Overview

URLwww.workingmother.com/data-scientist-mom-charts-nail-new-moms-exhausted
IP 54.161.232.199 (United States)
ASN#14618 AMAZON-AES
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Report completed2023-02-03 07:38:54 UTC
StatusLoading report..
IDS alerts1
Blocklist alert0
urlquery alerts No alerts detected
Tags None

Domain Summary (41)

Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
firefox.settings.services.mozilla.com (2) 867 2020-05-25 20:06:39 UTC 2023-02-02 04:09:02 UTC 35.241.9.150
script.hotjar.com (1) 887 2020-11-05 10:14:15 UTC 2023-02-02 14:15:47 UTC 54.230.111.79
img-getpocket.cdn.mozilla.net (6) 1631 2017-09-01 03:40:57 UTC 2023-02-02 04:09:26 UTC 34.120.237.76
driftt.imgix.net (1) 14024 2017-01-30 10:46:28 UTC 2023-02-02 10:43:55 UTC 151.101.246.208
chimpstatic.com (1) 4832 2017-04-21 05:35:42 UTC 2023-02-02 16:34:25 UTC 96.6.17.210
munchkin.marketo.net (2) 3550 2012-12-17 00:39:54 UTC 2023-02-02 04:46:43 UTC 88.221.99.189
51407-7.chat.api.drift.com (1) 557300 2019-03-13 18:19:26 UTC 2022-11-21 22:29:55 UTC 34.224.54.161
flow.api.drift.com (2) 12085 2020-09-10 12:29:30 UTC 2023-02-02 10:11:39 UTC 54.147.21.139
push.services.mozilla.com (1) 2140 2014-10-24 08:27:06 UTC 2023-02-02 04:10:44 UTC 52.43.158.68
www.googletagmanager.com (1) 75 2012-10-04 01:07:32 UTC 2023-02-02 12:24:11 UTC 142.250.74.168
c.6sc.co (1) 12150 2017-01-29 23:27:07 UTC 2023-02-02 14:35:20 UTC 104.85.176.46
www.google.no (2) 25607 2012-06-26 23:22:08 UTC 2023-02-02 10:27:38 UTC 142.250.74.35
region1.analytics.google.com (2) 0 2022-03-17 11:26:33 UTC 2023-02-02 07:54:19 UTC 216.239.34.36 Domain (google.com) ranked at: 1
www.workingmother.com (1) 951092 2014-01-30 07:42:11 UTC 2023-01-31 06:27:20 UTC 35.169.219.177
content-signature-2.cdn.mozilla.net (1) 1152 2020-11-03 12:26:46 UTC 2023-02-02 04:10:44 UTC 34.160.144.191
ocsp.pki.goog (7) 175 2017-06-14 07:23:31 UTC 2023-02-02 04:09:06 UTC 142.250.74.131
ocsp.sca1b.amazontrust.com (4) 1015 No data No data 54.230.245.110
www.google-analytics.com (1) 40 2012-05-21 09:41:50 UTC 2023-02-02 13:41:04 UTC 142.250.74.46
in.hotjar.com (1) 1746 2018-07-03 09:33:18 UTC 2023-02-02 04:12:58 UTC 63.32.143.51
vars.hotjar.com (1) 1014 2020-11-05 10:13:14 UTC 2023-02-02 15:19:39 UTC 143.204.55.101
b.6sc.co (6) 6187 2015-12-15 19:22:13 UTC 2023-02-02 17:18:21 UTC 104.85.176.46
r3.o.lencr.org (10) 344 2020-12-02 08:52:13 UTC 2023-02-02 04:09:15 UTC 23.36.77.32
p.typekit.net (1) 620 2012-05-23 14:28:57 UTC 2023-02-02 04:10:15 UTC 23.33.119.26
ocsp.digicert.com (2) 86 2012-05-21 07:02:23 UTC 2023-02-02 13:49:54 UTC 93.184.220.29
bootstrap.api.drift.com (2) 6517 2020-08-26 10:26:04 UTC 2023-02-03 04:14:03 UTC 54.147.21.139
targeting.api.drift.com (3) 6312 2019-05-13 05:35:39 UTC 2023-02-02 06:48:28 UTC 54.147.21.139
static.hotjar.com (1) 641 2014-11-01 05:14:27 UTC 2023-02-02 04:12:41 UTC 54.230.111.66
use.typekit.net (5) 494 2012-07-05 01:42:39 UTC 2023-02-02 04:10:15 UTC 23.36.76.122
j.6sc.co (1) 8237 2015-12-10 09:37:16 UTC 2023-02-02 20:42:27 UTC 104.85.176.46
js.driftt.com (31) 5753 2018-06-14 15:30:16 UTC 2023-02-02 18:51:55 UTC 54.230.111.67
metrics.api.drift.com (4) 6235 2018-08-07 15:52:06 UTC 2023-02-02 17:14:58 UTC 54.147.21.139
geolocation.onetrust.com (1) 802 2018-02-07 11:23:41 UTC 2023-02-02 13:37:15 UTC 104.18.27.85
contile.services.mozilla.com (1) 1114 2021-05-27 18:32:35 UTC 2023-02-02 04:09:20 UTC 34.117.237.239
stats.g.doubleclick.net (2) 96 2012-07-01 17:13:23 UTC 2023-02-02 12:43:40 UTC 173.194.222.155
732-gkv-655.mktoresp.com (1) 961436 2018-06-19 18:49:22 UTC 2022-11-21 22:29:53 UTC 192.28.144.124
secure.adnxs.com (1) 396 2012-05-22 16:37:37 UTC 2023-02-02 04:12:42 UTC 185.89.210.90
event.api.drift.com (1) 7238 2016-08-04 07:30:07 UTC 2023-02-03 03:50:46 UTC 54.147.21.139
seramount.com (1) 797683 2021-04-08 02:08:31 UTC 2023-01-20 20:27:23 UTC 141.193.213.20
fonts.googleapis.com (1) 8877 2012-05-23 12:41:44 UTC 2023-02-02 08:36:04 UTC 142.250.74.138
cdn.cookielaw.org (5) 502 2013-12-28 13:20:36 UTC 2023-02-02 04:10:04 UTC 104.16.149.64
ipv6.6sc.co (1) 0 2022-05-05 12:08:31 UTC 2023-02-02 16:14:17 UTC 104.88.13.39 Domain (6sc.co) ranked at: 4938

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
Timestamp Severity Source IP Destination IP Alert
2023-02-03 07:39:21 UTC 2 Client IP  192.169.69.26 ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain 

Blocklists

OpenPhish
 No alerts detected

PhishTank
 No alerts detected

Fortinet's Web Filter
 No alerts detected

mnemonic secure dns
 No alerts detected

Quad9 DNS
 No alerts detected

ThreatFox
 No alerts detected


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 1 reports on IP: 54.161.232.199
Date UQ / IDS / BL URL IP
2023-02-03 07:38:54 +0000 0 - 1 - 0 www.workingmother.com/data-scientist-mom-char (...) 54.161.232.199


Last 5 reports on ASN: AMAZON-AES
Date UQ / IDS / BL URL IP
2023-03-31 22:37:47 +0000 0 - 9 - 7 2244538a872916.lhr.life/ 54.172.225.3
2023-03-31 22:27:17 +0000 0 - 1 - 0 citizensverify.cf/ 3.84.103.33
2023-03-31 22:25:34 +0000 48 - 22 - 0 orderaas1971481.duckdns.org/5fdd80/htl/start/ (...) 34.224.1.145
2023-03-31 22:09:55 +0000 0 - 2 - 0 bridgemob.com/dz/faststreamb/?affl=985&clicki (...) 18.209.54.242
2023-03-31 22:02:36 +0000 0 - 0 - 2 ecomhdnmkt.com/?a=8929&c=145911&s1=&s2=1027bf (...) 54.84.243.250


Last 1 reports on domain: workingmother.com
Date UQ / IDS / BL URL IP
2023-02-03 07:38:54 +0000 0 - 1 - 0 www.workingmother.com/data-scientist-mom-char (...) 54.161.232.199


No other reports with similar screenshot

JavaScript

Executed Scripts (64)

Executed Evals (1)
#1 JavaScript::Eval (size: 77) - SHA256: 47fb84282c9b85f0efcf0fb50cf1c470648332598816aa9e0ac8f373079463c0
(function() {
    return document.location.hostname + document.location.pathname
})();

Executed Writes (0)


HTTP Transactions (120)


Request Response
                                        
                                            GET /data-scientist-mom-charts-nail-new-moms-exhausted HTTP/1.1 
Host: www.workingmother.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

search
                                         35.169.219.177
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
                                        
Server: awselb/2.0
Date: Fri, 03 Feb 2023 07:38:42 GMT
Content-Length: 110
Connection: keep-alive
Location: https://seramount.com:443/working-mother/


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size:   110
Md5:    f366e0e18b589cb6f243bf43ce75e83c
Sha1:   0f95dda86ab28586f00bc878b42ecd09e579a890
Sha256: 075f0fd7eeb4bfec31816d61be72b064d4899853b224bd5f380041d7dd0b1d19
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "373799B5749D2CB08B5721699A3E4C6B94B0D41604AC07D4EF7179E47DABC71F"
Last-Modified: Wed, 01 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21037
Expires: Fri, 03 Feb 2023 13:29:19 GMT
Date: Fri, 03 Feb 2023 07:38:42 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "EB0CE9AE50D156FE5924B2D77346735E4E93B5240CFF301C9AA835BB0B385815"
Last-Modified: Wed, 01 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15051
Expires: Fri, 03 Feb 2023 11:49:33 GMT
Date: Fri, 03 Feb 2023 07:38:42 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "DE0E45969A2AD95E52F7E2FBD0D021D9075DD7B14666C929346EFE111F648F7C"
Last-Modified: Thu, 02 Feb 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7527
Expires: Fri, 03 Feb 2023 09:44:09 GMT
Date: Fri, 03 Feb 2023 07:38:42 GMT
Connection: keep-alive

                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         35.241.9.150
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Retry-After, Backoff, Content-Type, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Fri, 03 Feb 2023 06:43:34 GMT
age: 3308
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    ff250d3ef3fa45322bf05039a0122a9f
Sha1:   b3e7a2c383bce1bab807dbe1a03c375258b51f1d
Sha256: d07f109a96e0ae6ec7b1d46ce8761b3f06fe845769ce65d69e053dd40aa561ba
                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         34.160.144.191
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
x-amz-id-2: sJs4tp5U9oU2VTZWcSYNf+cNHw6+QiS0xLe0vzQs0Hc4nsV55HZvD6spABAl2fkFewdE7i33uEw=
x-amz-request-id: SWR0E6TA8T2558NJ
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 03 Feb 2023 06:52:18 GMT
age: 2784
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    7b922915ebf1fa3639b333f994c74f24
Sha1:   144a3f80b98fd0652d4614f24cf6cbbee40f8938
Sha256: adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Fri, 03 Feb 2023 07:38:42 GMT
content-length: 12
access-control-allow-credentials: true
access-control-expose-headers: content-type
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "E8A4801C46B02DB6B227E586CC48BF39998FE8A216B978FAB09E53DDA564210C"
Last-Modified: Wed, 01 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21516
Expires: Fri, 03 Feb 2023 13:37:19 GMT
Date: Fri, 03 Feb 2023 07:38:43 GMT
Connection: keep-alive

                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         35.241.9.150
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Retry-After, Last-Modified, Cache-Control, Pragma, ETag, Backoff, Content-Type, Alert, Expires
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Fri, 03 Feb 2023 07:07:19 GMT
age: 1884
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "6A9838D00256431807CA382FC205064B07C08D5054F2895C2AE3CC4E9094179A"
Last-Modified: Wed, 01 Feb 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14579
Expires: Fri, 03 Feb 2023 11:41:42 GMT
Date: Fri, 03 Feb 2023 07:38:43 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "E8A4801C46B02DB6B227E586CC48BF39998FE8A216B978FAB09E53DDA564210C"
Last-Modified: Wed, 01 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21516
Expires: Fri, 03 Feb 2023 13:37:19 GMT
Date: Fri, 03 Feb 2023 07:38:43 GMT
Connection: keep-alive

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 03 Feb 2023 07:38:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /icon?family=Material+Icons HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seramount.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.138
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                        
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 03 Feb 2023 07:38:43 GMT
date: Fri, 03 Feb 2023 07:38:43 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

                                        
                                            GET /mcjs-connected/js/users/fcaf46036fd437d6db5a35bbf/56ab36ffe88730cec4c2cfc4b.js HTTP/1.1 
Host: chimpstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seramount.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         96.6.17.210
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
x-amz-id-2: BMscTuGwyBrfBtO76oMmULL0Oh2ZA5RuymyjtH80qp3uiG8DDIXuSIvItsW09vv6J7V4WGd4wQM=
x-amz-request-id: JAZKZBTXPZJEDGBK
Last-Modified: Thu, 15 Jul 2021 06:58:11 GMT
ETag: "4b60d3ea13c42468679685c32a1680ac"
Accept-Ranges: bytes
Server: AmazonS3
Unused62: 8096267
X-EdgeConnect-MidMile-RTT: 18, 18
X-EdgeConnect-Origin-MEX-Latency: 90, 97
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=1800
Expires: Fri, 03 Feb 2023 08:08:43 GMT
Date: Fri, 03 Feb 2023 07:38:43 GMT
Content-Length: 653
Connection: keep-alive


--- Additional Info ---
Magic:  ASCII text
Size:   653
Md5:    5c4175ac0e0e6d95ac18d804b263153a
Sha1:   66985f07a251a4cb15b7570f57ae7eb30ab0e180
Sha256: 58bde7a88d8aa4d7f183b4749b2f747cda33ed54035190f10ba81c9312ba25d7
                                        
                                            GET /qib2tzc.css HTTP/1.1 
Host: use.typekit.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seramount.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         23.36.76.122
HTTP/2 200 OK
content-type: text/css;charset=utf-8
                                        
server: nginx
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains;
cache-control: private, max-age=600, stale-while-revalidate=604800
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
content-encoding: gzip
content-length: 965
date: Fri, 03 Feb 2023 07:38:43 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (516)
Size:   965
Md5:    2dda5228709c5937375e8f009ef60489
Sha1:   5a361d13bb5ed51852652130305b3aa6c3c161f2
Sha256: 7f82d62048221bbd805a019f1b73fa0437f221717e03dc5cc5be74f0cf11a4d0
                                        
                                            GET /p.css?s=1&k=qib2tzc&ht=tk&f=9785.9786.9787.9788.9789.9790.9791.9792.9793.9794&a=27097660&app=typekit&e=css HTTP/1.1 
Host: p.typekit.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://use.typekit.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site

search
                                         23.33.119.26
HTTP/2 200 OK
content-type: text/css
                                        
server: nginx
content-length: 5
last-modified: Thu, 28 Jul 2022 22:24:50 GMT
etag: "62e30cb2-5"
cache-control: public, max-age=604800
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
accept-ranges: bytes
date: Fri, 03 Feb 2023 07:38:43 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   5
Md5:    83d24d4b43cc7eef2b61e66c95f3d158
Sha1:   f0cafc285ee23bb6c28c5166f305493c4331c84d
Sha256: 1c0ff118a4290c99f39c90abb38703a866e47251b23cca20266c69c812ccafeb
                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 8+8d5GgDS+FIrmhCHhF83A==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

search
                                         52.43.158.68
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: tjmn2FEWkakAfRjhB4g79X859cQ=

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 03 Feb 2023 07:38:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /af/2dce9d/00000000000000003b9b489b/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n4&v=3 HTTP/1.1 
Host: use.typekit.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://seramount.com
Connection: keep-alive
Referer: https://use.typekit.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         23.36.76.122
HTTP/2 200 OK
content-type: application/font-woff2
                                        
server: nginx
content-length: 26228
etag: "a1119676fee063a49b1ff958b4d90e4f6e89bf96"
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=31536000
date: Fri, 03 Feb 2023 07:38:44 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 26228, version 1.0\012- data
Size:   26228
Md5:    67a4163c7175977f12ffcb5cdbf4d3f6
Sha1:   958020de5470d54090f127c117198be71bcbd178
Sha256: 9f773c8d3e203911e734c49d7bc12c559a1b8dd1361ddc22459591696953f130
                                        
                                            GET /af/23ddd7/00000000000000003b9b489e/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n7&v=3 HTTP/1.1 
Host: use.typekit.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://seramount.com
Connection: keep-alive
Referer: https://use.typekit.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         23.36.76.122
HTTP/2 200 OK
content-type: application/font-woff2
                                        
server: nginx
content-length: 25712
etag: "85a7dc54b1423ed2b8515fe6cdedf49858069f1b"
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=31536000
date: Fri, 03 Feb 2023 07:38:44 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 25712, version 1.0\012- data
Size:   25712
Md5:    8adc5a06d414bb0903e487a91b8f883d
Sha1:   e75fde897de7fadbd1b0a62fcf1422410151e948
Sha256: 6288260a06fe7aed43a17310ce3829c5d7fafe983d20b9c89cb3c0f23037ef6a
                                        
                                            GET /af/e4377d/00000000000000003b9b48a0/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n9&v=3 HTTP/1.1 
Host: use.typekit.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://seramount.com
Connection: keep-alive
Referer: https://use.typekit.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         23.36.76.122
HTTP/2 200 OK
content-type: application/font-woff2
                                        
server: nginx
content-length: 25984
etag: "2e9cfb1d54b2d6a0227370aa808d14a33d0eceb0"
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=31536000
date: Fri, 03 Feb 2023 07:38:44 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   57957
Md5:    bcf364289e5a665f70fbf0af4bb6422d
Sha1:   d20eb7881eb75fd8769b943704378ac8c4e00922
Sha256: 889cfcf2d4f9e931926a9d2875fdf64d6f42225ca8fbd1b2d24d0f566e8a132d
                                        
                                            GET /af/199ff2/00000000000000003b9b489a/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=i4&v=3 HTTP/1.1 
Host: use.typekit.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://seramount.com
Connection: keep-alive
Referer: https://use.typekit.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         23.36.76.122
HTTP/2 200 OK
content-type: application/font-woff2
                                        
server: nginx
content-length: 22872
etag: "e04ebf0054f0c32b150671a99b486763979840b0"
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=31536000
date: Fri, 03 Feb 2023 07:38:44 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   24097
Md5:    3bc94cad1355802ad636e49d8691cb8f
Sha1:   562e5400c6f4dec08ee7484f5ca71cdd8080ce3b
Sha256: fa0ae4a9628786055bef8aa42e0107226352797b8ad19b1830e1f4d3b48ef302
                                        
                                            GET /gtm.js?id=GTM-PXQH2RK HTTP/1.1 
Host: www.googletagmanager.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seramount.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.168
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                        
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 03 Feb 2023 07:38:44 GMT
expires: Fri, 03 Feb 2023 07:38:44 GMT
cache-control: private, max-age=900
last-modified: Fri, 03 Feb 2023 06:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 75600
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (47826)
Size:   88191
Md5:    8039385a9f85020920e253f50f2aebbf
Sha1:   3b146a3445d5a2f63e2d201facc63191bc4ae972
Sha256: 4dee0303aec804152ddad39cfe724860834a9096c140e5697c5dc8a2c725058e
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 03 Feb 2023 07:38:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 4607
Cache-Control: 'max-age=158059'
Date: Fri, 03 Feb 2023 07:38:44 GMT
Last-Modified: Fri, 03 Feb 2023 06:21:57 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 280

                                        
                                            GET /6si.min.js HTTP/1.1 
Host: j.6sc.co
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seramount.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         104.85.176.46
HTTP/2 200 OK
content-type: application/javascript
                                        
accept-ranges: bytes
etag: "63890c9b-7ad6"
last-modified: Thu, 01 Dec 2022 20:20:43 GMT
pragma: no-cache
server: nginx/1.14.0 (Ubuntu)
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cache-control: private, no-cache, proxy-revalidate
expires: Fri, 03 Feb 2023 07:38:44 GMT
date: Fri, 03 Feb 2023 07:38:44 GMT
content-length: 10143
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (31446), with no line terminators
Size:   10143
Md5:    196d887c95a70e13368078cd7dc3588b
Sha1:   152f2169214fbaabca75c73721ff3af9830b4c0d
Sha256: acc2a94beeae0d952d795c021bddca3077b053bbbd1417208d6b4f517b9410d7
                                        
                                            GET /scripttemplates/otSDKStub.js HTTP/1.1 
Host: cdn.cookielaw.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seramount.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         104.16.149.64
HTTP/2 200 OK
content-type: application/javascript
                                        
date: Fri, 03 Feb 2023 07:38:44 GMT
content-length: 8384
content-encoding: gzip
content-md5: 4ki7PtkHDuSPC1vGdOaknQ==
last-modified: Wed, 01 Feb 2023 17:51:43 GMT
etag: 0x8DB047CFAAF4F1C
x-ms-request-id: 7cf48f33-d01e-007d-359b-36442e000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=86400
cf-cache-status: HIT
age: 46814
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7939823a9a37b500-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (3398), with no line terminators
Size:   1389
Md5:    6712d8a1e5b67b9a8287f84ea27d6754
Sha1:   b089c8f2d43cb9b5d0430b6acd198d306e31bcce
Sha256: 192060152a41ae4c1f5d81ee7ce6fb5e23fa37499e4feb29395f5589512d86d5
                                        
                                            GET / HTTP/1.1 
Host: c.6sc.co
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://seramount.com
Connection: keep-alive
Referer: https://seramount.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         104.85.176.46
HTTP/2 200 OK
content-type: text/html
                                        
content-length: 7
date: Fri, 03 Feb 2023 07:38:44 GMT
access-control-allow-origin: https://seramount.com
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: GET,POST
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   7
Md5:    d97623d172f087d9640da9acd38830ff
Sha1:   515bd358bb7d990930f0e2b3de399db1787a2567
Sha256: fe04a9dc88d3f3be8d4f6bc63a9a80f45a4c6d8460e7551dab849457c091920a
                                        
                                            GET / HTTP/1.1 
Host: ipv6.6sc.co
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://seramount.com
Connection: keep-alive
Referer: https://seramount.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         104.88.13.39
HTTP/2 200 OK
content-type: text/html
                                        
content-length: 4
expires: Fri, 03 Feb 2023 07:38:44 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Fri, 03 Feb 2023 07:38:44 GMT
server-timing: cdn-cache; desc=HIT, edge; dur=1
6si-ipv6: null
access-control-allow-origin: https://seramount.com
vary: Origin
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   4
Md5:    37a6259cc0c1dae299a7866489dff0bd
Sha1:   2be88ca4242c76e8253ac62474851065032d6833
Sha256: 74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b
                                        
                                            GET /getuidj HTTP/1.1 
Host: secure.adnxs.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://seramount.com
Connection: keep-alive
Referer: https://seramount.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         185.89.210.90
HTTP/1.1 200 OK
Content-Type: application/json; charset=utf-8
                                        
Server: nginx/1.21.3
Date: Fri, 03 Feb 2023 07:38:44 GMT
Content-Length: 11
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://seramount.com
Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness
AN-X-Request-Uuid: 16cf1a2e-e0e7-4064-969c-0080f25c956f
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 941.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   11
Md5:    096dc398f48c9a61584478fea3ee50a1
Sha1:   7d0a5f87833db711b2eb52c73638c5e14538a969
Sha256: 31b45c462302ac175bfa43f9e5591491db780ca094f6ecdd2907f25ad578448d
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 5878
Cache-Control: max-age=168131
Date: Fri, 03 Feb 2023 07:38:44 GMT
Etag: "63dc90d1-118"
Expires: Sun, 05 Feb 2023 06:20:55 GMT
Last-Modified: Fri, 03 Feb 2023 04:42:57 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 280

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 03 Feb 2023 07:38:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /munchkin.js HTTP/1.1 
Host: munchkin.marketo.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seramount.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         88.221.99.189
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Accept-Ranges: bytes
ETag: "92b41a298690c047b0c4602dd843cba4:1662686319.691662"
Last-Modified: Fri, 09 Sep 2022 01:18:39 GMT
Server: AkamaiNetStorage
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Fri, 03 Feb 2023 07:38:44 GMT
Content-Length: 728
Connection: keep-alive
P3P: policyref="http://www.marketo.com/w3c/p3p.xml", CP="NOI DSP COR NID CURi OUR NOR"


--- Additional Info ---
Magic:  ASCII text, with very long lines (521)
Size:   728
Md5:    51a92d8c69733d719447dea0416ed039
Sha1:   69f4c1e0b7ebba812bc096708d57627927dff265
Sha256: cb483c0ea4012ac512bcba6204b37622b388c1aefd4ae9028f60abb965f23d29
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 03 Feb 2023 07:38:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-LFDV5TWEKR&cid=918651718.1675409954&gtm=45je3210&aip=1&z=64766119 HTTP/1.1 
Host: www.google.no
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seramount.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.35
HTTP/2 200 OK
content-type: image/gif
                                        
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 03 Feb 2023 07:38:44 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-M9L4KVVD1Z&cid=918651718.1675409954&gtm=45je3210&aip=1&uid=visitorId&z=1653885326 HTTP/1.1 
Host: www.google.no
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seramount.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.35
HTTP/2 200 OK
content-type: image/gif
                                        
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 03 Feb 2023 07:38:44 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 03 Feb 2023 07:38:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /scripttemplates/6.25.0/otBannerSdk.js HTTP/1.1 
Host: cdn.cookielaw.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seramount.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         104.16.149.64
HTTP/2 200 OK
content-type: application/javascript
                                        
date: Fri, 03 Feb 2023 07:38:44 GMT
content-length: 77456
content-encoding: gzip
content-md5: wv3c0qnkBhaWE//T4i2BGA==
last-modified: Fri, 22 Oct 2021 16:52:46 GMT
etag: 0x8D9957C5F8AA42D
x-ms-request-id: ac5e766c-101e-00e8-7a4e-e3251d000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=86400
cf-cache-status: HIT
age: 20718
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7939823d2d41b500-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65455)
Size:   77456
Md5:    c2fddcd2a9e406169613ffd3e22d8118
Sha1:   9cafb108fc9993b94caf3fa097102b167a5047fa
Sha256: 7c05f875d73d592e29ddd56cdb58dbed117cb64ffee713b12c363dc6f2701de8
                                        
                                            GET /box-2722367854ce9702c28ea74c51e2a23f.html HTTP/1.1 
Host: vars.hotjar.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seramount.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

search
                                         143.204.55.101
HTTP/2 200 OK
content-type: text/html
                                        
content-length: 1035
date: Mon, 30 Jan 2023 16:06:06 GMT
accept-ranges: bytes
cache-control: max-age=31536000
content-encoding: br
cross-origin-embedder-policy: require-corp
cross-origin-resource-policy: cross-origin
etag: "8665e233ef6caaf010ca89793f27b6f8"
last-modified: Mon, 30 Jan 2023 16:05:37 GMT
strict-transport-security: max-age=2592000; includeSubDomains
x-robots-tag: none
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 4f01f770085624552bc30a98954f963a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: dhruht9vic0CJxEb7pFK99nAduE0x7ltwWTft7GWr4lKVoM3GRjCBQ==
age: 315158
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2368), with no line terminators
Size:   1035
Md5:    8665e233ef6caaf010ca89793f27b6f8
Sha1:   5c593fa5f33e55b3081308b43e6e801b56c047f7
Sha256: 435a3ca7c1c49cbfac193647d056e46217e5c3f9c65c354974ad7acdfb8925ac
                                        
                                            GET /v1/beacon/img.gif?token=d7534a5d9ff02a0159a4ec3c03fa2ed2&svisitor=null&visitor=5cf36cab-fcf6-4e78-831e-1840c354ba87&session=b34c3a56-0e94-4733-8fc8-c6c766421d66&event=a_pageload&q=%7B%22pageLoadTime%22%3A%22Fri%2C%2003%20Feb%202023%2007%3A39%3A14%20GMT%22%7D&isIframe=false&m=%7B%22description%22%3A%22%22%2C%22keywords%22%3A%22%22%2C%22title%22%3A%22Farewell%20and%20Thank%20You%20%7C%20Seramount%22%7D&cb=&r=&thirdParty=%7B%7D&v2=1&pageURL=https%3A%2F%2Fseramount.com%2Fworking-mother%2F&pageViewId=534f6600-3ae5-484b-883d-c3c8bae129e5&an_uid=0 HTTP/1.1 
Host: b.6sc.co
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seramount.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         104.85.176.46
HTTP/2 200 OK
content-type: image/gif
                                        
accept-ranges: bytes
cache-control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate
etag: "5e502810-2b"
expires: Wed, 19 Apr 2000 11:43:00 GMT
last-modified: Fri, 21 Feb 2020 18:57:20 GMT
pragma: no-cache
server: nginx/1.14.0 (Ubuntu)
x-content-type-options: nosniff
content-length: 43
date: Fri, 03 Feb 2023 07:38:44 GMT
set-cookie: 6suuid=980549176041000004badc63da02000076b55e00; expires=Sun, 02-Feb-2025 07:38:44 GMT; path=/; domain=.6sc.co; SameSite=None; secure
access-control-allow-origin:
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: GET,POST
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    f837aa60b6fe83458f790db60d529fc9
Sha1:   14af87ccec7f81bb28d53c84da2fd5a9d5925cda
Sha256: dcecab1355b5c2b9ecef281322bf265ac5840b4688748586e9632b473a5fe56b
                                        
                                            GET /162/munchkin.js HTTP/1.1 
Host: munchkin.marketo.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seramount.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         88.221.99.189
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Accept-Ranges: bytes
ETag: "75daf56f6191efe42577301908659c29:1656637152.894482"
Last-Modified: Fri, 01 Jul 2022 00:59:12 GMT
Server: AkamaiNetStorage
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=8640000
Expires: Sun, 14 May 2023 07:38:44 GMT
Date: Fri, 03 Feb 2023 07:38:44 GMT
Content-Length: 4677
Connection: keep-alive
P3P: policyref="http://www.marketo.com/w3c/p3p.xml", CP="NOI DSP COR NID CURi OUR NOR"


--- Additional Info ---
Magic:  ASCII text, with very long lines (606)
Size:   4677
Md5:    3e9baed982956735f6e0a0e756d97ed9
Sha1:   9223be6a494a10959101a7942419df7b05b84d73
Sha256: 930a508ed0ea6b4861d19c0738360182514010913c4ebfe9352064ae5006f8a1
                                        
                                            GET /modules.4b160a4831adaf5337e6.js HTTP/1.1 
Host: script.hotjar.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seramount.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         54.230.111.79
HTTP/2 200 OK
content-type: application/javascript
                                        
content-length: 68316
date: Mon, 30 Jan 2023 16:06:06 GMT
accept-ranges: bytes
access-control-allow-origin: *
cache-control: max-age=31536000
content-encoding: br
cross-origin-resource-policy: cross-origin
etag: "3315b6999637291711ab85ba678211fa"
last-modified: Mon, 30 Jan 2023 16:05:37 GMT
strict-transport-security: max-age=2592000; includeSubDomains
x-content-type-options: nosniff
x-robots-tag: none
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: KIMSlxLFDcXgUgPCsoHZ6tG2HTR-CitFAUscxRzd-vw5aFyFgqPfEg==
age: 315158
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (48602)
Size:   68316
Md5:    3315b6999637291711ab85ba678211fa
Sha1:   d1bba723aa49e6276dfdb0f1313a9bf0b64be153
Sha256: b3bd4f702044ae91c9227ce2d5c8411d3fec3abb82c9c1b7a9b69d2011c520e5
                                        
                                            GET /consent/f72b7cf6-be3e-4126-bc86-e95f04ecb6b3/91c8daac-fb00-42a9-b73a-d472eddc5960/en.json HTTP/1.1 
Host: cdn.cookielaw.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://seramount.com/
Origin: https://seramount.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         104.16.149.64
HTTP/2 200 OK
content-type: application/x-javascript
                                        
date: Fri, 03 Feb 2023 07:38:44 GMT
content-length: 6726
cache-control: public, max-age=86400
content-encoding: gzip
content-md5: qHH2m9rteWv92KiLbBspsg==
last-modified: Thu, 07 Apr 2022 17:51:56 GMT
etag: 0x8DA18BF4EBF8CA3
x-ms-request-id: fe89abf3-401e-0015-7457-f41a7f000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
expires: Sat, 04 Feb 2023 07:38:44 GMT
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7939823dcad7b523-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , Unicode text, UTF-8 text, with very long lines (25182), with no line terminators
Size:   6726
Md5:    a871f69bdaed796bfdd8a88b6c1b29b2
Sha1:   695016a9995eeb65dddc2626ff1eac7e6401aab0
Sha256: af4218c1c7dc78d5df6f9fac2037a28028b4d5123f9a184d55392c3a8272cbb5
                                        
                                            GET /scripttemplates/6.25.0/assets/otFlat.json HTTP/1.1 
Host: cdn.cookielaw.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://seramount.com/
Origin: https://seramount.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         104.16.149.64
HTTP/2 200 OK
content-type: application/json
                                        
date: Fri, 03 Feb 2023 07:38:44 GMT
content-length: 2950
content-encoding: gzip
content-md5: QAufc0ozHqszfMLxOJh3oA==
last-modified: Fri, 22 Oct 2021 16:52:36 GMT
etag: 0x8D9957C59E8C180
x-ms-request-id: a3d73e02-501e-0127-4a58-1504fa000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=86400
cf-cache-status: HIT
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7939823e2b81b523-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (10843)
Size:   2950
Md5:    400b9f734a331eab337cc2f1389877a0
Sha1:   9270ab9f463fc188a8a1c60f0ed7b0b5c03817ae
Sha256: fb6da26d0210aa335b568a8edb8e763a152c3e62a3bfff3301ab23eac0680f49
                                        
                                            GET /scripttemplates/6.25.0/assets/v2/otPcCenter.json HTTP/1.1 
Host: cdn.cookielaw.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://seramount.com/
Origin: https://seramount.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         104.16.149.64
HTTP/2 200 OK
content-type: application/json
                                        
date: Fri, 03 Feb 2023 07:38:44 GMT
content-length: 11581
content-encoding: gzip
content-md5: 9E3lVDuBS011aFtnS8Lptg==
last-modified: Fri, 22 Oct 2021 16:52:38 GMT
etag: 0x8D9957C5B1359BC
x-ms-request-id: 24d5d094-601e-00c5-1f58-15a6dd000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=86400
cf-cache-status: HIT
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7939823e3b91b523-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (37705)
Size:   11581
Md5:    f44de5543b814b4d75685b674bc2e9b6
Sha1:   ce250b8d899300ad3c5c3bfce6ddcaaf526daa22
Sha256: 6eb22740805946d407db89e74e24cb002dce3d95095717e5a94f5f3a22970f52
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 03 Feb 2023 07:38:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /g/collect?v=2&tid=G-M9L4KVVD1Z&gtm=45je3210&_p=1136833168&_gaz=1&cid=918651718.1675409954&ul=en-us&sr=1280x1024&uaW=1&_s=1&dl=seramount.com%2Fworking-mother%2F&uid=visitorId&sid=1675409954&sct=1&seg=0&dt=Farewell%20and%20Thank%20You%20%7C%20Seramount&en=page_view&_fv=1&_nsi=1&_ss=1 HTTP/1.1 
Host: region1.analytics.google.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://seramount.com
Connection: keep-alive
Referer: https://seramount.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0

search
                                         216.239.34.36
HTTP/2 204 No Content
content-type: text/plain
                                        
access-control-allow-origin: https://seramount.com
date: Fri, 03 Feb 2023 07:38:45 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

                                        
                                            POST /g/collect?v=2&tid=G-LFDV5TWEKR&gtm=45je3210&_p=1136833168&_gaz=1&cid=918651718.1675409954&ul=en-us&sr=1280x1024&uaW=1&_s=1&sid=1675409954&sct=1&seg=0&dl=https%3A%2F%2Fseramount.com%2Fworking-mother%2F&dt=Farewell%20and%20Thank%20You%20%7C%20Seramount&en=page_view&_fv=1&_ss=1 HTTP/1.1 
Host: region1.analytics.google.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://seramount.com
Connection: keep-alive
Referer: https://seramount.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers

search
                                         216.239.34.36
HTTP/2 204 No Content
content-type: text/plain
                                        
access-control-allow-origin: https://seramount.com
date: Fri, 03 Feb 2023 07:38:45 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "98A14BD950CEC10AEB3D76FA956FE13514F52C742ADBDED7A0FCEF218C7195BA"
Last-Modified: Wed, 01 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15335
Expires: Fri, 03 Feb 2023 11:54:20 GMT
Date: Fri, 03 Feb 2023 07:38:45 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "98A14BD950CEC10AEB3D76FA956FE13514F52C742ADBDED7A0FCEF218C7195BA"
Last-Modified: Wed, 01 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15335
Expires: Fri, 03 Feb 2023 11:54:20 GMT
Date: Fri, 03 Feb 2023 07:38:45 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "98A14BD950CEC10AEB3D76FA956FE13514F52C742ADBDED7A0FCEF218C7195BA"
Last-Modified: Wed, 01 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15335
Expires: Fri, 03 Feb 2023 11:54:20 GMT
Date: Fri, 03 Feb 2023 07:38:45 GMT
Connection: keep-alive

                                        
                                            POST /g/collect?v=2&tid=G-M9L4KVVD1Z&cid=918651718.1675409954&gtm=45je3210&aip=1&uid=visitorId HTTP/1.1 
Host: stats.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://seramount.com
Connection: keep-alive
Referer: https://seramount.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0

search
                                         173.194.222.155
HTTP/2 204 No Content
content-type: text/plain
                                        
access-control-allow-origin: https://seramount.com
date: Fri, 03 Feb 2023 07:38:45 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "98A14BD950CEC10AEB3D76FA956FE13514F52C742ADBDED7A0FCEF218C7195BA"
Last-Modified: Wed, 01 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15335
Expires: Fri, 03 Feb 2023 11:54:20 GMT
Date: Fri, 03 Feb 2023 07:38:45 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F64144d1c-f524-496f-8b52-ba63714dbfc5.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 11565
x-amzn-requestid: 1350cdd1-10c2-44e0-993d-2335a082fb91
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fstgNH0moAMF3OA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63db5c67-02211c3d5ca147c718348860;Sampled=0
x-amzn-remapped-date: Thu, 02 Feb 2023 06:47:03 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: t7OYoLCzzQakW2lqiAUaeKA00Beq4J5elQ5qF7yGUb2L7JSNUJCPNA==
via: 1.1 6ba2a21321beeef65404429d0a4b6380.cloudfront.net (CloudFront), 1.1 12a392bc3a7281f8d5d4591bfadc41fc.cloudfront.net (CloudFront), 1.1 google
date: Fri, 03 Feb 2023 05:40:54 GMT
age: 7071
etag: "a52c2883bad98fa20333aa639a5dd3a5bf544c8e"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   11565
Md5:    e366b32074025aaf60bbae8bdb08d330
Sha1:   a52c2883bad98fa20333aa639a5dd3a5bf544c8e
Sha256: 9d661c26effaec9efee16833f6459d6ecbe4f77b822c9c46e2a6433bda816e5c
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F02b3a6ce-4c58-4537-b381-4408c9d874e0.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 13256
x-amzn-requestid: 94897535-7110-4586-9ffe-7534c156b230
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fpdsiFvmIAMFhhg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63da0fe9-09d96dc02d459e3469edc87e;Sampled=0
x-amzn-remapped-date: Wed, 01 Feb 2023 07:08:25 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: Ec39RoE09fzC07QZdbGy2XODD-Pv-iKcYES_wqhvuoO6eF7vMwGLVw==
via: 1.1 1b0911478686968732f973d6e5e31d10.cloudfront.net (CloudFront), 1.1 a847181d425b7fc57e81eb3c800bfdf2.cloudfront.net (CloudFront), 1.1 google
date: Fri, 03 Feb 2023 05:58:16 GMT
etag: "158bbc1deaf9becfab7a022140881c7cdfa569ba"
age: 6029
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   13256
Md5:    d6ea028ef77181355868bb36e11a7b88
Sha1:   158bbc1deaf9becfab7a022140881c7cdfa569ba
Sha256: 639d95e5e0d47333b64456d10fdf58a6b08fc0534bdbefd0fbf1f95a3114aae2
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sca1b.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         54.230.245.110
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Fri, 03 Feb 2023 07:38:45 GMT
Last-Modified: Fri, 03 Feb 2023 07:07:01 GMT
Server: ECS (nyb/1D0F)
X-Cache: Miss from cloudfront
Via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: Z7JgHQutApJNBQgu_fvVwaZ81hMTPUor4nmKydQHFeFhFJpku1L_mA==
Age: 1904

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffda40dcf-1e5b-4e49-bd65-084935f52db9.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 6791
x-amzn-requestid: 665115ea-728e-4a55-aaf8-b09db3fa67a2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ffl96FIzIAMFYGg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d61d25-0abbd7262ca10b7a7d2bf9eb;Sampled=0
x-amzn-remapped-date: Sun, 29 Jan 2023 07:15:49 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: T-OEFTj1rywKfBhEUUD0Rc6pFbk-gyFsETr_fjDQR5WGHAVOBgrB9A==
via: 1.1 446313511980eb02f28ff5a9a4147c0a.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Thu, 02 Feb 2023 19:18:01 GMT
age: 44444
etag: "4b0b8cb5ced3e3e67b0320a3bbaecd2176e21b81"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6791
Md5:    e706db8a6107758a148463e916f2532d
Sha1:   4b0b8cb5ced3e3e67b0320a3bbaecd2176e21b81
Sha256: 673f18036a53f8ff297ef6a63fd094e7c41d90f3960f0e687a741cc7dd3f6172
                                        
                                            POST /g/collect?v=2&tid=G-LFDV5TWEKR&cid=918651718.1675409954&gtm=45je3210&aip=1 HTTP/1.1 
Host: stats.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://seramount.com
Connection: keep-alive
Referer: https://seramount.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0

search
                                         173.194.222.155
HTTP/2 204 No Content
content-type: text/plain
                                        
access-control-allow-origin: https://seramount.com
date: Fri, 03 Feb 2023 07:38:45 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F524a46fd-88eb-4539-9d8b-1ac679ae5990.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 8211
x-amzn-requestid: 2df5779a-a808-46ec-9246-1a9b9bddd9e9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fmKLVHwroAMF72Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d8bd7b-3cfe97e07d17958836425784;Sampled=0
x-amzn-remapped-date: Tue, 31 Jan 2023 07:04:27 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: _VFg0FMYa1Dg55fLpJTwdX2uZXkYjZSFdbdAKqGQu7GF2dPiawKh1g==
via: 1.1 d1151317ba32afe0e6370fd69fed222e.cloudfront.net (CloudFront), 1.1 fda3b2797d2719576f6b916583a28e52.cloudfront.net (CloudFront), 1.1 google
date: Fri, 03 Feb 2023 05:59:16 GMT
age: 5969
etag: "541e878afee68c8802bb52b0cbbe5a5a0a185392"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   8211
Md5:    114e345e134986d7451148fcea31b29d
Sha1:   541e878afee68c8802bb52b0cbbe5a5a0a185392
Sha256: 5030244d4babd1023166f39c935029d789a91ba90aa3a44c6f4c88ddc947b678
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8458d532-a4e7-4e54-9165-f01ff92729f5.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 5256
x-amzn-requestid: b0455eb8-b10c-4328-8abe-65c5184f6654
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: frx7uFcooAMFpxQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dafd17-553139816e1fb7b65e683dc6;Sampled=0
x-amzn-remapped-date: Thu, 02 Feb 2023 00:00:23 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: pwRBB72InX8OP4KXpQKTs9T4iMY0E3hPX8Nko9gd7m1BOm8_DqbRaA==
via: 1.1 8dbfaf7df256a75768461d934659b6b2.cloudfront.net (CloudFront), 1.1 570075675953459325e00b7bcd171df2.cloudfront.net (CloudFront), 1.1 google
date: Thu, 02 Feb 2023 21:46:56 GMT
age: 35509
etag: "28ce91c8643c4bc4dcc4cd26dfc69dc6219ce5bf"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   5256
Md5:    fe87e986c62630127a7fdd979c802947
Sha1:   28ce91c8643c4bc4dcc4cd26dfc69dc6219ce5bf
Sha256: 770a765c927c0f81d0c41acd45a7a24f5799f9497fcc73489cab4fafbf994bdb
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fedd456a0-d42f-4b40-ad63-ea1dcfaf69eb.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 10166
x-amzn-requestid: 54fe0d12-360f-4d97-bcf3-b24747d956aa
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fY_4zHEcoAMF1iA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d379d1-4ba89e44005f616a0ed3ed24;Sampled=0
x-amzn-remapped-date: Fri, 27 Jan 2023 07:14:25 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: G0R-0w9HtLB5OXb-w-RyR9QCnrddkS29FqF_GeAQa1CRWkqaUJwQoA==
via: 1.1 2afae0d44e2540f472c0635ab62c232a.cloudfront.net (CloudFront), 1.1 1b74ccf4cb51eacf97a0e6d60ae46a3e.cloudfront.net (CloudFront), 1.1 google
date: Thu, 02 Feb 2023 22:27:53 GMT
age: 33052
etag: "f52ccbe6cbced1994acb13a00b05436553b6813e"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   10166
Md5:    2a6aaf87a867f93dc9268a8b27973b97
Sha1:   f52ccbe6cbced1994acb13a00b05436553b6813e
Sha256: 3fbd7441712035f4d53c17eec93bc278e6c072043f3b5a721cac349fc0dabe77
                                        
                                            GET /core/assets/css/17.22abfce0.chunk.css HTTP/1.1 
Host: js.driftt.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://js.driftt.com/core?d=1&embedId=8df477mikhtc&eId=8df477mikhtc&region=US&forceShow=false&skipCampaigns=false&sessionId=ff449f43-c78f-4b55-8ab6-10a2fb02a0e1&sessionStarted=1675409954.714&campaignRefreshToken=4cfd567e-6916-49a3-89a6-04120c41d39c&hideController=false&pageLoadStartTime=1675409953488&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fseramount.com%2Fworking-mother%2F
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         54.230.111.67
HTTP/2 200 OK
content-type: text/css
                                        
content-length: 24
server: istio-envoy
date: Thu, 26 Jan 2023 20:13:51 GMT
last-modified: Tue, 11 Oct 2022 19:09:27 GMT
etag: "0c5dad92482d9a7c7c253510f5082465"
x-amz-server-side-encryption: AES256
x-amz-version-id: eR0JFDWwyA3gsnd_XajqmmtDUbC85CBL
accept-ranges: bytes
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
strict-transport-security: max-age=31536000; includeSubDomains
cache-control: max-age=31536000
x-envoy-upstream-service-time: 22
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 6D1Rc7icrBQZs23exKo-BD4OHVqVgwhPx1cgHcs4U_F3bFjfeDboDA==
age: 645894
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   24
Md5:    0c5dad92482d9a7c7c253510f5082465
Sha1:   534b458f99b4d0bb90c2cf2c4bb3703ef44a52bf
Sha256: 5dbaf0a4ff0f8ac8c1b67550eee84390b089604ffaf71183e417636c7e183ac5
                                        
                                            GET /core/assets/js/9.4a3e9801.chunk.js HTTP/1.1 
Host: js.driftt.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://js.driftt.com/core?d=1&embedId=8df477mikhtc&eId=8df477mikhtc&region=US&forceShow=false&skipCampaigns=false&sessionId=ff449f43-c78f-4b55-8ab6-10a2fb02a0e1&sessionStarted=1675409954.714&campaignRefreshToken=4cfd567e-6916-49a3-89a6-04120c41d39c&hideController=false&pageLoadStartTime=1675409953488&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fseramount.com%2Fworking-mother%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         54.230.111.67
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                        
server: istio-envoy
date: Fri, 27 Jan 2023 17:24:56 GMT
last-modified: Fri, 27 Jan 2023 17:00:22 GMT
etag: W/"c6f58dd3d60f07462254b842dd4f9ca1"
x-amz-server-side-encryption: AES256
x-amz-version-id: hzm2Healt7ZjvNDM3nYQ47BRwWjFuLrw
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
strict-transport-security: max-age=31536000; includeSubDomains
cache-control: max-age=31536000
x-envoy-upstream-service-time: 16
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: RXqACMXNwjXxZEWcFLkAs4x5_uhJ069HqPNwD8e1M8H-fNqq22PBcQ==
age: 569629
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   12811
Md5:    379de7e7f8fdfaf18a87b55bb0b5db6b
Sha1:   3150a50495526860c1bd1d70f83f5d1f15696274
Sha256: 052274fb185bad5d65dd8510c86a3a776f66436dbb743a485a0dbeadf4117533
                                        
                                            GET /core/assets/js/25.22647a55.chunk.js HTTP/1.1 
Host: js.driftt.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://js.driftt.com/core?d=1&embedId=8df477mikhtc&eId=8df477mikhtc&region=US&forceShow=false&skipCampaigns=false&sessionId=ff449f43-c78f-4b55-8ab6-10a2fb02a0e1&sessionStarted=1675409954.714&campaignRefreshToken=4cfd567e-6916-49a3-89a6-04120c41d39c&hideController=false&pageLoadStartTime=1675409953488&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fseramount.com%2Fworking-mother%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         54.230.111.67
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                        
server: istio-envoy
date: Fri, 27 Jan 2023 17:24:56 GMT
last-modified: Fri, 27 Jan 2023 17:00:20 GMT
etag: W/"2ce6c446f71a395ff41647c9ba4b9c19"
x-amz-server-side-encryption: AES256
x-amz-version-id: 3Dq5XEj76miHFBtzwx_L1gh4_UbdDQYk
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
strict-transport-security: max-age=31536000; includeSubDomains
cache-control: max-age=31536000
x-envoy-upstream-service-time: 16
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: DtmgtEU4-0dE-tDqIP_ETs6tunEpypbKdkazLtcfbJ7H4jvYI8u63g==
age: 569628
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   16847
Md5:    9d2bd7b0fc197221a1deac58c17ce73d
Sha1:   2cd8331355db76a754ead09258d1df92cdb6f9e5
Sha256: 6bcdad9b11d59207f18da700a004f0a51eff25884e32ea13d3ab175699b4147e
                                        
                                            GET /core/assets/css/21.c695453b.chunk.css HTTP/1.1 
Host: js.driftt.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://js.driftt.com/core?d=1&embedId=8df477mikhtc&eId=8df477mikhtc&region=US&forceShow=false&skipCampaigns=false&sessionId=ff449f43-c78f-4b55-8ab6-10a2fb02a0e1&sessionStarted=1675409954.714&campaignRefreshToken=4cfd567e-6916-49a3-89a6-04120c41d39c&hideController=false&pageLoadStartTime=1675409953488&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fseramount.com%2Fworking-mother%2F
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         54.230.111.67
HTTP/2 200 OK
content-type: text/css
                                        
content-length: 365
server: istio-envoy
date: Fri, 27 Jan 2023 17:24:57 GMT
last-modified: Fri, 27 Jan 2023 17:00:18 GMT
etag: "06b2963b029c0824382815165bfea73e"
x-amz-server-side-encryption: AES256
x-amz-version-id: ObwTjzJ4TT60JlQVwXz0_ax56DSZu27m
accept-ranges: bytes
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
strict-transport-security: max-age=31536000; includeSubDomains
cache-control: max-age=31536000
x-envoy-upstream-service-time: 18
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: dPOm8M55Hh-SQZtH5z0EofWfY2s-Cc1cigx3ZL_Cw65YbBK5S0HP6Q==
age: 569628
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (365), with no line terminators
Size:   365
Md5:    06b2963b029c0824382815165bfea73e
Sha1:   de23fb128e2589cf384603cfbb7f6b7bef969b05
Sha256: ec3a84e593065a50cd77ce9fba273b4196936940c0813ca248b045df2e2c8eff
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sca1b.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         54.230.245.110
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Fri, 03 Feb 2023 07:38:45 GMT
Last-Modified: Fri, 03 Feb 2023 07:28:17 GMT
Server: ECS (nyb/1D12)
X-Cache: Miss from cloudfront
Via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: pb_Bc_p-3vV2xx7VA40mPInIjJ0ISMx5_SzjI7GuNCTdUIOnp6LuAg==
Age: 628

                                        
                                            POST /webevents/visitWebPage?_mchNc=1675409954623&_mchCn=&_mchId=732-GKV-655&_mchTk=_mch-seramount.com-1675409954622-35070&_mchHo=seramount.com&_mchPo=&_mchRu=%2Fworking-mother%2F&_mchPc=https%3A&_mchVr=162&_mchEcid=&_mchHa=&_mchRe=&_mchQp= HTTP/1.1 
Host: 732-gkv-655.mktoresp.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://seramount.com
Connection: keep-alive
Referer: https://seramount.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0

search
                                         192.28.144.124
HTTP/1.1 200 OK
Content-Type: text/plain; charset=UTF-8
                                        
Server: nginx/1.20.1
Date: Fri, 03 Feb 2023 07:38:45 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Request-Id: ccd99f76-2041-4f86-b9ae-ed920958f268
Content-Encoding: gzip
Access-Control-Allow-Origin: *


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   28
Md5:    9dafc521bd59955b4986f0fc3777f77a
Sha1:   5a572b4730d4a2bce2fa35597a0993c649f26c74
Sha256: e4e90a7b8bacdfe395361149a9fd42f9192b68bdf1497e4454d0ab4c4917f746
                                        
                                            GET /core/assets/js/22.7161d1f7.chunk.js HTTP/1.1 
Host: js.driftt.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://js.driftt.com/core?d=1&embedId=8df477mikhtc&eId=8df477mikhtc&region=US&forceShow=false&skipCampaigns=false&sessionId=ff449f43-c78f-4b55-8ab6-10a2fb02a0e1&sessionStarted=1675409954.714&campaignRefreshToken=4cfd567e-6916-49a3-89a6-04120c41d39c&hideController=false&pageLoadStartTime=1675409953488&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fseramount.com%2Fworking-mother%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         54.230.111.67
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                        
server: istio-envoy
date: Fri, 27 Jan 2023 17:24:56 GMT
last-modified: Fri, 27 Jan 2023 17:00:20 GMT
etag: W/"52c4ba62e758f95005aa326a7c67a335"
x-amz-server-side-encryption: AES256
x-amz-version-id: 5ZSPqOH.m7nwO1FPZhNLZC8oV8HN.hri
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
strict-transport-security: max-age=31536000; includeSubDomains
cache-control: max-age=31536000
x-envoy-upstream-service-time: 15
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: h0CAteGew_w-qu5hrkkHl9OhGu3v3qzl-PMSkXY0YgBvma3rNHOTmA==
age: 569629
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65536), with no line terminators
Size:   22729
Md5:    10a702f638d380519f5d04ea22e1e905
Sha1:   e62236df9326e19ed44f1f66164d2a5b62c5d395
Sha256: fc369e61b41e8d2372f2177b631c641996ff8dc81a031777b1a8a9a986fbad7f
                                        
                                            GET /core/assets/js/27.f44ab9c1.chunk.js HTTP/1.1 
Host: js.driftt.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://js.driftt.com/core?d=1&embedId=8df477mikhtc&eId=8df477mikhtc&region=US&forceShow=false&skipCampaigns=false&sessionId=ff449f43-c78f-4b55-8ab6-10a2fb02a0e1&sessionStarted=1675409954.714&campaignRefreshToken=4cfd567e-6916-49a3-89a6-04120c41d39c&hideController=false&pageLoadStartTime=1675409953488&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fseramount.com%2Fworking-mother%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         54.230.111.67
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                        
server: istio-envoy
date: Fri, 27 Jan 2023 17:24:56 GMT
last-modified: Fri, 27 Jan 2023 17:00:21 GMT
etag: W/"768714622a8a2db20ece85777ba47642"
x-amz-server-side-encryption: AES256
x-amz-version-id: wrgwLo8Ut7GsYvCwhzW617Km3EuBTw6K
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
strict-transport-security: max-age=31536000; includeSubDomains
cache-control: max-age=31536000
x-envoy-upstream-service-time: 24
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ezhKXc5UKiDZiQpHx0_hHdAZCJMgSwNVGpOigH4E5SK5jpzYT1PFsg==
age: 569628
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   18355
Md5:    41b3b7b15159347ac806c14f2267cc57
Sha1:   5faf0dc0b3c8e21e1519c44ffae07596e7462dee
Sha256: 29591205d4d0df90df57893f5bf68700694fa25df6b04b87e802c7e011f87003
                                        
                                            GET /core/assets/js/20.2ffef383.chunk.js HTTP/1.1 
Host: js.driftt.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://js.driftt.com/core?d=1&embedId=8df477mikhtc&eId=8df477mikhtc&region=US&forceShow=false&skipCampaigns=false&sessionId=ff449f43-c78f-4b55-8ab6-10a2fb02a0e1&sessionStarted=1675409954.714&campaignRefreshToken=4cfd567e-6916-49a3-89a6-04120c41d39c&hideController=false&pageLoadStartTime=1675409953488&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fseramount.com%2Fworking-mother%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         54.230.111.67
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                        
server: istio-envoy
date: Fri, 27 Jan 2023 17:24:57 GMT
last-modified: Fri, 27 Jan 2023 17:00:20 GMT
etag: W/"ec6e94b6cea3a27506634867a8009ded"
x-amz-server-side-encryption: AES256
x-amz-version-id: Sl_LzJMe7m6MkWEK9Fxqk3gRf.6SeAYu
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
strict-transport-security: max-age=31536000; includeSubDomains
cache-control: max-age=31536000
x-envoy-upstream-service-time: 26
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: S7N82eqhJAqQteO5l-E81daR6RtVjPhgb7aWXVt3xvDHQK7VyfLzCg==
age: 569628
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   7816
Md5:    0b36cd7afcee4cdeaa1a4861de0d024f
Sha1:   cbc180a390ec96bc9c23260f720091817a2b5837
Sha256: 04ada59b2fd0f6dd227f711be5a2568aa9d58b60125b6950a3d5b31de1e30476
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sca1b.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         54.230.245.110
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Fri, 03 Feb 2023 07:38:45 GMT
Last-Modified: Fri, 03 Feb 2023 06:06:31 GMT
Server: ECS (nyb/1D28)
X-Cache: Miss from cloudfront
Via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: sxaprB6hlQtOcaT-8w9AlWAoGzBYCVbUSlntgHoc7I8Z4Pq4Qmr62A==
Age: 5535

                                        
                                            GET /core/assets/js/10.4b732e6a.chunk.js HTTP/1.1 
Host: js.driftt.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://js.driftt.com/core?d=1&embedId=8df477mikhtc&eId=8df477mikhtc&region=US&forceShow=false&skipCampaigns=false&sessionId=ff449f43-c78f-4b55-8ab6-10a2fb02a0e1&sessionStarted=1675409954.714&campaignRefreshToken=4cfd567e-6916-49a3-89a6-04120c41d39c&hideController=false&pageLoadStartTime=1675409953488&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fseramount.com%2Fworking-mother%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         54.230.111.67
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                        
server: istio-envoy
date: Fri, 27 Jan 2023 17:24:57 GMT
last-modified: Fri, 27 Jan 2023 17:00:19 GMT
etag: W/"fc993533bc5bb380c865a5164f1a76c0"
x-amz-server-side-encryption: AES256
x-amz-version-id: 6IO_iuOmrg_MhTuR.qaW7MVxfukyk3VL
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
strict-transport-security: max-age=31536000; includeSubDomains
cache-control: max-age=31536000
x-envoy-upstream-service-time: 20
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: WK34NrGd-mmnpj4OAstwusTHq4i4ZvzSqIdT_ws0g2u2b2lDsIS7jw==
age: 569627
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   25095
Md5:    35f8d449dc03c06825f194e4dadcf244
Sha1:   75cb68cdfe0e2b931dceb007f3104c1e0cc4f230
Sha256: 74ade89d1cd5634f806f11e61bc5c51d0b0ad56bb2d3274741f657d3b871abbd
                                        
                                            OPTIONS /widget_bootstrap/ping HTTP/1.1 
Host: bootstrap.api.drift.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://js.driftt.com/
Origin: https://js.driftt.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         54.147.21.139
HTTP/2 200 OK
content-type: text/plain
                                        
date: Fri, 03 Feb 2023 07:38:46 GMT
access-control-allow-origin: *
access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version
access-control-allow-credentials: true
access-control-expose-headers: X-Results-Total-Count,X-Page-Info
access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH
access-control-max-age: 1209600
strict-transport-security: max-age=31536000; includeSubDomains
allow: POST,OPTIONS
requestid: drifta8001004cc7acf1b042512aeb27
content-length: 13
x-envoy-upstream-service-time: 1
server: istio-envoy
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   13
Md5:    1424eb76249899d757e4d168341a50dc
Sha1:   42101e71440abd46c8112a96d4d5c0dd445120ce
Sha256: 16f1efa415bfdd7abcf8fdd76cc05ae6fa66ffdfdc730368ecea89ecfe5c3a12
                                        
                                            GET /core/assets/js/38.627f88e6.chunk.js HTTP/1.1 
Host: js.driftt.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://js.driftt.com/core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1675409953488
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         54.230.111.67
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                        
server: istio-envoy
date: Fri, 27 Jan 2023 17:24:57 GMT
last-modified: Fri, 27 Jan 2023 17:00:21 GMT
etag: W/"d03d4e13d59e06f8ec44e39d9d85fa54"
x-amz-server-side-encryption: AES256
x-amz-version-id: VrL4qVVdcSDrKVxDzMDZ1ibCwb1LgkQ.
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
strict-transport-security: max-age=31536000; includeSubDomains
cache-control: max-age=31536000
x-envoy-upstream-service-time: 18
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 8fA3uoaDwxbWNtT_jl3xUO2smi54Gs3Th1L3XK2wzY8f2YbMWm2mAw==
age: 569628
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   18898
Md5:    b5430f1216a19db916e8b492e6b299c8
Sha1:   87163040782c10a879409fd883dc162b47b18613
Sha256: e5660ccd547feebd3242d8b5cfd33192c96275f47ca3700b7e7b412e5bd4c8ad
                                        
                                            OPTIONS /monitoring/metrics/widget/init/v2 HTTP/1.1 
Host: metrics.api.drift.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: authorization,content-type
Referer: https://js.driftt.com/
Origin: https://js.driftt.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         54.147.21.139
HTTP/2 200 OK
content-type: text/plain
                                        
date: Fri, 03 Feb 2023 07:38:46 GMT
access-control-allow-origin: *
access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version
access-control-allow-credentials: true
access-control-expose-headers: X-Results-Total-Count,X-Page-Info
access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH
access-control-max-age: 1209600
strict-transport-security: max-age=31536000; includeSubDomains
allow: POST,OPTIONS
requestid: drift53071fd431184bf186815dad344
content-length: 13
x-envoy-upstream-service-time: 1
server: istio-envoy
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   13
Md5:    1424eb76249899d757e4d168341a50dc
Sha1:   42101e71440abd46c8112a96d4d5c0dd445120ce
Sha256: 16f1efa415bfdd7abcf8fdd76cc05ae6fa66ffdfdc730368ecea89ecfe5c3a12
                                        
                                            POST /monitoring/metrics/widget/init/v2 HTTP/1.1 
Host: metrics.api.drift.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Authorization:
Content-Length: 361
Origin: https://js.driftt.com
Connection: keep-alive
Referer: https://js.driftt.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         54.147.21.139
HTTP/2 200 OK
content-type: application/json;charset=utf-8
                                        
date: Fri, 03 Feb 2023 07:38:46 GMT
access-control-allow-origin: *
access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version
access-control-allow-credentials: true
access-control-expose-headers: X-Results-Total-Count,X-Page-Info
access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH
access-control-max-age: 1209600
strict-transport-security: max-age=31536000; includeSubDomains
requestid: 16ebbea589dee039
vary: Accept-Encoding
content-length: 25
x-envoy-upstream-service-time: 12
server: istio-envoy
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   25
Md5:    61228f8f544358e9ea1f463f01b5853c
Sha1:   582766f30c82dc2df6938c8e16455fa5e329afb1
Sha256: f8c91e009d219173c41b4c0b6e43ad28081f7580df6cb99a76aa0a476390ca47
                                        
                                            GET /v1/beacon/img.gif?token=d7534a5d9ff02a0159a4ec3c03fa2ed2&svisitor=null&visitor=5cf36cab-fcf6-4e78-831e-1840c354ba87&session=b34c3a56-0e94-4733-8fc8-c6c766421d66&event=active_time_track&q=%7B%22currentTime%22%3A%22Fri%2C%2003%20Feb%202023%2007%3A39%3A16%20GMT%22%2C%22lastTrackTime%22%3A%22Fri%2C%2003%20Feb%202023%2007%3A39%3A15%20GMT%22%2C%22timeSpent%22%3A%221008%22%2C%22totalTimeSpent%22%3A%222018%22%7D&isIframe=false&m=%7B%22description%22%3A%22%22%2C%22keywords%22%3A%22%22%2C%22title%22%3A%22Farewell%20and%20Thank%20You%20%7C%20Seramount%22%7D&cb=&r=&thirdParty=%7B%7D&v2=1&pageURL=https%3A%2F%2Fseramount.com%2Fworking-mother%2F&pageViewId=534f6600-3ae5-484b-883d-c3c8bae129e5&an_uid=0 HTTP/1.1 
Host: b.6sc.co
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seramount.com/
Cookie: 6suuid=980549176041000004badc63da02000076b55e00
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         104.85.176.46
HTTP/2 200 OK
content-type: image/gif
                                        
accept-ranges: bytes
cache-control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate
etag: "615ccf10-2b"
expires: Wed, 19 Apr 2000 11:43:00 GMT
last-modified: Tue, 05 Oct 2021 22:17:52 GMT
pragma: no-cache
server: nginx/1.14.0 (Ubuntu)
x-content-type-options: nosniff
content-length: 43
date: Fri, 03 Feb 2023 07:38:46 GMT
set-cookie: 6suuid=980549176041000004badc63da02000076b55e00; expires=Sun, 02-Feb-2025 07:38:46 GMT; path=/; domain=.6sc.co; SameSite=None; secure
access-control-allow-origin:
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: GET,POST
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    f837aa60b6fe83458f790db60d529fc9
Sha1:   14af87ccec7f81bb28d53c84da2fd5a9d5925cda
Sha256: dcecab1355b5c2b9ecef281322bf265ac5840b4688748586e9632b473a5fe56b
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sca1b.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         54.230.245.110
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=88648
Date: Fri, 03 Feb 2023 07:38:47 GMT
Etag: "63db5a1e-1d7"
Expires: Sat, 04 Feb 2023 08:16:15 GMT
Last-Modified: Thu, 02 Feb 2023 06:37:18 GMT
Server: ECS (nyb/1D05)
X-Cache: Miss from cloudfront
Via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 508NmFkq5WmnwDmSzmw8T2JngpyXZbneujUucH0g2OiZDuZiQ5lisA==
Age: 5937

                                        
                                            GET /core/assets/js/17.87ab68ae.chunk.js HTTP/1.1 
Host: js.driftt.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://js.driftt.com/core?d=1&embedId=8df477mikhtc&eId=8df477mikhtc&region=US&forceShow=false&skipCampaigns=false&sessionId=ff449f43-c78f-4b55-8ab6-10a2fb02a0e1&sessionStarted=1675409954.714&campaignRefreshToken=4cfd567e-6916-49a3-89a6-04120c41d39c&hideController=false&pageLoadStartTime=1675409953488&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fseramount.com%2Fworking-mother%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         54.230.111.67
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                        
server: istio-envoy
date: Fri, 27 Jan 2023 17:24:56 GMT
last-modified: Fri, 27 Jan 2023 17:00:20 GMT
etag: W/"7224903e471d8c7e76d036a17509bef9"
x-amz-server-side-encryption: AES256
x-amz-version-id: cPiu7YYbRPUjAv2cw_41I39g00KKNZYL
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
strict-transport-security: max-age=31536000; includeSubDomains
cache-control: max-age=31536000
x-envoy-upstream-service-time: 14
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: LrgbnvPmKkk7QvZqQCfeWvQUpcEqBXGd73uaERgcTc0kyiWv-bsINQ==
age: 569628
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   21305
Md5:    0e18ff0c83d92e5eec3a298de6a4d244
Sha1:   53c60015fec52a3468b6a7fe377e9350df1f6f37
Sha256: 9780666f4c99918be380b1ead70c5505b7a29026a6efc717d1e393ae58741f59
                                        
                                            GET /ws/websocket?session_token=SFMyNTY.g2gDdAAAAAVkAAJpZG0AAAATNTE0MDctMTcxNjEyOTA2OTctNGQABm9yZ19pZG0AAAAFNTE0MDdkAAlzY29wZV9zZXRtAAAABGxlYWRkAAd1c2VyX2lkbQAAAAsxNzE2MTI5MDY5N2QACXVzZXJfdHlwZWQABGxlYWRuBgD4qjYWhgFiAAFRgA.5UIgz94coa1btiLL2TI3VhttDivNSJyM0sNlGI2IhOQ&remote_ip=52.205.21.197&vsn=2.0.0 HTTP/1.1 
Host: 51407-7.chat.api.drift.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://js.driftt.com
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: joCT2TEegPoS0/n1LTvOPg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

search
                                         34.224.54.161
HTTP/1.1 101 Switching Protocols
                                        
Date: Fri, 03 Feb 2023 07:38:47 GMT
Connection: upgrade
cache-control: max-age=0, private, must-revalidate
sec-websocket-accept: JMgZcINIEkvbz/Heu2Uf+//KVIU=
server: Cowboy
upgrade: websocket

                                        
                                            OPTIONS /track HTTP/1.1 
Host: event.api.drift.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: authorization,content-type
Referer: https://js.driftt.com/
Origin: https://js.driftt.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         54.147.21.139
HTTP/2 200 OK
content-type: text/plain
                                        
date: Fri, 03 Feb 2023 07:38:47 GMT
access-control-allow-origin: *
access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version
access-control-allow-credentials: true
access-control-expose-headers: X-Results-Total-Count,X-Page-Info
access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH
access-control-max-age: 1209600
strict-transport-security: max-age=31536000; includeSubDomains
allow: POST,OPTIONS
requestid: drift700c1084dbd90849585b28fc640
content-length: 13
x-envoy-upstream-service-time: 1
server: istio-envoy
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   13
Md5:    1424eb76249899d757e4d168341a50dc
Sha1:   42101e71440abd46c8112a96d4d5c0dd445120ce
Sha256: 16f1efa415bfdd7abcf8fdd76cc05ae6fa66ffdfdc730368ecea89ecfe5c3a12
                                        
                                            OPTIONS /targeting/evaluate_with_log HTTP/1.1 
Host: targeting.api.drift.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: authorization,content-type
Referer: https://js.driftt.com/
Origin: https://js.driftt.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         54.147.21.139
HTTP/2 200 OK
content-type: text/plain
                                        
date: Fri, 03 Feb 2023 07:38:47 GMT
access-control-allow-origin: *
access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version
access-control-allow-credentials: true
access-control-expose-headers: X-Results-Total-Count,X-Page-Info
access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH
access-control-max-age: 1209600
strict-transport-security: max-age=31536000; includeSubDomains
allow: POST,OPTIONS
requestid: drift79f997b47d99e0db7adda354a67
content-length: 13
x-envoy-upstream-service-time: 2
server: istio-envoy
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   13
Md5:    1424eb76249899d757e4d168341a50dc
Sha1:   42101e71440abd46c8112a96d4d5c0dd445120ce
Sha256: 16f1efa415bfdd7abcf8fdd76cc05ae6fa66ffdfdc730368ecea89ecfe5c3a12
                                        
                                            GET /core/assets/js/30.57dfb56c.chunk.js HTTP/1.1 
Host: js.driftt.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://js.driftt.com/core?d=1&embedId=8df477mikhtc&eId=8df477mikhtc&region=US&forceShow=false&skipCampaigns=false&sessionId=ff449f43-c78f-4b55-8ab6-10a2fb02a0e1&sessionStarted=1675409954.714&campaignRefreshToken=4cfd567e-6916-49a3-89a6-04120c41d39c&hideController=false&pageLoadStartTime=1675409953488&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fseramount.com%2Fworking-mother%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         54.230.111.67
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                        
server: istio-envoy
date: Fri, 27 Jan 2023 17:24:56 GMT
last-modified: Fri, 27 Jan 2023 17:00:21 GMT
etag: W/"b8addee34a5cd2241740a2e3094039b3"
x-amz-server-side-encryption: AES256
x-amz-version-id: PRu.RNHym52TA_hlIcQB1Vv5VUA1vVKS
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
strict-transport-security: max-age=31536000; includeSubDomains
cache-control: max-age=31536000
x-envoy-upstream-service-time: 17
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: aYnxljEkWypkcCJwPhxwqYSTtGYIB6nb-knXhnydBCT3ODN0tFOAmA==
age: 569629
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   9955
Md5:    4478ce59c6325aa51d7ebfce50f2b9d6
Sha1:   1f255562b722303d896f985a22a721aafd29ddea
Sha256: 3f29e4599a64581f5ae3a155aed282abd473b6fab3f2b7bb73416fd12ae1e2c5
                                        
                                            POST /targeting/evaluate_with_log HTTP/1.1 
Host: targeting.api.drift.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Authorization: Bearer eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzUxMiJ9.eyJzdWIiOiIxNzE2MTI5MDY5NyIsImNsaWVudElkIjoiZjZ6dWl6ZHloeHJtN3IiLCJ1c2VySWRUeXBlIjoiTEVBRCIsInNjb3BlIjoibGVhZCIsImlzcyI6IjUxNDA3IiwiZXhwIjoxNzA2OTQ1OTI2LCJpYXQiOjE2NzU0MDk5MjZ9.vOCEzwhkqb9Jo2K6yOuQQtdVsul3FE-tuExbW1REHosCp3y_D7RAcbpKsGv_toHSjtoYwsbGKBk9E4QZ4k8SYQ
Content-Length: 1242
Origin: https://js.driftt.com
Connection: keep-alive
Referer: https://js.driftt.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         54.147.21.139
HTTP/2 200 OK
content-type: application/json;charset=utf-8
                                        
date: Fri, 03 Feb 2023 07:38:48 GMT
access-control-allow-origin: *
access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version
access-control-allow-credentials: true
access-control-expose-headers: X-Results-Total-Count,X-Page-Info
access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH
access-control-max-age: 1209600
strict-transport-security: max-age=31536000; includeSubDomains
requestid: 61817e04ba2701e4
vary: Accept-Encoding
content-encoding: gzip
content-length: 545
x-envoy-upstream-service-time: 3
server: istio-envoy
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (1147), with no line terminators
Size:   545
Md5:    adbf9513764c618f790257cd65baee19
Sha1:   87983f398365ba7d95a00ae3140cf8b5e74174f1
Sha256: 967dcd076684c973505ed22adcfe6a2d41fa9e8d3ab3307860db142a32c084af
                                        
                                            OPTIONS /flows/render_initial_v3 HTTP/1.1 
Host: flow.api.drift.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: authorization,content-type
Referer: https://js.driftt.com/
Origin: https://js.driftt.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         54.147.21.139
HTTP/2 200 OK
content-type: text/plain
                                        
date: Fri, 03 Feb 2023 07:38:48 GMT
access-control-allow-origin: *
access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version
access-control-allow-credentials: true
access-control-expose-headers: X-Results-Total-Count,X-Page-Info
access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH
access-control-max-age: 1209600
strict-transport-security: max-age=31536000; includeSubDomains
allow: POST,OPTIONS
requestid: drift1040f7042c4863ccad1b9c61ed0
content-length: 13
x-envoy-upstream-service-time: 2
server: istio-envoy
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   13
Md5:    1424eb76249899d757e4d168341a50dc
Sha1:   42101e71440abd46c8112a96d4d5c0dd445120ce
Sha256: 16f1efa415bfdd7abcf8fdd76cc05ae6fa66ffdfdc730368ecea89ecfe5c3a12
                                        
                                            GET /core/assets/js/0.0b2ebd4a.chunk.js HTTP/1.1 
Host: js.driftt.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://js.driftt.com/core?d=1&embedId=8df477mikhtc&eId=8df477mikhtc&region=US&forceShow=false&skipCampaigns=false&sessionId=ff449f43-c78f-4b55-8ab6-10a2fb02a0e1&sessionStarted=1675409954.714&campaignRefreshToken=4cfd567e-6916-49a3-89a6-04120c41d39c&hideController=false&pageLoadStartTime=1675409953488&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fseramount.com%2Fworking-mother%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         54.230.111.67
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                        
server: istio-envoy
date: Sat, 28 Jan 2023 03:20:43 GMT
last-modified: Fri, 27 Jan 2023 17:00:19 GMT
etag: W/"c5efcdc9e465604f32cf24af10fd6c13"
x-amz-server-side-encryption: AES256
x-amz-version-id: bxbBo6tiShmSVkJPl3yRp.s0jVilttxU
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
strict-transport-security: max-age=31536000; includeSubDomains
cache-control: max-age=31536000
x-envoy-upstream-service-time: 29
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 9Pp7AFDTgcPr491KhjFUKU1jDY6jzmSauq_EL6G5auE_k8S5F7fd0w==
age: 533882
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (8798), with no line terminators
Size:   2667
Md5:    9a6bd689fde8a03522e699cae7a4fb53
Sha1:   9e0b9936eecf2a6a15c818c5c22d73fa2e4dfe15
Sha256: ef117dfc3fd609eee04827573abb39406c5cd2f700963c3c3b05aaad501eef6d
                                        
                                            POST /flows/render_initial_v3 HTTP/1.1 
Host: flow.api.drift.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Authorization: Bearer eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzUxMiJ9.eyJzdWIiOiIxNzE2MTI5MDY5NyIsImNsaWVudElkIjoiZjZ6dWl6ZHloeHJtN3IiLCJ1c2VySWRUeXBlIjoiTEVBRCIsInNjb3BlIjoibGVhZCIsImlzcyI6IjUxNDA3IiwiZXhwIjoxNzA2OTQ1OTI2LCJpYXQiOjE2NzU0MDk5MjZ9.vOCEzwhkqb9Jo2K6yOuQQtdVsul3FE-tuExbW1REHosCp3y_D7RAcbpKsGv_toHSjtoYwsbGKBk9E4QZ4k8SYQ
Content-Length: 460
Origin: https://js.driftt.com
Connection: keep-alive
Referer: https://js.driftt.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         54.147.21.139
HTTP/2 200 OK
content-type: application/json;charset=utf-8
                                        
date: Fri, 03 Feb 2023 07:38:48 GMT
access-control-allow-origin: *
access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version
access-control-allow-credentials: true
access-control-expose-headers: X-Results-Total-Count,X-Page-Info
access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH
access-control-max-age: 1209600
strict-transport-security: max-age=31536000; includeSubDomains
requestid: e88c2f34682137a2
vary: Accept-Encoding
content-encoding: gzip
content-length: 2236
x-envoy-upstream-service-time: 52
server: istio-envoy
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (5502), with no line terminators
Size:   2236
Md5:    9022db087ce177c5454982bfb970a92f
Sha1:   10ef399caeb879dd575aed1e0f96a1055a666126
Sha256: e5c162011c02adfb6c9ce74a37c7a3587ff538d95cb45b381635620868766f09
                                        
                                            GET /https%3A%2F%2Fdriftt.imgix.net%2Fhttps%253A%252F%252Fs3.us-east-1.amazonaws.com%252Fcustomer-api-avatars-prod%252F85993%252Fdb587bf0010bcef299e53abe0d933a06cmrdmwnahfeg%3Ffit%3Dmax%26fm%3Dpng%26h%3D200%26w%3D200%26s%3D04dfadfeb04f03b50a8513925b412aac?fit=max&fm=png&h=200&w=200&s=339f36ea7f7220ecca7484154efe2e3d HTTP/1.1 
Host: driftt.imgix.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://js.driftt.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         151.101.246.208
HTTP/2 200 OK
content-type: image/png
                                        
last-modified: Thu, 01 Dec 2022 09:58:26 GMT
cache-control: public, max-age=315360000
server: imgix
x-imgix-id: eddb3c2a559bcf80153dcda7ae8b9db28cce7abb
x-imgix-render-farm: 01.592
date: Fri, 03 Feb 2023 07:38:48 GMT
age: 5521221
accept-ranges: bytes
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10038-SJC, cache-hel1410024-HEL
x-cache: HIT, HIT
content-length: 5910
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 200 x 200, 8-bit/color RGB, non-interlaced\012- data
Size:   5910
Md5:    1435c7880509b0bc28b82687fc2b9791
Sha1:   6424199b54733817b7777056ea76d6ee154ed5f6
Sha256: 1e770d4d05cb4af2cbb865ee97c4231b4ab39964566eb78cbc4c8cb1fa57da8b
                                        
                                            GET /core/assets/css/29.9bf46b67.chunk.css HTTP/1.1 
Host: js.driftt.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://js.driftt.com/core?d=1&embedId=8df477mikhtc&eId=8df477mikhtc&region=US&forceShow=false&skipCampaigns=false&sessionId=ff449f43-c78f-4b55-8ab6-10a2fb02a0e1&sessionStarted=1675409954.714&campaignRefreshToken=4cfd567e-6916-49a3-89a6-04120c41d39c&hideController=false&pageLoadStartTime=1675409953488&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fseramount.com%2Fworking-mother%2F
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         54.230.111.67
HTTP/2 200 OK
content-type: text/css
                                        
server: istio-envoy
date: Fri, 27 Jan 2023 17:24:57 GMT
last-modified: Fri, 27 Jan 2023 17:00:18 GMT
etag: W/"4f21faf2ba450e5fcdf7eda90813e185"
x-amz-server-side-encryption: AES256
x-amz-version-id: qzro7282BXz7SnLdWr3hLeI1pZAqJ2A1
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
strict-transport-security: max-age=31536000; includeSubDomains
cache-control: max-age=31536000
content-encoding: gzip
x-envoy-upstream-service-time: 19
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: y5hElw70VAUv_Obb2AR4UQ8FhquuG73DgjHSq_5Kkvkd7dH9Y4WDLQ==
age: 569628
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   1727
Md5:    8036b1c19550a11b66aa9c2736ef1d27
Sha1:   9e744efc522cd9481b6aae61feb1a85cf1f63dd4
Sha256: 91e8e86d0f612ae7b349dbbd52bf33e52fc29442cb339c5d7e926f5146dfc06a
                                        
                                            GET /v1/beacon/img.gif?token=d7534a5d9ff02a0159a4ec3c03fa2ed2&svisitor=null&visitor=5cf36cab-fcf6-4e78-831e-1840c354ba87&session=b34c3a56-0e94-4733-8fc8-c6c766421d66&event=active_time_track&q=%7B%22currentTime%22%3A%22Fri%2C%2003%20Feb%202023%2007%3A39%3A18%20GMT%22%2C%22lastTrackTime%22%3A%22Fri%2C%2003%20Feb%202023%2007%3A39%3A17%20GMT%22%2C%22timeSpent%22%3A%221001%22%2C%22totalTimeSpent%22%3A%224021%22%7D&isIframe=false&m=%7B%22description%22%3A%22%22%2C%22keywords%22%3A%22%22%2C%22title%22%3A%22Farewell%20and%20Thank%20You%20%7C%20Seramount%22%7D&cb=&r=&thirdParty=%7B%7D&v2=1&pageURL=https%3A%2F%2Fseramount.com%2Fworking-mother%2F&pageViewId=534f6600-3ae5-484b-883d-c3c8bae129e5&an_uid=0 HTTP/1.1 
Host: b.6sc.co
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seramount.com/
Cookie: 6suuid=980549176041000004badc63da02000076b55e00
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         104.85.176.46
HTTP/2 200 OK
content-type: image/gif
                                        
accept-ranges: bytes
cache-control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate
etag: "615ccf10-2b"
expires: Wed, 19 Apr 2000 11:43:00 GMT
last-modified: Tue, 05 Oct 2021 22:17:52 GMT
pragma: no-cache
server: nginx/1.14.0 (Ubuntu)
x-content-type-options: nosniff
content-length: 43
date: Fri, 03 Feb 2023 07:38:48 GMT
set-cookie: 6suuid=980549176041000004badc63da02000076b55e00; expires=Sun, 02-Feb-2025 07:38:48 GMT; path=/; domain=.6sc.co; SameSite=None; secure
access-control-allow-origin:
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: GET,POST
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    f837aa60b6fe83458f790db60d529fc9
Sha1:   14af87ccec7f81bb28d53c84da2fd5a9d5925cda
Sha256: dcecab1355b5c2b9ecef281322bf265ac5840b4688748586e9632b473a5fe56b
                                        
                                            GET /core/assets/css/45.e483d03f.chunk.css HTTP/1.1 
Host: js.driftt.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://js.driftt.com/core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1675409953488
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         54.230.111.67
HTTP/2 200 OK
content-type: text/css
                                        
content-length: 900
server: istio-envoy
date: Fri, 27 Jan 2023 17:24:59 GMT
last-modified: Fri, 27 Jan 2023 17:00:18 GMT
etag: "0bd11a8facc0a9d41713c64ed1ba1289"
x-amz-server-side-encryption: AES256
x-amz-version-id: lNXyJmRPPvjoX1lE7kLUDcudszdamfiT
accept-ranges: bytes
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
strict-transport-security: max-age=31536000; includeSubDomains
cache-control: max-age=31536000
x-envoy-upstream-service-time: 26
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 5Cf_XQKb7VP2PpZD3ZOUeP-F3uYwsFmqSHlIYAbUAfB0jDOWZPf1eQ==
age: 569629
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (900), with no line terminators
Size:   900
Md5:    0bd11a8facc0a9d41713c64ed1ba1289
Sha1:   23d92b5b9138666f5c33517d53451a6e2e8ec30a
Sha256: 12ffe3ad71f763d9057baf43e0f1c1482bb9a0372602020554c4d52f52b37981
                                        
                                            GET /core/assets/js/29.43f0ec90.chunk.js HTTP/1.1 
Host: js.driftt.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://js.driftt.com/core?d=1&embedId=8df477mikhtc&eId=8df477mikhtc&region=US&forceShow=false&skipCampaigns=false&sessionId=ff449f43-c78f-4b55-8ab6-10a2fb02a0e1&sessionStarted=1675409954.714&campaignRefreshToken=4cfd567e-6916-49a3-89a6-04120c41d39c&hideController=false&pageLoadStartTime=1675409953488&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fseramount.com%2Fworking-mother%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         54.230.111.67
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                        
server: istio-envoy
date: Fri, 27 Jan 2023 17:24:57 GMT
last-modified: Fri, 27 Jan 2023 17:00:21 GMT
etag: W/"bbca5d42d17f354ba709da59e093f2e7"
x-amz-server-side-encryption: AES256
x-amz-version-id: YttOPnMbgeCzGpP2GWR5vyLPUID5po5b
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
strict-transport-security: max-age=31536000; includeSubDomains
cache-control: max-age=31536000
x-envoy-upstream-service-time: 23
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 9UtY9insSV-KEy0E_3rFqUln6hyDiEd8MgXYnWgvOrh3MpUdSsZNrQ==
age: 569628
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   5388
Md5:    be01e42e100ac2ad56f1ada223d0cec9
Sha1:   b898e87f75463147be4ad880244d96ddfbe43828
Sha256: 8e9d0504b470af05b5e153d35ed13b7f4c72ea3b0fcc1443dd927e0f64eef51c
                                        
                                            GET /analytics.js HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seramount.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.46
HTTP/2 200 OK
content-type: text/javascript
                                        
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20085
date: Fri, 03 Feb 2023 05:45:20 GMT
expires: Fri, 03 Feb 2023 07:45:20 GMT
cache-control: public, max-age=7200
age: 6808
last-modified: Tue, 10 Jan 2023 21:29:14 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1490)
Size:   20085
Md5:    ca7fbbfd120e3e329633044190bbf134
Sha1:   d17f81e03dd827554ddd207ea081fb46b3415445
Sha256: 847004cefb32f85a9cc16b0b1eb77529ff5753680c145bfcb23f651d214737db
                                        
                                            POST /impressions/widget HTTP/1.1 
Host: targeting.api.drift.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Authorization: Bearer eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzUxMiJ9.eyJzdWIiOiIxNzE2MTI5MDY5NyIsImNsaWVudElkIjoiZjZ6dWl6ZHloeHJtN3IiLCJ1c2VySWRUeXBlIjoiTEVBRCIsInNjb3BlIjoibGVhZCIsImlzcyI6IjUxNDA3IiwiZXhwIjoxNzA2OTQ1OTI2LCJpYXQiOjE2NzU0MDk5MjZ9.vOCEzwhkqb9Jo2K6yOuQQtdVsul3FE-tuExbW1REHosCp3y_D7RAcbpKsGv_toHSjtoYwsbGKBk9E4QZ4k8SYQ
Content-Length: 670
Origin: https://js.driftt.com
Connection: keep-alive
Referer: https://js.driftt.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         54.147.21.139
HTTP/2 204 No Content
                                        
date: Fri, 03 Feb 2023 07:38:48 GMT
access-control-allow-origin: *
access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version
access-control-allow-credentials: true
access-control-expose-headers: X-Results-Total-Count,X-Page-Info
access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH
access-control-max-age: 1209600
strict-transport-security: max-age=31536000; includeSubDomains
requestid: 6a3488810814a49f
x-envoy-upstream-service-time: 9
server: istio-envoy
X-Firefox-Spdy: h2

                                        
                                            OPTIONS /monitoring/metrics/event2/bulk HTTP/1.1 
Host: metrics.api.drift.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: authorization,content-type
Referer: https://js.driftt.com/
Origin: https://js.driftt.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         54.147.21.139
HTTP/2 200 OK
content-type: text/plain
                                        
date: Fri, 03 Feb 2023 07:38:49 GMT
access-control-allow-origin: *
access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version
access-control-allow-credentials: true
access-control-expose-headers: X-Results-Total-Count,X-Page-Info
access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH
access-control-max-age: 1209600
strict-transport-security: max-age=31536000; includeSubDomains
allow: POST,OPTIONS
requestid: drift707d95544eba1cdc7c53fb88010
content-length: 13
x-envoy-upstream-service-time: 1
server: istio-envoy
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   13
Md5:    1424eb76249899d757e4d168341a50dc
Sha1:   42101e71440abd46c8112a96d4d5c0dd445120ce
Sha256: 16f1efa415bfdd7abcf8fdd76cc05ae6fa66ffdfdc730368ecea89ecfe5c3a12
                                        
                                            POST /monitoring/metrics/event2/bulk HTTP/1.1 
Host: metrics.api.drift.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Authorization: Bearer eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzUxMiJ9.eyJzdWIiOiIxNzE2MTI5MDY5NyIsImNsaWVudElkIjoiZjZ6dWl6ZHloeHJtN3IiLCJ1c2VySWRUeXBlIjoiTEVBRCIsInNjb3BlIjoibGVhZCIsImlzcyI6IjUxNDA3IiwiZXhwIjoxNzA2OTQ1OTI2LCJpYXQiOjE2NzU0MDk5MjZ9.vOCEzwhkqb9Jo2K6yOuQQtdVsul3FE-tuExbW1REHosCp3y_D7RAcbpKsGv_toHSjtoYwsbGKBk9E4QZ4k8SYQ
Content-Length: 654
Origin: https://js.driftt.com
Connection: keep-alive
Referer: https://js.driftt.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         54.147.21.139
HTTP/2 200 OK
content-type: application/json;charset=utf-8
                                        
date: Fri, 03 Feb 2023 07:38:49 GMT
access-control-allow-origin: *
access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version
access-control-allow-credentials: true
access-control-expose-headers: X-Results-Total-Count,X-Page-Info
access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH
access-control-max-age: 1209600
strict-transport-security: max-age=31536000; includeSubDomains
requestid: 4ed407e4f6b65d83
vary: Accept-Encoding
content-length: 25
x-envoy-upstream-service-time: 14
server: istio-envoy
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   25
Md5:    61228f8f544358e9ea1f463f01b5853c
Sha1:   582766f30c82dc2df6938c8e16455fa5e329afb1
Sha256: f8c91e009d219173c41b4c0b6e43ad28081f7580df6cb99a76aa0a476390ca47
                                        
                                            GET /v1/beacon/img.gif?token=d7534a5d9ff02a0159a4ec3c03fa2ed2&svisitor=null&visitor=5cf36cab-fcf6-4e78-831e-1840c354ba87&session=b34c3a56-0e94-4733-8fc8-c6c766421d66&event=active_time_track&q=%7B%22currentTime%22%3A%22Fri%2C%2003%20Feb%202023%2007%3A39%3A19%20GMT%22%2C%22lastTrackTime%22%3A%22Fri%2C%2003%20Feb%202023%2007%3A39%3A18%20GMT%22%2C%22timeSpent%22%3A%221002%22%2C%22totalTimeSpent%22%3A%225023%22%7D&isIframe=false&m=%7B%22description%22%3A%22%22%2C%22keywords%22%3A%22%22%2C%22title%22%3A%22Farewell%20and%20Thank%20You%20%7C%20Seramount%22%7D&cb=&r=&thirdParty=%7B%7D&v2=1&pageURL=https%3A%2F%2Fseramount.com%2Fworking-mother%2F&pageViewId=534f6600-3ae5-484b-883d-c3c8bae129e5&an_uid=0 HTTP/1.1 
Host: b.6sc.co
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seramount.com/
Cookie: 6suuid=980549176041000004badc63da02000076b55e00
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         104.85.176.46
HTTP/2 200 OK
content-type: image/gif
                                        
accept-ranges: bytes
cache-control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate
etag: "5e502810-2b"
expires: Wed, 19 Apr 2000 11:43:00 GMT
last-modified: Fri, 21 Feb 2020 18:57:20 GMT
pragma: no-cache
server: nginx/1.14.0 (Ubuntu)
x-content-type-options: nosniff
content-length: 43
date: Fri, 03 Feb 2023 07:38:49 GMT
set-cookie: 6suuid=980549176041000004badc63da02000076b55e00; expires=Sun, 02-Feb-2025 07:38:49 GMT; path=/; domain=.6sc.co; SameSite=None; secure
access-control-allow-origin:
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: GET,POST
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    f837aa60b6fe83458f790db60d529fc9
Sha1:   14af87ccec7f81bb28d53c84da2fd5a9d5925cda
Sha256: dcecab1355b5c2b9ecef281322bf265ac5840b4688748586e9632b473a5fe56b
                                        
                                            GET /v1/beacon/img.gif?token=d7534a5d9ff02a0159a4ec3c03fa2ed2&svisitor=null&visitor=5cf36cab-fcf6-4e78-831e-1840c354ba87&session=b34c3a56-0e94-4733-8fc8-c6c766421d66&event=active_time_track&q=%7B%22currentTime%22%3A%22Fri%2C%2003%20Feb%202023%2007%3A39%3A20%20GMT%22%2C%22lastTrackTime%22%3A%22Fri%2C%2003%20Feb%202023%2007%3A39%3A19%20GMT%22%2C%22timeSpent%22%3A%221002%22%2C%22totalTimeSpent%22%3A%226025%22%7D&isIframe=false&m=%7B%22description%22%3A%22%22%2C%22keywords%22%3A%22%22%2C%22title%22%3A%22(2)%20New%20Messages!%22%7D&cb=&r=&thirdParty=%7B%7D&v2=1&pageURL=https%3A%2F%2Fseramount.com%2Fworking-mother%2F&pageViewId=534f6600-3ae5-484b-883d-c3c8bae129e5&an_uid=0 HTTP/1.1 
Host: b.6sc.co
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seramount.com/
Cookie: 6suuid=980549176041000004badc63da02000076b55e00
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         104.85.176.46
HTTP/2 200 OK
content-type: image/gif
                                        
accept-ranges: bytes
cache-control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate
etag: "5e502810-2b"
expires: Wed, 19 Apr 2000 11:43:00 GMT
last-modified: Fri, 21 Feb 2020 18:57:20 GMT
pragma: no-cache
server: nginx/1.14.0 (Ubuntu)
x-content-type-options: nosniff
content-length: 43
date: Fri, 03 Feb 2023 07:38:50 GMT
set-cookie: 6suuid=980549176041000004badc63da02000076b55e00; expires=Sun, 02-Feb-2025 07:38:50 GMT; path=/; domain=.6sc.co; SameSite=None; secure
access-control-allow-origin:
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: GET,POST
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    f837aa60b6fe83458f790db60d529fc9
Sha1:   14af87ccec7f81bb28d53c84da2fd5a9d5925cda
Sha256: dcecab1355b5c2b9ecef281322bf265ac5840b4688748586e9632b473a5fe56b
                                        
                                            GET /v1/beacon/img.gif?token=d7534a5d9ff02a0159a4ec3c03fa2ed2&svisitor=null&visitor=5cf36cab-fcf6-4e78-831e-1840c354ba87&session=b34c3a56-0e94-4733-8fc8-c6c766421d66&event=active_time_track&q=%7B%22currentTime%22%3A%22Fri%2C%2003%20Feb%202023%2007%3A39%3A21%20GMT%22%2C%22lastTrackTime%22%3A%22Fri%2C%2003%20Feb%202023%2007%3A39%3A20%20GMT%22%2C%22timeSpent%22%3A%221001%22%2C%22totalTimeSpent%22%3A%227026%22%7D&isIframe=false&m=%7B%22description%22%3A%22%22%2C%22keywords%22%3A%22%22%2C%22title%22%3A%22Farewell%20and%20Thank%20You%20%7C%20Seramount%22%7D&cb=&r=&thirdParty=%7B%7D&v2=1&pageURL=https%3A%2F%2Fseramount.com%2Fworking-mother%2F&pageViewId=534f6600-3ae5-484b-883d-c3c8bae129e5&an_uid=0 HTTP/1.1 
Host: b.6sc.co
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seramount.com/
Cookie: 6suuid=980549176041000004badc63da02000076b55e00
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         104.85.176.46
HTTP/2 200 OK
content-type: image/gif
                                        
accept-ranges: bytes
cache-control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate
etag: "5e502810-2b"
expires: Wed, 19 Apr 2000 11:43:00 GMT
last-modified: Fri, 21 Feb 2020 18:57:20 GMT
pragma: no-cache
server: nginx/1.14.0 (Ubuntu)
x-content-type-options: nosniff
content-length: 43
date: Fri, 03 Feb 2023 07:38:51 GMT
set-cookie: 6suuid=980549176041000004badc63da02000076b55e00; expires=Sun, 02-Feb-2025 07:38:51 GMT; path=/; domain=.6sc.co; SameSite=None; secure
access-control-allow-origin:
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: GET,POST
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    f837aa60b6fe83458f790db60d529fc9
Sha1:   14af87ccec7f81bb28d53c84da2fd5a9d5925cda
Sha256: dcecab1355b5c2b9ecef281322bf265ac5840b4688748586e9632b473a5fe56b
                                        
                                            GET /cookieconsentpub/v1/geo/location HTTP/1.1 
Host: geolocation.onetrust.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://seramount.com
Connection: keep-alive
Referer: https://seramount.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         104.18.27.85
HTTP/2 200 OK
content-type: application/json
                                        
date: Fri, 03 Feb 2023 07:38:44 GMT
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: GET, OPTIONS
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 7939823c7e6e0b49-OSL
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /core/assets/js/43.7ac85d58.chunk.js HTTP/1.1 
Host: js.driftt.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://js.driftt.com/core?d=1&embedId=8df477mikhtc&eId=8df477mikhtc&region=US&forceShow=false&skipCampaigns=false&sessionId=ff449f43-c78f-4b55-8ab6-10a2fb02a0e1&sessionStarted=1675409954.714&campaignRefreshToken=4cfd567e-6916-49a3-89a6-04120c41d39c&hideController=false&pageLoadStartTime=1675409953488&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fseramount.com%2Fworking-mother%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         54.230.111.67
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                        
server: istio-envoy
date: Fri, 27 Jan 2023 17:24:56 GMT
last-modified: Fri, 27 Jan 2023 17:00:21 GMT
etag: W/"48be1563378f7c36bdadc0f2eb616856"
x-amz-server-side-encryption: AES256
x-amz-version-id: nlt9wYKKCayMlGWQHqpz8g8qDzXbqs5K
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
strict-transport-security: max-age=31536000; includeSubDomains
cache-control: max-age=31536000
x-envoy-upstream-service-time: 18
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: eg4TTLJ0G8LTV56CHAxQ922foUrLv6zn9uS3xw5jXiX90KuSOhxKgw==
age: 569629
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            POST /api/v2/client/sites/2731151/visit-data?sv=7 HTTP/1.1 
Host: in.hotjar.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain; charset=UTF-8
Content-Length: 112
Origin: https://seramount.com
Connection: keep-alive
Referer: https://seramount.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         63.32.143.51
HTTP/2 200 OK
content-type: application/json
                                        
date: Fri, 03 Feb 2023 07:38:45 GMT
vary: Accept-Encoding
cache-control: no-cache, no-store
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-max-age: 86400
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /c/hotjar-2731151.js?sv=7 HTTP/1.1 
Host: static.hotjar.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seramount.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         54.230.111.66
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                        
access-control-allow-origin: *
content-encoding: br
cross-origin-resource-policy: cross-origin
strict-transport-security: max-age=2592000; includeSubDomains
x-cache-hit: 1
x-content-type-options: nosniff
date: Fri, 03 Feb 2023 07:38:44 GMT
cache-control: max-age=60
etag: W/97f9c5ab56e9b115f10af43f18c04489
vary: Accept-Encoding
x-cache: RefreshHit from cloudfront
via: 1.1 92c4bb210eab82a152000047d3609a02.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: tK7nA-OS4-m5rnVuMVCU__OqEXGHI1Wr_NSuVp426M6Pb1ynb_5MtQ==
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /core/assets/js/12.d33926cb.chunk.js HTTP/1.1 
Host: js.driftt.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://js.driftt.com/core?d=1&embedId=8df477mikhtc&eId=8df477mikhtc&region=US&forceShow=false&skipCampaigns=false&sessionId=ff449f43-c78f-4b55-8ab6-10a2fb02a0e1&sessionStarted=1675409954.714&campaignRefreshToken=4cfd567e-6916-49a3-89a6-04120c41d39c&hideController=false&pageLoadStartTime=1675409953488&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fseramount.com%2Fworking-mother%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         54.230.111.67
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                        
server: istio-envoy
date: Fri, 27 Jan 2023 17:24:57 GMT
last-modified: Fri, 27 Jan 2023 17:00:20 GMT
etag: W/"bdcb035523ec144399213aa65a8430ff"
x-amz-server-side-encryption: AES256
x-amz-version-id: KyS4g55V4uBz7fjaZ0R1pHyOHsEBkZV6
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
strict-transport-security: max-age=31536000; includeSubDomains
cache-control: max-age=31536000
x-envoy-upstream-service-time: 27
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: dZZT5NH2pgjgEyOorv5IUSkqecE8eobFLk8SI-rAONEii3J8BlQTMg==
age: 569627
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /core/assets/js/26.8ad2c789.chunk.js HTTP/1.1 
Host: js.driftt.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://js.driftt.com/core?d=1&embedId=8df477mikhtc&eId=8df477mikhtc&region=US&forceShow=false&skipCampaigns=false&sessionId=ff449f43-c78f-4b55-8ab6-10a2fb02a0e1&sessionStarted=1675409954.714&campaignRefreshToken=4cfd567e-6916-49a3-89a6-04120c41d39c&hideController=false&pageLoadStartTime=1675409953488&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fseramount.com%2Fworking-mother%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         54.230.111.67
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                        
server: istio-envoy
date: Thu, 02 Feb 2023 17:46:52 GMT
last-modified: Thu, 02 Feb 2023 17:19:18 GMT
etag: W/"75661712253ed1de462ddd525108c2b7"
x-amz-server-side-encryption: AES256
x-amz-version-id: vGS0ZgOIjR2BAgr6fsq7fNINKxSECxxa
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
strict-transport-security: max-age=31536000; includeSubDomains
cache-control: max-age=31536000
x-envoy-upstream-service-time: 17
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 4C22l346kB1K8FcdYz2w6mn7IRaJIPt5V0V6xoWRX774cOTyMotWcA==
age: 49913
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /include/1675410000000/8df477mikhtc.js HTTP/1.1 
Host: js.driftt.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seramount.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         54.230.111.67
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                        
server: istio-envoy
last-modified: Thu, 02 Feb 2023 17:47:11 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: 3xWqR5DkgEuy6guPZHaBH8EtWU71frWm
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
strict-transport-security: max-age=31536000; includeSubDomains
x-envoy-upstream-service-time: 23
content-encoding: gzip
date: Fri, 03 Feb 2023 07:38:44 GMT
cache-control: no-cache
etag: W/"8ead115aa6b8dd4cf82dbba47b818130"
vary: Accept-Encoding
x-cache: RefreshHit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 3g-cYbpQp2hq_aGZX-Skj2Wp8s2oWZ-EFGEqNCCLvZm_cWK1f-3Sbg==
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /core/assets/js/28.01a0fe87.chunk.js HTTP/1.1 
Host: js.driftt.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://js.driftt.com/core?d=1&embedId=8df477mikhtc&eId=8df477mikhtc&region=US&forceShow=false&skipCampaigns=false&sessionId=ff449f43-c78f-4b55-8ab6-10a2fb02a0e1&sessionStarted=1675409954.714&campaignRefreshToken=4cfd567e-6916-49a3-89a6-04120c41d39c&hideController=false&pageLoadStartTime=1675409953488&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fseramount.com%2Fworking-mother%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         54.230.111.67
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                        
server: istio-envoy
date: Fri, 27 Jan 2023 17:24:57 GMT
last-modified: Fri, 27 Jan 2023 17:00:21 GMT
etag: W/"0ad089f0617a0fa8014a23c2afa90ddd"
x-amz-server-side-encryption: AES256
x-amz-version-id: oCx9yWccW.dlty4hHqWiey7h_DwTeEBh
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
strict-transport-security: max-age=31536000; includeSubDomains
cache-control: max-age=31536000
x-envoy-upstream-service-time: 22
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: CAEae7sr6N8KuUbG62pj8CJRiDtfWW1Qa4lVc6Wtoj7UnOU4QC62tg==
age: 569628
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /core/assets/css/3.07aa08a5.chunk.css HTTP/1.1 
Host: js.driftt.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://js.driftt.com/core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1675409953488
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         54.230.111.67
HTTP/2 200 OK
content-type: text/css
                                        
server: istio-envoy
date: Thu, 05 Jan 2023 03:03:55 GMT
last-modified: Thu, 29 Dec 2022 16:49:54 GMT
etag: W/"189aeffd571884559dababa22c66d75a"
x-amz-server-side-encryption: AES256
x-amz-version-id: cLzhtaoyHBY3wArkFjIQo58tr5JO.o0k
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
strict-transport-security: max-age=31536000; includeSubDomains
cache-control: max-age=31536000
content-encoding: gzip
x-envoy-upstream-service-time: 47
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: fuVK1mOjGVdhdS5fPEsSCcmHQz5aMIvGxMzXR-XedFWQY2chSaK3yw==
age: 2522090
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            POST /widget_bootstrap HTTP/1.1 
Host: bootstrap.api.drift.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 638
Origin: https://js.driftt.com
Connection: keep-alive
Referer: https://js.driftt.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         54.147.21.139
HTTP/2 200 OK
content-type: application/json;charset=utf-8
                                        
date: Fri, 03 Feb 2023 07:38:46 GMT
access-control-allow-origin: *
access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version
access-control-allow-credentials: true
access-control-expose-headers: X-Results-Total-Count,X-Page-Info
access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH
access-control-max-age: 1209600
strict-transport-security: max-age=31536000; includeSubDomains
requestid: 66659f6d506ec8a
vary: Accept-Encoding
content-encoding: gzip
x-envoy-upstream-service-time: 564
server: istio-envoy
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /core/assets/js/18.23ab9329.chunk.js HTTP/1.1 
Host: js.driftt.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://js.driftt.com/core?d=1&embedId=8df477mikhtc&eId=8df477mikhtc&region=US&forceShow=false&skipCampaigns=false&sessionId=ff449f43-c78f-4b55-8ab6-10a2fb02a0e1&sessionStarted=1675409954.714&campaignRefreshToken=4cfd567e-6916-49a3-89a6-04120c41d39c&hideController=false&pageLoadStartTime=1675409953488&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fseramount.com%2Fworking-mother%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         54.230.111.67
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                        
server: istio-envoy
date: Thu, 02 Feb 2023 17:46:52 GMT
last-modified: Thu, 02 Feb 2023 17:19:18 GMT
etag: W/"03eb8461a2d4811082f9963a7c1ead90"
x-amz-server-side-encryption: AES256
x-amz-version-id: 84PxqgWeCTvPhPQAusuUUy1eUfAH93E0
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
strict-transport-security: max-age=31536000; includeSubDomains
cache-control: max-age=31536000
x-envoy-upstream-service-time: 25
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 8uAjOftal-dXRGg7hceB6jkih6wNOGTLraQutIjoWFaZvCn4dFg6SQ==
age: 49913
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /core?d=1&embedId=8df477mikhtc&eId=8df477mikhtc&region=US&forceShow=false&skipCampaigns=false&sessionId=ff449f43-c78f-4b55-8ab6-10a2fb02a0e1&sessionStarted=1675409954.714&campaignRefreshToken=4cfd567e-6916-49a3-89a6-04120c41d39c&hideController=false&pageLoadStartTime=1675409953488&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fseramount.com%2Fworking-mother%2F HTTP/1.1 
Host: js.driftt.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seramount.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         54.230.111.67
HTTP/2 200 OK
content-type: text/html; charset=utf-8
                                        
server: istio-envoy
last-modified: Thu, 02 Feb 2023 17:46:52 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: 1BX2KgD7Sb1DxvdgoYFGKuaH2zyxYg4V
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
strict-transport-security: max-age=31536000; includeSubDomains
content-encoding: gzip
x-envoy-upstream-service-time: 15
date: Fri, 03 Feb 2023 07:38:44 GMT
cache-control: no-cache
etag: W/"789d9907e240b6db9fb8c05f182d898c"
vary: Accept-Encoding
x-cache: RefreshHit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: cfO8Prr9Bk0ldG00abyfl64GJ4pw5Z7OY_ctF1UEMpcz_4TAGfUkmA==
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /core/assets/js/52.b1edaf4a.chunk.js HTTP/1.1 
Host: js.driftt.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://js.driftt.com/core?d=1&embedId=8df477mikhtc&eId=8df477mikhtc&region=US&forceShow=false&skipCampaigns=false&sessionId=ff449f43-c78f-4b55-8ab6-10a2fb02a0e1&sessionStarted=1675409954.714&campaignRefreshToken=4cfd567e-6916-49a3-89a6-04120c41d39c&hideController=false&pageLoadStartTime=1675409953488&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fseramount.com%2Fworking-mother%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         54.230.111.67
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                        
server: istio-envoy
date: Fri, 27 Jan 2023 17:24:56 GMT
last-modified: Fri, 27 Jan 2023 17:00:21 GMT
etag: W/"cd29b9bc973e48a7fcd0ee7153bdf03b"
x-amz-server-side-encryption: AES256
x-amz-version-id: TtzAkuiFg5ajpar.KJembGW97mIyyYtK
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
strict-transport-security: max-age=31536000; includeSubDomains
cache-control: max-age=31536000
x-envoy-upstream-service-time: 16
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: srpJGK6veuWvaJLNDafM9lk9QR_mAvVb0SahUlx_a3m8sXxzsVTaAQ==
age: 569629
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1675409953488 HTTP/1.1 
Host: js.driftt.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seramount.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         54.230.111.67
HTTP/2 200 OK
content-type: text/html; charset=utf-8
                                        
server: istio-envoy
last-modified: Thu, 02 Feb 2023 17:46:52 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: 1BX2KgD7Sb1DxvdgoYFGKuaH2zyxYg4V
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
strict-transport-security: max-age=31536000; includeSubDomains
content-encoding: gzip
x-envoy-upstream-service-time: 13
date: Fri, 03 Feb 2023 07:38:45 GMT
cache-control: no-cache
etag: W/"789d9907e240b6db9fb8c05f182d898c"
vary: Accept-Encoding
x-cache: RefreshHit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 35TDya93fPMDUWEo-rXHYJL4GZadNMGatIx5hSNXE3eaKlSq7QOK4Q==
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /core/assets/js/runtime~main.ac7930e9.js HTTP/1.1 
Host: js.driftt.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://js.driftt.com/core?d=1&embedId=8df477mikhtc&eId=8df477mikhtc&region=US&forceShow=false&skipCampaigns=false&sessionId=ff449f43-c78f-4b55-8ab6-10a2fb02a0e1&sessionStarted=1675409954.714&campaignRefreshToken=4cfd567e-6916-49a3-89a6-04120c41d39c&hideController=false&pageLoadStartTime=1675409953488&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fseramount.com%2Fworking-mother%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         54.230.111.67
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                        
server: istio-envoy
date: Thu, 02 Feb 2023 17:46:52 GMT
last-modified: Thu, 02 Feb 2023 17:19:21 GMT
etag: W/"c066ff097c75e52735ab581248399374"
x-amz-server-side-encryption: AES256
x-amz-version-id: gZ4iNeidu6mtzfJmtz05qciPWxrK7fSQ
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
strict-transport-security: max-age=31536000; includeSubDomains
cache-control: max-age=31536000
x-envoy-upstream-service-time: 17
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: pTGAUHintJdi9PNaTpkne10x_q_p9CA8ZhlhuoWnvdJCsd3v2b4Ktg==
age: 49913
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /core/assets/js/main~493df0b3.bfaa8bf7.chunk.js HTTP/1.1 
Host: js.driftt.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://js.driftt.com/core?d=1&embedId=8df477mikhtc&eId=8df477mikhtc&region=US&forceShow=false&skipCampaigns=false&sessionId=ff449f43-c78f-4b55-8ab6-10a2fb02a0e1&sessionStarted=1675409954.714&campaignRefreshToken=4cfd567e-6916-49a3-89a6-04120c41d39c&hideController=false&pageLoadStartTime=1675409953488&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fseramount.com%2Fworking-mother%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         54.230.111.67
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                        
server: istio-envoy
date: Fri, 27 Jan 2023 17:24:56 GMT
last-modified: Fri, 27 Jan 2023 17:00:22 GMT
etag: W/"f380dbfcbb0e3e9e079d70231be1cff3"
x-amz-server-side-encryption: AES256
x-amz-version-id: tVIOQ5knB_pnUIzARn2A1QNlFnrQ08ww
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
strict-transport-security: max-age=31536000; includeSubDomains
cache-control: max-age=31536000
x-envoy-upstream-service-time: 22
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: -fYz8886GdPKJ4LJQECpwcKKrEL67l3VbDxU4ts6ujkIeGAqDsJ-bw==
age: 569629
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /core/assets/js/36.b49bf23f.chunk.js HTTP/1.1 
Host: js.driftt.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://js.driftt.com/core?d=1&embedId=8df477mikhtc&eId=8df477mikhtc&region=US&forceShow=false&skipCampaigns=false&sessionId=ff449f43-c78f-4b55-8ab6-10a2fb02a0e1&sessionStarted=1675409954.714&campaignRefreshToken=4cfd567e-6916-49a3-89a6-04120c41d39c&hideController=false&pageLoadStartTime=1675409953488&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fseramount.com%2Fworking-mother%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         54.230.111.67
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                        
server: istio-envoy
date: Fri, 27 Jan 2023 17:24:56 GMT
last-modified: Fri, 27 Jan 2023 17:00:21 GMT
etag: W/"4ae92c53ef226eb2a201fc855ccb7835"
x-amz-server-side-encryption: AES256
x-amz-version-id: SWSsVLzyOcOhQhmvR.pbvKyQeo7W0A10
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
strict-transport-security: max-age=31536000; includeSubDomains
cache-control: max-age=31536000
x-envoy-upstream-service-time: 20
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 65Vytdtk2umvDU_CN5cp3XUp7k5dK5C6nQWGtwLLqoZd6HxFBIFDUA==
age: 569628
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /working-mother/ HTTP/1.1 
Host: seramount.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

search
                                         141.193.213.20
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
                                        
date: Fri, 03 Feb 2023 07:38:43 GMT
vary: Accept-Encoding, Accept-Encoding, Accept-Encoding, Accept-Encoding,Cookie
link: <https://seramount.com/wp-json/>; rel="https://api.w.org/", <https://seramount.com/wp-json/wp/v2/pages/16125>; rel="alternate"; type="application/json", <https://seramount.com/?p=16125>; rel=shortlink
x-powered-by: WP Engine
x-cacheable: SHORT
cache-control: max-age=600, must-revalidate
x-cache: HIT: 12
x-cache-group: normal
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 79398233a81db50b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /core/assets/js/15.699b0dc7.chunk.js HTTP/1.1 
Host: js.driftt.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://js.driftt.com/core?d=1&embedId=8df477mikhtc&eId=8df477mikhtc&region=US&forceShow=false&skipCampaigns=false&sessionId=ff449f43-c78f-4b55-8ab6-10a2fb02a0e1&sessionStarted=1675409954.714&campaignRefreshToken=4cfd567e-6916-49a3-89a6-04120c41d39c&hideController=false&pageLoadStartTime=1675409953488&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fseramount.com%2Fworking-mother%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         54.230.111.67
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                        
server: istio-envoy
date: Fri, 27 Jan 2023 17:24:56 GMT
last-modified: Fri, 27 Jan 2023 17:00:20 GMT
etag: W/"43d1442a9d30453da9eaeb12b9daafff"
x-amz-server-side-encryption: AES256
x-amz-version-id: jUF4GGgcG34JdLv0MHXRHyWvmwH3OQeO
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
strict-transport-security: max-age=31536000; includeSubDomains
cache-control: max-age=31536000
x-envoy-upstream-service-time: 17
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: bwjy2ApTuqN6_pNZyRxMPXcdkLz283I8V12q8VGldLq54T7FmZzRZA==
age: 569627
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /core/assets/js/50.de3b5864.chunk.js HTTP/1.1 
Host: js.driftt.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://js.driftt.com/core?d=1&embedId=8df477mikhtc&eId=8df477mikhtc&region=US&forceShow=false&skipCampaigns=false&sessionId=ff449f43-c78f-4b55-8ab6-10a2fb02a0e1&sessionStarted=1675409954.714&campaignRefreshToken=4cfd567e-6916-49a3-89a6-04120c41d39c&hideController=false&pageLoadStartTime=1675409953488&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fseramount.com%2Fworking-mother%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         54.230.111.67
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                        
server: istio-envoy
date: Fri, 27 Jan 2023 17:24:56 GMT
last-modified: Fri, 27 Jan 2023 17:00:21 GMT
etag: W/"114785899ceb423273fcc17aaad202e9"
x-amz-server-side-encryption: AES256
x-amz-version-id: 1DnDsXjV5U2x4yjXf3GCnDIDPlyIffBu
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
strict-transport-security: max-age=31536000; includeSubDomains
cache-control: max-age=31536000
x-envoy-upstream-service-time: 19
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: jhGil-B7_KeuoyGLAMw1BzzbFrWgSl2tY7Jx2ko0TuFSXqWIYHq4jQ==
age: 569628
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /core/assets/js/1.265b75ef.chunk.js HTTP/1.1 
Host: js.driftt.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://js.driftt.com/core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1675409953488
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         54.230.111.67
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                        
server: istio-envoy
date: Thu, 02 Feb 2023 17:46:52 GMT
last-modified: Thu, 02 Feb 2023 17:19:17 GMT
etag: W/"c249e8ef1d80c855b65eb6946146dcdf"
x-amz-server-side-encryption: AES256
x-amz-version-id: 8do_y6BUzEDK4wKLC1KX_I84gLfTQ19C
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
strict-transport-security: max-age=31536000; includeSubDomains
cache-control: max-age=31536000
x-envoy-upstream-service-time: 21
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: nWjbujYfzwWFJ3om03kl7cBDobmGclKizwMriCwXlbazrIQwIT0I_Q==
age: 49913
X-Firefox-Spdy: h2


--- Additional Info ---