6a9c69803ee2bd","sha256":"707d4c7f44dd33e874b5a09b6dba4702b12bfd3e19e470d601fcfc1d7009286c","sha512":"1681f6f4eb56a4a46346eebdb411eedc18fe2975b9929ddb57647f50ce8b33529df03285b8ebcb747552e625b674bc140ee4b33263edcb336ab6e4caac532b3c","ssdeep":"","tlshash":"46600003000c00300cf03c00030330303f300f00000f00fc000c303000003c0c00c000","first_seen":"2023-04-05T11:33:20Z","last_seen":"2026-04-03T22:32:38.283819Z","times_seen":9629,"resource_available":false,"data":null}},"time_used":137,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":137,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fast.vidalytics.com/video/DXNWe2Do/JyyfayEvIboF99_h/img/custom-pause/Untitleddesign13-679030cfdb49c.gif","fqdn":"fast.vidalytics.com","domain":"vidalytics.com","tld":"com"},"ip":{"addr":"205.234.175.175","port":443,"asn":30081,"as":"CACHENETWORKS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www3.totalmetabolicreset.com/video250902a_la_ap?origexperimentalOrig=true\u0026step=1\u0026funnelSTPId=a0qVo00000WbjCFIAZ\u0026origuidOrig=mr_db_vsl_a15_250902\u0026origspidOrig=null\u0026step=1\u0026origdsidOrig=\u0026origmainFunnelIdOrig=a0qVo00000WbmtKIAR\u0026origExternalOrig=true\u0026origExternalIDOrig=a0qVo00000WbmtKIAR\u0026genericUrl=video250902a_la_ap-mr_db_vsl_a15_250902\u0026orignameOrig=video250902a_la_ap-mr_db_vsl_a15_250902\u0026origbrandOrig=Beverly%20Hills%20MD\u0026business_unit=a00f400000jv55aaat\u0026utm_campaign=bhmd-db-metreset-cpaeml-all--250902\u0026utm_campaign_id=701Vo00000rCqdrIAC\u0026utm_content=3rd_party_email\u0026utm_source=email\u0026subid1=8398a1215b3d43708c54a4686e489f07\u0026subid2=16\u0026subid3=catmetaresetdonut1130\u0026subid5=everflow\u0026sessionid=936099273179","date":"2025-11-30T23:54:32.636Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vidalytics.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Mon, 07 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C6:52:A8:37:80:94:C0:4F:E8:20:81:85:2F:D5:64:FD:B1:DF:66:B2","sha256":"64:1D:1A:89:A4:A0:E4:28:77:CB:72:DF:AA:04:B3:59:79:65:3A:B7:95:50:B4:01:2C:BC:90:11:27:C5:80:10"}}},"request":{"raw":"GET /video/DXNWe2Do/JyyfayEvIboF99_h/img/custom-pause/Untitleddesign13-679030cfdb49c.gif HTTP/1.1\r\nHost: fast.vidalytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www3.totalmetabolicreset.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 30 Nov 2025 23:54:32 GMT\r\ncontent-type: image/gif\r\ncontent-length: 1280900\r\nx-cff: B\r\nx-guploader-uploadid: AKDAyIticDKbtkGX7BpR6jITfr9vAqcO0vpYlFKNU7LIkXVOezxJtxIlCbUSPcZ9G6_UEK_F\r\nx-goog-generation: 1737502987724957\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 1280900\r\nx-goog-hash: crc32c=eBsQAg==, md5=LGtvYXr6ldwDjltLm5OU8Q==\r\nx-goog-storage-class: STANDARD\r\naccess-control-allow-origin: *\r\nexpires: Sun, 06 Apr 2025 12:34:12 GMT\r\ncache-control: public, max-age=300, s-maxage=2592000\r\nlast-modified: Tue, 21 Jan 2025 23:43:07 GMT\r\netag: \"2c6b6f617afa95dc038e5b4b9b9394f1\"\r\nx-lb-backend: gcs-prod\r\nx-lb-cache: hit\r\nx-cf3: H\r\ncf4age: 0\r\nx-cf-tsc: 1742134206\r\ncf4ttl: 2592000.000\r\nx-cdn: 8\r\nx-cdn-site: c8-prod\r\naccess-control-expose-headers: Content-Type, server, x-hw, x-cdn, x-cdn-info, x-cache, x-cache-hits, x-served-by, x-goog-stored-content-length, content-length, x-lb-backend, x-lb-cache, x-cf1, x-cf2, x-cf3, x-cff\r\nx-cf2: H\r\naccept-ranges: bytes\r\nserver: CFS 1124\r\nx-cf1: 42305:fB.arn1:co:1736526511:cacheN.arn1-01:M\r\nx-cf-reqid: f4e0d4bddd8e2798f1e4113a0109c04b\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CacheFly","description":"CacheFly is a content delivery network (CDN) which offers CDN service that relies solely on IP anycast for routing, rather than DNS based global load balancing.","website":"https://www.cachefly.com","common_platform_enumeration":"","icon":"CacheFly.svg","categories":["CDN"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":1280900,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1920 x 1080","md5":"bda360c5e098797136755c4fa1e03026","sha1":"520e42e0b72e1a80dc12ac8607fa87692b60cc73","sha256":"062dbec954ef072187d9da14525c7dcff050b45f33b589c367fc261f1057eedf","sha512":"2a0d0ebbacbc816979f7798639e93503c997bb282aef4d710bff82422aa0e270e0cf6f256eb83f005efa8d3e4f4e5ef00667e8511eacd2fae5ff89d1f8ff1d2b","ssdeep":"24576:1s3wqaChVs7Zx2lkAeQLVcllUR1c6/2JsJzSzy/4N:1s3wqhhVssveQml6R1nKsJui2","tlshash":"6b25338fe0b78f64481e5cfe045a65fe09a4748825c9899b3a73ffb5e7069c74814ba0","first_seen":"2025-07-29T01:12:03.776026Z","last_seen":"2026-04-03T04:07:16.025186Z","times_seen":674,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":54,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.beverlyhillsmd.com/images/Shape-logo@2x_opt.png","fqdn":"cdn.beverlyhillsmd.com","domain":"beverlyhillsmd.com","tld":"com"},"ip":{"addr":"104.18.36.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www3.totalmetabolicreset.com/video250902a_la_ap?origexperimentalOrig=true\u0026step=1\u0026funnelSTPId=a0qVo00000WbjCFIAZ\u0026origuidOrig=mr_db_vsl_a15_250902\u0026origspidOrig=null\u0026step=1\u0026origdsidOrig=\u0026origmainFunnelIdOrig=a0qVo00000WbmtKIAR\u0026origExternalOrig=true\u0026origExternalIDOrig=a0qVo00000WbmtKIAR\u0026genericUrl=video250902a_la_ap-mr_db_vsl_a15_250902\u0026orignameOrig=video250902a_la_ap-mr_db_vsl_a15_250902\u0026origbrandOrig=Beverly%20Hills%20MD\u0026business_unit=a00f400000jv55aaat\u0026utm_campaign=bhmd-db-metreset-cpaeml-all--250902\u0026utm_campaign_id=701Vo00000rCqdrIAC\u0026utm_content=3rd_party_email\u0026utm_source=email\u0026subid1=8398a1215b3d43708c54a4686e489f07\u0026subid2=16\u0026subid3=catmetaresetdonut1130\u0026subid5=everflow\u0026sessionid=936099273179","date":"2025-11-30T23:54:29.327Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"beverlyhillsmd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Nov 2025 04:02:31 GMT","end":"Thu, 12 Feb 2026 05:02:27 GMT"},"fingerprint":{"sha1":"44:DC:D2:57:95:63:FA:48:DE:C2:33:E4:0C:B9:EF:C4:C6:DF:75:5C","sha256":"81:97:E9:D9:50:B7:EB:5E:73:F1:2C:E5:5D:66:4F:CD:D0:EE:4B:D5:EC:37:72:AD:68:66:BA:86:57:33:9B:DB"}}},"request":{"raw":"GET /images/Shape-logo@2x_opt.png HTTP/1.1\r\nHost: cdn.beverlyhillsmd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www3.totalmetabolicreset.com/\r\nCookie: __cf_bm=FwLozWfSFs8VrJv83bqs_yjNpFL5niCamk1FCMrgZuU-1764546868-1.0.1.1-YrmrUZEcRmUKfEOP4payh3pddXbCgNI6qeERyMqQiY8TCMDinBt7M_rlDM3k4gXuBofQ995adBoCFqC7P3s87h.MZ8wCXVhe7u5NxgOp4Qs\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 30 Nov 2025 23:54:29 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1028\r\ncf-ray: 9a6e452d4d27568e-OSL\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=1280\r\ncontent-disposition: inline; filename=\"Shape-logo@2x_opt.webp\"\r\netag: \"33908204fcef61738b0fd664926bd71e\"\r\nlast-modified: Tue, 14 Nov 2023 18:25:50 GMT\r\nvary: Accept\r\nx-amz-id-2: w7nJqjN+E8UEX5D5l1YvRpVbzYnW+75NJvQRJXwMke31yZjOzjK6ft84YdCCN5J23tyzsgY7/5A=\r\nx-amz-request-id: 3RNEE8TRTR26DAJP\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: 6k4fjv37MtS8MzIxcgoQwXOaO0B9Xxk0\r\ncf-cache-status: HIT\r\nage: 17\r\nexpires: Mon, 01 Dec 2025 03:54:29 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1028,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"339d6e2bc2e24f8b69282e11e86de79c","sha1":"69e6c9c18015decdfcfd7eb480ca68e833ec54fe","sha256":"f61d83e5cd82b8b27cb0b7e17987117026901ba14ceda87e6ecfbfc806c5bd14","sha512":"95750286c4bd0a262b137426339723df9be33bc234c078895cca91f0f47e94c3bf9de94e480e056f7a1612bb9b26e28e36e4c02ecc124a8aee8d327612da9a7e","ssdeep":"","tlshash":"4111d816988c9f03ba643e90047c190d051bb29f2987fa64a1b5b888b83b910fc004df","first_seen":"2023-12-01T16:59:20Z","last_seen":"2026-02-12T18:25:45.721564Z","times_seen":196,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stats.vidalytics.com/scribe","fqdn":"stats.vidalytics.com","domain":"vidalytics.com","tld":"com"},"ip":{"addr":"107.178.211.97","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www3.totalmetabolicreset.com/video250902a_la_ap?origexperimentalOrig=true\u0026step=1\u0026funnelSTPId=a0qVo00000WbjCFIAZ\u0026origuidOrig=mr_db_vsl_a15_250902\u0026origspidOrig=null\u0026step=1\u0026origdsidOrig=\u0026origmainFunnelIdOrig=a0qVo00000WbmtKIAR\u0026origExternalOrig=true\u0026origExternalIDOrig=a0qVo00000WbmtKIAR\u0026genericUrl=video250902a_la_ap-mr_db_vsl_a15_250902\u0026orignameOrig=video250902a_la_ap-mr_db_vsl_a15_250902\u0026origbrandOrig=Beverly%20Hills%20MD\u0026business_unit=a00f400000jv55aaat\u0026utm_campaign=bhmd-db-metreset-cpaeml-all--250902\u0026utm_campaign_id=701Vo00000rCqdrIAC\u0026utm_content=3rd_party_email\u0026utm_source=email\u0026subid1=8398a1215b3d43708c54a4686e489f07\u0026subid2=16\u0026subid3=catmetaresetdonut1130\u0026subid5=everflow\u0026sessionid=936099273179","date":"2025-11-30T23:54:30.772Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vidalytics.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Mon, 07 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C6:52:A8:37:80:94:C0:4F:E8:20:81:85:2F:D5:64:FD:B1:DF:66:B2","sha256":"64:1D:1A:89:A4:A0:E4:28:77:CB:72:DF:AA:04:B3:59:79:65:3A:B7:95:50:B4:01:2C:BC:90:11:27:C5:80:10"}}},"request":{"raw":"POST /scribe HTTP/1.1\r\nHost: stats.vidalytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain; charset=utf-8\r\nContent-Length: 7983\r\nOrigin: https://www3.totalmetabolicreset.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www3.totalmetabolicreset.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":7983,"data":"{\"events\":[{\"customerId\":\"DXNWe2Do\",\"videoId\":\"vkFWiNdWnUZl0nEn\",\"timestamp\":1764546870,\"timeSinceNav\":2300,\"eventIndex\":1,\"sessionId\":\"Th2wOlCwqT\",\"userId\":\"J2agbNFNeXcES95d\",\"player\":\"hls\",\"event\":\"Vidalytics.Player.EVENT_INITIALIZED\",\"videoTime\":0,\"referer\":\"\",\"site\":\"https://www3.totalmetabolicreset.com/video250902a_la_ap?origexperimentalOrig=true\u0026step=1\u0026step=1\u0026funnelSTPId=a0qVo00000WbjCFIAZ\u0026origuidOrig=mr_db_vsl_a15_250902\u0026origspidOrig=null\u0026origdsidOrig=\u0026origmainFunnelIdOrig=a0qVo00000WbmtKIAR\u0026origExternalOrig=true\u0026origExternalIDOrig=a0qVo00000WbmtKIAR\u0026genericUrl=video250902a_la_ap-mr_db_vsl_a15_250902\u0026orignameOrig=video250902a_la_ap-mr_db_vsl_a15_250902\u0026origbrandOrig=Beverly%20Hills%20MD\u0026business_unit=a00f400000jv55aaat\u0026utm_campaign=bhmd-db-metreset-cpaeml-all--250902\u0026utm_campaign_id=701Vo00000rCqdrIAC\u0026utm_content=3rd_party_email\u0026utm_source=email\u0026subid1=8398a1215b3d43708c54a4686e489f07\u0026subid2=16\u0026subid3=catmetaresetdonut1130\u0026subid5=everflow\u0026sessionid=936099273179\",\"hostname\":\"fast.vidalytics.com\",\"cdnProvider\":\"CacheFly\",\"dimensions\":{\"viewport\":{\"width\":1280,\"height\":1024},\"screen\":{\"width\":1280,\"height\":1024}},\"performance\":{\"performanceData\":{\"player\":\"hls\",\"playerVersion\":\"v.5.10.5.000-vid-prod\",\"transcoder\":\"Vidalytics\",\"transcoderVersion\":\"v.5.9.2.002-prod\",\"initTime\":719,\"cache\":1,\"info\":\"42305:fB.arn1:co:1736526511:cacheN.arn1-01:M||H||H||B\",\"cdn\":8,\"fileSize\":297448,\"statusCode\":200,\"latency\":27,\"totalTime\":47}},\"videoSettings\":{\"init\":{\"elementId\":\"#vidalytics_embed_NX7sxHgNztzqfSXb\"},\"playback\":{\"autoplay\":{\"loop\":{\"enabled\":false},\"enabled\":true,\"mobile\":true,\"onlyMuted\":false},\"noPause\":false,\"onEnd\":\"pause\",\"resume\":true,\"smartPause\":false,\"skipAndRewindWithKeyboard\":true,\"smartPauseResume\":false},\"player\":{\"media\":{\"dash\":{},\"hls\":{\"source\":\"https://fast.vidalytics.com/video/DXNWe2Do/vkFWiNdWnUZl0nEn/210618/197647__FFMPEG/stream.m3u8\"},\"mp4\":{\"source\":\"https://fast.vidalytics.com/video/DXNWe2Do/vkFWiNdWnUZl0nEn/210618/197647__FFMPEG/mp4/video/480x270_h264_1000000/video.mp4\"}},\"vtt\":{\"seekingBar\":\"https://fast.vidalytics.com/video/DXNWe2Do/vkFWiNdWnUZl0nEn/210618/197647__FFMPEG/vtt/sprites.vtt\"},\"startupQuality\":\"auto\",\"lowerBandwidthUsage\":true,\"playbackRate\":1,\"aspectRatio\":\"16:9\",\"height\":1080,\"width\":1920,\"duration\":1453},\"tracking\":{\"customerId\":\"DXNWe2Do\",\"url\":\"https://stats.vidalytics.com\",\"videoId\":\"vkFWiNdWnUZl0nEn\",\"enabled\":true},\"ui\":{\"closedCaptions\":{\"default\":{\"enabled\":false,\"displayWhenMuted\":false},\"mobile\":{\"enabled\":true,\"displayWhenMuted\":false}},\"color\":{\"foreground\":\"#ffffff\",\"background\":\"#605858\",\"force\":false},\"controlBar\":{\"play\":{\"show\":true},\"rewind\":{\"show\":false},\"playbackTimer\":{\"show\":false},\"seekBar\":{\"show\":true,\"position\":\"aboveControls\",\"showToReturningViewers\":false},\"smartSeekBar\":{\"show\":true,\"desktopSpeed\":1,\"mobileSpeed\":1},\"volume\":{\"show\":true},\"qualityControl\":{\"show\":false},\"speedControl\":{\"show\":false},\"fullscreen\":{\"customFullscreen\":{\"default\":{\"enabled\":false},\"mobile\":{\"enabled\":false},\"minimizeOnPause\":true,\"expandOnPlay\":true,\"allowScroll\":false},\"show\":false},\"alwaysShow\":false,\"allowSeekNavigation\":true,\"hideOnPause\":false,\"progressLine\":{\"show\":false,\"position\":\"bottomEdge\",\"color\":\"#FDBC4D\",\"colorOpacity\":0.4,\"visibility\":\"always\"},\"accessibilityTooltips\":false},\"overlay\":{\"pause\":{},\"play\":{\"button\":{\"show\":false},\"seekButtons\":{\"show\":true}},\"redirect\":{\"color\":{\"foreground\":\"#ffffff\",\"background\":\"#4c4c4c\"},\"show\":true,\"timeout\":5,\"url\":\"\",\"text\":\"You will be redirected in %d seconds\"},\"resume\":{\"button\":{\"replay\":{\"text\":\"Start from \u003cbr\u003e Beginning?\"},\"resume\":{\"text\":\"Continue \u003cbr\u003e watching?\"}},\"color\":{\"foreground\":\"#ffffff\",\"background\":\"#873433\"},\"show\":true,\"text\":\"You've already started\u003cbr\u003ewatching this video\"},\"unmute\":{\"color\":{\"foreground\":\"#ffffff\",\"background\":\"#bb1d1a\"},\"goFullscreen\":{\"default\":{\"enabled\":false},\"mobile\":{\"enabled\":false}},\"mobile\":{\"textBottom\":{\"text\":\"Tap for Sound\"},\"textTop\":{\"text\":\"Click To Unmute\"},\"enabled\":false},\"textBottom\":{\"text\":\"\"},\"textTop\":{\"text\":\"Click To Unmute\"},\"doReplay\":true,\"type\":\"box\"},\"expire\":{\"color\":{\"foreground\":\"#ffffff\",\"background\":\"#3974ff\"},\"textTop\":{\"text\":\"This Video Has Expired\"},\"textBottom\":{\"text\":\"Click Here to Go Back\"},\"link\":{\"href\":\"\",\"blank\":false},\"enabled\":false,\"dateExpire\":\"2024-09-28T00:00:00+00:00\"},\"multiPause\":{\"jKlWA1m7qjQMEyqR\":{\"from\":null,\"to\":null,\"source\":\"https://fast.vidalytics.com/video/DXNWe2Do/JyyfayEvIboF99_h/img/custom-pause/Untitleddesign13-679030cfdb49c.gif\"}}},\"thumbnail\":{\"default\":{\"from\":0,\"to\":10,\"type\":\"image\",\"source\":\"https://fast.vidalytics.com/video/DXNWe2Do/vkFWiNdWnUZl0nEn/img/thumbnail/blob-68efde32e8b56.jpg\"},\"mobile\":{\"type\":\"image\",\"source\":\"https://fast.vidalytics.com/video/DXNWe2Do/vkFWiNdWnUZl0nEn/img/thumbnail/blob-68efde32e8b56.jpg\"},\"placeholder\":{\"source\":\"https://fast.vidalytics.com/video/DXNWe2Do/vkFWiNdWnUZl0nEn/img/preview/blob-68efde32e8b56.jpg\"},\"fullSize\":true,\"forceDefault\":false},\"shadow\":true,\"chapters\":{\"enabled\":false,\"data\":[]},\"theme\":{\"name\":\"classic\",\"style\":{\"borderRadius\":0,\"opacityLevel\":5}}},\"video\":{\"title\":\"BHMD_MB_Metabolic_Reset_Angle-FruitsCinnamon_16x9_VSL_Funnel-a0qVo00000WagEPIAZ |  REPLACED 10 16 2025\",\"publicTitle\":\"\",\"description\":\"\",\"isAiContent\":false,\"dateCreated\":\"2025-09-10T21:24:06+00:00\",\"datePublished\":\"2025-10-29T22:55:16+00:00\"},\"subscription\":{\"plan\":{\"tier\":\"enterprise\"}},\"globalSettings\":{\"playGate\":false,\"playGateValidationEnabled\":false,\"passUrlParamsFromAllPages\":false},\"vid\":{\"conditions\":{\"state\":false}},\"transcoder\":\"Vidalytics\",\"playerVersion\":\"v.5.10.5.000-vid-prod\",\"transcoderVersion\":\"v.5.9.2.002-prod\",\"transcoderFlags\":\"3secseg-moreq-hlsmuxed-avconly-cpuenc-no1080p\",\"transcoderSingleResolutionManifests\":[{\"resolution\":\"360p\",\"manifest\":\"270x480.m3u8\"}],\"licenseStatus\":{\"code\":\"OK\",\"allowedDomains\":null,\"message\":\"OK\"}}},{\"customerId\":\"DXNWe2Do\",\"videoId\":\"vkFWiNdWnUZl0nEn\",\"timestamp\":1764546870,\"timeSinceNav\":2341,\"eventIndex\":1,\"sessionId\":\"Th2wOlCwqT\",\"userId\":\"J2agbNFNeXcES95d\",\"player\":\"hls\",\"event\":\"Vidalytics.Player.EVENT_PLAY\",\"videoTime\":0,\"referer\":\"\",\"site\":\"https://www3.totalmetabolicreset.com/video250902a_la_ap?origexperimentalOrig=true\u0026step=1\u0026step=1\u0026funnelSTPId=a0qVo00000WbjCFIAZ\u0026origuidOrig=mr_db_vsl_a15_250902\u0026origspidOrig=null\u0026origdsidOrig=\u0026origmainFunnelIdOrig=a0qVo00000WbmtKIAR\u0026origExternalOrig=true\u0026origExternalIDOrig=a0qVo00000WbmtKIAR\u0026genericUrl=video250902a_la_ap-mr_db_vsl_a15_250902\u0026orignameOrig=video250902a_la_ap-mr_db_vsl_a15_250902\u0026origbrandOrig=Beverly%20Hills%20MD\u0026business_unit=a00f400000jv55aaat\u0026utm_campaign=bhmd-db-metreset-cpaeml-all--250902\u0026utm_campaign_id=701Vo00000rCqdrIAC\u0026utm_content=3rd_party_email\u0026utm_source=email\u0026subid1=8398a1215b3d43708c54a4686e489f07\u0026subid2=16\u0026subid3=catmetaresetdonut1130\u0026subid5=everflow\u0026sessionid=936099273179\",\"cdnProvider\":\"CacheFly\",\"isFirstPlay\":true},{\"customerId\":\"DXNWe2Do\",\"videoId\":\"vkFWiNdWnUZl0nEn\",\"timestamp\":1764546870,\"timeSinceNav\":2549,\"eventIndex\":1,\"sessionId\":\"Th2wOlCwqT\",\"userId\":\"J2agbNFNeXcES95d\",\"player\":\"hls\",\"event\":\"Vidalytics.Player.EVENT_PLAYBACK_STARTED\",\"videoTime\":0,\"referer\":\"\",\"site\":\"https://www3.totalmetabolicreset.com/video250902a_la_ap?origexperimentalOrig=true\u0026step=1\u0026step=1\u0026funnelSTPId=a0qVo00000WbjCFIAZ\u0026origuidOrig=mr_db_vsl_a15_250902\u0026origspidOrig=null\u0026origdsidOrig=\u0026origmainFunnelIdOrig=a0qVo00000WbmtKIAR\u0026origExternalOrig=true\u0026origExternalIDOrig=a0qVo00000WbmtKIAR\u0026genericUrl=video250902a_la_ap-mr_db_vsl_a15_250902\u0026orignameOrig=video250902a_la_ap-mr_db_vsl_a15_250902\u0026origbrandOrig=Beverly%20Hills%20MD\u0026business_unit=a00f400000jv55aaat\u0026utm_campaign=bhmd-db-metreset-cpaeml-all--250902\u0026utm_campaign_id=701Vo00000rCqdrIAC\u0026utm_content=3rd_party_email\u0026utm_source=email\u0026subid1=8398a1215b3d43708c54a4686e489f07\u0026subid2=16\u0026subid3=catmetaresetdonut1130\u0026subid5=everflow\u0026sessionid=936099273179\",\"cdnProvider\":\"CacheFly\",\"isFirstPlay\":true,\"timeSinceTriggered\":247,\"triggeredBy\":\"SmartAutoPlay:auto\"}]}"}},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-methods: POST,OPTIONS\r\ncontent-type: application/json\r\ndate: Sun, 30 Nov 2025 23:54:30 GMT\r\ncontent-length: 16\r\nx-envoy-upstream-service-time: 3\r\nserver: istio-envoy\r\naccess-control-allow-origin: https://www3.totalmetabolicreset.com\r\naccess-control-expose-headers: Access-Control-Allow-Origin,Cache-Control,Content-Length,Content-Type,ETag,If-None-Match\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":16,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"a1cbd35d4488ac8cc6f959d4c633dc37","sha1":"11844023759429ec785ae1c18e6a9c69803ee2bd","sha256":"707d4c7f44dd33e874b5a09b6dba4702b12bfd3e19e470d601fcfc1d7009286c","sha512":"1681f6f4eb56a4a46346eebdb411eedc18fe2975b9929ddb57647f50ce8b33529df03285b8ebcb747552e625b674bc140ee4b33263edcb336ab6e4caac532b3c","ssdeep":"","tlshash":"46600003000c00300cf03c00030330303f300f00000f00fc000c303000003c0c00c000","first_seen":"2023-04-05T11:33:20Z","last_seen":"2026-04-03T22:32:38.283819Z","times_seen":9629,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":136,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www3.totalmetabolicreset.com/main.js?ver=1764094619562","fqdn":"www3.totalmetabolicreset.com","domain":"totalmetabolicreset.com","tld":"com"},"ip":{"addr":"172.64.149.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www3.totalmetabolicreset.com/video250902a_la_ap?origexperimentalOrig=true\u0026step=1\u0026funnelSTPId=a0qVo00000WbjCFIAZ\u0026origuidOrig=mr_db_vsl_a15_250902\u0026origspidOrig=null\u0026step=1\u0026origdsidOrig=\u0026origmainFunnelIdOrig=a0qVo00000WbmtKIAR\u0026origExternalOrig=true\u0026origExternalIDOrig=a0qVo00000WbmtKIAR\u0026genericUrl=video250902a_la_ap-mr_db_vsl_a15_250902\u0026orignameOrig=video250902a_la_ap-mr_db_vsl_a15_250902\u0026origbrandOrig=Beverly%20Hills%20MD\u0026business_unit=a00f400000jv55aaat\u0026utm_campaign=bhmd-db-metreset-cpaeml-all--250902\u0026utm_campaign_id=701Vo00000rCqdrIAC\u0026utm_content=3rd_party_email\u0026utm_source=email\u0026subid1=8398a1215b3d43708c54a4686e489f07\u0026subid2=16\u0026subid3=catmetaresetdonut1130\u0026subid5=everflow\u0026sessionid=936099273179","date":"2025-11-30T23:54:28.357Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"totalmetabolicreset.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 20:42:52 GMT","end":"Wed, 14 Jan 2026 21:42:41 GMT"},"fingerprint":{"sha1":"1A:08:7D:E4:80:5E:99:26:40:1D:85:3A:AE:9E:9A:65:4A:97:5E:A8","sha256":"B0:E0:A6:12:07:32:2F:E9:00:19:12:32:E5:53:D0:0B:8A:C7:FF:27:BC:F7:CE:2E:C5:E8:16:C9:14:17:A1:B0"}}},"request":{"raw":"GET /main.js?ver=1764094619562 HTTP/1.1\r\nHost: www3.totalmetabolicreset.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www3.totalmetabolicreset.com/video250902a_la_ap?origexperimentalOrig=true\u0026step=1\u0026funnelSTPId=a0qVo00000WbjCFIAZ\u0026origuidOrig=mr_db_vsl_a15_250902\u0026origspidOrig=null\u0026step=1\u0026origdsidOrig=\u0026origmainFunnelIdOrig=a0qVo00000WbmtKIAR\u0026origExternalOrig=true\u0026origExternalIDOrig=a0qVo00000WbmtKIAR\u0026genericUrl=video250902a_la_ap-mr_db_vsl_a15_250902\u0026orignameOrig=video250902a_la_ap-mr_db_vsl_a15_250902\u0026origbrandOrig=Beverly%20Hills%20MD\u0026business_unit=a00f400000jv55aaat\u0026utm_campaign=bhmd-db-metreset-cpaeml-all--250902\u0026utm_campaign_id=701Vo00000rCqdrIAC\u0026utm_content=3rd_party_email\u0026utm_source=email\u0026subid1=8398a1215b3d43708c54a4686e489f07\u0026subid2=16\u0026subid3=catmetaresetdonut1130\u0026subid5=everflow\u0026sessionid=936099273179\r\nCookie: __cf_bm=K2G9mXA4YmQ_g7_1sv6FlSCruMObW3tb8uvEtdWzbf0-1764546868-1.0.1.1-q1IPWCjey2Q96xjkfLC3t5cpV9UeqEw0b.AsKCi33jibqZtR7QrPr2OQsi83SC2D17y2CK3MoFrA8oEhchKp8QklGny63gvlETjllx.VLJU\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 30 Nov 2025 23:54:28 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-encoding: gzip\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\netag: W/\"2bbb0d-19abc3b8280\"\r\nexpires: 0\r\nlast-modified: Tue, 25 Nov 2025 18:16:48 GMT\r\npragma: no-cache\r\nvary: Accept-Encoding\r\nvia: 1.1 spaces-router (001c5eea6469)\r\nx-powered-by: Express\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 9a6e45272d02712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":2865933,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"625fbd0638605ddf163df152706803f8","sha1":"ac0e8782fd23f5ff8a7a054417c5f724286fde39","sha256":"3a9a06d529c6ea1335d5e1da733ea64a0f19d76beb93ca10d9076da2a43e4a4e","sha512":"329d93703b23fced318025cd7a35c43f5cea287946cc8fb3374fcf28bcab831cb8d824b5c5f543d887984f6ed50ed8a1d5d11109ac03094f6a73cd5ccd23ec1c","ssdeep":"24576:qVxSftky+U4jAygToDOrDJxQFFdvt9xExjJRFxhPmEUxwxnh8/xlAhs8mjx+mPLQ:qVxSftky+U4jAygToDOrDJxQFFdvt9xE","tlshash":"68254c0b62d425bb17d354d93ecf2acbfb7a90696381ca34f57c840d27a2a74403b7a5","first_seen":"2025-11-30T23:54:43.44922Z","last_seen":"2025-11-30T23:55:04.988501Z","times_seen":3,"resource_available":false,"data":null}},"time_used":223,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":166,"receive":57,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.beverlyhillsmd.com/fonts/LibreFranklin-Bold.ttf","fqdn":"cdn.beverlyhillsmd.com","domain":"beverlyhillsmd.com","tld":"com"},"ip":{"addr":"104.18.36.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www3.totalmetabolicreset.com/video250902a_la_ap?origexperimentalOrig=true\u0026step=1\u0026funnelSTPId=a0qVo00000WbjCFIAZ\u0026origuidOrig=mr_db_vsl_a15_250902\u0026origspidOrig=null\u0026step=1\u0026origdsidOrig=\u0026origmainFunnelIdOrig=a0qVo00000WbmtKIAR\u0026origExternalOrig=true\u0026origExternalIDOrig=a0qVo00000WbmtKIAR\u0026genericUrl=video250902a_la_ap-mr_db_vsl_a15_250902\u0026orignameOrig=video250902a_la_ap-mr_db_vsl_a15_250902\u0026origbrandOrig=Beverly%20Hills%20MD\u0026business_unit=a00f400000jv55aaat\u0026utm_campaign=bhmd-db-metreset-cpaeml-all--250902\u0026utm_campaign_id=701Vo00000rCqdrIAC\u0026utm_content=3rd_party_email\u0026utm_source=email\u0026subid1=8398a1215b3d43708c54a4686e489f07\u0026subid2=16\u0026subid3=catmetaresetdonut1130\u0026subid5=everflow\u0026sessionid=936099273179","date":"2025-11-30T23:54:29.400Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"beverlyhillsmd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Nov 2025 04:02:31 GMT","end":"Thu, 12 Feb 2026 05:02:27 GMT"},"fingerprint":{"sha1":"44:DC:D2:57:95:63:FA:48:DE:C2:33:E4:0C:B9:EF:C4:C6:DF:75:5C","sha256":"81:97:E9:D9:50:B7:EB:5E:73:F1:2C:E5:5D:66:4F:CD:D0:EE:4B:D5:EC:37:72:AD:68:66:BA:86:57:33:9B:DB"}}},"request":{"raw":"GET /fonts/LibreFranklin-Bold.ttf HTTP/1.1\r\nHost: cdn.beverlyhillsmd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www3.totalmetabolicreset.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www3.totalmetabolicreset.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 30 Nov 2025 23:54:29 GMT\r\ncontent-type: binary/octet-stream\r\ncontent-length: 63444\r\ncf-ray: 9a6e452d7d46568e-OSL\r\nx-amz-id-2: tx64IaKMQHCU0YG1A0JmNmBK6XpPBKVG60zKG8uRQgL8edCxfM4tCJctAfELdmF61nP7febUQvoOLry8rFcGYA==\r\nx-amz-request-id: 3VTGE8M6F3TCPR1W\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding\r\nlast-modified: Wed, 23 Aug 2023 19:01:19 GMT\r\netag: \"7fc937a2d0fba610ccef5b11596f6731\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: null\r\ncf-cache-status: HIT\r\nage: 16\r\nexpires: Mon, 01 Dec 2025 03:54:29 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nset-cookie: __cf_bm=RIjpYyjd12diKH8WFZL9zZL0HzD5qbC67cKsdHRoXCA-1764546869-1.0.1.1-UdpIreDKFods5PS3X9b8OO1dyPQmZTqYDk6SHc8SGriO6GkAg1ojVLbNgVLuuKLe2mk0ssah3wfM2.N6QSqz0pApoGJlmErLmQdostUxFgo; path=/; expires=Mon, 01-Dec-25 00:24:29 GMT; domain=.beverlyhillsmd.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":63444,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"TrueType Font data, 16 tables, 1st \"GDEF\", 20 names, Microsoft, language 0x409, Copyright 2020 The LibreFranklin Project Authors (https://github.com/impallari/Libre-Franklin)Li","md5":"7fc937a2d0fba610ccef5b11596f6731","sha1":"05cb93c42dfcb1024d26b5ebaec8a2711baaaa2b","sha256":"6085a4848518986958c018068a264b8a2899ea2d7b7cbbb05950dcca7489fbc0","sha512":"9bcf0e41221347e2fe14425c0e6779c28c8c827f0cfe1da56f6db84de79033a615ab1ea264fe35c86e545a8fa850615e619873a96ffa1b62724e38d963d6ff2b","ssdeep":"1536:/OvvXic97arO3rMsYVOlgKPiubFhK3wlEJKcG:6PicgklgKPzbFs3wlRV","tlshash":"ce533b06b2955ffbd526babcd4d0d3a0a762bc32bda9871ff1426e61f49b450cc0170a","first_seen":"2023-06-26T18:43:32Z","last_seen":"2026-04-01T12:49:19.627137Z","times_seen":188,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fast.vidalytics.com/video/DXNWe2Do/vkFWiNdWnUZl0nEn/img/preview/blob-68efde32e8b56.jpg","fqdn":"fast.vidalytics.com","domain":"vidalytics.com","tld":"com"},"ip":{"addr":"205.234.175.175","port":443,"asn":30081,"as":"CACHENETWORKS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www3.totalmetabolicreset.com/video250902a_la_ap?origexperimentalOrig=true\u0026step=1\u0026funnelSTPId=a0qVo00000WbjCFIAZ\u0026origuidOrig=mr_db_vsl_a15_250902\u0026origspidOrig=null\u0026step=1\u0026origdsidOrig=\u0026origmainFunnelIdOrig=a0qVo00000WbmtKIAR\u0026origExternalOrig=true\u0026origExternalIDOrig=a0qVo00000WbmtKIAR\u0026genericUrl=video250902a_la_ap-mr_db_vsl_a15_250902\u0026orignameOrig=video250902a_la_ap-mr_db_vsl_a15_250902\u0026origbrandOrig=Beverly%20Hills%20MD\u0026business_unit=a00f400000jv55aaat\u0026utm_campaign=bhmd-db-metreset-cpaeml-all--250902\u0026utm_campaign_id=701Vo00000rCqdrIAC\u0026utm_content=3rd_party_email\u0026utm_source=email\u0026subid1=8398a1215b3d43708c54a4686e489f07\u0026subid2=16\u0026subid3=catmetaresetdonut1130\u0026subid5=everflow\u0026sessionid=936099273179","date":"2025-11-30T23:54:29.614Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vidalytics.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Mon, 07 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C6:52:A8:37:80:94:C0:4F:E8:20:81:85:2F:D5:64:FD:B1:DF:66:B2","sha256":"64:1D:1A:89:A4:A0:E4:28:77:CB:72:DF:AA:04:B3:59:79:65:3A:B7:95:50:B4:01:2C:BC:90:11:27:C5:80:10"}}},"request":{"raw":"GET /video/DXNWe2Do/vkFWiNdWnUZl0nEn/img/preview/blob-68efde32e8b56.jpg HTTP/1.1\r\nHost: fast.vidalytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www3.totalmetabolicreset.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 30 Nov 2025 23:54:29 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 3863\r\nx-cff: B\r\nx-guploader-uploadid: AOCedOF7ZBpxr-d0MsJqTHaMq2RYS-kJKpwKdKw_jPTxO-nLy-B_Wkb0BGYsJf4JKWlvMN2m\r\ncache-control: public, max-age=300, s-maxage=2592000\r\nexpires: Mon, 01 Dec 2025 10:21:33 GMT\r\nlast-modified: Wed, 15 Oct 2025 17:47:31 GMT\r\netag: \"05ae8ced1e672c14c95061e75ad26a53\"\r\nx-goog-generation: 1760550451513862\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 3863\r\nx-goog-hash: crc32c=biTvBA==, md5=Ba6M7R5nLBTJUGHnWtJqUw==\r\nx-goog-storage-class: STANDARD\r\naccess-control-allow-origin: *\r\nx-lb-backend: gcs-prod\r\nx-lb-cache: miss\r\nx-cf3: H\r\ncf4age: 0\r\nx-cf-tsc: 1762455214\r\ncf4ttl: 2592000.000\r\nx-cdn: 8\r\nx-cdn-site: c8-prod\r\naccess-control-expose-headers: Content-Type, server, x-hw, x-cdn, x-cdn-info, x-cache, x-cache-hits, x-served-by, x-goog-stored-content-length, content-length, x-lb-backend, x-lb-cache, x-cf1, x-cf2, x-cf3, x-cff\r\nx-cf2: H\r\naccept-ranges: bytes\r\nserver: CFS 1124\r\nx-cf1: 42305:fB.arn1:co:1736526511:cacheN.arn1-01:M\r\nx-cf-reqid: 2a766e3753428994179c0bc3c036856a\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"CacheFly","description":"CacheFly is a content delivery network (CDN) which offers CDN service that relies solely on IP anycast for routing, rather than DNS based global load balancing.","website":"https://www.cachefly.com","common_platform_enumeration":"","icon":"CacheFly.svg","categories":["CDN"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}],"data":{"size":3863,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 60\", baseline, precision 8, 150x84, components 3","md5":"05ae8ced1e672c14c95061e75ad26a53","sha1":"36e678f59a20a49b98e8f2ba1725211347abb600","sha256":"3711fbb4a897d263a7a648e55234d660a4c9f166161c902adae14215a41db72b","sha512":"f79f4dc03992d76e351846ec91a7a82d2923f86fd7a2219e5a66c3b8ba1a4d0c37b11446829668cfb028e668961bed58003d84c2cde461b42500a28a37d43ed4","ssdeep":"","tlshash":"67815c2e6f2305409952cd76cf4a4db830d04355b4bcbb8d0d9563e282d7eee808ee5c","first_seen":"2025-11-30T23:54:43.427436Z","last_seen":"2025-11-30T23:55:04.99321Z","times_seen":3,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www3.totalmetabolicreset.com/5177.js","fqdn":"www3.totalmetabolicreset.com","domain":"totalmetabolicreset.com","tld":"com"},"ip":{"addr":"172.64.149.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www3.totalmetabolicreset.com/video250902a_la_ap?origexperimentalOrig=true\u0026step=1\u0026funnelSTPId=a0qVo00000WbjCFIAZ\u0026origuidOrig=mr_db_vsl_a15_250902\u0026origspidOrig=null\u0026step=1\u0026origdsidOrig=\u0026origmainFunnelIdOrig=a0qVo00000WbmtKIAR\u0026origExternalOrig=true\u0026origExternalIDOrig=a0qVo00000WbmtKIAR\u0026genericUrl=video250902a_la_ap-mr_db_vsl_a15_250902\u0026orignameOrig=video250902a_la_ap-mr_db_vsl_a15_250902\u0026origbrandOrig=Beverly%20Hills%20MD\u0026business_unit=a00f400000jv55aaat\u0026utm_campaign=bhmd-db-metreset-cpaeml-all--250902\u0026utm_campaign_id=701Vo00000rCqdrIAC\u0026utm_content=3rd_party_email\u0026utm_source=email\u0026subid1=8398a1215b3d43708c54a4686e489f07\u0026subid2=16\u0026subid3=catmetaresetdonut1130\u0026subid5=everflow\u0026sessionid=936099273179","date":"2025-11-30T23:54:29.047Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"totalmetabolicreset.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 20:42:52 GMT","end":"Wed, 14 Jan 2026 21:42:41 GMT"},"fingerprint":{"sha1":"1A:08:7D:E4:80:5E:99:26:40:1D:85:3A:AE:9E:9A:65:4A:97:5E:A8","sha256":"B0:E0:A6:12:07:32:2F:E9:00:19:12:32:E5:53:D0:0B:8A:C7:FF:27:BC:F7:CE:2E:C5:E8:16:C9:14:17:A1:B0"}}},"request":{"raw":"GET /5177.js HTTP/1.1\r\nHost: www3.totalmetabolicreset.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www3.totalmetabolicreset.com/video250902a_la_ap?origexperimentalOrig=true\u0026step=1\u0026funnelSTPId=a0qVo00000WbjCFIAZ\u0026origuidOrig=mr_db_vsl_a15_250902\u0026origspidOrig=null\u0026step=1\u0026origdsidOrig=\u0026origmainFunnelIdOrig=a0qVo00000WbmtKIAR\u0026origExternalOrig=true\u0026origExternalIDOrig=a0qVo00000WbmtKIAR\u0026genericUrl=video250902a_la_ap-mr_db_vsl_a15_250902\u0026orignameOrig=video250902a_la_ap-mr_db_vsl_a15_250902\u0026origbrandOrig=Beverly%20Hills%20MD\u0026business_unit=a00f400000jv55aaat\u0026utm_campaign=bhmd-db-metreset-cpaeml-all--250902\u0026utm_campaign_id=701Vo00000rCqdrIAC\u0026utm_content=3rd_party_email\u0026utm_source=email\u0026subid1=8398a1215b3d43708c54a4686e489f07\u0026subid2=16\u0026subid3=catmetaresetdonut1130\u0026subid5=everflow\u0026sessionid=936099273179\r\nCookie: __cf_bm=K2G9mXA4YmQ_g7_1sv6FlSCruMObW3tb8uvEtdWzbf0-1764546868-1.0.1.1-q1IPWCjey2Q96xjkfLC3t5cpV9UeqEw0b.AsKCi33jibqZtR7QrPr2OQsi83SC2D17y2CK3MoFrA8oEhchKp8QklGny63gvlETjllx.VLJU\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 30 Nov 2025 23:54:29 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-encoding: gzip\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\netag: W/\"53ff-19abc3b8280\"\r\nexpires: 0\r\nlast-modified: Tue, 25 Nov 2025 18:16:48 GMT\r\npragma: no-cache\r\nvary: Accept-Encoding\r\nvia: 1.1 spaces-router (001c5eea6469)\r\nx-powered-by: Express\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 9a6e452b8f02712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":21503,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (21503), with no line terminators","md5":"487a0fc7bdb1cc722889dac7cdc0e5a8","sha1":"0a9fab01b9c9fe05fbd495973c8d821dc8859eb3","sha256":"944a968ef8a1b3202b40311e85f92f81d348d44418d6173ae9965504a41bb7b3","sha512":"1730743aa9dcd0f09aadb205d6ce8e55e6ade5af7fe00ef66a9bfe7d6e76c6b97d947647f17b880c454067ce300e0626c1cbad82065e54a9075cfe4fae18b3d9","ssdeep":"384:GdhFu0PDQjPt4JKbXmGPLqdRjTLFJhSJzFbYdM:ahFpQjPHW4qdRjHFJhSJxbYdM","tlshash":"91a2d5ae325438f241cba2b5503f2807d27738e74088419cf6a2d8de5d6c989569ff7e","first_seen":"2025-09-30T13:29:08.918898Z","last_seen":"2026-02-12T18:25:45.705345Z","times_seen":179,"resource_available":true,"data":null}},"time_used":149,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":146,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.activatedyou.com/fonts/Roboto-Regular.ttf","fqdn":"cdn.activatedyou.com","domain":"activatedyou.com","tld":"com"},"ip":{"addr":"172.64.144.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www3.totalmetabolicreset.com/video250902a_la_ap?origexperimentalOrig=true\u0026step=1\u0026funnelSTPId=a0qVo00000WbjCFIAZ\u0026origuidOrig=mr_db_vsl_a15_250902\u0026origspidOrig=null\u0026step=1\u0026origdsidOrig=\u0026origmainFunnelIdOrig=a0qVo00000WbmtKIAR\u0026origExternalOrig=true\u0026origExternalIDOrig=a0qVo00000WbmtKIAR\u0026genericUrl=video250902a_la_ap-mr_db_vsl_a15_250902\u0026orignameOrig=video250902a_la_ap-mr_db_vsl_a15_250902\u0026origbrandOrig=Beverly%20Hills%20MD\u0026business_unit=a00f400000jv55aaat\u0026utm_campaign=bhmd-db-metreset-cpaeml-all--250902\u0026utm_campaign_id=701Vo00000rCqdrIAC\u0026utm_content=3rd_party_email\u0026utm_source=email\u0026subid1=8398a1215b3d43708c54a4686e489f07\u0026subid2=16\u0026subid3=catmetaresetdonut1130\u0026subid5=everflow\u0026sessionid=936099273179","date":"2025-11-30T23:54:29.445Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"activatedyou.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Nov 2025 16:40:27 GMT","end":"Thu, 12 Feb 2026 17:40:24 GMT"},"fingerprint":{"sha1":"02:D7:F5:6C:29:FB:77:C9:BB:C4:EA:C3:69:CE:AD:25:D9:30:1E:AE","sha256":"9B:19:E1:DA:1A:AD:E9:0A:48:FD:0E:33:F6:A2:89:80:F3:2B:EE:57:F5:67:68:A1:61:D3:BD:70:6A:96:5F:B7"}}},"request":{"raw":"GET /fonts/Roboto-Regular.ttf HTTP/1.1\r\nHost: cdn.activatedyou.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www3.totalmetabolicreset.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www3.totalmetabolicreset.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 30 Nov 2025 23:54:29 GMT\r\ncontent-type: font/ttf\r\ncontent-encoding: br\r\nx-amz-id-2: JSlkHwAsaODWWXJzpZgt/nSy/t/GVgxh6lb4VWNnoYXCnh6gRePQqbIQ0RRzkUS9h8cdTI4FrPBa3R8c2OwyT5jxar+K1lrSBT2trqUlTrQ=\r\nx-amz-request-id: MKGFK5MT646AMF92\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 3000\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding\r\nlast-modified: Thu, 24 Aug 2023 19:27:38 GMT\r\netag: W/\"8a36205bd9b83e03af0591a004bc97f4\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: null\r\ncf-cache-status: HIT\r\nage: 17\r\nexpires: Mon, 01 Dec 2025 03:54:29 GMT\r\ncache-control: public, max-age=14400\r\nset-cookie: __cf_bm=kjIWlqhjGINu7_ishe.6vp9jSwoV1acUzchVxvLtDx8-1764546869-1.0.1.1-vx6aZnX3I.P1sDWLESzMBYMk2NABC0y4n.v.JKxZjhNQ4AZvfAB03cITL.td0TZ1HoAHKS7TddGS.hnnIAtCHFTOdplPyYmsQL7iA5Q2VUU; path=/; expires=Mon, 01-Dec-25 00:24:29 GMT; domain=.activatedyou.com; HttpOnly; Secure; SameSite=None\r\nstrict-transport-security: max-age=0\r\nserver: cloudflare\r\ncf-ray: 9a6e452e1d845689-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":168260,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 18 tables, 1st \"GDEF\", 13 names, Microsoft, language 0x409, Copyright 2011 Google Inc. All Rights Reserved.RobotoRegularVersion 2.137; 2017Roboto-RegularRob","md5":"8a36205bd9b83e03af0591a004bc97f4","sha1":"56c5c0d38bde4c1f1549dda43db37b09c608aad3","sha256":"4e147ab64b9fdf6d89d01f6b8c3ca0b3cddc59d608a8e2218f9a2504b5c98e14","sha512":"e96b43b0ca3fd7775d75a702f44cd1b0dfd325e1db317f7cba84efdf572571fe7594068f9132a937251aab8bd1f68783213677d4953aca197195fbe5db1f90d7","ssdeep":"3072:5y2goL/sAQRuzzlPrvRwhRFUzMWlYfxJVBxV+aYT3qPXI0yH4yDuNOIOU7og2NE/:xOmCeu+bqPeHr0WUMxNE/","tlshash":"83f3d601d642aa19c6d6b2787c7cb3be4c75e82dfd4a602734e5af2115c8c05ec69bbc","first_seen":"2023-04-07T15:31:36Z","last_seen":"2026-04-03T22:43:51.065573Z","times_seen":4536,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":14,"dns":1,"connect":1,"send":0,"wait":23,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fast.vidalytics.com/video/DXNWe2Do/vkFWiNdWnUZl0nEn/210618/197647__FFMPEG/video_TS_h264_aac_96000_640x360_900000_variant.m3u8","fqdn":"fast.vidalytics.com","domain":"vidalytics.com","tld":"com"},"ip":{"addr":"205.234.175.175","port":443,"asn":30081,"as":"CACHENETWORKS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www3.totalmetabolicreset.com/video250902a_la_ap?origexperimentalOrig=true\u0026step=1\u0026funnelSTPId=a0qVo00000WbjCFIAZ\u0026origuidOrig=mr_db_vsl_a15_250902\u0026origspidOrig=null\u0026step=1\u0026origdsidOrig=\u0026origmainFunnelIdOrig=a0qVo00000WbmtKIAR\u0026origExternalOrig=true\u0026origExternalIDOrig=a0qVo00000WbmtKIAR\u0026genericUrl=video250902a_la_ap-mr_db_vsl_a15_250902\u0026orignameOrig=video250902a_la_ap-mr_db_vsl_a15_250902\u0026origbrandOrig=Beverly%20Hills%20MD\u0026business_unit=a00f400000jv55aaat\u0026utm_campaign=bhmd-db-metreset-cpaeml-all--250902\u0026utm_campaign_id=701Vo00000rCqdrIAC\u0026utm_content=3rd_party_email\u0026utm_source=email\u0026subid1=8398a1215b3d43708c54a4686e489f07\u0026subid2=16\u0026subid3=catmetaresetdonut1130\u0026subid5=everflow\u0026sessionid=936099273179","date":"2025-11-30T23:54:30.321Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vidalytics.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Mon, 07 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C6:52:A8:37:80:94:C0:4F:E8:20:81:85:2F:D5:64:FD:B1:DF:66:B2","sha256":"64:1D:1A:89:A4:A0:E4:28:77:CB:72:DF:AA:04:B3:59:79:65:3A:B7:95:50:B4:01:2C:BC:90:11:27:C5:80:10"}}},"request":{"raw":"GET /video/DXNWe2Do/vkFWiNdWnUZl0nEn/210618/197647__FFMPEG/video_TS_h264_aac_96000_640x360_900000_variant.m3u8 HTTP/1.1\r\nHost: fast.vidalytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www3.totalmetabolicreset.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www3.totalmetabolicreset.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 30 Nov 2025 23:54:30 GMT\r\ncontent-type: application/vnd.apple.mpegurl\r\ncontent-length: 26198\r\nx-cff: B\r\nx-guploader-uploadid: AOCedOFALf6a6iJIGTvHYtLjPj3VMPn5KYnzQoWJJsRSUOvdcXMzIiamqltcUhJrIlJxfWWhThGWQqP4a2Gqvw\r\ncache-control: public, max-age=31104000\r\nexpires: Mon, 26 Oct 2026 14:35:16 GMT\r\nlast-modified: Wed, 10 Sep 2025 21:33:59 GMT\r\netag: \"352cdf62bac93a7e146a92013eaef229\"\r\nx-goog-generation: 1757540039562632\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 26198\r\nx-goog-hash: crc32c=mAelVQ==, md5=NSzfYrrJOn4UapIBPq7yKQ==\r\nx-goog-storage-class: STANDARD\r\naccess-control-allow-origin: *\r\nx-lb-backend: gcs-prod\r\nx-lb-cache: miss\r\nx-cf3: H\r\ncf4age: 2554371\r\nx-cf-tsc: 1764546870\r\ncf4ttl: 28549628.000\r\nx-cdn: 8\r\nx-cdn-site: c8-prod\r\naccess-control-expose-headers: Content-Type, server, x-hw, x-cdn, x-cdn-info, x-cache, x-cache-hits, x-served-by, x-goog-stored-content-length, content-length, x-lb-backend, x-lb-cache, x-cf1, x-cf2, x-cf3, x-cff\r\nx-cf2: M\r\naccept-ranges: bytes\r\nserver: CFS 1124\r\nx-cf1: 42305:fB.arn1:co:1736526511:cacheN.arn1-01:M\r\nx-cf-reqid: ebfc998793e582c6830792874aef0253\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"CacheFly","description":"CacheFly is a content delivery network (CDN) which offers CDN service that relies solely on IP anycast for routing, rather than DNS based global load balancing.","website":"https://www.cachefly.com","common_platform_enumeration":"","icon":"CacheFly.svg","categories":["CDN"]}],"data":{"size":26198,"size_decoded":0,"mime_type":"application/vnd.apple.mpegurl","magic":"M3U playlist, ASCII text","md5":"352cdf62bac93a7e146a92013eaef229","sha1":"430a9fde0d8098a951d4f81d8d2787124f826412","sha256":"82d5748439233a140ee6bc3916fd4c6e04f27d744e8e97d5c585f8f362b6c786","sha512":"82960d2c808f5a01dee935b6a049dc00feb0969953141aa7b44e840d2bbd6a14683837318fbf9db6783a6f3956f3ee9e9e49350e1dc751b7a6b46889e4017686","ssdeep":"384:w7mZkfiFgLeWjUJSPQ1O7Lex8X6dYzmwVyv0h/2Dot943aRcr+lAqHINO7shSPPD:wfv6S","tlshash":"efc284a8d17535a5d04e5de7ab37b4a2c21179fdacf89f4012a5024638eb383d7cc9b8","first_seen":"2025-11-30T23:54:43.484494Z","last_seen":"2025-11-30T23:55:04.986776Z","times_seen":3,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":36,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www2.totalmetabolicreset.com/tcrorderforms/?callback=tcrrouter\u0026names=video250902a_la_ap-mr_db_vsl_a15_250902","fqdn":"www2.totalmetabolicreset.com","domain":"totalmetabolicreset.com","tld":"com"},"ip":{"addr":"172.64.149.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www3.totalmetabolicreset.com/video250902a_la_ap?origexperimentalOrig=true\u0026step=1\u0026funnelSTPId=a0qVo00000WbjCFIAZ\u0026origuidOrig=mr_db_vsl_a15_250902\u0026origspidOrig=null\u0026step=1\u0026origdsidOrig=\u0026origmainFunnelIdOrig=a0qVo00000WbmtKIAR\u0026origExternalOrig=true\u0026origExternalIDOrig=a0qVo00000WbmtKIAR\u0026genericUrl=video250902a_la_ap-mr_db_vsl_a15_250902\u0026orignameOrig=video250902a_la_ap-mr_db_vsl_a15_250902\u0026origbrandOrig=Beverly%20Hills%20MD\u0026business_unit=a00f400000jv55aaat\u0026utm_campaign=bhmd-db-metreset-cpaeml-all--250902\u0026utm_campaign_id=701Vo00000rCqdrIAC\u0026utm_content=3rd_party_email\u0026utm_source=email\u0026subid1=8398a1215b3d43708c54a4686e489f07\u0026subid2=16\u0026subid3=catmetaresetdonut1130\u0026subid5=everflow\u0026sessionid=936099273179","date":"2025-11-30T23:54:29.457Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"totalmetabolicreset.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 20:42:52 GMT","end":"Wed, 14 Jan 2026 21:42:41 GMT"},"fingerprint":{"sha1":"1A:08:7D:E4:80:5E:99:26:40:1D:85:3A:AE:9E:9A:65:4A:97:5E:A8","sha256":"B0:E0:A6:12:07:32:2F:E9:00:19:12:32:E5:53:D0:0B:8A:C7:FF:27:BC:F7:CE:2E:C5:E8:16:C9:14:17:A1:B0"}}},"request":{"raw":"GET /tcrorderforms/?callback=tcrrouter\u0026names=video250902a_la_ap-mr_db_vsl_a15_250902 HTTP/1.1\r\nHost: www2.totalmetabolicreset.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www3.totalmetabolicreset.com/\r\nCookie: __cf_bm=K2G9mXA4YmQ_g7_1sv6FlSCruMObW3tb8uvEtdWzbf0-1764546868-1.0.1.1-q1IPWCjey2Q96xjkfLC3t5cpV9UeqEw0b.AsKCi33jibqZtR7QrPr2OQsi83SC2D17y2CK3MoFrA8oEhchKp8QklGny63gvlETjllx.VLJU; tcrFed=false; alternaiGuestId=e5e5b94d-0325-45a4-92e6-0c76b86862cf,www3.totalmetabolicreset.com,,blob:https:\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 30 Nov 2025 23:54:29 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 495\r\ncf-ray: 9a6e452e085b712b-OSL\r\naccess-control-allow-origin: *\r\ncache-control: private, no-cache, max-age = 600\r\ncontent-encoding: gzip\r\netag: W/\"771-mi6Oh7XK9+poCPCTiPoQI/Ogc9A\"\r\nset-cookie: _csrf=j7pCGT_FBhaB8qQdtL3_WZW1; Path=/\n_csrf=NCyXh9F-dXZ9YOz_Wdt1VIi0; Path=/\nXSRF-TOKEN=9A3HJKbo-IwsEBBe83SueB-tIvllgjlPmBOo; Path=/; Secure\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nvary: Accept-Encoding\r\nvia: 1.1 spaces-router (001c5eea6469)\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1905,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (1905), with no line terminators","md5":"83c15a7e5d04adb7613af94620d9ac9d","sha1":"9a2e8e87b5caf7ea6808f09388fa1023f3a073d0","sha256":"2472dce01f7c9af3099e962cf486ac74b0ef6f3b6ccfaafe7e8b940c75517942","sha512":"6e035c7a79e069f7f77e278f8b83ecc46c2101f19b61c2873d2bdd8953a51a18a5fef40a740fed16aee6cef9de692a6eb3934c8af8b32d756af4c75732d7c220","ssdeep":"","tlshash":"70419e586b007d7ceb4996e1aebcff0e020c74eb85dc4c3e24a85f5856f497a0325693","first_seen":"2025-11-30T23:54:43.417441Z","last_seen":"2025-11-30T23:55:05.010462Z","times_seen":3,"resource_available":true,"data":null}},"time_used":394,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":394,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www2.totalmetabolicreset.com/request-ip","fqdn":"www2.totalmetabolicreset.com","domain":"totalmetabolicreset.com","tld":"com"},"ip":{"addr":"172.64.149.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www3.totalmetabolicreset.com/video250902a_la_ap?origexperimentalOrig=true\u0026step=1\u0026funnelSTPId=a0qVo00000WbjCFIAZ\u0026origuidOrig=mr_db_vsl_a15_250902\u0026origspidOrig=null\u0026step=1\u0026origdsidOrig=\u0026origmainFunnelIdOrig=a0qVo00000WbmtKIAR\u0026origExternalOrig=true\u0026origExternalIDOrig=a0qVo00000WbmtKIAR\u0026genericUrl=video250902a_la_ap-mr_db_vsl_a15_250902\u0026orignameOrig=video250902a_la_ap-mr_db_vsl_a15_250902\u0026origbrandOrig=Beverly%20Hills%20MD\u0026business_unit=a00f400000jv55aaat\u0026utm_campaign=bhmd-db-metreset-cpaeml-all--250902\u0026utm_campaign_id=701Vo00000rCqdrIAC\u0026utm_content=3rd_party_email\u0026utm_source=email\u0026subid1=8398a1215b3d43708c54a4686e489f07\u0026subid2=16\u0026subid3=catmetaresetdonut1130\u0026subid5=everflow\u0026sessionid=936099273179","date":"2025-11-30T23:54:29.459Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"totalmetabolicreset.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 20:42:52 GMT","end":"Wed, 14 Jan 2026 21:42:41 GMT"},"fingerprint":{"sha1":"1A:08:7D:E4:80:5E:99:26:40:1D:85:3A:AE:9E:9A:65:4A:97:5E:A8","sha256":"B0:E0:A6:12:07:32:2F:E9:00:19:12:32:E5:53:D0:0B:8A:C7:FF:27:BC:F7:CE:2E:C5:E8:16:C9:14:17:A1:B0"}}},"request":{"raw":"GET /request-ip HTTP/1.1\r\nHost: www2.totalmetabolicreset.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www3.totalmetabolicreset.com/\r\nCookie: __cf_bm=K2G9mXA4YmQ_g7_1sv6FlSCruMObW3tb8uvEtdWzbf0-1764546868-1.0.1.1-q1IPWCjey2Q96xjkfLC3t5cpV9UeqEw0b.AsKCi33jibqZtR7QrPr2OQsi83SC2D17y2CK3MoFrA8oEhchKp8QklGny63gvlETjllx.VLJU; tcrFed=false; alternaiGuestId=e5e5b94d-0325-45a4-92e6-0c76b86862cf,www3.totalmetabolicreset.com,,blob:https:\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 30 Nov 2025 23:54:29 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: gzip\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\netag: W/\"3d-tgKCcNzWEOrFJleEvBTo0zXW7XQ\"\r\nexpires: 0\r\npragma: no-cache\r\nset-cookie: _csrf=SPeyJkJG2FwtpqK0jNB_GlgM; Path=/\n_csrf=7O4JsbTx0taj0BuhHC7ffSW7; Path=/\nXSRF-TOKEN=fERpRaOx-ZNBuAcnkNVH6FDGFxqqN7sGyGcg; Path=/; Secure\n_csrf=LLBBQI4Sg8_1rMW8DEt_mm8-; Path=/\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nvary: Accept-Encoding\r\nvia: 1.1 spaces-router (001c5eea6469)\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 9a6e452e1860712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":61,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"8f3cdbb688ba1ff445fe6aed6254addf","sha1":"b6028270dcd610eac5265784bc14e8d335d6ed74","sha256":"fcfdbef4c7fa2b9fca91e95c121bd9fc29e6ebe20273c86c274c5b1b7e4470f3","sha512":"727c1342a75d4614b229dd64cdcd1b7623a11985c13f2ca01cdf5821b6bfd8b7618b168451dbf8cfc4cc719dc1e70a7e03d2d57caf2c06b6aa7b2e870a8bf58c","ssdeep":"","tlshash":"26a0023611110e2fedd98159958a135363d0138ac71f15a885800b65ad28af819440a6","first_seen":"2023-10-21T14:49:15Z","last_seen":"2026-04-03T06:11:11.706756Z","times_seen":2510,"resource_available":true,"data":null}},"time_used":125,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":125,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fast.vidalytics.com/players/v.5.10.5.000-vid-prod/player.min.js","fqdn":"fast.vidalytics.com","domain":"vidalytics.com","tld":"com"},"ip":{"addr":"205.234.175.175","port":443,"asn":30081,"as":"CACHENETWORKS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www3.totalmetabolicreset.com/video250902a_la_ap?origexperimentalOrig=true\u0026step=1\u0026funnelSTPId=a0qVo00000WbjCFIAZ\u0026origuidOrig=mr_db_vsl_a15_250902\u0026origspidOrig=null\u0026step=1\u0026origdsidOrig=\u0026origmainFunnelIdOrig=a0qVo00000WbmtKIAR\u0026origExternalOrig=true\u0026origExternalIDOrig=a0qVo00000WbmtKIAR\u0026genericUrl=video250902a_la_ap-mr_db_vsl_a15_250902\u0026orignameOrig=video250902a_la_ap-mr_db_vsl_a15_250902\u0026origbrandOrig=Beverly%20Hills%20MD\u0026business_unit=a00f400000jv55aaat\u0026utm_campaign=bhmd-db-metreset-cpaeml-all--250902\u0026utm_campaign_id=701Vo00000rCqdrIAC\u0026utm_content=3rd_party_email\u0026utm_source=email\u0026subid1=8398a1215b3d43708c54a4686e489f07\u0026subid2=16\u0026subid3=catmetaresetdonut1130\u0026subid5=everflow\u0026sessionid=936099273179","date":"2025-11-30T23:54:29.639Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vidalytics.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Mon, 07 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C6:52:A8:37:80:94:C0:4F:E8:20:81:85:2F:D5:64:FD:B1:DF:66:B2","sha256":"64:1D:1A:89:A4:A0:E4:28:77:CB:72:DF:AA:04:B3:59:79:65:3A:B7:95:50:B4:01:2C:BC:90:11:27:C5:80:10"}}},"request":{"raw":"GET /players/v.5.10.5.000-vid-prod/player.min.js HTTP/1.1\r\nHost: fast.vidalytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www3.totalmetabolicreset.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www3.totalmetabolicreset.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 30 Nov 2025 23:54:29 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 297448\r\nx-cff: B\r\nx-guploader-uploadid: AOCedOEDrtJPj0sA83OwnUGyfPHMwSpV28At5-jhfd5CCynKdlsqygscUIDccVND4jY8uBeWlsifASY\r\ncache-control: public, max-age=86400, s-maxage=2592000\r\nexpires: Fri, 28 Nov 2025 14:49:22 GMT\r\nlast-modified: Wed, 29 Oct 2025 14:37:40 GMT\r\netag: \"f0e4fb09906fe763637c043b557c356c\"\r\nvary: Accept-Encoding\r\nx-goog-generation: 1761748660586666\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: gzip\r\nx-goog-stored-content-length: 297448\r\nx-goog-meta-release-tag: v.5.10.5.000-vid-prod\r\nx-goog-meta-surrogate-key: player-versioned\r\nx-goog-hash: crc32c=On16LQ==, md5=8OT7CZBv52NjfAQ7VXw1bA==\r\nx-goog-storage-class: STANDARD\r\naccess-control-allow-origin: *\r\nx-lb-backend: gcs-prod\r\nx-lb-cache: miss\r\nx-cf3: H\r\ncf4age: 10856\r\nx-cf-tsc: 1761761260\r\ncf4ttl: 2581143.250\r\nx-cdn: 8\r\nx-cdn-site: c8-prod\r\naccess-control-expose-headers: Content-Type, server, x-hw, x-cdn, x-cdn-info, x-cache, x-cache-hits, x-served-by, x-goog-stored-content-length, content-length, x-lb-backend, x-lb-cache, x-cf1, x-cf2, x-cf3, x-cff\r\ncontent-encoding: gzip\r\nx-cf2: H\r\nserver: CFS 1124\r\nx-cf1: 42305:fB.arn1:co:1736526511:cacheN.arn1-01:M\r\nx-cf-reqid: 9e4e5c354ac93a16186250e5d2aaa4e2\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"CacheFly","description":"CacheFly is a content delivery network (CDN) which offers CDN service that relies solely on IP anycast for routing, rather than DNS based global load balancing.","website":"https://www.cachefly.com","common_platform_enumeration":"","icon":"CacheFly.svg","categories":["CDN"]}],"data":{"size":1084255,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"d6dfac8137e383eda3b7eb0a5fe74f10","sha1":"329170d9c918a3e76c9cc81e1ff737fb1c7e934b","sha256":"e9e86903938ddb6b4293fa84ed1e145e5cbdb2231623c00fadd98fa32fefe367","sha512":"e6152d27db7e92ac6d337fa092aeb0e672e5b35480854a7d743c61e6144f8e392d39fc793ea4c5e682006eae72306fe50f5f251c5b8e2305da4477ae08a63ee2","ssdeep":"12288:odwdAxlY2r1hIm68AVpK0vClEUdolPWgtNdDKZjDrAek4uO7e:y3r1hIm6DVpK/lEUolPWENsZjQeJze","tlshash":"df254cd97395743d869365ea447b0101f33e2e11740cc49cfa7aadcb29a5a4eb237e38","first_seen":"2025-10-30T04:48:59.384964Z","last_seen":"2025-12-26T16:33:23.174767Z","times_seen":503,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fast.vidalytics.com/video/DXNWe2Do/vkFWiNdWnUZl0nEn/210618/197647__FFMPEG/ts/video/480x270_h264_250000/1.ts","fqdn":"fast.vidalytics.com","domain":"vidalytics.com","tld":"com"},"ip":{"addr":"205.234.175.175","port":443,"asn":30081,"as":"CACHENETWORKS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www3.totalmetabolicreset.com/video250902a_la_ap?origexperimentalOrig=true\u0026step=1\u0026funnelSTPId=a0qVo00000WbjCFIAZ\u0026origuidOrig=mr_db_vsl_a15_250902\u0026origspidOrig=null\u0026step=1\u0026origdsidOrig=\u0026origmainFunnelIdOrig=a0qVo00000WbmtKIAR\u0026origExternalOrig=true\u0026origExternalIDOrig=a0qVo00000WbmtKIAR\u0026genericUrl=video250902a_la_ap-mr_db_vsl_a15_250902\u0026orignameOrig=video250902a_la_ap-mr_db_vsl_a15_250902\u0026origbrandOrig=Beverly%20Hills%20MD\u0026business_unit=a00f400000jv55aaat\u0026utm_campaign=bhmd-db-metreset-cpaeml-all--250902\u0026utm_campaign_id=701Vo00000rCqdrIAC\u0026utm_content=3rd_party_email\u0026utm_source=email\u0026subid1=8398a1215b3d43708c54a4686e489f07\u0026subid2=16\u0026subid3=catmetaresetdonut1130\u0026subid5=everflow\u0026sessionid=936099273179","date":"2025-11-30T23:54:30.783Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vidalytics.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Mon, 07 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C6:52:A8:37:80:94:C0:4F:E8:20:81:85:2F:D5:64:FD:B1:DF:66:B2","sha256":"64:1D:1A:89:A4:A0:E4:28:77:CB:72:DF:AA:04:B3:59:79:65:3A:B7:95:50:B4:01:2C:BC:90:11:27:C5:80:10"}}},"request":{"raw":"GET /video/DXNWe2Do/vkFWiNdWnUZl0nEn/210618/197647__FFMPEG/ts/video/480x270_h264_250000/1.ts HTTP/1.1\r\nHost: fast.vidalytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www3.totalmetabolicreset.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www3.totalmetabolicreset.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 30 Nov 2025 23:54:30 GMT\r\ncontent-type: video/mp2t\r\ncontent-length: 157168\r\nx-cff: B\r\nx-guploader-uploadid: AOCedOE-_LLkEsgzpchfi0khluC2Hi2ntDO81c24v1W64OcbZz6SfjGqO3tdvfESHTXAb6VybfCANHWd6XJY\r\ncache-control: public, max-age=31104000\r\nexpires: Wed, 25 Nov 2026 23:54:30 GMT\r\nlast-modified: Wed, 10 Sep 2025 21:30:30 GMT\r\netag: \"c462f8604f90a9e29e8f045eb0bfc0ad\"\r\nx-goog-generation: 1757539830078208\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 157168\r\nx-goog-hash: crc32c=FY+ljg==, md5=xGL4YE+QqeKejwResL/ArQ==\r\nx-goog-storage-class: STANDARD\r\naccess-control-allow-origin: *\r\nx-lb-backend: gcs-prod\r\nx-lb-cache: miss\r\nx-cf3: M\r\ncf4age: 0\r\nx-cf-tsc: 1764546871\r\ncf4ttl: 31104000.000\r\nx-cdn: 8\r\nx-cdn-site: c8-prod\r\naccess-control-expose-headers: Content-Type, server, x-hw, x-cdn, x-cdn-info, x-cache, x-cache-hits, x-served-by, x-goog-stored-content-length, content-length, x-lb-backend, x-lb-cache, x-cf1, x-cf2, x-cf3, x-cff\r\nx-cf2: M\r\naccept-ranges: bytes\r\nserver: CFS 1124\r\nx-cf1: 42305:fB.arn1:co:1736526511:cacheN.arn1-01:M\r\nx-cf-reqid: d9662f0202d7432a3d878483ce344362\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"CacheFly","description":"CacheFly is a content delivery network (CDN) which offers CDN service that relies solely on IP anycast for routing, rather than DNS based global load balancing.","website":"https://www.cachefly.com","common_platform_enumeration":"","icon":"CacheFly.svg","categories":["CDN"]}],"data":{"size":157168,"size_decoded":0,"mime_type":"video/mp2t","magic":"data","md5":"c462f8604f90a9e29e8f045eb0bfc0ad","sha1":"b1bb1489dac0ad1def384cc659cd966d810cf8b1","sha256":"e6dd9b9cbd319efd7b87e64cd92e0ef7810ac6fac02edef65adaf3161f24d84e","sha512":"fa12a408f2ac2f562f1da17bc188e447d5a6d34ac90c6d5991052560dc95d91d36f78f3fc6651de46411d2e1b8e3bc6dfcf0ec9729bcbd477e8e47e0b5ee589d","ssdeep":"3072:Hw4estEcJ2Vp++90eRmEh0NF96NOBFNTILaxJUiyxrnKpm2ntSH1Ck:HwhsCJ0fEqF9BdTIqJUqpmItSH1R","tlshash":"d4e302497b543eeece1a52f6830d3bb25b114d0458892fe3060db356e5f83dcaf6485a","first_seen":"2025-11-30T23:54:43.410672Z","last_seen":"2025-11-30T23:55:05.019232Z","times_seen":3,"resource_available":false,"data":null}},"time_used":224,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":220,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stats.vidalytics.com/scribe","fqdn":"stats.vidalytics.com","domain":"vidalytics.com","tld":"com"},"ip":{"addr":"107.178.211.97","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www3.totalmetabolicreset.com/video250902a_la_ap?origexperimentalOrig=true\u0026step=1\u0026funnelSTPId=a0qVo00000WbjCFIAZ\u0026origuidOrig=mr_db_vsl_a15_250902\u0026origspidOrig=null\u0026step=1\u0026origdsidOrig=\u0026origmainFunnelIdOrig=a0qVo00000WbmtKIAR\u0026origExternalOrig=true\u0026origExternalIDOrig=a0qVo00000WbmtKIAR\u0026genericUrl=video250902a_la_ap-mr_db_vsl_a15_250902\u0026orignameOrig=video250902a_la_ap-mr_db_vsl_a15_250902\u0026origbrandOrig=Beverly%20Hills%20MD\u0026business_unit=a00f400000jv55aaat\u0026utm_campaign=bhmd-db-metreset-cpaeml-all--250902\u0026utm_campaign_id=701Vo00000rCqdrIAC\u0026utm_content=3rd_party_email\u0026utm_source=email\u0026subid1=8398a1215b3d43708c54a4686e489f07\u0026subid2=16\u0026subid3=catmetaresetdonut1130\u0026subid5=everflow\u0026sessionid=936099273179","date":"2025-11-30T23:54:31.018Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vidalytics.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Mon, 07 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C6:52:A8:37:80:94:C0:4F:E8:20:81:85:2F:D5:64:FD:B1:DF:66:B2","sha256":"64:1D:1A:89:A4:A0:E4:28:77:CB:72:DF:AA:04:B3:59:79:65:3A:B7:95:50:B4:01:2C:BC:90:11:27:C5:80:10"}}},"request":{"raw":"POST /scribe HTTP/1.1\r\nHost: stats.vidalytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain; charset=utf-8\r\nContent-Length: 1284\r\nOrigin: https://www3.totalmetabolicreset.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www3.totalmetabolicreset.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1284,"data":"{\"customerId\":\"DXNWe2Do\",\"videoId\":\"vkFWiNdWnUZl0nEn\",\"timestamp\":1764546871,\"timeSinceNav\":2993,\"eventIndex\":1,\"sessionId\":\"Th2wOlCwqT\",\"userId\":\"J2agbNFNeXcES95d\",\"player\":\"hls\",\"event\":\"Vidalytics.Player.EVENT_ERROR\",\"videoTime\":0,\"referer\":\"\",\"site\":\"https://www3.totalmetabolicreset.com/video250902a_la_ap?origexperimentalOrig=true\u0026step=1\u0026step=1\u0026funnelSTPId=a0qVo00000WbjCFIAZ\u0026origuidOrig=mr_db_vsl_a15_250902\u0026origspidOrig=null\u0026origdsidOrig=\u0026origmainFunnelIdOrig=a0qVo00000WbmtKIAR\u0026origExternalOrig=true\u0026origExternalIDOrig=a0qVo00000WbmtKIAR\u0026genericUrl=video250902a_la_ap-mr_db_vsl_a15_250902\u0026orignameOrig=video250902a_la_ap-mr_db_vsl_a15_250902\u0026origbrandOrig=Beverly%20Hills%20MD\u0026business_unit=a00f400000jv55aaat\u0026utm_campaign=bhmd-db-metreset-cpaeml-all--250902\u0026utm_campaign_id=701Vo00000rCqdrIAC\u0026utm_content=3rd_party_email\u0026utm_source=email\u0026subid1=8398a1215b3d43708c54a4686e489f07\u0026subid2=16\u0026subid3=catmetaresetdonut1130\u0026subid5=everflow\u0026sessionid=936099273179\",\"errorCategory\":\"mediaError\",\"errorType\":\"critical\",\"errorCode\":\"mediaError\",\"errorMessage\":\"bufferAppendError\",\"cdnProvider\":\"CacheFly\",\"performance\":{\"performanceData\":{\"cache\":1,\"info\":\"42305:fB.arn1:co:1736526511:cacheN.arn1-01:M||H||H||B\",\"cdn\":8,\"fileSize\":297448,\"statusCode\":200,\"latency\":27,\"totalTime\":47}}}"}},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-methods: POST,OPTIONS\r\ncontent-type: application/json\r\ndate: Sun, 30 Nov 2025 23:54:31 GMT\r\ncontent-length: 16\r\nx-envoy-upstream-service-time: 3\r\nserver: istio-envoy\r\naccess-control-allow-origin: https://www3.totalmetabolicreset.com\r\naccess-control-expose-headers: Access-Control-Allow-Origin,Cache-Control,Content-Length,Content-Type,ETag,If-None-Match\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":16,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"a1cbd35d4488ac8cc6f959d4c633dc37","sha1":"11844023759429ec785ae1c18e6a9c69803ee2bd","sha256":"707d4c7f44dd33e874b5a09b6dba4702b12bfd3e19e470d601fcfc1d7009286c","sha512":"1681f6f4eb56a4a46346eebdb411eedc18fe2975b9929ddb57647f50ce8b33529df03285b8ebcb747552e625b674bc140ee4b33263edcb336ab6e4caac532b3c","ssdeep":"","tlshash":"46600003000c00300cf03c00030330303f300f00000f00fc000c303000003c0c00c000","first_seen":"2023-04-05T11:33:20Z","last_seen":"2026-04-03T22:32:38.283819Z","times_seen":9629,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":136,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.beverlyhillsmd.com/images/ET-Logo@2x_opt.png","fqdn":"cdn.beverlyhillsmd.com","domain":"beverlyhillsmd.com","tld":"com"},"ip":{"addr":"104.18.36.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www3.totalmetabolicreset.com/video250902a_la_ap?origexperimentalOrig=true\u0026step=1\u0026funnelSTPId=a0qVo00000WbjCFIAZ\u0026origuidOrig=mr_db_vsl_a15_250902\u0026origspidOrig=null\u0026step=1\u0026origdsidOrig=\u0026origmainFunnelIdOrig=a0qVo00000WbmtKIAR\u0026origExternalOrig=true\u0026origExternalIDOrig=a0qVo00000WbmtKIAR\u0026genericUrl=video250902a_la_ap-mr_db_vsl_a15_250902\u0026orignameOrig=video250902a_la_ap-mr_db_vsl_a15_250902\u0026origbrandOrig=Beverly%20Hills%20MD\u0026business_unit=a00f400000jv55aaat\u0026utm_campaign=bhmd-db-metreset-cpaeml-all--250902\u0026utm_campaign_id=701Vo00000rCqdrIAC\u0026utm_content=3rd_party_email\u0026utm_source=email\u0026subid1=8398a1215b3d43708c54a4686e489f07\u0026subid2=16\u0026subid3=catmetaresetdonut1130\u0026subid5=everflow\u0026sessionid=936099273179","date":"2025-11-30T23:54:29.319Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"beverlyhillsmd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Nov 2025 04:02:31 GMT","end":"Thu, 12 Feb 2026 05:02:27 GMT"},"fingerprint":{"sha1":"44:DC:D2:57:95:63:FA:48:DE:C2:33:E4:0C:B9:EF:C4:C6:DF:75:5C","sha256":"81:97:E9:D9:50:B7:EB:5E:73:F1:2C:E5:5D:66:4F:CD:D0:EE:4B:D5:EC:37:72:AD:68:66:BA:86:57:33:9B:DB"}}},"request":{"raw":"GET /images/ET-Logo@2x_opt.png HTTP/1.1\r\nHost: cdn.beverlyhillsmd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www3.totalmetabolicreset.com/\r\nCookie: __cf_bm=FwLozWfSFs8VrJv83bqs_yjNpFL5niCamk1FCMrgZuU-1764546868-1.0.1.1-YrmrUZEcRmUKfEOP4payh3pddXbCgNI6qeERyMqQiY8TCMDinBt7M_rlDM3k4gXuBofQ995adBoCFqC7P3s87h.MZ8wCXVhe7u5NxgOp4Qs\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 30 Nov 2025 23:54:29 GMT\r\ncontent-type: image/webp\r\ncontent-length: 468\r\ncf-ray: 9a6e452d3d22568e-OSL\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=705\r\ncontent-disposition: inline; filename=\"ET-Logo@2x_opt.webp\"\r\netag: \"08e948fdeaf3c7fb7ceee01cb8c32b4c\"\r\nlast-modified: Tue, 07 Nov 2023 14:37:36 GMT\r\nvary: Accept\r\nx-amz-id-2: VKVOjEKhTpnQRjtcuDf5UnIDH2m4MftM+zXAGBuH1RPDbKm4OFxZtcYnwA/emy2hDg21xFlvv/4=\r\nx-amz-request-id: TG3G1EBKZW41F4VT\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: o7qJ4WV7Ds1qm8l7RcLFaLZBbjjkYF9L\r\ncf-cache-status: HIT\r\nage: 16\r\nexpires: Mon, 01 Dec 2025 03:54:29 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":468,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"dbcb31d9229df05fc0a86678a3e8df56","sha1":"7954cec3806381823dc5e30dc19c471d6e9152da","sha256":"6e79db9f863729849e089d7878c6580491d5da075e2c278c88a3067c1e978413","sha512":"c5ee1324767f15d26e1442bbbc51552293c79914240dbfec7437aa3d4dba69b684810cb64f87bb21a6eed9afab06f6599c4d1c805aaf32a86ac119f99d0c2d04","ssdeep":"","tlshash":"58f05c20e0c490152e688cb8af0e273f2822fb098619f2c2b1e14aa8f8510f5f9417c3","first_seen":"2023-12-01T16:59:19Z","last_seen":"2026-02-12T18:25:45.704223Z","times_seen":196,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.beverlyhillsmd.com/images/The_Drs-logo@2x_opt.png","fqdn":"cdn.beverlyhillsmd.com","domain":"beverlyhillsmd.com","tld":"com"},"ip":{"addr":"104.18.36.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www3.totalmetabolicreset.com/video250902a_la_ap?origexperimentalOrig=true\u0026step=1\u0026funnelSTPId=a0qVo00000WbjCFIAZ\u0026origuidOrig=mr_db_vsl_a15_250902\u0026origspidOrig=null\u0026step=1\u0026origdsidOrig=\u0026origmainFunnelIdOrig=a0qVo00000WbmtKIAR\u0026origExternalOrig=true\u0026origExternalIDOrig=a0qVo00000WbmtKIAR\u0026genericUrl=video250902a_la_ap-mr_db_vsl_a15_250902\u0026orignameOrig=video250902a_la_ap-mr_db_vsl_a15_250902\u0026origbrandOrig=Beverly%20Hills%20MD\u0026business_unit=a00f400000jv55aaat\u0026utm_campaign=bhmd-db-metreset-cpaeml-all--250902\u0026utm_campaign_id=701Vo00000rCqdrIAC\u0026utm_content=3rd_party_email\u0026utm_source=email\u0026subid1=8398a1215b3d43708c54a4686e489f07\u0026subid2=16\u0026subid3=catmetaresetdonut1130\u0026subid5=everflow\u0026sessionid=936099273179","date":"2025-11-30T23:54:29.325Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"beverlyhillsmd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Nov 2025 04:02:31 GMT","end":"Thu, 12 Feb 2026 05:02:27 GMT"},"fingerprint":{"sha1":"44:DC:D2:57:95:63:FA:48:DE:C2:33:E4:0C:B9:EF:C4:C6:DF:75:5C","sha256":"81:97:E9:D9:50:B7:EB:5E:73:F1:2C:E5:5D:66:4F:CD:D0:EE:4B:D5:EC:37:72:AD:68:66:BA:86:57:33:9B:DB"}}},"request":{"raw":"GET /images/The_Drs-logo@2x_opt.png HTTP/1.1\r\nHost: cdn.beverlyhillsmd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www3.totalmetabolicreset.com/\r\nCookie: __cf_bm=FwLozWfSFs8VrJv83bqs_yjNpFL5niCamk1FCMrgZuU-1764546868-1.0.1.1-YrmrUZEcRmUKfEOP4payh3pddXbCgNI6qeERyMqQiY8TCMDinBt7M_rlDM3k4gXuBofQ995adBoCFqC7P3s87h.MZ8wCXVhe7u5NxgOp4Qs\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 30 Nov 2025 23:54:29 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1466\r\ncf-ray: 9a6e452d3d24568e-OSL\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=1627\r\ncontent-disposition: inline; filename=\"The_Drs-logo@2x_opt.webp\"\r\netag: \"e8d55efde8b0634a2283b54533b8d13f\"\r\nlast-modified: Tue, 14 Nov 2023 18:28:54 GMT\r\nvary: Accept\r\nx-amz-id-2: 7BHgRxyoI0cRXVcmglxtK/3qURtxjwoB8HmrZ3bJTVaKfkxo/1V592gm9UdFHVG+a4aeZk4gahg=\r\nx-amz-request-id: 3RNFEWFY3FK0YFQ7\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: QD86uS7G2bv.8Zol8SEDr9WG3qzglryJ\r\ncf-cache-status: HIT\r\nage: 16\r\nexpires: Mon, 01 Dec 2025 03:54:29 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1466,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"265a03cc225ddd543e110f1e8de45f1c","sha1":"10ec879b165a6abc25291c58bd9ebb38cdd287e8","sha256":"ad1574f7b7004e72b3af962d9b6cc21628898984816923c7e8685886bc63a90a","sha512":"e85398ba88a3e81f3cd68d9522b416c8fe0a0e3fd6494169205d2a54f5b5e4dd2b73e3becc16ad36bbab0dd81cba9681183b5a2e1dbf4df9327e38085d3a3e4f","ssdeep":"","tlshash":"4431ec282201e7d43160ff8251991c4c09b517db905ac634bf3252f5ec142ca752c59c","first_seen":"2023-12-01T16:59:19Z","last_seen":"2026-02-12T18:25:45.721097Z","times_seen":196,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.beverlyhillsmd.com/images/extra-logo_opt.png","fqdn":"cdn.beverlyhillsmd.com","domain":"beverlyhillsmd.com","tld":"com"},"ip":{"addr":"104.18.36.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www3.totalmetabolicreset.com/video250902a_la_ap?origexperimentalOrig=true\u0026step=1\u0026funnelSTPId=a0qVo00000WbjCFIAZ\u0026origuidOrig=mr_db_vsl_a15_250902\u0026origspidOrig=null\u0026step=1\u0026origdsidOrig=\u0026origmainFunnelIdOrig=a0qVo00000WbmtKIAR\u0026origExternalOrig=true\u0026origExternalIDOrig=a0qVo00000WbmtKIAR\u0026genericUrl=video250902a_la_ap-mr_db_vsl_a15_250902\u0026orignameOrig=video250902a_la_ap-mr_db_vsl_a15_250902\u0026origbrandOrig=Beverly%20Hills%20MD\u0026business_unit=a00f400000jv55aaat\u0026utm_campaign=bhmd-db-metreset-cpaeml-all--250902\u0026utm_campaign_id=701Vo00000rCqdrIAC\u0026utm_content=3rd_party_email\u0026utm_source=email\u0026subid1=8398a1215b3d43708c54a4686e489f07\u0026subid2=16\u0026subid3=catmetaresetdonut1130\u0026subid5=everflow\u0026sessionid=936099273179","date":"2025-11-30T23:54:29.336Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"beverlyhillsmd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Nov 2025 04:02:31 GMT","end":"Thu, 12 Feb 2026 05:02:27 GMT"},"fingerprint":{"sha1":"44:DC:D2:57:95:63:FA:48:DE:C2:33:E4:0C:B9:EF:C4:C6:DF:75:5C","sha256":"81:97:E9:D9:50:B7:EB:5E:73:F1:2C:E5:5D:66:4F:CD:D0:EE:4B:D5:EC:37:72:AD:68:66:BA:86:57:33:9B:DB"}}},"request":{"raw":"GET /images/extra-logo_opt.png HTTP/1.1\r\nHost: cdn.beverlyhillsmd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www3.totalmetabolicreset.com/\r\nCookie: __cf_bm=FwLozWfSFs8VrJv83bqs_yjNpFL5niCamk1FCMrgZuU-1764546868-1.0.1.1-YrmrUZEcRmUKfEOP4payh3pddXbCgNI6qeERyMqQiY8TCMDinBt7M_rlDM3k4gXuBofQ995adBoCFqC7P3s87h.MZ8wCXVhe7u5NxgOp4Qs\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 30 Nov 2025 23:54:29 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2622\r\ncf-ray: 9a6e452d4d2c568e-OSL\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=3308\r\ncontent-disposition: inline; filename=\"extra-logo_opt.webp\"\r\netag: \"c14c430ecd4b9c008d611b025f783e88\"\r\nlast-modified: Tue, 07 Nov 2023 14:37:37 GMT\r\nvary: Accept\r\nx-amz-id-2: TK5wl2O0QL+8GoHfA+rKTGwZfrzR7fOxpu9rlMrWu1wcb/DYvbDYLUnrUVbbRG+vYsk9b8ucRI4=\r\nx-amz-request-id: 3RNEQ3NXHBR9QR6F\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: zloHHUTGYMgvouql8jWN8Od.YgEym6Uq\r\ncf-cache-status: HIT\r\nage: 16\r\nexpires: Mon, 01 Dec 2025 03:54:29 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2622,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6d1faffc44f7a8058d2261c7dc01a1f4","sha1":"1406c418c521c79e91e1876d1f216200440795fa","sha256":"4f827a1235c1128be21086ca8a9a21c86575f96a50a8f8a344c868fb8e0010fe","sha512":"bf93bdd490fa276b6cfe56ebd5f9627e42cc904e50f14516c5d177c3aacbd0ae52099ff550b102b39e67d53d1221a1a8649510c7378e0d0c0c98eef40c711455","ssdeep":"","tlshash":"25513b1fb0824f38fb1e0785dce2d44ce2045b52ead697dacfd44d85616815ca8b71aa","first_seen":"2025-03-01T23:29:47.082089Z","last_seen":"2026-02-12T18:25:45.707839Z","times_seen":192,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stats.vidalytics.com/scribe","fqdn":"stats.vidalytics.com","domain":"vidalytics.com","tld":"com"},"ip":{"addr":"107.178.211.97","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www3.totalmetabolicreset.com/video250902a_la_ap?origexperimentalOrig=true\u0026step=1\u0026funnelSTPId=a0qVo00000WbjCFIAZ\u0026origuidOrig=mr_db_vsl_a15_250902\u0026origspidOrig=null\u0026step=1\u0026origdsidOrig=\u0026origmainFunnelIdOrig=a0qVo00000WbmtKIAR\u0026origExternalOrig=true\u0026origExternalIDOrig=a0qVo00000WbmtKIAR\u0026genericUrl=video250902a_la_ap-mr_db_vsl_a15_250902\u0026orignameOrig=video250902a_la_ap-mr_db_vsl_a15_250902\u0026origbrandOrig=Beverly%20Hills%20MD\u0026business_unit=a00f400000jv55aaat\u0026utm_campaign=bhmd-db-metreset-cpaeml-all--250902\u0026utm_campaign_id=701Vo00000rCqdrIAC\u0026utm_content=3rd_party_email\u0026utm_source=email\u0026subid1=8398a1215b3d43708c54a4686e489f07\u0026subid2=16\u0026subid3=catmetaresetdonut1130\u0026subid5=everflow\u0026sessionid=936099273179","date":"2025-11-30T23:54:31.330Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vidalytics.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Mon, 07 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C6:52:A8:37:80:94:C0:4F:E8:20:81:85:2F:D5:64:FD:B1:DF:66:B2","sha256":"64:1D:1A:89:A4:A0:E4:28:77:CB:72:DF:AA:04:B3:59:79:65:3A:B7:95:50:B4:01:2C:BC:90:11:27:C5:80:10"}}},"request":{"raw":"POST /scribe HTTP/1.1\r\nHost: stats.vidalytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain; charset=utf-8\r\nContent-Length: 1284\r\nOrigin: https://www3.totalmetabolicreset.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www3.totalmetabolicreset.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1284,"data":"{\"customerId\":\"DXNWe2Do\",\"videoId\":\"vkFWiNdWnUZl0nEn\",\"timestamp\":1764546871,\"timeSinceNav\":3303,\"eventIndex\":2,\"sessionId\":\"Th2wOlCwqT\",\"userId\":\"J2agbNFNeXcES95d\",\"player\":\"hls\",\"event\":\"Vidalytics.Player.EVENT_ERROR\",\"videoTime\":0,\"referer\":\"\",\"site\":\"https://www3.totalmetabolicreset.com/video250902a_la_ap?origexperimentalOrig=true\u0026step=1\u0026step=1\u0026funnelSTPId=a0qVo00000WbjCFIAZ\u0026origuidOrig=mr_db_vsl_a15_250902\u0026origspidOrig=null\u0026origdsidOrig=\u0026origmainFunnelIdOrig=a0qVo00000WbmtKIAR\u0026origExternalOrig=true\u0026origExternalIDOrig=a0qVo00000WbmtKIAR\u0026genericUrl=video250902a_la_ap-mr_db_vsl_a15_250902\u0026orignameOrig=video250902a_la_ap-mr_db_vsl_a15_250902\u0026origbrandOrig=Beverly%20Hills%20MD\u0026business_unit=a00f400000jv55aaat\u0026utm_campaign=bhmd-db-metreset-cpaeml-all--250902\u0026utm_campaign_id=701Vo00000rCqdrIAC\u0026utm_content=3rd_party_email\u0026utm_source=email\u0026subid1=8398a1215b3d43708c54a4686e489f07\u0026subid2=16\u0026subid3=catmetaresetdonut1130\u0026subid5=everflow\u0026sessionid=936099273179\",\"errorCategory\":\"mediaError\",\"errorType\":\"critical\",\"errorCode\":\"mediaError\",\"errorMessage\":\"bufferAppendError\",\"cdnProvider\":\"CacheFly\",\"performance\":{\"performanceData\":{\"cache\":1,\"info\":\"42305:fB.arn1:co:1736526511:cacheN.arn1-01:M||H||H||B\",\"cdn\":8,\"fileSize\":297448,\"statusCode\":200,\"latency\":27,\"totalTime\":47}}}"}},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-methods: POST,OPTIONS\r\ncontent-type: application/json\r\ndate: Sun, 30 Nov 2025 23:54:31 GMT\r\ncontent-length: 16\r\nx-envoy-upstream-service-time: 2\r\nserver: istio-envoy\r\naccess-control-allow-origin: https://www3.totalmetabolicreset.com\r\naccess-control-expose-headers: Access-Control-Allow-Origin,Cache-Control,Content-Length,Content-Type,ETag,If-None-Match\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":16,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"a1cbd35d4488ac8cc6f959d4c633dc37","sha1":"11844023759429ec785ae1c18e6a9c69803ee2bd","sha256":"707d4c7f44dd33e874b5a09b6dba4702b12bfd3e19e470d601fcfc1d7009286c","sha512":"1681f6f4eb56a4a46346eebdb411eedc18fe2975b9929ddb57647f50ce8b33529df03285b8ebcb747552e625b674bc140ee4b33263edcb336ab6e4caac532b3c","ssdeep":"","tlshash":"46600003000c00300cf03c00030330303f300f00000f00fc000c303000003c0c00c000","first_seen":"2023-04-05T11:33:20Z","last_seen":"2026-04-03T22:32:38.283819Z","times_seen":9629,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stats.vidalytics.com/awesome-log?cid=DXNWe2Do","fqdn":"stats.vidalytics.com","domain":"vidalytics.com","tld":"com"},"ip":{"addr":"107.178.211.97","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www3.totalmetabolicreset.com/video250902a_la_ap?origexperimentalOrig=true\u0026step=1\u0026funnelSTPId=a0qVo00000WbjCFIAZ\u0026origuidOrig=mr_db_vsl_a15_250902\u0026origspidOrig=null\u0026step=1\u0026origdsidOrig=\u0026origmainFunnelIdOrig=a0qVo00000WbmtKIAR\u0026origExternalOrig=true\u0026origExternalIDOrig=a0qVo00000WbmtKIAR\u0026genericUrl=video250902a_la_ap-mr_db_vsl_a15_250902\u0026orignameOrig=video250902a_la_ap-mr_db_vsl_a15_250902\u0026origbrandOrig=Beverly%20Hills%20MD\u0026business_unit=a00f400000jv55aaat\u0026utm_campaign=bhmd-db-metreset-cpaeml-all--250902\u0026utm_campaign_id=701Vo00000rCqdrIAC\u0026utm_content=3rd_party_email\u0026utm_source=email\u0026subid1=8398a1215b3d43708c54a4686e489f07\u0026subid2=16\u0026subid3=catmetaresetdonut1130\u0026subid5=everflow\u0026sessionid=936099273179","date":"2025-11-30T23:54:30.325Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vidalytics.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Mon, 07 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C6:52:A8:37:80:94:C0:4F:E8:20:81:85:2F:D5:64:FD:B1:DF:66:B2","sha256":"64:1D:1A:89:A4:A0:E4:28:77:CB:72:DF:AA:04:B3:59:79:65:3A:B7:95:50:B4:01:2C:BC:90:11:27:C5:80:10"}}},"request":{"raw":"GET /awesome-log?cid=DXNWe2Do HTTP/1.1\r\nHost: stats.vidalytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www3.totalmetabolicreset.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www3.totalmetabolicreset.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-headers: Accept, Content-Type, Origin, Range, X-Requested-With\r\naccess-control-allow-methods: GET, POST, PUT, OPTIONS\r\naccess-control-expose-headers: Access-Control-Allow-Origin,Cache-Control,Content-Length,Content-Type,ETag,If-None-Match\r\ncache-control: no-cache, public, max-age=2592000\r\ncontent-length: 43\r\ncontent-type: image/gif\r\netag: \"DXNWe2Do/J2agbNFNeXcES95d\"\r\ndate: Sun, 30 Nov 2025 23:54:30 GMT\r\nx-envoy-upstream-service-time: 7\r\nserver: istio-envoy\r\naccess-control-allow-origin: https://www3.totalmetabolicreset.com\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"57f187c7a868faeac558007a8eb6cb2e","sha1":"11ab10ab109fdb53d91d444ac781101f5a6360c6","sha256":"aa03dc59bdca72631d2301e4297cfa030bd31b907dc138e7b973d12311c90a22","sha512":"3844065e1dd778a05e8cc39901fbf3191ded380d594359df137901ec56ca52e03d57eb60acc2421a0ee74f0733bbb5d781b7744685c26fb013a236f49b02fed3","ssdeep":"","tlshash":"5f900407c1500051c151c4310444cf1017407570010d030d50dc1055dc1715d0d01100","first_seen":"2023-04-07T09:22:11Z","last_seen":"2026-04-04T00:34:07.206738Z","times_seen":55971,"resource_available":true,"data":null}},"time_used":700,"timings":{"blocked":279,"dns":0,"connect":140,"send":0,"wait":141,"receive":0,"ssl":137},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"funnel-config-loader.ghm.cloud/getFunnelById?mainFunnelId=a0qVo00000WbmtKIAR","fqdn":"funnel-config-loader.ghm.cloud","domain":"ghm.cloud","tld":"cloud"},"ip":{"addr":"172.66.43.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www3.totalmetabolicreset.com/video250902a_la_ap?origexperimentalOrig=true\u0026step=1\u0026funnelSTPId=a0qVo00000WbjCFIAZ\u0026origuidOrig=mr_db_vsl_a15_250902\u0026origspidOrig=null\u0026step=1\u0026origdsidOrig=\u0026origmainFunnelIdOrig=a0qVo00000WbmtKIAR\u0026origExternalOrig=true\u0026origExternalIDOrig=a0qVo00000WbmtKIAR\u0026genericUrl=video250902a_la_ap-mr_db_vsl_a15_250902\u0026orignameOrig=video250902a_la_ap-mr_db_vsl_a15_250902\u0026origbrandOrig=Beverly%20Hills%20MD\u0026business_unit=a00f400000jv55aaat\u0026utm_campaign=bhmd-db-metreset-cpaeml-all--250902\u0026utm_campaign_id=701Vo00000rCqdrIAC\u0026utm_content=3rd_party_email\u0026utm_source=email\u0026subid1=8398a1215b3d43708c54a4686e489f07\u0026subid2=16\u0026subid3=catmetaresetdonut1130\u0026subid5=everflow\u0026sessionid=936099273179","date":"2025-11-30T23:54:29.036Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ghm.cloud","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Nov 2025 17:59:28 GMT","end":"Sun, 01 Feb 2026 18:59:18 GMT"},"fingerprint":{"sha1":"46:9F:8A:11:2F:0E:C0:67:89:46:74:E2:36:06:D0:53:86:54:71:B1","sha256":"0F:AB:99:89:79:19:A3:7A:12:BA:7D:C1:66:E5:68:9D:94:29:EA:BB:AE:FB:FB:6B:CD:3F:43:61:75:1F:56:2C"}}},"request":{"raw":"OPTIONS /getFunnelById?mainFunnelId=a0qVo00000WbmtKIAR HTTP/1.1\r\nHost: funnel-config-loader.ghm.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: brand\r\nReferer: https://www3.totalmetabolicreset.com/\r\nOrigin: https://www3.totalmetabolicreset.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sun, 30 Nov 2025 23:54:29 GMT\r\naccess-control-allow-headers: brand\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\naccess-control-allow-origin: *\r\nvary: Access-Control-Request-Headers\r\nvia: 1.1 spaces-router (001c5eea6469)\r\nx-powered-by: Express\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LlcT4sxca%2BW8t%2Bm%2BRKzNRvEfU9cytXFDeLE6R2XCDlcm6ebVHzHpilPJszc6RUk0n1K7lcT9ip7g34IIRwt6tTrrXjMRaE0hcysmpSuqbeI9B7lTyTmKAjAc4Q%3D%3D\"}]}\r\nserver: cloudflare\r\nset-cookie: __cf_bm=66yHhOEmP3Z2IqhtqtrZ.qBEh7W6fPUOk9QqH1IJl_U-1764546869.0601997-1.0.1.1-cONAPPKTifdZQYPk2EfZkYetIQ12UYd1YkBCvqbNgiTQZcH3dV9MqtEGmyi9IblALQxljwOeihj9NJbXM8GHshabPpL4HShMZkbuC05lxiGys41biKOQsE9Cc57m8dNP; HttpOnly; Secure; Path=/; Domain=ghm.cloud; Expires=Mon, 01 Dec 2025 00:24:29 GMT\r\ncf-ray: 9a6e452b9e1a5694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T00:31:03.876566Z","times_seen":13308907,"resource_available":true,"data":null}},"time_used":172,"timings":{"blocked":26,"dns":1,"connect":1,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"innerskinresearch.com/images/drsbhmd.png","fqdn":"innerskinresearch.com","domain":"innerskinresearch.com","tld":"com"},"ip":{"addr":"172.64.145.52","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www3.totalmetabolicreset.com/video250902a_la_ap?origexperimentalOrig=true\u0026step=1\u0026funnelSTPId=a0qVo00000WbjCFIAZ\u0026origuidOrig=mr_db_vsl_a15_250902\u0026origspidOrig=null\u0026step=1\u0026origdsidOrig=\u0026origmainFunnelIdOrig=a0qVo00000WbmtKIAR\u0026origExternalOrig=true\u0026origExternalIDOrig=a0qVo00000WbmtKIAR\u0026genericUrl=video250902a_la_ap-mr_db_vsl_a15_250902\u0026orignameOrig=video250902a_la_ap-mr_db_vsl_a15_250902\u0026origbrandOrig=Beverly%20Hills%20MD\u0026business_unit=a00f400000jv55aaat\u0026utm_campaign=bhmd-db-metreset-cpaeml-all--250902\u0026utm_campaign_id=701Vo00000rCqdrIAC\u0026utm_content=3rd_party_email\u0026utm_source=email\u0026subid1=8398a1215b3d43708c54a4686e489f07\u0026subid2=16\u0026subid3=catmetaresetdonut1130\u0026subid5=everflow\u0026sessionid=936099273179","date":"2025-11-30T23:54:29.284Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"innerskinresearch.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Nov 2025 04:05:01 GMT","end":"Thu, 19 Feb 2026 05:04:41 GMT"},"fingerprint":{"sha1":"B3:62:27:86:06:F8:42:86:F6:90:4B:FD:3A:28:E3:90:3D:67:8B:78","sha256":"0C:29:3C:DE:96:A0:11:2B:CC:17:E8:77:29:A8:10:83:58:7D:FD:20:F9:DE:B9:3C:67:E0:77:F0:4A:EC:B6:D9"}}},"request":{"raw":"GET /images/drsbhmd.png HTTP/1.1\r\nHost: innerskinresearch.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www3.totalmetabolicreset.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 30 Nov 2025 23:54:29 GMT\r\ncontent-type: image/webp\r\ncontent-length: 111150\r\nserver: cloudflare\r\ncf-ray: 9a6e452d4986a41f-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 17\r\ncache-control: public, max-age=3600\r\ncontent-disposition: inline; filename=\"drsbhmd.webp\"\r\netag: \"30d06-644ad34ac4500\"\r\nexpires: Mon, 01 Dec 2025 00:54:29 GMT\r\nlast-modified: Fri, 28 Nov 2025 20:09:24 GMT\r\nvary: Accept, Accept-Encoding\r\nvia: 1.1 heroku-router\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: origFmt=png, origSize=199942\r\nnel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nreport-to: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=iFJmO%2Bf9JUAFnisjYRz6jTfQA4auN9lVA%2Bxh9NDj2BU%3D\\u0026sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6\\u0026ts=1764363283\"}],\"max_age\":3600}\r\nreporting-endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=iFJmO%2Bf9JUAFnisjYRz6jTfQA4auN9lVA%2Bxh9NDj2BU%3D\u0026sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6\u0026ts=1764363283\"\r\nset-cookie: __cf_bm=wSMBtkTIGQ0jU0mIJ3iyZxrgWM.9NwyS_c9ulVmMcnQ-1764546869-1.0.1.1-tJWaTe6TycybBDw2TnFqscGfCgAHS4u008b5rMBFNaAGRJQtGSgyqoIrLEq6vzFxsKdfH3wZIJVL.7QoLrtvlK9ZdLKLQHXKgLznabGWOcE; path=/; expires=Mon, 01-Dec-25 00:24:29 GMT; domain=.innerskinresearch.com; HttpOnly; Secure; SameSite=None\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":111150,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a5c8be92826dbba5df9cf9e051fb5a6b","sha1":"05b91b834db01f37f3724d3db0b0912f0d9b712c","sha256":"623a81089c494473f8c213c2bc2f7eb8c25220ab8aa94b736d7b5d57e439c3f9","sha512":"f4aa6c52eea12d4347501de84d876d411c3979e34302d75105e8edaaee3b30b13b1295197d353e812cc447a3b9bf078ae852fd233564404860231837001a6e27","ssdeep":"3072:jPr3tTPaTUlDuedHUJj0dU2DZTqz417Gd2hpbY:jr3tTPaQwedmaV7xGapbY","tlshash":"11b312888f1a3ee44ed4909b50e42c9f610a46d0cbe6998de506c78e2071dd1e6ee3df","first_seen":"2025-03-05T04:05:32.269637Z","last_seen":"2026-02-12T18:25:45.710492Z","times_seen":145,"resource_available":false,"data":null}},"time_used":129,"timings":{"blocked":44,"dns":1,"connect":1,"send":0,"wait":36,"receive":5,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.beverlyhillsmd.com/images/New_York_Post-logo@2x_opt.png","fqdn":"cdn.beverlyhillsmd.com","domain":"beverlyhillsmd.com","tld":"com"},"ip":{"addr":"104.18.36.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www3.totalmetabolicreset.com/video250902a_la_ap?origexperimentalOrig=true\u0026step=1\u0026funnelSTPId=a0qVo00000WbjCFIAZ\u0026origuidOrig=mr_db_vsl_a15_250902\u0026origspidOrig=null\u0026step=1\u0026origdsidOrig=\u0026origmainFunnelIdOrig=a0qVo00000WbmtKIAR\u0026origExternalOrig=true\u0026origExternalIDOrig=a0qVo00000WbmtKIAR\u0026genericUrl=video250902a_la_ap-mr_db_vsl_a15_250902\u0026orignameOrig=video250902a_la_ap-mr_db_vsl_a15_250902\u0026origbrandOrig=Beverly%20Hills%20MD\u0026business_unit=a00f400000jv55aaat\u0026utm_campaign=bhmd-db-metreset-cpaeml-all--250902\u0026utm_campaign_id=701Vo00000rCqdrIAC\u0026utm_content=3rd_party_email\u0026utm_source=email\u0026subid1=8398a1215b3d43708c54a4686e489f07\u0026subid2=16\u0026subid3=catmetaresetdonut1130\u0026subid5=everflow\u0026sessionid=936099273179","date":"2025-11-30T23:54:29.329Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"beverlyhillsmd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Nov 2025 04:02:31 GMT","end":"Thu, 12 Feb 2026 05:02:27 GMT"},"fingerprint":{"sha1":"44:DC:D2:57:95:63:FA:48:DE:C2:33:E4:0C:B9:EF:C4:C6:DF:75:5C","sha256":"81:97:E9:D9:50:B7:EB:5E:73:F1:2C:E5:5D:66:4F:CD:D0:EE:4B:D5:EC:37:72:AD:68:66:BA:86:57:33:9B:DB"}}},"request":{"raw":"GET /images/New_York_Post-logo@2x_opt.png HTTP/1.1\r\nHost: cdn.beverlyhillsmd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www3.totalmetabolicreset.com/\r\nCookie: __cf_bm=FwLozWfSFs8VrJv83bqs_yjNpFL5niCamk1FCMrgZuU-1764546868-1.0.1.1-YrmrUZEcRmUKfEOP4payh3pddXbCgNI6qeERyMqQiY8TCMDinBt7M_rlDM3k4gXuBofQ995adBoCFqC7P3s87h.MZ8wCXVhe7u5NxgOp4Qs\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 30 Nov 2025 23:54:29 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4992\r\ncf-ray: 9a6e452d4d28568e-OSL\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=5508\r\ncontent-disposition: inline; filename=\"New_York_Post-logo@2x_opt.webp\"\r\netag: \"11a1f08b207f43aaa962d46d5a31b3a3\"\r\nlast-modified: Tue, 14 Nov 2023 18:25:49 GMT\r\nvary: Accept\r\nx-amz-id-2: UZSLbGUTHPUjLcyA6l6+t9yESWf3UV6rRxwqZhk+lwsHh49rAUTz9o7UicfM7cyKeNS06wFFVNU=\r\nx-amz-request-id: 3RNED3THDZ4733AC\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: 5B4qjyXEzv8WpJek..0uN6mqLEwWodz4\r\ncf-cache-status: HIT\r\nage: 16\r\nexpires: Mon, 01 Dec 2025 03:54:29 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4992,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"26cbb85dc2d21a3b5d16bcd04934f21d","sha1":"a4af04b048dd67051322c07ac0d3034e72dffe9d","sha256":"61c5b8c151e9ef6a8947f181b59408a7ef48172d5841c0bef99e12909225607f","sha512":"294a527a5688696a85c056f5952102694e39d74cb1c293b53c628e6b7504476bce0928a464a8304714d55d61cc3f4ee3dfb062e9d3b6c6018272ae305573353b","ssdeep":"96:JFIym9/N2ARqn2+SbYY884n6xf/hFEN/fSv3YlkM:Jbm9/EIArY816xhmfSgL","tlshash":"b2a19fc87a7da30acb63fd10b70fb4cda65431b23886ac2448459cd84307c474477871","first_seen":"2025-03-01T23:29:46.992036Z","last_seen":"2026-02-12T18:25:45.702069Z","times_seen":170,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www3.totalmetabolicreset.com/styles.css?ver=1764094619562","fqdn":"www3.totalmetabolicreset.com","domain":"totalmetabolicreset.com","tld":"com"},"ip":{"addr":"172.64.149.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www3.totalmetabolicreset.com/video250902a_la_ap?origexperimentalOrig=true\u0026step=1\u0026funnelSTPId=a0qVo00000WbjCFIAZ\u0026origuidOrig=mr_db_vsl_a15_250902\u0026origspidOrig=null\u0026step=1\u0026origdsidOrig=\u0026origmainFunnelIdOrig=a0qVo00000WbmtKIAR\u0026origExternalOrig=true\u0026origExternalIDOrig=a0qVo00000WbmtKIAR\u0026genericUrl=video250902a_la_ap-mr_db_vsl_a15_250902\u0026orignameOrig=video250902a_la_ap-mr_db_vsl_a15_250902\u0026origbrandOrig=Beverly%20Hills%20MD\u0026business_unit=a00f400000jv55aaat\u0026utm_campaign=bhmd-db-metreset-cpaeml-all--250902\u0026utm_campaign_id=701Vo00000rCqdrIAC\u0026utm_content=3rd_party_email\u0026utm_source=email\u0026subid1=8398a1215b3d43708c54a4686e489f07\u0026subid2=16\u0026subid3=catmetaresetdonut1130\u0026subid5=everflow\u0026sessionid=936099273179","date":"2025-11-30T23:54:28.353Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"totalmetabolicreset.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 20:42:52 GMT","end":"Wed, 14 Jan 2026 21:42:41 GMT"},"fingerprint":{"sha1":"1A:08:7D:E4:80:5E:99:26:40:1D:85:3A:AE:9E:9A:65:4A:97:5E:A8","sha256":"B0:E0:A6:12:07:32:2F:E9:00:19:12:32:E5:53:D0:0B:8A:C7:FF:27:BC:F7:CE:2E:C5:E8:16:C9:14:17:A1:B0"}}},"request":{"raw":"GET /styles.css?ver=1764094619562 HTTP/1.1\r\nHost: www3.totalmetabolicreset.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www3.totalmetabolicreset.com/video250902a_la_ap?origexperimentalOrig=true\u0026step=1\u0026funnelSTPId=a0qVo00000WbjCFIAZ\u0026origuidOrig=mr_db_vsl_a15_250902\u0026origspidOrig=null\u0026step=1\u0026origdsidOrig=\u0026origmainFunnelIdOrig=a0qVo00000WbmtKIAR\u0026origExternalOrig=true\u0026origExternalIDOrig=a0qVo00000WbmtKIAR\u0026genericUrl=video250902a_la_ap-mr_db_vsl_a15_250902\u0026orignameOrig=video250902a_la_ap-mr_db_vsl_a15_250902\u0026origbrandOrig=Beverly%20Hills%20MD\u0026business_unit=a00f400000jv55aaat\u0026utm_campaign=bhmd-db-metreset-cpaeml-all--250902\u0026utm_campaign_id=701Vo00000rCqdrIAC\u0026utm_content=3rd_party_email\u0026utm_source=email\u0026subid1=8398a1215b3d43708c54a4686e489f07\u0026subid2=16\u0026subid3=catmetaresetdonut1130\u0026subid5=everflow\u0026sessionid=936099273179\r\nCookie: __cf_bm=K2G9mXA4YmQ_g7_1sv6FlSCruMObW3tb8uvEtdWzbf0-1764546868-1.0.1.1-q1IPWCjey2Q96xjkfLC3t5cpV9UeqEw0b.AsKCi33jibqZtR7QrPr2OQsi83SC2D17y2CK3MoFrA8oEhchKp8QklGny63gvlETjllx.VLJU\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 30 Nov 2025 23:54:28 GMT\r\ncontent-type: text/css; charset=UTF-8\r\ncontent-encoding: gzip\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\netag: W/\"36291-19abc3b8280\"\r\nexpires: 0\r\nlast-modified: Tue, 25 Nov 2025 18:16:48 GMT\r\npragma: no-cache\r\nvary: Accept-Encoding\r\nvia: 1.1 spaces-router (001c5eea6469)\r\nx-powered-by: Express\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\ncf-ray: 9a6e45272cff712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":221841,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"af671154a33b9cc22d2520f2392a5fb3","sha1":"f0b4e8dfb482e5d2cf27bc0b06b2ec51d72bd39e","sha256":"f3cd595de67cc8f1f65614aed88b9a7163112ee4cb9b44fe6321a96fff81db88","sha512":"6311eebc1a70f09373daf52e26df97a4e94722a33e17c39a75c4cc5640ab11e353f84862ee85c28e11093755104af6c15445eb6bb0526335e308f64a652120c3","ssdeep":"6144:Z8vWZR8hZ3s58lhXhGTgtg2WekGKDjmPHyGewAn/cqIezhk+1yP90zKtFmVryY8I:PPmYp2/8j","tlshash":"a324b65a9a05202abc2744fad0e0fe58dacdbc84df6396f5f1c11e2cc5ca9bb165db10","first_seen":"2025-11-30T23:54:43.490893Z","last_seen":"2025-11-30T23:55:04.999943Z","times_seen":3,"resource_available":false,"data":null}},"time_used":183,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":161,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.beverlyhillsmd.com/images/bravo_logo.png","fqdn":"cdn.beverlyhillsmd.com","domain":"beverlyhillsmd.com","tld":"com"},"ip":{"addr":"104.18.36.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www3.totalmetabolicreset.com/video250902a_la_ap?origexperimentalOrig=true\u0026step=1\u0026funnelSTPId=a0qVo00000WbjCFIAZ\u0026origuidOrig=mr_db_vsl_a15_250902\u0026origspidOrig=null\u0026step=1\u0026origdsidOrig=\u0026origmainFunnelIdOrig=a0qVo00000WbmtKIAR\u0026origExternalOrig=true\u0026origExternalIDOrig=a0qVo00000WbmtKIAR\u0026genericUrl=video250902a_la_ap-mr_db_vsl_a15_250902\u0026orignameOrig=video250902a_la_ap-mr_db_vsl_a15_250902\u0026origbrandOrig=Beverly%20Hills%20MD\u0026business_unit=a00f400000jv55aaat\u0026utm_campaign=bhmd-db-metreset-cpaeml-all--250902\u0026utm_campaign_id=701Vo00000rCqdrIAC\u0026utm_content=3rd_party_email\u0026utm_source=email\u0026subid1=8398a1215b3d43708c54a4686e489f07\u0026subid2=16\u0026subid3=catmetaresetdonut1130\u0026subid5=everflow\u0026sessionid=936099273179","date":"2025-11-30T23:54:29.323Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"beverlyhillsmd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Nov 2025 04:02:31 GMT","end":"Thu, 12 Feb 2026 05:02:27 GMT"},"fingerprint":{"sha1":"44:DC:D2:57:95:63:FA:48:DE:C2:33:E4:0C:B9:EF:C4:C6:DF:75:5C","sha256":"81:97:E9:D9:50:B7:EB:5E:73:F1:2C:E5:5D:66:4F:CD:D0:EE:4B:D5:EC:37:72:AD:68:66:BA:86:57:33:9B:DB"}}},"request":{"raw":"GET /images/bravo_logo.png HTTP/1.1\r\nHost: cdn.beverlyhillsmd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www3.totalmetabolicreset.com/\r\nCookie: __cf_bm=FwLozWfSFs8VrJv83bqs_yjNpFL5niCamk1FCMrgZuU-1764546868-1.0.1.1-YrmrUZEcRmUKfEOP4payh3pddXbCgNI6qeERyMqQiY8TCMDinBt7M_rlDM3k4gXuBofQ995adBoCFqC7P3s87h.MZ8wCXVhe7u5NxgOp4Qs\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 30 Nov 2025 23:54:29 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4408\r\ncf-ray: 9a6e452d3d23568e-OSL\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=5458\r\ncontent-disposition: inline; filename=\"bravo_logo.webp\"\r\netag: \"a7d79f72ec4a2a7e061334f08a8cf294\"\r\nlast-modified: Tue, 07 Nov 2023 17:50:02 GMT\r\nvary: Accept\r\nx-amz-id-2: M/6kA+MSj+fflkV3eRAOcPiTZynySzpY7e5+Ow+YiqokiB+u1uA+aiABFJJjuTfT9v8V4q1OXds=\r\nx-amz-request-id: 3RNFR38P9Z8K96K2\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: btSyR_ZxYCkmYH_UhPKjCWd3n6LNfFma\r\ncf-cache-status: HIT\r\nage: 16\r\nexpires: Mon, 01 Dec 2025 03:54:29 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4408,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"47a62131dd13f2a842c5373108668a70","sha1":"66fc808f7ece41d63e4bb7a20fe3f1ac8b7b9f7e","sha256":"ecfe990d1b4d92ca025ebbec41fb28c77ce72c9ed141e71dd74bcc928ee098c4","sha512":"c7f92c36a960c751f01c54bbe04738b8da37066a19986025442869f1f86b8ad270aeea89917fe7fabaee319bcbf832960f6cc48c2c5126e7ed78066858887a2a","ssdeep":"96:qy+k80P/nsTNFLYOFaC7eOuMoqWbNnoBhVCx:qy+k9P/CvsOFB7HuMojj","tlshash":"92919f9d463c61efdcc56951b34414cb8ab374b9913637066404fde6d23c483bc9675b","first_seen":"2025-03-05T04:05:32.259244Z","last_seen":"2026-02-12T18:25:45.706222Z","times_seen":167,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.beverlyhillsmd.com/images/Life\u0026Style-logo_opt.png","fqdn":"cdn.beverlyhillsmd.com","domain":"beverlyhillsmd.com","tld":"com"},"ip":{"addr":"104.18.36.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www3.totalmetabolicreset.com/video250902a_la_ap?origexperimentalOrig=true\u0026step=1\u0026funnelSTPId=a0qVo00000WbjCFIAZ\u0026origuidOrig=mr_db_vsl_a15_250902\u0026origspidOrig=null\u0026step=1\u0026origdsidOrig=\u0026origmainFunnelIdOrig=a0qVo00000WbmtKIAR\u0026origExternalOrig=true\u0026origExternalIDOrig=a0qVo00000WbmtKIAR\u0026genericUrl=video250902a_la_ap-mr_db_vsl_a15_250902\u0026orignameOrig=video250902a_la_ap-mr_db_vsl_a15_250902\u0026origbrandOrig=Beverly%20Hills%20MD\u0026business_unit=a00f400000jv55aaat\u0026utm_campaign=bhmd-db-metreset-cpaeml-all--250902\u0026utm_campaign_id=701Vo00000rCqdrIAC\u0026utm_content=3rd_party_email\u0026utm_source=email\u0026subid1=8398a1215b3d43708c54a4686e489f07\u0026subid2=16\u0026subid3=catmetaresetdonut1130\u0026subid5=everflow\u0026sessionid=936099273179","date":"2025-11-30T23:54:29.335Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"beverlyhillsmd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Nov 2025 04:02:31 GMT","end":"Thu, 12 Feb 2026 05:02:27 GMT"},"fingerprint":{"sha1":"44:DC:D2:57:95:63:FA:48:DE:C2:33:E4:0C:B9:EF:C4:C6:DF:75:5C","sha256":"81:97:E9:D9:50:B7:EB:5E:73:F1:2C:E5:5D:66:4F:CD:D0:EE:4B:D5:EC:37:72:AD:68:66:BA:86:57:33:9B:DB"}}},"request":{"raw":"GET /images/Life\u0026Style-logo_opt.png HTTP/1.1\r\nHost: cdn.beverlyhillsmd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www3.totalmetabolicreset.com/\r\nCookie: __cf_bm=FwLozWfSFs8VrJv83bqs_yjNpFL5niCamk1FCMrgZuU-1764546868-1.0.1.1-YrmrUZEcRmUKfEOP4payh3pddXbCgNI6qeERyMqQiY8TCMDinBt7M_rlDM3k4gXuBofQ995adBoCFqC7P3s87h.MZ8wCXVhe7u5NxgOp4Qs\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 30 Nov 2025 23:54:29 GMT\r\ncontent-type: image/webp\r\ncontent-length: 8092\r\ncf-ray: 9a6e452d4d2b568e-OSL\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=13997\r\ncontent-disposition: inline; filename=\"Life\u0026Style-logo_opt.webp\"\r\netag: \"6341592f558b75eff07adc07c8438b2e\"\r\nlast-modified: Tue, 07 Nov 2023 14:37:41 GMT\r\nvary: Accept\r\nx-amz-id-2: P8iR2Sp2gwT9qkqa9+YnyDTkqOG0R6GOMDHNApO50iGR/7LAVZClY+Nnu5Bw2Gp4pwug+oUfuJE=\r\nx-amz-request-id: 3RNF8RY080D64CN5\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: jRlAc62C5jeC8D6rFMo8fjnpyG.KMdl.\r\ncf-cache-status: HIT\r\nage: 17\r\nexpires: Mon, 01 Dec 2025 03:54:29 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":8092,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"74d2094ee67754889c214bacd3116836","sha1":"c0166c88aafc80e8ce11d8069a8f479476cbce92","sha256":"ad79f5b0df8f52b38a96cc3ea975e992b8a1b7dd57f47500c9f42a29ac2fce62","sha512":"523543e65f561c8f71eb472f6ee73a74fa3299e90a1ff7a6cd5df49ad1b4d57be51c85b3e0479c75b82fe7731c58579b85ca492b536fb9269e0eb1109d8e90b0","ssdeep":"192:2r3SrxnLhExxV6UxRMRBKehfLE7F2xTlUGRqoPWENNu:2r3OnLhExv6Ub8K0fLzfqMWEu","tlshash":"9df19e2b5e75a5fa7bb53f881d222e3b57b401fa8eba1700703946f330f69199801533","first_seen":"2024-08-20T15:08:30.799007Z","last_seen":"2026-02-12T18:25:45.711071Z","times_seen":191,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.beverlyhillsmd.com/fonts/LibreFranklin-VariableFont_wght.ttf","fqdn":"cdn.beverlyhillsmd.com","domain":"beverlyhillsmd.com","tld":"com"},"ip":{"addr":"104.18.36.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www3.totalmetabolicreset.com/video250902a_la_ap?origexperimentalOrig=true\u0026step=1\u0026funnelSTPId=a0qVo00000WbjCFIAZ\u0026origuidOrig=mr_db_vsl_a15_250902\u0026origspidOrig=null\u0026step=1\u0026origdsidOrig=\u0026origmainFunnelIdOrig=a0qVo00000WbmtKIAR\u0026origExternalOrig=true\u0026origExternalIDOrig=a0qVo00000WbmtKIAR\u0026genericUrl=video250902a_la_ap-mr_db_vsl_a15_250902\u0026orignameOrig=video250902a_la_ap-mr_db_vsl_a15_250902\u0026origbrandOrig=Beverly%20Hills%20MD\u0026business_unit=a00f400000jv55aaat\u0026utm_campaign=bhmd-db-metreset-cpaeml-all--250902\u0026utm_campaign_id=701Vo00000rCqdrIAC\u0026utm_content=3rd_party_email\u0026utm_source=email\u0026subid1=8398a1215b3d43708c54a4686e489f07\u0026subid2=16\u0026subid3=catmetaresetdonut1130\u0026subid5=everflow\u0026sessionid=936099273179","date":"2025-11-30T23:54:29.466Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"beverlyhillsmd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Nov 2025 04:02:31 GMT","end":"Thu, 12 Feb 2026 05:02:27 GMT"},"fingerprint":{"sha1":"44:DC:D2:57:95:63:FA:48:DE:C2:33:E4:0C:B9:EF:C4:C6:DF:75:5C","sha256":"81:97:E9:D9:50:B7:EB:5E:73:F1:2C:E5:5D:66:4F:CD:D0:EE:4B:D5:EC:37:72:AD:68:66:BA:86:57:33:9B:DB"}}},"request":{"raw":"GET /fonts/LibreFranklin-VariableFont_wght.ttf HTTP/1.1\r\nHost: cdn.beverlyhillsmd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www3.totalmetabolicreset.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www3.totalmetabolicreset.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 30 Nov 2025 23:54:29 GMT\r\ncontent-type: binary/octet-stream\r\ncontent-length: 103512\r\ncf-ray: 9a6e452e1d87568e-OSL\r\nx-amz-id-2: ofx9T2hY1grG9InlNEOy4ccurQz5YKPaglr+nG1yS0c+Oiq26+nGp0YDZQ0yD3bi2tHTsL6yis4=\r\nx-amz-request-id: KEAYT1QRDTEF3RKC\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding\r\nlast-modified: Fri, 29 Dec 2023 01:18:09 GMT\r\netag: \"99bb071fcb1c3001c785f659bfbfdbf2\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: BPHL8lxWaoIch.8XyQt24pxSzpd_V89v\r\ncf-cache-status: HIT\r\nage: 17\r\nexpires: Mon, 01 Dec 2025 03:54:29 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nset-cookie: __cf_bm=MODKT55ynfIy0_yG39F.uzkcuqSBlJBeUkicgEVo5IU-1764546869-1.0.1.1-duyWMxEqj3qOo_ItOpFbShTQP6472njSOMlt3upYiF.0OWdSvfIWD5FVJJ1nIYEtEUAn8iVCQfcJhVMKIlHJwkuOz5wYndojHGOGXDPc9vw; path=/; expires=Mon, 01-Dec-25 00:24:29 GMT; domain=.beverlyhillsmd.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":103512,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"TrueType Font data, 20 tables, 1st \"GDEF\", 39 names, Microsoft, language 0x409, Copyright 2020 The LibreFranklin Project Authors (https://github.com/impallari/Libre-Franklin)Li","md5":"99bb071fcb1c3001c785f659bfbfdbf2","sha1":"3c8539021a2166ffe6b5ff850cd14130917df59a","sha256":"74cd5d0e9046a8861aa90c5e1b254092a94b8bc1916e6a34ecf8180dcc84fed4","sha512":"a781ed9797ed705e6d7c982b5d3d904989c5512c28787cf47b45a1ab39ca70bc1ff23bef90c3ca77f6dd0318dc8cabdcc28ad0c69435ea23f9328e9deaaa8a92","ssdeep":"1536:W37mAMXKhept0Et/C8ym2VEJ2N7zKlHJurqboZEF7n/e:WrmTX70WwXV1Nasqc+7nm","tlshash":"d8a36c027fa2dfabe4112ffc94a647915739fd01fe02860f5111ba39ac663729d016eb","first_seen":"2023-12-29T20:21:30Z","last_seen":"2026-04-01T12:49:24.100204Z","times_seen":338,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www2.totalmetabolicreset.com/assets/content/events.json?callback=processEvents","fqdn":"www2.totalmetabolicreset.com","domain":"totalmetabolicreset.com","tld":"com"},"ip":{"addr":"172.64.149.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www3.totalmetabolicreset.com/video250902a_la_ap?origexperimentalOrig=true\u0026step=1\u0026funnelSTPId=a0qVo00000WbjCFIAZ\u0026origuidOrig=mr_db_vsl_a15_250902\u0026origspidOrig=null\u0026step=1\u0026origdsidOrig=\u0026origmainFunnelIdOrig=a0qVo00000WbmtKIAR\u0026origExternalOrig=true\u0026origExternalIDOrig=a0qVo00000WbmtKIAR\u0026genericUrl=video250902a_la_ap-mr_db_vsl_a15_250902\u0026orignameOrig=video250902a_la_ap-mr_db_vsl_a15_250902\u0026origbrandOrig=Beverly%20Hills%20MD\u0026business_unit=a00f400000jv55aaat\u0026utm_campaign=bhmd-db-metreset-cpaeml-all--250902\u0026utm_campaign_id=701Vo00000rCqdrIAC\u0026utm_content=3rd_party_email\u0026utm_source=email\u0026subid1=8398a1215b3d43708c54a4686e489f07\u0026subid2=16\u0026subid3=catmetaresetdonut1130\u0026subid5=everflow\u0026sessionid=936099273179","date":"2025-11-30T23:54:30.253Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"totalmetabolicreset.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 20:42:52 GMT","end":"Wed, 14 Jan 2026 21:42:41 GMT"},"fingerprint":{"sha1":"1A:08:7D:E4:80:5E:99:26:40:1D:85:3A:AE:9E:9A:65:4A:97:5E:A8","sha256":"B0:E0:A6:12:07:32:2F:E9:00:19:12:32:E5:53:D0:0B:8A:C7:FF:27:BC:F7:CE:2E:C5:E8:16:C9:14:17:A1:B0"}}},"request":{"raw":"GET /assets/content/events.json?callback=processEvents HTTP/1.1\r\nHost: www2.totalmetabolicreset.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www3.totalmetabolicreset.com/\r\nCookie: __cf_bm=K2G9mXA4YmQ_g7_1sv6FlSCruMObW3tb8uvEtdWzbf0-1764546868-1.0.1.1-q1IPWCjey2Q96xjkfLC3t5cpV9UeqEw0b.AsKCi33jibqZtR7QrPr2OQsi83SC2D17y2CK3MoFrA8oEhchKp8QklGny63gvlETjllx.VLJU; tcrFed=false; alternaiGuestId=e5e5b94d-0325-45a4-92e6-0c76b86862cf,www3.totalmetabolicreset.com,,blob:https:; _csrf=NCyXh9F-dXZ9YOz_Wdt1VIi0; XSRF-TOKEN=9A3HJKbo-IwsEBBe83SueB-tIvllgjlPmBOo\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 30 Nov 2025 23:54:30 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 560\r\ncf-ray: 9a6e45331ac5712b-OSL\r\ncontent-encoding: gzip\r\netag: W/\"1107-Vb9XAK+ozcuRSBUTi9ykVyKHInA\"\r\nset-cookie: XSRF-TOKEN=5FFdSrQE-BMkb8_HPEchNmwItB6wCo1YQ4vo; Path=/; Secure\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nvary: Accept-Encoding\r\nvia: 1.1 spaces-router (001c5eea6469)\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4359,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (4359), with no line terminators","md5":"76665a314c0ba96363766b3779f88716","sha1":"55bf5700afa8cdcb914815138bdca45722872270","sha256":"a57cf3b27f85ac74cc6997a70d11a3980170b156edceba9af0d723e69e25e45b","sha512":"8fe2fe7b8f379dcc243330ade56570ecc63d8db916159ec2557746481b10f5e96b93f5b6d8ab5d4f7094f09a79f6a03dc1b15cad20908f456c40cc7e65e2a97c","ssdeep":"48:JhG3hYmBhG3hiA3hpPg3h03hg3hH3hLiQI3hjQt3hcI3hct3h4oJ7:JhqBhTvUDt","tlshash":"10914c9da4301dff0abee9b26c5a18cde06050dbe3de4d6536c9a8155c84a9cc323d6f","first_seen":"2024-04-08T00:55:18Z","last_seen":"2026-04-03T06:11:11.709007Z","times_seen":1683,"resource_available":true,"data":null}},"time_used":131,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":131,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"funnel-config-loader.ghm.cloud/getFunnelById?mainFunnelId=a0qVo00000WbmtKIAR","fqdn":"funnel-config-loader.ghm.cloud","domain":"ghm.cloud","tld":"cloud"},"ip":{"addr":"172.66.43.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www3.totalmetabolicreset.com/video250902a_la_ap?origexperimentalOrig=true\u0026step=1\u0026funnelSTPId=a0qVo00000WbjCFIAZ\u0026origuidOrig=mr_db_vsl_a15_250902\u0026origspidOrig=null\u0026step=1\u0026origdsidOrig=\u0026origmainFunnelIdOrig=a0qVo00000WbmtKIAR\u0026origExternalOrig=true\u0026origExternalIDOrig=a0qVo00000WbmtKIAR\u0026genericUrl=video250902a_la_ap-mr_db_vsl_a15_250902\u0026orignameOrig=video250902a_la_ap-mr_db_vsl_a15_250902\u0026origbrandOrig=Beverly%20Hills%20MD\u0026business_unit=a00f400000jv55aaat\u0026utm_campaign=bhmd-db-metreset-cpaeml-all--250902\u0026utm_campaign_id=701Vo00000rCqdrIAC\u0026utm_content=3rd_party_email\u0026utm_source=email\u0026subid1=8398a1215b3d43708c54a4686e489f07\u0026subid2=16\u0026subid3=catmetaresetdonut1130\u0026subid5=everflow\u0026sessionid=936099273179","date":"2025-11-30T23:54:29.208Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ghm.cloud","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Nov 2025 17:59:28 GMT","end":"Sun, 01 Feb 2026 18:59:18 GMT"},"fingerprint":{"sha1":"46:9F:8A:11:2F:0E:C0:67:89:46:74:E2:36:06:D0:53:86:54:71:B1","sha256":"0F:AB:99:89:79:19:A3:7A:12:BA:7D:C1:66:E5:68:9D:94:29:EA:BB:AE:FB:FB:6B:CD:3F:43:61:75:1F:56:2C"}}},"request":{"raw":"GET /getFunnelById?mainFunnelId=a0qVo00000WbmtKIAR HTTP/1.1\r\nHost: funnel-config-loader.ghm.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www3.totalmetabolicreset.com/\r\nbrand: Beverly Hills MD\r\nOrigin: https://www3.totalmetabolicreset.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 30 Nov 2025 23:54:29 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: *\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"52d-4nJ3ADr61yS2wssstXOeKFbt4gY\"\r\nvia: 1.1 spaces-router (001c5eea6469)\r\nx-powered-by: Express\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4UQCWXI%2BtEaeQdi78VA2Ul0sNqdIDQaglmXcYxQXhrnirEX4blJ5ePwg62VYq6QFvSdGCtLCA5ro4O5J3LieqghcSwPwWl6c0FzaGvH0MsqsccGQN7ekf3%2FndQ%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nserver: cloudflare\r\nset-cookie: __cf_bm=CAUPwR4y3helmssd7E_wsLdwovStPWIGKtwlzQteA4s-1764546869.1788692-1.0.1.1-gsW8c25apPTocKyOLUvtq0TxzFZEsO9Y4nRusA9D8k0Xvy6jMTD7jTzA41x6gGCYGewF20M_wtz5OMDwhzRLh3YRkmzdYbLOBTT7saL2bPI7PlF45bbtQBNNrEy8Q6n_; HttpOnly; Secure; Path=/; Domain=ghm.cloud; Expires=Mon, 01 Dec 2025 00:24:29 GMT\r\ncf-ray: 9a6e452c5e755694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1325,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"990d704d575959fe20744b5f643a22b0","sha1":"e27277003afad724b6c2cb2cb5739e2856ede206","sha256":"6091750ad93d146fd756037889dc6be17f95115eb147998a97bf5ad0cf4db789","sha512":"e53d666fd03d3710683d9edbaef0974e542493fd54f2c4d05053dcc5c69df3dc2d7213d931fe0136328e722616bff08a53b81359e49d11f4f9a8c54c123ea2aa","ssdeep":"","tlshash":"952137485b11397cde9593e89fb9fb0f510878a891dc483d18fcba8c0b648a64329743","first_seen":"2025-11-30T23:54:43.406465Z","last_seen":"2025-11-30T23:55:05.017572Z","times_seen":3,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"innerskinresearch.com/images/BHMDLogo.png","fqdn":"innerskinresearch.com","domain":"innerskinresearch.com","tld":"com"},"ip":{"addr":"172.64.145.52","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www3.totalmetabolicreset.com/video250902a_la_ap?origexperimentalOrig=true\u0026step=1\u0026funnelSTPId=a0qVo00000WbjCFIAZ\u0026origuidOrig=mr_db_vsl_a15_250902\u0026origspidOrig=null\u0026step=1\u0026origdsidOrig=\u0026origmainFunnelIdOrig=a0qVo00000WbmtKIAR\u0026origExternalOrig=true\u0026origExternalIDOrig=a0qVo00000WbmtKIAR\u0026genericUrl=video250902a_la_ap-mr_db_vsl_a15_250902\u0026orignameOrig=video250902a_la_ap-mr_db_vsl_a15_250902\u0026origbrandOrig=Beverly%20Hills%20MD\u0026business_unit=a00f400000jv55aaat\u0026utm_campaign=bhmd-db-metreset-cpaeml-all--250902\u0026utm_campaign_id=701Vo00000rCqdrIAC\u0026utm_content=3rd_party_email\u0026utm_source=email\u0026subid1=8398a1215b3d43708c54a4686e489f07\u0026subid2=16\u0026subid3=catmetaresetdonut1130\u0026subid5=everflow\u0026sessionid=936099273179","date":"2025-11-30T23:54:29.278Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"innerskinresearch.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Nov 2025 04:05:01 GMT","end":"Thu, 19 Feb 2026 05:04:41 GMT"},"fingerprint":{"sha1":"B3:62:27:86:06:F8:42:86:F6:90:4B:FD:3A:28:E3:90:3D:67:8B:78","sha256":"0C:29:3C:DE:96:A0:11:2B:CC:17:E8:77:29:A8:10:83:58:7D:FD:20:F9:DE:B9:3C:67:E0:77:F0:4A:EC:B6:D9"}}},"request":{"raw":"GET /images/BHMDLogo.png HTTP/1.1\r\nHost: innerskinresearch.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www3.totalmetabolicreset.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 30 Nov 2025 23:54:29 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4722\r\nserver: cloudflare\r\ncf-ray: 9a6e452d397ea41f-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 17\r\ncache-control: public, max-age=3600\r\ncontent-disposition: inline; filename=\"BHMDLogo.webp\"\r\netag: \"33d0-644ad34ac4500\"\r\nexpires: Mon, 01 Dec 2025 00:54:29 GMT\r\nlast-modified: Fri, 28 Nov 2025 20:09:24 GMT\r\nvary: Accept, Accept-Encoding\r\nvia: 1.1 heroku-router\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: origFmt=png, origSize=13264\r\nnel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nreport-to: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=6VAaU0TdBr67vUmZ5n9RW5AWzjOfBiQ%2Fqhy1%2FykURmA%3D\\u0026sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6\\u0026ts=1764363282\"}],\"max_age\":3600}\r\nreporting-endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=6VAaU0TdBr67vUmZ5n9RW5AWzjOfBiQ%2Fqhy1%2FykURmA%3D\u0026sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6\u0026ts=1764363282\"\r\nset-cookie: __cf_bm=catBbbGuyAfNUy.H9_bsuXzawr4B9wR9RgrvJ7taXkk-1764546869-1.0.1.1-V562FKIOdls3tF_da6I2VTK5nKpXEO4ZoAF6AkvDqjsLb2q2DJlcehhPyVZN2kELlXdDI1dV_bou8n1AO5EayWLGpCEE5eKeCHg3h3T4cZk; path=/; expires=Mon, 01-Dec-25 00:24:29 GMT; domain=.innerskinresearch.com; HttpOnly; Secure; SameSite=None\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":4722,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a979d91131f7c9a1b00cbedf348784c1","sha1":"344c10705fc37f5ff41d977ed5633b310019123e","sha256":"696af45c10e22ede3c27ac71e9b5d2979e85bd8a3ed5c9fc1d985b556fd99ffe","sha512":"f7d24f69679e00463789e6457ec037f34bb92398f19aa0240978b2bd9f4297eb274f215f5192a37074d17157fe250b89237817142fccdb4d208b850b66f0a76e","ssdeep":"96:iJNUwwkxJwKdzWKKa2qe6/W8t2SvtdnltTDp47ePOtQ2ti0rcVPLFpX+/YM:i/Uw+uhKu1UYvnllV41DtlqPLFFPM","tlshash":"93a18ec6fa50a1253af111e9e24257030230caf4bc4ff95156459fd2a1a8a71fbdc0db","first_seen":"2024-08-20T15:08:30.793746Z","last_seen":"2026-02-12T18:25:45.69697Z","times_seen":142,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":43,"dns":0,"connect":1,"send":0,"wait":32,"receive":0,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.beverlyhillsmd.com/images/Insider-logo@2x_opt.png","fqdn":"cdn.beverlyhillsmd.com","domain":"beverlyhillsmd.com","tld":"com"},"ip":{"addr":"104.18.36.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www3.totalmetabolicreset.com/video250902a_la_ap?origexperimentalOrig=true\u0026step=1\u0026funnelSTPId=a0qVo00000WbjCFIAZ\u0026origuidOrig=mr_db_vsl_a15_250902\u0026origspidOrig=null\u0026step=1\u0026origdsidOrig=\u0026origmainFunnelIdOrig=a0qVo00000WbmtKIAR\u0026origExternalOrig=true\u0026origExternalIDOrig=a0qVo00000WbmtKIAR\u0026genericUrl=video250902a_la_ap-mr_db_vsl_a15_250902\u0026orignameOrig=video250902a_la_ap-mr_db_vsl_a15_250902\u0026origbrandOrig=Beverly%20Hills%20MD\u0026business_unit=a00f400000jv55aaat\u0026utm_campaign=bhmd-db-metreset-cpaeml-all--250902\u0026utm_campaign_id=701Vo00000rCqdrIAC\u0026utm_content=3rd_party_email\u0026utm_source=email\u0026subid1=8398a1215b3d43708c54a4686e489f07\u0026subid2=16\u0026subid3=catmetaresetdonut1130\u0026subid5=everflow\u0026sessionid=936099273179","date":"2025-11-30T23:54:29.332Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"beverlyhillsmd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Nov 2025 04:02:31 GMT","end":"Thu, 12 Feb 2026 05:02:27 GMT"},"fingerprint":{"sha1":"44:DC:D2:57:95:63:FA:48:DE:C2:33:E4:0C:B9:EF:C4:C6:DF:75:5C","sha256":"81:97:E9:D9:50:B7:EB:5E:73:F1:2C:E5:5D:66:4F:CD:D0:EE:4B:D5:EC:37:72:AD:68:66:BA:86:57:33:9B:DB"}}},"request":{"raw":"GET /images/Insider-logo@2x_opt.png HTTP/1.1\r\nHost: cdn.beverlyhillsmd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www3.totalmetabolicreset.com/\r\nCookie: __cf_bm=FwLozWfSFs8VrJv83bqs_yjNpFL5niCamk1FCMrgZuU-1764546868-1.0.1.1-YrmrUZEcRmUKfEOP4payh3pddXbCgNI6qeERyMqQiY8TCMDinBt7M_rlDM3k4gXuBofQ995adBoCFqC7P3s87h.MZ8wCXVhe7u5NxgOp4Qs\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 30 Nov 2025 23:54:29 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1728\r\ncf-ray: 9a6e452d4d29568e-OSL\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=2013\r\ncontent-disposition: inline; filename=\"Insider-logo@2x_opt.webp\"\r\netag: \"9faf09596c8659a1c693581ec4b66ac2\"\r\nlast-modified: Tue, 07 Nov 2023 14:37:39 GMT\r\nvary: Accept\r\nx-amz-id-2: PZxYQ8nHH6pbhnPlxblASUjhkVHpMk/Y2/ETBfxol1FEXIKccQQS9YMI8bB9t1QRCq+dBtATaeY=\r\nx-amz-request-id: 3RNFEM1HT87WCTJ0\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: 1GhLHJbP2__2nbU8NUpUAHr_.DKn9DyY\r\ncf-cache-status: HIT\r\nage: 17\r\nexpires: Mon, 01 Dec 2025 03:54:29 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1728,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"80e2601e4e4f95976c23412849eaf98f","sha1":"3fd2772df281a998f4dca3fa9c43f7e6b63d7792","sha256":"ccdd4a9ccfd76aba2ce79bc584cb4c20a2791d000b7798faef398059c9cff2b0","sha512":"e52c51838c4bc7db1d6ee49d0b8b8bfc233e2db10fe783907eafc533037d4ba4db8168ce0183a8c19fe468eec9d70e9f309dbd46c0a137e53bb308a6ef52728a","ssdeep":"","tlshash":"8a311a23c8940e5b45a8194dec951c83d02faa3cc67f203e3d469dd2cb1eacfd15845a","first_seen":"2023-12-01T16:59:20Z","last_seen":"2026-02-12T18:25:45.706755Z","times_seen":196,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.beverlyhillsmd.com/images/NBC_logo_opt.png","fqdn":"cdn.beverlyhillsmd.com","domain":"beverlyhillsmd.com","tld":"com"},"ip":{"addr":"104.18.36.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www3.totalmetabolicreset.com/video250902a_la_ap?origexperimentalOrig=true\u0026step=1\u0026funnelSTPId=a0qVo00000WbjCFIAZ\u0026origuidOrig=mr_db_vsl_a15_250902\u0026origspidOrig=null\u0026step=1\u0026origdsidOrig=\u0026origmainFunnelIdOrig=a0qVo00000WbmtKIAR\u0026origExternalOrig=true\u0026origExternalIDOrig=a0qVo00000WbmtKIAR\u0026genericUrl=video250902a_la_ap-mr_db_vsl_a15_250902\u0026orignameOrig=video250902a_la_ap-mr_db_vsl_a15_250902\u0026origbrandOrig=Beverly%20Hills%20MD\u0026business_unit=a00f400000jv55aaat\u0026utm_campaign=bhmd-db-metreset-cpaeml-all--250902\u0026utm_campaign_id=701Vo00000rCqdrIAC\u0026utm_content=3rd_party_email\u0026utm_source=email\u0026subid1=8398a1215b3d43708c54a4686e489f07\u0026subid2=16\u0026subid3=catmetaresetdonut1130\u0026subid5=everflow\u0026sessionid=936099273179","date":"2025-11-30T23:54:29.337Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"beverlyhillsmd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Nov 2025 04:02:31 GMT","end":"Thu, 12 Feb 2026 05:02:27 GMT"},"fingerprint":{"sha1":"44:DC:D2:57:95:63:FA:48:DE:C2:33:E4:0C:B9:EF:C4:C6:DF:75:5C","sha256":"81:97:E9:D9:50:B7:EB:5E:73:F1:2C:E5:5D:66:4F:CD:D0:EE:4B:D5:EC:37:72:AD:68:66:BA:86:57:33:9B:DB"}}},"request":{"raw":"GET /images/NBC_logo_opt.png HTTP/1.1\r\nHost: cdn.beverlyhillsmd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www3.totalmetabolicreset.com/\r\nCookie: __cf_bm=FwLozWfSFs8VrJv83bqs_yjNpFL5niCamk1FCMrgZuU-1764546868-1.0.1.1-YrmrUZEcRmUKfEOP4payh3pddXbCgNI6qeERyMqQiY8TCMDinBt7M_rlDM3k4gXuBofQ995adBoCFqC7P3s87h.MZ8wCXVhe7u5NxgOp4Qs\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 30 Nov 2025 23:54:29 GMT\r\ncontent-type: image/webp\r\ncontent-length: 932\r\ncf-ray: 9a6e452d4d2e568e-OSL\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=1195\r\ncontent-disposition: inline; filename=\"NBC_logo_opt.webp\"\r\netag: \"75588c32a1b94ec91e0196fa0d684b29\"\r\nlast-modified: Tue, 07 Nov 2023 14:37:43 GMT\r\nvary: Accept\r\nx-amz-id-2: uAqcF67sZSrXCwoTMEJJVpiygcpsN9PDtpIQG0jT2Pj/lUDdB3pUvN52q/xGrLHQtfcU1aiXEwc=\r\nx-amz-request-id: 3RN4ZXQWKGXCE7NR\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: IROPdiJnxOVPhiEIYUvZB5u3wxnwy6SL\r\ncf-cache-status: HIT\r\nage: 17\r\nexpires: Mon, 01 Dec 2025 03:54:29 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":932,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f5521410edbbfbf1847f14d1ebff6c9f","sha1":"04632eb95de508a31999811abcbf8be8f56532ec","sha256":"cfcfe53d65b6ab172348f56e7bd58e4722ffbf5fb83e1c7e8d33b256ff6d67bc","sha512":"cfccac6ec1fd014f4db130be14991351acd6318a8b060b36c2f4b9d3acd833035d75b0e1b60e29f20b6d9287292622e42b859f0e7ad85314e021898f6b2f85ed","ssdeep":"","tlshash":"7411c8f0492686bd440008a3266f71933945e0d7436e342a14ad0f4af36df750a328ff","first_seen":"2024-08-20T15:08:30.79798Z","last_seen":"2026-02-12T18:25:45.697566Z","times_seen":168,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.beverlyhillsmd.com/fonts/LibreFranklin-Bold.ttf","fqdn":"cdn.beverlyhillsmd.com","domain":"beverlyhillsmd.com","tld":"com"},"ip":{"addr":"104.18.36.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www3.totalmetabolicreset.com/video250902a_la_ap?origexperimentalOrig=true\u0026step=1\u0026funnelSTPId=a0qVo00000WbjCFIAZ\u0026origuidOrig=mr_db_vsl_a15_250902\u0026origspidOrig=null\u0026step=1\u0026origdsidOrig=\u0026origmainFunnelIdOrig=a0qVo00000WbmtKIAR\u0026origExternalOrig=true\u0026origExternalIDOrig=a0qVo00000WbmtKIAR\u0026genericUrl=video250902a_la_ap-mr_db_vsl_a15_250902\u0026orignameOrig=video250902a_la_ap-mr_db_vsl_a15_250902\u0026origbrandOrig=Beverly%20Hills%20MD\u0026business_unit=a00f400000jv55aaat\u0026utm_campaign=bhmd-db-metreset-cpaeml-all--250902\u0026utm_campaign_id=701Vo00000rCqdrIAC\u0026utm_content=3rd_party_email\u0026utm_source=email\u0026subid1=8398a1215b3d43708c54a4686e489f07\u0026subid2=16\u0026subid3=catmetaresetdonut1130\u0026subid5=everflow\u0026sessionid=936099273179","date":"2025-11-30T23:54:29.511Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"beverlyhillsmd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Nov 2025 04:02:31 GMT","end":"Thu, 12 Feb 2026 05:02:27 GMT"},"fingerprint":{"sha1":"44:DC:D2:57:95:63:FA:48:DE:C2:33:E4:0C:B9:EF:C4:C6:DF:75:5C","sha256":"81:97:E9:D9:50:B7:EB:5E:73:F1:2C:E5:5D:66:4F:CD:D0:EE:4B:D5:EC:37:72:AD:68:66:BA:86:57:33:9B:DB"}}},"request":{"raw":"GET /fonts/LibreFranklin-Bold.ttf HTTP/1.1\r\nHost: cdn.beverlyhillsmd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www3.totalmetabolicreset.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www3.totalmetabolicreset.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 30 Nov 2025 23:54:29 GMT\r\ncontent-type: binary/octet-stream\r\ncontent-length: 63444\r\ncf-ray: 9a6e452e4d9e568e-OSL\r\nx-amz-id-2: tx64IaKMQHCU0YG1A0JmNmBK6XpPBKVG60zKG8uRQgL8edCxfM4tCJctAfELdmF61nP7febUQvoOLry8rFcGYA==\r\nx-amz-request-id: 3VTGE8M6F3TCPR1W\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding\r\nlast-modified: Wed, 23 Aug 2023 19:01:19 GMT\r\netag: \"7fc937a2d0fba610ccef5b11596f6731\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: null\r\ncf-cache-status: HIT\r\nage: 16\r\nexpires: Mon, 01 Dec 2025 03:54:29 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nset-cookie: __cf_bm=mcyUWQ9NUPE3OU4aPS6PzLGu4g3Uu5HeTAMQ0Au2z5I-1764546869-1.0.1.1-6mPez_jU3ziSzBlEQNq1aTXsnl72K3LS_R_0T0dzz9lDoZM32siv5xWkvvI97xmj0BJV2ieyoStdMp5Y_T8OuxrGb4tIPuxzFcU4MadaraA; path=/; expires=Mon, 01-Dec-25 00:24:29 GMT; domain=.beverlyhillsmd.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":63444,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"TrueType Font data, 16 tables, 1st \"GDEF\", 20 names, Microsoft, language 0x409, Copyright 2020 The LibreFranklin Project Authors (https://github.com/impallari/Libre-Franklin)Li","md5":"7fc937a2d0fba610ccef5b11596f6731","sha1":"05cb93c42dfcb1024d26b5ebaec8a2711baaaa2b","sha256":"6085a4848518986958c018068a264b8a2899ea2d7b7cbbb05950dcca7489fbc0","sha512":"9bcf0e41221347e2fe14425c0e6779c28c8c827f0cfe1da56f6db84de79033a615ab1ea264fe35c86e545a8fa850615e619873a96ffa1b62724e38d963d6ff2b","ssdeep":"1536:/OvvXic97arO3rMsYVOlgKPiubFhK3wlEJKcG:6PicgklgKPzbFs3wlRV","tlshash":"ce533b06b2955ffbd526babcd4d0d3a0a762bc32bda9871ff1426e61f49b450cc0170a","first_seen":"2023-06-26T18:43:32Z","last_seen":"2026-04-01T12:49:19.627137Z","times_seen":188,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fast.vidalytics.com/video/DXNWe2Do/vkFWiNdWnUZl0nEn/210618/197647__FFMPEG/video_TS_h264_aac_96000_480x270_250000_variant.m3u8","fqdn":"fast.vidalytics.com","domain":"vidalytics.com","tld":"com"},"ip":{"addr":"205.234.175.175","port":443,"asn":30081,"as":"CACHENETWORKS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www3.totalmetabolicreset.com/video250902a_la_ap?origexperimentalOrig=true\u0026step=1\u0026funnelSTPId=a0qVo00000WbjCFIAZ\u0026origuidOrig=mr_db_vsl_a15_250902\u0026origspidOrig=null\u0026step=1\u0026origdsidOrig=\u0026origmainFunnelIdOrig=a0qVo00000WbmtKIAR\u0026origExternalOrig=true\u0026origExternalIDOrig=a0qVo00000WbmtKIAR\u0026genericUrl=video250902a_la_ap-mr_db_vsl_a15_250902\u0026orignameOrig=video250902a_la_ap-mr_db_vsl_a15_250902\u0026origbrandOrig=Beverly%20Hills%20MD\u0026business_unit=a00f400000jv55aaat\u0026utm_campaign=bhmd-db-metreset-cpaeml-all--250902\u0026utm_campaign_id=701Vo00000rCqdrIAC\u0026utm_content=3rd_party_email\u0026utm_source=email\u0026subid1=8398a1215b3d43708c54a4686e489f07\u0026subid2=16\u0026subid3=catmetaresetdonut1130\u0026subid5=everflow\u0026sessionid=936099273179","date":"2025-11-30T23:54:30.765Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vidalytics.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Mon, 07 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C6:52:A8:37:80:94:C0:4F:E8:20:81:85:2F:D5:64:FD:B1:DF:66:B2","sha256":"64:1D:1A:89:A4:A0:E4:28:77:CB:72:DF:AA:04:B3:59:79:65:3A:B7:95:50:B4:01:2C:BC:90:11:27:C5:80:10"}}},"request":{"raw":"GET /video/DXNWe2Do/vkFWiNdWnUZl0nEn/210618/197647__FFMPEG/video_TS_h264_aac_96000_480x270_250000_variant.m3u8 HTTP/1.1\r\nHost: fast.vidalytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www3.totalmetabolicreset.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www3.totalmetabolicreset.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 30 Nov 2025 23:54:30 GMT\r\ncontent-type: application/vnd.apple.mpegurl\r\ncontent-length: 26198\r\nx-cff: B\r\nx-guploader-uploadid: AOCedOGrrtmqoJ5MPBaNmaTrvsZlaY-pRbtWjKm8h62yW-VAyKmtJ6Y681lxEGlQlLFynXASxFXOc4c\r\nx-goog-generation: 1757539833185544\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 26198\r\nx-goog-hash: crc32c=WdnTOQ==, md5=MGX4qK1TGKQOxywhh3VhkA==\r\nx-goog-storage-class: STANDARD\r\naccess-control-allow-origin: *\r\nexpires: Thu, 05 Nov 2026 15:17:31 GMT\r\ncache-control: public, max-age=31104000\r\nlast-modified: Wed, 10 Sep 2025 21:30:33 GMT\r\netag: \"3065f8a8ad5318a40ec72c2187756190\"\r\nx-lb-backend: gcs-prod\r\nx-lb-cache: revalidated\r\nx-cf3: H\r\ncf4age: 92590\r\nx-cf-tsc: 1762942497\r\ncf4ttl: 31011410.000\r\nx-cdn: 8\r\nx-cdn-site: c8-prod\r\naccess-control-expose-headers: Content-Type, server, x-hw, x-cdn, x-cdn-info, x-cache, x-cache-hits, x-served-by, x-goog-stored-content-length, content-length, x-lb-backend, x-lb-cache, x-cf1, x-cf2, x-cf3, x-cff\r\nx-cf2: H\r\naccept-ranges: bytes\r\nserver: CFS 1124\r\nx-cf1: 42305:fB.arn1:co:1736526511:cacheN.arn1-01:M\r\nx-cf-reqid: 9fd5deab7ca58504c1efbf7ab5d0d1de\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"CacheFly","description":"CacheFly is a content delivery network (CDN) which offers CDN service that relies solely on IP anycast for routing, rather than DNS based global load balancing.","website":"https://www.cachefly.com","common_platform_enumeration":"","icon":"CacheFly.svg","categories":["CDN"]}],"data":{"size":26198,"size_decoded":0,"mime_type":"application/vnd.apple.mpegurl","magic":"M3U playlist, ASCII text","md5":"3065f8a8ad5318a40ec72c2187756190","sha1":"bec476f967319d734cc0f22d048f572ccdca04e6","sha256":"ba0cf991c46905c06e8e5dced8c7d33f3cde188fdc7fc9afb1084d94e02cc4a4","sha512":"e8b78d90ff95dbcc929bc2ea9237e8ab1c25536066c0e1e6473538dcb49180a5109045c2e5a78335963008f4e8dc57046ed433786fb620f5c0bbcbad2bf2085b","ssdeep":"384:w7mZkfiFgLeWjUJSPQ1O7Lex8X6dYzmwVyv0h/2Dot943aRcr+lAqHINO7shSPPD:wL/Ga","tlshash":"4fc285a8e1753585d0884eb6fff5b6b6c13179fea8ec994196e503420c7b2c317c89b8","first_seen":"2025-11-30T23:54:43.472605Z","last_seen":"2025-11-30T23:55:05.020139Z","times_seen":3,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www3.totalmetabolicreset.com/video250902a_la_ap?origexperimentalOrig=true\u0026step=1\u0026funnelSTPId=a0qVo00000WbjCFIAZ\u0026origuidOrig=mr_db_vsl_a15_250902\u0026origspidOrig=null\u0026step=1\u0026origdsidOrig=\u0026origmainFunnelIdOrig=a0qVo00000WbmtKIAR\u0026origExternalOrig=true\u0026origExternalIDOrig=a0qVo00000WbmtKIAR\u0026genericUrl=video250902a_la_ap-mr_db_vsl_a15_250902\u0026orignameOrig=video250902a_la_ap-mr_db_vsl_a15_250902\u0026origbrandOrig=Beverly%20Hills%20MD\u0026business_unit=a00f400000jv55aaat\u0026utm_campaign=bhmd-db-metreset-cpaeml-all--250902\u0026utm_campaign_id=701Vo00000rCqdrIAC\u0026utm_content=3rd_party_email\u0026utm_source=email\u0026subid1=8398a1215b3d43708c54a4686e489f07\u0026subid2=16\u0026subid3=catmetaresetdonut1130\u0026subid5=everflow\u0026sessionid=936099273179","fqdn":"www3.totalmetabolicreset.com","domain":"totalmetabolicreset.com","tld":"com"},"ip":{"addr":"172.64.149.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-11-30T23:54:28.054Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"totalmetabolicreset.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 20:42:52 GMT","end":"Wed, 14 Jan 2026 21:42:41 GMT"},"fingerprint":{"sha1":"1A:08:7D:E4:80:5E:99:26:40:1D:85:3A:AE:9E:9A:65:4A:97:5E:A8","sha256":"B0:E0:A6:12:07:32:2F:E9:00:19:12:32:E5:53:D0:0B:8A:C7:FF:27:BC:F7:CE:2E:C5:E8:16:C9:14:17:A1:B0"}}},"request":{"raw":"GET /video250902a_la_ap?origexperimentalOrig=true\u0026step=1\u0026funnelSTPId=a0qVo00000WbjCFIAZ\u0026origuidOrig=mr_db_vsl_a15_250902\u0026origspidOrig=null\u0026step=1\u0026origdsidOrig=\u0026origmainFunnelIdOrig=a0qVo00000WbmtKIAR\u0026origExternalOrig=true\u0026origExternalIDOrig=a0qVo00000WbmtKIAR\u0026genericUrl=video250902a_la_ap-mr_db_vsl_a15_250902\u0026orignameOrig=video250902a_la_ap-mr_db_vsl_a15_250902\u0026origbrandOrig=Beverly%20Hills%20MD\u0026business_unit=a00f400000jv55aaat\u0026utm_campaign=bhmd-db-metreset-cpaeml-all--250902\u0026utm_campaign_id=701Vo00000rCqdrIAC\u0026utm_content=3rd_party_email\u0026utm_source=email\u0026subid1=8398a1215b3d43708c54a4686e489f07\u0026subid2=16\u0026subid3=catmetaresetdonut1130\u0026subid5=everflow\u0026sessionid=936099273179 HTTP/1.1\r\nHost: www3.totalmetabolicreset.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 30 Nov 2025 23:54:28 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: gzip\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nexpires: 0\r\nlast-modified: Tue, 25 Nov 2025 18:16:59 GMT\r\npragma: no-cache\r\nvary: Accept-Encoding\r\nvia: 1.1 spaces-router (001c5eea6469)\r\nx-powered-by: Express\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=K2G9mXA4YmQ_g7_1sv6FlSCruMObW3tb8uvEtdWzbf0-1764546868-1.0.1.1-q1IPWCjey2Q96xjkfLC3t5cpV9UeqEw0b.AsKCi33jibqZtR7QrPr2OQsi83SC2D17y2CK3MoFrA8oEhchKp8QklGny63gvlETjllx.VLJU; path=/; expires=Mon, 01-Dec-25 00:24:28 GMT; domain=.totalmetabolicreset.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\ncf-ray: 9a6e4525783f7130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":4396,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (3266)","md5":"fad658ab21d6a5f7351b43a9d371abe1","sha1":"f57c9c010a4ce4391857ff9b52c25c6ee6b3984a","sha256":"25bb07679b9ab80be12de4579d6a4ed3d2902de9d1c88dc70b00c4af8435f966","sha512":"fe93ecfb8e728ab7813ef558a3eb8bfe6eb34be915c84981d6370cc3b6ad19151d710e306b9aa3b55403f1db3849a46b7521c132debff98fe4ce4cdc3a14d7ba","ssdeep":"96:TE+Ifu4yvAKQO7J+O8/ATUOb2rAw2rAR2rAU2rAI2rA32rAa2rA4Dz2rA+Dz2rAX:4Hvyv7t7JX8yCcT+oTaxeheSeKsFCj","tlshash":"c0918356b01a40519e22cccbf8c9b918780ba4cdd53eceb1d5990d19bdef5a782c7f09","first_seen":"2025-11-30T23:54:43.436414Z","last_seen":"2025-11-30T23:55:05.023781Z","times_seen":3,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":22,"dns":1,"connect":1,"send":0,"wait":113,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www3.totalmetabolicreset.com/runtime.js?ver=1764094619562","fqdn":"www3.totalmetabolicreset.com","domain":"totalmetabolicreset.com","tld":"com"},"ip":{"addr":"172.64.149.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www3.totalmetabolicreset.com/video250902a_la_ap?origexperimentalOrig=true\u0026step=1\u0026funnelSTPId=a0qVo00000WbjCFIAZ\u0026origuidOrig=mr_db_vsl_a15_250902\u0026origspidOrig=null\u0026step=1\u0026origdsidOrig=\u0026origmainFunnelIdOrig=a0qVo00000WbmtKIAR\u0026origExternalOrig=true\u0026origExternalIDOrig=a0qVo00000WbmtKIAR\u0026genericUrl=video250902a_la_ap-mr_db_vsl_a15_250902\u0026orignameOrig=video250902a_la_ap-mr_db_vsl_a15_250902\u0026origbrandOrig=Beverly%20Hills%20MD\u0026business_unit=a00f400000jv55aaat\u0026utm_campaign=bhmd-db-metreset-cpaeml-all--250902\u0026utm_campaign_id=701Vo00000rCqdrIAC\u0026utm_content=3rd_party_email\u0026utm_source=email\u0026subid1=8398a1215b3d43708c54a4686e489f07\u0026subid2=16\u0026subid3=catmetaresetdonut1130\u0026subid5=everflow\u0026sessionid=936099273179","date":"2025-11-30T23:54:28.354Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"totalmetabolicreset.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 20:42:52 GMT","end":"Wed, 14 Jan 2026 21:42:41 GMT"},"fingerprint":{"sha1":"1A:08:7D:E4:80:5E:99:26:40:1D:85:3A:AE:9E:9A:65:4A:97:5E:A8","sha256":"B0:E0:A6:12:07:32:2F:E9:00:19:12:32:E5:53:D0:0B:8A:C7:FF:27:BC:F7:CE:2E:C5:E8:16:C9:14:17:A1:B0"}}},"request":{"raw":"GET /runtime.js?ver=1764094619562 HTTP/1.1\r\nHost: www3.totalmetabolicreset.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www3.totalmetabolicreset.com/video250902a_la_ap?origexperimentalOrig=true\u0026step=1\u0026funnelSTPId=a0qVo00000WbjCFIAZ\u0026origuidOrig=mr_db_vsl_a15_250902\u0026origspidOrig=null\u0026step=1\u0026origdsidOrig=\u0026origmainFunnelIdOrig=a0qVo00000WbmtKIAR\u0026origExternalOrig=true\u0026origExternalIDOrig=a0qVo00000WbmtKIAR\u0026genericUrl=video250902a_la_ap-mr_db_vsl_a15_250902\u0026orignameOrig=video250902a_la_ap-mr_db_vsl_a15_250902\u0026origbrandOrig=Beverly%20Hills%20MD\u0026business_unit=a00f400000jv55aaat\u0026utm_campaign=bhmd-db-metreset-cpaeml-all--250902\u0026utm_campaign_id=701Vo00000rCqdrIAC\u0026utm_content=3rd_party_email\u0026utm_source=email\u0026subid1=8398a1215b3d43708c54a4686e489f07\u0026subid2=16\u0026subid3=catmetaresetdonut1130\u0026subid5=everflow\u0026sessionid=936099273179\r\nCookie: __cf_bm=K2G9mXA4YmQ_g7_1sv6FlSCruMObW3tb8uvEtdWzbf0-1764546868-1.0.1.1-q1IPWCjey2Q96xjkfLC3t5cpV9UeqEw0b.AsKCi33jibqZtR7QrPr2OQsi83SC2D17y2CK3MoFrA8oEhchKp8QklGny63gvlETjllx.VLJU\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 30 Nov 2025 23:54:28 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-encoding: gzip\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\netag: W/\"cb2-19abc3b8280\"\r\nexpires: 0\r\nlast-modified: Tue, 25 Nov 2025 18:16:48 GMT\r\npragma: no-cache\r\nvary: Accept-Encoding\r\nvia: 1.1 spaces-router (001c5eea6469)\r\nx-powered-by: Express\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 9a6e45272d00712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":3250,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (3250), with no line terminators","md5":"a8579f7248d9fc8c18f18b68ddb3ab6e","sha1":"4571e33a2f178bc06f67372ec7642449584e011e","sha256":"b4a8b88ff25a4d804afe988629ee69eaa1a5954eb00c54eead074dced0bb7e89","sha512":"879add50445f1ccb02371cbb9667ee225a5683ce31b0845d73a5da44374b8747c5f15c0105755acedcb76e93bb988f4a914998ada2fa3c221bc2fee42fec3451","ssdeep":"","tlshash":"8c61a5f12b68edf267e108c55d3dc542e2156432552fece0eb0beebaa864cd14852eb1","first_seen":"2025-09-30T13:29:08.953385Z","last_seen":"2026-02-12T18:25:45.703661Z","times_seen":180,"resource_available":true,"data":null}},"time_used":143,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":143,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www3.totalmetabolicreset.com/polyfills.js?ver=1764094619562","fqdn":"www3.totalmetabolicreset.com","domain":"totalmetabolicreset.com","tld":"com"},"ip":{"addr":"172.64.149.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www3.totalmetabolicreset.com/video250902a_la_ap?origexperimentalOrig=true\u0026step=1\u0026funnelSTPId=a0qVo00000WbjCFIAZ\u0026origuidOrig=mr_db_vsl_a15_250902\u0026origspidOrig=null\u0026step=1\u0026origdsidOrig=\u0026origmainFunnelIdOrig=a0qVo00000WbmtKIAR\u0026origExternalOrig=true\u0026origExternalIDOrig=a0qVo00000WbmtKIAR\u0026genericUrl=video250902a_la_ap-mr_db_vsl_a15_250902\u0026orignameOrig=video250902a_la_ap-mr_db_vsl_a15_250902\u0026origbrandOrig=Beverly%20Hills%20MD\u0026business_unit=a00f400000jv55aaat\u0026utm_campaign=bhmd-db-metreset-cpaeml-all--250902\u0026utm_campaign_id=701Vo00000rCqdrIAC\u0026utm_content=3rd_party_email\u0026utm_source=email\u0026subid1=8398a1215b3d43708c54a4686e489f07\u0026subid2=16\u0026subid3=catmetaresetdonut1130\u0026subid5=everflow\u0026sessionid=936099273179","date":"2025-11-30T23:54:28.355Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"totalmetabolicreset.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 20:42:52 GMT","end":"Wed, 14 Jan 2026 21:42:41 GMT"},"fingerprint":{"sha1":"1A:08:7D:E4:80:5E:99:26:40:1D:85:3A:AE:9E:9A:65:4A:97:5E:A8","sha256":"B0:E0:A6:12:07:32:2F:E9:00:19:12:32:E5:53:D0:0B:8A:C7:FF:27:BC:F7:CE:2E:C5:E8:16:C9:14:17:A1:B0"}}},"request":{"raw":"GET /polyfills.js?ver=1764094619562 HTTP/1.1\r\nHost: www3.totalmetabolicreset.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www3.totalmetabolicreset.com/video250902a_la_ap?origexperimentalOrig=true\u0026step=1\u0026funnelSTPId=a0qVo00000WbjCFIAZ\u0026origuidOrig=mr_db_vsl_a15_250902\u0026origspidOrig=null\u0026step=1\u0026origdsidOrig=\u0026origmainFunnelIdOrig=a0qVo00000WbmtKIAR\u0026origExternalOrig=true\u0026origExternalIDOrig=a0qVo00000WbmtKIAR\u0026genericUrl=video250902a_la_ap-mr_db_vsl_a15_250902\u0026orignameOrig=video250902a_la_ap-mr_db_vsl_a15_250902\u0026origbrandOrig=Beverly%20Hills%20MD\u0026business_unit=a00f400000jv55aaat\u0026utm_campaign=bhmd-db-metreset-cpaeml-all--250902\u0026utm_campaign_id=701Vo00000rCqdrIAC\u0026utm_content=3rd_party_email\u0026utm_source=email\u0026subid1=8398a1215b3d43708c54a4686e489f07\u0026subid2=16\u0026subid3=catmetaresetdonut1130\u0026subid5=everflow\u0026sessionid=936099273179\r\nCookie: __cf_bm=K2G9mXA4YmQ_g7_1sv6FlSCruMObW3tb8uvEtdWzbf0-1764546868-1.0.1.1-q1IPWCjey2Q96xjkfLC3t5cpV9UeqEw0b.AsKCi33jibqZtR7QrPr2OQsi83SC2D17y2CK3MoFrA8oEhchKp8QklGny63gvlETjllx.VLJU\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 30 Nov 2025 23:54:28 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-encoding: gzip\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\netag: W/\"856d-19abc3b8280\"\r\nexpires: 0\r\nlast-modified: Tue, 25 Nov 2025 18:16:48 GMT\r\npragma: no-cache\r\nvary: Accept-Encoding\r\nvia: 1.1 spaces-router (001c5eea6469)\r\nx-powered-by: Express\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 9a6e45272d01712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":34157,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (34157), with no line terminators","md5":"daccfaec89c4c479b73e40ed78a3dd5e","sha1":"fbea116d20287c8e95bb34084a419abffe993715","sha256":"ac38f6adea95ea8cd623b17d91321175036acebf677fe1cdde9f997ba0bd7be4","sha512":"1706b8da34e05b510adc3977ab33e81faa08db283732e943b1314341b12369c3226a2b4ae4ec43f40b647440076a9710b1807e4f9f34abbd5156b6a4416cad13","ssdeep":"768:VXT1F24GL3V61r3wg2Mby0x01sUHoHPvXV+SIM1Iih+GorlrzOI9resXPpyVdAO2:B+KzEp6tSTQ+","tlshash":"35e21ad973d1b0b687fa59f1c03b8007f63665a47c4c88d8f15c88ea3937049a5a6f2d","first_seen":"2024-06-17T18:20:23Z","last_seen":"2026-02-12T18:25:45.700434Z","times_seen":186,"resource_available":true,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":147,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www2.totalmetabolicreset.com/assets/js/site.js","fqdn":"www2.totalmetabolicreset.com","domain":"totalmetabolicreset.com","tld":"com"},"ip":{"addr":"172.64.149.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www3.totalmetabolicreset.com/video250902a_la_ap?origexperimentalOrig=true\u0026step=1\u0026funnelSTPId=a0qVo00000WbjCFIAZ\u0026origuidOrig=mr_db_vsl_a15_250902\u0026origspidOrig=null\u0026step=1\u0026origdsidOrig=\u0026origmainFunnelIdOrig=a0qVo00000WbmtKIAR\u0026origExternalOrig=true\u0026origExternalIDOrig=a0qVo00000WbmtKIAR\u0026genericUrl=video250902a_la_ap-mr_db_vsl_a15_250902\u0026orignameOrig=video250902a_la_ap-mr_db_vsl_a15_250902\u0026origbrandOrig=Beverly%20Hills%20MD\u0026business_unit=a00f400000jv55aaat\u0026utm_campaign=bhmd-db-metreset-cpaeml-all--250902\u0026utm_campaign_id=701Vo00000rCqdrIAC\u0026utm_content=3rd_party_email\u0026utm_source=email\u0026subid1=8398a1215b3d43708c54a4686e489f07\u0026subid2=16\u0026subid3=catmetaresetdonut1130\u0026subid5=everflow\u0026sessionid=936099273179","date":"2025-11-30T23:54:29.134Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"totalmetabolicreset.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 20:42:52 GMT","end":"Wed, 14 Jan 2026 21:42:41 GMT"},"fingerprint":{"sha1":"1A:08:7D:E4:80:5E:99:26:40:1D:85:3A:AE:9E:9A:65:4A:97:5E:A8","sha256":"B0:E0:A6:12:07:32:2F:E9:00:19:12:32:E5:53:D0:0B:8A:C7:FF:27:BC:F7:CE:2E:C5:E8:16:C9:14:17:A1:B0"}}},"request":{"raw":"GET /assets/js/site.js HTTP/1.1\r\nHost: www2.totalmetabolicreset.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www3.totalmetabolicreset.com/\r\nCookie: __cf_bm=K2G9mXA4YmQ_g7_1sv6FlSCruMObW3tb8uvEtdWzbf0-1764546868-1.0.1.1-q1IPWCjey2Q96xjkfLC3t5cpV9UeqEw0b.AsKCi33jibqZtR7QrPr2OQsi83SC2D17y2CK3MoFrA8oEhchKp8QklGny63gvlETjllx.VLJU\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 30 Nov 2025 23:54:29 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncf-ray: 9a6e452c1f40712b-OSL\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\ncontent-encoding: gzip\r\netag: W/\"736a-19ac14a33e8\"\r\nexpires: 0\r\nlast-modified: Wed, 26 Nov 2025 17:50:57 GMT\r\npragma: no-cache\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nvary: Accept-Encoding\r\nvia: 1.1 spaces-router (001c5eea6469)\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":29546,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"9f4635fdf29cf0db99eafb181723873d","sha1":"612dcad86274feabbd11d4133b38c9a78eeb5d83","sha256":"2af6f31931ece477b66c3692d45a46c7054226b6d481bc849e7eb71680adec2c","sha512":"aaac84a49bfc9870afdd92bfa5fa20e6a1585c3be09d4e9942d962ecc6688d28954dd45ac66dd615f369210c296bada7f3ec00e2b79ab19e6c5966f422f01c7d","ssdeep":"384:baSNJGcVUbrDLTr3cS3MO9b7nPLaUnT0RXcqG6Yp9r8MV3sW31C/aOZqMA:pNAcUnTicqEb31C/WMA","tlshash":"a4d273a959f360308667717d9faf62007232a0533885cd14bc8c9f406f59e2b97b6bf8","first_seen":"2024-06-05T19:17:27Z","last_seen":"2026-04-03T06:11:11.705411Z","times_seen":1460,"resource_available":true,"data":null}},"time_used":159,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":158,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www2.totalmetabolicreset.com/proxy/funnel/stats/alternsave/?event=eyJmdW5uZWxTVEZJZCI6ImEwcVZvMDAwMDBXYm10S0lBUiIsInVybCI6InZpZGVvMjUwOTAyYV9sYV9hcCIsImV2ZW50VHlwZSI6IkRlc3RpbmF0aW9uIiwic2Vzc2lvbklkIjoiOTM2MDk5MjczMTc5IiwiZGVzdGluYXRpb25JZCI6bnVsbCwiZnVubmVsU1RQSWQiOiJhMHFWbzAwMDAwV2JqQ0ZJQVoiLCJzcGxpdFRlc3RpbmdJZCI6bnVsbCwic3BsaXRUZXN0aW5nRnVubmVsSWQiOm51bGwsIm1haW5GdW5uZWxJRCI6ImEwcVZvMDAwMDBXYm10S0lBUiIsImN1c3RvbVBheUxvYWQxIjoie30iLCJjdXN0b21QYXlMb2FkMiI6IntcImV4cGVyaW1lbnRhbFwiOnRydWUsXCJzaXRlXCI6dHJ1ZSxcIm5vbi1ldmVudFwiOjB9IiwidXRtU291cmNlIjoiZW1haWwiLCJ1dG1NZWRpdW0iOm51bGwsInV0bUNhbXBhaWduIjoiYmhtZC1kYi1tZXRyZXNldC1jcGFlbWwtYWxsLS0yNTA5MDIiLCJ1dG1DYW1wYWlnbklkIjoiNzAxVm8wMDAwMHJDcWRySUFDIiwidXRtQ29udGVudCI6IjNyZF9wYXJ0eV9lbWFpbCIsInV0bVRlcm0iOm51bGwsImFmZklkIjoiIiwib2ZmSWQiOiIiLCJzdWJJZDEiOiI4Mzk4YTEyMTViM2Q0MzcwOGM1NGE0Njg2ZTQ4OWYwNyIsInN1YklkMiI6IjE2Iiwic3ViSWQzIjoiY2F0bWV0YXJlc2V0ZG9udXQxMTMwIiwic3ViSWQ0IjpudWxsLCJzdWJJZDUiOiJldmVyZmxvdyIsInNhbGVzRnVubmVsIjoiRnVubmVsIiwidmlzaXRvcklkIjpudWxsLCJyZWZlcnJhbFVybCI6IiIsImJyYW5kIjoiQmV2ZXJseSBIaWxscyBNRCIsImJyb3dzZXIiOiJTYWZhcmkiLCJvcyI6IldpbmRvd3MiLCJkZXZpY2UiOiJEZXNrdG9wIn0=","fqdn":"www2.totalmetabolicreset.com","domain":"totalmetabolicreset.com","tld":"com"},"ip":{"addr":"172.64.149.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www3.totalmetabolicreset.com/video250902a_la_ap?origexperimentalOrig=true\u0026step=1\u0026funnelSTPId=a0qVo00000WbjCFIAZ\u0026origuidOrig=mr_db_vsl_a15_250902\u0026origspidOrig=null\u0026step=1\u0026origdsidOrig=\u0026origmainFunnelIdOrig=a0qVo00000WbmtKIAR\u0026origExternalOrig=true\u0026origExternalIDOrig=a0qVo00000WbmtKIAR\u0026genericUrl=video250902a_la_ap-mr_db_vsl_a15_250902\u0026orignameOrig=video250902a_la_ap-mr_db_vsl_a15_250902\u0026origbrandOrig=Beverly%20Hills%20MD\u0026business_unit=a00f400000jv55aaat\u0026utm_campaign=bhmd-db-metreset-cpaeml-all--250902\u0026utm_campaign_id=701Vo00000rCqdrIAC\u0026utm_content=3rd_party_email\u0026utm_source=email\u0026subid1=8398a1215b3d43708c54a4686e489f07\u0026subid2=16\u0026subid3=catmetaresetdonut1130\u0026subid5=everflow\u0026sessionid=936099273179","date":"2025-11-30T23:54:29.464Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"totalmetabolicreset.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 20:42:52 GMT","end":"Wed, 14 Jan 2026 21:42:41 GMT"},"fingerprint":{"sha1":"1A:08:7D:E4:80:5E:99:26:40:1D:85:3A:AE:9E:9A:65:4A:97:5E:A8","sha256":"B0:E0:A6:12:07:32:2F:E9:00:19:12:32:E5:53:D0:0B:8A:C7:FF:27:BC:F7:CE:2E:C5:E8:16:C9:14:17:A1:B0"}}},"request":{"raw":"GET /proxy/funnel/stats/alternsave/?event=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 HTTP/1.1\r\nHost: www2.totalmetabolicreset.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www3.totalmetabolicreset.com/\r\nCookie: __cf_bm=K2G9mXA4YmQ_g7_1sv6FlSCruMObW3tb8uvEtdWzbf0-1764546868-1.0.1.1-q1IPWCjey2Q96xjkfLC3t5cpV9UeqEw0b.AsKCi33jibqZtR7QrPr2OQsi83SC2D17y2CK3MoFrA8oEhchKp8QklGny63gvlETjllx.VLJU; tcrFed=false; alternaiGuestId=e5e5b94d-0325-45a4-92e6-0c76b86862cf,www3.totalmetabolicreset.com,,blob:https:\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 30 Nov 2025 23:54:29 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 29\r\ncf-ray: 9a6e452e1868712b-OSL\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\netag: W/\"1d-RfI0mb55JJVfolfOEMKnZBLgoWw\"\r\nexpires: 0\r\npragma: no-cache\r\nset-cookie: _csrf=11emsWLBRwpRsr3CPQRiqerb; Path=/\n_csrf=YTAICd2aNFI_j-ioTXgpWj6D; Path=/\nXSRF-TOKEN=hO9ntFvY-JWeIr47eYi1ULVATkJzH9mLfkCk; Path=/; Secure\n_csrf=8D2i9IhsOGvRA3Rr1D7n8Z0d; Path=/\n_csrf=hMAT8syib9vRF8PXtESUnDtB; Path=/\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nvary: Accept-Encoding\r\nvia: 1.1 spaces-router (001c5eea6469)\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":29,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"666c82637166f160b430c3a13caf3b30","sha1":"45f23499be7924955fa257ce10c2a76412e0a16c","sha256":"b5b1625932b3d2b242b95c8680756c5d79135956bb1f6fd0b9544261a9d56389","sha512":"5093d6e86bc27101dc8bd7efb9f910e2e39a949c3673c709b68793586b143764f37a7f8fae74169e0af56b0be04270ec40e5f7258cca1b66f375e4b9c644864e","ssdeep":"","tlshash":"b38000a00a820b30a08020280c28008328080e22200a300020a808aca0a083bb002020","first_seen":"2023-03-07T23:57:52Z","last_seen":"2026-04-03T06:11:11.704056Z","times_seen":2127,"resource_available":true,"data":null}},"time_used":138,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":138,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stats.vidalytics.com/awesome-log?cid=DXNWe2Do\u0026uid=J2agbNFNeXcES95d","fqdn":"stats.vidalytics.com","domain":"vidalytics.com","tld":"com"},"ip":{"addr":"107.178.211.97","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www3.totalmetabolicreset.com/video250902a_la_ap?origexperimentalOrig=true\u0026step=1\u0026funnelSTPId=a0qVo00000WbjCFIAZ\u0026origuidOrig=mr_db_vsl_a15_250902\u0026origspidOrig=null\u0026step=1\u0026origdsidOrig=\u0026origmainFunnelIdOrig=a0qVo00000WbmtKIAR\u0026origExternalOrig=true\u0026origExternalIDOrig=a0qVo00000WbmtKIAR\u0026genericUrl=video250902a_la_ap-mr_db_vsl_a15_250902\u0026orignameOrig=video250902a_la_ap-mr_db_vsl_a15_250902\u0026origbrandOrig=Beverly%20Hills%20MD\u0026business_unit=a00f400000jv55aaat\u0026utm_campaign=bhmd-db-metreset-cpaeml-all--250902\u0026utm_campaign_id=701Vo00000rCqdrIAC\u0026utm_content=3rd_party_email\u0026utm_source=email\u0026subid1=8398a1215b3d43708c54a4686e489f07\u0026subid2=16\u0026subid3=catmetaresetdonut1130\u0026subid5=everflow\u0026sessionid=936099273179","date":"2025-11-30T23:54:32.780Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vidalytics.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Mon, 07 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C6:52:A8:37:80:94:C0:4F:E8:20:81:85:2F:D5:64:FD:B1:DF:66:B2","sha256":"64:1D:1A:89:A4:A0:E4:28:77:CB:72:DF:AA:04:B3:59:79:65:3A:B7:95:50:B4:01:2C:BC:90:11:27:C5:80:10"}}},"request":{"raw":"POST /awesome-log?cid=DXNWe2Do\u0026uid=J2agbNFNeXcES95d HTTP/1.1\r\nHost: stats.vidalytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json; charset=utf-8\r\nContent-Length: 310\r\nOrigin: https://www3.totalmetabolicreset.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www3.totalmetabolicreset.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":310,"data":"{\"fp\":{\"a\":{\"s\":\"1018.7317333761603\",\"o\":\"sine\",\"m\":\"1\",\"c\":\"max\"},\"h\":{\"v\":\"ugridg\",\"a\":\"255\",\"d\":\"0\",\"h\":\"0\"},\"l\":{\"l\":\"en-US\",\"t\":\"UTC\"},\"p\":\"1vwa4ul\",\"pl\":\"1m1io2c\",\"s\":{\"i\":false,\"m\":\"0\",\"c\":\"24\",\"mm\":\"es598d\"},\"sy\":{\"p\":\"Win32\",\"c\":true,\"ps\":\"20100101\",\"pr\":\"Gecko\",\"a\":\"0\"},\"w\":\"1ur2gjp\",\"m\":\"1taml1m\"}}"}},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-methods: GET,OPTIONS,POST\r\ncontent-type: application/json\r\ndate: Sun, 30 Nov 2025 23:54:32 GMT\r\ncontent-length: 29\r\nx-envoy-upstream-service-time: 2\r\nserver: istio-envoy\r\naccess-control-allow-origin: https://www3.totalmetabolicreset.com\r\naccess-control-expose-headers: Access-Control-Allow-Origin,Cache-Control,Content-Length,Content-Type,ETag,If-None-Match\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":29,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"a9cd9612fb8d9c76de2bf2d9bb00f133","sha1":"31f5518d35e4913300987078b22a7474cee5f952","sha256":"3743d611d574e5ea3d5f565f6dc8138d80ec2e8df5fb74f16c69549c3f84d8cb","sha512":"7e5fd8f1d5eef27583d0e2b6729ca35ab3d34d91dd3e100922f79ea48ff5f55433ef2e0da3e5fe4379b22f124301264031c1324851799ff21fc0d8f4adabada6","ssdeep":"","tlshash":"3f80000000fba0223002388000228a0008a8a208be2c0c02ca22082002000c308200a0","first_seen":"2025-11-30T23:54:59.570231Z","last_seen":"2025-11-30T23:54:59.570231Z","times_seen":1,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www3.totalmetabolicreset.com/env/","fqdn":"www3.totalmetabolicreset.com","domain":"totalmetabolicreset.com","tld":"com"},"ip":{"addr":"172.64.149.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www3.totalmetabolicreset.com/video250902a_la_ap?origexperimentalOrig=true\u0026step=1\u0026funnelSTPId=a0qVo00000WbjCFIAZ\u0026origuidOrig=mr_db_vsl_a15_250902\u0026origspidOrig=null\u0026step=1\u0026origdsidOrig=\u0026origmainFunnelIdOrig=a0qVo00000WbmtKIAR\u0026origExternalOrig=true\u0026origExternalIDOrig=a0qVo00000WbmtKIAR\u0026genericUrl=video250902a_la_ap-mr_db_vsl_a15_250902\u0026orignameOrig=video250902a_la_ap-mr_db_vsl_a15_250902\u0026origbrandOrig=Beverly%20Hills%20MD\u0026business_unit=a00f400000jv55aaat\u0026utm_campaign=bhmd-db-metreset-cpaeml-all--250902\u0026utm_campaign_id=701Vo00000rCqdrIAC\u0026utm_content=3rd_party_email\u0026utm_source=email\u0026subid1=8398a1215b3d43708c54a4686e489f07\u0026subid2=16\u0026subid3=catmetaresetdonut1130\u0026subid5=everflow\u0026sessionid=936099273179","date":"2025-11-30T23:54:28.832Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"totalmetabolicreset.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 20:42:52 GMT","end":"Wed, 14 Jan 2026 21:42:41 GMT"},"fingerprint":{"sha1":"1A:08:7D:E4:80:5E:99:26:40:1D:85:3A:AE:9E:9A:65:4A:97:5E:A8","sha256":"B0:E0:A6:12:07:32:2F:E9:00:19:12:32:E5:53:D0:0B:8A:C7:FF:27:BC:F7:CE:2E:C5:E8:16:C9:14:17:A1:B0"}}},"request":{"raw":"GET /env/ HTTP/1.1\r\nHost: www3.totalmetabolicreset.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www3.totalmetabolicreset.com/video250902a_la_ap?origexperimentalOrig=true\u0026step=1\u0026funnelSTPId=a0qVo00000WbjCFIAZ\u0026origuidOrig=mr_db_vsl_a15_250902\u0026origspidOrig=null\u0026step=1\u0026origdsidOrig=\u0026origmainFunnelIdOrig=a0qVo00000WbmtKIAR\u0026origExternalOrig=true\u0026origExternalIDOrig=a0qVo00000WbmtKIAR\u0026genericUrl=video250902a_la_ap-mr_db_vsl_a15_250902\u0026orignameOrig=video250902a_la_ap-mr_db_vsl_a15_250902\u0026origbrandOrig=Beverly%20Hills%20MD\u0026business_unit=a00f400000jv55aaat\u0026utm_campaign=bhmd-db-metreset-cpaeml-all--250902\u0026utm_campaign_id=701Vo00000rCqdrIAC\u0026utm_content=3rd_party_email\u0026utm_source=email\u0026subid1=8398a1215b3d43708c54a4686e489f07\u0026subid2=16\u0026subid3=catmetaresetdonut1130\u0026subid5=everflow\u0026sessionid=936099273179\r\nCookie: __cf_bm=K2G9mXA4YmQ_g7_1sv6FlSCruMObW3tb8uvEtdWzbf0-1764546868-1.0.1.1-q1IPWCjey2Q96xjkfLC3t5cpV9UeqEw0b.AsKCi33jibqZtR7QrPr2OQsi83SC2D17y2CK3MoFrA8oEhchKp8QklGny63gvlETjllx.VLJU\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 30 Nov 2025 23:54:28 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-encoding: gzip\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\netag: W/\"9c-A833g/07kidGbtedvcEcYbuS0GI\"\r\nexpires: 0\r\npragma: no-cache\r\nvary: Accept-Encoding\r\nvia: 1.1 spaces-router (001c5eea6469)\r\nx-powered-by: Express\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 9a6e452a2e53712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":156,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"bdf9fa04c458224a989ffd133c9f7010","sha1":"03cdf783fd3b9227466ed79dbdc11c61bb92d062","sha256":"1afc573182f24676d345c3a78d09d3f599d0b76d351eb92cacf834b7d8476f3e","sha512":"4cb8bfcb760559925333c63ce38e5ec92fac2b910140d7a0b76a1bd9a7ae9bc5cb960f46f818cd6de9ccd7a57a65832b374755b8e58e5800a5227896a60b5829","ssdeep":"","tlshash":"71c0807351c7f14d075055894638378987c9c90915d154e34540d9485c70811c56c704","first_seen":"2025-04-15T07:53:07.046805Z","last_seen":"2026-02-12T18:25:45.71737Z","times_seen":206,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":111,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fast.vidalytics.com/license?hash=NX7sxHgNztzqfSXb%7Cwww3.totalmetabolicreset.com","fqdn":"fast.vidalytics.com","domain":"vidalytics.com","tld":"com"},"ip":{"addr":"205.234.175.175","port":443,"asn":30081,"as":"CACHENETWORKS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www3.totalmetabolicreset.com/video250902a_la_ap?origexperimentalOrig=true\u0026step=1\u0026funnelSTPId=a0qVo00000WbjCFIAZ\u0026origuidOrig=mr_db_vsl_a15_250902\u0026origspidOrig=null\u0026step=1\u0026origdsidOrig=\u0026origmainFunnelIdOrig=a0qVo00000WbmtKIAR\u0026origExternalOrig=true\u0026origExternalIDOrig=a0qVo00000WbmtKIAR\u0026genericUrl=video250902a_la_ap-mr_db_vsl_a15_250902\u0026orignameOrig=video250902a_la_ap-mr_db_vsl_a15_250902\u0026origbrandOrig=Beverly%20Hills%20MD\u0026business_unit=a00f400000jv55aaat\u0026utm_campaign=bhmd-db-metreset-cpaeml-all--250902\u0026utm_campaign_id=701Vo00000rCqdrIAC\u0026utm_content=3rd_party_email\u0026utm_source=email\u0026subid1=8398a1215b3d43708c54a4686e489f07\u0026subid2=16\u0026subid3=catmetaresetdonut1130\u0026subid5=everflow\u0026sessionid=936099273179","date":"2025-11-30T23:54:30.290Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vidalytics.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Mon, 07 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C6:52:A8:37:80:94:C0:4F:E8:20:81:85:2F:D5:64:FD:B1:DF:66:B2","sha256":"64:1D:1A:89:A4:A0:E4:28:77:CB:72:DF:AA:04:B3:59:79:65:3A:B7:95:50:B4:01:2C:BC:90:11:27:C5:80:10"}}},"request":{"raw":"GET /license?hash=NX7sxHgNztzqfSXb%7Cwww3.totalmetabolicreset.com HTTP/1.1\r\nHost: fast.vidalytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www3.totalmetabolicreset.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www3.totalmetabolicreset.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 30 Nov 2025 23:54:30 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 94\r\nx-cff: B\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=300, s-maxage=300\r\nvary: Accept-Encoding\r\nx-envoy-upstream-service-time: 0\r\nx-envoy-decorator-operation: vidalytics-player-api.vidalytics-player-api.svc.cluster.local:80/*\r\nx-lb-backend: api-prod\r\nsurrogate-key: lb-api\r\nx-lb-cache: disabled\r\nx-cf3: H\r\ncf4age: 0\r\nx-cf-tsc: 1764546870\r\ncf4ttl: 300.000\r\nx-cdn: 8\r\nx-cdn-site: c8-prod\r\naccess-control-expose-headers: Content-Type, server, x-hw, x-cdn, x-cdn-info, x-cache, x-cache-hits, x-served-by, x-goog-stored-content-length, content-length, x-lb-backend, x-lb-cache, x-cf1, x-cf2, x-cf3, x-cff\r\ncontent-encoding: gzip\r\nx-cf2: M\r\naccept-ranges: bytes\r\nserver: CFS 1124\r\nx-cf1: 42305:fB.arn1:co:1736526511:cacheN.arn1-01:M\r\nx-cf-reqid: ea45e51db127f222cfd2bec3f9490d5d\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CacheFly","description":"CacheFly is a content delivery network (CDN) which offers CDN service that relies solely on IP anycast for routing, rather than DNS based global load balancing.","website":"https://www.cachefly.com","common_platform_enumeration":"","icon":"CacheFly.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":79,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"cd36a8b7de430489a31c3e661a18d4b2","sha1":"8a5181bb7ae7ce19099f9ecb654830abfeb49731","sha256":"c3ccdee5adf01ac6e063913a20ea39203de3cb5de9f1ace9af8f2b14ac3e0d82","sha512":"ac65a87a213a3c2542e2d03d2ed9e07f75ffa6f86169f57a178470fc219f0db23cab6c3cb86d645e4991647229c52742dfb485d32cca7e15265db09d5d2a09a1","ssdeep":"","tlshash":"74a01128030aacb8220a820a2828f08e82ae220308c28a222c0ace0c00820380cab00c","first_seen":"2025-11-30T23:54:59.576222Z","last_seen":"2025-11-30T23:55:04.989986Z","times_seen":2,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":137,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fast.vidalytics.com/video/DXNWe2Do/vkFWiNdWnUZl0nEn/img/thumbnail/blob-68efde32e8b56.jpg","fqdn":"fast.vidalytics.com","domain":"vidalytics.com","tld":"com"},"ip":{"addr":"205.234.175.175","port":443,"asn":30081,"as":"CACHENETWORKS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www3.totalmetabolicreset.com/video250902a_la_ap?origexperimentalOrig=true\u0026step=1\u0026funnelSTPId=a0qVo00000WbjCFIAZ\u0026origuidOrig=mr_db_vsl_a15_250902\u0026origspidOrig=null\u0026step=1\u0026origdsidOrig=\u0026origmainFunnelIdOrig=a0qVo00000WbmtKIAR\u0026origExternalOrig=true\u0026origExternalIDOrig=a0qVo00000WbmtKIAR\u0026genericUrl=video250902a_la_ap-mr_db_vsl_a15_250902\u0026orignameOrig=video250902a_la_ap-mr_db_vsl_a15_250902\u0026origbrandOrig=Beverly%20Hills%20MD\u0026business_unit=a00f400000jv55aaat\u0026utm_campaign=bhmd-db-metreset-cpaeml-all--250902\u0026utm_campaign_id=701Vo00000rCqdrIAC\u0026utm_content=3rd_party_email\u0026utm_source=email\u0026subid1=8398a1215b3d43708c54a4686e489f07\u0026subid2=16\u0026subid3=catmetaresetdonut1130\u0026subid5=everflow\u0026sessionid=936099273179","date":"2025-11-30T23:54:30.297Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vidalytics.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Mon, 07 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C6:52:A8:37:80:94:C0:4F:E8:20:81:85:2F:D5:64:FD:B1:DF:66:B2","sha256":"64:1D:1A:89:A4:A0:E4:28:77:CB:72:DF:AA:04:B3:59:79:65:3A:B7:95:50:B4:01:2C:BC:90:11:27:C5:80:10"}}},"request":{"raw":"GET /video/DXNWe2Do/vkFWiNdWnUZl0nEn/img/thumbnail/blob-68efde32e8b56.jpg HTTP/1.1\r\nHost: fast.vidalytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www3.totalmetabolicreset.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 30 Nov 2025 23:54:30 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 115956\r\nx-cff: B\r\nx-guploader-uploadid: AOCedOEDPDoZSmYl7LM9GIess88B0tFlnvO7vzvxNcY-GgQTpMsqDiq0ql1vExbsVumoxoMN\r\ncache-control: public, max-age=300, s-maxage=2592000\r\nexpires: Sun, 30 Nov 2025 23:22:06 GMT\r\nlast-modified: Wed, 15 Oct 2025 17:47:31 GMT\r\netag: \"c8d46c6bb4f0c2381dbb70e99542b4d5\"\r\nx-goog-generation: 1760550451190885\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 115956\r\nx-goog-hash: crc32c=iqrE1Q==, md5=yNRsa7Twwjgdu3DplUK01Q==\r\nx-goog-storage-class: STANDARD\r\naccess-control-allow-origin: *\r\nx-lb-backend: gcs-prod\r\nx-lb-cache: miss\r\nx-cf3: H\r\ncf4age: 949854\r\nx-cf-tsc: 1762942353\r\ncf4ttl: 1642145.500\r\nx-cdn: 8\r\nx-cdn-site: c8-prod\r\naccess-control-expose-headers: Content-Type, server, x-hw, x-cdn, x-cdn-info, x-cache, x-cache-hits, x-served-by, x-goog-stored-content-length, content-length, x-lb-backend, x-lb-cache, x-cf1, x-cf2, x-cf3, x-cff\r\nx-cf2: H\r\naccept-ranges: bytes\r\nserver: CFS 1124\r\nx-cf1: 42305:fB.arn1:co:1736526511:cacheN.arn1-01:M\r\nx-cf-reqid: 98502236061d0ae93a9dd262078bd0e7\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CacheFly","description":"CacheFly is a content delivery network (CDN) which offers CDN service that relies solely on IP anycast for routing, rather than DNS based global load balancing.","website":"https://www.cachefly.com","common_platform_enumeration":"","icon":"CacheFly.svg","categories":["CDN"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":115956,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1129x635, components 3","md5":"c8d46c6bb4f0c2381dbb70e99542b4d5","sha1":"fb1bd2d2a249f730145e17a888892dd97806eec9","sha256":"090d77947e07cd1483a8f871f14cd24ddd86167551c8d25ece44a2b094baea18","sha512":"164f3794a0e0cf71e0f6ebebc0a213142e8bede665fe64045561a86fe7b60c88b8bc937bdefefac7b9a72f0455133e66863ec3c813614109e6b63d2a28251d95","ssdeep":"3072:K4Gk+lK0UsfMbVb5+Hu54De6MiGHUIdoqqLe:0HlK7xb6HFDe6M5HU8oq7","tlshash":"2fb3121025393a4de7aeca78dce7a6d20355a6430be276817219baced4c5c74cb342f7","first_seen":"2025-11-30T23:54:43.440535Z","last_seen":"2025-11-30T23:55:05.004236Z","times_seen":3,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fast.vidalytics.com/video/DXNWe2Do/vkFWiNdWnUZl0nEn/210618/197647__FFMPEG/ts/video/640x360_h264_900000/1.ts","fqdn":"fast.vidalytics.com","domain":"vidalytics.com","tld":"com"},"ip":{"addr":"205.234.175.175","port":443,"asn":30081,"as":"CACHENETWORKS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www3.totalmetabolicreset.com/video250902a_la_ap?origexperimentalOrig=true\u0026step=1\u0026funnelSTPId=a0qVo00000WbjCFIAZ\u0026origuidOrig=mr_db_vsl_a15_250902\u0026origspidOrig=null\u0026step=1\u0026origdsidOrig=\u0026origmainFunnelIdOrig=a0qVo00000WbmtKIAR\u0026origExternalOrig=true\u0026origExternalIDOrig=a0qVo00000WbmtKIAR\u0026genericUrl=video250902a_la_ap-mr_db_vsl_a15_250902\u0026orignameOrig=video250902a_la_ap-mr_db_vsl_a15_250902\u0026origbrandOrig=Beverly%20Hills%20MD\u0026business_unit=a00f400000jv55aaat\u0026utm_campaign=bhmd-db-metreset-cpaeml-all--250902\u0026utm_campaign_id=701Vo00000rCqdrIAC\u0026utm_content=3rd_party_email\u0026utm_source=email\u0026subid1=8398a1215b3d43708c54a4686e489f07\u0026subid2=16\u0026subid3=catmetaresetdonut1130\u0026subid5=everflow\u0026sessionid=936099273179","date":"2025-11-30T23:54:30.414Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vidalytics.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Mon, 07 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C6:52:A8:37:80:94:C0:4F:E8:20:81:85:2F:D5:64:FD:B1:DF:66:B2","sha256":"64:1D:1A:89:A4:A0:E4:28:77:CB:72:DF:AA:04:B3:59:79:65:3A:B7:95:50:B4:01:2C:BC:90:11:27:C5:80:10"}}},"request":{"raw":"GET /video/DXNWe2Do/vkFWiNdWnUZl0nEn/210618/197647__FFMPEG/ts/video/640x360_h264_900000/1.ts HTTP/1.1\r\nHost: fast.vidalytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www3.totalmetabolicreset.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www3.totalmetabolicreset.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 30 Nov 2025 23:54:30 GMT\r\ncontent-type: video/mp2t\r\ncontent-length: 410028\r\nx-cff: B\r\nx-guploader-uploadid: AAwnv3Lgzc_Npo2lD9achBUj79cf9ck7ofuEfgD44jaCxEQEfU_diurVPSmqwa1z40YlpxQaadXRdCM\r\ncache-control: public, max-age=31104000\r\nexpires: Fri, 09 Oct 2026 22:43:01 GMT\r\nlast-modified: Wed, 10 Sep 2025 21:33:56 GMT\r\netag: \"b94146e2a415adf17b037ab32d1c5cb4\"\r\nx-goog-generation: 1757540036261275\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 410028\r\nx-goog-hash: crc32c=RCc7AA==, md5=uUFG4qQVrfF7A3qzLRxctA==\r\nx-goog-storage-class: STANDARD\r\naccess-control-allow-origin: *\r\nx-lb-backend: gcs-prod\r\nx-lb-cache: miss\r\nx-cf3: H\r\ncf4age: 22843\r\nx-cf-tsc: 1764546870\r\ncf4ttl: 31081156.000\r\nx-cdn: 8\r\nx-cdn-site: c8-prod\r\naccess-control-expose-headers: Content-Type, server, x-hw, x-cdn, x-cdn-info, x-cache, x-cache-hits, x-served-by, x-goog-stored-content-length, content-length, x-lb-backend, x-lb-cache, x-cf1, x-cf2, x-cf3, x-cff\r\nx-cf2: M\r\naccept-ranges: bytes\r\nserver: CFS 1124\r\nx-cf1: 42305:fB.arn1:co:1736526511:cacheN.arn1-01:M\r\nx-cf-reqid: 56ef75749ebbf7c3fb2612dcdee99de7\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CacheFly","description":"CacheFly is a content delivery network (CDN) which offers CDN service that relies solely on IP anycast for routing, rather than DNS based global load balancing.","website":"https://www.cachefly.com","common_platform_enumeration":"","icon":"CacheFly.svg","categories":["CDN"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":410028,"size_decoded":0,"mime_type":"video/mp2t","magic":"data","md5":"b94146e2a415adf17b037ab32d1c5cb4","sha1":"e6a6b6a9de73c1fe3c011fcadf8d8f736c394ff2","sha256":"be922be91a53cd749ad42198df1c5e9243b796ae668c7a6522d14d88b81026e6","sha512":"946db43c3c5e6d5a2df9bfb9fe20cce674f6ac6745911115557c7721f069331ae0ad1c42bb0c45334caec5e0d0171002b71b79a8b852ef1e1164ad1085dd7412","ssdeep":"12288:9y7TFYGhC05aS40UrlC1of7zsIPhb2AfeKi:8aGIUaS40UQi7zsIZaAti","tlshash":"f79423da3b955cd6d80505f0e8f497f652444c40cf8867ab2b68f39cbdfca95ea1209c","first_seen":"2025-11-30T23:54:43.487084Z","last_seen":"2025-11-30T23:55:04.987649Z","times_seen":3,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":37,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fast.vidalytics.com/video/DXNWe2Do/vkFWiNdWnUZl0nEn/210618/197647__FFMPEG/ts/video/1280x720_h264_2400000/2.ts","fqdn":"fast.vidalytics.com","domain":"vidalytics.com","tld":"com"},"ip":{"addr":"205.234.175.175","port":443,"asn":30081,"as":"CACHENETWORKS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www3.totalmetabolicreset.com/video250902a_la_ap?origexperimentalOrig=true\u0026step=1\u0026funnelSTPId=a0qVo00000WbjCFIAZ\u0026origuidOrig=mr_db_vsl_a15_250902\u0026origspidOrig=null\u0026step=1\u0026origdsidOrig=\u0026origmainFunnelIdOrig=a0qVo00000WbmtKIAR\u0026origExternalOrig=true\u0026origExternalIDOrig=a0qVo00000WbmtKIAR\u0026genericUrl=video250902a_la_ap-mr_db_vsl_a15_250902\u0026orignameOrig=video250902a_la_ap-mr_db_vsl_a15_250902\u0026origbrandOrig=Beverly%20Hills%20MD\u0026business_unit=a00f400000jv55aaat\u0026utm_campaign=bhmd-db-metreset-cpaeml-all--250902\u0026utm_campaign_id=701Vo00000rCqdrIAC\u0026utm_content=3rd_party_email\u0026utm_source=email\u0026subid1=8398a1215b3d43708c54a4686e489f07\u0026subid2=16\u0026subid3=catmetaresetdonut1130\u0026subid5=everflow\u0026sessionid=936099273179","date":"2025-11-30T23:54:30.564Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vidalytics.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Mon, 07 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C6:52:A8:37:80:94:C0:4F:E8:20:81:85:2F:D5:64:FD:B1:DF:66:B2","sha256":"64:1D:1A:89:A4:A0:E4:28:77:CB:72:DF:AA:04:B3:59:79:65:3A:B7:95:50:B4:01:2C:BC:90:11:27:C5:80:10"}}},"request":{"raw":"GET /video/DXNWe2Do/vkFWiNdWnUZl0nEn/210618/197647__FFMPEG/ts/video/1280x720_h264_2400000/2.ts HTTP/1.1\r\nHost: fast.vidalytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www3.totalmetabolicreset.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www3.totalmetabolicreset.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 30 Nov 2025 23:54:30 GMT\r\ncontent-type: video/mp2t\r\ncontent-length: 871944\r\nx-cff: B\r\nx-guploader-uploadid: AOCedOG3z0fFGDoW4FvFnRJ6jG0EzBVWSF1HB1eXtvu779pkzhQttpMgxLHlmIeM0V4j17nPaZYpkHWsksspCQ\r\ncache-control: public, max-age=31104000\r\nexpires: Wed, 18 Nov 2026 23:08:03 GMT\r\nlast-modified: Wed, 10 Sep 2025 21:39:51 GMT\r\netag: \"04d19904af7fdaf4f9b025f6303f6f1d\"\r\nx-goog-generation: 1757540391939441\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 871944\r\nx-goog-hash: crc32c=63uuwA==, md5=BNGZBK9/2vT5sCX2MD9vHQ==\r\nx-goog-storage-class: STANDARD\r\naccess-control-allow-origin: *\r\nx-lb-backend: gcs-prod\r\nx-lb-cache: miss\r\nx-cf3: H\r\ncf4age: 0\r\nx-cf-tsc: 1764546871\r\ncf4ttl: 31104000.000\r\nx-cdn: 8\r\nx-cdn-site: c8-prod\r\naccess-control-expose-headers: Content-Type, server, x-hw, x-cdn, x-cdn-info, x-cache, x-cache-hits, x-served-by, x-goog-stored-content-length, content-length, x-lb-backend, x-lb-cache, x-cf1, x-cf2, x-cf3, x-cff\r\nx-cf2: M\r\naccept-ranges: bytes\r\nserver: CFS 1124\r\nx-cf1: 42305:fB.arn1:co:1736526511:cacheN.arn1-01:M\r\nx-cf-reqid: 5a817f2a559b4b88ac8c471fbf076395\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"CacheFly","description":"CacheFly is a content delivery network (CDN) which offers CDN service that relies solely on IP anycast for routing, rather than DNS based global load balancing.","website":"https://www.cachefly.com","common_platform_enumeration":"","icon":"CacheFly.svg","categories":["CDN"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}],"data":{"size":871944,"size_decoded":0,"mime_type":"video/mp2t","magic":"data","md5":"04d19904af7fdaf4f9b025f6303f6f1d","sha1":"1940ce498797eaab7590b7476e4bc2fd69166b02","sha256":"55801d6505bf85eff9d09572f04a9dc66c77118d3c9665b0cf6d5a0e29f787d8","sha512":"decbfbfdbd81e30ee1420937b049b5c1dbc7eaf4750f4abf4e9f8a54e5488ca6e59988ba8c5ee7c64373e1b2806b79b77cb518b01d09035dba09ff40272ea6b3","ssdeep":"24576:8bjSvqTp/7bnw0GFrEcEBE3YSi1cI+TyUDGZY22xkL15:ojRpfw0GF1RPip+GUD6Y2Nb","tlshash":"6a0523587b814cebed80467b359be3d6666e5c20ab4c2293a2b2f73de5f61c5e304170","first_seen":"2025-11-30T23:54:43.420481Z","last_seen":"2025-11-30T23:55:05.007689Z","times_seen":3,"resource_available":false,"data":null}},"time_used":171,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":131,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-NHMV223","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www3.totalmetabolicreset.com/video250902a_la_ap?origexperimentalOrig=true\u0026step=1\u0026funnelSTPId=a0qVo00000WbjCFIAZ\u0026origuidOrig=mr_db_vsl_a15_250902\u0026origspidOrig=null\u0026step=1\u0026origdsidOrig=\u0026origmainFunnelIdOrig=a0qVo00000WbmtKIAR\u0026origExternalOrig=true\u0026origExternalIDOrig=a0qVo00000WbmtKIAR\u0026genericUrl=video250902a_la_ap-mr_db_vsl_a15_250902\u0026orignameOrig=video250902a_la_ap-mr_db_vsl_a15_250902\u0026origbrandOrig=Beverly%20Hills%20MD\u0026business_unit=a00f400000jv55aaat\u0026utm_campaign=bhmd-db-metreset-cpaeml-all--250902\u0026utm_campaign_id=701Vo00000rCqdrIAC\u0026utm_content=3rd_party_email\u0026utm_source=email\u0026subid1=8398a1215b3d43708c54a4686e489f07\u0026subid2=16\u0026subid3=catmetaresetdonut1130\u0026subid5=everflow\u0026sessionid=936099273179","date":"2025-11-30T23:54:28.373Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:33:43 GMT","end":"Mon, 19 Jan 2026 08:33:42 GMT"},"fingerprint":{"sha1":"4E:9E:D1:61:E4:7D:C2:8A:B6:AD:D2:31:C7:07:01:E4:DB:A0:A7:A9","sha256":"C5:DD:D4:CA:97:B7:B5:8C:B4:99:E8:56:30:AC:1B:F0:FD:7C:5A:FD:19:ED:13:D0:27:D6:0B:76:C7:C7:A0:66"}}},"request":{"raw":"GET /gtm.js?id=GTM-NHMV223 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www3.totalmetabolicreset.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\ndate: Sun, 30 Nov 2025 23:54:28 GMT\r\nexpires: Sun, 30 Nov 2025 23:54:28 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Sun, 30 Nov 2025 21:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 177954\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":716456,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (53755)","md5":"0825874e0419bd4d2d23625fa665f080","sha1":"67f3703a4140a99f636158615256c54b0fae1337","sha256":"13067d43332086b5674b89a41b46b67ea959e3594ee794181c14c03a2198266d","sha512":"91e1d2d3a31945df6518777b8c1582f5111c0024deb3d17d492c56e071f03cb1dafc35b7292f2493f5cc3082e6e2f7c64938912e5c90475b09c326541a078386","ssdeep":"12288:qFyLwuwL4r7DWQKYrObWEpBITbm2zQEVUnJUUHrO7J:qFy0uwL4r7DWQKYrObWEpBITbm2tVMUJ","tlshash":"65e429ce7589a876c3966c64c43f494e293914b2754cac50f8ddc8e81e705ba2263fbf","first_seen":"2025-11-30T23:54:43.447426Z","last_seen":"2025-11-30T23:54:59.587041Z","times_seen":2,"resource_available":true,"data":null}},"time_used":505,"timings":{"blocked":201,"dns":9,"connect":8,"send":0,"wait":64,"receive":30,"ssl":191},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.beverlyhillsmd.com/fonts/LibreFranklin-VariableFont_wght.ttf","fqdn":"cdn.beverlyhillsmd.com","domain":"beverlyhillsmd.com","tld":"com"},"ip":{"addr":"104.18.36.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www3.totalmetabolicreset.com/video250902a_la_ap?origexperimentalOrig=true\u0026step=1\u0026funnelSTPId=a0qVo00000WbjCFIAZ\u0026origuidOrig=mr_db_vsl_a15_250902\u0026origspidOrig=null\u0026step=1\u0026origdsidOrig=\u0026origmainFunnelIdOrig=a0qVo00000WbmtKIAR\u0026origExternalOrig=true\u0026origExternalIDOrig=a0qVo00000WbmtKIAR\u0026genericUrl=video250902a_la_ap-mr_db_vsl_a15_250902\u0026orignameOrig=video250902a_la_ap-mr_db_vsl_a15_250902\u0026origbrandOrig=Beverly%20Hills%20MD\u0026business_unit=a00f400000jv55aaat\u0026utm_campaign=bhmd-db-metreset-cpaeml-all--250902\u0026utm_campaign_id=701Vo00000rCqdrIAC\u0026utm_content=3rd_party_email\u0026utm_source=email\u0026subid1=8398a1215b3d43708c54a4686e489f07\u0026subid2=16\u0026subid3=catmetaresetdonut1130\u0026subid5=everflow\u0026sessionid=936099273179","date":"2025-11-30T23:54:28.696Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"beverlyhillsmd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Nov 2025 04:02:31 GMT","end":"Thu, 12 Feb 2026 05:02:27 GMT"},"fingerprint":{"sha1":"44:DC:D2:57:95:63:FA:48:DE:C2:33:E4:0C:B9:EF:C4:C6:DF:75:5C","sha256":"81:97:E9:D9:50:B7:EB:5E:73:F1:2C:E5:5D:66:4F:CD:D0:EE:4B:D5:EC:37:72:AD:68:66:BA:86:57:33:9B:DB"}}},"request":{"raw":"GET /fonts/LibreFranklin-VariableFont_wght.ttf HTTP/1.1\r\nHost: cdn.beverlyhillsmd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www3.totalmetabolicreset.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www3.totalmetabolicreset.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 30 Nov 2025 23:54:28 GMT\r\ncontent-type: binary/octet-stream\r\ncontent-length: 103512\r\ncf-ray: 9a6e45297c2bb500-OSL\r\nx-amz-id-2: ofx9T2hY1grG9InlNEOy4ccurQz5YKPaglr+nG1yS0c+Oiq26+nGp0YDZQ0yD3bi2tHTsL6yis4=\r\nx-amz-request-id: KEAYT1QRDTEF3RKC\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding\r\nlast-modified: Fri, 29 Dec 2023 01:18:09 GMT\r\netag: \"99bb071fcb1c3001c785f659bfbfdbf2\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: BPHL8lxWaoIch.8XyQt24pxSzpd_V89v\r\ncf-cache-status: HIT\r\nage: 16\r\nexpires: Mon, 01 Dec 2025 03:54:28 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=znhdRe8qUQ0zC9LowRpIL2sOIhkoKTCktqPyzxObk5Y-1764546868-1.0.1.1-j0bHJstxszVSYrpFQNvcfwn8JqrW.3fC9FjTWYrz1HEiFazgKubp3jm_ON05SmUDYrs3BueDuHmze7QET_qNedYkUBnA8Td4xfExEDQqn_o; path=/; expires=Mon, 01-Dec-25 00:24:28 GMT; domain=.beverlyhillsmd.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":103512,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"TrueType Font data, 20 tables, 1st \"GDEF\", 39 names, Microsoft, language 0x409, Copyright 2020 The LibreFranklin Project Authors (https://github.com/impallari/Libre-Franklin)Li","md5":"99bb071fcb1c3001c785f659bfbfdbf2","sha1":"3c8539021a2166ffe6b5ff850cd14130917df59a","sha256":"74cd5d0e9046a8861aa90c5e1b254092a94b8bc1916e6a34ecf8180dcc84fed4","sha512":"a781ed9797ed705e6d7c982b5d3d904989c5512c28787cf47b45a1ab39ca70bc1ff23bef90c3ca77f6dd0318dc8cabdcc28ad0c69435ea23f9328e9deaaa8a92","ssdeep":"1536:W37mAMXKhept0Et/C8ym2VEJ2N7zKlHJurqboZEF7n/e:WrmTX70WwXV1Nasqc+7nm","tlshash":"d8a36c027fa2dfabe4112ffc94a647915739fd01fe02860f5111ba39ac663729d016eb","first_seen":"2023-12-29T20:21:30Z","last_seen":"2026-04-01T12:49:24.100204Z","times_seen":338,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":23,"dns":1,"connect":1,"send":0,"wait":25,"receive":4,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.beverlyhillsmd.com/wp-content/uploads/2023/05/Beverly-Hills-MD-Logo-Grey.png","fqdn":"cdn.beverlyhillsmd.com","domain":"beverlyhillsmd.com","tld":"com"},"ip":{"addr":"104.18.36.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www3.totalmetabolicreset.com/video250902a_la_ap?origexperimentalOrig=true\u0026step=1\u0026funnelSTPId=a0qVo00000WbjCFIAZ\u0026origuidOrig=mr_db_vsl_a15_250902\u0026origspidOrig=null\u0026step=1\u0026origdsidOrig=\u0026origmainFunnelIdOrig=a0qVo00000WbmtKIAR\u0026origExternalOrig=true\u0026origExternalIDOrig=a0qVo00000WbmtKIAR\u0026genericUrl=video250902a_la_ap-mr_db_vsl_a15_250902\u0026orignameOrig=video250902a_la_ap-mr_db_vsl_a15_250902\u0026origbrandOrig=Beverly%20Hills%20MD\u0026business_unit=a00f400000jv55aaat\u0026utm_campaign=bhmd-db-metreset-cpaeml-all--250902\u0026utm_campaign_id=701Vo00000rCqdrIAC\u0026utm_content=3rd_party_email\u0026utm_source=email\u0026subid1=8398a1215b3d43708c54a4686e489f07\u0026subid2=16\u0026subid3=catmetaresetdonut1130\u0026subid5=everflow\u0026sessionid=936099273179","date":"2025-11-30T23:54:29.285Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"beverlyhillsmd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Nov 2025 04:02:31 GMT","end":"Thu, 12 Feb 2026 05:02:27 GMT"},"fingerprint":{"sha1":"44:DC:D2:57:95:63:FA:48:DE:C2:33:E4:0C:B9:EF:C4:C6:DF:75:5C","sha256":"81:97:E9:D9:50:B7:EB:5E:73:F1:2C:E5:5D:66:4F:CD:D0:EE:4B:D5:EC:37:72:AD:68:66:BA:86:57:33:9B:DB"}}},"request":{"raw":"GET /wp-content/uploads/2023/05/Beverly-Hills-MD-Logo-Grey.png HTTP/1.1\r\nHost: cdn.beverlyhillsmd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www3.totalmetabolicreset.com/\r\nCookie: __cf_bm=FwLozWfSFs8VrJv83bqs_yjNpFL5niCamk1FCMrgZuU-1764546868-1.0.1.1-YrmrUZEcRmUKfEOP4payh3pddXbCgNI6qeERyMqQiY8TCMDinBt7M_rlDM3k4gXuBofQ995adBoCFqC7P3s87h.MZ8wCXVhe7u5NxgOp4Qs\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 30 Nov 2025 23:54:29 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7136\r\ncf-ray: 9a6e452d0d0b568e-OSL\r\ncache-control: public, max-age=31536000\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=8336\r\ncontent-disposition: inline; filename=\"Beverly-Hills-MD-Logo-Grey.webp\"\r\netag: \"8790413e3384279193371ddfdbf67fd6\"\r\nlast-modified: Sat, 13 May 2023 23:03:17 GMT\r\nvary: Accept\r\nx-amz-id-2: meuRpGMLw7qUZEaf0EFvhL4s39snEOCaSAxqAs6hnaPxhNDd2iTqBmZJGhpbm29wk0cyzKktvJo=\r\nx-amz-request-id: 3VTJTVCDW7KTP19W\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: null\r\ncf-cache-status: HIT\r\nage: 16\r\nexpires: Mon, 30 Nov 2026 23:54:29 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7136,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"297fd797d2d34abcb7b7e04c2feb0363","sha1":"6a78859d7e8affa07910aedab49b59f5b9e264fb","sha256":"14b565284d62f0ee69094261be5838d99ba4dfdb8b826de48ae8d914299a0f2f","sha512":"56998334619c064ce584f759e37fbca387dd886e5d227041b2f4ab9391953d16712ca4cdb1657fcd3f0d1e76edae2ea1b59e0de57610db3d406361a00fcf804d","ssdeep":"192:lySw84Voaaw+bPz1yUtaIhZ/fFEcKUILkDYzFGnyLbhrh2nYG:lyS34OayL7taW9fF8UGkDYzEw5MnYG","tlshash":"c0e19e5f80a556edde12acf727b7f4135cb9ae857527b4c37600e232024521e0a934cf","first_seen":"2025-10-30T04:48:59.29591Z","last_seen":"2026-02-12T18:25:45.71785Z","times_seen":162,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www2.totalmetabolicreset.com/proxy/funnel/stats/alternsave/?event=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","fqdn":"www2.totalmetabolicreset.com","domain":"totalmetabolicreset.com","tld":"com"},"ip":{"addr":"172.64.149.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www3.totalmetabolicreset.com/video250902a_la_ap?origexperimentalOrig=true\u0026step=1\u0026funnelSTPId=a0qVo00000WbjCFIAZ\u0026origuidOrig=mr_db_vsl_a15_250902\u0026origspidOrig=null\u0026step=1\u0026origdsidOrig=\u0026origmainFunnelIdOrig=a0qVo00000WbmtKIAR\u0026origExternalOrig=true\u0026origExternalIDOrig=a0qVo00000WbmtKIAR\u0026genericUrl=video250902a_la_ap-mr_db_vsl_a15_250902\u0026orignameOrig=video250902a_la_ap-mr_db_vsl_a15_250902\u0026origbrandOrig=Beverly%20Hills%20MD\u0026business_unit=a00f400000jv55aaat\u0026utm_campaign=bhmd-db-metreset-cpaeml-all--250902\u0026utm_campaign_id=701Vo00000rCqdrIAC\u0026utm_content=3rd_party_email\u0026utm_source=email\u0026subid1=8398a1215b3d43708c54a4686e489f07\u0026subid2=16\u0026subid3=catmetaresetdonut1130\u0026subid5=everflow\u0026sessionid=936099273179","date":"2025-11-30T23:54:29.463Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"totalmetabolicreset.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 20:42:52 GMT","end":"Wed, 14 Jan 2026 21:42:41 GMT"},"fingerprint":{"sha1":"1A:08:7D:E4:80:5E:99:26:40:1D:85:3A:AE:9E:9A:65:4A:97:5E:A8","sha256":"B0:E0:A6:12:07:32:2F:E9:00:19:12:32:E5:53:D0:0B:8A:C7:FF:27:BC:F7:CE:2E:C5:E8:16:C9:14:17:A1:B0"}}},"request":{"raw":"GET /proxy/funnel/stats/alternsave/?event=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 HTTP/1.1\r\nHost: www2.totalmetabolicreset.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www3.totalmetabolicreset.com/\r\nCookie: __cf_bm=K2G9mXA4YmQ_g7_1sv6FlSCruMObW3tb8uvEtdWzbf0-1764546868-1.0.1.1-q1IPWCjey2Q96xjkfLC3t5cpV9UeqEw0b.AsKCi33jibqZtR7QrPr2OQsi83SC2D17y2CK3MoFrA8oEhchKp8QklGny63gvlETjllx.VLJU; tcrFed=false; alternaiGuestId=e5e5b94d-0325-45a4-92e6-0c76b86862cf,www3.totalmetabolicreset.com,,blob:https:\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 30 Nov 2025 23:54:29 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 29\r\ncf-ray: 9a6e452e1866712b-OSL\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\netag: W/\"1d-RfI0mb55JJVfolfOEMKnZBLgoWw\"\r\nexpires: 0\r\npragma: no-cache\r\nset-cookie: _csrf=dPfL5RJyb262TcxSCqaP4SEh; Path=/\n_csrf=ZmFuokPLMBTFYnaGcqXNgN8E; Path=/\nXSRF-TOKEN=pIBAMMCI-Mtx3ME3WKmcnM0ObFpv5sly-FJc; Path=/; Secure\n_csrf=EdTdkjlmCDL2OpGUEdOibXme; Path=/\n_csrf=vhpxpRpzQGTmgN8k3rlaIFoD; Path=/\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nvary: Accept-Encoding\r\nvia: 1.1 spaces-router (001c5eea6469)\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":29,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"666c82637166f160b430c3a13caf3b30","sha1":"45f23499be7924955fa257ce10c2a76412e0a16c","sha256":"b5b1625932b3d2b242b95c8680756c5d79135956bb1f6fd0b9544261a9d56389","sha512":"5093d6e86bc27101dc8bd7efb9f910e2e39a949c3673c709b68793586b143764f37a7f8fae74169e0af56b0be04270ec40e5f7258cca1b66f375e4b9c644864e","ssdeep":"","tlshash":"b38000a00a820b30a08020280c28008328080e22200a300020a808aca0a083bb002020","first_seen":"2023-03-07T23:57:52Z","last_seen":"2026-04-03T06:11:11.704056Z","times_seen":2127,"resource_available":true,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":126,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fast.vidalytics.com/video/DXNWe2Do/vkFWiNdWnUZl0nEn/210618/197647__FFMPEG/ts/video/1280x720_h264_2400000/1.ts","fqdn":"fast.vidalytics.com","domain":"vidalytics.com","tld":"com"},"ip":{"addr":"205.234.175.175","port":443,"asn":30081,"as":"CACHENETWORKS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www3.totalmetabolicreset.com/video250902a_la_ap?origexperimentalOrig=true\u0026step=1\u0026funnelSTPId=a0qVo00000WbjCFIAZ\u0026origuidOrig=mr_db_vsl_a15_250902\u0026origspidOrig=null\u0026step=1\u0026origdsidOrig=\u0026origmainFunnelIdOrig=a0qVo00000WbmtKIAR\u0026origExternalOrig=true\u0026origExternalIDOrig=a0qVo00000WbmtKIAR\u0026genericUrl=video250902a_la_ap-mr_db_vsl_a15_250902\u0026orignameOrig=video250902a_la_ap-mr_db_vsl_a15_250902\u0026origbrandOrig=Beverly%20Hills%20MD\u0026business_unit=a00f400000jv55aaat\u0026utm_campaign=bhmd-db-metreset-cpaeml-all--250902\u0026utm_campaign_id=701Vo00000rCqdrIAC\u0026utm_content=3rd_party_email\u0026utm_source=email\u0026subid1=8398a1215b3d43708c54a4686e489f07\u0026subid2=16\u0026subid3=catmetaresetdonut1130\u0026subid5=everflow\u0026sessionid=936099273179","date":"2025-11-30T23:54:31.040Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vidalytics.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Mon, 07 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C6:52:A8:37:80:94:C0:4F:E8:20:81:85:2F:D5:64:FD:B1:DF:66:B2","sha256":"64:1D:1A:89:A4:A0:E4:28:77:CB:72:DF:AA:04:B3:59:79:65:3A:B7:95:50:B4:01:2C:BC:90:11:27:C5:80:10"}}},"request":{"raw":"GET /video/DXNWe2Do/vkFWiNdWnUZl0nEn/210618/197647__FFMPEG/ts/video/1280x720_h264_2400000/1.ts HTTP/1.1\r\nHost: fast.vidalytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www3.totalmetabolicreset.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www3.totalmetabolicreset.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 30 Nov 2025 23:54:31 GMT\r\ncontent-type: video/mp2t\r\ncontent-length: 1049604\r\nx-cff: B\r\nx-guploader-uploadid: AOCedOGICAy99AwQFvWvHmLSzsJTdxsKi50T1hGMF-OM9qwufq_WMtmb5RHMuhEOA3eGrtdNGOmbsDk\r\ncache-control: public, max-age=31104000\r\nexpires: Wed, 25 Nov 2026 23:54:31 GMT\r\nlast-modified: Wed, 10 Sep 2025 21:39:50 GMT\r\netag: \"1ee512df85a8d501ce33d1e80d0e0b1b\"\r\nx-goog-generation: 1757540390583819\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 1049604\r\nx-goog-hash: crc32c=UXUcBA==, md5=HuUS34Wo1QHOM9HoDQ4LGw==\r\nx-goog-storage-class: STANDARD\r\naccess-control-allow-origin: *\r\nx-lb-backend: gcs-prod\r\nx-lb-cache: miss\r\nx-cf3: M\r\ncf4age: 0\r\nx-cf-tsc: 1764546871\r\ncf4ttl: 31104000.000\r\nx-cdn: 8\r\nx-cdn-site: c8-prod\r\naccess-control-expose-headers: Content-Type, server, x-hw, x-cdn, x-cdn-info, x-cache, x-cache-hits, x-served-by, x-goog-stored-content-length, content-length, x-lb-backend, x-lb-cache, x-cf1, x-cf2, x-cf3, x-cff\r\nx-cf2: M\r\naccept-ranges: bytes\r\nserver: CFS 1124\r\nx-cf1: 42305:fB.arn1:co:1736526511:cacheN.arn1-01:M\r\nx-cf-reqid: e238c8c4838a189e3376881eeb780d9e\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"CacheFly","description":"CacheFly is a content delivery network (CDN) which offers CDN service that relies solely on IP anycast for routing, rather than DNS based global load balancing.","website":"https://www.cachefly.com","common_platform_enumeration":"","icon":"CacheFly.svg","categories":["CDN"]}],"data":{"size":1049604,"size_decoded":0,"mime_type":"video/mp2t","magic":"data","md5":"cfaab75976eef6ec53af45960764a2cc","sha1":"c971f6ec9d761aeaf2bf4a9d2aaeb16a4633daad","sha256":"4795e658ee89be7c71df4c18b6592292c38e50185d9b1262131fc5df5f4e171d","sha512":"42ae754afb46de416f6a0fb3baca3a8dcccfdf69c7e7cbd0973ca2d37f63771f3844cb381bf817fe3af0c8daa57143f766f63626f54bf77639cd78385850842f","ssdeep":"24576:KV4t1qK8iC5hmDQpxwOlR9XXOYpQevra0:KriCvEQpxNbXfQeDa0","tlshash":"be25231c23b5be1eed9122b221b9eb604131dd9467de9bca4748f20efdbd1d8e990470","first_seen":"2025-11-30T23:54:43.429464Z","last_seen":"2025-11-30T23:55:05.013011Z","times_seen":3,"resource_available":false,"data":null}},"time_used":264,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":210,"receive":54,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/icon?family=Material+Icons","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www3.totalmetabolicreset.com/video250902a_la_ap?origexperimentalOrig=true\u0026step=1\u0026funnelSTPId=a0qVo00000WbjCFIAZ\u0026origuidOrig=mr_db_vsl_a15_250902\u0026origspidOrig=null\u0026step=1\u0026origdsidOrig=\u0026origmainFunnelIdOrig=a0qVo00000WbmtKIAR\u0026origExternalOrig=true\u0026origExternalIDOrig=a0qVo00000WbmtKIAR\u0026genericUrl=video250902a_la_ap-mr_db_vsl_a15_250902\u0026orignameOrig=video250902a_la_ap-mr_db_vsl_a15_250902\u0026origbrandOrig=Beverly%20Hills%20MD\u0026business_unit=a00f400000jv55aaat\u0026utm_campaign=bhmd-db-metreset-cpaeml-all--250902\u0026utm_campaign_id=701Vo00000rCqdrIAC\u0026utm_content=3rd_party_email\u0026utm_source=email\u0026subid1=8398a1215b3d43708c54a4686e489f07\u0026subid2=16\u0026subid3=catmetaresetdonut1130\u0026subid5=everflow\u0026sessionid=936099273179","date":"2025-11-30T23:54:28.359Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:34:58 GMT","end":"Mon, 19 Jan 2026 08:34:57 GMT"},"fingerprint":{"sha1":"56:14:7E:EF:FA:D2:CF:DD:3B:30:9C:AE:7A:C9:AD:9E:A7:87:3D:E9","sha256":"72:DD:0F:82:4D:8A:09:2D:BB:5B:E6:1B:6F:09:F8:1E:BD:BD:D3:3E:B8:A4:8C:B9:49:13:4D:DC:D7:EF:EA:77"}}},"request":{"raw":"GET /icon?family=Material+Icons HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www3.totalmetabolicreset.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 30 Nov 2025 23:54:28 GMT\r\ndate: Sun, 30 Nov 2025 23:54:28 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":565,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"2b7a8d84952a9183b106df19f711324e","sha1":"a92c5e12b422bba9ebb447e1852d9681487361bc","sha256":"282801a0d182035440d5ef6d429d227126d2e6720a52b91d31a7d746c758154e","sha512":"d7ef3f86fe9fa5730a118c688b8f779e82ec3695df5ec48953905ed078ef4d78a3c8005021574d936f69ff0467968b6e68fbcb0680894470abf8f26200af2e0c","ssdeep":"","tlshash":"c0f0c064be0a988566110c42370f3f164d1d401fa80ac8fe8b911d4c8cff1bb134670f","first_seen":"2025-09-17T21:11:07.996842Z","last_seen":"2026-04-04T00:13:33.573627Z","times_seen":30525,"resource_available":false,"data":null}},"time_used":308,"timings":{"blocked":135,"dns":0,"connect":20,"send":0,"wait":32,"receive":0,"ssl":118},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www3.totalmetabolicreset.com/9769.js","fqdn":"www3.totalmetabolicreset.com","domain":"totalmetabolicreset.com","tld":"com"},"ip":{"addr":"172.64.149.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www3.totalmetabolicreset.com/video250902a_la_ap?origexperimentalOrig=true\u0026step=1\u0026funnelSTPId=a0qVo00000WbjCFIAZ\u0026origuidOrig=mr_db_vsl_a15_250902\u0026origspidOrig=null\u0026step=1\u0026origdsidOrig=\u0026origmainFunnelIdOrig=a0qVo00000WbmtKIAR\u0026origExternalOrig=true\u0026origExternalIDOrig=a0qVo00000WbmtKIAR\u0026genericUrl=video250902a_la_ap-mr_db_vsl_a15_250902\u0026orignameOrig=video250902a_la_ap-mr_db_vsl_a15_250902\u0026origbrandOrig=Beverly%20Hills%20MD\u0026business_unit=a00f400000jv55aaat\u0026utm_campaign=bhmd-db-metreset-cpaeml-all--250902\u0026utm_campaign_id=701Vo00000rCqdrIAC\u0026utm_content=3rd_party_email\u0026utm_source=email\u0026subid1=8398a1215b3d43708c54a4686e489f07\u0026subid2=16\u0026subid3=catmetaresetdonut1130\u0026subid5=everflow\u0026sessionid=936099273179","date":"2025-11-30T23:54:29.046Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"totalmetabolicreset.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 20:42:52 GMT","end":"Wed, 14 Jan 2026 21:42:41 GMT"},"fingerprint":{"sha1":"1A:08:7D:E4:80:5E:99:26:40:1D:85:3A:AE:9E:9A:65:4A:97:5E:A8","sha256":"B0:E0:A6:12:07:32:2F:E9:00:19:12:32:E5:53:D0:0B:8A:C7:FF:27:BC:F7:CE:2E:C5:E8:16:C9:14:17:A1:B0"}}},"request":{"raw":"GET /9769.js HTTP/1.1\r\nHost: www3.totalmetabolicreset.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www3.totalmetabolicreset.com/video250902a_la_ap?origexperimentalOrig=true\u0026step=1\u0026funnelSTPId=a0qVo00000WbjCFIAZ\u0026origuidOrig=mr_db_vsl_a15_250902\u0026origspidOrig=null\u0026step=1\u0026origdsidOrig=\u0026origmainFunnelIdOrig=a0qVo00000WbmtKIAR\u0026origExternalOrig=true\u0026origExternalIDOrig=a0qVo00000WbmtKIAR\u0026genericUrl=video250902a_la_ap-mr_db_vsl_a15_250902\u0026orignameOrig=video250902a_la_ap-mr_db_vsl_a15_250902\u0026origbrandOrig=Beverly%20Hills%20MD\u0026business_unit=a00f400000jv55aaat\u0026utm_campaign=bhmd-db-metreset-cpaeml-all--250902\u0026utm_campaign_id=701Vo00000rCqdrIAC\u0026utm_content=3rd_party_email\u0026utm_source=email\u0026subid1=8398a1215b3d43708c54a4686e489f07\u0026subid2=16\u0026subid3=catmetaresetdonut1130\u0026subid5=everflow\u0026sessionid=936099273179\r\nCookie: __cf_bm=K2G9mXA4YmQ_g7_1sv6FlSCruMObW3tb8uvEtdWzbf0-1764546868-1.0.1.1-q1IPWCjey2Q96xjkfLC3t5cpV9UeqEw0b.AsKCi33jibqZtR7QrPr2OQsi83SC2D17y2CK3MoFrA8oEhchKp8QklGny63gvlETjllx.VLJU\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 30 Nov 2025 23:54:29 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-encoding: gzip\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\netag: W/\"2595f-19abc3b8280\"\r\nexpires: 0\r\nlast-modified: Tue, 25 Nov 2025 18:16:48 GMT\r\npragma: no-cache\r\nvary: Accept-Encoding\r\nvia: 1.1 spaces-router (001c5eea6469)\r\nx-powered-by: Express\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 9a6e452b8f01712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":153951,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"001cabde8ca7a4e5e224473ac3e5bd4a","sha1":"b5a88426f91f0dd28edea1182ef49685de80c5cc","sha256":"8a60952f34915eff962ac763069f156ae726de582f5f8619cb0d07403081651a","sha512":"53f64c2519b59e246d7c14beeb23e9c690d72d2a98145e40c278a2b1890e42b739dfa4e55dc1e1815e816165c4bc9ac7da7e7e11724a7868c5f8093e66b23875","ssdeep":"1536:vQo06cLnKVvxGzc6u1AyMS5Q30QOnvmJgWsvSfjcL7esY/uo20udcUpFe+F+xqPa:Z0znKVYyM+blynujZzPK","tlshash":"37e3b5ceb291b5a24297a1b5603f090be2377dc5540d40acf255e8ee7c7c48892bbf79","first_seen":"2025-11-30T23:54:43.477493Z","last_seen":"2026-02-12T18:25:45.699874Z","times_seen":102,"resource_available":true,"data":null}},"time_used":153,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":142,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www3.totalmetabolicreset.com/8115.js","fqdn":"www3.totalmetabolicreset.com","domain":"totalmetabolicreset.com","tld":"com"},"ip":{"addr":"172.64.149.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www3.totalmetabolicreset.com/video250902a_la_ap?origexperimentalOrig=true\u0026step=1\u0026funnelSTPId=a0qVo00000WbjCFIAZ\u0026origuidOrig=mr_db_vsl_a15_250902\u0026origspidOrig=null\u0026step=1\u0026origdsidOrig=\u0026origmainFunnelIdOrig=a0qVo00000WbmtKIAR\u0026origExternalOrig=true\u0026origExternalIDOrig=a0qVo00000WbmtKIAR\u0026genericUrl=video250902a_la_ap-mr_db_vsl_a15_250902\u0026orignameOrig=video250902a_la_ap-mr_db_vsl_a15_250902\u0026origbrandOrig=Beverly%20Hills%20MD\u0026business_unit=a00f400000jv55aaat\u0026utm_campaign=bhmd-db-metreset-cpaeml-all--250902\u0026utm_campaign_id=701Vo00000rCqdrIAC\u0026utm_content=3rd_party_email\u0026utm_source=email\u0026subid1=8398a1215b3d43708c54a4686e489f07\u0026subid2=16\u0026subid3=catmetaresetdonut1130\u0026subid5=everflow\u0026sessionid=936099273179","date":"2025-11-30T23:54:29.049Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"totalmetabolicreset.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 20:42:52 GMT","end":"Wed, 14 Jan 2026 21:42:41 GMT"},"fingerprint":{"sha1":"1A:08:7D:E4:80:5E:99:26:40:1D:85:3A:AE:9E:9A:65:4A:97:5E:A8","sha256":"B0:E0:A6:12:07:32:2F:E9:00:19:12:32:E5:53:D0:0B:8A:C7:FF:27:BC:F7:CE:2E:C5:E8:16:C9:14:17:A1:B0"}}},"request":{"raw":"GET /8115.js HTTP/1.1\r\nHost: www3.totalmetabolicreset.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www3.totalmetabolicreset.com/video250902a_la_ap?origexperimentalOrig=true\u0026step=1\u0026funnelSTPId=a0qVo00000WbjCFIAZ\u0026origuidOrig=mr_db_vsl_a15_250902\u0026origspidOrig=null\u0026step=1\u0026origdsidOrig=\u0026origmainFunnelIdOrig=a0qVo00000WbmtKIAR\u0026origExternalOrig=true\u0026origExternalIDOrig=a0qVo00000WbmtKIAR\u0026genericUrl=video250902a_la_ap-mr_db_vsl_a15_250902\u0026orignameOrig=video250902a_la_ap-mr_db_vsl_a15_250902\u0026origbrandOrig=Beverly%20Hills%20MD\u0026business_unit=a00f400000jv55aaat\u0026utm_campaign=bhmd-db-metreset-cpaeml-all--250902\u0026utm_campaign_id=701Vo00000rCqdrIAC\u0026utm_content=3rd_party_email\u0026utm_source=email\u0026subid1=8398a1215b3d43708c54a4686e489f07\u0026subid2=16\u0026subid3=catmetaresetdonut1130\u0026subid5=everflow\u0026sessionid=936099273179\r\nCookie: __cf_bm=K2G9mXA4YmQ_g7_1sv6FlSCruMObW3tb8uvEtdWzbf0-1764546868-1.0.1.1-q1IPWCjey2Q96xjkfLC3t5cpV9UeqEw0b.AsKCi33jibqZtR7QrPr2OQsi83SC2D17y2CK3MoFrA8oEhchKp8QklGny63gvlETjllx.VLJU\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 30 Nov 2025 23:54:29 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-encoding: gzip\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\netag: W/\"6951-19abc3b8280\"\r\nexpires: 0\r\nlast-modified: Tue, 25 Nov 2025 18:16:48 GMT\r\npragma: no-cache\r\nvary: Accept-Encoding\r\nvia: 1.1 spaces-router (001c5eea6469)\r\nx-powered-by: Express\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 9a6e452b8f03712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":26961,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (26961), with no line terminators","md5":"606aa0c351169a46cb539242b920cfe8","sha1":"bc0b70bb4929d271c96cebdab743cf337c31e0bc","sha256":"894adf3e1b95bb7ae88e131154090076383b142f18528041592a843a857ef2c0","sha512":"ca11522ebf9c37b9c9b1db762e367672d53297b10820cd2e832c6e9ed00e936b706e33712914f6d0088a4d9b54ca11404b7c75fd5d20c8e53a03393d5e4e1a1c","ssdeep":"768:6HDiiNOQSaUmjSsKNLFr/LZqz7h2DyM8Oneo91lm4QEjCs:ybTBjD0Cs","tlshash":"d3c2f90bb14511fac353a0d8bffbad44e72d7c8e75469af1f8ac8e946f4864493a3124","first_seen":"2025-11-30T23:54:43.434408Z","last_seen":"2025-11-30T23:55:05.024593Z","times_seen":3,"resource_available":true,"data":null}},"time_used":150,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":148,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www2.totalmetabolicreset.com/proxy/funnel/stats/alternsave/?event=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","fqdn":"www2.totalmetabolicreset.com","domain":"totalmetabolicreset.com","tld":"com"},"ip":{"addr":"172.64.149.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www3.totalmetabolicreset.com/video250902a_la_ap?origexperimentalOrig=true\u0026step=1\u0026funnelSTPId=a0qVo00000WbjCFIAZ\u0026origuidOrig=mr_db_vsl_a15_250902\u0026origspidOrig=null\u0026step=1\u0026origdsidOrig=\u0026origmainFunnelIdOrig=a0qVo00000WbmtKIAR\u0026origExternalOrig=true\u0026origExternalIDOrig=a0qVo00000WbmtKIAR\u0026genericUrl=video250902a_la_ap-mr_db_vsl_a15_250902\u0026orignameOrig=video250902a_la_ap-mr_db_vsl_a15_250902\u0026origbrandOrig=Beverly%20Hills%20MD\u0026business_unit=a00f400000jv55aaat\u0026utm_campaign=bhmd-db-metreset-cpaeml-all--250902\u0026utm_campaign_id=701Vo00000rCqdrIAC\u0026utm_content=3rd_party_email\u0026utm_source=email\u0026subid1=8398a1215b3d43708c54a4686e489f07\u0026subid2=16\u0026subid3=catmetaresetdonut1130\u0026subid5=everflow\u0026sessionid=936099273179","date":"2025-11-30T23:54:29.462Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"totalmetabolicreset.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 20:42:52 GMT","end":"Wed, 14 Jan 2026 21:42:41 GMT"},"fingerprint":{"sha1":"1A:08:7D:E4:80:5E:99:26:40:1D:85:3A:AE:9E:9A:65:4A:97:5E:A8","sha256":"B0:E0:A6:12:07:32:2F:E9:00:19:12:32:E5:53:D0:0B:8A:C7:FF:27:BC:F7:CE:2E:C5:E8:16:C9:14:17:A1:B0"}}},"request":{"raw":"GET /proxy/funnel/stats/alternsave/?event=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 HTTP/1.1\r\nHost: www2.totalmetabolicreset.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www3.totalmetabolicreset.com/\r\nCookie: __cf_bm=K2G9mXA4YmQ_g7_1sv6FlSCruMObW3tb8uvEtdWzbf0-1764546868-1.0.1.1-q1IPWCjey2Q96xjkfLC3t5cpV9UeqEw0b.AsKCi33jibqZtR7QrPr2OQsi83SC2D17y2CK3MoFrA8oEhchKp8QklGny63gvlETjllx.VLJU; tcrFed=false; alternaiGuestId=e5e5b94d-0325-45a4-92e6-0c76b86862cf,www3.totalmetabolicreset.com,,blob:https:\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 30 Nov 2025 23:54:29 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 29\r\ncf-ray: 9a6e452e1862712b-OSL\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\netag: W/\"1d-RfI0mb55JJVfolfOEMKnZBLgoWw\"\r\nexpires: 0\r\npragma: no-cache\r\nset-cookie: _csrf=XeCZ_FBWX8ohqeHE5oUP4hZi; Path=/\n_csrf=WS3KHmQJy9oFzyhxoNq0HwxR; Path=/\nXSRF-TOKEN=MVNCA2E5-Zx_PyQjnMBuBanrQB3N7uwrkB2g; Path=/; Secure\n_csrf=Z1iOrq2Cln_lmq6GYyiPHxRX; Path=/\n_csrf=DrxkJ82Q4JMFcUgvPN4pU7Xf; Path=/\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nvary: Accept-Encoding\r\nvia: 1.1 spaces-router (001c5eea6469)\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":29,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"666c82637166f160b430c3a13caf3b30","sha1":"45f23499be7924955fa257ce10c2a76412e0a16c","sha256":"b5b1625932b3d2b242b95c8680756c5d79135956bb1f6fd0b9544261a9d56389","sha512":"5093d6e86bc27101dc8bd7efb9f910e2e39a949c3673c709b68793586b143764f37a7f8fae74169e0af56b0be04270ec40e5f7258cca1b66f375e4b9c644864e","ssdeep":"","tlshash":"b38000a00a820b30a08020280c28008328080e22200a300020a808aca0a083bb002020","first_seen":"2023-03-07T23:57:52Z","last_seen":"2026-04-03T06:11:11.704056Z","times_seen":2127,"resource_available":true,"data":null}},"time_used":143,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":143,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stats.vidalytics.com/scribe","fqdn":"stats.vidalytics.com","domain":"vidalytics.com","tld":"com"},"ip":{"addr":"107.178.211.97","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www3.totalmetabolicreset.com/video250902a_la_ap?origexperimentalOrig=true\u0026step=1\u0026funnelSTPId=a0qVo00000WbjCFIAZ\u0026origuidOrig=mr_db_vsl_a15_250902\u0026origspidOrig=null\u0026step=1\u0026origdsidOrig=\u0026origmainFunnelIdOrig=a0qVo00000WbmtKIAR\u0026origExternalOrig=true\u0026origExternalIDOrig=a0qVo00000WbmtKIAR\u0026genericUrl=video250902a_la_ap-mr_db_vsl_a15_250902\u0026orignameOrig=video250902a_la_ap-mr_db_vsl_a15_250902\u0026origbrandOrig=Beverly%20Hills%20MD\u0026business_unit=a00f400000jv55aaat\u0026utm_campaign=bhmd-db-metreset-cpaeml-all--250902\u0026utm_campaign_id=701Vo00000rCqdrIAC\u0026utm_content=3rd_party_email\u0026utm_source=email\u0026subid1=8398a1215b3d43708c54a4686e489f07\u0026subid2=16\u0026subid3=catmetaresetdonut1130\u0026subid5=everflow\u0026sessionid=936099273179","date":"2025-11-30T23:54:31.086Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vidalytics.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Mon, 07 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C6:52:A8:37:80:94:C0:4F:E8:20:81:85:2F:D5:64:FD:B1:DF:66:B2","sha256":"64:1D:1A:89:A4:A0:E4:28:77:CB:72:DF:AA:04:B3:59:79:65:3A:B7:95:50:B4:01:2C:BC:90:11:27:C5:80:10"}}},"request":{"raw":"POST /scribe HTTP/1.1\r\nHost: stats.vidalytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain; charset=utf-8\r\nContent-Length: 967\r\nOrigin: https://www3.totalmetabolicreset.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www3.totalmetabolicreset.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":967,"data":"{\"customerId\":\"DXNWe2Do\",\"videoId\":\"vkFWiNdWnUZl0nEn\",\"timestamp\":1764546871,\"timeSinceNav\":3035,\"eventIndex\":1,\"sessionId\":\"Th2wOlCwqT\",\"userId\":\"J2agbNFNeXcES95d\",\"player\":\"hls\",\"event\":\"Vidalytics.Player.EVENT_PAUSE\",\"videoTime\":0,\"referer\":\"\",\"site\":\"https://www3.totalmetabolicreset.com/video250902a_la_ap?origexperimentalOrig=true\u0026step=1\u0026step=1\u0026funnelSTPId=a0qVo00000WbjCFIAZ\u0026origuidOrig=mr_db_vsl_a15_250902\u0026origspidOrig=null\u0026origdsidOrig=\u0026origmainFunnelIdOrig=a0qVo00000WbmtKIAR\u0026origExternalOrig=true\u0026origExternalIDOrig=a0qVo00000WbmtKIAR\u0026genericUrl=video250902a_la_ap-mr_db_vsl_a15_250902\u0026orignameOrig=video250902a_la_ap-mr_db_vsl_a15_250902\u0026origbrandOrig=Beverly%20Hills%20MD\u0026business_unit=a00f400000jv55aaat\u0026utm_campaign=bhmd-db-metreset-cpaeml-all--250902\u0026utm_campaign_id=701Vo00000rCqdrIAC\u0026utm_content=3rd_party_email\u0026utm_source=email\u0026subid1=8398a1215b3d43708c54a4686e489f07\u0026subid2=16\u0026subid3=catmetaresetdonut1130\u0026subid5=everflow\u0026sessionid=936099273179\"}"}},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-methods: POST,OPTIONS\r\ncontent-type: application/json\r\ndate: Sun, 30 Nov 2025 23:54:31 GMT\r\ncontent-length: 16\r\nx-envoy-upstream-service-time: 2\r\nserver: istio-envoy\r\naccess-control-allow-origin: https://www3.totalmetabolicreset.com\r\naccess-control-expose-headers: Access-Control-Allow-Origin,Cache-Control,Content-Length,Content-Type,ETag,If-None-Match\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":16,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"a1cbd35d4488ac8cc6f959d4c633dc37","sha1":"11844023759429ec785ae1c18e6a9c69803ee2bd","sha256":"707d4c7f44dd33e874b5a09b6dba4702b12bfd3e19e470d601fcfc1d7009286c","sha512":"1681f6f4eb56a4a46346eebdb411eedc18fe2975b9929ddb57647f50ce8b33529df03285b8ebcb747552e625b674bc140ee4b33263edcb336ab6e4caac532b3c","ssdeep":"","tlshash":"46600003000c00300cf03c00030330303f300f00000f00fc000c303000003c0c00c000","first_seen":"2023-04-05T11:33:20Z","last_seen":"2026-04-03T22:32:38.283819Z","times_seen":9629,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":135,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stats.vidalytics.com/awesome-log?cid=DXNWe2Do\u0026uid=J2agbNFNeXcES95d","fqdn":"stats.vidalytics.com","domain":"vidalytics.com","tld":"com"},"ip":{"addr":"107.178.211.97","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www3.totalmetabolicreset.com/video250902a_la_ap?origexperimentalOrig=true\u0026step=1\u0026funnelSTPId=a0qVo00000WbjCFIAZ\u0026origuidOrig=mr_db_vsl_a15_250902\u0026origspidOrig=null\u0026step=1\u0026origdsidOrig=\u0026origmainFunnelIdOrig=a0qVo00000WbmtKIAR\u0026origExternalOrig=true\u0026origExternalIDOrig=a0qVo00000WbmtKIAR\u0026genericUrl=video250902a_la_ap-mr_db_vsl_a15_250902\u0026orignameOrig=video250902a_la_ap-mr_db_vsl_a15_250902\u0026origbrandOrig=Beverly%20Hills%20MD\u0026business_unit=a00f400000jv55aaat\u0026utm_campaign=bhmd-db-metreset-cpaeml-all--250902\u0026utm_campaign_id=701Vo00000rCqdrIAC\u0026utm_content=3rd_party_email\u0026utm_source=email\u0026subid1=8398a1215b3d43708c54a4686e489f07\u0026subid2=16\u0026subid3=catmetaresetdonut1130\u0026subid5=everflow\u0026sessionid=936099273179","date":"2025-11-30T23:54:32.643Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vidalytics.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Mon, 07 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C6:52:A8:37:80:94:C0:4F:E8:20:81:85:2F:D5:64:FD:B1:DF:66:B2","sha256":"64:1D:1A:89:A4:A0:E4:28:77:CB:72:DF:AA:04:B3:59:79:65:3A:B7:95:50:B4:01:2C:BC:90:11:27:C5:80:10"}}},"request":{"raw":"OPTIONS /awesome-log?cid=DXNWe2Do\u0026uid=J2agbNFNeXcES95d HTTP/1.1\r\nHost: stats.vidalytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://www3.totalmetabolicreset.com/\r\nOrigin: https://www3.totalmetabolicreset.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: https://www3.totalmetabolicreset.com\r\naccess-control-allow-methods: POST,GET,PUT,PATCH,DELETE,OPTIONS\r\naccess-control-allow-headers: Accept,Authorization,Cache-Control,Content-Disposition,Content-Type,Origin,pragma,Range,X-Requested-With,X-File-Name,X-Filename\r\naccess-control-expose-headers: Access-Control-Allow-Origin,Cache-Control,Content-Length,Content-Type,ETag,If-None-Match\r\ndate: Sun, 30 Nov 2025 23:54:32 GMT\r\nserver: istio-envoy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T00:31:03.876566Z","times_seen":13308907,"resource_available":true,"data":null}},"time_used":133,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":133,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stats.vidalytics.com/scribe","fqdn":"stats.vidalytics.com","domain":"vidalytics.com","tld":"com"},"ip":{"addr":"107.178.211.97","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www3.totalmetabolicreset.com/video250902a_la_ap?origexperimentalOrig=true\u0026step=1\u0026funnelSTPId=a0qVo00000WbjCFIAZ\u0026origuidOrig=mr_db_vsl_a15_250902\u0026origspidOrig=null\u0026step=1\u0026origdsidOrig=\u0026origmainFunnelIdOrig=a0qVo00000WbmtKIAR\u0026origExternalOrig=true\u0026origExternalIDOrig=a0qVo00000WbmtKIAR\u0026genericUrl=video250902a_la_ap-mr_db_vsl_a15_250902\u0026orignameOrig=video250902a_la_ap-mr_db_vsl_a15_250902\u0026origbrandOrig=Beverly%20Hills%20MD\u0026business_unit=a00f400000jv55aaat\u0026utm_campaign=bhmd-db-metreset-cpaeml-all--250902\u0026utm_campaign_id=701Vo00000rCqdrIAC\u0026utm_content=3rd_party_email\u0026utm_source=email\u0026subid1=8398a1215b3d43708c54a4686e489f07\u0026subid2=16\u0026subid3=catmetaresetdonut1130\u0026subid5=everflow\u0026sessionid=936099273179","date":"2025-11-30T23:54:43.328Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vidalytics.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Mon, 07 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C6:52:A8:37:80:94:C0:4F:E8:20:81:85:2F:D5:64:FD:B1:DF:66:B2","sha256":"64:1D:1A:89:A4:A0:E4:28:77:CB:72:DF:AA:04:B3:59:79:65:3A:B7:95:50:B4:01:2C:BC:90:11:27:C5:80:10"}}},"request":{"raw":"POST /scribe HTTP/1.1\r\nHost: stats.vidalytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain; charset=utf-8\r\nContent-Length: 1132\r\nOrigin: https://www3.totalmetabolicreset.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www3.totalmetabolicreset.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1132,"data":"{\"customerId\":\"DXNWe2Do\",\"videoId\":\"vkFWiNdWnUZl0nEn\",\"timestamp\":1764546880,\"timeSinceNav\":12299,\"eventIndex\":1,\"sessionId\":\"Th2wOlCwqT\",\"userId\":\"J2agbNFNeXcES95d\",\"player\":\"hls\",\"event\":\"Vidalytics.Player.EVENT_USER_ACTING\",\"videoTime\":0,\"referer\":\"\",\"site\":\"https://www3.totalmetabolicreset.com/video250902a_la_ap?origexperimentalOrig=true\u0026step=1\u0026step=1\u0026funnelSTPId=a0qVo00000WbjCFIAZ\u0026origuidOrig=mr_db_vsl_a15_250902\u0026origspidOrig=null\u0026origdsidOrig=\u0026origmainFunnelIdOrig=a0qVo00000WbmtKIAR\u0026origExternalOrig=true\u0026origExternalIDOrig=a0qVo00000WbmtKIAR\u0026genericUrl=video250902a_la_ap-mr_db_vsl_a15_250902\u0026orignameOrig=video250902a_la_ap-mr_db_vsl_a15_250902\u0026origbrandOrig=Beverly%20Hills%20MD\u0026business_unit=a00f400000jv55aaat\u0026utm_campaign=bhmd-db-metreset-cpaeml-all--250902\u0026utm_campaign_id=701Vo00000rCqdrIAC\u0026utm_content=3rd_party_email\u0026utm_source=email\u0026subid1=8398a1215b3d43708c54a4686e489f07\u0026subid2=16\u0026subid3=catmetaresetdonut1130\u0026subid5=everflow\u0026sessionid=936099273179\",\"activity\":{\"scroll\":0,\"resize\":0,\"click\":0,\"mouse\":0,\"keyboard\":0,\"touch\":0},\"visibility\":{\"isVideoInViewport\":true,\"isFullscreen\":false,\"isTabActive\":true}}"}},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-methods: POST,OPTIONS\r\ncontent-type: application/json\r\ndate: Sun, 30 Nov 2025 23:54:43 GMT\r\ncontent-length: 16\r\nx-envoy-upstream-service-time: 1\r\nserver: istio-envoy\r\naccess-control-allow-origin: https://www3.totalmetabolicreset.com\r\naccess-control-expose-headers: Access-Control-Allow-Origin,Cache-Control,Content-Length,Content-Type,ETag,If-None-Match\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":16,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"a1cbd35d4488ac8cc6f959d4c633dc37","sha1":"11844023759429ec785ae1c18e6a9c69803ee2bd","sha256":"707d4c7f44dd33e874b5a09b6dba4702b12bfd3e19e470d601fcfc1d7009286c","sha512":"1681f6f4eb56a4a46346eebdb411eedc18fe2975b9929ddb57647f50ce8b33529df03285b8ebcb747552e625b674bc140ee4b33263edcb336ab6e4caac532b3c","ssdeep":"","tlshash":"46600003000c00300cf03c00030330303f300f00000f00fc000c303000003c0c00c000","first_seen":"2023-04-05T11:33:20Z","last_seen":"2026-04-03T22:32:38.283819Z","times_seen":9629,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":134,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fast.vidalytics.com/embeds/DXNWe2Do/NX7sxHgNztzqfSXb/loader.min.js","fqdn":"fast.vidalytics.com","domain":"vidalytics.com","tld":"com"},"ip":{"addr":"205.234.175.175","port":443,"asn":30081,"as":"CACHENETWORKS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www3.totalmetabolicreset.com/video250902a_la_ap?origexperimentalOrig=true\u0026step=1\u0026funnelSTPId=a0qVo00000WbjCFIAZ\u0026origuidOrig=mr_db_vsl_a15_250902\u0026origspidOrig=null\u0026step=1\u0026origdsidOrig=\u0026origmainFunnelIdOrig=a0qVo00000WbmtKIAR\u0026origExternalOrig=true\u0026origExternalIDOrig=a0qVo00000WbmtKIAR\u0026genericUrl=video250902a_la_ap-mr_db_vsl_a15_250902\u0026orignameOrig=video250902a_la_ap-mr_db_vsl_a15_250902\u0026origbrandOrig=Beverly%20Hills%20MD\u0026business_unit=a00f400000jv55aaat\u0026utm_campaign=bhmd-db-metreset-cpaeml-all--250902\u0026utm_campaign_id=701Vo00000rCqdrIAC\u0026utm_content=3rd_party_email\u0026utm_source=email\u0026subid1=8398a1215b3d43708c54a4686e489f07\u0026subid2=16\u0026subid3=catmetaresetdonut1130\u0026subid5=everflow\u0026sessionid=936099273179","date":"2025-11-30T23:54:29.298Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vidalytics.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Mon, 07 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C6:52:A8:37:80:94:C0:4F:E8:20:81:85:2F:D5:64:FD:B1:DF:66:B2","sha256":"64:1D:1A:89:A4:A0:E4:28:77:CB:72:DF:AA:04:B3:59:79:65:3A:B7:95:50:B4:01:2C:BC:90:11:27:C5:80:10"}}},"request":{"raw":"GET /embeds/DXNWe2Do/NX7sxHgNztzqfSXb/loader.min.js HTTP/1.1\r\nHost: fast.vidalytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www3.totalmetabolicreset.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 30 Nov 2025 23:54:29 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 23022\r\nx-cff: B\r\ncache-control: public, max-age=600, s-maxage=86400, stale-while-revalidate=3600\r\nvary: Accept-Encoding\r\nx-envoy-upstream-service-time: 93\r\nx-envoy-decorator-operation: vidalytics-player-api.vidalytics-player-api.svc.cluster.local:80/*\r\nx-lb-backend: api-prod\r\naccess-control-allow-origin: *\r\nsurrogate-key: lb-api\r\nx-lb-cache: disabled\r\nx-cf3: H\r\ncf4age: 0\r\nx-cf-tsc: 1764546870\r\ncf4ttl: 86400.000\r\nx-cdn: 8\r\nx-cdn-site: c8-prod\r\naccess-control-expose-headers: Content-Type, server, x-hw, x-cdn, x-cdn-info, x-cache, x-cache-hits, x-served-by, x-goog-stored-content-length, content-length, x-lb-backend, x-lb-cache, x-cf1, x-cf2, x-cf3, x-cff\r\ncontent-encoding: gzip\r\nx-cf2: M\r\naccept-ranges: bytes\r\nserver: CFS 1124\r\nx-cf1: 42305:fB.arn1:co:1761778519:cacheN.arn1-01:M\r\nx-cf-reqid: b923a4b642e03255a19954c8f96b3d6c\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"CacheFly","description":"CacheFly is a content delivery network (CDN) which offers CDN service that relies solely on IP anycast for routing, rather than DNS based global load balancing.","website":"https://www.cachefly.com","common_platform_enumeration":"","icon":"CacheFly.svg","categories":["CDN"]}],"data":{"size":65764,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"1ae2072572880f2dee22f46835d6ddf9","sha1":"2c18303180e9c191f36f3e29456cbc2ae4ec75db","sha256":"712cc6643d80b85ea4731dad6e9bdbf254126691fd8613aba51d9b3b1339908e","sha512":"d5bd8ed68e7ecd83e8e489aa4312c424b5697dfd1998cc04818b7919f1acfd21e0e6d1950d0338dc5ce69f50dbef0d4f67277cc16b8333b5244a9ad8e5c00046","ssdeep":"768:k9OlwI3ABb8R5uGcpCfCZAqBX+CcNl/RDdRf0Ss9vAp6+ZI6TaTVjtcdskkNZk:S8R5FcJBjYl/vRfMKnI6UVjYskk3k","tlshash":"2d5309c8b695f06143f750b6813f2607f33e6a26a448c550a523e9d47cb978ee263f39","first_seen":"2025-11-30T23:54:43.495888Z","last_seen":"2025-11-30T23:55:05.003408Z","times_seen":3,"resource_available":true,"data":null}},"time_used":400,"timings":{"blocked":133,"dns":8,"connect":17,"send":0,"wait":129,"receive":2,"ssl":104},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
