Report - go.offerwave.org/aff_c?offer_id=1291&aff_id=1507&aff_sub=052623_4792_582_am&aff_sub3=1005554&aff_sub5=pthomas@slurpmail.net&source=_______&file

Report Overview

Submitted URL
go.offerwave.org/aff_c?offer_id=1291&aff_id=1507&aff_sub=052623_4792_582_am&aff_sub3=1005554&aff_sub5=pthomas@slurpmail.net&source=_______&file_id=5070
IP
34.253.72.70
ASN
#16509 AMAZON-02
Submitted
2023-05-26 15:19:09
Access
public
Website Title
Final URL
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
4

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
yt3.ggpht.com	203	2008-01-16	2014-01-15	2023-05-26	487 B	3.6 kB	142.250.74.161
fonts.googleapis.com	8877	2005-01-25	2013-06-10	2023-05-26	3.0 kB	91 kB	142.250.74.106
www.youtube.com	90	2005-02-15	2013-04-13	2023-05-26	10 kB	2.2 MB	216.58.211.14
i.ytimg.com	109	2007-12-11	2012-10-03	2023-05-26	544 B	51 kB	142.250.74.150
ciscobinary.openh264.org	40822	2013-10-19	2014-10-07	2023-05-26	295 B	512 kB	88.221.134.209
use.fontawesome.com	942	2012-10-18	2017-01-30	2023-05-26	891 B	19 kB	104.21.62.252
aus5.mozilla.org	2548	1998-01-24	2015-10-27	2023-05-26	513 B	1.2 kB	35.244.181.201
fonts.gstatic.com	unknown	2008-02-11	2014-09-09	2023-05-26	4.9 kB	261 kB	216.58.207.227
track.addevent.com	31058	2005-11-12	2015-06-24	2022-02-05	813 B	0 B	0.0.0.0
ocsp.r2m02.amazontrust.com	unknown	2007-05-11	2022-10-12	2023-05-26	340 B	943 B	54.230.80.227
go.offerwave.org	916542	2019-05-13	2019-06-13	2023-05-26	607 B	2.0 kB	34.241.40.98
go.healthyliving.news	unknown	2020-10-07	2020-10-20	2023-05-26	58 kB	8.7 MB	104.16.15.194
ocsp.pki.goog	175	2016-06-13	2018-07-01	2023-05-26	4.3 kB	9.1 kB	142.250.74.131
trk.legendaff.com	unknown	2019-08-14	2020-02-20	2023-05-26	599 B	375 kB	172.67.187.7
static.cloudflareinsights.com	1294	2019-08-30	2019-09-24	2023-05-26	510 B	20 kB	104.16.56.101
assets.clickfunnels.com	64830	2013-10-02	2014-10-08	2023-05-26	462 B	2.6 kB	104.16.12.194
app.clickfunnels.com	34727	2013-10-02	2015-03-12	2023-05-26	5.6 kB	25 kB	104.16.12.194
jnn-pa.googleapis.com	2640	2005-01-25	2021-11-16	2023-05-26	2.5 kB	34 kB	172.217.21.170
www.google.com	7	1997-09-15	2015-05-10	2023-05-26	443 B	16 kB	216.58.207.228

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

No alerts detected

mnemonic secure dns

Scan Date	Severity	Indicator	Alert
2023-05-26	medium	slurpmail.net

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2023-05-26	medium	slurpmail.net

ThreatFox

No alerts detected

Files detected

URL
ciscobinary.openh264.org/openh264-linux64-2e1774ab6dc6c43debb0b5b628bdf122a391d521.zip
IP
88.221.134.209
ASN
#20940 Akamai International B.V.

File type
Zip archive data, at least v2.0 to extract, compression method=deflate\012- data
Size
512 kB (511815 bytes)
Hash
152eda253e242e18443ef3282495bc7c
ff0fa85565f21ec4931baad4573b4c0bd08c4019
8e03090fee16f6e0ee2e436af8e51d0c3deed6d9f0db80dec048e668fc009a48

JavaScript (157)

	URL	Size	First Seen	Last Seen
	go.healthyliving.news/assets/userevents/application.js	5.2 kB	2023-03-08	2024-04-21
Pretty URL go.healthyliving.news/assets/userevents/application.js IP 104.16.15.194 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 14:28:42 Last Seen2024-04-21 22:38:03 Times Seen1323 Hash 4849819314b7c1be4146a39b52c5c502 3e09f90cb42c04ff19f66dbbd83e3dbb544b50bf a696b734193371073510c87df68430499c2f424ad3f7be42f586dc6aff78567b Loading...

	unknown	38 kB	2023-05-10	2023-06-06
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-05-10 09:38:18 Last Seen2023-06-06 08:59:18 Times Seen2206 Hash 2243a4c2d71474169b3c91e9d5cb245c 65ee8e11820bebbd3eb4b556cc6ef27a4c1e0e29 c4e6f448747468f72a80c49e504e2413c10525fcd7b732b377b5baccb2b7649d Loading...

	www.youtube.com/s/player/bbe1b497/player_ias.vflset/en_US/remote.js	119 kB	2023-05-24	2023-06-02
Pretty URL www.youtube.com/s/player/bbe1b497/player_ias.vflset/en_US/remote.js IP 216.58.211.14 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-05-24 18:24:11 Last Seen2023-06-02 04:53:35 Times Seen2216 Hash 7838e965c560882a5e57df7b31977db8 b01998f38298cca57b49943572a66678c5021c8c 12e41f82a5a1b8b2ef61b7001a78df3dd1d387c0da7e884144530f479f6ea86e Loading...

	go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a	280 B	2023-03-12	2023-05-26
Pretty URL go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a IP 104.16.15.194 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-12 08:08:44 Last Seen2023-05-26 17:19:16 Times Seen2 Hash 5ef6789ed1494c203b457829283d5335 cbd5014bd1d56a183dbf21ac78b181b3a0285b93 b589bf968db7fd47a66864ed64f3ac1bb1cf40b8d4fd148e8c8ec2992bcdb206 Loading...

	static.cloudflareinsights.com/beacon.min.js/v52afc6f149f6479b8c77fa569edb01181681764108816	20 kB	2023-04-18	2024-04-21
Pretty URL static.cloudflareinsights.com/beacon.min.js/v52afc6f149f6479b8c77fa569edb01181681764108816 IP 104.16.56.101 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-04-18 04:27:55 Last Seen2024-04-21 01:34:52 Times Seen14481 Hash d294b48fb7400508953205265f95d2e1 fd545d38241c9c56e81f61e45cd239976ecd0b46 13a548e040a1ec08f77911fed1d559b95e5daae0ee227e632140e003c7268e7b Loading...

	unknown	0 B	2023-03-07	2024-04-25
Pretty Introduced by eventHandler Embedded in HTML false Observations First Seen2023-03-07 01:01:59 Last Seen2024-04-25 18:12:17 Times Seen37069159 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	www.youtube.com/embed/yGj-hjKMzgE?autoplay=0&modestbranding=1&controls=1&showinfo=0&rel=0&hd=1&wmode=transparent	134 B	2023-03-07	2024-04-25
Pretty URL www.youtube.com/embed/yGj-hjKMzgE?autoplay=0&modestbranding=1&controls=1&showinfo=0&rel=0&hd=1&wmode=transparent IP 216.58.211.14 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:02:14 Last Seen2024-04-25 16:38:07 Times Seen34230 Hash e18eb9d0972d240f1a5456179bb6523b 65255f106adcff2907a98e295a8e7a38fe2884c4 3d68db2b85d5a2915743399f09dc438963f0c50f68b02df05d47a372661603e8 Loading...

	go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a	27 kB	2023-05-10	2023-06-29
Pretty URL go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a IP 104.16.15.194 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-05-10 00:22:23 Last Seen2023-06-29 06:20:35 Times Seen97 Hash 9fdff6a811b4210fb9d2d600a8ba5dab c77851367424a94ae4166f100b726b0483ec7911 a2e8de2d1868e43926904d4124a2f6603eb3a6e5b625aa933958d89497a19746 Loading...

	go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a	101 B	2023-03-07	2024-04-21
Pretty URL go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a IP 104.16.15.194 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:29:18 Last Seen2024-04-21 22:38:00 Times Seen1073 Hash 58d9451139b4d777d43d7c3e074a944a 58dbf64854e67993dd579ecc78d1a32fea9266ed 85f043b5d0590f154a02cf29f549340485f0e6dd78c70ab8746555092fc9d493 Loading...

	www.youtube.com/embed/yGj-hjKMzgE?autoplay=0&modestbranding=1&controls=1&showinfo=0&rel=0&hd=1&wmode=transparent	2.0 kB	2023-05-19	2023-10-31
Pretty URL www.youtube.com/embed/yGj-hjKMzgE?autoplay=0&modestbranding=1&controls=1&showinfo=0&rel=0&hd=1&wmode=transparent IP 216.58.211.14 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML true Observations First Seen2023-05-19 01:35:04 Last Seen2023-10-31 23:30:03 Times Seen18657 Hash f670de50bfdc421ed90d6977fa3b0985 a9a21da0cb19918d4abad7686bd5f3b49b20403f 8e3c92868dd6e1f72f1c2c92f903c886aad77124d2d14c2b7792ec2be953a173 Loading...

	go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a	395 B	2023-03-07	2024-04-21
Pretty URL go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a IP 104.16.15.194 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:29:18 Last Seen2024-04-21 22:38:00 Times Seen1084 Hash b2c93212afb38693d023d97f822acd42 a971c75819436a7c7d9c3b388b8be10f1286fdcb dbde09f9e5cc2ecdeffe30752eac8756ca637e0c524bdbd5b1c7e5704aae004f Loading...

	www.youtube.com/embed/yGj-hjKMzgE?autoplay=0&modestbranding=1&controls=1&showinfo=0&rel=0&hd=1&wmode=transparent	64 kB	2023-05-26	2023-05-26
Pretty URL www.youtube.com/embed/yGj-hjKMzgE?autoplay=0&modestbranding=1&controls=1&showinfo=0&rel=0&hd=1&wmode=transparent IP 216.58.211.14 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML true Observations First Seen2023-05-26 17:19:16 Last Seen2023-05-26 17:19:16 Times Seen1 Hash b80151d3564199042594ee9934b0aa57 f812660667dc7dc4d2424053716d259cbe0316a3 61fbad16a653359eaac368494090023b1758695631a73ccee404940bd23a83ed Loading...

	www.youtube.com/iframe_api	1.1 kB	2023-05-25	2023-06-02
Pretty URL www.youtube.com/iframe_api IP 216.58.211.14 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-05-25 01:11:31 Last Seen2023-06-02 05:45:14 Times Seen853 Hash 85b384312488050928dd7fead044fbd2 65a14f37855b70d3e2ccfca88689e333786c7e78 5c82c8e08221bc7f060b619b3daa70d444f7b292e69c0bc32f7c8259c942b977 Loading...

	go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a	1.0 kB	2023-03-07	2024-04-21
Pretty URL go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a IP 104.16.15.194 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:29:18 Last Seen2024-04-21 22:38:00 Times Seen1074 Hash 7e04d8a0aac6ab1ec08163bd215a5711 f425cd8bab39529985cf2a9cf866a877b4fca17a 4e3d5220213c311337410362a4654f5ea226e71707a85229385cec6d871cc05a Loading...

	go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a	3 B	2023-03-07	2024-04-25
Pretty URL go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a IP 104.16.15.194 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:03:22 Last Seen2024-04-25 10:30:24 Times Seen1142 Hash f67be96ce768fb5b40aecf0438f97886 d27fecd03a022cc6f670ca42ef1b99d5f5bcc74c 3441b5696d6abf2bd959d18bcb31dde8239a6ad8185bfa659af60bc764c238a8 Loading...

	go.healthyliving.news/assets/lander.js	2.3 MB	2023-05-22	2023-05-31
Pretty URL go.healthyliving.news/assets/lander.js IP 104.16.15.194 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-05-22 19:36:01 Last Seen2023-05-31 23:04:20 Times Seen55 Hash 0e97f7987cf77e8bee046e3b3a65b937 46dd20d454cb0858ffa0acd7748515f9ba7aa9f6 d4352fcc8f6e13bc9ad4efc682475f3793103e5bdf3b0dabaf0b7fb359a1c70e Loading...

	go.healthyliving.news/vendor.js	18 kB	2023-03-07	2024-04-21
Pretty URL go.healthyliving.news/vendor.js IP 104.16.15.194 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:29:18 Last Seen2024-04-21 22:38:03 Times Seen1311 Hash bf2a8a168c0be1544c34f363c276586e 581e49c9b7bdd06dab54c00931f4256b223e620e 7422e50efbaea439fda7ef3b0eb54ee1a9fe73ea2f919d78a33bf6fb9e3e059d Loading...

	go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a	104 B	2023-03-07	2024-04-21
Pretty URL go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a IP 104.16.15.194 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:29:18 Last Seen2024-04-21 22:38:00 Times Seen1185 Hash 00b5ba65cbf82b44301e01048b806055 3be24afc94edb8de2099ccafa2bfcdbfbef301cd 699e1188e23d8be696d8ca3b45d7eba8c1c97f6ce4e9da4051cce63907ea8442 Loading...

	go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a	598 B	2023-05-11	2023-06-19
Pretty URL go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a IP 104.16.15.194 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-05-11 14:16:50 Last Seen2023-06-19 15:35:05 Times Seen7 Hash 8cf080c9905cfd92b1edb43a7dd7f6ad e3f1f74d8ebc4a00349d5fa544757070de1c690a d7edf4e76adf35aec04c8399da8bc1f6e22ca594fa0be7b00eb0310572c1c91a Loading...

	www.youtube.com/s/player/bbe1b497/www-embed-player.vflset/www-embed-player.js	313 kB	2023-05-24	2023-06-02
Pretty URL www.youtube.com/s/player/bbe1b497/www-embed-player.vflset/www-embed-player.js IP 216.58.211.14 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-05-24 18:24:11 Last Seen2023-06-02 04:58:30 Times Seen2935 Hash 84523cc509e7b9a1d46990d65185b9de db4518d0142e239249d85d37875c4516501f710f 66c28207b52ebc8b2daba1a02dfdb35cba26b0538410e5b696805263d016c52b Loading...

	www.youtube.com/embed/yGj-hjKMzgE?autoplay=0&modestbranding=1&controls=1&showinfo=0&rel=0&hd=1&wmode=transparent	26 B	2023-03-07	2024-04-25
Pretty URL www.youtube.com/embed/yGj-hjKMzgE?autoplay=0&modestbranding=1&controls=1&showinfo=0&rel=0&hd=1&wmode=transparent IP 216.58.211.14 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:02:14 Last Seen2024-04-25 16:38:08 Times Seen34163 Hash 173a08c5d6adc5c93611a599bcb2c717 735a7301e66ae2c3584357f7bf0bf09eefb62df0 271e6368679a21c3416e2a0325db33d6bc445d601c72a49914081b5efd0cdf3f Loading...

	www.youtube.com/s/player/bbe1b497/player_ias.vflset/en_US/embed.js	30 kB	2023-05-24	2023-06-02
Pretty URL www.youtube.com/s/player/bbe1b497/player_ias.vflset/en_US/embed.js IP 216.58.211.14 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-05-24 18:24:11 Last Seen2023-06-02 04:58:30 Times Seen3022 Hash 37bbc7c6c5db9247aee64637c530554f eddd9d2f6f1b869565c8f7a48d13a9af50745a11 ee317b545c5822bf3e3ac29b92bbc9a0dcd3d7c2ba0395aa8f4d9eae0b2df7c6 Loading...

	go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a	1.2 kB	2023-03-07	2024-03-13
Pretty URL go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a IP 104.16.15.194 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:29:18 Last Seen2024-03-13 20:33:05 Times Seen718 Hash f53804c0abbd5d0ead0a41ca2dd89599 39d28f2df6171e4847aafb50cff964da0b33aef0 1dfb574d71b367cdf50909a035c1865d63381accb868b60d395d6ad71c426821 Loading...

	unknown	46 B	2023-04-10	2024-04-21
Pretty Introduced by domTimer Embedded in HTML false Observations First Seen2023-04-10 17:52:11 Last Seen2024-04-21 22:38:00 Times Seen837 Hash 302233ab771b191786dda09414a0ccee 06a14ff1a7f44155116a02e635bc8f6ad2b424cf 2e62d7a825d79e21f6b1ef3a5b397a05462b90e525e96abbb05deed19e7fb917 Loading...

	app.clickfunnels.com/mailcheck.min.js	2.7 kB	2023-03-07	2024-03-13
Pretty URL app.clickfunnels.com/mailcheck.min.js IP 104.16.12.194 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:29:18 Last Seen2024-03-13 20:33:05 Times Seen1044 Hash 199756d42d03ff6741642748ea00028d b5c4f6fd1b0e5d1bac97870b3885d08ccb7d2ac1 e0189e16cf01f8149342c9f2de872cfa73571f2a145a830f18b16154bf1d2982 Loading...

	www.youtube.com/embed/yGj-hjKMzgE?autoplay=0&modestbranding=1&controls=1&showinfo=0&rel=0&hd=1&wmode=transparent	13 B	2023-03-07	2024-04-25
Pretty URL www.youtube.com/embed/yGj-hjKMzgE?autoplay=0&modestbranding=1&controls=1&showinfo=0&rel=0&hd=1&wmode=transparent IP 216.58.211.14 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:02:14 Last Seen2024-04-25 16:38:09 Times Seen34122 Hash d8fb965e7ead2924508e97e5326bd3b1 fae376d0cb54d4433b7bdc9aba04690cd6cb5d27 57bb660c2fdf4369ff8e37f99b26963dba87c120b80c443ff3d31e030ab3a0f5 Loading...

	go.healthyliving.news/assets/pushcrew.js	637 B	2023-03-07	2024-04-21
Pretty URL go.healthyliving.news/assets/pushcrew.js IP 104.16.15.194 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:29:18 Last Seen2024-04-21 22:38:00 Times Seen1406 Hash 0a67c27615e7d2202f261dcc0a82d744 0fa0a8ca56efded583bd4201821015a63c623d44 f7464960133d530dfa52ce0ab9a5c33f0a709a946ad16298b000a7560738f422 Loading...

	go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a	271 B	2023-03-07	2024-04-21
Pretty URL go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a IP 104.16.15.194 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:29:18 Last Seen2024-04-21 22:38:00 Times Seen1080 Hash c0d8faa83b4d63e92f56614251d001d4 4377d94b43b83ca010c78aa4c482d86ca19a9593 1d35b00811c224b9c83537f23634d9e7b07f75841c3d99e6ded3c759571f45a7 Loading...

	www.youtube.com/embed/yGj-hjKMzgE?autoplay=0&modestbranding=1&controls=1&showinfo=0&rel=0&hd=1&wmode=transparent	25 B	2023-03-07	2023-11-29
Pretty URL www.youtube.com/embed/yGj-hjKMzgE?autoplay=0&modestbranding=1&controls=1&showinfo=0&rel=0&hd=1&wmode=transparent IP 216.58.211.14 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:07:02 Last Seen2023-11-29 05:59:19 Times Seen690 Hash b2bb298575f6a8fce4b96ab19e601ef2 95408f0ab4455505634ab48a1b7d9f6d921f940c f673b43d5eb354b9ddf6fc05d98ca95bfbfdadfa5f61009993976c269f453144 Loading...

	www.youtube.com/s/player/bbe1b497/fetch-polyfill.vflset/fetch-polyfill.js	9.6 kB	2023-05-22	2023-08-16
Pretty URL www.youtube.com/s/player/bbe1b497/fetch-polyfill.vflset/fetch-polyfill.js IP 216.58.211.14 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-05-22 23:25:28 Last Seen2023-08-16 21:35:45 Times Seen22278 Hash 949e94fed78d252b728cdc2aa6ddc56a d2bfdd653bb3da592097fb4ddb6eabbdc3060562 ac8177161c3038b07597ec544de3c00f46e1a0aa6b4b4c045ff0495553cc5069 Loading...

	www.youtube.com/s/player/bbe1b497/player_ias.vflset/en_US/base.js	2.4 MB	2023-05-24	2023-06-02
Pretty URL www.youtube.com/s/player/bbe1b497/player_ias.vflset/en_US/base.js IP 216.58.211.14 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-05-24 18:24:11 Last Seen2023-06-02 04:58:29 Times Seen2827 Hash ef12fba4202719e6bf955d5497a856e3 7c8cf3c348e2ba17bec5cd24d6f57631d348add4 0ad4c72a41a087c98857745f49535143b8106429453b919703962c4367a9b68f Loading...

	www.youtube.com/s/player/bbe1b497/www-widgetapi.vflset/www-widgetapi.js	203 kB	2023-05-25	2023-06-02
Pretty URL www.youtube.com/s/player/bbe1b497/www-widgetapi.vflset/www-widgetapi.js IP 216.58.211.14 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-05-25 01:11:31 Last Seen2023-06-02 05:45:15 Times Seen1181 Hash b973de670b2b03faef5bbe89104fa8db d251a6d123df91ae13c25a063f3cd2d6ebc4dc9b ebb72a8ee62da54956da7d5cd3ca05420d319a9d34e14896a07fc85491666349 Loading...

	go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a	1.6 kB	2023-03-07	2024-04-21
Pretty URL go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a IP 104.16.15.194 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:29:18 Last Seen2024-04-21 22:38:00 Times Seen1073 Hash 9695240da93eaffb74ee6d46ae6ea5da f545f6cec4b5da6fb0a50a17ee0bc878030c5047 88533b116813899d4cf0751961b7568763677a97033cfb35180d523e2cf2cfd1 Loading...

	go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a	359 B	2023-05-11	2023-05-26
Pretty URL go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a IP 104.16.15.194 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-05-11 14:16:50 Last Seen2023-05-26 17:19:16 Times Seen3 Hash 033da882f5c5ffd61fd53ad91b22fd4d d9693e668c51e0b2c327bd5a7762078caab3b931 a89d8666e79ecf85e6cbf4ee6fd9d0aa1cdcbda02692dafc330bc0b01a329deb Loading...

		Size	First Seen	Last Seen
	#1 Eval - 22b67c69d34fdd2174b4f262a17293bd	292 B	2023-05-10	2023-06-06
Pretty Observations First Seen2023-05-10 09:38:18 Last Seen2023-06-06 08:59:18 Times Seen1059 Hash 22b67c69d34fdd2174b4f262a17293bd 11bdbc8f47b24806545e94e0d51773ab1c3adb7c ae4a6db55dd4d4c3e760a46b4315a2945e6a04f3eae7c1327ed64b3bd149afdf Loading...

	#2 Eval - 8cec53500327799ed5cf0b1a8cf349e2	484 B	2023-05-10	2023-06-06
Pretty Observations First Seen2023-05-10 09:38:18 Last Seen2023-06-06 08:59:18 Times Seen1059 Hash 8cec53500327799ed5cf0b1a8cf349e2 29b2a17ed4d26a28a51b02fee72d00b7d58349a1 82c6b60a2f88be70c510f9fef68f1ccd2f93587f7280f77fb622bea1b3659fa6 Loading...

	#3 Eval - 816698b61badaeba571320aa91262ede	435 B	2023-05-10	2023-06-06
Pretty Observations First Seen2023-05-10 09:38:18 Last Seen2023-06-06 08:59:18 Times Seen1059 Hash 816698b61badaeba571320aa91262ede 9e3e3a5e63e2b30175796eaf86bb4f04e9932fa3 ed9c77c238c533d2202f48cdc81a95c50e249c5f7bef4a419d845461e07f5d78 Loading...

	#4 Eval - 8f4a62da83216e4c818cfed5133e5b07	2 B	2023-03-10	2023-06-15
Pretty Observations First Seen2023-03-10 08:44:22 Last Seen2023-06-15 17:32:34 Times Seen1276 Hash 8f4a62da83216e4c818cfed5133e5b07 d9fc9e7f4a5d033fc41f9a31f26107be8c044f9c 8b757e2345ef33981842a706ebe2763a7359d9c6b5a99272c37eacc2f26b40bb Loading...

	#5 Eval - 2993e673bd8794b25c94769da9217c33	2 B	2023-03-09	2024-04-22
Pretty Observations First Seen2023-03-09 09:28:54 Last Seen2024-04-22 19:31:02 Times Seen1926 Hash 2993e673bd8794b25c94769da9217c33 89b819489e59ce282be97e4925d4ca33f0e772fc 6e57acfde3ebd2ed5d81ed75397496d11e8406ccdbfe4a60298e313a75ba705e Loading...

	#6 Eval - f328cb8c88659dc7d7492f365d06132b	349 B	2023-05-10	2023-06-06
Pretty Observations First Seen2023-05-10 09:38:18 Last Seen2023-06-06 08:59:18 Times Seen1059 Hash f328cb8c88659dc7d7492f365d06132b feca374d852e479436953e88d02eecc5304a3984 8837108d3424149eaf12ccea07a294e6c6334b9ed5d518b91fb5a70bee728f99 Loading...

	#7 Eval - 73e715ef95914caf629170b320efb491	99 B	2023-05-10	2023-06-06
Pretty Observations First Seen2023-05-10 09:38:18 Last Seen2023-06-06 08:59:18 Times Seen1059 Hash 73e715ef95914caf629170b320efb491 ecbdfeda5d03a7da733ed329dde733af34dc5c32 6f84c636482d8326d444cb11cbf4e05a1372ce4baed12025bc923f988090e4cb Loading...

	#8 Eval - 03e04301b15a7969eae9d94821cc8222	2 B	2023-05-10	2024-03-22
Pretty Observations First Seen2023-05-10 09:38:18 Last Seen2024-03-22 18:07:56 Times Seen1080 Hash 03e04301b15a7969eae9d94821cc8222 591bea4d0502c6ff9cd26521689341628b6d7cd9 e72d310dbb213f4c2e34da28935b38905332ee3628a04df2dd13859fd769c6c5 Loading...

	#9 Eval - 9c50a554b2e0fddb78a8662c8f2375df	2 B	2023-05-10	2024-03-03
Pretty Observations First Seen2023-05-10 09:38:18 Last Seen2024-03-03 23:35:41 Times Seen1061 Hash 9c50a554b2e0fddb78a8662c8f2375df f8d7490106461f1bcc0f629df570c5c1174f9b76 500c20010d207a3f56ff8a0c5ce934ed92bc7e1cca19f1f9a291f9089442770d Loading...

	#10 Eval - 7cd9c4c3344f1c6d7924b621ff783506	2 B	2023-03-26	2024-04-15
Pretty Observations First Seen2023-03-26 13:06:46 Last Seen2024-04-15 16:04:57 Times Seen1548 Hash 7cd9c4c3344f1c6d7924b621ff783506 f05b2deaed050668d1917ec7427de7fa8c8018ee b02684a5a6c4f4e60e1cb72f9bfe3d62519d14a38a50068502a177cd32183a75 Loading...

	#11 Eval - e46d6c9b1ffdb12869bb441b13f07a80	130 B	2023-05-10	2023-06-06
Pretty Observations First Seen2023-05-10 09:38:18 Last Seen2023-06-06 08:59:18 Times Seen1056 Hash e46d6c9b1ffdb12869bb441b13f07a80 6c1ec19a7df580ba49d7c81d23d0edb946d8f71b fd2857c5f93dc07a00ee36df7eab6c94c233e9538e0dec5f079faaeae3904055 Loading...

	#12 Eval - 600fac6ab37c84821237a90ca5472a8a	73 B	2023-05-10	2023-06-06
Pretty Observations First Seen2023-05-10 09:38:18 Last Seen2023-06-06 08:59:18 Times Seen1059 Hash 600fac6ab37c84821237a90ca5472a8a de75549c4d98ac967496b1756f47ad38334666d6 120684323b8efa28684c3a75ff979e60e0c84091dcc8f1d7746799aaf1b13119 Loading...

	#13 Eval - 26878bb41fdd38b74a57185f3576efb5	212 B	2023-05-10	2023-06-06
Pretty Observations First Seen2023-05-10 09:38:18 Last Seen2023-06-06 08:59:18 Times Seen1059 Hash 26878bb41fdd38b74a57185f3576efb5 4ce5ea8e0697155860783b13415c7043ed7a6d88 817556e247a46c31b6e60b6bbab79609b0f7125bb70bf0ca245a867be0f38074 Loading...

	#14 Eval - 8d8b85adc4d2474a84fbca1381afb3c7	83 B	2023-03-07	2024-04-25
Pretty Observations First Seen2023-03-07 01:02:15 Last Seen2024-04-25 17:53:32 Times Seen39388 Hash 8d8b85adc4d2474a84fbca1381afb3c7 3815645d5a8680fd3ed4ce5a3b82f8d432448698 3eb8abc484d33a620c974de75babdd2caae4fff7dc8daad7d860dd41c93ee611 Loading...

	#15 Eval - dd719c4da38b72f46f2d76e2010100c4	72 B	2023-05-10	2023-06-06
Pretty Observations First Seen2023-05-10 09:38:18 Last Seen2023-06-06 08:59:18 Times Seen1058 Hash dd719c4da38b72f46f2d76e2010100c4 67bc73bbf3b97f79adac15bc7ff31dde3c9632cd 8e4da8f2d4dd0a47a80cc869dccf8c9c2cc55bd8e6ac80508a36836aaee589d2 Loading...

	#16 Eval - 1439f7dea6a0d1b3ddca8d5c936da63b	279 B	2023-05-10	2023-06-06
Pretty Observations First Seen2023-05-10 09:38:18 Last Seen2023-06-06 08:59:18 Times Seen1059 Hash 1439f7dea6a0d1b3ddca8d5c936da63b e684c6dad9398479e602c9eafdf5b31f93153873 ce99f6d7821cca04725ace4eaf0353b6b7469d59eba2dde7ae4046bbcdfdbf4c Loading...

	#17 Eval - 98b5858a8a166791e6ad0061bbece655	22 B	2023-05-10	2023-06-06
Pretty Observations First Seen2023-05-10 09:38:18 Last Seen2023-06-06 08:59:18 Times Seen1057 Hash 98b5858a8a166791e6ad0061bbece655 8f22632343a1167c8da3c57d34b64d8fa0c30c4f f9fd85adf8004042e8461cedd1b3d6d9efb34b51190b937e716a1486490840be Loading...

	#18 Eval - 9d0137bffa0f20d5e8e9f54f2c84cf0a	10 B	2023-03-07	2024-04-25
Pretty Observations First Seen2023-03-07 01:02:15 Last Seen2024-04-25 17:53:32 Times Seen33235 Hash 9d0137bffa0f20d5e8e9f54f2c84cf0a 39edf6d919f82b9692a2edfecc78427a82567c42 269d4d56785ffc82f3ed05d8ee3b84fc18d7474663ddd06c6fd285165190bb19 Loading...

	#19 Eval - a931635074a5017da74948b67e16c76f	206 B	2023-03-07	2024-04-25
Pretty Observations First Seen2023-03-07 01:02:15 Last Seen2024-04-25 17:53:34 Times Seen39423 Hash a931635074a5017da74948b67e16c76f a6799582ad16a7c1ab8221c166268130df6691d2 1fb437ac78114eda813a7c4d5771b6d3aa34908a5ca3b743d5eb5c79088cf82c Loading...

	#20 Eval - 4b43b0aee35624cd95b910189b3dc231	1 B	2023-03-07	2024-04-23
Pretty Observations First Seen2023-03-07 01:42:46 Last Seen2024-04-23 07:45:39 Times Seen8168 Hash 4b43b0aee35624cd95b910189b3dc231 4dc7c9ec434ed06502767136789763ec11d2c4b7 454349e422f05297191ead13e21d3db520e5abef52055e4964b82fb213f593a1 Loading...

	#21 Eval - a5f3c6a11b03839d46af9fb43c97c188	1 B	2023-03-07	2024-04-25
Pretty Observations First Seen2023-03-07 01:02:19 Last Seen2024-04-25 17:01:55 Times Seen8370 Hash a5f3c6a11b03839d46af9fb43c97c188 a7ee38bb7be4fc44198cb2685d9601dcf2b9f569 86be9a55762d316a3026c2836d044f5fc76e34da10e1b45feee5f18be7edb177 Loading...

	#22 Eval - 8f7a54d392162c292c4025e32ff2a9e3	70 B	2023-05-10	2023-06-06
Pretty Observations First Seen2023-05-10 09:38:18 Last Seen2023-06-06 08:59:18 Times Seen1058 Hash 8f7a54d392162c292c4025e32ff2a9e3 4d6cde2fb382b364f9164cebbe2d6be283a37f1b f62d954fe375a389a4664e1e10645185712271ef94004d405aca6beb9288756a Loading...

	#23 Eval - 24a24e53da77858ea1810107e2d66b13	277 B	2023-05-10	2023-06-06
Pretty Observations First Seen2023-05-10 09:38:18 Last Seen2023-06-06 08:59:18 Times Seen1058 Hash 24a24e53da77858ea1810107e2d66b13 4b76a1364acbb1134177fc322ed7a2a02e060cd5 68806e60e9d766635129f9808957e4ffa2da21439868d05489739cb2d6b1ce75 Loading...

	#24 Eval - 96d66a4d9708fdb6dd5597f3bbc7d624	195 B	2023-03-08	2024-04-25
Pretty Observations First Seen2023-03-08 14:47:45 Last Seen2024-04-25 17:53:32 Times Seen39411 Hash 96d66a4d9708fdb6dd5597f3bbc7d624 e10a66fa8a836f6f948941262b70e1fc928a446e 3cabac574ada654802fc1c4518d870f0791a9a3ac31371677e75fb683e47ce89 Loading...

	#25 Eval - 24cc3dc813f384fde380df619f1525cb	19 B	2023-03-07	2024-04-25
Pretty Observations First Seen2023-03-07 01:02:05 Last Seen2024-04-25 17:53:32 Times Seen48817 Hash 24cc3dc813f384fde380df619f1525cb 56399e3ce57ff98d68c7de98a563e572230dff6b 5421715bbdaf2550e31d10fc28d444310a8fe7147bbddecf0abb490358a1553b Loading...

	#26 Eval - 9c584a854a526e8d60aa7bed9181259d	801 B	2023-05-10	2023-06-06
Pretty Observations First Seen2023-05-10 09:38:18 Last Seen2023-06-06 08:59:18 Times Seen1059 Hash 9c584a854a526e8d60aa7bed9181259d c448f766c4962a583f79d3fcfb893d238dad1eae bf4aa214b49ee7ddf7dcf8be666934eba6da401503fd8d80f55f6577a1e5982b Loading...

	#27 Eval - 90bf814cf80b004f5b59068670d98b2a	147 B	2023-05-10	2023-06-06
Pretty Observations First Seen2023-05-10 09:38:18 Last Seen2023-06-06 08:59:18 Times Seen1059 Hash 90bf814cf80b004f5b59068670d98b2a 46399e196da11d6a1220989b31c65a5622e81942 ac5d1d567a3e55216d85fb4438bbaf5126c6291c4679f320495316f4a1f5c17e Loading...

	#28 Eval - e416c44ed85fcaae5faa9a23c8b306c0	92 B	2023-05-10	2023-06-06
Pretty Observations First Seen2023-05-10 09:38:18 Last Seen2023-06-06 08:59:18 Times Seen1059 Hash e416c44ed85fcaae5faa9a23c8b306c0 73d8cd3605013cde8af20d9606226d13d5b6bae5 03cca031e4921624f8da8e82745c3621c54ad25dfdf05b5e9bf3567faa686339 Loading...

	#29 Eval - 2a443a1dbac121b0fa819babc0f8270f	56 B	2023-05-10	2023-06-06
Pretty Observations First Seen2023-05-10 09:38:18 Last Seen2023-06-06 08:59:18 Times Seen1058 Hash 2a443a1dbac121b0fa819babc0f8270f 79bb622cdd0da0d72bbba69788c1ed058050642d 0177f2f05da3fd74365596cb787399c6f6bd03d7d64fcc2fd4b6f75e8a4a25ad Loading...

	#30 Eval - 93b9990d6565ab4fdc64bb0cecc82e40	420 B	2023-05-10	2023-06-06
Pretty Observations First Seen2023-05-10 09:38:18 Last Seen2023-06-06 08:59:18 Times Seen1059 Hash 93b9990d6565ab4fdc64bb0cecc82e40 7930f91edd0e336167a29218547722442f817416 96a25ddb63b604613174e57bfd2239102e4d481c3cec362e755a668753a23474 Loading...

	#31 Eval - 958028fe525a01d387a6331c56e971d8	347 B	2023-05-10	2023-06-06
Pretty Observations First Seen2023-05-10 09:38:18 Last Seen2023-06-06 08:59:18 Times Seen1058 Hash 958028fe525a01d387a6331c56e971d8 59e1f2957a2140671da414e74f74708afd0e39a7 3f98c7d4170a240d7c84ad1b18682fff71f605f679c5b6f3c0ad64ecd2067a83 Loading...

	#32 Eval - 0bbf8cdc7819f01b30efa4092ebbfea6	137 B	2023-05-10	2023-06-06
Pretty Observations First Seen2023-05-10 09:38:19 Last Seen2023-06-06 08:59:18 Times Seen1059 Hash 0bbf8cdc7819f01b30efa4092ebbfea6 aeb8b6ea050ae363e4c1b1774007b972fe214aad 475ba05292b73ffa440c99ea5e8ef6ee472ad568b0991169752341a32506ac69 Loading...

	#33 Eval - f1abde41b70c3abecb957546b3ce3fac	235 B	2023-05-10	2023-06-06
Pretty Observations First Seen2023-05-10 09:38:18 Last Seen2023-06-06 08:59:18 Times Seen1059 Hash f1abde41b70c3abecb957546b3ce3fac 29d76e2dd7e8ffea20a9208f96a183faff4b1dff 131fdc5a291ae0b8e436140c26afdd00037392fad523af4a225eee770a686b04 Loading...

	#34 Eval - 273b6ee1dbe97254dce8ad3667a0d224	22 B	2023-05-10	2023-06-06
Pretty Observations First Seen2023-05-10 09:38:18 Last Seen2023-06-06 08:59:18 Times Seen1059 Hash 273b6ee1dbe97254dce8ad3667a0d224 164566f0cff3a8b8055f38924fb6bef3ebddd7d5 7e2e3c8554197c608b75634558d4b9ce58f769b44473f3a9663a2296a71653b9 Loading...

	#35 Eval - 44c29edb103a2872f519ad0c9a0fdaaa	1 B	2023-03-07	2024-04-21
Pretty Observations First Seen2023-03-07 01:20:09 Last Seen2024-04-21 08:50:28 Times Seen9231 Hash 44c29edb103a2872f519ad0c9a0fdaaa 511993d3c99719e38a6779073019dacd7178ddb9 5c62e091b8c0565f1bafad0dad5934276143ae2ccef7a5381e8ada5b1a8d26d2 Loading...

	#36 Eval - 21f9b0917c61ec88efbc911825ab3b4f	43 kB	2023-05-26	2023-05-26
Pretty Observations First Seen2023-05-26 17:19:16 Last Seen2023-05-26 23:32:22 Times Seen2 Hash 21f9b0917c61ec88efbc911825ab3b4f e7f025f9072136bc0551bada230f5d66471dcb26 63b9cfdc8eaf214c0e7e7fa4d3e7bbbe4e45c6b537510436829a9cb9273f889f Loading...

	#37 Eval - f465da03521180d47c811a98c793a2d6	9 B	2023-03-07	2024-04-25
Pretty Observations First Seen2023-03-07 01:02:14 Last Seen2024-04-25 17:53:34 Times Seen33227 Hash f465da03521180d47c811a98c793a2d6 9b76105ff4c8bb84cd630914d772f4cc73df0155 e8183224e440eb4578fd87c4c47735f9ede4c43b1c6ebbdcd7033e98aba6a009 Loading...

	#38 Eval - d60b5f56ca8cc6989e50a6650adc55b2	133 B	2023-05-10	2023-06-06
Pretty Observations First Seen2023-05-10 09:38:18 Last Seen2023-06-06 08:59:18 Times Seen1059 Hash d60b5f56ca8cc6989e50a6650adc55b2 d31dda0fffe66c830fe46746476b1243f54b6fcf 377fc09fe636ab27d91b2a87a8f2ac83549d71682eda14b045554c3eaa617569 Loading...

	#39 Eval - ad2121ba7b5f96bb08d0f3a183624d45	40 kB	2023-05-26	2023-05-29
Pretty Observations First Seen2023-05-26 17:19:16 Last Seen2023-05-29 14:16:17 Times Seen2 Hash ad2121ba7b5f96bb08d0f3a183624d45 a763e83eb7fcc77ecf691a5beef15c5072b4afc2 60a273783fac1b1961f2abfbf1fa2f0f4cd788588c21d4813dd104b74c8c187f Loading...

	#40 Eval - bb55687495c4cb4507b9059ddce33bc0	118 B	2023-05-10	2023-06-06
Pretty Observations First Seen2023-05-10 09:38:18 Last Seen2023-06-06 08:59:18 Times Seen1059 Hash bb55687495c4cb4507b9059ddce33bc0 951b6c49dc0a22627f20a45772f4eaaa2475eb0c 75df7eeb4be1021f0ba0f50cc5515e23419d0f1f9316dd934284b27d5e644145 Loading...

	#41 Eval - 37a6259cc0c1dae299a7866489dff0bd	4 B	2023-03-07	2024-04-25
Pretty Observations First Seen2023-03-07 01:02:14 Last Seen2024-04-25 17:53:33 Times Seen50152 Hash 37a6259cc0c1dae299a7866489dff0bd 2be88ca4242c76e8253ac62474851065032d6833 74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b Loading...

	#42 Eval - 5dbc98dcc983a70728bd082d1a47546e	1 B	2023-03-07	2024-04-23
Pretty Observations First Seen2023-03-07 01:02:14 Last Seen2024-04-23 07:45:39 Times Seen11473 Hash 5dbc98dcc983a70728bd082d1a47546e 02aa629c8b16cd17a44f3a0efec2feed43937642 8de0b3c47f112c59745f717a626932264c422a7563954872e237b223af4ad643 Loading...

	#43 Eval - 5cf588e9e681a2ab7cda781a9f9d1519	54 B	2023-05-10	2023-06-06
Pretty Observations First Seen2023-05-10 09:38:18 Last Seen2023-06-06 08:59:18 Times Seen1059 Hash 5cf588e9e681a2ab7cda781a9f9d1519 deea99f78262d6b881415da48ec1827cc69bd205 5346fa0f29ac4352caa736fb183e5cf94cc1a11bfb33e2077f8d93cb15ff5602 Loading...

	#44 Eval - b786feb8be831fb535a7b79fcc468d27	258 B	2023-05-10	2023-06-06
Pretty Observations First Seen2023-05-10 09:38:18 Last Seen2023-06-06 08:59:18 Times Seen1059 Hash b786feb8be831fb535a7b79fcc468d27 f292889127b681d3019bdf4c033079976ae23edc 3121650c08314ad14271a006b4ad3780aaf391ea10bb4199f6118e2fcd86ccf1 Loading...

	#45 Eval - d8a9814fb2b2a84417c26c9f92552c4e	55 B	2023-05-10	2023-06-06
Pretty Observations First Seen2023-05-10 09:38:18 Last Seen2023-06-06 08:59:18 Times Seen1059 Hash d8a9814fb2b2a84417c26c9f92552c4e 66d15f351466e0e3e7e487e08ffd41984b76df51 de440f75d95ecc54a4ba5f687b68b090b89b18400c879ded4f152f82f9a63af2 Loading...

	#46 Eval - d5097204f0b35671c8fd681c2ad8d3b2	433 B	2023-05-10	2023-06-06
Pretty Observations First Seen2023-05-10 09:38:18 Last Seen2023-06-06 08:59:18 Times Seen1058 Hash d5097204f0b35671c8fd681c2ad8d3b2 1cf9a21c1e0b13ff4d5c16f44501d4ec91ab9aee a1acac9f57ce9dd2a961ef0065eacf628ce2a0602fe422dfe6ea914c14476fe9 Loading...

	#47 Eval - 92a3b97bad4a62712c596d5c9eabdf39	2 B	2023-05-02	2023-11-03
Pretty Observations First Seen2023-05-02 09:49:07 Last Seen2023-11-03 05:17:17 Times Seen1560 Hash 92a3b97bad4a62712c596d5c9eabdf39 a971d22478947af55d9a193e41b0811bc15c821a 58b8d8a5a387bbb7e7971dcc5cc5858170f763cc009cbed0182ffd7777b54433 Loading...

	#48 Eval - 7f911f30d2d402b985f30d7c1df15ede	22 B	2023-05-10	2023-06-06
Pretty Observations First Seen2023-05-10 09:38:18 Last Seen2023-06-06 08:59:18 Times Seen1059 Hash 7f911f30d2d402b985f30d7c1df15ede 43daae71624fcfa8626425bdf4df9211b1af1b79 05711b02b769a73a7ccb8405cda2113270eb93df58279700023033c4273d8147 Loading...

	#49 Eval - 98245bb67053ca0b2928076df442d877	799 B	2023-05-10	2023-06-06
Pretty Observations First Seen2023-05-10 09:38:18 Last Seen2023-06-06 08:59:18 Times Seen1059 Hash 98245bb67053ca0b2928076df442d877 2ed5ad5d3b9e4c6ef5bb3f65aaea77d3ac643bc9 864e896ee234609e2d811512fdc81f92462c32c16c62df664ba1deec77441f33 Loading...

	#50 Eval - 8cc9ee79995df2a360514f7fed108c87	29 B	2023-05-10	2023-06-06
Pretty Observations First Seen2023-05-10 09:38:18 Last Seen2023-06-06 08:59:18 Times Seen1059 Hash 8cc9ee79995df2a360514f7fed108c87 3644fc1abee6637fa9e5044fb4faa4ae81db6470 81d16f78c7b9cf9708e0f8937ac22deb3025c648925e143d28b98350187d3ac4 Loading...

	#51 Eval - bae3f90cb000352645e35fad60da411c	35 B	2023-03-07	2024-04-25
Pretty Observations First Seen2023-03-07 01:02:06 Last Seen2024-04-25 17:53:33 Times Seen53253 Hash bae3f90cb000352645e35fad60da411c 00023f94c170125b979cb1914925d06ab1abfbce 1e3606d95ce27d593157594820335681a9380f51a96147303cd8000e60a95e12 Loading...

	#52 Eval - d48a24ae9672ee573050e4d3aeeebe4d	29 B	2023-03-07	2024-04-25
Pretty Observations First Seen2023-03-07 01:02:06 Last Seen2024-04-25 17:53:33 Times Seen53216 Hash d48a24ae9672ee573050e4d3aeeebe4d 8f8c4d27852980a1ec5a8b1aba30769001314ec8 53e5b7d706a350fe98d52499058624e15cddc1541f17370f94a899a386c50255 Loading...

	#53 Eval - 05b8c74cbd96fbf2de4c1a352702fbf4	6 B	2023-03-07	2024-04-25
Pretty Observations First Seen2023-03-07 01:02:06 Last Seen2024-04-25 17:53:32 Times Seen54614 Hash 05b8c74cbd96fbf2de4c1a352702fbf4 320ad267d8d969f285eda5c184f5455bd29c8c95 44ff7b02c80d38b26dd6aa31d9470aed81b32e10331a3c994fb1a9945fd847ba Loading...

	#54 Eval - 0d80d99d7f209071a284c9ab6d14accf	83 B	2023-03-07	2024-04-25
Pretty Observations First Seen2023-03-07 01:02:06 Last Seen2024-04-25 17:53:32 Times Seen53510 Hash 0d80d99d7f209071a284c9ab6d14accf c91e7389c28a7b35eeb114484808a20cddb8c20e 0cb21d1de060008bab472c15c63e6f15828de601f85deff00d701d26c0f6819a Loading...

	#55 Eval - 826b55847cd9ab7d29820b3367275201	550 B	2023-05-10	2023-06-06
Pretty Observations First Seen2023-05-10 09:38:18 Last Seen2023-06-06 08:59:18 Times Seen1059 Hash 826b55847cd9ab7d29820b3367275201 87038972d24c02776f368a95c9e6e0cb192ce5f1 9973e87459b9219d51693ff1ad887ba86768b99708b4dc82f47b621016e45ec0 Loading...

	#56 Eval - d8c799e7df6b3394f43c8242f29d6575	66 B	2023-05-10	2023-06-06
Pretty Observations First Seen2023-05-10 09:38:18 Last Seen2023-06-06 08:59:18 Times Seen1059 Hash d8c799e7df6b3394f43c8242f29d6575 fab2c95adb21f36a72c00e5df96e1240d21a2c87 42d9c9a4c23624acf36f9b7f4796ff7c576f0171c063cbb233382bce58809171 Loading...

	#57 Eval - 7076f191bc526079e7d37bf6d4b4f346	96 B	2023-05-10	2023-06-06
Pretty Observations First Seen2023-05-10 09:38:18 Last Seen2023-06-06 08:59:18 Times Seen1059 Hash 7076f191bc526079e7d37bf6d4b4f346 0337dc76c1bfc04dd11be2ee21f6fe8ab8d5b2e8 d6ee2b557d36f68989597e15ebc8b4e7d2a42840e55f0158d03aa63fc7ee37b1 Loading...

	#58 Eval - fdd512911353d203a596f3b207e9a4ef	256 B	2023-05-10	2023-06-06
Pretty Observations First Seen2023-05-10 09:38:18 Last Seen2023-06-06 08:59:18 Times Seen1059 Hash fdd512911353d203a596f3b207e9a4ef 7ef6beedb1b21125bd3f8f7c5786828e4d2d9e20 86366379ef405e648662b942724df7bfab5adb5f5f8410160ebc6d3fedd22c30 Loading...

	#59 Eval - 5794f1450ede44ea91f248eddf6e6784	148 B	2023-05-10	2023-06-06
Pretty Observations First Seen2023-05-10 09:38:18 Last Seen2023-06-06 08:59:18 Times Seen1059 Hash 5794f1450ede44ea91f248eddf6e6784 b0acb96dcb7f9c374a8fd2f8de8c40dd87fc11c5 41f535614bcb0ed10df60a29a0bed479f5c2d1693c03c15f00014a3176ea5818 Loading...

	#60 Eval - 07e5f0b80ce928a7938b198de228493f	78 B	2023-05-10	2023-06-06
Pretty Observations First Seen2023-05-10 09:38:18 Last Seen2023-06-06 08:59:18 Times Seen1059 Hash 07e5f0b80ce928a7938b198de228493f 9967bcd14165619072c1164cd9e0cee97c49a810 60f66bbbda05ba2276ba3e7e8d8dd8bccceb179076f25b4e55c0e30aaa20277d Loading...

	#61 Eval - 4d59dc6ff527ef5ab42cda05ecfec9bb	34 B	2023-05-10	2023-06-06
Pretty Observations First Seen2023-05-10 09:38:18 Last Seen2023-06-06 08:59:18 Times Seen792 Hash 4d59dc6ff527ef5ab42cda05ecfec9bb 57ceef25896527adb072ba90cb4f73ff2c82050b 96b2cbb8ddb64e2a2bcf28f02cf6e71504744ae58d63bce7e09bf0df095d907a Loading...

	#62 Eval - f0e976b756b6afe7f40bca206a2d7150	29 B	2023-03-07	2024-04-25
Pretty Observations First Seen2023-03-07 01:02:14 Last Seen2024-04-25 17:53:33 Times Seen34181 Hash f0e976b756b6afe7f40bca206a2d7150 db9bee9a7bba93a60330ec5ef1334d9c164fcd56 029b84af88c5d6ced58173997a15fa47011e198e5449027d87e2f7b871f332c2 Loading...

	#63 Eval - 85e5d567b3a146bb99d8f7cd3a9632db	106 B	2023-05-10	2023-06-06
Pretty Observations First Seen2023-05-10 09:38:18 Last Seen2023-06-06 08:59:18 Times Seen1057 Hash 85e5d567b3a146bb99d8f7cd3a9632db 5323501f75667171fa42eb99fa7d50166f02eaca b8fd70af181dcde7232400ca4892644e36e0ec3f3c7d13964132977e9b673892 Loading...

	#64 Eval - cd2c93c50c141d6e40894eba2f690cb0	325 B	2023-05-10	2023-06-06
Pretty Observations First Seen2023-05-10 09:38:18 Last Seen2023-06-06 08:59:18 Times Seen1058 Hash cd2c93c50c141d6e40894eba2f690cb0 144917f62b2dfd6f75eed18f10f2cb99844999f2 f8219949af8828d05fcc927ac8ab774257dc07a96381cc8084e9f9e9d8aec3ab Loading...

	#65 Eval - 5f95a7f5a68073dd48b7fb1a5361f4a0	22 B	2023-05-10	2023-06-06
Pretty Observations First Seen2023-05-10 09:38:18 Last Seen2023-06-06 08:59:18 Times Seen1059 Hash 5f95a7f5a68073dd48b7fb1a5361f4a0 5abdb61cb9b1af0928678e07239c50431b82f031 9703ecd67400456a7514d7b3d4f1fd298b5b02e03e9b2f3f0641a6d32338fa5c Loading...

	#66 Eval - 16686cd46a9ea90da26d3b3e5027d241	199 B	2023-05-10	2023-06-06
Pretty Observations First Seen2023-05-10 09:38:18 Last Seen2023-06-06 08:59:18 Times Seen1059 Hash 16686cd46a9ea90da26d3b3e5027d241 c06f48eba10d1b5965af396026d14fd9fc13ded6 98d5acbf18032852142ff7ac5cece524e7b442295263be3eda7a70fb619a32bf Loading...

	#67 Eval - b83030f38883e26b9ef52938c69cf6ce	2 B	2023-03-12	2024-02-06
Pretty Observations First Seen2023-03-12 15:14:06 Last Seen2024-02-06 06:19:18 Times Seen1740 Hash b83030f38883e26b9ef52938c69cf6ce 8749f8ce9ee14512df0f6966a8f6fbff0b0d6fa1 5cb5c765a11d2215d0ce375a678a3537f915a5d06555ff2366cf58e9d3275527 Loading...

	#68 Eval - 8d22357e299f0a9132b557116f45b5d7	29 B	2023-05-10	2023-06-06
Pretty Observations First Seen2023-05-10 09:38:18 Last Seen2023-06-06 08:59:18 Times Seen1058 Hash 8d22357e299f0a9132b557116f45b5d7 320b45891845d5a4b132895595141bd66fbd2845 a0938ea41d2897f7e6ebfa95c97fba072106dc1b6e0496e340ac24478b76f484 Loading...

	#69 Eval - 5cfe0032e95faafb98cafcc45cb3b485	114 B	2023-05-10	2023-06-06
Pretty Observations First Seen2023-05-10 09:38:18 Last Seen2023-06-06 08:59:18 Times Seen1059 Hash 5cfe0032e95faafb98cafcc45cb3b485 47f66c5e9fac12a072afa875f4a8a6e70674c0b0 aac17b6841dd5b92b7e7251126962bdd248e78dc2a8ab717a9bde45bb9f35c55 Loading...

	#70 Eval - 0cc175b9c0f1b6a831c399e269772661	1 B	2023-03-07	2024-04-25
Pretty Observations First Seen2023-03-07 01:02:14 Last Seen2024-04-25 17:53:32 Times Seen10520 Hash 0cc175b9c0f1b6a831c399e269772661 86f7e437faa5a7fce15d1ddcb9eaeaea377667b8 ca978112ca1bbdcafac231b39a23dc4da786eff8147c4e72b9807785afee48bb Loading...

	#71 Eval - 12bd3e5eeeaf0b6e5c7f7bb8bbd8b897	79 B	2023-03-07	2024-04-21
Pretty Observations First Seen2023-03-07 12:03:26 Last Seen2024-04-21 22:38:01 Times Seen467 Hash 12bd3e5eeeaf0b6e5c7f7bb8bbd8b897 fad50082c4e7bf45e126383b59e538426642321a 7d6b0fcdd3508922088e3af5a4b10c860917b5b36387e7e9c622eab70e01666b Loading...

	#72 Eval - f5078f91c0d3ce6e17059da829fc5e98	2 B	2023-03-10	2024-02-26
Pretty Observations First Seen2023-03-10 09:24:46 Last Seen2024-02-26 19:03:40 Times Seen1101 Hash f5078f91c0d3ce6e17059da829fc5e98 29ac4474673ea62309f2f5e996c55494dadbed9e 127b5736ce44a2c6700c09d69febc906e607ab39b05cb0c15b8fc95a0d9eb521 Loading...

	#73 Eval - c0b860db238ef44d3675e73159bab154	2 B	2023-03-12	2023-11-03
Pretty Observations First Seen2023-03-12 19:39:41 Last Seen2023-11-03 05:17:17 Times Seen1346 Hash c0b860db238ef44d3675e73159bab154 078a28d88163d1e73a6b3dc4659d94db6be4b55f 6f67d899399ed4fc17dfac7e9ecd114b4ec88b0c8b3128bd8608aa6aaa7d3d6f Loading...

	#74 Eval - 875cb753e566de56065a4e2bb7c903ab	77 B	2023-05-10	2023-06-06
Pretty Observations First Seen2023-05-10 09:38:18 Last Seen2023-06-06 08:59:18 Times Seen1058 Hash 875cb753e566de56065a4e2bb7c903ab ea9f80dda1b5677aa0455b2496b33b1a04d3145b d1a8e505a34441ada15adc4b66d2b0156292eeb385a58b573b5e21b4af1e02a0 Loading...

	#75 Eval - c3f9558d681bac963339b7c69894c4f7	2 B	2023-03-07	2024-04-03
Pretty Observations First Seen2023-03-07 12:38:48 Last Seen2024-04-03 06:16:49 Times Seen1559 Hash c3f9558d681bac963339b7c69894c4f7 06967d8e4a36243a7dc6404de1b1141f744adf2e 6956e1dffd6851cfa0b5461772d12f1dd7d22676f5eee2aad3ae7c0b630d5c80 Loading...

	#76 Eval - e99c19dec2b574bc5d4990504f6cf550	2 B	2023-03-07	2024-03-23
Pretty Observations First Seen2023-03-07 12:02:52 Last Seen2024-03-23 19:55:43 Times Seen1117 Hash e99c19dec2b574bc5d4990504f6cf550 bd4b01946d29a04b84f9d1306289b7687d01b8c2 52198b80bf68e8139a9be342771e2085d658d71ccc132fe04945ab902283a446 Loading...

	#77 Eval - 602da6f64e7b40417331f1e280734789	2 B	2023-03-07	2024-01-06
Pretty Observations First Seen2023-03-07 23:17:27 Last Seen2024-01-06 17:23:03 Times Seen1613 Hash 602da6f64e7b40417331f1e280734789 53fdc9e765ce20bf839db58632aa3cd9953cd1cb 99196eedc41b957ef38adf93e7fdd6defa5925ab9f8edc60dad6d8eca6b87373 Loading...

	#78 Eval - 5db1a6bc2ed3c03b6beb12e0ad58012c	92 B	2023-05-10	2023-06-06
Pretty Observations First Seen2023-05-10 09:38:18 Last Seen2023-06-06 08:59:18 Times Seen1059 Hash 5db1a6bc2ed3c03b6beb12e0ad58012c d353dc8fb4e984f5fb6d4d37c6a34cf9e586b595 deaf7bcb3c3c5213137549f5967446ee9dc71fec8c29544da0e2d5c87b6b966d Loading...

	#79 Eval - bab5f22e05f663b22a132aca136942f5	146 B	2023-05-10	2023-06-06
Pretty Observations First Seen2023-05-10 09:38:18 Last Seen2023-06-06 08:59:18 Times Seen1059 Hash bab5f22e05f663b22a132aca136942f5 6defea6b8a59b454dbad0a6adf2931806922b840 98427f1356623bb7c39f0014a5c23867ce863e030e065030bbad731628ecb271 Loading...

	#80 Eval - b6d53cf893eff7acd546ac2ce82c52e3	59 B	2023-05-10	2023-06-06
Pretty Observations First Seen2023-05-10 09:38:18 Last Seen2023-06-06 08:59:18 Times Seen1059 Hash b6d53cf893eff7acd546ac2ce82c52e3 07c8ecaeb15a245177624baa25822c247b36339e ad6f913c471177935f78cd00ef618a7442e6429c6fe1120422897cdc028e66f7 Loading...

	#81 Eval - a78c5bf69b40d464b954ef76815c6fa0	2 B	2023-03-08	2024-03-19
Pretty Observations First Seen2023-03-08 05:16:31 Last Seen2024-03-19 07:56:10 Times Seen1081 Hash a78c5bf69b40d464b954ef76815c6fa0 84572ef2253ef81e2d8cd8c65849f4d9a3881f47 3702fc1866630796050c50e9c829bd32fde7cc4c883f28e3e4ca430307c485b0 Loading...

	#82 Eval - 2f4a13ef19a1027cf3036877249769ac	22 B	2023-05-10	2023-06-06
Pretty Observations First Seen2023-05-10 09:38:18 Last Seen2023-06-06 08:59:18 Times Seen1059 Hash 2f4a13ef19a1027cf3036877249769ac 1f89933fd96eb20e8d3dc4fe37e86efd6cafa53c 22a4205149f84b542843a728fac855f39d447d5c29799e9f909072ef78c4a394 Loading...

	#83 Eval - 3a3ea00cfc35332cedf6e5e9a32e94da	1 B	2023-03-07	2024-04-25
Pretty Observations First Seen2023-03-07 01:02:06 Last Seen2024-04-25 17:53:32 Times Seen12586 Hash 3a3ea00cfc35332cedf6e5e9a32e94da e0184adedf913b076626646d3f52c3b49c39ad6d a9f51566bd6705f7ea6ad54bb9deb449f795582d6529a0e22207b8981233ec58 Loading...

	#84 Eval - 52d2ecf260a3c62edf8941a223610d8f	72 B	2023-05-10	2023-06-06
Pretty Observations First Seen2023-05-10 09:38:18 Last Seen2023-06-06 08:59:18 Times Seen1059 Hash 52d2ecf260a3c62edf8941a223610d8f faf0eea0a26b2cb3fe6e393bc346ba4ab7b1510d ba7944a283a57fd428c5d216c3596b557d9645af0501bf117850f7b64191aadd Loading...

	#85 Eval - 57442177af020d5edcb81759cbec0a35	139 B	2023-05-10	2023-06-06
Pretty Observations First Seen2023-05-10 09:38:18 Last Seen2023-06-06 08:59:18 Times Seen1059 Hash 57442177af020d5edcb81759cbec0a35 c79e0ccc55b3b6e2c7b44dfdd5b9063039f7931d aed7aa7e0f9cb53b3b7ed11f9763c7b286b5beb72aff173673bb2e9cab59cf23 Loading...

	#86 Eval - 77c4ec2aee2948b6089dfba4d6ddfb09	233 B	2023-05-10	2023-06-06
Pretty Observations First Seen2023-05-10 09:38:18 Last Seen2023-06-06 08:59:18 Times Seen1058 Hash 77c4ec2aee2948b6089dfba4d6ddfb09 3bd22d72c1d99ec877a50b97a8cb074488a6f5c2 d259a6a338eab6a6493e37f1d06a4a366410d7cfe840eea30249b46f235f4ea7 Loading...

	#87 Eval - 9be5f6606c8a463a15615ba27d6086c3	63 B	2023-03-13	2024-04-25
Pretty Observations First Seen2023-03-13 02:11:11 Last Seen2024-04-25 17:53:34 Times Seen38853 Hash 9be5f6606c8a463a15615ba27d6086c3 86a2fe727ef0ec4e23f1be261de127f0713e3f32 57e4541e6b4799c76812f6de6ff4aa7605c94d3cc7aebb5e8770c57efa4d28f0 Loading...

	#88 Eval - 81f1d72b5e2955c92dddccf0e7fb0ac7	119 B	2023-05-11	2023-06-19
Pretty Observations First Seen2023-05-11 14:16:50 Last Seen2023-06-19 15:35:06 Times Seen14 Hash 81f1d72b5e2955c92dddccf0e7fb0ac7 fe91504ba21995c82d281f545c5d46333f584297 285864ce9546f0cb728af0a5822d3d7588ee9f4f651d37d27af8e4521a1b74d1 Loading...

	#89 Eval - 8cdd2caf9498411ef237e671efa6cc1c	79 B	2023-05-10	2023-06-06
Pretty Observations First Seen2023-05-10 09:38:18 Last Seen2023-06-06 08:59:18 Times Seen1059 Hash 8cdd2caf9498411ef237e671efa6cc1c 6825f8149c489bfdb0c217e42ef35b860521d4bc 091cbaa5d37fbb645ba86df9133d3b3dda8a61303a4fbdcae041026c4c034488 Loading...

	#90 Eval - a53734fa337639c53481a466a2e16291	448 B	2023-05-10	2023-06-06
Pretty Observations First Seen2023-05-10 09:38:18 Last Seen2023-06-06 08:59:18 Times Seen1059 Hash a53734fa337639c53481a466a2e16291 3c8ad55e8233dbd9914ab64f3ad9427590b427a6 a9f7f0461c8d1798d2f8ff3f0977f6b286b08bb621ff44ef8113d3a4b93da5b2 Loading...

	#91 Eval - 7b8b965ad4bca0e41ab51de7b31363a1	1 B	2023-03-07	2024-04-24
Pretty Observations First Seen2023-03-07 01:02:06 Last Seen2024-04-24 08:15:41 Times Seen10330 Hash 7b8b965ad4bca0e41ab51de7b31363a1 d1854cae891ec7b29161ccaf79a24b00c274bdaa 1b16b1df538ba12dc3f97edbb85caa7050d46c148134290feba80f8236c83db9 Loading...

	#92 Eval - 7fefa9be03c3ddbe08a6adadb244ad98	2 B	2023-03-07	2024-03-23
Pretty Observations First Seen2023-03-07 12:02:51 Last Seen2024-03-23 19:55:43 Times Seen1912 Hash 7fefa9be03c3ddbe08a6adadb244ad98 b0edc8b01f92b162c8aa7ce338b688ce8237c72c 35ff561fe50ac52b9f3d2e5a86b12d170dbc5e23226d967e48b99a2d56aed677 Loading...

	#93 Eval - 90a6edf15b9fbcd8ccd9383ad593f8c2	2 B	2023-05-10	2024-02-20
Pretty Observations First Seen2023-05-10 09:38:18 Last Seen2024-02-20 02:52:38 Times Seen1484 Hash 90a6edf15b9fbcd8ccd9383ad593f8c2 20b969c5eabd235d821246c44ec05f24fe62468e 182be77b576c923480db8a4de34a99d15deb9f8f6a60591fce058be4282581fe Loading...

	#94 Eval - 878535f1cb45bbae435bad9496feea1b	92 B	2023-05-10	2023-06-06
Pretty Observations First Seen2023-05-10 09:38:18 Last Seen2023-06-06 08:59:18 Times Seen1058 Hash 878535f1cb45bbae435bad9496feea1b c3476fcd63624b67008e4f2e0becdb0d546b1385 55a6a5f6984ac1661ef38575b98599022e1e90bafcd16f362ebf5f32cef3104a Loading...

	#95 Eval - 2392f301309dd480dcbe275c2908a0d4	565 B	2023-05-10	2023-06-06
Pretty Observations First Seen2023-05-10 09:38:18 Last Seen2023-06-06 08:59:18 Times Seen1059 Hash 2392f301309dd480dcbe275c2908a0d4 f8875bd42bd55854e8cdc3a799488d063a3ed6b3 6dd660b3c30c1ddd4c47b317d9f5ce9d8428f7697e93daacda2f6ed9d6406a43 Loading...

	#96 Eval - 0563fcd3c81eef58e50b984c70677036	159 B	2023-03-07	2024-02-29
Pretty Observations First Seen2023-03-07 01:02:14 Last Seen2024-02-29 10:56:21 Times Seen35304 Hash 0563fcd3c81eef58e50b984c70677036 297f56d56ec1918a65a72c146da33d3ffb468684 ed2b7d8395578b6813022e5d55ce8066479d2def9c664882260f1516472c1838 Loading...

	#97 Eval - b7f8cdf0683475af720d1e051b6368d2	110 B	2023-03-07	2024-03-07
Pretty Observations First Seen2023-03-07 12:03:26 Last Seen2024-03-07 12:40:15 Times Seen132 Hash b7f8cdf0683475af720d1e051b6368d2 948ceb3d5d3e6613ac2bfb8b82e49fc9d56ac751 b937da9c4432f9d603f5b0b3583fa7c1d4f68bb10ae9743a4b53ba94f88fbf4d Loading...

	#98 Eval - 8e0ded13fdbf031dd0cfc79024b7d1c5	22 B	2023-05-10	2023-06-06
Pretty Observations First Seen2023-05-10 09:38:19 Last Seen2023-06-06 08:59:18 Times Seen1059 Hash 8e0ded13fdbf031dd0cfc79024b7d1c5 f2b0aed9602dd55e4cb54c15f56b9f960b7466e0 3169e3f9e2742066e33a7094de21d46777ee69979892ef1ee83266172bf147d3 Loading...

	#99 Eval - 60f3bdfac92dec460cc54742b79c5c42	197 B	2023-05-10	2023-06-06
Pretty Observations First Seen2023-05-10 09:38:18 Last Seen2023-06-06 08:59:18 Times Seen1059 Hash 60f3bdfac92dec460cc54742b79c5c42 522b964c2dc94969ab7d9a5c423976db23314d52 c699abe967d20476ab61d5ffc7f9f2951e4a0f34287fb8d2a76eee4025b76c42 Loading...

	#100 Eval - 8825b9eec2db9f210f8adeb4755d4f07	2 B	2023-03-13	2024-01-06
Pretty Observations First Seen2023-03-13 10:55:38 Last Seen2024-01-06 00:21:14 Times Seen1100 Hash 8825b9eec2db9f210f8adeb4755d4f07 7ba878b9bbb2309914574233252a4234e9c781eb a08c925fed8ffd1710d3a4606109fcc3cf10d05a59c0ec9b52a6f81da4ed6d3b Loading...

	#101 Eval - 7549d33866d26d0e3d80da3bfa7aaae8	139 B	2023-05-10	2023-06-06
Pretty Observations First Seen2023-05-10 09:38:18 Last Seen2023-06-06 08:59:18 Times Seen1059 Hash 7549d33866d26d0e3d80da3bfa7aaae8 03d55e42f2e20cbddb5725b8ef9c72346cee2ef2 e311fa9bf97ab7964c6a0b171442930e5cf51e7cb17107060d6ecde94ae953da Loading...

	#102 Eval - 457c81631893f6ce1733a5150e131d0b	82 B	2023-05-10	2023-06-06
Pretty Observations First Seen2023-05-10 09:38:18 Last Seen2023-06-06 08:59:18 Times Seen1058 Hash 457c81631893f6ce1733a5150e131d0b f3c55df3feeaf9db36f71a6adb97dd0dbd3279c7 331db8b3c8f3c8d847f5d89d1992ea6fa7d6b815f5696d351f680afaa0c45941 Loading...

	#103 Eval - d799155b9910e1537083d2c7212d5dea	107 B	2023-05-10	2023-06-06
Pretty Observations First Seen2023-05-10 09:38:18 Last Seen2023-06-06 08:59:18 Times Seen1059 Hash d799155b9910e1537083d2c7212d5dea 3bca18d84a76006882b1abc8f616b42ce3bf2924 3a467c3872e056e7ada35c8f863a35711efd54121e6e2482229d77c5e267a0b6 Loading...

	#104 Eval - 21de26caa6bcfc936378c4e45d235bd9	2 B	2023-05-10	2023-11-20
Pretty Observations First Seen2023-05-10 09:38:18 Last Seen2023-11-20 08:45:03 Times Seen1417 Hash 21de26caa6bcfc936378c4e45d235bd9 07a65dd6489a00292c1aedf7d46981d92654f653 6ee2cc105a67743140cf7e4ac3486675272a77d64b48ccb066d5f3d5bc620be5 Loading...

	#105 Eval - e1dffc8709f31a4987c8a88334107e89	2 B	2023-05-10	2024-03-22
Pretty Observations First Seen2023-05-10 09:38:18 Last Seen2024-03-22 16:51:33 Times Seen1072 Hash e1dffc8709f31a4987c8a88334107e89 88bfad9cfffeafd299a44d4daf979d57419a2621 deae2d4d75857c1081f113bcfc950dca567dd5a2e14e6ac8fb8e5785ff4dd5ec Loading...

	#106 Eval - 8fc1f205ac2e3b15b8c40f0546ffad5e	79 B	2023-05-10	2023-06-06
Pretty Observations First Seen2023-05-10 09:38:18 Last Seen2023-06-06 08:59:18 Times Seen1059 Hash 8fc1f205ac2e3b15b8c40f0546ffad5e 47d89cc394b0eba2d42070e8bf5c748ccca0a9bd f7e6680965ffcde039e7f04dbbfe0b9fb3036ecfbd36bb14facba048f687908a Loading...

	#107 Eval - 558184e55f1ee1200b8437b05251e946	167 B	2023-05-10	2023-06-06
Pretty Observations First Seen2023-05-10 09:38:18 Last Seen2023-06-06 08:59:18 Times Seen1059 Hash 558184e55f1ee1200b8437b05251e946 1303d9854bdc90365ec2ced0188a5b49c356d585 8c77ee51589cce803606f0941a1b9685053490efce3786b9c5f25facc6e21437 Loading...

	#108 Eval - 8b63a36c49a3b68e13227d083e3e982a	132 B	2023-05-10	2023-06-06
Pretty Observations First Seen2023-05-10 09:38:18 Last Seen2023-06-06 08:59:18 Times Seen1059 Hash 8b63a36c49a3b68e13227d083e3e982a 6ce5044dc98a9ba5c39c522a81be69a1e642dd85 b80682235831c5c51a57591caf6f9446e30e50153e6eceaa62303a02a97c3656 Loading...

	#109 Eval - 1151f24be3c63db056f10938a42ab0ea	27 B	2023-03-07	2024-02-29
Pretty Observations First Seen2023-03-07 01:02:14 Last Seen2024-02-29 10:56:20 Times Seen35314 Hash 1151f24be3c63db056f10938a42ab0ea 5284a27f38597741e877ab31328cc8178b005676 0bc774ed3674af6aae8dd2c83bf89261e13ee293742afeda5161156a54bfc8ee Loading...

	#110 Eval - 2aa74ac3a264c3e10ae463a262aaf72c	20 kB	2023-03-07	2024-04-21
Pretty Observations First Seen2023-03-07 01:29:18 Last Seen2024-04-21 22:38:01 Times Seen1093 Hash 2aa74ac3a264c3e10ae463a262aaf72c c5ff579cf0cc2ba1d98711b366ec148152abbaf5 9c1ea695852f01d2fc6027d572b126b740a9c4634540fb0d39ea3656377eef77 Loading...

	#111 Eval - 8a93cff9c7ee2564ff8cda88ffd3a427	139 B	2023-05-10	2023-06-06
Pretty Observations First Seen2023-05-10 09:38:18 Last Seen2023-06-06 08:59:18 Times Seen1058 Hash 8a93cff9c7ee2564ff8cda88ffd3a427 34dcc66cc790aac4d257706eabbc1fe3545a826b 92e5b849555f868765c85dc9edf53e6ab6e7b109d86a04a462d9b2c8b49f79a6 Loading...

	#112 Eval - 10dd2604ed92691ed21fb46787a74109	22 B	2023-05-10	2023-06-06
Pretty Observations First Seen2023-05-10 09:38:18 Last Seen2023-06-06 08:59:18 Times Seen1059 Hash 10dd2604ed92691ed21fb46787a74109 7d71f78df57e887a2848f8654ebf31f4b59001a0 dee761ae5efe7b43892599dd55286386993444eda3ca4617f72c197e5d3ca34c Loading...

	#113 Eval - e1e24d179f371d7ef577a4e623ebc7b8	131 B	2023-05-10	2023-06-06
Pretty Observations First Seen2023-05-10 09:38:18 Last Seen2023-06-06 08:59:18 Times Seen1059 Hash e1e24d179f371d7ef577a4e623ebc7b8 c5ecb26ad7ed407eea099f851c8e89fa2b960eb1 fc28b0c10f55746dbdfa736eb641732cfa722b70cfd1598b1d0967fac0e97f43 Loading...

	#114 Eval - 06001ebfb556ffe36c0169ca16534cd0	144 B	2023-05-10	2023-06-06
Pretty Observations First Seen2023-05-10 09:38:18 Last Seen2023-06-06 08:59:18 Times Seen1059 Hash 06001ebfb556ffe36c0169ca16534cd0 2e8e848d3617a7fa1637f4eff0c98027f39fe625 d9de860718c2a994b0d3bc400c51fe5d26f4daf77d9378b21749cad59cfc1531 Loading...

	#115 Eval - c26f51478915db9c78309ed9a1484d8c	79 B	2023-05-10	2023-06-06
Pretty Observations First Seen2023-05-10 09:38:19 Last Seen2023-06-06 08:59:18 Times Seen1059 Hash c26f51478915db9c78309ed9a1484d8c 93c527fc49895d6714d1b941da161d2a19e7598a 3a01707e4ae627cebaf1569cc6f4853b9710c49b7fb879c8904d74a9f36041df Loading...

	#116 Eval - f31ccdc61313ba51549586b6d3534e38	79 B	2023-05-10	2023-06-06
Pretty Observations First Seen2023-05-10 09:38:18 Last Seen2023-06-06 08:59:18 Times Seen1059 Hash f31ccdc61313ba51549586b6d3534e38 6df6e83453f188313cb844159bd8dd54e04692dd 336a62b6c7f683dc4df92431c820acf447a958a223255872e56eec2dcfa4237e Loading...

	#117 Eval - d3db14293ae9bcb90f1363df8b7950d2	292 B	2023-05-10	2023-06-06
Pretty Observations First Seen2023-05-10 09:38:18 Last Seen2023-06-06 08:59:18 Times Seen1059 Hash d3db14293ae9bcb90f1363df8b7950d2 d25a41ff4611ffe5a38a7cc76842560f36a49929 a0d0758b07120e18f31f810314742ea3507fde60a9336f82c280b41d8e059f67 Loading...

	#118 Eval - c665708d8ed800efdc59ba5f802e6867	79 B	2023-05-10	2023-06-06
Pretty Observations First Seen2023-05-10 09:38:18 Last Seen2023-06-06 08:59:18 Times Seen1059 Hash c665708d8ed800efdc59ba5f802e6867 4383d812ff2b29a38ce8f66712cfe588ead516b3 ac0954eb4cf22b05f1a6a28672d77f3b456e22f0484f8c3f4f8c5ff0b32635d8 Loading...

	#119 Eval - 14c293002b73d17bbc2ae8b44287ae6a	29 B	2023-05-10	2023-06-06
Pretty Observations First Seen2023-05-10 09:38:18 Last Seen2023-06-06 08:59:18 Times Seen1058 Hash 14c293002b73d17bbc2ae8b44287ae6a 9b3b8bf7396934b3e6c6bd06d8e49ad01412bd45 e5525b85479e0bc2d34df5dd765e221663e5bc503c0f4b76f42006c20ec88d6e Loading...

	#120 Eval - 7fe85f028aaf51e6742540a83013fc27	93 B	2023-05-10	2023-06-06
Pretty Observations First Seen2023-05-10 09:38:18 Last Seen2023-06-06 08:59:18 Times Seen1059 Hash 7fe85f028aaf51e6742540a83013fc27 4c3e4b5e5762845e8eed3988cc733163d543c022 ab22dddb7bfdd52a0188beeed3be14da01cc25a89d72bd9f7f24bc64ca253728 Loading...

	#121 Eval - 3acb77818f0429cb0674edc677ebcdcd	254 B	2023-05-10	2023-06-06
Pretty Observations First Seen2023-05-10 09:38:18 Last Seen2023-06-06 08:59:18 Times Seen1058 Hash 3acb77818f0429cb0674edc677ebcdcd d1e0ad2f5bfa0e0bd0e580cec6ecbf1cddb8d75f 91514950b3c305ea81793701eca235e7f63d78b01ed9642b8db490cede747d1a Loading...

	#122 Eval - b6fedf4d8b41bcd6fdd00dc73afebbf0	186 B	2023-03-07	2023-06-20
Pretty Observations First Seen2023-03-07 01:02:15 Last Seen2023-06-20 22:42:19 Times Seen10985 Hash b6fedf4d8b41bcd6fdd00dc73afebbf0 cc79d9f18327c590bfbf582db80c8771dbfda9a8 b98b82c364cf0a1c34b8ecf1aa18a6bf51bbd21631dd3794dad96c8ad3082a5f Loading...

	#123 Eval - 24cd0680976d403ccd827254d7225b74	250 B	2023-05-10	2023-06-06
Pretty Observations First Seen2023-05-10 09:38:18 Last Seen2023-06-06 08:59:18 Times Seen1058 Hash 24cd0680976d403ccd827254d7225b74 dbc6a7342902414d641dd1766a3d379b958760d2 498babbd6fa4223eaae065d7406d1018d9f4225e58d53f4faec5b37ef0c45753 Loading...

HTTP Transactions (125)

URL IP Response Size

ocsp.r2m02.amazontrust.com/

54.230.80.227

471 B

URL
ocsp.r2m02.amazontrust.com/
IP
54.230.80.227:0
ASN
#16509 AMAZON-02

File type
data
Size
471 B (471 bytes)
Hash
66850db78c52cbd4090f787f27be7477
c2a4088de4d2641698357fe9d3d6326675dd4291
d9cffbc6f6e9715199ac52903bd765b6f8d190d87d15e0c536de72f4d04a7dfc

HTTP Headers

POST / HTTP/1.1
Host: ocsp.r2m02.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=7200'
Date: Fri, 26 May 2023 15:18:45 GMT
Last-Modified: Fri, 26 May 2023 15:15:08 GMT
Server: ECAcc (bsa/EAE4)
X-Cache: Miss from cloudfront
Via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 1hdBv5aWrQubtEQkzAfO7bgjySUcmzgL1idGvb3ln519M3S_xT-Ptw==
Age: 218

go.offerwave.org/aff_c?offer_id=1291&aff_id=1507&aff_sub=052623_4792_582_am&aff_sub3=1005554&aff_sub5=pthomas@slurpmail.net&source=_______&file_id=5070

34.241.40.98

302 Found

353 B

URL User Request GET HTTP/1.1
go.offerwave.org/aff_c?offer_id=1291&aff_id=1507&aff_sub=052623_4792_582_am&aff_sub3=1005554&aff_sub5=pthomas@slurpmail.net&source=_______&file_id=5070
IP
34.241.40.98:443
ASN
#16509 AMAZON-02

Certificate
IssuerAmazon
Subjectgo.offerwave.org
Fingerprint5D:59:21:2E:FB:15:2E:13:B3:82:5A:C9:1C:C8:ED:A6:72:1B:B9:01
ValidityThu, 09 Feb 2023 00:00:00 GMT - Sat, 09 Mar 2024 23:59:59 GMT

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
353 B (353 bytes)
Hash
5e8b048255980a2a549ea722c7cd0d55
05ecbdf4be071bfe554ed7477fcff2d3441b946c
55a012b46ca85f768d3a3de1cb8e800da298e1fb723b6fc6b5f2e1ed575291f1

Detections

Analyzer	Verdict	Alert
mnemonic_dns	Sinkholed
quad9	Sinkholed

HTTP Headers

GET /aff_c?offer_id=1291&aff_id=1507&aff_sub=052623_4792_582_am&aff_sub3=1005554&aff_sub5=pthomas@slurpmail.net&source=_______&file_id=5070 HTTP/1.1
Host: go.offerwave.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Found
Server: nginx
Date: Fri, 26 May 2023 15:18:45 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 353
Connection: keep-alive
Cache-Control: no-cache, no-store, must-revalidate
Expires: Sat, 26 Jul 1997 05:00:00 GMT
Location: https://trk.legendaff.com/aff_c?offer_id=75&aff_id=1171&aff_sub=052623_4792_582_am&aff_sub5=102cacc37b0ed92bf44b8e34a199cf&aff_sub4=&aff_sub3=1005554
P3p: CP="NOI CUR OUR NOR INT"
Pragma: no-cache
Set-Cookie: enc_aff_session_1291=ENC0321b8380c399583d99697751bce889744a41cf7282b8407f92fe02c1026b48bde771724d1922ec5b5176598b81babf8bba5c9c16058b9e384626f97948e997fc27f82a7fd8c55cfd7c02c27416b3a81e91dc1f850db4c4eef258149ff49ecbbb5fa6f2e348aa202d299359e609522e663a202212de70ec4d01c9f694777d6265bed4de4bd9933f4d9730d0f4bdc6bcc4b9c0e91c657f4225f7eb002360a430a23051959a5; expires=Mon, 26 Jun 2023 15:18:45 GMT; path=/; SameSite=None; Secure
ho_mob=eyJtb2JpbGVfZGV2aWNlX29zIjoiRGVza3RvcCIsIm1vYmlsZV9kZXZpY2VfbW9kZWwiOiJGaXJlZm94IiwibW9iaWxlX2RldmljZV9icmFuZCI6Ik1vemlsbGEiLCJtb2JpbGVfYnJvd3NlciI6IkZpcmVmb3ggRGVza3RvcCIsIm1vYmlsZV9icm93c2VyX3ZlcnNpb24iOiIxMTEuMCIsIm1vYmlsZV9jYXJyaWVyIjoiPyIsInVzZXJfYWdlbnQiOiJNb3ppbGxhLzUuMCAoWDExOyBMaW51eCBYODZfNjQ7IFJ2OjEwOS4wKSBHZWNrby8yMDEwMDEwMSBGaXJlZm94LzExMS4wIiwiYWNjZXB0X2xhbmd1YWdlIjoiZW4tVVMsZW47cT0wLjUiLCJjb25uZWN0aW9uX3NwZWVkIjoiYnJvYWRiYW5kIn0=; expires=Mon, 20 Apr 2026 01:58:45 GMT; path=/; SameSite=None; Secure
Tracking_id: 102cacc37b0ed92bf44b8e34a199cf
X-Robots-Tag: noindex, nofollow
Access-Control-Allow-Origin: *
X-Request-Id: 673675ebe3a13c5c3467fc8e4f6c3716
Access-Control-Allow-Headers: Tune-SDK-Version

assets.clickfunnels.com/images/closemodal.png

104.16.12.194

200 OK

672 B

URL GET HTTP/2
assets.clickfunnels.com/images/closemodal.png
IP
104.16.12.194:443
ASN
#13335 CLOUDFLARENET

Requested by
https://go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint76:93:26:C7:54:DD:C9:C2:34:D3:16:AF:2B:26:16:E1:9A:02:43:B1
ValiditySat, 23 Jul 2022 00:00:00 GMT - Sun, 23 Jul 2023 23:59:59 GMT

File type
RIFF (little-endian) data, Web/P image\012- data
Size
672 B (672 bytes)
Hash
19754ed4d508cf576c80cf36e0db8c50
f459beac714e5be68aa75349fa806a5642af456a
5216f197f782f4bb872e02a677986af90a488015910f8d3864b796ad68dbd389

HTTP Headers

GET /images/closemodal.png HTTP/1.1
Host: assets.clickfunnels.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://go.healthyliving.news/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 26 May 2023 15:18:47 GMT
content-type: image/webp
content-length: 672
cf-ray: 7cd6fe1f8c5eb4f4-OSL
cf-cache-status: HIT
accept-ranges: bytes
access-control-allow-origin: *
age: 601526
cache-control: public, max-age=2678400
content-disposition: inline; filename="closemodal.webp"
etag: "6452def5-314"
expires: Mon, 26 Jun 2023 15:18:47 GMT
last-modified: Wed, 03 May 2023 22:23:49 GMT
strict-transport-security: max-age=0
vary: Accept, Accept-Encoding
access-control-allow-credentials: true
access-control-allow-headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization
access-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
access-control-max-age: 1728000
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=788
set-cookie: __cf_bm=CkRxRmxLZfYQ_LPSOrr0RSq8zTiZerkxHJw72ov_t9Q-1685114327-0-AVKU3NnxbY9VgmR0Y2WDWrwJQjPb5sKgF9xIWcwNRW/m8ykB0UQEq1/67Ak14tFTddNhL8+UxNw0ZDaXYV8lii/jAlDwxl7RuX8GTtOvdRdS; path=/; expires=Fri, 26-May-23 15:48:47 GMT; domain=.clickfunnels.com; HttpOnly; Secure; SameSite=None
report-to: {"endpoints":[{"url":"https:\/\/csp-reporting.cloudflare.com\/cdn-cgi\/script_monitor\/report?m=0nHJst2MF0upRL2.O_x.D8YOO0SC4rYZnUQbeVj65vI-1685114327-0-AcRN3CrOUbpg-6mNLIj0x9xs3rT79e2_y0KDv02EtX4oOzthzGoQeT-doNQHhfUIiFX9Kha26uJylal5mZOO4YIa80U_uyEaj9yDcecEuvTvPnz5bRXfgO3wJuTmEbUtKdQ22fvgR0ZJqBE6reeeVF_1WnQdpGGCnXNRRMASoyhw"}],"group":"cf-csp-endpoint","max_age":86400}
content-security-policy-report-only: script-src 'none'; connect-src 'none'; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=0nHJst2MF0upRL2.O_x.D8YOO0SC4rYZnUQbeVj65vI-1685114327-0-AcRN3CrOUbpg-6mNLIj0x9xs3rT79e2_y0KDv02EtX4oOzthzGoQeT-doNQHhfUIiFX9Kha26uJylal5mZOO4YIa80U_uyEaj9yDcecEuvTvPnz5bRXfgO3wJuTmEbUtKdQ22fvgR0ZJqBE6reeeVF_1WnQdpGGCnXNRRMASoyhw; report-to cf-csp-endpoint
server: cloudflare
X-Firefox-Spdy: h2

go.healthyliving.news/hosted/images/7d/9f196878c14680b4d0b0f3a4cf374c/skin-allergy.jpg

104.16.15.194

200 OK

21 kB

URL GET HTTP/2
go.healthyliving.news/hosted/images/7d/9f196878c14680b4d0b0f3a4cf374c/skin-allergy.jpg
IP
104.16.15.194:443
ASN
#13335 CLOUDFLARENET

Requested by
https://go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a
Certificate
IssuerCloudflare, Inc.
Subjectgo.healthyliving.news
Fingerprint13:13:61:C0:89:7F:8B:90:12:04:F7:B1:AC:C6:50:50:AB:4F:11:DE
ValidityFri, 12 Aug 2022 00:00:00 GMT - Sat, 12 Aug 2023 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 427x496, components 3\012- data
Size
21 kB (20983 bytes)
Hash
213cb8ec6fa1d09e66155cc883789acc
5abdc8ef4b998157a3ef780ac6e6b37b7a098930
e990e58a16add2a109033cfe5cf598f113b455625eca2bedd9e515ae0adfe5cb

HTTP Headers

GET /hosted/images/7d/9f196878c14680b4d0b0f3a4cf374c/skin-allergy.jpg HTTP/1.1
Host: go.healthyliving.news
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a
Cookie: __cf_bm=06SNOrEO60F0MjY2MXcWay_qrAbj.gEwH49MXZXh1UY-1685114325-0-AWf+qf+uYXF2Psdo1hh0osvKKpi6ctxplVI+8K/6mZkOrIQBo0L9yBO1PdrBARZXoKTtO/9V77pMLqzXO1Thnyz1D4GAUMZ+wrp9V8EftWsK
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 26 May 2023 15:18:47 GMT
content-type: image/jpeg
content-length: 20983
cf-ray: 7cd6fe1f5e0d1bfe-OSL
cf-cache-status: HIT
accept-ranges: bytes
cache-control: max-age=31536000
etag: "6042177fec588e9ad1895ab3c79accc7"
expires: Mon, 19 Jun 2023 15:18:47 GMT
last-modified: Tue, 20 Jul 2021 07:45:43 GMT
vary: Accept, Accept-Encoding
cf-bgj: imgq:85,h2pri
cf-polished: origSize=20989
server: cloudflare
X-Firefox-Spdy: h2

go.healthyliving.news/hosted/images/d0/d2b64377bc4523ab8601751fcfe788/young-woman.jpg

104.16.15.194

200 OK

26 kB

URL GET HTTP/2
go.healthyliving.news/hosted/images/d0/d2b64377bc4523ab8601751fcfe788/young-woman.jpg
IP
104.16.15.194:443
ASN
#13335 CLOUDFLARENET

Requested by
https://go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a
Certificate
IssuerCloudflare, Inc.
Subjectgo.healthyliving.news
Fingerprint13:13:61:C0:89:7F:8B:90:12:04:F7:B1:AC:C6:50:50:AB:4F:11:DE
ValidityFri, 12 Aug 2022 00:00:00 GMT - Sat, 12 Aug 2023 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 391x587, components 3\012- data
Size
26 kB (26073 bytes)
Hash
0acfdb7d8322314e1976d1b20fc302e8
637aa4c2a1f02e4c8ce953e7d6d8518ef6bfd872
14494b2bb86f467b094d630c472c37ec03ab2f45cbf23a12ee9ecac28434091c

HTTP Headers

GET /hosted/images/d0/d2b64377bc4523ab8601751fcfe788/young-woman.jpg HTTP/1.1
Host: go.healthyliving.news
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a
Cookie: __cf_bm=06SNOrEO60F0MjY2MXcWay_qrAbj.gEwH49MXZXh1UY-1685114325-0-AWf+qf+uYXF2Psdo1hh0osvKKpi6ctxplVI+8K/6mZkOrIQBo0L9yBO1PdrBARZXoKTtO/9V77pMLqzXO1Thnyz1D4GAUMZ+wrp9V8EftWsK
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 26 May 2023 15:18:47 GMT
content-type: image/jpeg
content-length: 26073
cf-ray: 7cd6fe1f5dfe1bfe-OSL
cf-cache-status: HIT
accept-ranges: bytes
cache-control: max-age=31536000
etag: "0acfdb7d8322314e1976d1b20fc302e8"
expires: Mon, 19 Jun 2023 15:18:47 GMT
last-modified: Tue, 20 Jul 2021 06:18:02 GMT
vary: Accept, Accept-Encoding
cf-bgj: imgq:85,h2pri
cf-polished: status=not_needed
server: cloudflare
X-Firefox-Spdy: h2

go.healthyliving.news/hosted/images/8b/9306d18a0e4c24a1d1dff6d2924eb9/Kriss-Berg.jpg

104.16.15.194

200 OK

16 kB

URL GET HTTP/2
go.healthyliving.news/hosted/images/8b/9306d18a0e4c24a1d1dff6d2924eb9/Kriss-Berg.jpg
IP
104.16.15.194:443
ASN
#13335 CLOUDFLARENET

Requested by
https://go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a
Certificate
IssuerCloudflare, Inc.
Subjectgo.healthyliving.news
Fingerprint13:13:61:C0:89:7F:8B:90:12:04:F7:B1:AC:C6:50:50:AB:4F:11:DE
ValidityFri, 12 Aug 2022 00:00:00 GMT - Sat, 12 Aug 2023 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 407x408, components 3\012- data
Size
16 kB (15905 bytes)
Hash
fbec4902055bd25a2856678463ebf72b
36b50e9d9a3c87af9f0f4349744ad696ddeec777
f52f94d09e7e365e72fe49e873c18d891b820a3a9ea3384350b2509df21bb6ae

HTTP Headers

GET /hosted/images/8b/9306d18a0e4c24a1d1dff6d2924eb9/Kriss-Berg.jpg HTTP/1.1
Host: go.healthyliving.news
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a
Cookie: __cf_bm=06SNOrEO60F0MjY2MXcWay_qrAbj.gEwH49MXZXh1UY-1685114325-0-AWf+qf+uYXF2Psdo1hh0osvKKpi6ctxplVI+8K/6mZkOrIQBo0L9yBO1PdrBARZXoKTtO/9V77pMLqzXO1Thnyz1D4GAUMZ+wrp9V8EftWsK
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 26 May 2023 15:18:47 GMT
content-type: image/jpeg
content-length: 15905
cf-ray: 7cd6fe1f6e161bfe-OSL
cf-cache-status: HIT
accept-ranges: bytes
cache-control: max-age=31536000
etag: "fbec4902055bd25a2856678463ebf72b"
expires: Mon, 19 Jun 2023 15:18:47 GMT
last-modified: Tue, 20 Jul 2021 08:04:14 GMT
vary: Accept, Accept-Encoding
cf-bgj: imgq:85,h2pri
cf-polished: status=not_needed
server: cloudflare
X-Firefox-Spdy: h2

go.healthyliving.news/hosted/images/7f/d7dd22343a41ab9093534b36e32423/happy-father-holds-his-little-son.jpg

104.16.15.194

200 OK

26 kB

URL GET HTTP/2
go.healthyliving.news/hosted/images/7f/d7dd22343a41ab9093534b36e32423/happy-father-holds-his-little-son.jpg
IP
104.16.15.194:443
ASN
#13335 CLOUDFLARENET

Requested by
https://go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a
Certificate
IssuerCloudflare, Inc.
Subjectgo.healthyliving.news
Fingerprint13:13:61:C0:89:7F:8B:90:12:04:F7:B1:AC:C6:50:50:AB:4F:11:DE
ValidityFri, 12 Aug 2022 00:00:00 GMT - Sat, 12 Aug 2023 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 420x505, components 3\012- data
Size
26 kB (25822 bytes)
Hash
31ec3a6a1aba213ab371dbf1df5079ba
fa6d3b11b16f2ad8b25f00fb957bd57f26e6c182
f40eecdf332cd8798c0e9d4dd85630fad4e5f9dd358c8efdb0e183a9c7721c5a

HTTP Headers

GET /hosted/images/7f/d7dd22343a41ab9093534b36e32423/happy-father-holds-his-little-son.jpg HTTP/1.1
Host: go.healthyliving.news
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a
Cookie: __cf_bm=06SNOrEO60F0MjY2MXcWay_qrAbj.gEwH49MXZXh1UY-1685114325-0-AWf+qf+uYXF2Psdo1hh0osvKKpi6ctxplVI+8K/6mZkOrIQBo0L9yBO1PdrBARZXoKTtO/9V77pMLqzXO1Thnyz1D4GAUMZ+wrp9V8EftWsK
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 26 May 2023 15:18:47 GMT
content-type: image/jpeg
content-length: 25822
cf-ray: 7cd6fe1f6e131bfe-OSL
cf-cache-status: HIT
accept-ranges: bytes
cache-control: max-age=31536000
etag: "31ec3a6a1aba213ab371dbf1df5079ba"
expires: Mon, 19 Jun 2023 15:18:47 GMT
last-modified: Tue, 20 Jul 2021 07:53:08 GMT
cf-bgj: imgq:85,h2pri
cf-polished: status=not_needed
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2

go.healthyliving.news/hosted/images/7f/3c1f06e07e4450b8629c868c1bbb29/Oxbenzone.png

104.16.15.194

200 OK

2.2 kB

URL GET HTTP/2
go.healthyliving.news/hosted/images/7f/3c1f06e07e4450b8629c868c1bbb29/Oxbenzone.png
IP
104.16.15.194:443
ASN
#13335 CLOUDFLARENET

Requested by
https://go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a
Certificate
IssuerCloudflare, Inc.
Subjectgo.healthyliving.news
Fingerprint13:13:61:C0:89:7F:8B:90:12:04:F7:B1:AC:C6:50:50:AB:4F:11:DE
ValidityFri, 12 Aug 2022 00:00:00 GMT - Sat, 12 Aug 2023 23:59:59 GMT

File type
PNG image data, 218 x 61, 8-bit colormap, non-interlaced\012- data
Size
2.2 kB (2246 bytes)
Hash
fd16b82e937fdd94290b6d4184dfa699
62f79095a86e4073776e30e8abe7649eaba5ea58
6fde1ba1d7059e0052650417ca7886af8a92308c700052eee191f73e17710798

HTTP Headers

GET /hosted/images/7f/3c1f06e07e4450b8629c868c1bbb29/Oxbenzone.png HTTP/1.1
Host: go.healthyliving.news
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a
Cookie: __cf_bm=06SNOrEO60F0MjY2MXcWay_qrAbj.gEwH49MXZXh1UY-1685114325-0-AWf+qf+uYXF2Psdo1hh0osvKKpi6ctxplVI+8K/6mZkOrIQBo0L9yBO1PdrBARZXoKTtO/9V77pMLqzXO1Thnyz1D4GAUMZ+wrp9V8EftWsK
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 26 May 2023 15:18:47 GMT
content-type: image/png
content-length: 2246
cf-ray: 7cd6fe1f7e2f1bfe-OSL
cf-cache-status: HIT
accept-ranges: bytes
cache-control: max-age=31536000
etag: "787eae06b2a71811e6a97073037a408d"
expires: Mon, 19 Jun 2023 15:18:47 GMT
last-modified: Thu, 22 Jul 2021 11:45:42 GMT
vary: Accept, Accept-Encoding
cf-bgj: imgq:85,h2pri
cf-polished: origSize=2558
server: cloudflare
X-Firefox-Spdy: h2

go.healthyliving.news/hosted/images/e4/133c035ddb4364bc1ce1fb112ba880/orange-tip.png

104.16.15.194

200 OK

376 B

URL GET HTTP/2
go.healthyliving.news/hosted/images/e4/133c035ddb4364bc1ce1fb112ba880/orange-tip.png
IP
104.16.15.194:443
ASN
#13335 CLOUDFLARENET

Requested by
https://go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a
Certificate
IssuerCloudflare, Inc.
Subjectgo.healthyliving.news
Fingerprint13:13:61:C0:89:7F:8B:90:12:04:F7:B1:AC:C6:50:50:AB:4F:11:DE
ValidityFri, 12 Aug 2022 00:00:00 GMT - Sat, 12 Aug 2023 23:59:59 GMT

File type
PNG image data, 136 x 19, 8-bit colormap, non-interlaced\012- data
Size
376 B (376 bytes)
Hash
8e53cd25b99436890ca41b91c307066a
419c846985b913b3151c7140acdc7aff3c5cf72c
832e659de3d807ac73eaa309b0ce95e5371baedb9ba9b49e450ef47a65a64de1

HTTP Headers

GET /hosted/images/e4/133c035ddb4364bc1ce1fb112ba880/orange-tip.png HTTP/1.1
Host: go.healthyliving.news
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a
Cookie: __cf_bm=06SNOrEO60F0MjY2MXcWay_qrAbj.gEwH49MXZXh1UY-1685114325-0-AWf+qf+uYXF2Psdo1hh0osvKKpi6ctxplVI+8K/6mZkOrIQBo0L9yBO1PdrBARZXoKTtO/9V77pMLqzXO1Thnyz1D4GAUMZ+wrp9V8EftWsK
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 26 May 2023 15:18:47 GMT
content-type: image/png
content-length: 376
cf-ray: 7cd6fe1f6e171bfe-OSL
cf-cache-status: HIT
accept-ranges: bytes
cache-control: max-age=31536000
etag: "50a574fa4ade9712152667f840744fee"
expires: Mon, 19 Jun 2023 15:18:47 GMT
last-modified: Thu, 22 Jul 2021 11:20:50 GMT
vary: Accept, Accept-Encoding
cf-bgj: imgq:85,h2pri
cf-polished: origSize=688
server: cloudflare
X-Firefox-Spdy: h2

go.healthyliving.news/hosted/images/f7/45ad652e6841a0a139b446ffa4c818/unnamed-4-.png

104.16.15.194

200 OK

83 kB

URL GET HTTP/2
go.healthyliving.news/hosted/images/f7/45ad652e6841a0a139b446ffa4c818/unnamed-4-.png
IP
104.16.15.194:443
ASN
#13335 CLOUDFLARENET

Requested by
https://go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a
Certificate
IssuerCloudflare, Inc.
Subjectgo.healthyliving.news
Fingerprint13:13:61:C0:89:7F:8B:90:12:04:F7:B1:AC:C6:50:50:AB:4F:11:DE
ValidityFri, 12 Aug 2022 00:00:00 GMT - Sat, 12 Aug 2023 23:59:59 GMT

File type
PNG image data, 800 x 395, 8-bit/color RGB, non-interlaced\012- data
Size
83 kB (83339 bytes)
Hash
e2ccf22cfdc41645c4ae95b48f949f96
6cd6a5490e7b6181ed1120512891abfce866fcc9
0fdcfcccce9779ca52a5a2441594fa6c0ce3ee084bc7afb1f08c58bf70851ca2

HTTP Headers

GET /hosted/images/f7/45ad652e6841a0a139b446ffa4c818/unnamed-4-.png HTTP/1.1
Host: go.healthyliving.news
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a
Cookie: __cf_bm=06SNOrEO60F0MjY2MXcWay_qrAbj.gEwH49MXZXh1UY-1685114325-0-AWf+qf+uYXF2Psdo1hh0osvKKpi6ctxplVI+8K/6mZkOrIQBo0L9yBO1PdrBARZXoKTtO/9V77pMLqzXO1Thnyz1D4GAUMZ+wrp9V8EftWsK
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 26 May 2023 15:18:47 GMT
content-type: image/png
content-length: 83339
cf-ray: 7cd6fe1f6e191bfe-OSL
cf-cache-status: HIT
accept-ranges: bytes
cache-control: max-age=31536000
etag: "19eeffcaba3b1ebed316d3f120adc555"
expires: Mon, 19 Jun 2023 15:18:47 GMT
last-modified: Mon, 02 Aug 2021 15:11:44 GMT
vary: Accept, Accept-Encoding
cf-bgj: imgq:85,h2pri
cf-polished: origSize=83487
server: cloudflare
X-Firefox-Spdy: h2

go.healthyliving.news/hosted/images/82/f07bdb61b747108b21a149dda63c13/PureXanthin_1-bottle.png

104.16.15.194

200 OK

360 kB

URL GET HTTP/2
go.healthyliving.news/hosted/images/82/f07bdb61b747108b21a149dda63c13/PureXanthin_1-bottle.png
IP
104.16.15.194:443
ASN
#13335 CLOUDFLARENET

Requested by
https://go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a
Certificate
IssuerCloudflare, Inc.
Subjectgo.healthyliving.news
Fingerprint13:13:61:C0:89:7F:8B:90:12:04:F7:B1:AC:C6:50:50:AB:4F:11:DE
ValidityFri, 12 Aug 2022 00:00:00 GMT - Sat, 12 Aug 2023 23:59:59 GMT

File type
PNG image data, 500 x 1000, 8-bit/color RGBA, non-interlaced\012- data
Size
360 kB (359620 bytes)
Hash
888fad157f29f9240cbcaea70f026baf
c52351cd7d7a03a9cd25512bf9c8cd4ee176a240
6d754455f65192426153e86a7b5057417ce155e33f4ffd8cf4ed85b42b8c0d6c

HTTP Headers

GET /hosted/images/82/f07bdb61b747108b21a149dda63c13/PureXanthin_1-bottle.png HTTP/1.1
Host: go.healthyliving.news
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a
Cookie: __cf_bm=06SNOrEO60F0MjY2MXcWay_qrAbj.gEwH49MXZXh1UY-1685114325-0-AWf+qf+uYXF2Psdo1hh0osvKKpi6ctxplVI+8K/6mZkOrIQBo0L9yBO1PdrBARZXoKTtO/9V77pMLqzXO1Thnyz1D4GAUMZ+wrp9V8EftWsK
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 26 May 2023 15:18:47 GMT
content-type: image/png
content-length: 359620
cf-ray: 7cd6fe1f4df81bfe-OSL
cf-cache-status: HIT
accept-ranges: bytes
cache-control: max-age=31536000
etag: "9df955c4546e21bac2ff4aac8e44f5d6"
expires: Mon, 19 Jun 2023 15:18:47 GMT
last-modified: Fri, 23 Jul 2021 08:15:50 GMT
vary: Accept, Accept-Encoding
cf-bgj: imgq:85,h2pri
cf-polished: origSize=360580
server: cloudflare
X-Firefox-Spdy: h2

go.healthyliving.news/hosted/images/15/f5520009cc4c4a80a91f9002ac7403/old-woman.jpg

104.16.15.194

200 OK

41 kB

URL GET HTTP/2
go.healthyliving.news/hosted/images/15/f5520009cc4c4a80a91f9002ac7403/old-woman.jpg
IP
104.16.15.194:443
ASN
#13335 CLOUDFLARENET

Requested by
https://go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a
Certificate
IssuerCloudflare, Inc.
Subjectgo.healthyliving.news
Fingerprint13:13:61:C0:89:7F:8B:90:12:04:F7:B1:AC:C6:50:50:AB:4F:11:DE
ValidityFri, 12 Aug 2022 00:00:00 GMT - Sat, 12 Aug 2023 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 391x588, components 3\012- data
Size
41 kB (41374 bytes)
Hash
1405699de361b2519195f4df97d3735a
5669a8413b425db6d3dad58c58ac6542b7b826c0
e9f285f9a19712e9a944ab69dfbd7d9f4418efafd74c2d0a9079e43c2d0078ae

HTTP Headers

GET /hosted/images/15/f5520009cc4c4a80a91f9002ac7403/old-woman.jpg HTTP/1.1
Host: go.healthyliving.news
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a
Cookie: __cf_bm=06SNOrEO60F0MjY2MXcWay_qrAbj.gEwH49MXZXh1UY-1685114325-0-AWf+qf+uYXF2Psdo1hh0osvKKpi6ctxplVI+8K/6mZkOrIQBo0L9yBO1PdrBARZXoKTtO/9V77pMLqzXO1Thnyz1D4GAUMZ+wrp9V8EftWsK
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 26 May 2023 15:18:47 GMT
content-type: image/jpeg
content-length: 41374
cf-ray: 7cd6fe1f5e041bfe-OSL
cf-cache-status: HIT
accept-ranges: bytes
cache-control: max-age=31536000
etag: "1405699de361b2519195f4df97d3735a"
expires: Mon, 19 Jun 2023 15:18:47 GMT
last-modified: Tue, 20 Jul 2021 06:19:03 GMT
cf-bgj: imgq:85,h2pri
cf-polished: status=not_needed
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2

go.healthyliving.news/hosted/images/05/c4e780c5f642b1acf015460d93d726/face-cover-man-and-woman.jpg

104.16.15.194

200 OK

32 kB

URL GET HTTP/2
go.healthyliving.news/hosted/images/05/c4e780c5f642b1acf015460d93d726/face-cover-man-and-woman.jpg
IP
104.16.15.194:443
ASN
#13335 CLOUDFLARENET

Requested by
https://go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a
Certificate
IssuerCloudflare, Inc.
Subjectgo.healthyliving.news
Fingerprint13:13:61:C0:89:7F:8B:90:12:04:F7:B1:AC:C6:50:50:AB:4F:11:DE
ValidityFri, 12 Aug 2022 00:00:00 GMT - Sat, 12 Aug 2023 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1062x666, components 3\012- data
Size
32 kB (31848 bytes)
Hash
af1774e828a4961f64039abef974f056
735fd95a178b0b7e0adeae81231082df6620a9a5
de69e34ab849fad5723bc69f396e739d5f5c1a556d39db10796be818d8ba0cb0

HTTP Headers

GET /hosted/images/05/c4e780c5f642b1acf015460d93d726/face-cover-man-and-woman.jpg HTTP/1.1
Host: go.healthyliving.news
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a
Cookie: __cf_bm=06SNOrEO60F0MjY2MXcWay_qrAbj.gEwH49MXZXh1UY-1685114325-0-AWf+qf+uYXF2Psdo1hh0osvKKpi6ctxplVI+8K/6mZkOrIQBo0L9yBO1PdrBARZXoKTtO/9V77pMLqzXO1Thnyz1D4GAUMZ+wrp9V8EftWsK
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 26 May 2023 15:18:47 GMT
content-type: image/jpeg
content-length: 31848
cf-ray: 7cd6fe1f6e0e1bfe-OSL
cf-cache-status: HIT
accept-ranges: bytes
cache-control: max-age=31536000
etag: "af1774e828a4961f64039abef974f056"
expires: Mon, 19 Jun 2023 15:18:47 GMT
last-modified: Tue, 20 Jul 2021 07:48:19 GMT
vary: Accept, Accept-Encoding
cf-bgj: imgq:85,h2pri
cf-polished: status=not_needed
server: cloudflare
X-Firefox-Spdy: h2

go.healthyliving.news/hosted/images/18/83f96a6c7549a6867c191ed3a6d73d/IMG_6989.jpg

104.16.15.194

200 OK

44 kB

URL GET HTTP/2
go.healthyliving.news/hosted/images/18/83f96a6c7549a6867c191ed3a6d73d/IMG_6989.jpg
IP
104.16.15.194:443
ASN
#13335 CLOUDFLARENET

Requested by
https://go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a
Certificate
IssuerCloudflare, Inc.
Subjectgo.healthyliving.news
Fingerprint13:13:61:C0:89:7F:8B:90:12:04:F7:B1:AC:C6:50:50:AB:4F:11:DE
ValidityFri, 12 Aug 2022 00:00:00 GMT - Sat, 12 Aug 2023 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 600x800, components 3\012- data
Size
44 kB (44355 bytes)
Hash
421b9c0188115049ba17f86cb2d75cbc
3a8f92150dd173a25409e8c40962ffd16b394634
e6a40abe10d5859ce815ab846b11f4a7acd6bbedd6d7a6481ced21f17a6356ce

HTTP Headers

GET /hosted/images/18/83f96a6c7549a6867c191ed3a6d73d/IMG_6989.jpg HTTP/1.1
Host: go.healthyliving.news
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a
Cookie: __cf_bm=06SNOrEO60F0MjY2MXcWay_qrAbj.gEwH49MXZXh1UY-1685114325-0-AWf+qf+uYXF2Psdo1hh0osvKKpi6ctxplVI+8K/6mZkOrIQBo0L9yBO1PdrBARZXoKTtO/9V77pMLqzXO1Thnyz1D4GAUMZ+wrp9V8EftWsK
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 26 May 2023 15:18:47 GMT
content-type: image/jpeg
content-length: 44355
cf-ray: 7cd6fe1f6e1d1bfe-OSL
cf-cache-status: HIT
accept-ranges: bytes
cache-control: max-age=31536000
etag: "499b59dfd29743fe99d7ede3fabf69f6"
expires: Mon, 19 Jun 2023 15:18:47 GMT
last-modified: Fri, 23 Jul 2021 15:10:56 GMT
vary: Accept, Accept-Encoding
cf-bgj: imgq:85,h2pri
cf-polished: degrade=85, origSize=46958
server: cloudflare
X-Firefox-Spdy: h2

go.healthyliving.news/hosted/images/84/935463b4c4479e9416fa234fdf7262/Mask-Group-32.png

104.16.15.194

200 OK

532 B

URL GET HTTP/2
go.healthyliving.news/hosted/images/84/935463b4c4479e9416fa234fdf7262/Mask-Group-32.png
IP
104.16.15.194:443
ASN
#13335 CLOUDFLARENET

Requested by
https://go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a
Certificate
IssuerCloudflare, Inc.
Subjectgo.healthyliving.news
Fingerprint13:13:61:C0:89:7F:8B:90:12:04:F7:B1:AC:C6:50:50:AB:4F:11:DE
ValidityFri, 12 Aug 2022 00:00:00 GMT - Sat, 12 Aug 2023 23:59:59 GMT

File type
PNG image data, 176 x 25, 8-bit gray+alpha, non-interlaced\012- data
Size
532 B (532 bytes)
Hash
eab419ff544f968f92f3b6f70ef32c2f
e9dcbd6a6a285e420ffe044c4db333f735763867
8f451b4eb0dbd9c275da5484c85615e28e3506eeac4ece00acbdb4f63b1f3fe8

HTTP Headers

GET /hosted/images/84/935463b4c4479e9416fa234fdf7262/Mask-Group-32.png HTTP/1.1
Host: go.healthyliving.news
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a
Cookie: __cf_bm=06SNOrEO60F0MjY2MXcWay_qrAbj.gEwH49MXZXh1UY-1685114325-0-AWf+qf+uYXF2Psdo1hh0osvKKpi6ctxplVI+8K/6mZkOrIQBo0L9yBO1PdrBARZXoKTtO/9V77pMLqzXO1Thnyz1D4GAUMZ+wrp9V8EftWsK
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 26 May 2023 15:18:47 GMT
content-type: image/png
content-length: 532
cf-ray: 7cd6fe1f5e051bfe-OSL
cf-cache-status: HIT
accept-ranges: bytes
cache-control: max-age=31536000
etag: "5111df8d900574eba7030e209f495cd6"
expires: Mon, 19 Jun 2023 15:18:47 GMT
last-modified: Thu, 22 Jul 2021 11:14:45 GMT
vary: Accept, Accept-Encoding
cf-bgj: imgq:85,h2pri
cf-polished: origSize=978
server: cloudflare
X-Firefox-Spdy: h2

go.healthyliving.news/hosted/images/58/076c7f9e0a44ab9fef0a0359474fe9/Avobenzone.png

104.16.15.194

200 OK

2.8 kB

URL GET HTTP/2
go.healthyliving.news/hosted/images/58/076c7f9e0a44ab9fef0a0359474fe9/Avobenzone.png
IP
104.16.15.194:443
ASN
#13335 CLOUDFLARENET

Requested by
https://go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a
Certificate
IssuerCloudflare, Inc.
Subjectgo.healthyliving.news
Fingerprint13:13:61:C0:89:7F:8B:90:12:04:F7:B1:AC:C6:50:50:AB:4F:11:DE
ValidityFri, 12 Aug 2022 00:00:00 GMT - Sat, 12 Aug 2023 23:59:59 GMT

File type
PNG image data, 218 x 61, 8-bit/color RGBA, non-interlaced\012- data
Size
2.8 kB (2766 bytes)
Hash
640be62558af08ec9d6d753c33ae33d4
d207a72a77ce7201ba5fd4c4230996d7563701a3
b5f2141cdfc85ab1b3edbcc7e74dd230d9c2ff194d2deead39044737567026d0

HTTP Headers

GET /hosted/images/58/076c7f9e0a44ab9fef0a0359474fe9/Avobenzone.png HTTP/1.1
Host: go.healthyliving.news
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a
Cookie: __cf_bm=06SNOrEO60F0MjY2MXcWay_qrAbj.gEwH49MXZXh1UY-1685114325-0-AWf+qf+uYXF2Psdo1hh0osvKKpi6ctxplVI+8K/6mZkOrIQBo0L9yBO1PdrBARZXoKTtO/9V77pMLqzXO1Thnyz1D4GAUMZ+wrp9V8EftWsK
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 26 May 2023 15:18:47 GMT
content-type: image/png
content-length: 2766
cf-ray: 7cd6fe1f7e301bfe-OSL
cf-cache-status: HIT
accept-ranges: bytes
cache-control: max-age=31536000
etag: "3a575fee7d3e79016d1905ec5334cd73"
expires: Mon, 19 Jun 2023 15:18:47 GMT
last-modified: Thu, 22 Jul 2021 11:50:22 GMT
vary: Accept, Accept-Encoding
cf-bgj: imgq:85,h2pri
cf-polished: origSize=3083
server: cloudflare
X-Firefox-Spdy: h2

go.healthyliving.news/hosted/images/8a/0bf90818514b79bd075c614f5fcb20/grey-tip.png

104.16.15.194

200 OK

650 B

URL GET HTTP/2
go.healthyliving.news/hosted/images/8a/0bf90818514b79bd075c614f5fcb20/grey-tip.png
IP
104.16.15.194:443
ASN
#13335 CLOUDFLARENET

Requested by
https://go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a
Certificate
IssuerCloudflare, Inc.
Subjectgo.healthyliving.news
Fingerprint13:13:61:C0:89:7F:8B:90:12:04:F7:B1:AC:C6:50:50:AB:4F:11:DE
ValidityFri, 12 Aug 2022 00:00:00 GMT - Sat, 12 Aug 2023 23:59:59 GMT

File type
PNG image data, 176 x 25, 8-bit gray+alpha, non-interlaced\012- data
Size
650 B (650 bytes)
Hash
9fa706085bc46555e6fc063209783fd5
2342462bae088a7cc9efa2bcd5f0044d193f9557
289c03d5628588fe00d09aa2241430e3647b14555ec3f5a3f3c30c18bd300dad

HTTP Headers

GET /hosted/images/8a/0bf90818514b79bd075c614f5fcb20/grey-tip.png HTTP/1.1
Host: go.healthyliving.news
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a
Cookie: __cf_bm=06SNOrEO60F0MjY2MXcWay_qrAbj.gEwH49MXZXh1UY-1685114325-0-AWf+qf+uYXF2Psdo1hh0osvKKpi6ctxplVI+8K/6mZkOrIQBo0L9yBO1PdrBARZXoKTtO/9V77pMLqzXO1Thnyz1D4GAUMZ+wrp9V8EftWsK
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 26 May 2023 15:18:47 GMT
content-type: image/png
content-length: 650
cf-ray: 7cd6fe1f7e281bfe-OSL
cf-cache-status: HIT
accept-ranges: bytes
cache-control: max-age=31536000
etag: "d049b4a47a92d77181f1d21dc1118982"
expires: Mon, 19 Jun 2023 15:18:47 GMT
last-modified: Thu, 22 Jul 2021 12:28:24 GMT
vary: Accept, Accept-Encoding
cf-bgj: imgq:85,h2pri
cf-polished: origSize=1088
server: cloudflare
X-Firefox-Spdy: h2

go.healthyliving.news/hosted/images/9f/8c79807cec43799f1ea9dfdcc2ec42/IMG_7002-1.jpg

104.16.15.194

200 OK

43 kB

URL GET HTTP/2
go.healthyliving.news/hosted/images/9f/8c79807cec43799f1ea9dfdcc2ec42/IMG_7002-1.jpg
IP
104.16.15.194:443
ASN
#13335 CLOUDFLARENET

Requested by
https://go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a
Certificate
IssuerCloudflare, Inc.
Subjectgo.healthyliving.news
Fingerprint13:13:61:C0:89:7F:8B:90:12:04:F7:B1:AC:C6:50:50:AB:4F:11:DE
ValidityFri, 12 Aug 2022 00:00:00 GMT - Sat, 12 Aug 2023 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 600x800, components 3\012- data
Size
43 kB (42837 bytes)
Hash
17a460e3e57dabf3cb0d210772b709f1
9aa60f76a6156f17a8f3d4afb8ffc1282f4903d7
e59d9283bc4ca0d08b26b3cebfa52854562b8d209f55bab78825053d01608a3a

HTTP Headers

GET /hosted/images/9f/8c79807cec43799f1ea9dfdcc2ec42/IMG_7002-1.jpg HTTP/1.1
Host: go.healthyliving.news
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a
Cookie: __cf_bm=06SNOrEO60F0MjY2MXcWay_qrAbj.gEwH49MXZXh1UY-1685114325-0-AWf+qf+uYXF2Psdo1hh0osvKKpi6ctxplVI+8K/6mZkOrIQBo0L9yBO1PdrBARZXoKTtO/9V77pMLqzXO1Thnyz1D4GAUMZ+wrp9V8EftWsK
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 26 May 2023 15:18:47 GMT
content-type: image/jpeg
content-length: 42837
cf-ray: 7cd6fe1f7e231bfe-OSL
cf-cache-status: HIT
accept-ranges: bytes
cache-control: max-age=31536000
etag: "da76102866462b162ee51d70e9d30d20"
expires: Mon, 19 Jun 2023 15:18:47 GMT
last-modified: Wed, 28 Jul 2021 20:35:29 GMT
vary: Accept, Accept-Encoding
cf-bgj: imgq:85,h2pri
cf-polished: degrade=85, origSize=46142
server: cloudflare
X-Firefox-Spdy: h2

go.healthyliving.news/hosted/images/ff/f7f0cb1e924ea69dc8da56595da68b/Ensulizole.png

104.16.15.194

200 OK

1.9 kB

URL GET HTTP/2
go.healthyliving.news/hosted/images/ff/f7f0cb1e924ea69dc8da56595da68b/Ensulizole.png
IP
104.16.15.194:443
ASN
#13335 CLOUDFLARENET

Requested by
https://go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a
Certificate
IssuerCloudflare, Inc.
Subjectgo.healthyliving.news
Fingerprint13:13:61:C0:89:7F:8B:90:12:04:F7:B1:AC:C6:50:50:AB:4F:11:DE
ValidityFri, 12 Aug 2022 00:00:00 GMT - Sat, 12 Aug 2023 23:59:59 GMT

File type
PNG image data, 218 x 61, 8-bit colormap, non-interlaced\012- data
Size
1.9 kB (1949 bytes)
Hash
ac8e3358c284b9bc63924f3de5915cfd
40c6e77d9e675df10c8f9cf566d4e1521c55cb3b
c83e206069a4cd912225f33f2c3adc695c7bfa26f2ac075d90ae2113071cfa4d

HTTP Headers

GET /hosted/images/ff/f7f0cb1e924ea69dc8da56595da68b/Ensulizole.png HTTP/1.1
Host: go.healthyliving.news
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a
Cookie: __cf_bm=06SNOrEO60F0MjY2MXcWay_qrAbj.gEwH49MXZXh1UY-1685114325-0-AWf+qf+uYXF2Psdo1hh0osvKKpi6ctxplVI+8K/6mZkOrIQBo0L9yBO1PdrBARZXoKTtO/9V77pMLqzXO1Thnyz1D4GAUMZ+wrp9V8EftWsK
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 26 May 2023 15:18:47 GMT
content-type: image/png
content-length: 1949
cf-ray: 7cd6fe1f7e331bfe-OSL
cf-cache-status: HIT
accept-ranges: bytes
cache-control: max-age=31536000
etag: "864058072bc54e812a24f63dad8962c6"
expires: Mon, 19 Jun 2023 15:18:47 GMT
last-modified: Thu, 22 Jul 2021 11:51:09 GMT
vary: Accept, Accept-Encoding
cf-bgj: imgq:85,h2pri
cf-polished: origSize=2274
server: cloudflare
X-Firefox-Spdy: h2

go.healthyliving.news/hosted/images/33/7d7f383fc74d678f315d52b92c4ca6/hand-young-man-with-pill-closeup.jpg

104.16.15.194

200 OK

13 kB

URL GET HTTP/2
go.healthyliving.news/hosted/images/33/7d7f383fc74d678f315d52b92c4ca6/hand-young-man-with-pill-closeup.jpg
IP
104.16.15.194:443
ASN
#13335 CLOUDFLARENET

Requested by
https://go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a
Certificate
IssuerCloudflare, Inc.
Subjectgo.healthyliving.news
Fingerprint13:13:61:C0:89:7F:8B:90:12:04:F7:B1:AC:C6:50:50:AB:4F:11:DE
ValidityFri, 12 Aug 2022 00:00:00 GMT - Sat, 12 Aug 2023 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 449x452, components 3\012- data
Size
13 kB (12938 bytes)
Hash
b8805929b194a1bd648e6547e75c12bb
8d54a021a6536cbee865a160ec13caaeb47c3c07
c701ca0ae7f83e1e82f52bea2813689e19308de6e70f085d28b876f40ba9d395

HTTP Headers

GET /hosted/images/33/7d7f383fc74d678f315d52b92c4ca6/hand-young-man-with-pill-closeup.jpg HTTP/1.1
Host: go.healthyliving.news
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a
Cookie: __cf_bm=06SNOrEO60F0MjY2MXcWay_qrAbj.gEwH49MXZXh1UY-1685114325-0-AWf+qf+uYXF2Psdo1hh0osvKKpi6ctxplVI+8K/6mZkOrIQBo0L9yBO1PdrBARZXoKTtO/9V77pMLqzXO1Thnyz1D4GAUMZ+wrp9V8EftWsK
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 26 May 2023 15:18:47 GMT
content-type: image/jpeg
content-length: 12938
cf-ray: 7cd6fe1f6e1c1bfe-OSL
cf-cache-status: HIT
accept-ranges: bytes
cache-control: max-age=31536000
etag: "b8805929b194a1bd648e6547e75c12bb"
expires: Mon, 19 Jun 2023 15:18:47 GMT
last-modified: Tue, 20 Jul 2021 08:16:40 GMT
vary: Accept, Accept-Encoding
cf-bgj: imgq:85,h2pri
cf-polished: status=not_needed
server: cloudflare
X-Firefox-Spdy: h2

go.healthyliving.news/hosted/images/7d/067d1e32e544229052fd2ac989b84c/three-kinds-of-uv-light.jpg

104.16.15.194

200 OK

30 kB

URL GET HTTP/2
go.healthyliving.news/hosted/images/7d/067d1e32e544229052fd2ac989b84c/three-kinds-of-uv-light.jpg
IP
104.16.15.194:443
ASN
#13335 CLOUDFLARENET

Requested by
https://go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a
Certificate
IssuerCloudflare, Inc.
Subjectgo.healthyliving.news
Fingerprint13:13:61:C0:89:7F:8B:90:12:04:F7:B1:AC:C6:50:50:AB:4F:11:DE
ValidityFri, 12 Aug 2022 00:00:00 GMT - Sat, 12 Aug 2023 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 452x567, components 3\012- data
Size
30 kB (30315 bytes)
Hash
57df96685fdf70b841e5665f3e7f737f
c96ef283f8a76af1c01d12e101804b9659f49652
254c9760d2f29369f967adb2400c4de97f6f03b96bd2926e280af09fc57f3546

HTTP Headers

GET /hosted/images/7d/067d1e32e544229052fd2ac989b84c/three-kinds-of-uv-light.jpg HTTP/1.1
Host: go.healthyliving.news
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a
Cookie: __cf_bm=06SNOrEO60F0MjY2MXcWay_qrAbj.gEwH49MXZXh1UY-1685114325-0-AWf+qf+uYXF2Psdo1hh0osvKKpi6ctxplVI+8K/6mZkOrIQBo0L9yBO1PdrBARZXoKTtO/9V77pMLqzXO1Thnyz1D4GAUMZ+wrp9V8EftWsK
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 26 May 2023 15:18:47 GMT
content-type: image/jpeg
content-length: 30315
cf-ray: 7cd6fe1f7e291bfe-OSL
cf-cache-status: HIT
accept-ranges: bytes
cache-control: max-age=31536000
etag: "57df96685fdf70b841e5665f3e7f737f"
expires: Mon, 19 Jun 2023 15:18:47 GMT
last-modified: Tue, 20 Jul 2021 08:33:25 GMT
vary: Accept, Accept-Encoding
cf-bgj: imgq:85,h2pri
cf-polished: status=not_needed
server: cloudflare
X-Firefox-Spdy: h2

go.healthyliving.news/hosted/images/82/3ad86cf11b47e3a87654fc6c87995c/Homosalate.png

104.16.15.194

200 OK

2.2 kB

URL GET HTTP/2
go.healthyliving.news/hosted/images/82/3ad86cf11b47e3a87654fc6c87995c/Homosalate.png
IP
104.16.15.194:443
ASN
#13335 CLOUDFLARENET

Requested by
https://go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a
Certificate
IssuerCloudflare, Inc.
Subjectgo.healthyliving.news
Fingerprint13:13:61:C0:89:7F:8B:90:12:04:F7:B1:AC:C6:50:50:AB:4F:11:DE
ValidityFri, 12 Aug 2022 00:00:00 GMT - Sat, 12 Aug 2023 23:59:59 GMT

File type
PNG image data, 218 x 61, 8-bit colormap, non-interlaced\012- data
Size
2.2 kB (2228 bytes)
Hash
8c9ff0fedfd81341faac7196ee50a6c9
70a23bd2f2fe86eb92fa363abe0c544f14a10d3b
ccff58f6c15c92835e3e42aea70d0d9f407273a1db5aa815503047fc050b9bc0

HTTP Headers

GET /hosted/images/82/3ad86cf11b47e3a87654fc6c87995c/Homosalate.png HTTP/1.1
Host: go.healthyliving.news
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a
Cookie: __cf_bm=06SNOrEO60F0MjY2MXcWay_qrAbj.gEwH49MXZXh1UY-1685114325-0-AWf+qf+uYXF2Psdo1hh0osvKKpi6ctxplVI+8K/6mZkOrIQBo0L9yBO1PdrBARZXoKTtO/9V77pMLqzXO1Thnyz1D4GAUMZ+wrp9V8EftWsK
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 26 May 2023 15:18:47 GMT
content-type: image/png
content-length: 2228
cf-ray: 7cd6fe1fbe8e1bfe-OSL
cf-cache-status: HIT
accept-ranges: bytes
cache-control: max-age=31536000
etag: "3d9cac3e3d906939d5947d451251dad5"
expires: Mon, 19 Jun 2023 15:18:47 GMT
last-modified: Thu, 22 Jul 2021 11:52:00 GMT
vary: Accept, Accept-Encoding
cf-bgj: imgq:85,h2pri
cf-polished: origSize=2540
server: cloudflare
X-Firefox-Spdy: h2

go.healthyliving.news/hosted/images/40/1c02fb607747b6894648bbec525d1f/man-beach-gets-boyfriend-back-sunscreen.jpg

104.16.15.194

200 OK

19 kB

URL GET HTTP/2
go.healthyliving.news/hosted/images/40/1c02fb607747b6894648bbec525d1f/man-beach-gets-boyfriend-back-sunscreen.jpg
IP
104.16.15.194:443
ASN
#13335 CLOUDFLARENET

Requested by
https://go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a
Certificate
IssuerCloudflare, Inc.
Subjectgo.healthyliving.news
Fingerprint13:13:61:C0:89:7F:8B:90:12:04:F7:B1:AC:C6:50:50:AB:4F:11:DE
ValidityFri, 12 Aug 2022 00:00:00 GMT - Sat, 12 Aug 2023 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 418x418, components 3\012- data
Size
19 kB (18755 bytes)
Hash
7c70f10b8f15b044a6fd9461122b68b5
69f4c6c8c34887b9f9e405b9b47a8e6d66eaa28f
cba0b73848ade42befd5d162e58feb211163d1e5e1a53c5d9f314dbb601094ab

HTTP Headers

GET /hosted/images/40/1c02fb607747b6894648bbec525d1f/man-beach-gets-boyfriend-back-sunscreen.jpg HTTP/1.1
Host: go.healthyliving.news
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a
Cookie: __cf_bm=06SNOrEO60F0MjY2MXcWay_qrAbj.gEwH49MXZXh1UY-1685114325-0-AWf+qf+uYXF2Psdo1hh0osvKKpi6ctxplVI+8K/6mZkOrIQBo0L9yBO1PdrBARZXoKTtO/9V77pMLqzXO1Thnyz1D4GAUMZ+wrp9V8EftWsK
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 26 May 2023 15:18:47 GMT
content-type: image/jpeg
content-length: 18755
cf-ray: 7cd6fe1f6e181bfe-OSL
cf-cache-status: HIT
accept-ranges: bytes
cache-control: max-age=31536000
etag: "7c70f10b8f15b044a6fd9461122b68b5"
expires: Mon, 19 Jun 2023 15:18:47 GMT
last-modified: Tue, 20 Jul 2021 08:07:07 GMT
vary: Accept, Accept-Encoding
cf-bgj: imgq:85,h2pri
cf-polished: status=not_needed
server: cloudflare
X-Firefox-Spdy: h2

go.healthyliving.news/hosted/images/7a/d34019f5144138818cce9c1393e840/step-2.png

104.16.15.194

200 OK

1.1 kB

URL GET HTTP/2
go.healthyliving.news/hosted/images/7a/d34019f5144138818cce9c1393e840/step-2.png
IP
104.16.15.194:443
ASN
#13335 CLOUDFLARENET

Requested by
https://go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a
Certificate
IssuerCloudflare, Inc.
Subjectgo.healthyliving.news
Fingerprint13:13:61:C0:89:7F:8B:90:12:04:F7:B1:AC:C6:50:50:AB:4F:11:DE
ValidityFri, 12 Aug 2022 00:00:00 GMT - Sat, 12 Aug 2023 23:59:59 GMT

File type
PNG image data, 180 x 58, 8-bit colormap, non-interlaced\012- data
Size
1.1 kB (1079 bytes)
Hash
9ebb568612654a616fbab49f55ae1080
811701c6a07969381f7cbcafa0f8b94f662ba62c
507af817e5e7979eee8b517ca858af9e454976bf6fc06c27e6a0521b43231345

HTTP Headers

GET /hosted/images/7a/d34019f5144138818cce9c1393e840/step-2.png HTTP/1.1
Host: go.healthyliving.news
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a
Cookie: __cf_bm=06SNOrEO60F0MjY2MXcWay_qrAbj.gEwH49MXZXh1UY-1685114325-0-AWf+qf+uYXF2Psdo1hh0osvKKpi6ctxplVI+8K/6mZkOrIQBo0L9yBO1PdrBARZXoKTtO/9V77pMLqzXO1Thnyz1D4GAUMZ+wrp9V8EftWsK
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 26 May 2023 15:18:47 GMT
content-type: image/png
content-length: 1079
cf-ray: 7cd6fe1fcea21bfe-OSL
cf-cache-status: HIT
accept-ranges: bytes
cache-control: max-age=31536000
etag: "97f3f07ddfc43856ab588cd245a4579c"
expires: Mon, 19 Jun 2023 15:18:47 GMT
last-modified: Thu, 22 Jul 2021 12:07:12 GMT
vary: Accept, Accept-Encoding
cf-bgj: imgq:85,h2pri
cf-polished: origSize=1222
server: cloudflare
X-Firefox-Spdy: h2

go.healthyliving.news/hosted/images/f4/952c82f6914fd480a87fd3664affec/Melanin.jpg

104.16.15.194

200 OK

21 kB

URL GET HTTP/2
go.healthyliving.news/hosted/images/f4/952c82f6914fd480a87fd3664affec/Melanin.jpg
IP
104.16.15.194:443
ASN
#13335 CLOUDFLARENET

Requested by
https://go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a
Certificate
IssuerCloudflare, Inc.
Subjectgo.healthyliving.news
Fingerprint13:13:61:C0:89:7F:8B:90:12:04:F7:B1:AC:C6:50:50:AB:4F:11:DE
ValidityFri, 12 Aug 2022 00:00:00 GMT - Sat, 12 Aug 2023 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 410x490, components 3\012- data
Size
21 kB (21297 bytes)
Hash
b4ce9bbea63c0ec0eedaa9e059f9d6d4
f6ef722c548e1e8dd944eae997c637c9373740cf
19f71289895bb01be2fda05d22eb2c25a542abce8cb62d54a9ebb6f2dc45eab3

HTTP Headers

GET /hosted/images/f4/952c82f6914fd480a87fd3664affec/Melanin.jpg HTTP/1.1
Host: go.healthyliving.news
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a
Cookie: __cf_bm=06SNOrEO60F0MjY2MXcWay_qrAbj.gEwH49MXZXh1UY-1685114325-0-AWf+qf+uYXF2Psdo1hh0osvKKpi6ctxplVI+8K/6mZkOrIQBo0L9yBO1PdrBARZXoKTtO/9V77pMLqzXO1Thnyz1D4GAUMZ+wrp9V8EftWsK
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 26 May 2023 15:18:47 GMT
content-type: image/jpeg
content-length: 21297
cf-ray: 7cd6fe1fce931bfe-OSL
cf-cache-status: HIT
accept-ranges: bytes
cache-control: max-age=31536000
etag: "b4ce9bbea63c0ec0eedaa9e059f9d6d4"
expires: Mon, 19 Jun 2023 15:18:47 GMT
last-modified: Thu, 22 Jul 2021 11:57:38 GMT
vary: Accept, Accept-Encoding
cf-bgj: imgq:85,h2pri
cf-polished: status=not_needed
server: cloudflare
X-Firefox-Spdy: h2

go.healthyliving.news/hosted/images/95/ddedc96a3c42b6af1c88a073df0c96/step-3.png

104.16.15.194

200 OK

1.1 kB

URL GET HTTP/2
go.healthyliving.news/hosted/images/95/ddedc96a3c42b6af1c88a073df0c96/step-3.png
IP
104.16.15.194:443
ASN
#13335 CLOUDFLARENET

Requested by
https://go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a
Certificate
IssuerCloudflare, Inc.
Subjectgo.healthyliving.news
Fingerprint13:13:61:C0:89:7F:8B:90:12:04:F7:B1:AC:C6:50:50:AB:4F:11:DE
ValidityFri, 12 Aug 2022 00:00:00 GMT - Sat, 12 Aug 2023 23:59:59 GMT

File type
PNG image data, 180 x 58, 8-bit colormap, non-interlaced\012- data
Size
1.1 kB (1087 bytes)
Hash
9425c0e73d2f38daf68a65c0b8b42514
3cb8d247d8971d97b77bd459b7f89a0b6542225a
02e5d6516e3aa1f820ffba6f89b4282d8c7068415caa2f6570ff39c98cdbbcad

HTTP Headers

GET /hosted/images/95/ddedc96a3c42b6af1c88a073df0c96/step-3.png HTTP/1.1
Host: go.healthyliving.news
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a
Cookie: __cf_bm=06SNOrEO60F0MjY2MXcWay_qrAbj.gEwH49MXZXh1UY-1685114325-0-AWf+qf+uYXF2Psdo1hh0osvKKpi6ctxplVI+8K/6mZkOrIQBo0L9yBO1PdrBARZXoKTtO/9V77pMLqzXO1Thnyz1D4GAUMZ+wrp9V8EftWsK
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 26 May 2023 15:18:47 GMT
content-type: image/png
content-length: 1087
cf-ray: 7cd6fe1fcea91bfe-OSL
cf-cache-status: HIT
accept-ranges: bytes
cache-control: max-age=31536000
etag: "745ad821dc1245aff2470e09dd63d64c"
expires: Mon, 19 Jun 2023 15:18:47 GMT
last-modified: Thu, 22 Jul 2021 12:07:12 GMT
vary: Accept, Accept-Encoding
cf-bgj: imgq:85,h2pri
cf-polished: origSize=1231
server: cloudflare
X-Firefox-Spdy: h2

go.healthyliving.news/hosted/images/6e/d12e738081456ba00d08421f2004ec/sunscreen-lotion-sun-shape.jpg

104.16.15.194

200 OK

22 kB

URL GET HTTP/2
go.healthyliving.news/hosted/images/6e/d12e738081456ba00d08421f2004ec/sunscreen-lotion-sun-shape.jpg
IP
104.16.15.194:443
ASN
#13335 CLOUDFLARENET

Requested by
https://go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a
Certificate
IssuerCloudflare, Inc.
Subjectgo.healthyliving.news
Fingerprint13:13:61:C0:89:7F:8B:90:12:04:F7:B1:AC:C6:50:50:AB:4F:11:DE
ValidityFri, 12 Aug 2022 00:00:00 GMT - Sat, 12 Aug 2023 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 405x513, components 3\012- data
Size
22 kB (21495 bytes)
Hash
86d9c4800adae3c8b0a217c7fa941756
3c2dfd90a94e6cf15ac3e305f2e55f3175b2d296
339079dea98a27f8dcecbbbce5e266e5770dc76541767cd93acf5be86b02b2ca

HTTP Headers

GET /hosted/images/6e/d12e738081456ba00d08421f2004ec/sunscreen-lotion-sun-shape.jpg HTTP/1.1
Host: go.healthyliving.news
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a
Cookie: __cf_bm=06SNOrEO60F0MjY2MXcWay_qrAbj.gEwH49MXZXh1UY-1685114325-0-AWf+qf+uYXF2Psdo1hh0osvKKpi6ctxplVI+8K/6mZkOrIQBo0L9yBO1PdrBARZXoKTtO/9V77pMLqzXO1Thnyz1D4GAUMZ+wrp9V8EftWsK
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 26 May 2023 15:18:47 GMT
content-type: image/jpeg
content-length: 21495
cf-ray: 7cd6fe1fce911bfe-OSL
cf-cache-status: HIT
accept-ranges: bytes
cache-control: max-age=31536000
etag: "86d9c4800adae3c8b0a217c7fa941756"
expires: Mon, 19 Jun 2023 15:18:47 GMT
last-modified: Thu, 22 Jul 2021 11:54:00 GMT
vary: Accept, Accept-Encoding
cf-bgj: imgq:85,h2pri
cf-polished: status=not_needed
server: cloudflare
X-Firefox-Spdy: h2

go.healthyliving.news/hosted/images/0c/49a4fc58e54d96b85985f54bb1d082/2-growth-Phases.jpg

104.16.15.194

200 OK

65 kB

URL GET HTTP/2
go.healthyliving.news/hosted/images/0c/49a4fc58e54d96b85985f54bb1d082/2-growth-Phases.jpg
IP
104.16.15.194:443
ASN
#13335 CLOUDFLARENET

Requested by
https://go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a
Certificate
IssuerCloudflare, Inc.
Subjectgo.healthyliving.news
Fingerprint13:13:61:C0:89:7F:8B:90:12:04:F7:B1:AC:C6:50:50:AB:4F:11:DE
ValidityFri, 12 Aug 2022 00:00:00 GMT - Sat, 12 Aug 2023 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 850x425, components 3\012- data
Size
65 kB (64973 bytes)
Hash
ba6ea7ac60f8531c5211e99cef9d63f0
e6ca476008262c002c1e5b20bf348fa7f38ae1ee
0f89d9629a16b0b0b79a972f2f3054a224bc7e3a58c1f2e681f73bcb94744326

HTTP Headers

GET /hosted/images/0c/49a4fc58e54d96b85985f54bb1d082/2-growth-Phases.jpg HTTP/1.1
Host: go.healthyliving.news
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a
Cookie: __cf_bm=06SNOrEO60F0MjY2MXcWay_qrAbj.gEwH49MXZXh1UY-1685114325-0-AWf+qf+uYXF2Psdo1hh0osvKKpi6ctxplVI+8K/6mZkOrIQBo0L9yBO1PdrBARZXoKTtO/9V77pMLqzXO1Thnyz1D4GAUMZ+wrp9V8EftWsK
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 26 May 2023 15:18:47 GMT
content-type: image/jpeg
content-length: 64973
cf-ray: 7cd6fe1fdeb81bfe-OSL
cf-cache-status: HIT
accept-ranges: bytes
cache-control: max-age=31536000
etag: "ba6ea7ac60f8531c5211e99cef9d63f0"
expires: Mon, 19 Jun 2023 15:18:47 GMT
last-modified: Thu, 22 Jul 2021 12:46:34 GMT
cf-bgj: imgq:85,h2pri
cf-polished: status=not_needed
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2

go.healthyliving.news/hosted/images/57/02fd767da94aaaa40ea97618534209/woman-skin.png

104.16.15.194

200 OK

28 kB

URL GET HTTP/2
go.healthyliving.news/hosted/images/57/02fd767da94aaaa40ea97618534209/woman-skin.png
IP
104.16.15.194:443
ASN
#13335 CLOUDFLARENET

Requested by
https://go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a
Certificate
IssuerCloudflare, Inc.
Subjectgo.healthyliving.news
Fingerprint13:13:61:C0:89:7F:8B:90:12:04:F7:B1:AC:C6:50:50:AB:4F:11:DE
ValidityFri, 12 Aug 2022 00:00:00 GMT - Sat, 12 Aug 2023 23:59:59 GMT

File type
PNG image data, 298 x 287, 8-bit/color RGBA, non-interlaced\012- data
Size
28 kB (28303 bytes)
Hash
654113391144507df0bca05a4574c00f
cba9def58e4c0c61ee341094e47a7032108124f2
24c2a9e2a1d26337f8af766b7744cc417d21a189de4307f05e114313739dcf05

HTTP Headers

GET /hosted/images/57/02fd767da94aaaa40ea97618534209/woman-skin.png HTTP/1.1
Host: go.healthyliving.news
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a
Cookie: __cf_bm=06SNOrEO60F0MjY2MXcWay_qrAbj.gEwH49MXZXh1UY-1685114325-0-AWf+qf+uYXF2Psdo1hh0osvKKpi6ctxplVI+8K/6mZkOrIQBo0L9yBO1PdrBARZXoKTtO/9V77pMLqzXO1Thnyz1D4GAUMZ+wrp9V8EftWsK
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 26 May 2023 15:18:47 GMT
content-type: image/png
content-length: 28303
cf-ray: 7cd6fe1fcea41bfe-OSL
cf-cache-status: HIT
accept-ranges: bytes
cache-control: max-age=31536000
etag: "0cf282c2c451a37c1dd3f886350e9a33"
expires: Mon, 19 Jun 2023 15:18:47 GMT
last-modified: Thu, 22 Jul 2021 12:13:29 GMT
vary: Accept, Accept-Encoding
cf-bgj: imgq:85,h2pri
cf-polished: origSize=28451
server: cloudflare
X-Firefox-Spdy: h2

go.healthyliving.news/hosted/images/6f/aa981f0ca4434b9539019f8e10586a/step-1.png

104.16.15.194

200 OK

1.0 kB

URL GET HTTP/2
go.healthyliving.news/hosted/images/6f/aa981f0ca4434b9539019f8e10586a/step-1.png
IP
104.16.15.194:443
ASN
#13335 CLOUDFLARENET

Requested by
https://go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a
Certificate
IssuerCloudflare, Inc.
Subjectgo.healthyliving.news
Fingerprint13:13:61:C0:89:7F:8B:90:12:04:F7:B1:AC:C6:50:50:AB:4F:11:DE
ValidityFri, 12 Aug 2022 00:00:00 GMT - Sat, 12 Aug 2023 23:59:59 GMT

File type
PNG image data, 180 x 58, 8-bit colormap, non-interlaced\012- data
Size
1.0 kB (1027 bytes)
Hash
4195ec619cae5361892937b000cdf01d
8279a77717c71ce9a7e941c143587c9ce369ffec
cc5cc0ccaba49d4593082f6068aad766c2ff755d2466352215f3d82e55fe403c

HTTP Headers

GET /hosted/images/6f/aa981f0ca4434b9539019f8e10586a/step-1.png HTTP/1.1
Host: go.healthyliving.news
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a
Cookie: __cf_bm=06SNOrEO60F0MjY2MXcWay_qrAbj.gEwH49MXZXh1UY-1685114325-0-AWf+qf+uYXF2Psdo1hh0osvKKpi6ctxplVI+8K/6mZkOrIQBo0L9yBO1PdrBARZXoKTtO/9V77pMLqzXO1Thnyz1D4GAUMZ+wrp9V8EftWsK
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 26 May 2023 15:18:47 GMT
content-type: image/png
content-length: 1027
cf-ray: 7cd6fe1fce9b1bfe-OSL
cf-cache-status: HIT
accept-ranges: bytes
cache-control: max-age=31536000
etag: "13a75d7b60330bef273cf94f145a7748"
expires: Mon, 19 Jun 2023 15:18:47 GMT
last-modified: Thu, 22 Jul 2021 12:07:12 GMT
vary: Accept, Accept-Encoding
cf-bgj: imgq:85,h2pri
cf-polished: origSize=1170
server: cloudflare
X-Firefox-Spdy: h2

go.healthyliving.news/hosted/images/4f/5490ec23ad4beca6ac9bb7d95a1da8/Astaxanthin.png

104.16.15.194

200 OK

97 kB

URL GET HTTP/2
go.healthyliving.news/hosted/images/4f/5490ec23ad4beca6ac9bb7d95a1da8/Astaxanthin.png
IP
104.16.15.194:443
ASN
#13335 CLOUDFLARENET

Requested by
https://go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a
Certificate
IssuerCloudflare, Inc.
Subjectgo.healthyliving.news
Fingerprint13:13:61:C0:89:7F:8B:90:12:04:F7:B1:AC:C6:50:50:AB:4F:11:DE
ValidityFri, 12 Aug 2022 00:00:00 GMT - Sat, 12 Aug 2023 23:59:59 GMT

File type
PNG image data, 278 x 318, 8-bit/color RGBA, non-interlaced\012- data
Size
97 kB (97401 bytes)
Hash
fa698744bf87cfbd6e5e85a1d189bb7f
5fa0da315247fbab4d3b7c1abd639635a3be15b0
ae87d30bc55b77ff4e546b3ea764422074f7d65ad3e538e3fd9983285598fc12

HTTP Headers

GET /hosted/images/4f/5490ec23ad4beca6ac9bb7d95a1da8/Astaxanthin.png HTTP/1.1
Host: go.healthyliving.news
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a
Cookie: __cf_bm=06SNOrEO60F0MjY2MXcWay_qrAbj.gEwH49MXZXh1UY-1685114325-0-AWf+qf+uYXF2Psdo1hh0osvKKpi6ctxplVI+8K/6mZkOrIQBo0L9yBO1PdrBARZXoKTtO/9V77pMLqzXO1Thnyz1D4GAUMZ+wrp9V8EftWsK
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 26 May 2023 15:18:47 GMT
content-type: image/png
content-length: 97401
cf-ray: 7cd6fe1fdeb41bfe-OSL
cf-cache-status: HIT
accept-ranges: bytes
cache-control: max-age=31536000
etag: "7529152a0efa555050eb1fb597c3f0bd"
expires: Mon, 19 Jun 2023 15:18:47 GMT
last-modified: Thu, 22 Jul 2021 12:33:55 GMT
vary: Accept, Accept-Encoding
cf-bgj: imgq:85,h2pri
cf-polished: origSize=97602
server: cloudflare
X-Firefox-Spdy: h2

go.healthyliving.news/hosted/images/69/9e64245e5a4fcdb0fbafeaa3e0ccf9/beautiful-young-woman-taking-pills-home.jpg

104.16.15.194

200 OK

13 kB

URL GET HTTP/2
go.healthyliving.news/hosted/images/69/9e64245e5a4fcdb0fbafeaa3e0ccf9/beautiful-young-woman-taking-pills-home.jpg
IP
104.16.15.194:443
ASN
#13335 CLOUDFLARENET

Requested by
https://go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a
Certificate
IssuerCloudflare, Inc.
Subjectgo.healthyliving.news
Fingerprint13:13:61:C0:89:7F:8B:90:12:04:F7:B1:AC:C6:50:50:AB:4F:11:DE
ValidityFri, 12 Aug 2022 00:00:00 GMT - Sat, 12 Aug 2023 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 339x362, components 3\012- data
Size
13 kB (13235 bytes)
Hash
33e1ee3911d60cd5a52cdcf9314865c7
9579b6358fbe2d8fb4a019d261c2adb481899f8c
70a8a3f6dc635a8f78cf5ec7f5c9b85fda6f6e3fdee8f1b3edd593d58c4ee04f

HTTP Headers

GET /hosted/images/69/9e64245e5a4fcdb0fbafeaa3e0ccf9/beautiful-young-woman-taking-pills-home.jpg HTTP/1.1
Host: go.healthyliving.news
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a
Cookie: __cf_bm=06SNOrEO60F0MjY2MXcWay_qrAbj.gEwH49MXZXh1UY-1685114325-0-AWf+qf+uYXF2Psdo1hh0osvKKpi6ctxplVI+8K/6mZkOrIQBo0L9yBO1PdrBARZXoKTtO/9V77pMLqzXO1Thnyz1D4GAUMZ+wrp9V8EftWsK
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 26 May 2023 15:18:47 GMT
content-type: image/jpeg
content-length: 13235
cf-ray: 7cd6fe1fce9e1bfe-OSL
cf-cache-status: HIT
accept-ranges: bytes
cache-control: max-age=31536000
etag: "6e88e1e41960d20c29051e1739370290"
expires: Mon, 19 Jun 2023 15:18:47 GMT
last-modified: Thu, 22 Jul 2021 12:10:40 GMT
vary: Accept, Accept-Encoding
cf-bgj: imgq:85,h2pri
cf-polished: origSize=13253
server: cloudflare
X-Firefox-Spdy: h2

go.healthyliving.news/hosted/images/23/f0b75d7d9d430ab76e55c28f10725b/image-11-.jpg

104.16.15.194

200 OK

81 kB

URL GET HTTP/2
go.healthyliving.news/hosted/images/23/f0b75d7d9d430ab76e55c28f10725b/image-11-.jpg
IP
104.16.15.194:443
ASN
#13335 CLOUDFLARENET

Requested by
https://go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a
Certificate
IssuerCloudflare, Inc.
Subjectgo.healthyliving.news
Fingerprint13:13:61:C0:89:7F:8B:90:12:04:F7:B1:AC:C6:50:50:AB:4F:11:DE
ValidityFri, 12 Aug 2022 00:00:00 GMT - Sat, 12 Aug 2023 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=2, orientation=upper-left], progressive, precision 8, 1024x1024, components 3\012- data
Size
81 kB (80707 bytes)
Hash
cc4413556cca3a668a4870e1540bf38f
acde7c14faaacc5358a1404e843b1d5d24706036
7e189406c36869d71bcf25cffda1c39a53ac4323585ea46113e68a0adea5a082

HTTP Headers

GET /hosted/images/23/f0b75d7d9d430ab76e55c28f10725b/image-11-.jpg HTTP/1.1
Host: go.healthyliving.news
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a
Cookie: __cf_bm=06SNOrEO60F0MjY2MXcWay_qrAbj.gEwH49MXZXh1UY-1685114325-0-AWf+qf+uYXF2Psdo1hh0osvKKpi6ctxplVI+8K/6mZkOrIQBo0L9yBO1PdrBARZXoKTtO/9V77pMLqzXO1Thnyz1D4GAUMZ+wrp9V8EftWsK
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 26 May 2023 15:18:47 GMT
content-type: image/jpeg
content-length: 80707
cf-ray: 7cd6fe1feeda1bfe-OSL
cf-cache-status: HIT
accept-ranges: bytes
cache-control: max-age=31536000
etag: "cc4413556cca3a668a4870e1540bf38f"
expires: Mon, 19 Jun 2023 15:18:47 GMT
last-modified: Mon, 26 Jul 2021 16:44:31 GMT
vary: Accept, Accept-Encoding
cf-bgj: imgq:85,h2pri
cf-polished: status=not_needed
server: cloudflare
X-Firefox-Spdy: h2

go.healthyliving.news/hosted/images/bb/9d3dc1d8994c11a87fc145564eaf3e/image-nancy.jpg

104.16.15.194

200 OK

76 kB

URL GET HTTP/2
go.healthyliving.news/hosted/images/bb/9d3dc1d8994c11a87fc145564eaf3e/image-nancy.jpg
IP
104.16.15.194:443
ASN
#13335 CLOUDFLARENET

Requested by
https://go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a
Certificate
IssuerCloudflare, Inc.
Subjectgo.healthyliving.news
Fingerprint13:13:61:C0:89:7F:8B:90:12:04:F7:B1:AC:C6:50:50:AB:4F:11:DE
ValidityFri, 12 Aug 2022 00:00:00 GMT - Sat, 12 Aug 2023 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=2, orientation=upper-left], progressive, precision 8, 1024x1024, components 3\012- data
Size
76 kB (75792 bytes)
Hash
d5ff01a8f9dc5393dad7a7319791af34
daa8d52eb4599b6dadff9a6e1d3af472d4390ba6
b3743497922d24a48fe509ad4f232ccb6611baf699387ff14ee7e42c4b03f7a1

HTTP Headers

GET /hosted/images/bb/9d3dc1d8994c11a87fc145564eaf3e/image-nancy.jpg HTTP/1.1
Host: go.healthyliving.news
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a
Cookie: __cf_bm=06SNOrEO60F0MjY2MXcWay_qrAbj.gEwH49MXZXh1UY-1685114325-0-AWf+qf+uYXF2Psdo1hh0osvKKpi6ctxplVI+8K/6mZkOrIQBo0L9yBO1PdrBARZXoKTtO/9V77pMLqzXO1Thnyz1D4GAUMZ+wrp9V8EftWsK
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 26 May 2023 15:18:47 GMT
content-type: image/jpeg
content-length: 75792
cf-ray: 7cd6fe1feed21bfe-OSL
cf-cache-status: HIT
accept-ranges: bytes
cache-control: max-age=31536000
etag: "d5ff01a8f9dc5393dad7a7319791af34"
expires: Mon, 19 Jun 2023 15:18:47 GMT
last-modified: Mon, 26 Jul 2021 16:31:02 GMT
vary: Accept, Accept-Encoding
cf-bgj: imgq:85,h2pri
cf-polished: status=not_needed
server: cloudflare
X-Firefox-Spdy: h2

go.healthyliving.news/hosted/images/82/be49ccbf144ee7ba298ca034f80bff/Screen-Shot-2021-07-26-at-10.10.16-AM.png

104.16.15.194

200 OK

120 kB

URL GET HTTP/2
go.healthyliving.news/hosted/images/82/be49ccbf144ee7ba298ca034f80bff/Screen-Shot-2021-07-26-at-10.10.16-AM.png
IP
104.16.15.194:443
ASN
#13335 CLOUDFLARENET

Requested by
https://go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a
Certificate
IssuerCloudflare, Inc.
Subjectgo.healthyliving.news
Fingerprint13:13:61:C0:89:7F:8B:90:12:04:F7:B1:AC:C6:50:50:AB:4F:11:DE
ValidityFri, 12 Aug 2022 00:00:00 GMT - Sat, 12 Aug 2023 23:59:59 GMT

File type
PNG image data, 299 x 362, 8-bit/color RGB, non-interlaced\012- data
Size
120 kB (119627 bytes)
Hash
a52a7557d3b6934107efa25353e9037e
4971608d5c851968b3ac527ac4ed37ccb31b814a
156d2e89621dea359054a6e7bb0492702bf41dc450d84fcbd35581f2abdbcd2f

HTTP Headers

GET /hosted/images/82/be49ccbf144ee7ba298ca034f80bff/Screen-Shot-2021-07-26-at-10.10.16-AM.png HTTP/1.1
Host: go.healthyliving.news
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a
Cookie: __cf_bm=06SNOrEO60F0MjY2MXcWay_qrAbj.gEwH49MXZXh1UY-1685114325-0-AWf+qf+uYXF2Psdo1hh0osvKKpi6ctxplVI+8K/6mZkOrIQBo0L9yBO1PdrBARZXoKTtO/9V77pMLqzXO1Thnyz1D4GAUMZ+wrp9V8EftWsK
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 26 May 2023 15:18:47 GMT
content-type: image/png
content-length: 119627
cf-ray: 7cd6fe1feed61bfe-OSL
cf-cache-status: HIT
accept-ranges: bytes
cache-control: max-age=31536000
etag: "9e027577296b26ae85d7796722e6c35f"
expires: Mon, 19 Jun 2023 15:18:47 GMT
last-modified: Mon, 26 Jul 2021 16:10:31 GMT
vary: Accept, Accept-Encoding
cf-bgj: imgq:85,h2pri
cf-polished: origSize=123446
server: cloudflare
X-Firefox-Spdy: h2

go.healthyliving.news/hosted/images/2f/f422d103834ddb90966240e02f44a6/Info-SUN-DAMAGE-box-e1430824238871.jpg

104.16.15.194

200 OK

34 kB

URL GET HTTP/2
go.healthyliving.news/hosted/images/2f/f422d103834ddb90966240e02f44a6/Info-SUN-DAMAGE-box-e1430824238871.jpg
IP
104.16.15.194:443
ASN
#13335 CLOUDFLARENET

Requested by
https://go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a
Certificate
IssuerCloudflare, Inc.
Subjectgo.healthyliving.news
Fingerprint13:13:61:C0:89:7F:8B:90:12:04:F7:B1:AC:C6:50:50:AB:4F:11:DE
ValidityFri, 12 Aug 2022 00:00:00 GMT - Sat, 12 Aug 2023 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 500x500, components 3\012- data
Size
34 kB (34065 bytes)
Hash
e72904a1438ea73f132e3851b29c8ade
d5522dea7c2ec0b5727532f16ebb3c4981e0417c
b9624b0fd269b3efef20b15fe3f81d9088b31ed6d2870ccad00ced96ab9fc70d

HTTP Headers

GET /hosted/images/2f/f422d103834ddb90966240e02f44a6/Info-SUN-DAMAGE-box-e1430824238871.jpg HTTP/1.1
Host: go.healthyliving.news
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a
Cookie: __cf_bm=06SNOrEO60F0MjY2MXcWay_qrAbj.gEwH49MXZXh1UY-1685114325-0-AWf+qf+uYXF2Psdo1hh0osvKKpi6ctxplVI+8K/6mZkOrIQBo0L9yBO1PdrBARZXoKTtO/9V77pMLqzXO1Thnyz1D4GAUMZ+wrp9V8EftWsK
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 26 May 2023 15:18:47 GMT
content-type: image/jpeg
content-length: 34065
cf-ray: 7cd6fe1f7e2a1bfe-OSL
cf-cache-status: HIT
accept-ranges: bytes
cache-control: max-age=31536000
etag: "bb8ebbf175234827e3600b61a03bcad2"
expires: Mon, 19 Jun 2023 15:18:47 GMT
last-modified: Wed, 28 Jul 2021 14:38:44 GMT
vary: Accept, Accept-Encoding
cf-bgj: imgq:85,h2pri
cf-polished: degrade=85, origSize=71936
server: cloudflare
X-Firefox-Spdy: h2

use.fontawesome.com/releases/v5.9.0/css/all.css

104.21.62.252

200 OK

13 kB

URL GET HTTP/2
use.fontawesome.com/releases/v5.9.0/css/all.css
IP
104.21.62.252:443
ASN
#13335 CLOUDFLARENET

Requested by
https://go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a
Certificate
IssuerGoogle Trust Services LLC
Subjectuse.fontawesome.com
FingerprintC8:38:F5:E2:7C:CE:53:71:EB:92:1D:71:F5:78:FE:7C:C4:4D:65:BC
ValiditySat, 06 May 2023 03:15:52 GMT - Fri, 04 Aug 2023 03:15:51 GMT

File type
ASCII text, with very long lines (55782)
Size
13 kB (12668 bytes)
Hash
dbf9d822cefe851ba6f66e1ad57e8987
2c43148f7df780e8b40a3ab09c770f03adbf11af
533143d96607d94d5d4292838e364aef656d3de58fe74368263776eab9c07542

HTTP Headers

GET /releases/v5.9.0/css/all.css HTTP/1.1
Host: use.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://go.healthyliving.news/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 26 May 2023 15:18:46 GMT
content-type: text/css
x-amz-id-2: HmYMkCLa+JJBhyNoebD5nAxmcydDUSGmpTv6C6h5xR8+FcbIcViXrg2tAAUpKqeJ52gF7aThQFY=
x-amz-request-id: 49NMYQC4KFC6GG5T
last-modified: Wed, 30 Jun 2021 15:48:06 GMT
etag: W/"dbf9d822cefe851ba6f66e1ad57e8987"
cache-control: max-age=31556926
cf-cache-status: HIT
age: 940565
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=C5DcL%2FeLCq5Fn744W2DT9y7XI2MODX%2FsW335QAHgv5jqqED5G6Ud6ABtaFS9BwStJgUNJYuAmX60QjipX6cTPSG0J67%2B%2BlSyeF%2FRme%2BeHxGVe9tgJLQk2qoZDF6h%2FiB8F8qpYL4A"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7cd6fe1f7c061c06-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

go.healthyliving.news/hosted/images/38/8fc092527343ac8438fbada54028ca/quote.png

104.16.15.194

200 OK

1.4 kB

URL GET HTTP/2
go.healthyliving.news/hosted/images/38/8fc092527343ac8438fbada54028ca/quote.png
IP
104.16.15.194:443
ASN
#13335 CLOUDFLARENET

Requested by
https://go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a
Certificate
IssuerCloudflare, Inc.
Subjectgo.healthyliving.news
Fingerprint13:13:61:C0:89:7F:8B:90:12:04:F7:B1:AC:C6:50:50:AB:4F:11:DE
ValidityFri, 12 Aug 2022 00:00:00 GMT - Sat, 12 Aug 2023 23:59:59 GMT

File type
PNG image data, 57 x 48, 8-bit colormap, non-interlaced\012- data
Size
1.4 kB (1383 bytes)
Hash
2f12ca6bd286c209799b5b21502411c9
be7a9e07c5783b21b3bbe466f6182f80d313a97b
73c928f8ee4c551fae9ed8d4386612593b161f3d839f6fc7db8c37435493023d

HTTP Headers

GET /hosted/images/38/8fc092527343ac8438fbada54028ca/quote.png HTTP/1.1
Host: go.healthyliving.news
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a
Cookie: __cf_bm=06SNOrEO60F0MjY2MXcWay_qrAbj.gEwH49MXZXh1UY-1685114325-0-AWf+qf+uYXF2Psdo1hh0osvKKpi6ctxplVI+8K/6mZkOrIQBo0L9yBO1PdrBARZXoKTtO/9V77pMLqzXO1Thnyz1D4GAUMZ+wrp9V8EftWsK
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 26 May 2023 15:18:47 GMT
content-type: image/png
content-length: 1383
cf-ray: 7cd6fe1feec31bfe-OSL
cf-cache-status: HIT
accept-ranges: bytes
cache-control: max-age=31536000
etag: "90f2de5a1d0ebd93a6c67ebc5346f1ba"
expires: Mon, 19 Jun 2023 15:18:47 GMT
last-modified: Sat, 24 Jul 2021 12:11:13 GMT
vary: Accept, Accept-Encoding
cf-bgj: imgq:85,h2pri
cf-polished: origSize=1696
server: cloudflare
X-Firefox-Spdy: h2

go.healthyliving.news/hosted/images/36/7f8f1dcef14ca78cce8b34da863cd4/Kriss-Berg-CN1-CPT.png

104.16.15.194

200 OK

11 kB

URL GET HTTP/2
go.healthyliving.news/hosted/images/36/7f8f1dcef14ca78cce8b34da863cd4/Kriss-Berg-CN1-CPT.png
IP
104.16.15.194:443
ASN
#13335 CLOUDFLARENET

Requested by
https://go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a
Certificate
IssuerCloudflare, Inc.
Subjectgo.healthyliving.news
Fingerprint13:13:61:C0:89:7F:8B:90:12:04:F7:B1:AC:C6:50:50:AB:4F:11:DE
ValidityFri, 12 Aug 2022 00:00:00 GMT - Sat, 12 Aug 2023 23:59:59 GMT

File type
PNG image data, 94 x 94, 8-bit/color RGBA, non-interlaced\012- data
Size
11 kB (11359 bytes)
Hash
f23751bcdfae8254eb7bb9f4aa681e24
9121de0b0329daa6cca48418920cdbe3b1ee5d35
6746914aed240e31b49874256eddb7b821c96d4308fbc6d18261a03bb4a1ac50

HTTP Headers

GET /hosted/images/36/7f8f1dcef14ca78cce8b34da863cd4/Kriss-Berg-CN1-CPT.png HTTP/1.1
Host: go.healthyliving.news
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a
Cookie: __cf_bm=06SNOrEO60F0MjY2MXcWay_qrAbj.gEwH49MXZXh1UY-1685114325-0-AWf+qf+uYXF2Psdo1hh0osvKKpi6ctxplVI+8K/6mZkOrIQBo0L9yBO1PdrBARZXoKTtO/9V77pMLqzXO1Thnyz1D4GAUMZ+wrp9V8EftWsK
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 26 May 2023 15:18:47 GMT
content-type: image/png
content-length: 11359
cf-ray: 7cd6fe1ffee51bfe-OSL
cf-cache-status: HIT
accept-ranges: bytes
cache-control: max-age=31536000
etag: "7f53aec3e3e0bd5d5b85af49934ed1fc"
expires: Mon, 19 Jun 2023 15:18:47 GMT
last-modified: Thu, 22 Jul 2021 13:23:33 GMT
vary: Accept, Accept-Encoding
cf-bgj: imgq:85,h2pri
cf-polished: origSize=11507
server: cloudflare
X-Firefox-Spdy: h2

go.healthyliving.news/hosted/images/69/5c078ee9de4331a5f8327d9c3676a8/Skype_Picture_2021_07_07T13_17_05_536Z.jpg

104.16.15.194

200 OK

236 kB

URL GET HTTP/2
go.healthyliving.news/hosted/images/69/5c078ee9de4331a5f8327d9c3676a8/Skype_Picture_2021_07_07T13_17_05_536Z.jpg
IP
104.16.15.194:443
ASN
#13335 CLOUDFLARENET

Requested by
https://go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a
Certificate
IssuerCloudflare, Inc.
Subjectgo.healthyliving.news
Fingerprint13:13:61:C0:89:7F:8B:90:12:04:F7:B1:AC:C6:50:50:AB:4F:11:DE
ValidityFri, 12 Aug 2022 00:00:00 GMT - Sat, 12 Aug 2023 23:59:59 GMT

File type
JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], progressive, precision 8, 1743x2320, components 3\012- data
Size
236 kB (236420 bytes)
Hash
423a8a96aec31583f82686af29f42c64
3e95d4cb689f86652292cd2bbb55d58326590100
5f019b031af14cc7d723a023c6656a5f76813a846ffa249965eba86bb3f5304d

HTTP Headers

GET /hosted/images/69/5c078ee9de4331a5f8327d9c3676a8/Skype_Picture_2021_07_07T13_17_05_536Z.jpg HTTP/1.1
Host: go.healthyliving.news
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a
Cookie: __cf_bm=06SNOrEO60F0MjY2MXcWay_qrAbj.gEwH49MXZXh1UY-1685114325-0-AWf+qf+uYXF2Psdo1hh0osvKKpi6ctxplVI+8K/6mZkOrIQBo0L9yBO1PdrBARZXoKTtO/9V77pMLqzXO1Thnyz1D4GAUMZ+wrp9V8EftWsK
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 26 May 2023 15:18:47 GMT
content-type: image/jpeg
content-length: 236420
cf-ray: 7cd6fe1feecd1bfe-OSL
cf-cache-status: HIT
accept-ranges: bytes
cache-control: max-age=31536000
etag: "ba8d300acaae27579f80dc425b2700eb"
expires: Mon, 19 Jun 2023 15:18:47 GMT
last-modified: Mon, 26 Jul 2021 15:56:49 GMT
vary: Accept, Accept-Encoding
cf-bgj: imgq:85,h2pri
cf-polished: origSize=238564
server: cloudflare
X-Firefox-Spdy: h2

go.healthyliving.news/hosted/images/77/619a2fe2cc40e6a5828203c66edfeb/woman-smiling.jpg

104.16.15.194

200 OK

9.1 kB

URL GET HTTP/2
go.healthyliving.news/hosted/images/77/619a2fe2cc40e6a5828203c66edfeb/woman-smiling.jpg
IP
104.16.15.194:443
ASN
#13335 CLOUDFLARENET

Requested by
https://go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a
Certificate
IssuerCloudflare, Inc.
Subjectgo.healthyliving.news
Fingerprint13:13:61:C0:89:7F:8B:90:12:04:F7:B1:AC:C6:50:50:AB:4F:11:DE
ValidityFri, 12 Aug 2022 00:00:00 GMT - Sat, 12 Aug 2023 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 360x265, components 3\012- data
Size
9.1 kB (9145 bytes)
Hash
f8c86e79297c7dbc2a5d29eaea22085d
16daff767d8c24bd8034f4afe47b540ab8c96bd0
7dd7d966a08dc06cf29d952876fd4a285cb93098250b480899e5c0a0d80b379e

HTTP Headers

GET /hosted/images/77/619a2fe2cc40e6a5828203c66edfeb/woman-smiling.jpg HTTP/1.1
Host: go.healthyliving.news
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a
Cookie: __cf_bm=06SNOrEO60F0MjY2MXcWay_qrAbj.gEwH49MXZXh1UY-1685114325-0-AWf+qf+uYXF2Psdo1hh0osvKKpi6ctxplVI+8K/6mZkOrIQBo0L9yBO1PdrBARZXoKTtO/9V77pMLqzXO1Thnyz1D4GAUMZ+wrp9V8EftWsK
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 26 May 2023 15:18:47 GMT
content-type: image/jpeg
content-length: 9145
cf-ray: 7cd6fe1fce961bfe-OSL
cf-cache-status: HIT
accept-ranges: bytes
cache-control: max-age=31536000
etag: "f8c86e79297c7dbc2a5d29eaea22085d"
expires: Mon, 19 Jun 2023 15:18:47 GMT
last-modified: Thu, 22 Jul 2021 11:59:36 GMT
vary: Accept, Accept-Encoding
cf-bgj: imgq:85,h2pri
cf-polished: status=not_needed
server: cloudflare
X-Firefox-Spdy: h2

go.healthyliving.news/hosted/images/81/b4753fbfe64f72b5b672b62c9e59c4/relaxed-tanned-woman-enjoy-sunbathing.jpg

104.16.15.194

200 OK

18 kB

URL GET HTTP/2
go.healthyliving.news/hosted/images/81/b4753fbfe64f72b5b672b62c9e59c4/relaxed-tanned-woman-enjoy-sunbathing.jpg
IP
104.16.15.194:443
ASN
#13335 CLOUDFLARENET

Requested by
https://go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a
Certificate
IssuerCloudflare, Inc.
Subjectgo.healthyliving.news
Fingerprint13:13:61:C0:89:7F:8B:90:12:04:F7:B1:AC:C6:50:50:AB:4F:11:DE
ValidityFri, 12 Aug 2022 00:00:00 GMT - Sat, 12 Aug 2023 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 382x387, components 3\012- data
Size
18 kB (18239 bytes)
Hash
7bb477a417eb727585ef18689624feab
1f9f2b84d4070b29cb2d525c41a1aa1a1ff21834
a47047e829137d6ec6c0efd24d31731984d9ef161cf557bd5b39eb5b8aff8bec

HTTP Headers

GET /hosted/images/81/b4753fbfe64f72b5b672b62c9e59c4/relaxed-tanned-woman-enjoy-sunbathing.jpg HTTP/1.1
Host: go.healthyliving.news
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a
Cookie: __cf_bm=06SNOrEO60F0MjY2MXcWay_qrAbj.gEwH49MXZXh1UY-1685114325-0-AWf+qf+uYXF2Psdo1hh0osvKKpi6ctxplVI+8K/6mZkOrIQBo0L9yBO1PdrBARZXoKTtO/9V77pMLqzXO1Thnyz1D4GAUMZ+wrp9V8EftWsK
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 26 May 2023 15:18:47 GMT
content-type: image/jpeg
content-length: 18239
cf-ray: 7cd6fe1fcea51bfe-OSL
cf-cache-status: HIT
accept-ranges: bytes
cache-control: max-age=31536000
etag: "7bb477a417eb727585ef18689624feab"
expires: Mon, 19 Jun 2023 15:18:47 GMT
last-modified: Thu, 22 Jul 2021 12:17:08 GMT
vary: Accept, Accept-Encoding
cf-bgj: imgq:85,h2pri
cf-polished: status=not_needed
server: cloudflare
X-Firefox-Spdy: h2

go.healthyliving.news/hosted/images/0d/5cb0e392844318bd151b897111677f/image-9-.jpg

104.16.15.194

200 OK

21 kB

URL GET HTTP/2
go.healthyliving.news/hosted/images/0d/5cb0e392844318bd151b897111677f/image-9-.jpg
IP
104.16.15.194:443
ASN
#13335 CLOUDFLARENET

Requested by
https://go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a
Certificate
IssuerCloudflare, Inc.
Subjectgo.healthyliving.news
Fingerprint13:13:61:C0:89:7F:8B:90:12:04:F7:B1:AC:C6:50:50:AB:4F:11:DE
ValidityFri, 12 Aug 2022 00:00:00 GMT - Sat, 12 Aug 2023 23:59:59 GMT

File type
JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], progressive, precision 8, 500x500, components 3\012- data
Size
21 kB (20592 bytes)
Hash
94829acb7caffcb69a74c4a21baf1724
4578a2fa29ac2fdbf9e16df3fb8826d1ca7eed9f
40af04229a70b85ab99aa8e88644602425cee7ae829e73546f1e975a3a060c33

HTTP Headers

GET /hosted/images/0d/5cb0e392844318bd151b897111677f/image-9-.jpg HTTP/1.1
Host: go.healthyliving.news
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a
Cookie: __cf_bm=06SNOrEO60F0MjY2MXcWay_qrAbj.gEwH49MXZXh1UY-1685114325-0-AWf+qf+uYXF2Psdo1hh0osvKKpi6ctxplVI+8K/6mZkOrIQBo0L9yBO1PdrBARZXoKTtO/9V77pMLqzXO1Thnyz1D4GAUMZ+wrp9V8EftWsK
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 26 May 2023 15:18:47 GMT
content-type: image/jpeg
content-length: 20592
cf-ray: 7cd6fe1feece1bfe-OSL
cf-cache-status: HIT
accept-ranges: bytes
cache-control: max-age=31536000
etag: "299a7de130149a4a62aa5deea5682771"
expires: Mon, 19 Jun 2023 15:18:47 GMT
last-modified: Mon, 26 Jul 2021 16:37:39 GMT
vary: Accept, Accept-Encoding
cf-bgj: imgq:85,h2pri
cf-polished: origSize=20661
server: cloudflare
X-Firefox-Spdy: h2

go.healthyliving.news/hosted/images/60/582a2cd3d04893aac99ca90568f84f/money-back-gurantee.png

104.16.15.194

200 OK

55 kB

URL GET HTTP/2
go.healthyliving.news/hosted/images/60/582a2cd3d04893aac99ca90568f84f/money-back-gurantee.png
IP
104.16.15.194:443
ASN
#13335 CLOUDFLARENET

Requested by
https://go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a
Certificate
IssuerCloudflare, Inc.
Subjectgo.healthyliving.news
Fingerprint13:13:61:C0:89:7F:8B:90:12:04:F7:B1:AC:C6:50:50:AB:4F:11:DE
ValidityFri, 12 Aug 2022 00:00:00 GMT - Sat, 12 Aug 2023 23:59:59 GMT

File type
PNG image data, 238 x 240, 8-bit/color RGBA, non-interlaced\012- data
Size
55 kB (55302 bytes)
Hash
776354b1e4660cbb6383fc377e0578ce
d74264ab164a8df3f46776089981d044f0432817
af784be4d0fd32162ecc9d9a904a0934162a593d77eed786b9cc7554c8a07a18

HTTP Headers

GET /hosted/images/60/582a2cd3d04893aac99ca90568f84f/money-back-gurantee.png HTTP/1.1
Host: go.healthyliving.news
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a
Cookie: __cf_bm=06SNOrEO60F0MjY2MXcWay_qrAbj.gEwH49MXZXh1UY-1685114325-0-AWf+qf+uYXF2Psdo1hh0osvKKpi6ctxplVI+8K/6mZkOrIQBo0L9yBO1PdrBARZXoKTtO/9V77pMLqzXO1Thnyz1D4GAUMZ+wrp9V8EftWsK
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 26 May 2023 15:18:47 GMT
content-type: image/png
content-length: 55302
cf-ray: 7cd6fe1ffee01bfe-OSL
cf-cache-status: HIT
accept-ranges: bytes
cache-control: max-age=31536000
etag: "6922872a68da7904d94e333b58f0d743"
expires: Mon, 19 Jun 2023 15:18:47 GMT
last-modified: Thu, 22 Jul 2021 12:57:40 GMT
vary: Accept, Accept-Encoding
cf-bgj: imgq:85,h2pri
cf-polished: origSize=55654
server: cloudflare
X-Firefox-Spdy: h2

go.healthyliving.news/hosted/images/0d/a2529881904df7af8e9f81021cceb9/Screen-Shot-2021-07-26-at-2.10.24-PM.png

104.16.15.194

200 OK

568 kB

URL GET HTTP/2
go.healthyliving.news/hosted/images/0d/a2529881904df7af8e9f81021cceb9/Screen-Shot-2021-07-26-at-2.10.24-PM.png
IP
104.16.15.194:443
ASN
#13335 CLOUDFLARENET

Requested by
https://go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a
Certificate
IssuerCloudflare, Inc.
Subjectgo.healthyliving.news
Fingerprint13:13:61:C0:89:7F:8B:90:12:04:F7:B1:AC:C6:50:50:AB:4F:11:DE
ValidityFri, 12 Aug 2022 00:00:00 GMT - Sat, 12 Aug 2023 23:59:59 GMT

File type
PNG image data, 688 x 660, 8-bit/color RGB, non-interlaced\012- data
Size
568 kB (568033 bytes)
Hash
c8d5575a5acf867d77c8eac079fb2102
2e51dcd742ed90664d46123f568bf31bf883bd1e
032b26447866e6e3bfcfb16a6795b8eff7d9f00219f2446ed60eb1c04adda6c3

HTTP Headers

GET /hosted/images/0d/a2529881904df7af8e9f81021cceb9/Screen-Shot-2021-07-26-at-2.10.24-PM.png HTTP/1.1
Host: go.healthyliving.news
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a
Cookie: __cf_bm=06SNOrEO60F0MjY2MXcWay_qrAbj.gEwH49MXZXh1UY-1685114325-0-AWf+qf+uYXF2Psdo1hh0osvKKpi6ctxplVI+8K/6mZkOrIQBo0L9yBO1PdrBARZXoKTtO/9V77pMLqzXO1Thnyz1D4GAUMZ+wrp9V8EftWsK
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 26 May 2023 15:18:47 GMT
content-type: image/png
content-length: 568033
cf-ray: 7cd6fe1ffee31bfe-OSL
cf-cache-status: HIT
accept-ranges: bytes
cache-control: max-age=31536000
etag: "678b146a302b550140d4cc785636c54a"
expires: Mon, 19 Jun 2023 15:18:47 GMT
last-modified: Mon, 26 Jul 2021 20:11:13 GMT
vary: Accept, Accept-Encoding
cf-bgj: imgq:85,h2pri
cf-polished: origSize=571872
server: cloudflare
X-Firefox-Spdy: h2

go.healthyliving.news/hosted/images/66/5d37125de646ee985343fa5d4e993c/young-group-friend-enjoy.jpg

104.16.15.194

200 OK

31 kB

URL GET HTTP/2
go.healthyliving.news/hosted/images/66/5d37125de646ee985343fa5d4e993c/young-group-friend-enjoy.jpg
IP
104.16.15.194:443
ASN
#13335 CLOUDFLARENET

Requested by
https://go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a
Certificate
IssuerCloudflare, Inc.
Subjectgo.healthyliving.news
Fingerprint13:13:61:C0:89:7F:8B:90:12:04:F7:B1:AC:C6:50:50:AB:4F:11:DE
ValidityFri, 12 Aug 2022 00:00:00 GMT - Sat, 12 Aug 2023 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 425x458, components 3\012- data
Size
31 kB (31231 bytes)
Hash
632fb567297db1a6935db3c65227232e
260a66e8b54e42eb397ab33c9695f7384dedb288
3318713fe40d3b2afced04a60b6bbab220086c8a4c15cb488c07e1ba8620e749

HTTP Headers

GET /hosted/images/66/5d37125de646ee985343fa5d4e993c/young-group-friend-enjoy.jpg HTTP/1.1
Host: go.healthyliving.news
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a
Cookie: __cf_bm=06SNOrEO60F0MjY2MXcWay_qrAbj.gEwH49MXZXh1UY-1685114325-0-AWf+qf+uYXF2Psdo1hh0osvKKpi6ctxplVI+8K/6mZkOrIQBo0L9yBO1PdrBARZXoKTtO/9V77pMLqzXO1Thnyz1D4GAUMZ+wrp9V8EftWsK
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 26 May 2023 15:18:47 GMT
content-type: image/jpeg
content-length: 31231
cf-ray: 7cd6fe1feebf1bfe-OSL
cf-cache-status: HIT
accept-ranges: bytes
cache-control: max-age=31536000
etag: "632fb567297db1a6935db3c65227232e"
expires: Mon, 19 Jun 2023 15:18:47 GMT
last-modified: Thu, 22 Jul 2021 12:56:12 GMT
cf-bgj: imgq:85,h2pri
cf-polished: status=not_needed
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2

go.healthyliving.news/hosted/images/59/b7699193694319ac997c0fe3eaf61d/Pure-Xanthin.png

104.16.15.194

200 OK

463 kB

URL GET HTTP/2
go.healthyliving.news/hosted/images/59/b7699193694319ac997c0fe3eaf61d/Pure-Xanthin.png
IP
104.16.15.194:443
ASN
#13335 CLOUDFLARENET

Requested by
https://go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a
Certificate
IssuerCloudflare, Inc.
Subjectgo.healthyliving.news
Fingerprint13:13:61:C0:89:7F:8B:90:12:04:F7:B1:AC:C6:50:50:AB:4F:11:DE
ValidityFri, 12 Aug 2022 00:00:00 GMT - Sat, 12 Aug 2023 23:59:59 GMT

File type
PNG image data, 955 x 783, 8-bit/color RGBA, non-interlaced\012- data
Size
463 kB (462872 bytes)
Hash
1e147971d8539e845be60c934c31693e
3757fb5527ba3accd330f30989ce773d0e9e6f45
17ccce328293d1cf3f27982ab7c551877637ac7f0b0790d8dec87189e37cc7b2

HTTP Headers

GET /hosted/images/59/b7699193694319ac997c0fe3eaf61d/Pure-Xanthin.png HTTP/1.1
Host: go.healthyliving.news
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a
Cookie: __cf_bm=06SNOrEO60F0MjY2MXcWay_qrAbj.gEwH49MXZXh1UY-1685114325-0-AWf+qf+uYXF2Psdo1hh0osvKKpi6ctxplVI+8K/6mZkOrIQBo0L9yBO1PdrBARZXoKTtO/9V77pMLqzXO1Thnyz1D4GAUMZ+wrp9V8EftWsK
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 26 May 2023 15:18:47 GMT
content-type: image/png
content-length: 462872
cf-ray: 7cd6fe1fdeb11bfe-OSL
cf-cache-status: HIT
accept-ranges: bytes
cache-control: max-age=31536000
etag: "8c9259da4e54b20172977369fff733c3"
expires: Mon, 19 Jun 2023 15:18:47 GMT
last-modified: Thu, 22 Jul 2021 12:31:34 GMT
vary: Accept, Accept-Encoding
cf-bgj: imgq:85,h2pri
cf-polished: origSize=463639
server: cloudflare
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.131

472 B

URL
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
eabef916764564262ad985fd27284a97
42a72e12642fe4249aa5bd8e1cc9e9db07fd7943
ffa5c8a67b8ebba1ce4e464bc7e831e998c830a78d78880f09702afae02a9d70

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 26 May 2023 15:18:47 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

go.healthyliving.news/assets/lander.css

104.16.15.194

200 OK

72 kB

URL GET HTTP/2
go.healthyliving.news/assets/lander.css
IP
104.16.15.194:443
ASN
#13335 CLOUDFLARENET

Requested by
https://go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a
Certificate
IssuerCloudflare, Inc.
Subjectgo.healthyliving.news
Fingerprint13:13:61:C0:89:7F:8B:90:12:04:F7:B1:AC:C6:50:50:AB:4F:11:DE
ValidityFri, 12 Aug 2022 00:00:00 GMT - Sat, 12 Aug 2023 23:59:59 GMT

File type
Unicode text, UTF-8 (with BOM) text, with very long lines (53232)
Size
72 kB (71920 bytes)
Hash
60a4cb9c7d7e94f695f31defa89b384c
bcaf4533715a996352d07af762f7dcf0ca20887b
7a2edfae1280389df27ba6e52866d270dff43ac83fc03564ccea175d20ad200c

HTTP Headers

GET /assets/lander.css HTTP/1.1
Host: go.healthyliving.news
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a
Cookie: __cf_bm=06SNOrEO60F0MjY2MXcWay_qrAbj.gEwH49MXZXh1UY-1685114325-0-AWf+qf+uYXF2Psdo1hh0osvKKpi6ctxplVI+8K/6mZkOrIQBo0L9yBO1PdrBARZXoKTtO/9V77pMLqzXO1Thnyz1D4GAUMZ+wrp9V8EftWsK
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 26 May 2023 15:18:46 GMT
content-type: text/css
cf-ray: 7cd6fe1f4de31bfe-OSL
cf-cache-status: HIT
access-control-allow-origin: *
age: 44
cache-control: public, max-age=1200
etag: W/"646cd7f6-6a514"
expires: Fri, 26 May 2023 15:38:46 GMT
last-modified: Tue, 23 May 2023 15:12:54 GMT
strict-transport-security: max-age=0
vary: Accept-Encoding
access-control-allow-credentials: true
access-control-allow-headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization
access-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
access-control-max-age: 1728000
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2

use.fontawesome.com/releases/v5.9.0/css/v4-shims.css

104.21.62.252

200 OK

4.7 kB

URL GET HTTP/2
use.fontawesome.com/releases/v5.9.0/css/v4-shims.css
IP
104.21.62.252:443
ASN
#13335 CLOUDFLARENET

Requested by
https://go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a
Certificate
IssuerGoogle Trust Services LLC
Subjectuse.fontawesome.com
FingerprintC8:38:F5:E2:7C:CE:53:71:EB:92:1D:71:F5:78:FE:7C:C4:4D:65:BC
ValiditySat, 06 May 2023 03:15:52 GMT - Fri, 04 Aug 2023 03:15:51 GMT

File type
ASCII text, with very long lines (26440)
Size
4.7 kB (4659 bytes)
Hash
e140a7d32f343530f016095df3cc2ae4
1a5f9ba089085f9e44292a6344b9364c489bcd49
0d1c5ba4b29db42dadf61f9e7304331fa835fe732bbb02822ada17a9a63c215f

HTTP Headers

GET /releases/v5.9.0/css/v4-shims.css HTTP/1.1
Host: use.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://go.healthyliving.news/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 26 May 2023 15:18:46 GMT
content-type: text/css
x-amz-id-2: imga+mai3vgPwb3NMKPH9gz5JNyZKCWsk6Ye8XmMAwPuex4snINmLd/vMqIHxjed/vV3MmzgxN0=
x-amz-request-id: H2V714DW6ZCGGAKN
last-modified: Wed, 30 Jun 2021 15:48:06 GMT
etag: W/"e140a7d32f343530f016095df3cc2ae4"
cache-control: max-age=31556926
cf-cache-status: HIT
age: 2080173
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PCmS9r9xJZdA6dJ%2BJBfP9sSd8Z6C6pTrGqyT6npsAkTzJFLI06AxarAzMQxOJhEqZ1ZkMCzirsO6ANQAvVVwiDYRkRJ783a%2BeaBraRDkU2iMkPxTJI77FM%2BpNotGU8V4JB8dwiGO"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7cd6fe1f7c081c06-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

go.healthyliving.news/hosted/images/34/12fd48f05148c8826f45324533218f/Screen-Shot-2021-07-23-at-9.28.07-AM.png

104.16.15.194

200 OK

1.2 MB

URL GET HTTP/2
go.healthyliving.news/hosted/images/34/12fd48f05148c8826f45324533218f/Screen-Shot-2021-07-23-at-9.28.07-AM.png
IP
104.16.15.194:443
ASN
#13335 CLOUDFLARENET

Requested by
https://go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a
Certificate
IssuerCloudflare, Inc.
Subjectgo.healthyliving.news
Fingerprint13:13:61:C0:89:7F:8B:90:12:04:F7:B1:AC:C6:50:50:AB:4F:11:DE
ValidityFri, 12 Aug 2022 00:00:00 GMT - Sat, 12 Aug 2023 23:59:59 GMT

File type
PNG image data, 982 x 892, 8-bit/color RGB, non-interlaced\012- data
Size
1.2 MB (1181674 bytes)
Hash
5dddd939d364d84e9ad642e7c37b4ca4
3596934764be5dfafa6dcd97d43a060606925fec
84b439384573d144f103b62a2c94e3fcf19916868ab4f4e585f7a30114aa9e85

HTTP Headers

GET /hosted/images/34/12fd48f05148c8826f45324533218f/Screen-Shot-2021-07-23-at-9.28.07-AM.png HTTP/1.1
Host: go.healthyliving.news
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a
Cookie: __cf_bm=06SNOrEO60F0MjY2MXcWay_qrAbj.gEwH49MXZXh1UY-1685114325-0-AWf+qf+uYXF2Psdo1hh0osvKKpi6ctxplVI+8K/6mZkOrIQBo0L9yBO1PdrBARZXoKTtO/9V77pMLqzXO1Thnyz1D4GAUMZ+wrp9V8EftWsK
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 26 May 2023 15:18:47 GMT
content-type: image/png
content-length: 1181674
cf-ray: 7cd6fe1f7e241bfe-OSL
cf-cache-status: HIT
accept-ranges: bytes
cache-control: max-age=31536000
etag: "6d19ffaaab700bfeb591bf0b3ed8a6fc"
expires: Mon, 19 Jun 2023 15:18:47 GMT
last-modified: Fri, 23 Jul 2021 15:28:34 GMT
vary: Accept, Accept-Encoding
cf-bgj: imgq:85,h2pri
cf-polished: origSize=1185496
server: cloudflare
X-Firefox-Spdy: h2

go.healthyliving.news/hosted/images/07/f10fcee4bd4257af7d3a1870c0b1e6/Screen-Shot-2021-07-27-at-2.20.36-PM.png

104.16.15.194

200 OK

1.6 MB

URL GET HTTP/2
go.healthyliving.news/hosted/images/07/f10fcee4bd4257af7d3a1870c0b1e6/Screen-Shot-2021-07-27-at-2.20.36-PM.png
IP
104.16.15.194:443
ASN
#13335 CLOUDFLARENET

Requested by
https://go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a
Certificate
IssuerCloudflare, Inc.
Subjectgo.healthyliving.news
Fingerprint13:13:61:C0:89:7F:8B:90:12:04:F7:B1:AC:C6:50:50:AB:4F:11:DE
ValidityFri, 12 Aug 2022 00:00:00 GMT - Sat, 12 Aug 2023 23:59:59 GMT

File type
PNG image data, 1370 x 950, 8-bit/color RGB, non-interlaced\012- data
Size
1.6 MB (1627581 bytes)
Hash
49c234f482274782928cd03c9e795a97
7c98aaed7cc9dffaf204f467f372c3ffd221c41b
bdba7868d7faa166c668c6dbf9bd46d9834d948b66ff54c4cc3b649ea68d6c7a

HTTP Headers

GET /hosted/images/07/f10fcee4bd4257af7d3a1870c0b1e6/Screen-Shot-2021-07-27-at-2.20.36-PM.png HTTP/1.1
Host: go.healthyliving.news
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a
Cookie: __cf_bm=06SNOrEO60F0MjY2MXcWay_qrAbj.gEwH49MXZXh1UY-1685114325-0-AWf+qf+uYXF2Psdo1hh0osvKKpi6ctxplVI+8K/6mZkOrIQBo0L9yBO1PdrBARZXoKTtO/9V77pMLqzXO1Thnyz1D4GAUMZ+wrp9V8EftWsK
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 26 May 2023 15:18:47 GMT
content-type: image/png
content-length: 1627581
cf-ray: 7cd6fe1f5dfb1bfe-OSL
cf-cache-status: HIT
accept-ranges: bytes
cache-control: max-age=31536000
etag: "bbf2444efe87e672832a90f9fcf2beda"
expires: Mon, 19 Jun 2023 15:18:47 GMT
last-modified: Tue, 27 Jul 2021 20:21:23 GMT
vary: Accept, Accept-Encoding
cf-bgj: imgq:85,h2pri
cf-polished: origSize=1632338
server: cloudflare
X-Firefox-Spdy: h2

fonts.googleapis.com/css2?family=Montserrat:wght@600;700;800&display=swap

142.250.74.106

200 OK

1.1 kB

URL GET HTTP/2
fonts.googleapis.com/css2?family=Montserrat:wght@600;700;800&display=swap
IP
142.250.74.106:443
ASN
#15169 GOOGLE

Requested by
https://go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint5F:AC:74:E6:97:66:CD:D0:F1:EA:0D:01:37:89:65:2E:98:22:84:6C
ValidityMon, 08 May 2023 08:24:50 GMT - Mon, 31 Jul 2023 08:24:49 GMT

File type
gzip compressed data, max compression\012- data
Size
1.1 kB (1067 bytes)
Hash
eaac3c8c548c9f385632a1e6cae10dfe
f67a6485591b42a1bf0bf19e835b356125780389
18b111dea860798cf8e63b174b337faa03f7037061a208676b2c372cdc9866fb

HTTP Headers

GET /css2?family=Montserrat:wght@600;700;800&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://go.healthyliving.news/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 26 May 2023 15:18:47 GMT
date: Fri, 26 May 2023 15:18:47 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.googleapis.com/css?family=Open+Sans:400,700%7COswald:400,700%7CDroid+Sans:400,700%7CRoboto:400,700%7CLato:400,700%7CPT+Sans:400,700%7CSource+Sans+Pro:400,600,700%7CNoto+Sans:400,700%7CPT+Sans:400,700%7CUbuntu:400,700%7CBitter:400,700%7CPT+Serif:400,700%7CRokkitt:400,700%7CDroid+Serif:400,700%7CRaleway:400,700%7CInconsolata:400,700

142.250.74.106

200 OK

2.9 kB

URL GET HTTP/2
fonts.googleapis.com/css?family=Open+Sans:400,700%7COswald:400,700%7CDroid+Sans:400,700%7CRoboto:400,700%7CLato:400,700%7CPT+Sans:400,700%7CSource+Sans+Pro:400,600,700%7CNoto+Sans:400,700%7CPT+Sans:400,700%7CUbuntu:400,700%7CBitter:400,700%7CPT+Serif:400,700%7CRokkitt:400,700%7CDroid+Serif:400,700%7CRaleway:400,700%7CInconsolata:400,700
IP
142.250.74.106:443
ASN
#15169 GOOGLE

Requested by
https://go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint5F:AC:74:E6:97:66:CD:D0:F1:EA:0D:01:37:89:65:2E:98:22:84:6C
ValidityMon, 08 May 2023 08:24:50 GMT - Mon, 31 Jul 2023 08:24:49 GMT

File type
gzip compressed data, max compression\012- data
Size
2.9 kB (2942 bytes)
Hash
f869dc4ffaaeb461dcd18c39edae6444
2b09cae3044e39c7e01f079c04a64a3922e64522
3b2e2d276c76b34f46ae25acdec31458d566fa094c3fa51b8adb373f62b956fd

HTTP Headers

GET /css?family=Open+Sans:400,700%7COswald:400,700%7CDroid+Sans:400,700%7CRoboto:400,700%7CLato:400,700%7CPT+Sans:400,700%7CSource+Sans+Pro:400,600,700%7CNoto+Sans:400,700%7CPT+Sans:400,700%7CUbuntu:400,700%7CBitter:400,700%7CPT+Serif:400,700%7CRokkitt:400,700%7CDroid+Serif:400,700%7CRaleway:400,700%7CInconsolata:400,700 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://go.healthyliving.news/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 26 May 2023 15:18:47 GMT
date: Fri, 26 May 2023 15:18:47 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.131

471 B

URL
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
6511d19b553fc77eb29bc4565edc46e0
e88a49981040eab52449d8cf558e0ed29d862927
6c5e6e9dde465dbaeadb02409d89f6ffece3748be3e37ae0d410474391e9e90a

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 26 May 2023 15:18:47 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ocsp.pki.goog/gts1c3

142.250.74.131

472 B

URL
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
fc757271ec057273ef886c129a7bffd0
2e6c8df3cbe82d4dde32cdf7f71a6668dd536287
72cd2bbd96698941fa58cb6a7dfa4340187c0eb2499bd5a0e6cf4d7240c3a225

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 26 May 2023 15:18:47 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

fonts.gstatic.com/s/opensans/v35/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2

216.58.207.227

200 OK

48 kB

URL GET HTTP/3
fonts.gstatic.com/s/opensans/v35/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintA3:09:CB:6C:64:76:4B:58:32:D1:21:3E:F4:65:1F:DE:58:22:8F:D6
ValidityMon, 08 May 2023 08:24:48 GMT - Mon, 31 Jul 2023 08:24:47 GMT

File type
Web Open Font Format (Version 2), TrueType, length 48412, version 1.0\012- data
Size
48 kB (48412 bytes)
Hash
31a8297826cdcea344698ff952694a7f
4fa1ee4c471d1c05e9141855eec5ee09b898d594
7c7818c25a18e8a38553fcbcbc2ad0b5e964103a7d2e494f82815e3f70bf3fc5

HTTP Headers

GET /s/opensans/v35/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://go.healthyliving.news
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48412
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 May 2023 11:49:35 GMT
expires: Fri, 24 May 2024 11:49:35 GMT
cache-control: public, max-age=31536000
age: 98952
last-modified: Tue, 02 May 2023 15:08:53 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.gstatic.com/s/opensans/v35/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2

216.58.207.227

200 OK

48 kB

URL GET HTTP/3
fonts.gstatic.com/s/opensans/v35/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintA3:09:CB:6C:64:76:4B:58:32:D1:21:3E:F4:65:1F:DE:58:22:8F:D6
ValidityMon, 08 May 2023 08:24:48 GMT - Mon, 31 Jul 2023 08:24:47 GMT

File type
Web Open Font Format (Version 2), TrueType, length 48412, version 1.0\012- data
Size
48 kB (48412 bytes)
Hash
31a8297826cdcea344698ff952694a7f
4fa1ee4c471d1c05e9141855eec5ee09b898d594
7c7818c25a18e8a38553fcbcbc2ad0b5e964103a7d2e494f82815e3f70bf3fc5

HTTP Headers

GET /s/opensans/v35/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://go.healthyliving.news
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48412
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 May 2023 11:49:35 GMT
expires: Fri, 24 May 2024 11:49:35 GMT
cache-control: public, max-age=31536000
age: 98952
last-modified: Tue, 02 May 2023 15:08:53 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

go.healthyliving.news/hosted/images/5f/2b6bdf7f534cbf945f2cfdacb7cd18/hero-bg.jpg

104.16.15.194

200 OK

42 kB

URL GET HTTP/2
go.healthyliving.news/hosted/images/5f/2b6bdf7f534cbf945f2cfdacb7cd18/hero-bg.jpg
IP
104.16.15.194:443
ASN
#13335 CLOUDFLARENET

Requested by
https://go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a
Certificate
IssuerCloudflare, Inc.
Subjectgo.healthyliving.news
Fingerprint13:13:61:C0:89:7F:8B:90:12:04:F7:B1:AC:C6:50:50:AB:4F:11:DE
ValidityFri, 12 Aug 2022 00:00:00 GMT - Sat, 12 Aug 2023 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x570, components 3\012- data
Size
42 kB (41810 bytes)
Hash
fbdc83b552065dc189af24cc2bed76ad
3cae20d97b57abc09fafc7c9219943acd7b49144
ae59d3c999a1c2cd5c8ef13a2414b0e13d748aea2df09a843197d5c5972516fb

HTTP Headers

GET /hosted/images/5f/2b6bdf7f534cbf945f2cfdacb7cd18/hero-bg.jpg HTTP/1.1
Host: go.healthyliving.news
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a
Cookie: __cf_bm=06SNOrEO60F0MjY2MXcWay_qrAbj.gEwH49MXZXh1UY-1685114325-0-AWf+qf+uYXF2Psdo1hh0osvKKpi6ctxplVI+8K/6mZkOrIQBo0L9yBO1PdrBARZXoKTtO/9V77pMLqzXO1Thnyz1D4GAUMZ+wrp9V8EftWsK
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 26 May 2023 15:18:47 GMT
content-type: image/jpeg
content-length: 41810
cf-ray: 7cd6fe252ca81bfe-OSL
cf-cache-status: HIT
accept-ranges: bytes
cache-control: max-age=31536000
etag: "fbdc83b552065dc189af24cc2bed76ad"
expires: Mon, 19 Jun 2023 15:18:47 GMT
last-modified: Tue, 20 Jul 2021 06:10:55 GMT
vary: Accept, Accept-Encoding
cf-bgj: imgq:85,h2pri
cf-polished: status=not_needed
server: cloudflare
X-Firefox-Spdy: h2

go.healthyliving.news/hosted/images/89/2e6455d0a44d4fa910f07c23a3a89a/arrow.png

104.16.15.194

200 OK

862 B

URL GET HTTP/2
go.healthyliving.news/hosted/images/89/2e6455d0a44d4fa910f07c23a3a89a/arrow.png
IP
104.16.15.194:443
ASN
#13335 CLOUDFLARENET

Requested by
https://go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a
Certificate
IssuerCloudflare, Inc.
Subjectgo.healthyliving.news
Fingerprint13:13:61:C0:89:7F:8B:90:12:04:F7:B1:AC:C6:50:50:AB:4F:11:DE
ValidityFri, 12 Aug 2022 00:00:00 GMT - Sat, 12 Aug 2023 23:59:59 GMT

File type
PNG image data, 39 x 39, 8-bit colormap, non-interlaced\012- data
Size
862 B (862 bytes)
Hash
70c9c77ff425787f2a791cc0f2cef03b
a386ddf6895b4e6cd50d3d95732fb90a9fa93dc7
4aef93b7a119e233e5b42276c2b3ffc46ac375f2019ceb8a4245d296e68d6d45

HTTP Headers

GET /hosted/images/89/2e6455d0a44d4fa910f07c23a3a89a/arrow.png HTTP/1.1
Host: go.healthyliving.news
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a
Cookie: __cf_bm=06SNOrEO60F0MjY2MXcWay_qrAbj.gEwH49MXZXh1UY-1685114325-0-AWf+qf+uYXF2Psdo1hh0osvKKpi6ctxplVI+8K/6mZkOrIQBo0L9yBO1PdrBARZXoKTtO/9V77pMLqzXO1Thnyz1D4GAUMZ+wrp9V8EftWsK
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 26 May 2023 15:18:47 GMT
content-type: image/png
content-length: 862
cf-ray: 7cd6fe252cae1bfe-OSL
cf-cache-status: HIT
accept-ranges: bytes
cache-control: max-age=31536000
etag: "b3755a3a19064ae0994d6b9a59bdad78"
expires: Mon, 19 Jun 2023 15:18:47 GMT
last-modified: Thu, 22 Jul 2021 11:27:17 GMT
vary: Accept, Accept-Encoding
cf-bgj: imgq:85,h2pri
cf-polished: origSize=1173
server: cloudflare
X-Firefox-Spdy: h2

go.healthyliving.news/hosted/images/72/f7a7c111d94855b0b34e230b7d6675/check.png

104.16.15.194

200 OK

582 B

URL GET HTTP/2
go.healthyliving.news/hosted/images/72/f7a7c111d94855b0b34e230b7d6675/check.png
IP
104.16.15.194:443
ASN
#13335 CLOUDFLARENET

Requested by
https://go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a
Certificate
IssuerCloudflare, Inc.
Subjectgo.healthyliving.news
Fingerprint13:13:61:C0:89:7F:8B:90:12:04:F7:B1:AC:C6:50:50:AB:4F:11:DE
ValidityFri, 12 Aug 2022 00:00:00 GMT - Sat, 12 Aug 2023 23:59:59 GMT

File type
PNG image data, 39 x 39, 8-bit colormap, non-interlaced\012- data
Size
582 B (582 bytes)
Hash
5529e619a837b2fd6bb542370aafb695
ea6ada64023552245e6d4f70d34279e23e9b944e
2b69d3f9947e109fcecf29e474ef1dd9e95b36fdff45b2fce7028cb51e2e44e6

HTTP Headers

GET /hosted/images/72/f7a7c111d94855b0b34e230b7d6675/check.png HTTP/1.1
Host: go.healthyliving.news
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a
Cookie: __cf_bm=06SNOrEO60F0MjY2MXcWay_qrAbj.gEwH49MXZXh1UY-1685114325-0-AWf+qf+uYXF2Psdo1hh0osvKKpi6ctxplVI+8K/6mZkOrIQBo0L9yBO1PdrBARZXoKTtO/9V77pMLqzXO1Thnyz1D4GAUMZ+wrp9V8EftWsK
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 26 May 2023 15:18:47 GMT
content-type: image/png
content-length: 582
cf-ray: 7cd6fe252ca91bfe-OSL
cf-cache-status: HIT
accept-ranges: bytes
cache-control: max-age=31536000
etag: "bb4eb56f3141212baad5fbdf5be0bba6"
expires: Mon, 19 Jun 2023 15:18:47 GMT
last-modified: Tue, 20 Jul 2021 07:34:27 GMT
vary: Accept, Accept-Encoding
cf-bgj: imgq:85,h2pri
cf-polished: origSize=725
server: cloudflare
X-Firefox-Spdy: h2

go.healthyliving.news/hosted/images/ee/fffb1255fa4f0e9a6f98ed4a205a53/black-texture.jpg

104.16.15.194

200 OK

117 kB

URL GET HTTP/2
go.healthyliving.news/hosted/images/ee/fffb1255fa4f0e9a6f98ed4a205a53/black-texture.jpg
IP
104.16.15.194:443
ASN
#13335 CLOUDFLARENET

Requested by
https://go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a
Certificate
IssuerCloudflare, Inc.
Subjectgo.healthyliving.news
Fingerprint13:13:61:C0:89:7F:8B:90:12:04:F7:B1:AC:C6:50:50:AB:4F:11:DE
ValidityFri, 12 Aug 2022 00:00:00 GMT - Sat, 12 Aug 2023 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x1585, components 1\012- data
Size
117 kB (117119 bytes)
Hash
6f8a8a91cfd57b49fdec724ce1ea44b8
559b8ac24fc3317917e1a777bddfc49583878f42
994ec7fd4c7c3c87edee7480c9116e48fe6d39170babcae77d38c53b6ea6068f

HTTP Headers

GET /hosted/images/ee/fffb1255fa4f0e9a6f98ed4a205a53/black-texture.jpg HTTP/1.1
Host: go.healthyliving.news
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a
Cookie: __cf_bm=06SNOrEO60F0MjY2MXcWay_qrAbj.gEwH49MXZXh1UY-1685114325-0-AWf+qf+uYXF2Psdo1hh0osvKKpi6ctxplVI+8K/6mZkOrIQBo0L9yBO1PdrBARZXoKTtO/9V77pMLqzXO1Thnyz1D4GAUMZ+wrp9V8EftWsK
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 26 May 2023 15:18:47 GMT
content-type: image/jpeg
content-length: 117119
cf-ray: 7cd6fe252cad1bfe-OSL
cf-cache-status: HIT
accept-ranges: bytes
cache-control: max-age=31536000
etag: "6f8a8a91cfd57b49fdec724ce1ea44b8"
expires: Mon, 19 Jun 2023 15:18:47 GMT
last-modified: Tue, 20 Jul 2021 08:02:32 GMT
vary: Accept, Accept-Encoding
cf-bgj: imgq:85,h2pri
cf-polished: status=not_needed
server: cloudflare
X-Firefox-Spdy: h2

go.healthyliving.news/hosted/images/ae/aac2ea8bfe421aab9305b446eec401/yellow-bg.jpg

104.16.15.194

200 OK

22 kB

URL GET HTTP/2
go.healthyliving.news/hosted/images/ae/aac2ea8bfe421aab9305b446eec401/yellow-bg.jpg
IP
104.16.15.194:443
ASN
#13335 CLOUDFLARENET

Requested by
https://go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a
Certificate
IssuerCloudflare, Inc.
Subjectgo.healthyliving.news
Fingerprint13:13:61:C0:89:7F:8B:90:12:04:F7:B1:AC:C6:50:50:AB:4F:11:DE
ValidityFri, 12 Aug 2022 00:00:00 GMT - Sat, 12 Aug 2023 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x976, components 3\012- data
Size
22 kB (21674 bytes)
Hash
625c3ec09d84566d037b50a0b70c0cf4
6c02fa8be1207b5b7b4368b65dd123753cc798d3
804d3c4341221c24b18c0d598be78e4d4e3db356a203cdedd85c441689bd726c

HTTP Headers

GET /hosted/images/ae/aac2ea8bfe421aab9305b446eec401/yellow-bg.jpg HTTP/1.1
Host: go.healthyliving.news
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a
Cookie: __cf_bm=06SNOrEO60F0MjY2MXcWay_qrAbj.gEwH49MXZXh1UY-1685114325-0-AWf+qf+uYXF2Psdo1hh0osvKKpi6ctxplVI+8K/6mZkOrIQBo0L9yBO1PdrBARZXoKTtO/9V77pMLqzXO1Thnyz1D4GAUMZ+wrp9V8EftWsK
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 26 May 2023 15:18:47 GMT
content-type: image/jpeg
content-length: 21674
cf-ray: 7cd6fe253cb31bfe-OSL
cf-cache-status: HIT
accept-ranges: bytes
cache-control: max-age=31536000
etag: "625c3ec09d84566d037b50a0b70c0cf4"
expires: Mon, 19 Jun 2023 15:18:47 GMT
last-modified: Thu, 22 Jul 2021 12:22:36 GMT
vary: Accept, Accept-Encoding
cf-bgj: imgq:85,h2pri
cf-polished: status=not_needed
server: cloudflare
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.131

472 B

URL
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
fc757271ec057273ef886c129a7bffd0
2e6c8df3cbe82d4dde32cdf7f71a6668dd536287
72cd2bbd96698941fa58cb6a7dfa4340187c0eb2499bd5a0e6cf4d7240c3a225

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 26 May 2023 15:18:48 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ocsp.pki.goog/gts1c3

142.250.74.131

471 B

URL
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
61d13c286970b667c506166085b27432
e17257068ae421f755f2c671371b2fdfc3ea7fe1
68a17d38798d905ccc0ea237654927ec0a6c66c5164909e9a21e3344a576fd62

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 26 May 2023 15:18:48 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

fonts.googleapis.com/css?family=Open+Sans%7CMontserrat%7COpen+Sans%7CMontserrat%7COpen+Sans%7CMontserrat%7COpen+Sans%7CMontserrat%7COpen+Sans%7CMontserrat%7COpen+Sans%7CMontserrat%7COpen+Sans%7CMontserrat%7COpen+Sans%7CMontserrat%7COpen+Sans%7CMontserrat%7COpen+Sans%7CMontserrat%7COpen+Sans%7CMontserrat%7COpen+Sans%7CMontserrat%7COpen+Sans%7CMontserrat%7COpen+Sans%7CMontserrat%7COpen+Sans%7CMontserrat%7COpen+Sans%7CMontserrat%7COpen+Sans%7CMontserrat%7COpen+Sans%7CMontserrat%7COpen+Sans%7CMontserrat%7COpen+Sans%7CMontserrat%7COpen+Sans%7CMontserrat%7COpen+Sans%7CMontserrat%7COpen+Sans%7CMontserrat%7COpen+Sans%7CMontserrat%7COpen+Sans%7CMontserrat%7COpen+Sans%7CMontserrat%7COpen+Sans%7CMontserrat%7COpen+Sans%7CMontserrat%7COpen+Sans%7CMontserrat%7COpen+Sans%7CMontserrat%7COpen+Sans%7CMontserrat%7COpen+Sans%7CMontserrat%7COpen+Sans%7CMontserrat%7COpen+Sans%7CMontserrat%7COpen+Sans%7CMontserrat%7COpen+Sans%7CMontserrat%7C

142.250.74.106

200 OK

78 kB

URL GET HTTP/2
fonts.googleapis.com/css?family=Open+Sans%7CMontserrat%7COpen+Sans%7CMontserrat%7COpen+Sans%7CMontserrat%7COpen+Sans%7CMontserrat%7COpen+Sans%7CMontserrat%7COpen+Sans%7CMontserrat%7COpen+Sans%7CMontserrat%7COpen+Sans%7CMontserrat%7COpen+Sans%7CMontserrat%7COpen+Sans%7CMontserrat%7COpen+Sans%7CMontserrat%7COpen+Sans%7CMontserrat%7COpen+Sans%7CMontserrat%7COpen+Sans%7CMontserrat%7COpen+Sans%7CMontserrat%7COpen+Sans%7CMontserrat%7COpen+Sans%7CMontserrat%7COpen+Sans%7CMontserrat%7COpen+Sans%7CMontserrat%7COpen+Sans%7CMontserrat%7COpen+Sans%7CMontserrat%7COpen+Sans%7CMontserrat%7COpen+Sans%7CMontserrat%7COpen+Sans%7CMontserrat%7COpen+Sans%7CMontserrat%7COpen+Sans%7CMontserrat%7COpen+Sans%7CMontserrat%7COpen+Sans%7CMontserrat%7COpen+Sans%7CMontserrat%7COpen+Sans%7CMontserrat%7COpen+Sans%7CMontserrat%7COpen+Sans%7CMontserrat%7COpen+Sans%7CMontserrat%7COpen+Sans%7CMontserrat%7COpen+Sans%7CMontserrat%7COpen+Sans%7CMontserrat%7C
IP
142.250.74.106:443
ASN
#15169 GOOGLE

Requested by
https://go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint5F:AC:74:E6:97:66:CD:D0:F1:EA:0D:01:37:89:65:2E:98:22:84:6C
ValidityMon, 08 May 2023 08:24:50 GMT - Mon, 31 Jul 2023 08:24:49 GMT

File type
gzip compressed data, max compression\012- data
Size
78 kB (78323 bytes)
Hash
b2071cc3cf38b1b6cc5fa4e3ef6277c9
133f13471092b2b7576cc8a7ed30f70a6b6a2bbb
7fd9d4e287ab4e2d726c9ab6603deb16385136899ea63b0a17d57e291fd9fac8

HTTP Headers

GET /css?family=Open+Sans%7CMontserrat%7COpen+Sans%7CMontserrat%7COpen+Sans%7CMontserrat%7COpen+Sans%7CMontserrat%7COpen+Sans%7CMontserrat%7COpen+Sans%7CMontserrat%7COpen+Sans%7CMontserrat%7COpen+Sans%7CMontserrat%7COpen+Sans%7CMontserrat%7COpen+Sans%7CMontserrat%7COpen+Sans%7CMontserrat%7COpen+Sans%7CMontserrat%7COpen+Sans%7CMontserrat%7COpen+Sans%7CMontserrat%7COpen+Sans%7CMontserrat%7COpen+Sans%7CMontserrat%7COpen+Sans%7CMontserrat%7COpen+Sans%7CMontserrat%7COpen+Sans%7CMontserrat%7COpen+Sans%7CMontserrat%7COpen+Sans%7CMontserrat%7COpen+Sans%7CMontserrat%7COpen+Sans%7CMontserrat%7COpen+Sans%7CMontserrat%7COpen+Sans%7CMontserrat%7COpen+Sans%7CMontserrat%7COpen+Sans%7CMontserrat%7COpen+Sans%7CMontserrat%7COpen+Sans%7CMontserrat%7COpen+Sans%7CMontserrat%7COpen+Sans%7CMontserrat%7COpen+Sans%7CMontserrat%7COpen+Sans%7CMontserrat%7COpen+Sans%7CMontserrat%7COpen+Sans%7CMontserrat%7COpen+Sans%7CMontserrat%7C HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://go.healthyliving.news/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 26 May 2023 15:18:47 GMT
date: Fri, 26 May 2023 15:18:47 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.gstatic.com/s/montserrat/v25/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2

216.58.207.227

200 OK

31 kB

URL GET HTTP/2
fonts.gstatic.com/s/montserrat/v25/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE2:33:59:47:38:D7:4A:7A:9E:28:5D:EC:AA:94:7F:92:25:D2:B1:C4
ValidityMon, 24 Apr 2023 12:00:43 GMT - Mon, 17 Jul 2023 12:00:42 GMT

File type
Web Open Font Format (Version 2), TrueType, length 30928, version 1.0\012- data
Size
31 kB (30928 bytes)
Hash
ac0d2859ea5f8fd6bcb3c305c08ec184
7f6c17e3e592cd8bd346b9cc261d8dd961b8aef7
ae919a7c9f25f0fd97fc18e398ae8e453fcaae487e4a4cb4f896e7fecde4a780

HTTP Headers

GET /s/montserrat/v25/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://go.healthyliving.news
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 30928
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 24 May 2023 00:25:28 GMT
expires: Thu, 23 May 2024 00:25:28 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 11 Jul 2022 18:57:39 GMT
content-type: font/woff2
age: 226400
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

go.healthyliving.news/assets/userevents/application.js

104.16.15.194

200 OK

20 kB

URL GET HTTP/2
go.healthyliving.news/assets/userevents/application.js
IP
104.16.15.194:443
ASN
#13335 CLOUDFLARENET

Requested by
https://go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a
Certificate
IssuerCloudflare, Inc.
Subjectgo.healthyliving.news
Fingerprint13:13:61:C0:89:7F:8B:90:12:04:F7:B1:AC:C6:50:50:AB:4F:11:DE
ValidityFri, 12 Aug 2022 00:00:00 GMT - Sat, 12 Aug 2023 23:59:59 GMT

File type
ASCII text, with very long lines (5244), with no line terminators
Size
20 kB (20485 bytes)
Hash
4849819314b7c1be4146a39b52c5c502
3e09f90cb42c04ff19f66dbbd83e3dbb544b50bf
a696b734193371073510c87df68430499c2f424ad3f7be42f586dc6aff78567b

HTTP Headers

GET /assets/userevents/application.js HTTP/1.1
Host: go.healthyliving.news
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a
Cookie: __cf_bm=06SNOrEO60F0MjY2MXcWay_qrAbj.gEwH49MXZXh1UY-1685114325-0-AWf+qf+uYXF2Psdo1hh0osvKKpi6ctxplVI+8K/6mZkOrIQBo0L9yBO1PdrBARZXoKTtO/9V77pMLqzXO1Thnyz1D4GAUMZ+wrp9V8EftWsK
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 26 May 2023 15:18:46 GMT
content-type: application/x-javascript
cf-ray: 7cd6fe1f4df51bfe-OSL
cf-cache-status: HIT
access-control-allow-origin: *
age: 44
cache-control: public, max-age=1200
etag: W/"646cd7f6-147c"
expires: Fri, 26 May 2023 15:38:46 GMT
last-modified: Tue, 23 May 2023 15:12:54 GMT
strict-transport-security: max-age=0
vary: Accept-Encoding
access-control-allow-credentials: true
access-control-allow-headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization
access-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
access-control-max-age: 1728000
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2

www.youtube.com/s/player/bbe1b497/fetch-polyfill.vflset/fetch-polyfill.js

216.58.211.14

200 OK

2.6 kB

URL GET HTTP/3
www.youtube.com/s/player/bbe1b497/fetch-polyfill.vflset/fetch-polyfill.js
IP
216.58.211.14:443
ASN
#15169 GOOGLE

Requested by
https://www.youtube.com/embed/yGj-hjKMzgE?autoplay=0&modestbranding=1&controls=1&showinfo=0&rel=0&hd=1&wmode=transparent
Certificate
IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint08:73:2C:18:30:14:52:C3:CA:3E:02:79:65:B4:FE:90:AC:3F:3E:33
ValidityMon, 24 Apr 2023 11:56:06 GMT - Mon, 17 Jul 2023 11:56:05 GMT

File type
Algol 68 source text\012- Pascal source, ASCII text, with very long lines (552)
Size
2.6 kB (2625 bytes)
Hash
949e94fed78d252b728cdc2aa6ddc56a
d2bfdd653bb3da592097fb4ddb6eabbdc3060562
ac8177161c3038b07597ec544de3c00f46e1a0aa6b4b4c045ff0495553cc5069

HTTP Headers

GET /s/player/bbe1b497/fetch-polyfill.vflset/fetch-polyfill.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/yGj-hjKMzgE?autoplay=0&modestbranding=1&controls=1&showinfo=0&rel=0&hd=1&wmode=transparent
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 2625
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 24 May 2023 15:07:04 GMT
expires: Thu, 23 May 2024 15:07:04 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 24 May 2023 01:49:18 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 173504
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

www.youtube.com/s/player/bbe1b497/www-player.css

216.58.211.14

200 OK

49 kB

URL GET HTTP/3
www.youtube.com/s/player/bbe1b497/www-player.css
IP
216.58.211.14:443
ASN
#15169 GOOGLE

Requested by
https://www.youtube.com/embed/yGj-hjKMzgE?autoplay=0&modestbranding=1&controls=1&showinfo=0&rel=0&hd=1&wmode=transparent
Certificate
IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint08:73:2C:18:30:14:52:C3:CA:3E:02:79:65:B4:FE:90:AC:3F:3E:33
ValidityMon, 24 Apr 2023 11:56:06 GMT - Mon, 17 Jul 2023 11:56:05 GMT

File type
ASCII text, with very long lines (65536), with no line terminators
Size
49 kB (48702 bytes)
Hash
b8afa5d85a1bf60a05181715a1b9d405
5b3124b4a0cb3d14d9c7a69d2cecdfa24b475304
2da3463d43c823fbf9a6df6c58b0bca86f25083def66cd532f31b114b997df04

HTTP Headers

GET /s/player/bbe1b497/www-player.css HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/yGj-hjKMzgE?autoplay=0&modestbranding=1&controls=1&showinfo=0&rel=0&hd=1&wmode=transparent
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 48702
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 24 May 2023 15:05:50 GMT
expires: Thu, 23 May 2024 15:05:50 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 24 May 2023 01:49:18 GMT
content-type: text/css
vary: Accept-Encoding, Origin
age: 173578
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

www.youtube.com/s/player/bbe1b497/www-embed-player.vflset/www-embed-player.js

216.58.211.14

200 OK

94 kB

URL GET HTTP/3
www.youtube.com/s/player/bbe1b497/www-embed-player.vflset/www-embed-player.js
IP
216.58.211.14:443
ASN
#15169 GOOGLE

Requested by
https://www.youtube.com/embed/yGj-hjKMzgE?autoplay=0&modestbranding=1&controls=1&showinfo=0&rel=0&hd=1&wmode=transparent
Certificate
IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint08:73:2C:18:30:14:52:C3:CA:3E:02:79:65:B4:FE:90:AC:3F:3E:33
ValidityMon, 24 Apr 2023 11:56:06 GMT - Mon, 17 Jul 2023 11:56:05 GMT

File type
ASCII text, with very long lines (660)
Size
94 kB (94068 bytes)
Hash
84523cc509e7b9a1d46990d65185b9de
db4518d0142e239249d85d37875c4516501f710f
66c28207b52ebc8b2daba1a02dfdb35cba26b0538410e5b696805263d016c52b

HTTP Headers

GET /s/player/bbe1b497/www-embed-player.vflset/www-embed-player.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/yGj-hjKMzgE?autoplay=0&modestbranding=1&controls=1&showinfo=0&rel=0&hd=1&wmode=transparent
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 94068
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 24 May 2023 15:07:04 GMT
expires: Thu, 23 May 2024 15:07:04 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 24 May 2023 01:49:18 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 173504
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

go.healthyliving.news/hosted/images/c3/20bf2b7a6f43bea43efe718cc76dd7/button-bg1.png

104.16.15.194

200 OK

1.0 kB

URL GET HTTP/2
go.healthyliving.news/hosted/images/c3/20bf2b7a6f43bea43efe718cc76dd7/button-bg1.png
IP
104.16.15.194:443
ASN
#13335 CLOUDFLARENET

Requested by
https://go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a
Certificate
IssuerCloudflare, Inc.
Subjectgo.healthyliving.news
Fingerprint13:13:61:C0:89:7F:8B:90:12:04:F7:B1:AC:C6:50:50:AB:4F:11:DE
ValidityFri, 12 Aug 2022 00:00:00 GMT - Sat, 12 Aug 2023 23:59:59 GMT

File type
PNG image data, 551 x 82, 8-bit colormap, non-interlaced\012- data
Size
1.0 kB (1040 bytes)
Hash
3116a9972255c51e6eba605180ede4ba
279521dabd5385b143c302a66a84f442a7ecd94e
0b6d9e2c9f94a8029f6d146a05d2b6208c9d3fff95a1047052823328c979aaf7

HTTP Headers

GET /hosted/images/c3/20bf2b7a6f43bea43efe718cc76dd7/button-bg1.png HTTP/1.1
Host: go.healthyliving.news
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a
Cookie: __cf_bm=06SNOrEO60F0MjY2MXcWay_qrAbj.gEwH49MXZXh1UY-1685114325-0-AWf+qf+uYXF2Psdo1hh0osvKKpi6ctxplVI+8K/6mZkOrIQBo0L9yBO1PdrBARZXoKTtO/9V77pMLqzXO1Thnyz1D4GAUMZ+wrp9V8EftWsK
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 26 May 2023 15:18:48 GMT
content-type: image/png
content-length: 1040
cf-ray: 7cd6fe275f111bfe-OSL
cf-cache-status: HIT
accept-ranges: bytes
cache-control: max-age=31536000
etag: "d2eb7d7b8c9169e61c2ca9ebab951f0d"
expires: Mon, 19 Jun 2023 15:18:48 GMT
last-modified: Fri, 23 Jul 2021 06:33:46 GMT
vary: Accept, Accept-Encoding
cf-bgj: imgq:85,h2pri
cf-polished: origSize=1416
server: cloudflare
X-Firefox-Spdy: h2

fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2

216.58.207.227

200 OK

16 kB

URL GET HTTP/3
fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://www.youtube.com/embed/yGj-hjKMzgE?autoplay=0&modestbranding=1&controls=1&showinfo=0&rel=0&hd=1&wmode=transparent
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintA3:09:CB:6C:64:76:4B:58:32:D1:21:3E:F4:65:1F:DE:58:22:8F:D6
ValidityMon, 08 May 2023 08:24:48 GMT - Mon, 31 Jul 2023 08:24:47 GMT

File type
Web Open Font Format (Version 2), TrueType, length 15552, version 1.0\012- data
Size
16 kB (15552 bytes)
Hash
285467176f7fe6bb6a9c6873b3dad2cc
ea04e4ff5142ddd69307c183def721a160e0a64e
5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7

HTTP Headers

GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 23 May 2023 21:40:21 GMT
expires: Wed, 22 May 2024 21:40:21 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
age: 236307
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2

216.58.207.227

200 OK

15 kB

URL GET HTTP/3
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://www.youtube.com/embed/yGj-hjKMzgE?autoplay=0&modestbranding=1&controls=1&showinfo=0&rel=0&hd=1&wmode=transparent
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintA3:09:CB:6C:64:76:4B:58:32:D1:21:3E:F4:65:1F:DE:58:22:8F:D6
ValidityMon, 08 May 2023 08:24:48 GMT - Mon, 31 Jul 2023 08:24:47 GMT

File type
Web Open Font Format (Version 2), TrueType, length 15344, version 1.0\012- data
Size
15 kB (15344 bytes)
Hash
5d4aeb4e5f5ef754e307d7ffaef688bd
06db651cdf354c64a7383ea9c77024ef4fb4cef8
3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc

HTTP Headers

GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 23 May 2023 17:31:32 GMT
expires: Wed, 22 May 2024 17:31:32 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
age: 251236
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

www.youtube.com/s/player/bbe1b497/player_ias.vflset/en_US/base.js

216.58.211.14

200 OK

758 kB

URL GET HTTP/3
www.youtube.com/s/player/bbe1b497/player_ias.vflset/en_US/base.js
IP
216.58.211.14:443
ASN
#15169 GOOGLE

Requested by
https://www.youtube.com/embed/yGj-hjKMzgE?autoplay=0&modestbranding=1&controls=1&showinfo=0&rel=0&hd=1&wmode=transparent
Certificate
IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint08:73:2C:18:30:14:52:C3:CA:3E:02:79:65:B4:FE:90:AC:3F:3E:33
ValidityMon, 24 Apr 2023 11:56:06 GMT - Mon, 17 Jul 2023 11:56:05 GMT

File type
ASCII text, with very long lines (555)
Size
758 kB (757956 bytes)
Hash
ef12fba4202719e6bf955d5497a856e3
7c8cf3c348e2ba17bec5cd24d6f57631d348add4
0ad4c72a41a087c98857745f49535143b8106429453b919703962c4367a9b68f

HTTP Headers

GET /s/player/bbe1b497/player_ias.vflset/en_US/base.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/yGj-hjKMzgE?autoplay=0&modestbranding=1&controls=1&showinfo=0&rel=0&hd=1&wmode=transparent
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
content-encoding: gzip
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 757956
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 24 May 2023 15:10:27 GMT
expires: Thu, 23 May 2024 15:10:27 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 24 May 2023 01:49:18 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 173301
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

fonts.gstatic.com/s/montserrat/v25/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCtr6Hw5aXo.woff2

216.58.207.227

200 OK

13 kB

URL GET HTTP/3
fonts.gstatic.com/s/montserrat/v25/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCtr6Hw5aXo.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintA3:09:CB:6C:64:76:4B:58:32:D1:21:3E:F4:65:1F:DE:58:22:8F:D6
ValidityMon, 08 May 2023 08:24:48 GMT - Mon, 31 Jul 2023 08:24:47 GMT

File type
Web Open Font Format (Version 2), TrueType, length 12708, version 1.0\012- data
Size
13 kB (12708 bytes)
Hash
b4a68b1e743ee317eaaf0bbadd131571
f24f7823d4e3830c7cfa5bcb33733d2897c00f13
ddc148b8a0a27b1449fda6033f4a0defac9bd43210117b50d5d7ad1eda09f394

HTTP Headers

GET /s/montserrat/v25/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCtr6Hw5aXo.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://go.healthyliving.news
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 12708
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 May 2023 11:49:39 GMT
expires: Fri, 24 May 2024 11:49:39 GMT
cache-control: public, max-age=31536000
age: 98949
last-modified: Mon, 11 Jul 2022 18:55:59 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

fonts.gstatic.com/s/opensans/v35/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2

216.58.207.227

200 OK

48 kB

URL GET HTTP/3
fonts.gstatic.com/s/opensans/v35/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintA3:09:CB:6C:64:76:4B:58:32:D1:21:3E:F4:65:1F:DE:58:22:8F:D6
ValidityMon, 08 May 2023 08:24:48 GMT - Mon, 31 Jul 2023 08:24:47 GMT

File type
Web Open Font Format (Version 2), TrueType, length 48412, version 1.0\012- data
Size
48 kB (48412 bytes)
Hash
31a8297826cdcea344698ff952694a7f
4fa1ee4c471d1c05e9141855eec5ee09b898d594
7c7818c25a18e8a38553fcbcbc2ad0b5e964103a7d2e494f82815e3f70bf3fc5

HTTP Headers

GET /s/opensans/v35/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://go.healthyliving.news
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48412
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 May 2023 11:49:35 GMT
expires: Fri, 24 May 2024 11:49:35 GMT
cache-control: public, max-age=31536000
age: 98953
last-modified: Tue, 02 May 2023 15:08:53 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

www.youtube.com/s/player/bbe1b497/www-player.css

216.58.211.14

200 OK

49 kB

URL GET HTTP/3
www.youtube.com/s/player/bbe1b497/www-player.css
IP
216.58.211.14:443
ASN
#15169 GOOGLE

Requested by
https://www.youtube.com/embed/yGj-hjKMzgE?autoplay=0&modestbranding=1&controls=1&showinfo=0&rel=0&hd=1&wmode=transparent
Certificate
IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint08:73:2C:18:30:14:52:C3:CA:3E:02:79:65:B4:FE:90:AC:3F:3E:33
ValidityMon, 24 Apr 2023 11:56:06 GMT - Mon, 17 Jul 2023 11:56:05 GMT

File type
ASCII text, with very long lines (65536), with no line terminators
Size
49 kB (48702 bytes)
Hash
b8afa5d85a1bf60a05181715a1b9d405
5b3124b4a0cb3d14d9c7a69d2cecdfa24b475304
2da3463d43c823fbf9a6df6c58b0bca86f25083def66cd532f31b114b997df04

HTTP Headers

GET /s/player/bbe1b497/www-player.css HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/yGj-hjKMzgE?autoplay=0&modestbranding=1&controls=1&showinfo=0&rel=0&hd=1&wmode=transparent
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 48702
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 24 May 2023 15:05:50 GMT
expires: Thu, 23 May 2024 15:05:50 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 24 May 2023 01:49:18 GMT
content-type: text/css
vary: Accept-Encoding, Origin
age: 173578
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

www.youtube.com/s/player/bbe1b497/www-embed-player.vflset/www-embed-player.js

216.58.211.14

200 OK

94 kB

URL GET HTTP/3
www.youtube.com/s/player/bbe1b497/www-embed-player.vflset/www-embed-player.js
IP
216.58.211.14:443
ASN
#15169 GOOGLE

Requested by
https://www.youtube.com/embed/yGj-hjKMzgE?autoplay=0&modestbranding=1&controls=1&showinfo=0&rel=0&hd=1&wmode=transparent
Certificate
IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint08:73:2C:18:30:14:52:C3:CA:3E:02:79:65:B4:FE:90:AC:3F:3E:33
ValidityMon, 24 Apr 2023 11:56:06 GMT - Mon, 17 Jul 2023 11:56:05 GMT

File type
ASCII text, with very long lines (660)
Size
94 kB (94068 bytes)
Hash
84523cc509e7b9a1d46990d65185b9de
db4518d0142e239249d85d37875c4516501f710f
66c28207b52ebc8b2daba1a02dfdb35cba26b0538410e5b696805263d016c52b

HTTP Headers

GET /s/player/bbe1b497/www-embed-player.vflset/www-embed-player.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/yGj-hjKMzgE?autoplay=0&modestbranding=1&controls=1&showinfo=0&rel=0&hd=1&wmode=transparent
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 94068
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 24 May 2023 15:07:04 GMT
expires: Thu, 23 May 2024 15:07:04 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 24 May 2023 01:49:18 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 173504
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

www.youtube.com/s/player/bbe1b497/fetch-polyfill.vflset/fetch-polyfill.js

216.58.211.14

200 OK

2.6 kB

URL GET HTTP/3
www.youtube.com/s/player/bbe1b497/fetch-polyfill.vflset/fetch-polyfill.js
IP
216.58.211.14:443
ASN
#15169 GOOGLE

Requested by
https://www.youtube.com/embed/yGj-hjKMzgE?autoplay=0&modestbranding=1&controls=1&showinfo=0&rel=0&hd=1&wmode=transparent
Certificate
IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint08:73:2C:18:30:14:52:C3:CA:3E:02:79:65:B4:FE:90:AC:3F:3E:33
ValidityMon, 24 Apr 2023 11:56:06 GMT - Mon, 17 Jul 2023 11:56:05 GMT

File type
Algol 68 source text\012- Pascal source, ASCII text, with very long lines (552)
Size
2.6 kB (2625 bytes)
Hash
949e94fed78d252b728cdc2aa6ddc56a
d2bfdd653bb3da592097fb4ddb6eabbdc3060562
ac8177161c3038b07597ec544de3c00f46e1a0aa6b4b4c045ff0495553cc5069

HTTP Headers

GET /s/player/bbe1b497/fetch-polyfill.vflset/fetch-polyfill.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/yGj-hjKMzgE?autoplay=0&modestbranding=1&controls=1&showinfo=0&rel=0&hd=1&wmode=transparent
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 2625
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 24 May 2023 15:07:04 GMT
expires: Thu, 23 May 2024 15:07:04 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 24 May 2023 01:49:18 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 173504
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2

216.58.207.227

200 OK

15 kB

URL GET HTTP/3
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://www.youtube.com/embed/yGj-hjKMzgE?autoplay=0&modestbranding=1&controls=1&showinfo=0&rel=0&hd=1&wmode=transparent
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintA3:09:CB:6C:64:76:4B:58:32:D1:21:3E:F4:65:1F:DE:58:22:8F:D6
ValidityMon, 08 May 2023 08:24:48 GMT - Mon, 31 Jul 2023 08:24:47 GMT

File type
Web Open Font Format (Version 2), TrueType, length 15344, version 1.0\012- data
Size
15 kB (15344 bytes)
Hash
5d4aeb4e5f5ef754e307d7ffaef688bd
06db651cdf354c64a7383ea9c77024ef4fb4cef8
3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc

HTTP Headers

GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 23 May 2023 17:31:32 GMT
expires: Wed, 22 May 2024 17:31:32 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
age: 251236
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

app.clickfunnels.com/userevents/?funnel_id=eGQwRk5oVG9XMG8yZkE5M1RlTDZDUT09LS1SUzJiemxQSEZ6aW44a1NURnIwaXdnPT0%3D--20d095c924fa6d06dfe7dd2d7bfd3e2c12d3b6cb&page_id=eDlzb0k2UlN4YngyODl5VDBmb1VWZz09LS1rc3NMN0RrM1l0RzlDbGszbk45OGJRPT0%3D--15a216b5b278c5d8641b3b282bcf5f474cb94e29&funnel_step_id=V2cwY2o3WGhxSWROVVc3c3d3b1JUUT09LS02VktHMTE3eGRFeE5CMWIwVkYwWWpBPT0%3D--63d533e43b2807665c769246eeab319f6709212d&user_id=c1o4blA3dUdUTzlGZVBmcEoxWG9lQT09LS1KbDlnL1U4K01ZaUFxbTRPb0dzM2pnPT0%3D--8a995a6f087a77401d446b0431118bc5ee2ebd40&account_id=VGFQcDR2RGZoN0d0NWdZRWJxUFBCUT09LS1Cdkhuek04OU1IeWhNZW5BOEJKakZ3PT0%3D--224da7262c8bb34d7ef55ae5a77b15d0d0fdbdfa&page_code=NDk5OTU5ODk%3D&mode_id=1&time_zone=Mountain%20Time%20(US%20%26%20Canada)&app_domain=app.clickfunnels.com&aff_sub2=1026e7a997a96cccc73ee63703b94a&aff_sub3=&aff_sub=1171&affiliate_id=1005554&cf_affiliate_id=&content=&medium=&name=&source=&term=&client_width=1280&type=Userevents::PageviewsCreatedSummary&nonce=c4c446c0-b917-49c9-a753-c1efb3bd0430&url=https%3A%2F%2Fgo.healthyliving.news%2Fsales-page-499959901627916546826%3Faff_sub%3D1171%26aff_sub2%3D1026e7a997a96cccc73ee63703b94a%26affiliate_id%3D1005554%26click_id%3D%26cookiepreview%3Dfalse%26ho_aff_id%3D1171%26noautoplay%3Dfalse%26nopopup%3Dfalse%26trans_id%3D1026e7a997a96cccc73ee63703b94a

104.16.12.194

202 Accepted

16 kB

URL GET HTTP/2
app.clickfunnels.com/userevents/?funnel_id=eGQwRk5oVG9XMG8yZkE5M1RlTDZDUT09LS1SUzJiemxQSEZ6aW44a1NURnIwaXdnPT0%3D--20d095c924fa6d06dfe7dd2d7bfd3e2c12d3b6cb&page_id=eDlzb0k2UlN4YngyODl5VDBmb1VWZz09LS1rc3NMN0RrM1l0RzlDbGszbk45OGJRPT0%3D--15a216b5b278c5d8641b3b282bcf5f474cb94e29&funnel_step_id=V2cwY2o3WGhxSWROVVc3c3d3b1JUUT09LS02VktHMTE3eGRFeE5CMWIwVkYwWWpBPT0%3D--63d533e43b2807665c769246eeab319f6709212d&user_id=c1o4blA3dUdUTzlGZVBmcEoxWG9lQT09LS1KbDlnL1U4K01ZaUFxbTRPb0dzM2pnPT0%3D--8a995a6f087a77401d446b0431118bc5ee2ebd40&account_id=VGFQcDR2RGZoN0d0NWdZRWJxUFBCUT09LS1Cdkhuek04OU1IeWhNZW5BOEJKakZ3PT0%3D--224da7262c8bb34d7ef55ae5a77b15d0d0fdbdfa&page_code=NDk5OTU5ODk%3D&mode_id=1&time_zone=Mountain%20Time%20(US%20%26%20Canada)&app_domain=app.clickfunnels.com&aff_sub2=1026e7a997a96cccc73ee63703b94a&aff_sub3=&aff_sub=1171&affiliate_id=1005554&cf_affiliate_id=&content=&medium=&name=&source=&term=&client_width=1280&type=Userevents::PageviewsCreatedSummary&nonce=c4c446c0-b917-49c9-a753-c1efb3bd0430&url=https%3A%2F%2Fgo.healthyliving.news%2Fsales-page-499959901627916546826%3Faff_sub%3D1171%26aff_sub2%3D1026e7a997a96cccc73ee63703b94a%26affiliate_id%3D1005554%26click_id%3D%26cookiepreview%3Dfalse%26ho_aff_id%3D1171%26noautoplay%3Dfalse%26nopopup%3Dfalse%26trans_id%3D1026e7a997a96cccc73ee63703b94a
IP
104.16.12.194:443
ASN
#13335 CLOUDFLARENET

Requested by
https://go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint76:93:26:C7:54:DD:C9:C2:34:D3:16:AF:2B:26:16:E1:9A:02:43:B1
ValiditySat, 23 Jul 2022 00:00:00 GMT - Sun, 23 Jul 2023 23:59:59 GMT

File type
Web Open Font Format (Version 2), TrueType, length 15552, version 1.0\012- data
Size
16 kB (15552 bytes)
Hash
285467176f7fe6bb6a9c6873b3dad2cc
ea04e4ff5142ddd69307c183def721a160e0a64e
5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7

HTTP Headers

GET /userevents/?funnel_id=eGQwRk5oVG9XMG8yZkE5M1RlTDZDUT09LS1SUzJiemxQSEZ6aW44a1NURnIwaXdnPT0%3D--20d095c924fa6d06dfe7dd2d7bfd3e2c12d3b6cb&page_id=eDlzb0k2UlN4YngyODl5VDBmb1VWZz09LS1rc3NMN0RrM1l0RzlDbGszbk45OGJRPT0%3D--15a216b5b278c5d8641b3b282bcf5f474cb94e29&funnel_step_id=V2cwY2o3WGhxSWROVVc3c3d3b1JUUT09LS02VktHMTE3eGRFeE5CMWIwVkYwWWpBPT0%3D--63d533e43b2807665c769246eeab319f6709212d&user_id=c1o4blA3dUdUTzlGZVBmcEoxWG9lQT09LS1KbDlnL1U4K01ZaUFxbTRPb0dzM2pnPT0%3D--8a995a6f087a77401d446b0431118bc5ee2ebd40&account_id=VGFQcDR2RGZoN0d0NWdZRWJxUFBCUT09LS1Cdkhuek04OU1IeWhNZW5BOEJKakZ3PT0%3D--224da7262c8bb34d7ef55ae5a77b15d0d0fdbdfa&page_code=NDk5OTU5ODk%3D&mode_id=1&time_zone=Mountain%20Time%20(US%20%26%20Canada)&app_domain=app.clickfunnels.com&aff_sub2=1026e7a997a96cccc73ee63703b94a&aff_sub3=&aff_sub=1171&affiliate_id=1005554&cf_affiliate_id=&content=&medium=&name=&source=&term=&client_width=1280&type=Userevents::PageviewsCreatedSummary&nonce=c4c446c0-b917-49c9-a753-c1efb3bd0430&url=https%3A%2F%2Fgo.healthyliving.news%2Fsales-page-499959901627916546826%3Faff_sub%3D1171%26aff_sub2%3D1026e7a997a96cccc73ee63703b94a%26affiliate_id%3D1005554%26click_id%3D%26cookiepreview%3Dfalse%26ho_aff_id%3D1171%26noautoplay%3Dfalse%26nopopup%3Dfalse%26trans_id%3D1026e7a997a96cccc73ee63703b94a HTTP/1.1
Host: app.clickfunnels.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://go.healthyliving.news
DNT: 1
Connection: keep-alive
Referer: https://go.healthyliving.news/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 202 Accepted
date: Fri, 26 May 2023 15:18:48 GMT
content-type: text/html
cf-ray: 7cd6fe297b12b4f4-OSL
cf-cache-status: BYPASS
access-control-allow-origin: *
cache-control: no-cache, no-store
strict-transport-security: max-age=0
vary: Accept-Encoding
access-control-allow-credentials: true
access-control-allow-headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization
access-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
access-control-max-age: 1728000
access-control-request-method: *
pragma: no-cache
status: 202 Accepted
x-frame-options: ALLOWALL
x-powered-by: Phusion Passenger Enterprise 6.0.7
x-rack-cache: miss
x-request-id: 9c6426f2660919968edb4fa1eddd1b1f
x-runtime: 0.036592
set-cookie: __cf_bm=XG3.F740NhYa7vwbYScnvua3zCL7amaezyg6MVgYvHk-1685114328-0-Acrq4jnrkfXufQZhUDE0ihnA75MH3czWPaxYoNqKr5drk2oFWPgtYzHMc1AKIX0eHdNiZ8G1Qvku1e6vEOJutGFOp9TDv4A1Qh2i1F4fcxo4; path=/; expires=Fri, 26-May-23 15:48:48 GMT; domain=.clickfunnels.com; HttpOnly; Secure; SameSite=None
server: cloudflare
X-Firefox-Spdy: h2

www.youtube.com/s/player/bbe1b497/player_ias.vflset/en_US/base.js

216.58.211.14

200 OK

758 kB

URL GET HTTP/3
www.youtube.com/s/player/bbe1b497/player_ias.vflset/en_US/base.js
IP
216.58.211.14:443
ASN
#15169 GOOGLE

Requested by
https://www.youtube.com/embed/yGj-hjKMzgE?autoplay=0&modestbranding=1&controls=1&showinfo=0&rel=0&hd=1&wmode=transparent
Certificate
IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint08:73:2C:18:30:14:52:C3:CA:3E:02:79:65:B4:FE:90:AC:3F:3E:33
ValidityMon, 24 Apr 2023 11:56:06 GMT - Mon, 17 Jul 2023 11:56:05 GMT

File type
ASCII text, with very long lines (555)
Size
758 kB (757956 bytes)
Hash
ef12fba4202719e6bf955d5497a856e3
7c8cf3c348e2ba17bec5cd24d6f57631d348add4
0ad4c72a41a087c98857745f49535143b8106429453b919703962c4367a9b68f

HTTP Headers

GET /s/player/bbe1b497/player_ias.vflset/en_US/base.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/yGj-hjKMzgE?autoplay=0&modestbranding=1&controls=1&showinfo=0&rel=0&hd=1&wmode=transparent
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
content-encoding: gzip
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 757956
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 24 May 2023 15:10:27 GMT
expires: Thu, 23 May 2024 15:10:27 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 24 May 2023 01:49:18 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 173301
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a

104.16.15.194

200 OK

119 kB

URL User Request GET HTTP/2
go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a
IP
104.16.15.194:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerCloudflare, Inc.
Subjectgo.healthyliving.news
Fingerprint13:13:61:C0:89:7F:8B:90:12:04:F7:B1:AC:C6:50:50:AB:4F:11:DE
ValidityFri, 12 Aug 2022 00:00:00 GMT - Sat, 12 Aug 2023 23:59:59 GMT

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (26570)
Size
119 kB (119033 bytes)
Hash
e374a9525698079f293a4ef967f6065a
dd7059d634301044cfa02b63ea32294c5d1f6ad4
86f39b3bd68c76a4222f9e551cab7cda735aed41d821b403a4befa7988b16436

HTTP Headers

GET /sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a HTTP/1.1
Host: go.healthyliving.news
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __cf_bm=06SNOrEO60F0MjY2MXcWay_qrAbj.gEwH49MXZXh1UY-1685114325-0-AWf+qf+uYXF2Psdo1hh0osvKKpi6ctxplVI+8K/6mZkOrIQBo0L9yBO1PdrBARZXoKTtO/9V77pMLqzXO1Thnyz1D4GAUMZ+wrp9V8EftWsK
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 26 May 2023 15:18:46 GMT
content-type: text/html; charset=utf-8
cf-ray: 7cd6fe18dcee1bfe-OSL
cf-cache-status: MISS
access-control-allow-origin: *
cache-control: max-age=60, public, s-maxage=600, r-maxage=10
last-modified: Fri, 10 Mar 2023 22:28:18 GMT
strict-transport-security: max-age=0
vary: Accept-Encoding
access-control-allow-credentials: true
access-control-allow-headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization
access-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
access-control-max-age: 1728000
status: 200 OK
x-content-digest: 620ed73a32ca1e64eded59d15a98170146482084
x-frame-options: ALLOWALL
x-powered-by: Phusion Passenger Enterprise 6.0.7
x-rack-cache: miss, store
x-request-id: 3dfff21f7c4e5174c771c33557c98305
x-runtime: 0.449714
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2

app.clickfunnels.com/userevents/?funnel_id=eGQwRk5oVG9XMG8yZkE5M1RlTDZDUT09LS1SUzJiemxQSEZ6aW44a1NURnIwaXdnPT0%3D--20d095c924fa6d06dfe7dd2d7bfd3e2c12d3b6cb&page_id=eDlzb0k2UlN4YngyODl5VDBmb1VWZz09LS1rc3NMN0RrM1l0RzlDbGszbk45OGJRPT0%3D--15a216b5b278c5d8641b3b282bcf5f474cb94e29&funnel_step_id=V2cwY2o3WGhxSWROVVc3c3d3b1JUUT09LS02VktHMTE3eGRFeE5CMWIwVkYwWWpBPT0%3D--63d533e43b2807665c769246eeab319f6709212d&user_id=c1o4blA3dUdUTzlGZVBmcEoxWG9lQT09LS1KbDlnL1U4K01ZaUFxbTRPb0dzM2pnPT0%3D--8a995a6f087a77401d446b0431118bc5ee2ebd40&account_id=VGFQcDR2RGZoN0d0NWdZRWJxUFBCUT09LS1Cdkhuek04OU1IeWhNZW5BOEJKakZ3PT0%3D--224da7262c8bb34d7ef55ae5a77b15d0d0fdbdfa&page_code=NDk5OTU5ODk%3D&mode_id=1&time_zone=Mountain%20Time%20(US%20%26%20Canada)&app_domain=app.clickfunnels.com&aff_sub2=1026e7a997a96cccc73ee63703b94a&aff_sub3=&aff_sub=1171&affiliate_id=1005554&cf_affiliate_id=&content=&medium=&name=&source=&term=&client_width=1280&type=Userevents::UniquePageviewsCreatedSummary&nonce=ff8426a9-bcf5-41ae-83ad-b47373b292a4&url=https%3A%2F%2Fgo.healthyliving.news%2Fsales-page-499959901627916546826%3Faff_sub%3D1171%26aff_sub2%3D1026e7a997a96cccc73ee63703b94a%26affiliate_id%3D1005554%26click_id%3D%26cookiepreview%3Dfalse%26ho_aff_id%3D1171%26noautoplay%3Dfalse%26nopopup%3Dfalse%26trans_id%3D1026e7a997a96cccc73ee63703b94a

104.16.12.194

202 Accepted

2.2 kB

URL GET HTTP/2
app.clickfunnels.com/userevents/?funnel_id=eGQwRk5oVG9XMG8yZkE5M1RlTDZDUT09LS1SUzJiemxQSEZ6aW44a1NURnIwaXdnPT0%3D--20d095c924fa6d06dfe7dd2d7bfd3e2c12d3b6cb&page_id=eDlzb0k2UlN4YngyODl5VDBmb1VWZz09LS1rc3NMN0RrM1l0RzlDbGszbk45OGJRPT0%3D--15a216b5b278c5d8641b3b282bcf5f474cb94e29&funnel_step_id=V2cwY2o3WGhxSWROVVc3c3d3b1JUUT09LS02VktHMTE3eGRFeE5CMWIwVkYwWWpBPT0%3D--63d533e43b2807665c769246eeab319f6709212d&user_id=c1o4blA3dUdUTzlGZVBmcEoxWG9lQT09LS1KbDlnL1U4K01ZaUFxbTRPb0dzM2pnPT0%3D--8a995a6f087a77401d446b0431118bc5ee2ebd40&account_id=VGFQcDR2RGZoN0d0NWdZRWJxUFBCUT09LS1Cdkhuek04OU1IeWhNZW5BOEJKakZ3PT0%3D--224da7262c8bb34d7ef55ae5a77b15d0d0fdbdfa&page_code=NDk5OTU5ODk%3D&mode_id=1&time_zone=Mountain%20Time%20(US%20%26%20Canada)&app_domain=app.clickfunnels.com&aff_sub2=1026e7a997a96cccc73ee63703b94a&aff_sub3=&aff_sub=1171&affiliate_id=1005554&cf_affiliate_id=&content=&medium=&name=&source=&term=&client_width=1280&type=Userevents::UniquePageviewsCreatedSummary&nonce=ff8426a9-bcf5-41ae-83ad-b47373b292a4&url=https%3A%2F%2Fgo.healthyliving.news%2Fsales-page-499959901627916546826%3Faff_sub%3D1171%26aff_sub2%3D1026e7a997a96cccc73ee63703b94a%26affiliate_id%3D1005554%26click_id%3D%26cookiepreview%3Dfalse%26ho_aff_id%3D1171%26noautoplay%3Dfalse%26nopopup%3Dfalse%26trans_id%3D1026e7a997a96cccc73ee63703b94a
IP
104.16.12.194:443
ASN
#13335 CLOUDFLARENET

Requested by
https://go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint76:93:26:C7:54:DD:C9:C2:34:D3:16:AF:2B:26:16:E1:9A:02:43:B1
ValiditySat, 23 Jul 2022 00:00:00 GMT - Sun, 23 Jul 2023 23:59:59 GMT

File type
PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced\012- data
Size
2.2 kB (2171 bytes)
Hash
fa03ebf1cc95f66728b8f44ed2d925f6
0a7f8edfc63c05e765d908a4424b871e82635913
56fd6e177ff0c4c0e935e672dd2db40542ff3aeb2b0f3a37361bd338e44dcc09

HTTP Headers

GET /userevents/?funnel_id=eGQwRk5oVG9XMG8yZkE5M1RlTDZDUT09LS1SUzJiemxQSEZ6aW44a1NURnIwaXdnPT0%3D--20d095c924fa6d06dfe7dd2d7bfd3e2c12d3b6cb&page_id=eDlzb0k2UlN4YngyODl5VDBmb1VWZz09LS1rc3NMN0RrM1l0RzlDbGszbk45OGJRPT0%3D--15a216b5b278c5d8641b3b282bcf5f474cb94e29&funnel_step_id=V2cwY2o3WGhxSWROVVc3c3d3b1JUUT09LS02VktHMTE3eGRFeE5CMWIwVkYwWWpBPT0%3D--63d533e43b2807665c769246eeab319f6709212d&user_id=c1o4blA3dUdUTzlGZVBmcEoxWG9lQT09LS1KbDlnL1U4K01ZaUFxbTRPb0dzM2pnPT0%3D--8a995a6f087a77401d446b0431118bc5ee2ebd40&account_id=VGFQcDR2RGZoN0d0NWdZRWJxUFBCUT09LS1Cdkhuek04OU1IeWhNZW5BOEJKakZ3PT0%3D--224da7262c8bb34d7ef55ae5a77b15d0d0fdbdfa&page_code=NDk5OTU5ODk%3D&mode_id=1&time_zone=Mountain%20Time%20(US%20%26%20Canada)&app_domain=app.clickfunnels.com&aff_sub2=1026e7a997a96cccc73ee63703b94a&aff_sub3=&aff_sub=1171&affiliate_id=1005554&cf_affiliate_id=&content=&medium=&name=&source=&term=&client_width=1280&type=Userevents::UniquePageviewsCreatedSummary&nonce=ff8426a9-bcf5-41ae-83ad-b47373b292a4&url=https%3A%2F%2Fgo.healthyliving.news%2Fsales-page-499959901627916546826%3Faff_sub%3D1171%26aff_sub2%3D1026e7a997a96cccc73ee63703b94a%26affiliate_id%3D1005554%26click_id%3D%26cookiepreview%3Dfalse%26ho_aff_id%3D1171%26noautoplay%3Dfalse%26nopopup%3Dfalse%26trans_id%3D1026e7a997a96cccc73ee63703b94a HTTP/1.1
Host: app.clickfunnels.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://go.healthyliving.news
DNT: 1
Connection: keep-alive
Referer: https://go.healthyliving.news/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 202 Accepted
date: Fri, 26 May 2023 15:18:48 GMT
content-type: text/html
cf-ray: 7cd6fe297b15b4f4-OSL
cf-cache-status: BYPASS
access-control-allow-origin: *
cache-control: no-cache, no-store
strict-transport-security: max-age=0
vary: Accept-Encoding
access-control-allow-credentials: true
access-control-allow-headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization
access-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
access-control-max-age: 1728000
access-control-request-method: *
pragma: no-cache
status: 202 Accepted
x-frame-options: ALLOWALL
x-powered-by: Phusion Passenger Enterprise 6.0.7
x-rack-cache: miss
x-request-id: 41ddd0191fbc8f5d99eb417ad6ca32a8
x-runtime: 0.045996
set-cookie: __cf_bm=4hNcehgEjCGTa4VTSISwMAZPYE.t9Ih9XkyO7mORU9s-1685114328-0-AQS/qMuDHWw9q7kPDr9d3S9y1WmibFNj3/AqrsEDPmm+jf5szwg9padtONuHXu06IKh7G0rxLs2b3NXm42+rtmC4legLCShWyXfwvpD5ippi; path=/; expires=Fri, 26-May-23 15:48:48 GMT; domain=.clickfunnels.com; HttpOnly; Secure; SameSite=None
server: cloudflare
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.131

472 B

URL
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
13b26f5afbecdd78566b3b54ab77caed
6b16c5910ad9ea57236d6954290be6fce8f62c6b
9fd32213a6b40b68ac06d5d6bf9c6ab0793f7f0464407b348c6e290f91870a90

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 26 May 2023 15:18:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ocsp.pki.goog/gts1c3

142.250.74.131

472 B

URL
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
13b26f5afbecdd78566b3b54ab77caed
6b16c5910ad9ea57236d6954290be6fce8f62c6b
9fd32213a6b40b68ac06d5d6bf9c6ab0793f7f0464407b348c6e290f91870a90

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 26 May 2023 15:18:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

go.healthyliving.news/images/background.png?_unique=0.3479108381261736&_uniqueVisitorID=null&_type=WINDOW&_location=ttps%3A//go.healthyliving.news/sales-page-499959901627916546826%3Faff_sub%3D1171%26aff_sub2%3D1026e7a997a96cccc73ee63703b94a%26affiliate_id%3D1005554%26click_id%3D%26cookiepreview%3Dfalse%26ho_aff_id%3D1171%26noautoplay%3Dfalse%26nopopup%3Dfalse%26trans_id%3D1026e7a997a96cccc73ee63703b94a&_title=Pure%20Xanthin&_key=kt9q4hed&_page_key=2d0wg8m7714sifdl&_fid=11241452&_fspos=1&_fvrs=5&_funnel_stat=1&_location=https://go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a&_referrer=&affiliate_id=1005554&aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a

104.16.15.194

200 OK

89 B

URL GET HTTP/2
go.healthyliving.news/images/background.png?_unique=0.3479108381261736&_uniqueVisitorID=null&_type=WINDOW&_location=ttps%3A//go.healthyliving.news/sales-page-499959901627916546826%3Faff_sub%3D1171%26aff_sub2%3D1026e7a997a96cccc73ee63703b94a%26affiliate_id%3D1005554%26click_id%3D%26cookiepreview%3Dfalse%26ho_aff_id%3D1171%26noautoplay%3Dfalse%26nopopup%3Dfalse%26trans_id%3D1026e7a997a96cccc73ee63703b94a&_title=Pure%20Xanthin&_key=kt9q4hed&_page_key=2d0wg8m7714sifdl&_fid=11241452&_fspos=1&_fvrs=5&_funnel_stat=1&_location=https://go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a&_referrer=&affiliate_id=1005554&aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a
IP
104.16.15.194:443
ASN
#13335 CLOUDFLARENET

Requested by
https://go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a
Certificate
IssuerCloudflare, Inc.
Subjectgo.healthyliving.news
Fingerprint13:13:61:C0:89:7F:8B:90:12:04:F7:B1:AC:C6:50:50:AB:4F:11:DE
ValidityFri, 12 Aug 2022 00:00:00 GMT - Sat, 12 Aug 2023 23:59:59 GMT

File type
ASCII text, with no line terminators
Size
89 B (89 bytes)
Hash
81f1d72b5e2955c92dddccf0e7fb0ac7
fe91504ba21995c82d281f545c5d46333f584297
285864ce9546f0cb728af0a5822d3d7588ee9f4f651d37d27af8e4521a1b74d1

HTTP Headers

GET /images/background.png?_unique=0.3479108381261736&_uniqueVisitorID=null&_type=WINDOW&_location=ttps%3A//go.healthyliving.news/sales-page-499959901627916546826%3Faff_sub%3D1171%26aff_sub2%3D1026e7a997a96cccc73ee63703b94a%26affiliate_id%3D1005554%26click_id%3D%26cookiepreview%3Dfalse%26ho_aff_id%3D1171%26noautoplay%3Dfalse%26nopopup%3Dfalse%26trans_id%3D1026e7a997a96cccc73ee63703b94a&_title=Pure%20Xanthin&_key=kt9q4hed&_page_key=2d0wg8m7714sifdl&_fid=11241452&_fspos=1&_fvrs=5&_funnel_stat=1&_location=https://go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a&_referrer=&affiliate_id=1005554&aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a HTTP/1.1
Host: go.healthyliving.news
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a
Cookie: __cf_bm=06SNOrEO60F0MjY2MXcWay_qrAbj.gEwH49MXZXh1UY-1685114325-0-AWf+qf+uYXF2Psdo1hh0osvKKpi6ctxplVI+8K/6mZkOrIQBo0L9yBO1PdrBARZXoKTtO/9V77pMLqzXO1Thnyz1D4GAUMZ+wrp9V8EftWsK; cf:aff_sub2=1026e7a997a96cccc73ee63703b94a; cf:aff_sub3=; cf:aff_sub=1171; cf:affiliate_id=1005554; cf:cf_affiliate_id=; cf:content=; cf:medium=; cf:name=; cf:source=; cf:term=; cf:NDk5OTU5ODk=:visited=true; cf:visitor_id=82cdc50d-4ffe-4a4c-81e4-7fc3da731bf4; aff_sub=1171; aff_sub2=1026e7a997a96cccc73ee63703b94a; affiliate_id=1005554; click_id=; cookiepreview=false; ho_aff_id=1171; noautoplay=false; nopopup=false; trans_id=1026e7a997a96cccc73ee63703b94a; addevent_track_cookie=5e16389b-4048-4951-d537-90dd41784e48
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 26 May 2023 15:18:49 GMT
content-type: text/javascript; charset=utf-8
cf-ray: 7cd6fe3008771bfe-OSL
cf-cache-status: DYNAMIC
access-control-allow-origin: *
cache-control: no-cache, no-store, private
strict-transport-security: max-age=0
access-control-allow-credentials: true
access-control-allow-headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization
access-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
access-control-max-age: 1728000
access-control-request-method: *
status: 200 OK
x-frame-options: ALLOWALL
x-powered-by: Phusion Passenger Enterprise 6.0.7
x-rack-cache: miss
x-request-id: cd66c04629cebd35d55ff7a260646392
x-runtime: 0.021090
vary: Accept-Encoding
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2

jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create

172.217.21.170

200 OK

0 B

URL POST HTTP/2
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
IP
172.217.21.170:443
ASN
#15169 GOOGLE

Requested by
https://www.youtube.com/embed/yGj-hjKMzgE?autoplay=0&modestbranding=1&controls=1&showinfo=0&rel=0&hd=1&wmode=transparent
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint9B:D0:53:C4:55:9D:41:A4:94:03:4A:2B:6A:5B:57:EB:EB:A5:F0:4A
ValidityMon, 24 Apr 2023 12:00:43 GMT - Mon, 17 Jul 2023 12:00:42 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

OPTIONS /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-goog-api-key,x-user-agent
Referer: https://www.youtube.com/
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
access-control-allow-origin: https://www.youtube.com
vary: origin, referer, x-origin
access-control-allow-credentials: true
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
access-control-allow-headers: content-type,x-goog-api-key,x-user-agent
access-control-max-age: 3600
date: Fri, 26 May 2023 15:18:49 GMT
content-type: text/html
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.131

472 B

URL
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
78e1a9fe9065cef5724824348a0feae3
4079a4c6fc7b0ffe32aef9e5c2fd6a88a3f7d7e3
571c09668b6d3db54b5edd5ac85fce71b0b8b7b20530621d61133bda637a7b66

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 26 May 2023 15:18:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create

172.217.21.170

200 OK

32 kB

URL POST HTTP/2
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
IP
172.217.21.170:443
ASN
#15169 GOOGLE

Requested by
https://www.youtube.com/embed/yGj-hjKMzgE?autoplay=0&modestbranding=1&controls=1&showinfo=0&rel=0&hd=1&wmode=transparent
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint9B:D0:53:C4:55:9D:41:A4:94:03:4A:2B:6A:5B:57:EB:EB:A5:F0:4A
ValidityMon, 24 Apr 2023 12:00:43 GMT - Mon, 17 Jul 2023 12:00:42 GMT

File type
JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Size
32 kB (31614 bytes)
Hash
6d42cbddcf15400bb730711a60f8b2fe
12df5385a19afa35c0171046b72f88aba764a201
d511532fa9fd2710b84722e0589e412d633c5105ce4ef44e4c1dd2ee56e9a958

HTTP Headers

POST /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 24
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Fri, 26 May 2023 15:18:49 GMT
server: ESF
cache-control: private
content-length: 31614
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

www.youtube.com/s/player/bbe1b497/player_ias.vflset/en_US/remote.js

216.58.211.14

200 OK

33 kB

URL GET HTTP/3
www.youtube.com/s/player/bbe1b497/player_ias.vflset/en_US/remote.js
IP
216.58.211.14:443
ASN
#15169 GOOGLE

Requested by
https://www.youtube.com/embed/yGj-hjKMzgE?autoplay=0&modestbranding=1&controls=1&showinfo=0&rel=0&hd=1&wmode=transparent
Certificate
IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint08:73:2C:18:30:14:52:C3:CA:3E:02:79:65:B4:FE:90:AC:3F:3E:33
ValidityMon, 24 Apr 2023 11:56:06 GMT - Mon, 17 Jul 2023 11:56:05 GMT

File type
ASCII text, with very long lines (538)
Size
33 kB (33435 bytes)
Hash
7838e965c560882a5e57df7b31977db8
b01998f38298cca57b49943572a66678c5021c8c
12e41f82a5a1b8b2ef61b7001a78df3dd1d387c0da7e884144530f479f6ea86e

HTTP Headers

GET /s/player/bbe1b497/player_ias.vflset/en_US/remote.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/yGj-hjKMzgE?autoplay=0&modestbranding=1&controls=1&showinfo=0&rel=0&hd=1&wmode=transparent
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 33435
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 24 May 2023 15:10:31 GMT
expires: Thu, 23 May 2024 15:10:31 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 24 May 2023 01:49:18 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 173298
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

www.youtube.com/s/player/bbe1b497/player_ias.vflset/en_US/embed.js

216.58.211.14

200 OK

8.3 kB

URL GET HTTP/3
www.youtube.com/s/player/bbe1b497/player_ias.vflset/en_US/embed.js
IP
216.58.211.14:443
ASN
#15169 GOOGLE

Requested by
https://www.youtube.com/embed/yGj-hjKMzgE?autoplay=0&modestbranding=1&controls=1&showinfo=0&rel=0&hd=1&wmode=transparent
Certificate
IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint08:73:2C:18:30:14:52:C3:CA:3E:02:79:65:B4:FE:90:AC:3F:3E:33
ValidityMon, 24 Apr 2023 11:56:06 GMT - Mon, 17 Jul 2023 11:56:05 GMT

File type
ASCII text, with very long lines (3391)
Size
8.3 kB (8266 bytes)
Hash
37bbc7c6c5db9247aee64637c530554f
eddd9d2f6f1b869565c8f7a48d13a9af50745a11
ee317b545c5822bf3e3ac29b92bbc9a0dcd3d7c2ba0395aa8f4d9eae0b2df7c6

HTTP Headers

GET /s/player/bbe1b497/player_ias.vflset/en_US/embed.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/yGj-hjKMzgE?autoplay=0&modestbranding=1&controls=1&showinfo=0&rel=0&hd=1&wmode=transparent
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 8266
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 24 May 2023 15:10:31 GMT
expires: Thu, 23 May 2024 15:10:31 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 24 May 2023 01:49:18 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 173298
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

i.ytimg.com/vi/yGj-hjKMzgE/maxresdefault.jpg?sqp=-oaymwEmCIAKENAF8quKqQMa8AEB-AHUBoAC4AOKAgwIABABGHIgTCg1MA8=&rs=AOn4CLCD0IXFX7eA_8UeS4ZM-brObZKmgQ

142.250.74.150

200 OK

50 kB

URL GET HTTP/2
i.ytimg.com/vi/yGj-hjKMzgE/maxresdefault.jpg?sqp=-oaymwEmCIAKENAF8quKqQMa8AEB-AHUBoAC4AOKAgwIABABGHIgTCg1MA8=&rs=AOn4CLCD0IXFX7eA_8UeS4ZM-brObZKmgQ
IP
142.250.74.150:443
ASN
#15169 GOOGLE

Requested by
https://www.youtube.com/embed/yGj-hjKMzgE?autoplay=0&modestbranding=1&controls=1&showinfo=0&rel=0&hd=1&wmode=transparent
Certificate
IssuerGoogle Trust Services LLC
Subjectedgestatic.com
FingerprintF9:E1:B3:65:3F:5D:36:FF:06:4D:60:C1:A3:AF:28:24:76:8C:35:87
ValidityMon, 24 Apr 2023 11:56:03 GMT - Mon, 17 Jul 2023 11:56:02 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1280x720, components 3\012- data
Size
50 kB (50538 bytes)
Hash
3d8fc353b635d37c627d5a164f72de12
13f4a4dd60cb49c63c9dd8434c1e3342f82dff3c
2053b21af447068a8cd28ce643175495eb8779e674ebe11c8e6b1932c5661c83

HTTP Headers

GET /vi/yGj-hjKMzgE/maxresdefault.jpg?sqp=-oaymwEmCIAKENAF8quKqQMa8AEB-AHUBoAC4AOKAgwIABABGHIgTCg1MA8=&rs=AOn4CLCD0IXFX7eA_8UeS4ZM-brObZKmgQ HTTP/1.1
Host: i.ytimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
timing-allow-origin: *
content-length: 50538
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 26 May 2023 15:18:49 GMT
expires: Fri, 26 May 2023 17:18:49 GMT
cache-control: public, max-age=7200
etag: "0"
content-type: image/jpeg
vary: Origin
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.131

472 B

URL
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
fcc0fbfedf5fb4bfe4e8802157c276ca
c18de9d7e09a6a41fff7b29406b5c0fbb922da0a
35c8ff8c2bafc2831fbe5196b26549342b5b692732bc7191b7b204298e6476e5

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 26 May 2023 15:18:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ocsp.pki.goog/gts1c3

142.250.74.131

472 B

URL
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
7b4f0e82f60c5979066a51f5cb5697c2
2579c88361435f54d903d7530624039287239b05
be1ef9c9dd1dbb6fefd8378e573821dd2d2964634636c285c9f7e4ef104ab6d8

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 26 May 2023 15:18:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

go.healthyliving.news/vendor.js

104.16.15.194

200 OK

8.5 kB

URL GET HTTP/2
go.healthyliving.news/vendor.js
IP
104.16.15.194:443
ASN
#13335 CLOUDFLARENET

Requested by
https://go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a
Certificate
IssuerCloudflare, Inc.
Subjectgo.healthyliving.news
Fingerprint13:13:61:C0:89:7F:8B:90:12:04:F7:B1:AC:C6:50:50:AB:4F:11:DE
ValidityFri, 12 Aug 2022 00:00:00 GMT - Sat, 12 Aug 2023 23:59:59 GMT

File type
Unicode text, UTF-8 text
Size
8.5 kB (8530 bytes)
Hash
bf2a8a168c0be1544c34f363c276586e
581e49c9b7bdd06dab54c00931f4256b223e620e
7422e50efbaea439fda7ef3b0eb54ee1a9fe73ea2f919d78a33bf6fb9e3e059d

HTTP Headers

GET /vendor.js HTTP/1.1
Host: go.healthyliving.news
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a
Cookie: __cf_bm=06SNOrEO60F0MjY2MXcWay_qrAbj.gEwH49MXZXh1UY-1685114325-0-AWf+qf+uYXF2Psdo1hh0osvKKpi6ctxplVI+8K/6mZkOrIQBo0L9yBO1PdrBARZXoKTtO/9V77pMLqzXO1Thnyz1D4GAUMZ+wrp9V8EftWsK; cf:aff_sub2=1026e7a997a96cccc73ee63703b94a; cf:aff_sub3=; cf:aff_sub=1171; cf:affiliate_id=1005554; cf:cf_affiliate_id=; cf:content=; cf:medium=; cf:name=; cf:source=; cf:term=; cf:NDk5OTU5ODk=:visited=true; cf:visitor_id=82cdc50d-4ffe-4a4c-81e4-7fc3da731bf4; aff_sub=1171; aff_sub2=1026e7a997a96cccc73ee63703b94a; affiliate_id=1005554; click_id=; cookiepreview=false; ho_aff_id=1171; noautoplay=false; nopopup=false; trans_id=1026e7a997a96cccc73ee63703b94a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 26 May 2023 15:18:48 GMT
content-type: application/javascript
cf-ray: 7cd6fe29293f1bfe-OSL
cf-cache-status: HIT
access-control-allow-origin: *
age: 45
cache-control: max-age=900, public
etag: W/"7422e50efbaea439fda7ef3b0eb54ee1"
strict-transport-security: max-age=0
vary: Accept-Encoding
access-control-allow-credentials: true
access-control-allow-headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization
access-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
access-control-max-age: 1728000
status: 200 OK
x-content-digest: 581e49c9b7bdd06dab54c00931f4256b223e620e
x-frame-options: ALLOWALL
x-powered-by: Phusion Passenger Enterprise 6.0.7
x-rack-cache: fresh
x-request-id: 0d6cfd38ce72714a8c7576aaea652e15
x-runtime: 0.209956
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.131

472 B

URL
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
78e1a9fe9065cef5724824348a0feae3
4079a4c6fc7b0ffe32aef9e5c2fd6a88a3f7d7e3
571c09668b6d3db54b5edd5ac85fce71b0b8b7b20530621d61133bda637a7b66

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 26 May 2023 15:18:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

www.google.com/js/th/xOb0SHR0aPcqgMSeUE4kE8EFJfzXtzKzd7W6zLK3ZJ0.js

216.58.207.228

200 OK

15 kB

URL GET HTTP/2
www.google.com/js/th/xOb0SHR0aPcqgMSeUE4kE8EFJfzXtzKzd7W6zLK3ZJ0.js
IP
216.58.207.228:443
ASN
#15169 GOOGLE

Requested by
https://www.youtube.com/embed/yGj-hjKMzgE?autoplay=0&modestbranding=1&controls=1&showinfo=0&rel=0&hd=1&wmode=transparent
Certificate
IssuerGoogle Trust Services LLC
Subjectwww.google.com
Fingerprint48:E3:15:66:FC:EA:15:BF:D2:34:C1:DD:60:D4:23:A3:63:57:89:8D
ValidityMon, 08 May 2023 08:25:18 GMT - Mon, 31 Jul 2023 08:25:17 GMT

File type
ASCII text, with very long lines (37421)
Size
15 kB (14651 bytes)
Hash
2243a4c2d71474169b3c91e9d5cb245c
65ee8e11820bebbd3eb4b556cc6ef27a4c1e0e29
c4e6f448747468f72a80c49e504e2413c10525fcd7b732b377b5baccb2b7649d

HTTP Headers

GET /js/th/xOb0SHR0aPcqgMSeUE4kE8EFJfzXtzKzd7W6zLK3ZJ0.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
content-encoding: br
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="botguard-scs"
report-to: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]}
content-length: 14651
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 23 May 2023 18:53:36 GMT
expires: Wed, 22 May 2024 18:53:36 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 08 May 2023 09:30:00 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 246314
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.131

472 B

URL
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
fcc0fbfedf5fb4bfe4e8802157c276ca
c18de9d7e09a6a41fff7b29406b5c0fbb922da0a
35c8ff8c2bafc2831fbe5196b26549342b5b692732bc7191b7b204298e6476e5

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 26 May 2023 15:18:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT

172.217.21.170

200 OK

0 B

URL OPTIONS HTTP/2
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
IP
172.217.21.170:443
ASN
#15169 GOOGLE

Requested by
https://www.youtube.com/embed/yGj-hjKMzgE?autoplay=0&modestbranding=1&controls=1&showinfo=0&rel=0&hd=1&wmode=transparent
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint9B:D0:53:C4:55:9D:41:A4:94:03:4A:2B:6A:5B:57:EB:EB:A5:F0:4A
ValidityMon, 24 Apr 2023 12:00:43 GMT - Mon, 17 Jul 2023 12:00:42 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

OPTIONS /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-goog-api-key,x-user-agent
Referer: https://www.youtube.com/
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
access-control-allow-origin: https://www.youtube.com
vary: origin, referer, x-origin
access-control-allow-credentials: true
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
access-control-allow-headers: content-type,x-goog-api-key,x-user-agent
access-control-max-age: 3600
date: Fri, 26 May 2023 15:18:50 GMT
content-type: text/html
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.131

472 B

URL
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
13b26f5afbecdd78566b3b54ab77caed
6b16c5910ad9ea57236d6954290be6fce8f62c6b
9fd32213a6b40b68ac06d5d6bf9c6ab0793f7f0464407b348c6e290f91870a90

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 26 May 2023 15:18:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT

172.217.21.170

200 OK

110 B

URL OPTIONS HTTP/2
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
IP
172.217.21.170:443
ASN
#15169 GOOGLE

Requested by
https://www.youtube.com/embed/yGj-hjKMzgE?autoplay=0&modestbranding=1&controls=1&showinfo=0&rel=0&hd=1&wmode=transparent
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint9B:D0:53:C4:55:9D:41:A4:94:03:4A:2B:6A:5B:57:EB:EB:A5:F0:4A
ValidityMon, 24 Apr 2023 12:00:43 GMT - Mon, 17 Jul 2023 12:00:42 GMT

File type
JSON data\012- , ASCII text, with no line terminators
Size
110 B (110 bytes)
Hash
dbd9bcc2102dc429aa692049bdab1d93
e6da8417f49c57bf4a779e05f558e6daec0bc721
682c3e72fece5fd0e8bb200fc61d4c6a7521cfa6c32a0e7cb85a5f5d4ea186ec

HTTP Headers

POST /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 1131
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Fri, 26 May 2023 15:18:50 GMT
server: ESF
cache-control: private
content-length: 110
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

www.youtube.com/generate_204?G33ROg

216.58.211.14

204 No Content

0 B

URL GET HTTP/3
www.youtube.com/generate_204?G33ROg
IP
216.58.211.14:443
ASN
#15169 GOOGLE

Requested by
https://www.youtube.com/embed/yGj-hjKMzgE?autoplay=0&modestbranding=1&controls=1&showinfo=0&rel=0&hd=1&wmode=transparent
Certificate
IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint08:73:2C:18:30:14:52:C3:CA:3E:02:79:65:B4:FE:90:AC:3F:3E:33
ValidityMon, 24 Apr 2023 11:56:06 GMT - Mon, 17 Jul 2023 11:56:05 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /generate_204?G33ROg HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/yGj-hjKMzgE?autoplay=0&modestbranding=1&controls=1&showinfo=0&rel=0&hd=1&wmode=transparent
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 204 No Content
content-length: 0
cross-origin-resource-policy: cross-origin
date: Fri, 26 May 2023 15:18:50 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8

216.58.211.14

200 OK

31 B

URL POST HTTP/3
www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
IP
216.58.211.14:443
ASN
#15169 GOOGLE

Requested by
https://www.youtube.com/embed/yGj-hjKMzgE?autoplay=0&modestbranding=1&controls=1&showinfo=0&rel=0&hd=1&wmode=transparent
Certificate
IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint08:73:2C:18:30:14:52:C3:CA:3E:02:79:65:B4:FE:90:AC:3F:3E:33
ValidityMon, 24 Apr 2023 11:56:06 GMT - Mon, 17 Jul 2023 11:56:05 GMT

File type
JSON data\012- , ASCII text
Size
31 B (31 bytes)
Hash
5e1fa6fd9abd549a576f3f24b1d3c8d4
d5335d7f7d33be6a0b663f03b2df4df2521c4a87
d7d5e54ad1e33d7ab49c664323ced79cb9723ff15e9764cd0edc3e15208e8336

HTTP Headers

POST /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Request-Time: 1685114331523
Content-Type: application/json
X-Goog-Visitor-Id: CgtiVGpEd3YtbFNDcyjYm8OjBg%3D%3D
X-YouTube-Client-Name: 56
X-YouTube-Client-Version: 1.20230523.01.00
X-YouTube-Utc-Offset: 0
X-YouTube-Time-Zone: UTC
X-YouTube-Ad-Signals: dt=1685114328624&flash=0&frm=2&u_tz&u_his=2&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&bc=31&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C866%2C487&vis=1&wgl=true&ca_type=image
Content-Length: 14721
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/yGj-hjKMzgE?autoplay=0&modestbranding=1&controls=1&showinfo=0&rel=0&hd=1&wmode=transparent
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
content-type: application/json; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: br
date: Fri, 26 May 2023 15:18:51 GMT
server: scaffolding on HTTPServer2
content-length: 31
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
set-cookie: CONSENT=PENDING+040; expires=Sun, 25-May-2025 15:18:51 GMT; path=/; domain=.youtube.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
expires: Fri, 26 May 2023 15:18:51 GMT
cache-control: private

aus5.mozilla.org/update/3/GMP/111.0a1/20230218104546/Linux_x86_64-gcc3/null/default/Linux%205.15.0-72-generic%20(GTK%203.24.34%2Clibpulse%20not-available)/default/default/update.xml

35.244.181.201

445 B

URL
aus5.mozilla.org/update/3/GMP/111.0a1/20230218104546/Linux_x86_64-gcc3/null/default/Linux%205.15.0-72-generic%20(GTK%203.24.34%2Clibpulse%20not-available)/default/default/update.xml
IP
35.244.181.201:0
ASN
#15169 GOOGLE

File type
XML 1.0 document text\012- XML document, ASCII text, with very long lines (332)
Size
445 B (445 bytes)
Hash
d39546249a86d29697ea6b389afd84f2
244ce5f2d9a3e80da843e527f35cae0b9d9e20be
ba339c9812783530a739e05b9bc0ec254d9c22eb13779e8e5be5860a192f8c80

HTTP Headers

GET /update/3/GMP/111.0a1/20230218104546/Linux_x86_64-gcc3/null/default/Linux%205.15.0-72-generic%20(GTK%203.24.34%2Clibpulse%20not-available)/default/default/update.xml HTTP/1.1
Host: aus5.mozilla.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Cache-Control: no-cache
Pragma: no-cache
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
rule-id: 17805
rule-data-version: 1
content-signature: x5u=https://content-signature-2.cdn.mozilla.net/chains/aus.content-signature.mozilla.org-2023-06-30-14-14-56.chain; p384ecdsa=lgnpf-uxlA8f9GRSFVCcMqjqFH6frGhMPyicFKKA7XsbzZHnTshOVlvENQ0CMO5sP9PZyTeADUdb9w5RKRo99uM_9FuXh5bUGAjVblbvCSdQ89mm6ewf8WfFBrg5AEFN
strict-transport-security: max-age=31536000;
x-content-type-options: nosniff
content-security-policy: default-src 'none'; frame-ancestors 'none'
x-proxy-cache-status: EXPIRED
content-encoding: gzip
via: 1.1 google
date: Fri, 26 May 2023 15:14:30 GMT
content-type: text/xml; charset=utf-8
vary: Accept-Encoding
content-length: 445
age: 274
cache-control: public,max-age=90
alt-svc: clear
X-Firefox-Spdy: h2

ciscobinary.openh264.org/openh264-linux64-2e1774ab6dc6c43debb0b5b628bdf122a391d521.zip

88.221.134.209

512 kB

URL
ciscobinary.openh264.org/openh264-linux64-2e1774ab6dc6c43debb0b5b628bdf122a391d521.zip
IP
88.221.134.209:0
ASN
#20940 Akamai International B.V.

File type
Zip archive data, at least v2.0 to extract, compression method=deflate\012- data
Size
512 kB (511815 bytes)
Hash
152eda253e242e18443ef3282495bc7c
ff0fa85565f21ec4931baad4573b4c0bd08c4019
8e03090fee16f6e0ee2e436af8e51d0c3deed6d9f0db80dec048e668fc009a48

HTTP Headers

GET /openh264-linux64-2e1774ab6dc6c43debb0b5b628bdf122a391d521.zip HTTP/1.1
Host: ciscobinary.openh264.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive

HTTP/1.1 200 OK
Content-Length: 511815
Accept-Ranges: bytes
Last-Modified: Wed, 24 May 2023 20:52:50 GMT
ETag: 152eda253e242e18443ef3282495bc7c
X-Timestamp: 1684961569.84930
Content-Type: application/zip
X-Trans-Id: tx1e2548220b5e4be3adfbd-00646eeb77dfw1
Cache-Control: public, max-age=135694
Expires: Sun, 28 May 2023 05:00:38 GMT
Date: Fri, 26 May 2023 15:19:04 GMT
Connection: keep-alive

www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8

216.58.211.14

200 OK

31 B

URL POST HTTP/3
www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
IP
216.58.211.14:443
ASN
#15169 GOOGLE

Requested by
https://www.youtube.com/embed/yGj-hjKMzgE?autoplay=0&modestbranding=1&controls=1&showinfo=0&rel=0&hd=1&wmode=transparent
Certificate
IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint08:73:2C:18:30:14:52:C3:CA:3E:02:79:65:B4:FE:90:AC:3F:3E:33
ValidityMon, 24 Apr 2023 11:56:06 GMT - Mon, 17 Jul 2023 11:56:05 GMT

File type
JSON data\012- , ASCII text
Size
31 B (31 bytes)
Hash
5e1fa6fd9abd549a576f3f24b1d3c8d4
d5335d7f7d33be6a0b663f03b2df4df2521c4a87
d7d5e54ad1e33d7ab49c664323ced79cb9723ff15e9764cd0edc3e15208e8336

HTTP Headers

POST /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Request-Time: 1685114344461
Content-Type: application/json
X-Goog-Visitor-Id: CgtiVGpEd3YtbFNDcyjYm8OjBg%3D%3D
X-YouTube-Client-Name: 56
X-YouTube-Client-Version: 1.20230523.01.00
X-YouTube-Utc-Offset: 0
X-YouTube-Time-Zone: UTC
X-YouTube-Ad-Signals: dt=1685114328624&flash=0&frm=2&u_tz&u_his=2&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&bc=31&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C866%2C487&vis=1&wgl=true&ca_type=image
Content-Length: 631
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/yGj-hjKMzgE?autoplay=0&modestbranding=1&controls=1&showinfo=0&rel=0&hd=1&wmode=transparent
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
content-type: application/json; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: br
date: Fri, 26 May 2023 15:19:04 GMT
server: scaffolding on HTTPServer2
content-length: 31
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
set-cookie: CONSENT=PENDING+953; expires=Sun, 25-May-2025 15:19:04 GMT; path=/; domain=.youtube.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
expires: Fri, 26 May 2023 15:19:04 GMT
cache-control: private

go.healthyliving.news/cdn-cgi/rum?

104.16.15.194

204 No Content

0 B

URL POST HTTP/2
go.healthyliving.news/cdn-cgi/rum?
IP
104.16.15.194:443
ASN
#13335 CLOUDFLARENET

Requested by
https://go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a
Certificate
IssuerCloudflare, Inc.
Subjectgo.healthyliving.news
Fingerprint13:13:61:C0:89:7F:8B:90:12:04:F7:B1:AC:C6:50:50:AB:4F:11:DE
ValidityFri, 12 Aug 2022 00:00:00 GMT - Sat, 12 Aug 2023 23:59:59 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

POST /cdn-cgi/rum? HTTP/1.1
Host: go.healthyliving.news
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 585
Origin: https://go.healthyliving.news
DNT: 1
Connection: keep-alive
Referer: https://go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a
Cookie: __cf_bm=06SNOrEO60F0MjY2MXcWay_qrAbj.gEwH49MXZXh1UY-1685114325-0-AWf+qf+uYXF2Psdo1hh0osvKKpi6ctxplVI+8K/6mZkOrIQBo0L9yBO1PdrBARZXoKTtO/9V77pMLqzXO1Thnyz1D4GAUMZ+wrp9V8EftWsK; cf:aff_sub2=1026e7a997a96cccc73ee63703b94a; cf:aff_sub3=; cf:aff_sub=1171; cf:affiliate_id=1005554; cf:cf_affiliate_id=; cf:content=; cf:medium=; cf:name=; cf:source=; cf:term=; cf:NDk5OTU5ODk=:visited=true; cf:visitor_id=82cdc50d-4ffe-4a4c-81e4-7fc3da731bf4; aff_sub=1171; aff_sub2=1026e7a997a96cccc73ee63703b94a; affiliate_id=1005554; click_id=; cookiepreview=false; ho_aff_id=1171; noautoplay=false; nopopup=false; trans_id=1026e7a997a96cccc73ee63703b94a; addevent_track_cookie=5e16389b-4048-4951-d537-90dd41784e48; is_eu=false; 2d0wg8m7714sifdl=true; 11241452_viewed_1=5
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 204 No Content
date: Fri, 26 May 2023 15:19:04 GMT
access-control-allow-origin: https://go.healthyliving.news
access-control-allow-methods: POST,OPTIONS
access-control-max-age: 86400
vary: Origin
access-control-allow-credentials: true
server: cloudflare
cf-ray: 7cd6fe8f98261bfe-OSL
x-frame-options: DENY
x-content-type-options: nosniff
X-Firefox-Spdy: h2

yt3.ggpht.com/ytc/AGIKgqOmXse6NuzLq0JXfFiQSKoVZzpdrB2tBLE6Isjx=s68-c-k-c0x00ffffff-no-rj

142.250.74.161

200 OK

3.1 kB

URL GET HTTP/2
yt3.ggpht.com/ytc/AGIKgqOmXse6NuzLq0JXfFiQSKoVZzpdrB2tBLE6Isjx=s68-c-k-c0x00ffffff-no-rj
IP
142.250.74.161:443
ASN
#15169 GOOGLE

Requested by
https://www.youtube.com/embed/yGj-hjKMzgE?autoplay=0&modestbranding=1&controls=1&showinfo=0&rel=0&hd=1&wmode=transparent
Certificate
IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
Fingerprint49:A1:78:AA:CC:58:2A:18:8D:75:CC:D3:F4:F7:DD:A5:5D:58:B0:B1
ValidityMon, 24 Apr 2023 12:00:35 GMT - Mon, 17 Jul 2023 12:00:34 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 68x68, components 3\012- data
Size
3.1 kB (3100 bytes)
Hash
c57e100ff2e81fd6a419cc4f2c99c2d2
910bc2452423688ee31aea7a44041d5bdb6f0602
6f86d988dbedb7c903aeb226a47309f5b63840c5a5415ae1e1373bd6c5bb1234

HTTP Headers

GET /ytc/AGIKgqOmXse6NuzLq0JXfFiQSKoVZzpdrB2tBLE6Isjx=s68-c-k-c0x00ffffff-no-rj HTTP/1.1
Host: yt3.ggpht.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="unnamed.jpg"
x-content-type-options: nosniff
server: fife
content-length: 3100
x-xss-protection: 0
date: Fri, 26 May 2023 14:03:54 GMT
expires: Sat, 27 May 2023 14:03:54 GMT
cache-control: public, max-age=86400, no-transform
age: 4496
etag: "v3c"
content-type: image/jpeg
vary: Origin
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

www.youtube.com/embed/yGj-hjKMzgE?autoplay=0&modestbranding=1&controls=1&showinfo=0&rel=0&hd=1&wmode=transparent

216.58.211.14

200 OK

72 kB

URL GET HTTP/3
www.youtube.com/embed/yGj-hjKMzgE?autoplay=0&modestbranding=1&controls=1&showinfo=0&rel=0&hd=1&wmode=transparent
IP
216.58.211.14:443
ASN
#15169 GOOGLE

Requested by
https://go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a
Certificate
IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint08:73:2C:18:30:14:52:C3:CA:3E:02:79:65:B4:FE:90:AC:3F:3E:33
ValidityMon, 24 Apr 2023 11:56:06 GMT - Mon, 17 Jul 2023 11:56:05 GMT

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (58410)
Size
72 kB (72050 bytes)
Hash
55cf22ebc110389a3f0b8acde68ea405
75af4a03a2ccba013efe134e12f2e0d3a032a730
93b37cdc8f6a7e4382540b1f563b50736b9015aca4da7204f982af92cc983548

HTTP Headers

GET /embed/yGj-hjKMzgE?autoplay=0&modestbranding=1&controls=1&showinfo=0&rel=0&hd=1&wmode=transparent HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://go.healthyliving.news/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
content-type: text/html; charset=utf-8
x-content-type-options: nosniff
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 26 May 2023 15:18:48 GMT
strict-transport-security: max-age=31536000
cross-origin-resource-policy: cross-origin
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
origin-trial: AvC9UlR6RDk2crliDsFl66RWLnTbHrDbp+DiY6AYz/PNQ4G4tdUTjrHYr2sghbkhGQAVxb7jaPTHpEVBz0uzQwkAAAB4eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJXZWJWaWV3WFJlcXVlc3RlZFdpdGhEZXByZWNhdGlvbiIsImV4cGlyeSI6MTcxOTUzMjc5OSwiaXNTdWJkb21haW4iOnRydWV9
cross-origin-opener-policy-report-only: same-origin; report-to="youtube_main"
report-to: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]}
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info."
content-encoding: br
server: ESF
x-xss-protection: 0
set-cookie: YSC=CsvP2ae9zW4; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none
VISITOR_INFO1_LIVE=bTjDwv-lSCs; Domain=.youtube.com; Expires=Wed, 22-Nov-2023 15:18:48 GMT; Path=/; Secure; HttpOnly; SameSite=none
CONSENT=PENDING+765; expires=Sun, 25-May-2025 15:18:48 GMT; path=/; domain=.youtube.com; Secure
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

go.healthyliving.news/hosted/images/29/a22acdd07a417e8b8c4fa6830d4f21/purexanthin_favico.png

104.16.15.194

200 OK

2.2 kB

URL GET HTTP/2
go.healthyliving.news/hosted/images/29/a22acdd07a417e8b8c4fa6830d4f21/purexanthin_favico.png
IP
104.16.15.194:443
ASN
#13335 CLOUDFLARENET

Requested by
https://go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a
Certificate
IssuerCloudflare, Inc.
Subjectgo.healthyliving.news
Fingerprint13:13:61:C0:89:7F:8B:90:12:04:F7:B1:AC:C6:50:50:AB:4F:11:DE
ValidityFri, 12 Aug 2022 00:00:00 GMT - Sat, 12 Aug 2023 23:59:59 GMT

File type
PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced\012- data
Size
2.2 kB (2171 bytes)
Hash
fa03ebf1cc95f66728b8f44ed2d925f6
0a7f8edfc63c05e765d908a4424b871e82635913
56fd6e177ff0c4c0e935e672dd2db40542ff3aeb2b0f3a37361bd338e44dcc09

HTTP Headers

GET /hosted/images/29/a22acdd07a417e8b8c4fa6830d4f21/purexanthin_favico.png HTTP/1.1
Host: go.healthyliving.news
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a
Cookie: __cf_bm=06SNOrEO60F0MjY2MXcWay_qrAbj.gEwH49MXZXh1UY-1685114325-0-AWf+qf+uYXF2Psdo1hh0osvKKpi6ctxplVI+8K/6mZkOrIQBo0L9yBO1PdrBARZXoKTtO/9V77pMLqzXO1Thnyz1D4GAUMZ+wrp9V8EftWsK; cf:aff_sub2=1026e7a997a96cccc73ee63703b94a; cf:aff_sub3=; cf:aff_sub=1171; cf:affiliate_id=1005554; cf:cf_affiliate_id=; cf:content=; cf:medium=; cf:name=; cf:source=; cf:term=; cf:NDk5OTU5ODk=:visited=true; cf:visitor_id=82cdc50d-4ffe-4a4c-81e4-7fc3da731bf4; aff_sub=1171; aff_sub2=1026e7a997a96cccc73ee63703b94a; affiliate_id=1005554; click_id=; cookiepreview=false; ho_aff_id=1171; noautoplay=false; nopopup=false; trans_id=1026e7a997a96cccc73ee63703b94a; addevent_track_cookie=5e16389b-4048-4951-d537-90dd41784e48
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 26 May 2023 15:18:49 GMT
content-type: image/png
content-length: 2171
cf-ray: 7cd6fe2b9b8b1bfe-OSL
cf-cache-status: HIT
accept-ranges: bytes
cache-control: max-age=31536000
etag: "484dd8d00cb103ce8c6e39ab29b7c6cb"
expires: Mon, 19 Jun 2023 15:18:49 GMT
last-modified: Wed, 28 Jul 2021 07:12:32 GMT
vary: Accept, Accept-Encoding
cf-bgj: imgq:85,h2pri
cf-polished: origSize=2340
server: cloudflare
X-Firefox-Spdy: h2

go.healthyliving.news/pure-xanthinpb6vzxba?affiliate_id=1005554&aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&nopopup=false&noautoplay=false&cookiepreview=false&ho_aff_id=1171&click_id=&trans_id=1026e7a997a96cccc73ee63703b94a

104.16.15.194

302 Found

373 kB

URL User Request GET HTTP/2
go.healthyliving.news/pure-xanthinpb6vzxba?affiliate_id=1005554&aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&nopopup=false&noautoplay=false&cookiepreview=false&ho_aff_id=1171&click_id=&trans_id=1026e7a997a96cccc73ee63703b94a
IP
104.16.15.194:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerCloudflare, Inc.
Subjectgo.healthyliving.news
Fingerprint13:13:61:C0:89:7F:8B:90:12:04:F7:B1:AC:C6:50:50:AB:4F:11:DE
ValidityFri, 12 Aug 2022 00:00:00 GMT - Sat, 12 Aug 2023 23:59:59 GMT

File type

Size
373 kB (372580 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /pure-xanthinpb6vzxba?affiliate_id=1005554&aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&nopopup=false&noautoplay=false&cookiepreview=false&ho_aff_id=1171&click_id=&trans_id=1026e7a997a96cccc73ee63703b94a HTTP/1.1
Host: go.healthyliving.news
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
date: Fri, 26 May 2023 15:18:45 GMT
content-type: text/html; charset=utf-8
location: https://go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a
cf-ray: 7cd6fe173ab71bfe-OSL
cf-cache-status: MISS
access-control-allow-origin: *
cache-control: no-cache
strict-transport-security: max-age=0
vary: Accept-Encoding
access-control-allow-credentials: true
access-control-allow-headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization
access-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
access-control-max-age: 1728000
status: 302 Found
x-frame-options: ALLOWALL
x-powered-by: Phusion Passenger Enterprise 6.0.7
x-rack-cache: miss
x-request-id: d5ce7c31e1b59f046cf8acefb9c36772
x-runtime: 0.098075
set-cookie: __cf_bm=06SNOrEO60F0MjY2MXcWay_qrAbj.gEwH49MXZXh1UY-1685114325-0-AWf+qf+uYXF2Psdo1hh0osvKKpi6ctxplVI+8K/6mZkOrIQBo0L9yBO1PdrBARZXoKTtO/9V77pMLqzXO1Thnyz1D4GAUMZ+wrp9V8EftWsK; path=/; expires=Fri, 26-May-23 15:48:45 GMT; domain=.go.healthyliving.news; HttpOnly; Secure; SameSite=None
server: cloudflare
X-Firefox-Spdy: h2

www.youtube.com/iframe_api

216.58.211.14

200 OK

1.1 kB

URL GET HTTP/3
www.youtube.com/iframe_api
IP
216.58.211.14:443
ASN
#15169 GOOGLE

Requested by
https://go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a
Certificate
IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint08:73:2C:18:30:14:52:C3:CA:3E:02:79:65:B4:FE:90:AC:3F:3E:33
ValidityMon, 24 Apr 2023 11:56:06 GMT - Mon, 17 Jul 2023 11:56:05 GMT

File type
ASCII text, with very long lines (1088), with no line terminators
Size
1.1 kB (1056 bytes)
Hash
25f89701ac3583d84fca597e904baaa9
07863bea06de072c94f0f45d68d8cf02b4a97a2f
71aa22b213ecfe73dcfde1581adac0f0372ac46608f5f356828f231b497c16c7

HTTP Headers

GET /iframe_api HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://go.healthyliving.news/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
content-type: text/javascript; charset=utf-8
x-content-type-options: nosniff
expires: Fri, 26 May 2023 15:18:48 GMT
date: Fri, 26 May 2023 15:18:48 GMT
cache-control: private, max-age=0
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=31536000
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
content-security-policy-report-only: base-uri 'self';default-src 'self' https: blob:;font-src https: data:;img-src https: data: android-webview-video-poster:;media-src blob: https:;object-src 'none';script-src 'nonce-A2xAuPmQAXcEfTVlOwIAkg' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';style-src https: 'unsafe-inline';report-uri /cspreport
cross-origin-opener-policy-report-only: same-origin; report-to="youtube_main"
report-to: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]}
cross-origin-resource-policy: cross-origin
origin-trial: AvC9UlR6RDk2crliDsFl66RWLnTbHrDbp+DiY6AYz/PNQ4G4tdUTjrHYr2sghbkhGQAVxb7jaPTHpEVBz0uzQwkAAAB4eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJXZWJWaWV3WFJlcXVlc3RlZFdpdGhEZXByZWNhdGlvbiIsImV4cGlyeSI6MTcxOTUzMjc5OSwiaXNTdWJkb21haW4iOnRydWV9
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info."
content-encoding: br
server: ESF
x-xss-protection: 0
set-cookie: YSC=Axc-jSvSCtI; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none
VISITOR_INFO1_LIVE=3CAMri7HJJs; Domain=.youtube.com; Expires=Wed, 22-Nov-2023 15:18:48 GMT; Path=/; Secure; HttpOnly; SameSite=none
CONSENT=PENDING+621; expires=Sun, 25-May-2025 15:18:48 GMT; path=/; domain=.youtube.com; Secure
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

trk.legendaff.com/aff_c?offer_id=75&aff_id=1171&aff_sub=052623_4792_582_am&aff_sub5=102cacc37b0ed92bf44b8e34a199cf&aff_sub4=&aff_sub3=1005554

172.67.187.7

302 Found

373 kB

URL User Request GET HTTP/2
trk.legendaff.com/aff_c?offer_id=75&aff_id=1171&aff_sub=052623_4792_582_am&aff_sub5=102cacc37b0ed92bf44b8e34a199cf&aff_sub4=&aff_sub3=1005554
IP
172.67.187.7:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerLet's Encrypt
Subject*.legendaff.com
Fingerprint71:F5:1B:CC:FD:BA:3A:88:E7:81:08:78:05:47:77:B3:EB:21:84:A4
ValidityWed, 12 Apr 2023 00:29:15 GMT - Tue, 11 Jul 2023 00:29:14 GMT

File type

Size
373 kB (372580 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /aff_c?offer_id=75&aff_id=1171&aff_sub=052623_4792_582_am&aff_sub5=102cacc37b0ed92bf44b8e34a199cf&aff_sub4=&aff_sub3=1005554 HTTP/1.1
Host: trk.legendaff.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
date: Fri, 26 May 2023 15:18:45 GMT
content-type: text/html; charset=iso-8859-1
location: https://go.healthyliving.news/pure-xanthinpb6vzxba?affiliate_id=1005554&aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&nopopup=false&noautoplay=false&cookiepreview=false&ho_aff_id=1171&click_id=&trans_id=1026e7a997a96cccc73ee63703b94a
cache-control: no-cache, no-store, must-revalidate
expires: Sat, 26 Jul 1997 05:00:00 GMT
p3p: CP="NOI CUR OUR NOR INT"
pragma: no-cache
set-cookie: enc_aff_session_75=ENC039e48adbd25a4ce795ea205b4b676d1e868e0e947f205b5240cf3a213ef5f97d73bd76bd5045f255390f91e21dbf8ede4ce981683c7133742bbf15f927c4800f07d3addb5b1ee00afd0b71b3f2933c5bff343b7765476e1311dc6c8e6b1e96255daaeb103ae709437e8bcd8871bb30d4585c9b6aeaf30da95fc3f6888769f78c28ab3d2b32037ba0ab3cd9781c738588aa745ad9c44d5ddc317dd679637a7734718cf5e3c; expires=Mon, 26 Jun 2023 15:18:45 GMT; path=/; SameSite=None; Secure
ho_mob=eyJtb2JpbGVfZGV2aWNlX29zIjoiRGVza3RvcCIsIm1vYmlsZV9kZXZpY2VfbW9kZWwiOiJGaXJlZm94IiwibW9iaWxlX2RldmljZV9icmFuZCI6Ik1vemlsbGEiLCJtb2JpbGVfYnJvd3NlciI6IkZpcmVmb3ggRGVza3RvcCIsIm1vYmlsZV9icm93c2VyX3ZlcnNpb24iOiIxMTEuMCIsIm1vYmlsZV9jYXJyaWVyIjoiPyIsInVzZXJfYWdlbnQiOiJNb3ppbGxhLzUuMCAoWDExOyBMaW51eCBYODZfNjQ7IFJ2OjEwOS4wKSBHZWNrby8yMDEwMDEwMSBGaXJlZm94LzExMS4wIiwiYWNjZXB0X2xhbmd1YWdlIjoiZW4tVVMsZW47cT0wLjUiLCJjb25uZWN0aW9uX3NwZWVkIjoiYnJvYWRiYW5kIn0=; expires=Mon, 20 Apr 2026 01:58:45 GMT; path=/; SameSite=None; Secure
tracking_id: 1026e7a997a96cccc73ee63703b94a
x-robots-tag: noindex, nofollow
access-control-allow-origin: *
x-request-id: 601daa88a38939c14d5580a4998edf57
access-control-allow-headers: Tune-SDK-Version
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vXVtCYq1KOq1sGDtoya98q63LAp1JcnTMbTrD6qU3OVADYwReh8a%2F9U4rIDunUPVTNqQforow1cjjHHCLh0L3BUfpMphej4hCHhSZvhiZ35NZBQ7eLh%2BZg3KOGZUfFoOJMWxXw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7cd6fe166d75b523-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

fonts.googleapis.com/css2?family=Open+Sans:wght@700;800&display=swap

142.250.74.106

200 OK

5.9 kB

URL GET HTTP/2
fonts.googleapis.com/css2?family=Open+Sans:wght@700;800&display=swap
IP
142.250.74.106:443
ASN
#15169 GOOGLE

Requested by
https://go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint5F:AC:74:E6:97:66:CD:D0:F1:EA:0D:01:37:89:65:2E:98:22:84:6C
ValidityMon, 08 May 2023 08:24:50 GMT - Mon, 31 Jul 2023 08:24:49 GMT

File type
ASCII text, with very long lines (6016), with no line terminators
Size
5.9 kB (5856 bytes)
Hash
93fb41d4446f9c6b40773c464755a5de
d2be1d0a57711c019dc41b1d996ace2224ef4327
f356a3ffd4da1249fefe1ae149478c0782efce192f4d2cbfd4d2292e6f524998

HTTP Headers

GET /css2?family=Open+Sans:wght@700;800&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://go.healthyliving.news/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 26 May 2023 15:18:47 GMT
date: Fri, 26 May 2023 15:18:47 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

static.cloudflareinsights.com/beacon.min.js/v52afc6f149f6479b8c77fa569edb01181681764108816

104.16.56.101

200 OK

20 kB

URL GET HTTP/2
static.cloudflareinsights.com/beacon.min.js/v52afc6f149f6479b8c77fa569edb01181681764108816
IP
104.16.56.101:443
ASN
#13335 CLOUDFLARENET

Requested by
https://go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint89:79:35:ED:04:A2:CA:50:F7:9A:B8:FE:DF:A5:0C:B1:F2:E6:DD:E8
ValidityMon, 10 Apr 2023 00:00:00 GMT - Tue, 09 Apr 2024 23:59:59 GMT

File type
ASCII text, with very long lines (19927), with no line terminators
Size
20 kB (19927 bytes)
Hash
d294b48fb7400508953205265f95d2e1
fd545d38241c9c56e81f61e45cd239976ecd0b46
13a548e040a1ec08f77911fed1d559b95e5daae0ee227e632140e003c7268e7b

HTTP Headers

GET /beacon.min.js/v52afc6f149f6479b8c77fa569edb01181681764108816 HTTP/1.1
Host: static.cloudflareinsights.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://go.healthyliving.news
DNT: 1
Connection: keep-alive
Referer: https://go.healthyliving.news/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 26 May 2023 15:18:47 GMT
content-type: text/javascript;charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=86400
etag: W/2023.4.2
last-modified: Mon, 17 Apr 2023 20:41:48 GMT
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
server: cloudflare
cf-ray: 7cd6fe203acab51b-OSL
content-encoding: gzip
X-Firefox-Spdy: h2

fonts.gstatic.com/s/opensans/v35/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVI.woff2

216.58.207.227

200 OK

19 kB

URL GET HTTP/2
fonts.gstatic.com/s/opensans/v35/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVI.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE2:33:59:47:38:D7:4A:7A:9E:28:5D:EC:AA:94:7F:92:25:D2:B1:C4
ValidityMon, 24 Apr 2023 12:00:43 GMT - Mon, 17 Jul 2023 12:00:42 GMT

File type
Web Open Font Format (Version 2), TrueType, length 18664, version 1.0\012- data
Size
19 kB (18664 bytes)
Hash
8d1c44b2bf75a4e6f1bd141f9a965f4f
1e5dfdb7ca5ee8e823f9f5787f84b18fbdc38434
441e23601fe7525a142857c98cbb2784997579d51a17f736d7964dceee609709

HTTP Headers

GET /s/opensans/v35/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVI.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://go.healthyliving.news
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 18664
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 May 2023 07:49:32 GMT
expires: Fri, 24 May 2024 07:49:32 GMT
cache-control: public, max-age=31536000
age: 113356
last-modified: Tue, 02 May 2023 15:19:23 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

go.healthyliving.news/assets/lander.js

104.16.15.194

200 OK

2.3 MB

URL GET HTTP/2
go.healthyliving.news/assets/lander.js
IP
104.16.15.194:443
ASN
#13335 CLOUDFLARENET

Requested by
https://go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a
Certificate
IssuerCloudflare, Inc.
Subjectgo.healthyliving.news
Fingerprint13:13:61:C0:89:7F:8B:90:12:04:F7:B1:AC:C6:50:50:AB:4F:11:DE
ValidityFri, 12 Aug 2022 00:00:00 GMT - Sat, 12 Aug 2023 23:59:59 GMT

File type

Size
2.3 MB (2328474 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /assets/lander.js HTTP/1.1
Host: go.healthyliving.news
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a
Cookie: __cf_bm=06SNOrEO60F0MjY2MXcWay_qrAbj.gEwH49MXZXh1UY-1685114325-0-AWf+qf+uYXF2Psdo1hh0osvKKpi6ctxplVI+8K/6mZkOrIQBo0L9yBO1PdrBARZXoKTtO/9V77pMLqzXO1Thnyz1D4GAUMZ+wrp9V8EftWsK
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 26 May 2023 15:18:47 GMT
content-type: application/x-javascript
cf-ray: 7cd6fe200efb1bfe-OSL
cf-cache-status: HIT
access-control-allow-origin: *
age: 1168
cache-control: public, max-age=1200
etag: W/"646cd84d-23879a"
expires: Fri, 26 May 2023 15:38:47 GMT
last-modified: Tue, 23 May 2023 15:14:21 GMT
strict-transport-security: max-age=0
vary: Accept-Encoding
access-control-allow-credentials: true
access-control-allow-headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization
access-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
access-control-max-age: 1728000
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2

www.youtube.com/embed/yGj-hjKMzgE?autoplay=0&modestbranding=1&controls=1&showinfo=0&rel=0&hd=1&wmode=transparent

216.58.211.14

200 OK

72 kB

URL GET HTTP/2
www.youtube.com/embed/yGj-hjKMzgE?autoplay=0&modestbranding=1&controls=1&showinfo=0&rel=0&hd=1&wmode=transparent
IP
216.58.211.14:443
ASN
#15169 GOOGLE

Requested by
https://go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a
Certificate
IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint08:73:2C:18:30:14:52:C3:CA:3E:02:79:65:B4:FE:90:AC:3F:3E:33
ValidityMon, 24 Apr 2023 11:56:06 GMT - Mon, 17 Jul 2023 11:56:05 GMT

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (58410)
Size
72 kB (71483 bytes)
Hash
f68316e8b8453e346fcab6bf711c6779
15a442828ecfc0c953562c0cb77e81bcaaa85bf3
dd86ab54c51d0c0279e8a4f59127a8e404f670e904795af93511b98764e1163c

HTTP Headers

GET /embed/yGj-hjKMzgE?autoplay=0&modestbranding=1&controls=1&showinfo=0&rel=0&hd=1&wmode=transparent HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://go.healthyliving.news/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/html; charset=utf-8
x-content-type-options: nosniff
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 26 May 2023 15:18:47 GMT
strict-transport-security: max-age=31536000
report-to: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]}
origin-trial: AvC9UlR6RDk2crliDsFl66RWLnTbHrDbp+DiY6AYz/PNQ4G4tdUTjrHYr2sghbkhGQAVxb7jaPTHpEVBz0uzQwkAAAB4eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJXZWJWaWV3WFJlcXVlc3RlZFdpdGhEZXByZWNhdGlvbiIsImV4cGlyeSI6MTcxOTUzMjc5OSwiaXNTdWJkb21haW4iOnRydWV9
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube_main"
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info."
content-encoding: br
server: ESF
x-xss-protection: 0
set-cookie: YSC=13_0zsSfEfs; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none
VISITOR_INFO1_LIVE=Q4V8SGywLHs; Domain=.youtube.com; Expires=Wed, 22-Nov-2023 15:18:47 GMT; Path=/; Secure; HttpOnly; SameSite=none
CONSENT=PENDING+770; expires=Sun, 25-May-2025 15:18:47 GMT; path=/; domain=.youtube.com; Secure
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

track.addevent.com/atc/?trktyp=jsinit&trkcal=&guid=5e16389b-4048-4951-d537-90dd41784e48&url=https%3A%2F%2Fgo.healthyliving.news%2Fsales-page-499959901627916546826%3Faff_sub%3D1171%26aff_sub2%3D1026e7a997a96cccc73ee63703b94a%26affiliate_id%3D1005554%26click_id%3D%26cookiepreview%3Dfalse%26ho_aff_id%3D1171%26noautoplay%3Dfalse%26nopopup%3Dfalse%26trans_id%3D1026e7a997a96cccc73ee63703b94a&cache=1685114328362

0.0.0.0

0 B

URL GET
track.addevent.com/atc/?trktyp=jsinit&trkcal=&guid=5e16389b-4048-4951-d537-90dd41784e48&url=https%3A%2F%2Fgo.healthyliving.news%2Fsales-page-499959901627916546826%3Faff_sub%3D1171%26aff_sub2%3D1026e7a997a96cccc73ee63703b94a%26affiliate_id%3D1005554%26click_id%3D%26cookiepreview%3Dfalse%26ho_aff_id%3D1171%26noautoplay%3Dfalse%26nopopup%3Dfalse%26trans_id%3D1026e7a997a96cccc73ee63703b94a&cache=1685114328362
IP
0.0.0.0:0
ASN
#0

Requested by
https://go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /atc/?trktyp=jsinit&trkcal=&guid=5e16389b-4048-4951-d537-90dd41784e48&url=https%3A%2F%2Fgo.healthyliving.news%2Fsales-page-499959901627916546826%3Faff_sub%3D1171%26aff_sub2%3D1026e7a997a96cccc73ee63703b94a%26affiliate_id%3D1005554%26click_id%3D%26cookiepreview%3Dfalse%26ho_aff_id%3D1171%26noautoplay%3Dfalse%26nopopup%3Dfalse%26trans_id%3D1026e7a997a96cccc73ee63703b94a&cache=1685114328362 HTTP/1.1
Host: track.addevent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://go.healthyliving.news/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

app.clickfunnels.com/mailcheck.min.js

104.16.12.194

200 OK

2.7 kB

URL GET HTTP/2
app.clickfunnels.com/mailcheck.min.js
IP
104.16.12.194:443
ASN
#13335 CLOUDFLARENET

Requested by
https://go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint76:93:26:C7:54:DD:C9:C2:34:D3:16:AF:2B:26:16:E1:9A:02:43:B1
ValiditySat, 23 Jul 2022 00:00:00 GMT - Sun, 23 Jul 2023 23:59:59 GMT

File type
C source, ASCII text, with very long lines (2763), with no line terminators
Size
2.7 kB (2701 bytes)
Hash
acf84f6eef8f64d8d041df0a0e531144
fcdeedb5223bd8710d80a3605120a06865517697
1c15178d5d14bd4a116adfafa3497ee592ee4300f3661140da902b484cccb31c

HTTP Headers

GET /mailcheck.min.js HTTP/1.1
Host: app.clickfunnels.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://go.healthyliving.news/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 26 May 2023 15:18:47 GMT
content-type: application/x-javascript
cf-ray: 7cd6fe201d0fb4f4-OSL
cf-cache-status: HIT
access-control-allow-origin: *
age: 1168
etag: W/"646e58c7-a8d"
last-modified: Wed, 24 May 2023 18:34:47 GMT
strict-transport-security: max-age=0
vary: Accept-Encoding
access-control-allow-credentials: true
access-control-allow-headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization
access-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
access-control-max-age: 1728000
set-cookie: __cf_bm=Y3EE0MwUnCvQ0gzQNn7C7qFjBRPu7u1GAnRgGBIxe34-1685114327-0-AeU7zmeubURFMVRpMHMcigXMBYl3gx6bod4KTSfGjpFu8WKY3+14EmkBt3ykuf/+OkIRI4JscfzVsu0IArHscw95Y3e1V5b7w4LKyeoN+Gw3; path=/; expires=Fri, 26-May-23 15:48:47 GMT; domain=.clickfunnels.com; HttpOnly; Secure; SameSite=None
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2

go.healthyliving.news/assets/pushcrew.js

104.16.15.194

200 OK

637 B

URL GET HTTP/2
go.healthyliving.news/assets/pushcrew.js
IP
104.16.15.194:443
ASN
#13335 CLOUDFLARENET

Requested by
https://go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a
Certificate
IssuerCloudflare, Inc.
Subjectgo.healthyliving.news
Fingerprint13:13:61:C0:89:7F:8B:90:12:04:F7:B1:AC:C6:50:50:AB:4F:11:DE
ValidityFri, 12 Aug 2022 00:00:00 GMT - Sat, 12 Aug 2023 23:59:59 GMT

File type
ASCII text, with very long lines (661), with no line terminators
Size
637 B (637 bytes)
Hash
f8ffc256a5caf06a3552bc5b842e0139
99ffa56b8614936f27105eb97483ebce7657ffe2
ecf2872612caf1a748331dbf08912e4818f3ca926c1adaadb2cad5daa60f6ec1

HTTP Headers

GET /assets/pushcrew.js HTTP/1.1
Host: go.healthyliving.news
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a
Cookie: __cf_bm=06SNOrEO60F0MjY2MXcWay_qrAbj.gEwH49MXZXh1UY-1685114325-0-AWf+qf+uYXF2Psdo1hh0osvKKpi6ctxplVI+8K/6mZkOrIQBo0L9yBO1PdrBARZXoKTtO/9V77pMLqzXO1Thnyz1D4GAUMZ+wrp9V8EftWsK
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 26 May 2023 15:18:47 GMT
content-type: application/x-javascript
cf-ray: 7cd6fe200f021bfe-OSL
cf-cache-status: HIT
access-control-allow-origin: *
age: 432
cache-control: public, max-age=1200
etag: W/"646cd7f5-27d"
expires: Fri, 26 May 2023 15:38:47 GMT
last-modified: Tue, 23 May 2023 15:12:53 GMT
strict-transport-security: max-age=0
vary: Accept-Encoding
access-control-allow-credentials: true
access-control-allow-headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization
access-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
access-control-max-age: 1728000
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2

www.youtube.com/s/player/bbe1b497/www-widgetapi.vflset/www-widgetapi.js

216.58.211.14

200 OK

203 kB

URL GET HTTP/3
www.youtube.com/s/player/bbe1b497/www-widgetapi.vflset/www-widgetapi.js
IP
216.58.211.14:443
ASN
#15169 GOOGLE

Requested by
https://go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a
Certificate
IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint08:73:2C:18:30:14:52:C3:CA:3E:02:79:65:B4:FE:90:AC:3F:3E:33
ValidityMon, 24 Apr 2023 11:56:06 GMT - Mon, 17 Jul 2023 11:56:05 GMT

File type
ASCII text, with very long lines (580)
Size
203 kB (203247 bytes)
Hash
b973de670b2b03faef5bbe89104fa8db
d251a6d123df91ae13c25a063f3cd2d6ebc4dc9b
ebb72a8ee62da54956da7d5cd3ca05420d319a9d34e14896a07fc85491666349

HTTP Headers

GET /s/player/bbe1b497/www-widgetapi.vflset/www-widgetapi.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://go.healthyliving.news/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 62712
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 24 May 2023 15:08:45 GMT
expires: Thu, 23 May 2024 15:08:45 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 24 May 2023 01:49:18 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 173403
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

app.clickfunnels.com/userevents/?funnel_id=eGQwRk5oVG9XMG8yZkE5M1RlTDZDUT09LS1SUzJiemxQSEZ6aW44a1NURnIwaXdnPT0%3D--20d095c924fa6d06dfe7dd2d7bfd3e2c12d3b6cb&page_id=eDlzb0k2UlN4YngyODl5VDBmb1VWZz09LS1rc3NMN0RrM1l0RzlDbGszbk45OGJRPT0%3D--15a216b5b278c5d8641b3b282bcf5f474cb94e29&funnel_step_id=V2cwY2o3WGhxSWROVVc3c3d3b1JUUT09LS02VktHMTE3eGRFeE5CMWIwVkYwWWpBPT0%3D--63d533e43b2807665c769246eeab319f6709212d&user_id=c1o4blA3dUdUTzlGZVBmcEoxWG9lQT09LS1KbDlnL1U4K01ZaUFxbTRPb0dzM2pnPT0%3D--8a995a6f087a77401d446b0431118bc5ee2ebd40&account_id=VGFQcDR2RGZoN0d0NWdZRWJxUFBCUT09LS1Cdkhuek04OU1IeWhNZW5BOEJKakZ3PT0%3D--224da7262c8bb34d7ef55ae5a77b15d0d0fdbdfa&page_code=NDk5OTU5ODk%3D&mode_id=1&time_zone=Mountain%20Time%20(US%20%26%20Canada)&app_domain=app.clickfunnels.com&aff_sub2=1026e7a997a96cccc73ee63703b94a&aff_sub3=&aff_sub=1171&affiliate_id=1005554&cf_affiliate_id=&content=&medium=&name=&source=&term=&client_width=1280&type=Userevents::UniqueVisitorsCreatedSummary&nonce=cfe0a7c6-c435-468e-9e83-7aa06734ae64&url=https%3A%2F%2Fgo.healthyliving.news%2Fsales-page-499959901627916546826%3Faff_sub%3D1171%26aff_sub2%3D1026e7a997a96cccc73ee63703b94a%26affiliate_id%3D1005554%26click_id%3D%26cookiepreview%3Dfalse%26ho_aff_id%3D1171%26noautoplay%3Dfalse%26nopopup%3Dfalse%26trans_id%3D1026e7a997a96cccc73ee63703b94a

104.16.12.194

202 Accepted

0 B

URL GET HTTP/2
app.clickfunnels.com/userevents/?funnel_id=eGQwRk5oVG9XMG8yZkE5M1RlTDZDUT09LS1SUzJiemxQSEZ6aW44a1NURnIwaXdnPT0%3D--20d095c924fa6d06dfe7dd2d7bfd3e2c12d3b6cb&page_id=eDlzb0k2UlN4YngyODl5VDBmb1VWZz09LS1rc3NMN0RrM1l0RzlDbGszbk45OGJRPT0%3D--15a216b5b278c5d8641b3b282bcf5f474cb94e29&funnel_step_id=V2cwY2o3WGhxSWROVVc3c3d3b1JUUT09LS02VktHMTE3eGRFeE5CMWIwVkYwWWpBPT0%3D--63d533e43b2807665c769246eeab319f6709212d&user_id=c1o4blA3dUdUTzlGZVBmcEoxWG9lQT09LS1KbDlnL1U4K01ZaUFxbTRPb0dzM2pnPT0%3D--8a995a6f087a77401d446b0431118bc5ee2ebd40&account_id=VGFQcDR2RGZoN0d0NWdZRWJxUFBCUT09LS1Cdkhuek04OU1IeWhNZW5BOEJKakZ3PT0%3D--224da7262c8bb34d7ef55ae5a77b15d0d0fdbdfa&page_code=NDk5OTU5ODk%3D&mode_id=1&time_zone=Mountain%20Time%20(US%20%26%20Canada)&app_domain=app.clickfunnels.com&aff_sub2=1026e7a997a96cccc73ee63703b94a&aff_sub3=&aff_sub=1171&affiliate_id=1005554&cf_affiliate_id=&content=&medium=&name=&source=&term=&client_width=1280&type=Userevents::UniqueVisitorsCreatedSummary&nonce=cfe0a7c6-c435-468e-9e83-7aa06734ae64&url=https%3A%2F%2Fgo.healthyliving.news%2Fsales-page-499959901627916546826%3Faff_sub%3D1171%26aff_sub2%3D1026e7a997a96cccc73ee63703b94a%26affiliate_id%3D1005554%26click_id%3D%26cookiepreview%3Dfalse%26ho_aff_id%3D1171%26noautoplay%3Dfalse%26nopopup%3Dfalse%26trans_id%3D1026e7a997a96cccc73ee63703b94a
IP
104.16.12.194:443
ASN
#13335 CLOUDFLARENET

Requested by
https://go.healthyliving.news/sales-page-499959901627916546826?aff_sub=1171&aff_sub2=1026e7a997a96cccc73ee63703b94a&affiliate_id=1005554&click_id=&cookiepreview=false&ho_aff_id=1171&noautoplay=false&nopopup=false&trans_id=1026e7a997a96cccc73ee63703b94a
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint76:93:26:C7:54:DD:C9:C2:34:D3:16:AF:2B:26:16:E1:9A:02:43:B1
ValiditySat, 23 Jul 2022 00:00:00 GMT - Sun, 23 Jul 2023 23:59:59 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /userevents/?funnel_id=eGQwRk5oVG9XMG8yZkE5M1RlTDZDUT09LS1SUzJiemxQSEZ6aW44a1NURnIwaXdnPT0%3D--20d095c924fa6d06dfe7dd2d7bfd3e2c12d3b6cb&page_id=eDlzb0k2UlN4YngyODl5VDBmb1VWZz09LS1rc3NMN0RrM1l0RzlDbGszbk45OGJRPT0%3D--15a216b5b278c5d8641b3b282bcf5f474cb94e29&funnel_step_id=V2cwY2o3WGhxSWROVVc3c3d3b1JUUT09LS02VktHMTE3eGRFeE5CMWIwVkYwWWpBPT0%3D--63d533e43b2807665c769246eeab319f6709212d&user_id=c1o4blA3dUdUTzlGZVBmcEoxWG9lQT09LS1KbDlnL1U4K01ZaUFxbTRPb0dzM2pnPT0%3D--8a995a6f087a77401d446b0431118bc5ee2ebd40&account_id=VGFQcDR2RGZoN0d0NWdZRWJxUFBCUT09LS1Cdkhuek04OU1IeWhNZW5BOEJKakZ3PT0%3D--224da7262c8bb34d7ef55ae5a77b15d0d0fdbdfa&page_code=NDk5OTU5ODk%3D&mode_id=1&time_zone=Mountain%20Time%20(US%20%26%20Canada)&app_domain=app.clickfunnels.com&aff_sub2=1026e7a997a96cccc73ee63703b94a&aff_sub3=&aff_sub=1171&affiliate_id=1005554&cf_affiliate_id=&content=&medium=&name=&source=&term=&client_width=1280&type=Userevents::UniqueVisitorsCreatedSummary&nonce=cfe0a7c6-c435-468e-9e83-7aa06734ae64&url=https%3A%2F%2Fgo.healthyliving.news%2Fsales-page-499959901627916546826%3Faff_sub%3D1171%26aff_sub2%3D1026e7a997a96cccc73ee63703b94a%26affiliate_id%3D1005554%26click_id%3D%26cookiepreview%3Dfalse%26ho_aff_id%3D1171%26noautoplay%3Dfalse%26nopopup%3Dfalse%26trans_id%3D1026e7a997a96cccc73ee63703b94a HTTP/1.1
Host: app.clickfunnels.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://go.healthyliving.news
DNT: 1
Connection: keep-alive
Referer: https://go.healthyliving.news/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 202 Accepted
date: Fri, 26 May 2023 15:18:48 GMT
content-type: text/html
cf-ray: 7cd6fe298b16b4f4-OSL
cf-cache-status: BYPASS
access-control-allow-origin: *
cache-control: no-cache, no-store
strict-transport-security: max-age=0
vary: Accept-Encoding
access-control-allow-credentials: true
access-control-allow-headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization
access-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
access-control-max-age: 1728000
access-control-request-method: *
pragma: no-cache
status: 202 Accepted
x-frame-options: ALLOWALL
x-powered-by: Phusion Passenger Enterprise 6.0.7
x-rack-cache: miss
x-request-id: 57460dbab824969faec9b224edd8a9eb
x-runtime: 0.049470
set-cookie: __cf_bm=ER63x_Le2t1pukDpUDkcwpNdIIwgjehC5Lu83SIO7hQ-1685114328-0-ASxJEItGk474ILwp6ZLM33sTdbGYQEzX1qB1uQQvNQcqFlcwrMKbraxSHnEt4Sqeew4KPFNSaFgthr+NSr1gtJWukh4ovI1CIsDc7Q9wwwsU; path=/; expires=Fri, 26-May-23 15:48:48 GMT; domain=.clickfunnels.com; HttpOnly; Secure; SameSite=None
server: cloudflare
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

JavaScript (157)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by