Overview

URLcj.dotomi.com/q570gv32L/v16/KONMORMP/KJJMMNQSP/J/J/J?i=cE4z=1zTzMQSNNNQMQPVyw1VyxUV10yzTPQNU<<3FFBE://III.6CLK15.yA8/y74y6-NMMPPQTVS-NRQPRUPS<<c<3FFB://III.6CLK15.yA8<<N<N<M<M<M<
IP 89.207.16.75 (United States)
ASN#41041 Conversant LLC
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Access public lock_open
Report completed2023-03-23 15:03:59 UTC
StatusLoading report..
IDS alerts6
Blocklist alert0
urlquery alerts No alerts detected
Tags None

Domain Summary (47)

Fully Qualifying Domain Name Rank First Seen Last Seen Sent bytes Received bytes IP Comment
cj.dotomi.com (1) 13192 2014-02-07T10:51:46Z 2023-03-29T12:30:44Z 533 1915 89.207.16.75
tms.hft.everyplate.com (2) 322014 2021-09-03T22:29:24Z 2023-03-23T16:03:58Z 1091 72950 34.160.69.63
i.geistm.com (1) 2299 2017-01-30T19:00:10Z 2023-03-28T13:24:54Z 378 395 18.208.121.3
shop.pe (1) 10635 2012-07-24T20:16:22Z 2023-03-29T14:43:39Z 368 652 35.227.244.1
ocsp.pki.goog (11) 175 2018-07-01T08:43:07Z 2023-03-29T05:09:04Z 3815 28961 142.250.74.163
o46710.ingest.sentry.io (1) 65751 2020-06-17T12:52:39Z 2023-03-28T15:03:49Z 585 35014 34.120.195.249
web-chat-tag-cdn.s3.eu-west-1.amazonaws.com (3) 104861 2021-07-05T16:07:10Z 2023-03-28T15:03:51Z 1193 62336 3.5.68.152
logx.optimizely.com (2) 1233 2016-10-05T15:33:23Z 2023-03-29T10:15:21Z 940 6784 18.235.42.52
cdn9.forter.com (1) 5233 2018-07-31T09:01:55Z 2023-03-29T17:38:28Z 500 1064 54.230.111.53
script.hotjar.com (1) 887 2020-11-05T17:23:46Z 2023-03-29T08:27:03Z 387 69816 54.230.111.73
7a37ed0f6797.cdn4.forter.com (1) 115075 2020-11-29T17:41:28Z 2023-03-29T16:47:33Z 392 689 54.230.111.105
tag.wknd.ai (1) 7914 2020-03-12T01:16:57Z 2023-03-29T16:03:20Z 359 18058 34.120.253.250
www.google.com (1) 7 2015-05-10T13:11:19Z 2023-03-29T05:55:56Z 485 578 142.250.74.164
googleads.g.doubleclick.net (1) 42 2021-02-20T16:43:32Z 2023-03-29T10:24:16Z 813 1211 216.58.211.2
www.googleadservices.com (1) 107 2012-06-26T16:53:06Z 2023-03-29T14:17:45Z 1619 2248 142.250.74.162
addshoppers.s3.amazonaws.com (3) 15696 2014-06-11T09:08:46Z 2023-03-28T21:01:48Z 1321 8976 52.217.90.140
contile.services.mozilla.com (1) 1114 2021-05-27T20:32:35Z 2023-03-29T05:09:31Z 333 391 34.117.237.239
ocsp.sca1b.amazontrust.com (4) 1015 2017-03-03T16:20:51Z 2019-03-27T05:05:54Z 1400 3964 54.230.245.110
w.usabilla.com (1) 3254 2012-12-06T08:59:01Z 2023-03-29T06:00:53Z 373 40119 34.252.19.64
d6tizftlrpuof.cloudfront.net (1) 0 2013-05-24T02:48:46Z 2023-03-29T08:31:42Z 460 2234 54.230.245.25
bat.bing.com (4) 387 2014-04-08T11:23:16Z 2023-03-29T05:25:55Z 2244 16187 13.107.21.200
vc.hotjar.io (1) 2334 2019-04-16T12:33:25Z 2023-03-29T09:20:58Z 427 368 54.230.111.70
www.google.no (1) 25607 2016-04-05T21:50:59Z 2023-03-29T09:59:29Z 795 641 216.58.207.227
cdn.nytrng.com (1) 25486 2020-10-02T20:00:48Z 2023-03-28T21:01:49Z 357 481 54.230.111.74
www.everyplate.com (1) 259192 2018-08-16T17:27:49Z 2023-03-27T19:50:34Z 608 825 104.16.55.89
r3.o.lencr.org (13) 344 2020-12-02T09:52:13Z 2023-03-29T05:09:11Z 4394 242738 23.196.236.32
images.everyplate.com (4) 174595 2018-07-06T15:28:54Z 2023-03-24T17:38:31Z 2808 115431 2.18.173.70
q.quora.com (1) 3239 2017-05-08T21:06:57Z 2023-03-29T17:37:40Z 666 11589 52.0.8.169
static.hotjar.com (1) 641 2014-11-01T06:14:27Z 2023-03-29T05:25:56Z 379 4800 54.230.111.66
duuytoqss3gu4.cloudfront.net (3) 0 2017-03-02T13:25:03Z 2023-03-29T10:59:43Z 1302 1588 54.230.245.223
ocsp.digicert.com (2) 86 2012-05-21T09:02:23Z 2023-03-29T11:45:01Z 682 28761 192.229.221.95
status.geotrust.com (3) 3662 2017-12-01T09:55:31Z 2023-03-29T05:13:49Z 1029 2277 192.229.221.95
a32cd5473546415fbdb137caf86b2dca-7a37ed0f6797.cdn.forter.com (1) 0 503 624 3.234.25.89
cdn0.forter.com (5) 5146 2016-01-26T18:42:32Z 2023-03-29T17:40:39Z 2406 1745 34.225.5.197
shopper.shop.pe (1) 12886 2017-07-18T21:28:17Z 2023-03-28T21:01:48Z 362 9794 35.190.54.17
app.shop.pe (3) 28969 2019-03-05T15:02:38Z 2023-03-28T21:01:48Z 1404 1844 35.227.244.1
content-signature-2.cdn.mozilla.net (1) 1152 2020-11-03T13:26:46Z 2023-03-29T05:09:31Z 413 5881 34.160.144.191
ocsp.globalsign.com (1) 2075 2012-07-20T19:46:16Z 2023-03-29T05:11:35Z 359 1906 104.18.20.226
img-getpocket.cdn.mozilla.net (6) 1631 2018-06-22T01:36:00Z 2023-03-29T05:09:12Z 3246 150442 34.120.237.76
ocsp.r2m01.amazontrust.com (6) 0 2022-10-12T22:43:53Z 2023-03-29T09:11:41Z 2100 9312 54.230.80.227
stats.g.doubleclick.net (1) 96 2013-06-10T22:21:11Z 2023-03-29T09:08:31Z 491 4568 209.85.233.156
nytrng.com (1) 3752 2017-05-13T02:54:58Z 2023-03-28T21:01:48Z 520 568 99.83.128.14
firefox.settings.services.mozilla.com (2) 867 2020-06-04T22:08:41Z 2023-03-29T05:09:03Z 782 2374 35.241.9.150
www.emjcd.com (1) 13026 2012-05-22T19:01:00Z 2023-03-29T12:30:44Z 840 1542 89.207.16.75
push.services.mozilla.com (1) 2140 2014-10-24T10:27:06Z 2023-03-29T05:09:32Z 606 127 54.200.178.235
d3rr3d0n31t48m.cloudfront.net (3) 0 2015-04-02T03:14:22Z 2023-03-29T14:43:40Z 1213 55048 54.230.111.123
cdn3.forter.com (2) 4640 2014-04-09T14:27:26Z 2023-03-29T17:01:09Z 933 686 44.213.151.157

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
Timestamp Severity Source IP Destination IP Alert
2023-03-23 15:03:59 UTC high Client IP  52.23.111.175 ET INFO Session Traversal Utilities for NAT (STUN Binding Request) 
2023-03-23 15:03:59 UTC high Client IP  52.23.111.175 ET INFO Session Traversal Utilities for NAT (STUN Binding Request) 
2023-03-23 15:03:59 UTC high Client IP  52.23.111.175 ET INFO Session Traversal Utilities for NAT (STUN Binding Request) 
2023-03-23 15:04:00 UTC high Client IP  52.23.111.175 ET INFO Session Traversal Utilities for NAT (STUN Binding Request) 
2023-03-23 15:04:01 UTC high Client IP  52.23.111.175 ET INFO Session Traversal Utilities for NAT (STUN Binding Request) 
2023-03-23 15:04:02 UTC high Client IP  52.23.111.175 ET INFO Session Traversal Utilities for NAT (STUN Binding Request) 

Blocklists

OpenPhish
 No alerts detected

PhishTank
 No alerts detected

Fortinet's Web Filter
 No alerts detected

mnemonic secure dns
 No alerts detected

Quad9 DNS
 No alerts detected

ThreatFox
 No alerts detected


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 89.207.16.75
Date UQ / IDS / BL URL IP
2023-06-07 04:30:24 UTC 0 - 0 - 5 cj.dotomi.com/pa117cy65O/y49/NQPPQONQ/UMROMUP (...) 89.207.16.75
2023-06-07 04:30:14 UTC 0 - 0 - 5 cj.dotomi.com/mf98ar-zH/ry2/GJIIJHGJ/NFKHFNI/ (...) 89.207.16.75
2023-06-06 14:19:14 UTC 0 - 7 - 0 cj.dotomi.com/i6104y1A9S/18D/RTZYSRQZ/SXZYRTV (...) 89.207.16.75
2023-06-06 14:18:44 UTC 0 - 7 - 0 cj.dotomi.com/dk116ar-zH/ry2/GIONHGFO/HMONGIK (...) 89.207.16.75
2023-06-05 12:04:03 UTC 0 - 8 - 0 cj.dotomi.com/fs105js0-I/sz3/HGOMHNJG/INPOHJL (...) 89.207.16.75


Last 5 reports on ASN: Conversant LLC
Date UQ / IDS / BL URL IP
2023-06-07 04:30:24 UTC 0 - 0 - 5 cj.dotomi.com/pa117cy65O/y49/NQPPQONQ/UMROMUP (...) 89.207.16.75
2023-06-07 04:30:14 UTC 0 - 0 - 5 cj.dotomi.com/mf98ar-zH/ry2/GJIIJHGJ/NFKHFNI/ (...) 89.207.16.75
2023-06-06 14:19:14 UTC 0 - 7 - 0 cj.dotomi.com/i6104y1A9S/18D/RTZYSRQZ/SXZYRTV (...) 89.207.16.75
2023-06-06 14:18:44 UTC 0 - 7 - 0 cj.dotomi.com/dk116ar-zH/ry2/GIONHGFO/HMONGIK (...) 89.207.16.75
2023-06-05 12:04:03 UTC 0 - 8 - 0 cj.dotomi.com/fs105js0-I/sz3/HGOMHNJG/INPOHJL (...) 89.207.16.75


Last 5 reports on domain: dotomi.com
Date UQ / IDS / BL URL IP
2023-06-07 04:30:24 UTC 0 - 0 - 5 cj.dotomi.com/pa117cy65O/y49/NQPPQONQ/UMROMUP (...) 89.207.16.75
2023-06-07 04:30:14 UTC 0 - 0 - 5 cj.dotomi.com/mf98ar-zH/ry2/GJIIJHGJ/NFKHFNI/ (...) 89.207.16.75
2023-06-06 14:19:14 UTC 0 - 7 - 0 cj.dotomi.com/i6104y1A9S/18D/RTZYSRQZ/SXZYRTV (...) 89.207.16.75
2023-06-06 14:18:44 UTC 0 - 7 - 0 cj.dotomi.com/dk116ar-zH/ry2/GIONHGFO/HMONGIK (...) 89.207.16.75
2023-06-05 12:04:03 UTC 0 - 8 - 0 cj.dotomi.com/fs105js0-I/sz3/HGOMHNJG/INPOHJL (...) 89.207.16.75


Last 5 reports with similar screenshot
Date UQ / IDS / BL URL IP
2023-03-23 15:04:12 UTC 0 - 6 - 0 cj.dotomi.com/8066ft10J/t-4/IMLKMPKN/IHHKKLOQ (...) 89.207.16.75
2023-03-23 15:04:10 UTC 0 - 6 - 0 cj.dotomi.com/i5116nmvuC/mty/BFEDFIDG/BAADDEH (...) 89.207.16.75
2023-03-23 15:04:09 UTC 0 - 6 - 0 cj.dotomi.com/2m104zw43M/w27/LPONPSNQ/LKKNNOR (...) 89.207.16.75
2023-03-23 15:03:47 UTC 0 - 6 - 0 cj.dotomi.com/lr82mu21K/u05/JNMLNQLO/JIILLMPR (...) 89.207.16.75
2023-03-23 15:03:33 UTC 0 - 5 - 0 cj.dotomi.com/kl70nmvuC/mty/BFEDFIDG/BAADDEHJ (...) 89.207.16.75

JavaScript

Executed Scripts (107)

Executed Evals (60)
#1 JavaScript::Eval (size: 43) - SHA256: 007cddfce59ab3c7b0d940e987ebe2c27ee1c2a171052809bdfd91f94a66f1db
(function() {
    return navigator.userAgent
})();
#2 JavaScript::Eval (size: 144) - SHA256: 016cb14e9ac78a7e42638533fc1526b431bb1aa2bdf336913a9172185544b6ee
(function() {
    var b = window.dataLayer.filter(function(a) {
        return a["gtm.uniqueEventId"] == google_tag_manager["GTM-P2Q9ZFQ"].macro(14)
    });
    return b
})();
#3 JavaScript::Eval (size: 1420) - SHA256: e76297116d21340bb7c524356ec011b2331c16db439d07268b5a288ff5fbf147
(function() {
    var a = "analytics-training.pl 3ds-hanseaticbank.de 3dsecure-vrp.de 3dsecure.com 3dsecure.no abnamro.nl acs.sia.eu activa-card.com adyen.com americanexpress.com ampproject.org arcot.com asnbank.nl bankieren.ideal.ing.nl betalen.rabobank.nl bnz.co.nz bunq.com cardcomplete.com cardinalcommerce.com cartasi.it cic.fr cm-cic.com comdirect.de commerzbank.de consorsbank.de creditmutuel.fr deutsche-bank.de diensten.snsbank.nl easybank.at edb.com europabank.be everyplate.de hanseaticbank.de hellofresh.zendesk.com icscards.nl ideal.ing.nl ideal.knab.nl ideal.regiobank.nl ideal.snsbank.nl ideal.triodos.nl ideal.vanlanschot.com ing.be ing.com ing.de ing.nl klarna.com lcl.fr live.adyen.com lloydstsb.com mastercard.us mercurypaymentservices.it modirum.com mycardplace.com mycardsecure.com nab.com.au nxt.to paylife.at paypal.com pluscard.de psa.at rabobank.n rabobank.nl redsys.es regiobank.nl royalbank.com sbanken.no securecode.com securesuite.co.uk securesuite.net sia.eu slsp.sk snsbank.nl sofort.com sparebank1.no sparkasse.at sparkassen-kreditkarten.de swedbank.se swisscard.ch targobank.de touchtechpayments.com verifiedbyvisa.com westpac.com.au wlp-acs.com www.greenchef-biologischh.de www.greenchef-specialdiets.de mastercard.us".split(" "),
        b = RegExp("https?://([^/:]+)").exec(google_tag_manager["GTM-P2Q9ZFQ"].macro(33));
    if (b)
        for (var c = a.length; c--;)
            if ((new RegExp(a[c] + "$")).test(b[1])) return "true"
})();
#4 JavaScript::Eval (size: 171) - SHA256: b83800325a12ed050bb54dca3fd188666f064bfca60e4a80a58d82008e2c8a31
(function() {
    return google_tag_manager["GTM-P2Q9ZFQ"].macro(41) || window.location.protocol + "//" + window.location.hostname + window.location.pathname + window.location.search
})();
#5 JavaScript::Eval (size: 84) - SHA256: 35b0a2b3cb0cd5eeb26f94e3225d660313b82aa843ccf97cb7eb4775847af9a6
(function() {
    return document.location.hostname.match(/(everyplate.*\.?.*)/gi)[0]
})();
#6 JavaScript::Eval (size: 84) - SHA256: be4639d8879487a9267326640f1fad4a3b0453b9495fe26b002ad009693db13b
(function() {
    var a = google_tag_manager["GTM-P2Q9ZFQ"].macro(5);
    if (a) return "US-" + a
})();
#7 JavaScript::Eval (size: 84) - SHA256: f3263094657350f2f8eb6131a742dc55abeaec74b080c6428d82cb0dd0ebf650
(function() {
    var a = google_tag_manager["GTM-P2Q9ZFQ"].macro(8);
    if (a) return "US-" + a
})();
#8 JavaScript::Eval (size: 114) - SHA256: 688fe8a760cd7fc0e9a4394cd8cc8cc488d39a281148e157d831d2bc00d96383
(function() {
    var a = localStorage.getItem("em_base64"),
        b = google_tag_manager["GTM-P2Q9ZFQ"].macro(18);
    return b || a
})();
#9 JavaScript::Eval (size: 1420) - SHA256: 3308bcc9bd2af07a348a55587428c2949e6da52b0d3fa2b5c7a3fac554a03695
(function() {
    var a = "analytics-training.pl 3ds-hanseaticbank.de 3dsecure-vrp.de 3dsecure.com 3dsecure.no abnamro.nl acs.sia.eu activa-card.com adyen.com americanexpress.com ampproject.org arcot.com asnbank.nl bankieren.ideal.ing.nl betalen.rabobank.nl bnz.co.nz bunq.com cardcomplete.com cardinalcommerce.com cartasi.it cic.fr cm-cic.com comdirect.de commerzbank.de consorsbank.de creditmutuel.fr deutsche-bank.de diensten.snsbank.nl easybank.at edb.com europabank.be everyplate.de hanseaticbank.de hellofresh.zendesk.com icscards.nl ideal.ing.nl ideal.knab.nl ideal.regiobank.nl ideal.snsbank.nl ideal.triodos.nl ideal.vanlanschot.com ing.be ing.com ing.de ing.nl klarna.com lcl.fr live.adyen.com lloydstsb.com mastercard.us mercurypaymentservices.it modirum.com mycardplace.com mycardsecure.com nab.com.au nxt.to paylife.at paypal.com pluscard.de psa.at rabobank.n rabobank.nl redsys.es regiobank.nl royalbank.com sbanken.no securecode.com securesuite.co.uk securesuite.net sia.eu slsp.sk snsbank.nl sofort.com sparebank1.no sparkasse.at sparkassen-kreditkarten.de swedbank.se swisscard.ch targobank.de touchtechpayments.com verifiedbyvisa.com westpac.com.au wlp-acs.com www.greenchef-biologischh.de www.greenchef-specialdiets.de mastercard.us".split(" "),
        b = RegExp("https?://([^/:]+)").exec(google_tag_manager["GTM-P2Q9ZFQ"].macro(53));
    if (b)
        for (var c = a.length; c--;)
            if ((new RegExp(a[c] + "$")).test(b[1])) return "true"
})();
#10 JavaScript::Eval (size: 144) - SHA256: a604d305c652f7300b435de9a4ed782c618430bd9a187aeaa18394fa21d77362
(function() {
    var b = window.dataLayer.filter(function(a) {
        return a["gtm.uniqueEventId"] == google_tag_manager["GTM-P2Q9ZFQ"].macro(73)
    });
    return b
})();
#11 JavaScript::Eval (size: 114) - SHA256: fd1f78ba7a1e8007b212b79031b555483e2af459035133e31d22e889f1587f91
(function() {
    var a = localStorage.getItem("em_base64"),
        b = google_tag_manager["GTM-P2Q9ZFQ"].macro(10);
    return b || a
})();
#12 JavaScript::Eval (size: 171) - SHA256: 44be21af2d37a842f3ae54e7ee32b091811463b2ed18b6b84a59cf22f91042c1
(function() {
    return google_tag_manager["GTM-P2Q9ZFQ"].macro(17) || window.location.protocol + "//" + window.location.hostname + window.location.pathname + window.location.search
})();
#13 JavaScript::Eval (size: 85) - SHA256: b93693af7034467f5ac6674202cf497943b26f1c6ffb4a83bd5e7bac225d5edf
(function() {
    var a = google_tag_manager["GTM-P2Q9ZFQ"].macro(23);
    if (a) return "US-" + a
})();
#14 JavaScript::Eval (size: 114) - SHA256: 6ec2aa9d28c2a26c77134e3a81df2a17180c2fd829ba222eddd7e71bc0e4d56b
(function() {
    var a = localStorage.getItem("em_base64"),
        b = google_tag_manager["GTM-P2Q9ZFQ"].macro(55);
    return b || a
})();
#15 JavaScript::Eval (size: 91) - SHA256: 798712397ddaf622d667052b2f6cff3fd68a96dff7c29c9aec4f0fd1f72a0ee7
(function() {
    var a = google_tag_manager["GTM-P2Q9ZFQ"].macro(75);
    return a.split(" | ")[2]
})();
#16 JavaScript::Eval (size: 114) - SHA256: 408f7c709f93c9942ba04ca5b7a300901562b7abd208a4bbd01c8957b3a9b1f2
(function() {
    var a = localStorage.getItem("em_base64"),
        b = google_tag_manager["GTM-P2Q9ZFQ"].macro(69);
    return b || a
})();
#17 JavaScript::Eval (size: 171) - SHA256: 35b585b297f9712d34c4b7da5b2c2c9ce7494a19b4ba194fa84f4f599d37341a
(function() {
    return google_tag_manager["GTM-P2Q9ZFQ"].macro(34) || window.location.protocol + "//" + window.location.hostname + window.location.pathname + window.location.search
})();
#18 JavaScript::Eval (size: 144) - SHA256: 9989c55b403052afe196b2cbe265ca8229e078d44935fc23ce6a7c5092cf9392
(function() {
    var b = window.dataLayer.filter(function(a) {
        return a["gtm.uniqueEventId"] == google_tag_manager["GTM-P2Q9ZFQ"].macro(38)
    });
    return b
})();
#19 JavaScript::Eval (size: 171) - SHA256: 8180c5641c0e7d69532691a0b9da822eaf894346894dba26f0e5048950d6bc96
(function() {
    return google_tag_manager["GTM-P2Q9ZFQ"].macro(54) || window.location.protocol + "//" + window.location.hostname + window.location.pathname + window.location.search
})();
#20 JavaScript::Eval (size: 15081) - SHA256: 0145ad33b61d38490867e34c74d558254d064e1a521999fba4d255d9d2cfd65e
// START SECTION TO EDIT
var addshopSettings = {
    emailInputsToExclude: [ // array of document.querySelectorAll objects
        //document.querySelectorAll('[name=newsletter-email]')
    ],
    emailUtmsToExclude: [], // optional, include array of all utm codes that client has requested we suppress
    asAnonCartCampaignIds: ['60e86ffa27f7c314acfdf9f6'], // array of all Cart Abandon ERC campaigns (include more than one for A/B testing)
    asAnonProdCampaignIds: [], // array of all Browse (aka product) Abandon ERC campaigns (include more than one for A/B testing)
    asAnonGenCampaignIds: [], // array of all General Abandon ERC campaigns (include more than one for A/B testing)
    checkoutSuccessUrl: '', // optional, leave blank if you don't know it (but ROI Tracking must be installed if you leave it blank)
    daysToClearSavedProducts: 30, // optional, set to a number of days greater than 0 to clear out old saved products viewed
    daysToClearSavedCartData: 30, // optional, set to a number of days greater than 0 to clear out old cart data (products & campaign ID)
    minPageviewsForGen: 1,
    onProductPage: function() {
        // IMPORTANT
        // Make sure to check for the presence of an add to cart button (and further, make sure it's an add to cart button
        // for the main product, not a recommended/suggested/accessory product)
        if (document.querySelector('body.template-product')) {
            return true
        }
        return false;
    },
    getProductPageDetails: function() {
        // return the product details
        return {
            'product_name': "",
            'image': "",
            'price': "",
            'quantity': 1,
            'sku': ""
        }
    },
    onCartPage: function() {
        // return true if on cart page, false if not
        if (document.URL.search('/checkout') > -1) {
            return true
        }
        return false;
    },
    getCartRows: function() {
        // return array of all cart item elements
        return document.querySelectorAll('.cart-table tr');
    },
    getCartItemDetails: function(row) {
        // each row from getCartRows gets passed into this function
        // the row variable contains the cart item element 
        return {
            'product_name': "",
            'price': "",
            'image': "",
            'quantity': "",
            'sku': ""
        }
    },
    getCartTotal: function() {
        // return the order grand total (called on cart page only)
        return 1;
    },
    isLoggedIn: function() {
        // if we don't have to exclude signed in people, just always return false here
        // otherwise, return true if the user is signed in
        // if ( document.querySelector(".is-loggedin") !== null && document.querySelector(".is-loggedin") !== undefined) {
        //     return true;
        // }
        return false;
    },
    isExcludedPage: function() {
        // function here to exclude any pages from tracking
        // if you return true, the script won't run (but it won't exclude the user completely)
        return false;
    },
    addPushCustom: function(addPushObject) {
        // customizations to _add.push
        return addPushObject;
    },
    trackCustom: function() {
        // do anything custom here
        var asCampaignId = '60ff126b27f7c3756142546e';
        var initialTime = '';
        if (localStorage.getItem('asFirstTimeOnSite') === null || localStorage.getItem('asFirstTimeOnSite') === '') {
            initialTime = new Date().getTime();
            localStorage.setItem('asFirstTimeOnSite', initialTime);
        } else {
            initialTime = localStorage.getItem('asFirstTimeOnSite');
        }
        var totalTimeOnSite = 0;
        setInterval(function() {
            totalTimeOnSite = new Date().getTime() - initialTime;
            localStorage.setItem('timeOnSite', totalTimeOnSite);
            if (totalTimeOnSite > 150000 && localStorage.getItem('asHasViewedProductPage') !== 'true' && localStorage.getItem('asCartPushed') !== '1') {
                _add.push({
                    'active_cart': true,
                    'campaign_id': asCampaignId,
                });
                // reset time on site to 0
                localStorage.removeItem('asFirstTimeOnSite');
                localStorage.removeItem('timeOnSite');
                totalTimeOnSite = 0;
                initialTime = new Date().getTime();
            }
        }, 1000);
    }
}

// END SECTION TO EDIT

document.addEventListener('addshopNetworkReady', function(e) {
    addshopNetwork(addshopSettings);
}, false);

var lastTriggerTime = '';
const observer = new MutationObserver(function() {
    if (new Date().getTime() > lastTriggerTime + 15000 || lastTriggerTime === '') {
        lastTriggerTime = new Date().getTime();
        addshopNetwork(addshopSettings);
    }
});
observer.observe(document.body, {
    attributes: true,
    childList: true,
    subtree: true
});

try {
    var addshopNetwork = function(settings) {
        //---------START NETWORK EMAILS

        var emailInputsTracked = [];

        var asPageViews = parseInt(localStorage.getItem('asPageViews') || 1);

        if (settings.daysToClearSavedProducts > 0) {
            var asLastUpdatedStoredProducts = localStorage.getItem('asLastSavedProducts');

            // if it's been longer than 30 days since the products have been saved, clear them
            if ((asLastUpdatedStoredProducts && new Date() - new Date(asLastUpdatedStoredProducts) > (86400000 * settings.daysToClearSavedProducts)) || !asLastUpdatedStoredProducts) {
                localStorage.removeItem('asProductsViewed');
                localStorage.removeItem('asProdCampaignId');
                localStorage.setItem('asLastSavedProducts', new Date().toString());
            }
        }

        if (settings.daysToClearSavedCartData > 0) {
            var asLastPushedCart = localStorage.getItem('asLastPushedCart');

            // if it's been longer than 30 days since the products have been saved, clear them
            if ((asLastPushedCart && new Date() - new Date(asLastPushedCart) > (86400000 * settings.daysToClearSavedCartData)) || !asLastPushedCart) {
                localStorage.removeItem('asCartCampaignId');
                localStorage.setItem('asLastPushedCart', new Date().toString());
            }
        }

        if (localStorage.getItem('asAnonDisable') == '1' || settings.isExcludedPage()) {
            return;
        }

        //general visitor
        if (localStorage.getItem('asAnonPushed') !== '1') {
            var to_push = {
                "active_cart": true,
                'custom_values': {
                    'as_network': true
                }
            }
            if (settings.asAnonGenCampaignIds.length > 0 && asPageViews >= settings.minPageviewsForGen) {
                to_push.campaign_id = settings.asAnonGenCampaignIds[Math.floor(Math.random() * settings.asAnonGenCampaignIds.length)];
                localStorage.setItem('asGenCampaignId', to_push.campaign_id);
            }
            _add.push(settings.addPushCustom(to_push))
            localStorage.setItem('asAnonPushed', '1');
        }

        //-------if converted turn off anon email
        if (typeof AddShoppersConversion != "undefined" || (typeof settings.checkoutSuccessUrl == "string" && settings.checkoutSuccessUrl.length > 0 && document.URL.toLowerCase().search(settings.checkoutSuccessUrl.toLowerCase()) > -1)) {
            _add.push({
                "custom_values": {
                    "as_network": false
                },
                "active_cart": false,
                "campaign_id": "",
                "cart_contents": []
            });
            return;
        }
        // trigger general abandon if it meets the criteria (if it wasn't called on first pageview)
        else if (settings.asAnonGenCampaignIds.length > 0 && asPageViews >= settings.minPageviewsForGen && localStorage.getItem('asGenCampaignId') === null) {
            if (!settings.onCartPage() && !settings.onProductPage()) {
                var asGenCampaignId = settings.asAnonGenCampaignIds[Math.floor(Math.random() * settings.asAnonGenCampaignIds.length)];
                _add.push({
                    campaign_id: asGenCampaignId
                });
                localStorage.setItem('asGenCampaignId', asGenCampaignId);
            }
        }

        //-------if user came from an email, disable
        if (excludeEmailUtm()) {
            _add.push({
                "custom_values": {
                    "as_network": false
                },
                "active_cart": false
            });
            localStorage.setItem('asAnonDisable', '1');
            return;
        }


        //-------if user is signed in set anon to false
        if (settings.isLoggedIn()) {
            _add.push({
                "custom_values": {
                    "as_network": false
                },
                "active_cart": false
            });
            localStorage.setItem('asAnonPushed', '1');
            localStorage.setItem('asAnonDisable', '1');
            return;
        }

        //***************has cart***************
        if (settings.onCartPage() && settings.asAnonCartCampaignIds.length > 0) {
            //cart contents
            var cart_contents = settings.getCartRows();
            var asCartValue = parseFloat(settings.getCartTotal());
            var cartContentsArray = [];

            for (i = 0; i < cart_contents.length; i++) {
                var cart_item = settings.getCartItemDetails(cart_contents[i]);

                if (!cart_item) {
                    continue
                }

                if (typeof cart_item.sku == "string") {
                    var productsViewed = JSON.parse(localStorage.getItem('asProductsViewed')) || [];
                    if (productsViewed.length > 0) {
                        check_products_loop: for (var prod = 0; prod < productsViewed.length; prod++) {
                            if (productsViewed[prod].sku.toLowerCase() == cart_item.sku.toLowerCase()) {
                                cart_item.image = productsViewed[prod].image;
                                break check_products_loop;
                            }
                        }
                    }
                }

                cart_item.price = parseFloat(cart_item.price);
                cart_item.quantity = parseInt(cart_item.quantity);
                cartContentsArray.push(cart_item);
            }

            if (localStorage.getItem('asCartCampaignId') === null) {
                var campaign_id = settings.asAnonCartCampaignIds[Math.floor(Math.random() * settings.asAnonCartCampaignIds.length)];
                localStorage.setItem('asCartCampaignId', campaign_id);
            } else {
                var campaign_id = localStorage.getItem('asCartCampaignId');
            }

            asPushCartContents(cartContentsArray, asCartValue, campaign_id);

            localStorage.setItem('asCartPushed', '1');
            localStorage.setItem('asLastPushedCart', new Date().toString());
        }
        // product page
        else if (settings.onProductPage() && localStorage.getItem('asCartPushed') !== '1' && settings.asAnonProdCampaignIds.length > 0) {
            var productsViewed = JSON.parse(localStorage.getItem('asProductsViewed')) || [];
            var trackProduct = true;

            var productDetails = settings.getProductPageDetails();

            for (var i = productsViewed.length - 1; i >= 0; i--) {
                if (productsViewed[i].sku == productDetails.sku) {
                    if (productsViewed[i].product_name == productDetails.product_name && productsViewed[i].price == productDetails.price) {
                        trackProduct = false;
                    }
                    productsViewed.splice(i, 1);
                }
            }

            if (trackProduct) {
                productsViewed.push(productDetails);

                // console.log(productsViewed)
                if (localStorage.getItem('asProdCampaignId') === null) {
                    var campaign_id = settings.asAnonProdCampaignIds[Math.floor(Math.random() * settings.asAnonProdCampaignIds.length)];
                    localStorage.setItem('asProdCampaignId', campaign_id);
                } else {
                    var campaign_id = localStorage.getItem('asProdCampaignId');
                }

                if (asPageViews >= settings.minPageviewsForGen) {
                    asPushCartContents(productsViewed, 0, campaign_id);
                }

                localStorage.setItem('asProductsViewed', JSON.stringify(productsViewed));
                localStorage.setItem('asLastSavedProducts', new Date().toString());
            }
        }


        // Exclude email inputs
        for (var i = 0; i < settings.emailInputsToExclude.length; i++) {
            xloop: for (var x = 0; x < settings.emailInputsToExclude[i].length; x++) {
                if (emailInputsTracked.includes(settings.emailInputsToExclude[i][x])) {
                    continue xloop;
                }
                settings.emailInputsToExclude[i][x].addEventListener('blur', function(event) {
                    if (addshopValidateEmail(event.srcElement.value)) {
                        _add.push({
                            "custom_values": {
                                "as_network": false
                            },
                            "active_cart": false
                        });
                        localStorage.setItem('asAnonPushed', '1');
                        localStorage.setItem('asAnonDisable', '1');
                    }
                });
                emailInputsTracked.push(settings.emailInputsToExclude[i][x]);
            }
        }

        function excludeEmailUtm() {
            if (settings.emailUtmsToExclude.length == 0) {
                return false;
            }
            for (i = 0; i < settings.emailUtmsToExclude.length; i++) {
                if (document.URL.toLowerCase().search(settings.emailUtmsToExclude[i].toLowerCase()) > -1) {
                    return true;
                }
            }
            return false;
        }

        function asPushCartContents(cartRay, cartValue, campaignId) {
            _add.push(settings.addPushCustom({
                'campaign_id': campaignId,
                'active_cart': true,
                'cart_contents': cartRay,
                'cart_value': parseFloat(cartValue)
            }));
        }

        if (typeof settings.trackCustom == "function") {
            settings.trackCustom()
        }

    };

    function addshopValidateEmail(email) {
        var re = /^(([^<>()\[\]\\.,;:\s@"]+(\.[^<>()\[\]\\.,;:\s@"]+)*)|(".+"))@((\[[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}])|(([a-zA-Z\-0-9]+\.)+[a-zA-Z]{2,}))$/;
        return re.test(email);
    }

    var addshopReadyEvent = document.createEvent('Event');
    addshopReadyEvent.initEvent('addshopNetworkReady', true, true);
    document.dispatchEvent(addshopReadyEvent);


    //---------END NETWORK EMAILS

} catch (e) {
    console.log(e);
}
#21 JavaScript::Eval (size: 87) - SHA256: 7f04d3d2edc0da059f98dcf6f1ac6d0f768ef0dc784833acdec93a1c66bf7cb8
(function() {
    var a = "\/plans",
        b = /20+[\w-]+[\w-]+-W+[\w-]+[\w-]/g;
    return a = a.match(b)
})();
#22 JavaScript::Eval (size: 94) - SHA256: ac0268139721ab8a26417da204639ecf4c993bd6805a6432e9d6649052eff371
(function() {
    var a = new Date("undefined"),
        b = new Date;
    a = 1.6534E-9 * (b - a);
    return Math.floor(a)
})();
#23 JavaScript::Eval (size: 91) - SHA256: e5407c3dc49df806852d124bd22cceedf10193415554bc87255c0d431ad940a8
(function() {
    var a = google_tag_manager["GTM-P2Q9ZFQ"].macro(87);
    return a.split(" | ")[2]
})();
#24 JavaScript::Eval (size: 144) - SHA256: e95ac11c903a7538e52e8f72fd3c5cd9349063902ab582334de5186899052544
(function() {
    var b = window.dataLayer.filter(function(a) {
        return a["gtm.uniqueEventId"] == google_tag_manager["GTM-P2Q9ZFQ"].macro(31)
    });
    return b
})();
#25 JavaScript::Eval (size: 85) - SHA256: ae45ddc4de027efc2c916c0b55ef7a8b5646c9a378189d070c65c56e89817610
(function() {
    var a = google_tag_manager["GTM-P2Q9ZFQ"].macro(32);
    if (a) return "US-" + a
})();
#26 JavaScript::Eval (size: 170) - SHA256: 519c734c12dab554ec75ddf945cb770e6b7a1c4f7b4b15f629b42d729d0535bd
(function() {
    return google_tag_manager["GTM-P2Q9ZFQ"].macro(7) || window.location.protocol + "//" + window.location.hostname + window.location.pathname + window.location.search
})();
#27 JavaScript::Eval (size: 2049) - SHA256: 2e5fdf7e51dd3d0a477b38983ec646f70009258d26cd64857aecb7cf2d87cf9f
(function() {
    var a = navigator.userAgent || navigator.vendor || window.opera;
    return /(android|bb\d+|meego).+mobile|avantgo|bada\/|blackberry|blazer|compal|elaine|fennec|hiptop|iemobile|ip(hone|od)|iris|kindle|lge |maemo|midp|mmp|mobile.+firefox|netfront|opera m(ob|in)i|palm( os)?|phone|p(ixi|re)\/|plucker|pocket|psp|series(4|6)0|symbian|treo|up\.(browser|link)|vodafone|wap|windows (ce|phone)|xda|xiino/i.test(a) || /1207|6310|6590|3gso|4thp|50[1-6]i|770s|802s|a wa|abac|ac(er|oo|s\-)|ai(ko|rn)|al(av|ca|co)|amoi|an(ex|ny|yw)|aptu|ar(ch|go)|as(te|us)|attw|au(di|\-m|r |s )|avan|be(ck|ll|nq)|bi(lb|rd)|bl(ac|az)|br(e|v)w|bumb|bw\-(n|u)|c55\/|capi|ccwa|cdm\-|cell|chtm|cldc|cmd\-|co(mp|nd)|craw|da(it|ll|ng)|dbte|dc\-s|devi|dica|dmob|do(c|p)o|ds(12|\-d)|el(49|ai)|em(l2|ul)|er(ic|k0)|esl8|ez([4-7]0|os|wa|ze)|fetc|fly(\-|_)|g1 u|g560|gene|gf\-5|g\-mo|go(\.w|od)|gr(ad|un)|haie|hcit|hd\-(m|p|t)|hei\-|hi(pt|ta)|hp( i|ip)|hs\-c|ht(c(\-| |_|a|g|p|s|t)|tp)|hu(aw|tc)|i\-(20|go|ma)|i230|iac( |\-|\/)|ibro|idea|ig01|ikom|im1k|inno|ipaq|iris|ja(t|v)a|jbro|jemu|jigs|kddi|keji|kgt( |\/)|klon|kpt |kwc\-|kyo(c|k)|le(no|xi)|lg( g|\/(k|l|u)|50|54|\-[a-w])|libw|lynx|m1\-w|m3ga|m50\/|ma(te|ui|xo)|mc(01|21|ca)|m\-cr|me(rc|ri)|mi(o8|oa|ts)|mmef|mo(01|02|bi|de|do|t(\-| |o|v)|zz)|mt(50|p1|v )|mwbp|mywa|n10[0-2]|n20[2-3]|n30(0|2)|n50(0|2|5)|n7(0(0|1)|10)|ne((c|m)\-|on|tf|wf|wg|wt)|nok(6|i)|nzph|o2im|op(ti|wv)|oran|owg1|p800|pan(a|d|t)|pdxg|pg(13|\-([1-8]|c))|phil|pire|pl(ay|uc)|pn\-2|po(ck|rt|se)|prox|psio|pt\-g|qa\-a|qc(07|12|21|32|60|\-[2-7]|i\-)|qtek|r380|r600|raks|rim9|ro(ve|zo)|s55\/|sa(ge|ma|mm|ms|ny|va)|sc(01|h\-|oo|p\-)|sdk\/|se(c(\-|0|1)|47|mc|nd|ri)|sgh\-|shar|sie(\-|m)|sk\-0|sl(45|id)|sm(al|ar|b3|it|t5)|so(ft|ny)|sp(01|h\-|v\-|v )|sy(01|mb)|t2(18|50)|t6(00|10|18)|ta(gt|lk)|tcl\-|tdg\-|tel(i|m)|tim\-|t\-mo|to(pl|sh)|ts(70|m\-|m3|m5)|tx\-9|up(\.b|g1|si)|utst|v400|v750|veri|vi(rg|te)|vk(40|5[0-3]|\-v)|vm40|voda|vulc|vx(52|53|60|61|70|80|81|83|85|98)|w3c(\-| )|webc|whit|wi(g |nc|nw)|wmlb|wonu|x700|yas\-|your|zeto|zte\-/i.test(a.substr(0,
        4)) ? !0 : !1
})();
#28 JavaScript::Eval (size: 1420) - SHA256: a3a63cbda7d31f5e991c1ce6661f00478ed5e64056770236a2a80053631fa955
(function() {
    var a = "analytics-training.pl 3ds-hanseaticbank.de 3dsecure-vrp.de 3dsecure.com 3dsecure.no abnamro.nl acs.sia.eu activa-card.com adyen.com americanexpress.com ampproject.org arcot.com asnbank.nl bankieren.ideal.ing.nl betalen.rabobank.nl bnz.co.nz bunq.com cardcomplete.com cardinalcommerce.com cartasi.it cic.fr cm-cic.com comdirect.de commerzbank.de consorsbank.de creditmutuel.fr deutsche-bank.de diensten.snsbank.nl easybank.at edb.com europabank.be everyplate.de hanseaticbank.de hellofresh.zendesk.com icscards.nl ideal.ing.nl ideal.knab.nl ideal.regiobank.nl ideal.snsbank.nl ideal.triodos.nl ideal.vanlanschot.com ing.be ing.com ing.de ing.nl klarna.com lcl.fr live.adyen.com lloydstsb.com mastercard.us mercurypaymentservices.it modirum.com mycardplace.com mycardsecure.com nab.com.au nxt.to paylife.at paypal.com pluscard.de psa.at rabobank.n rabobank.nl redsys.es regiobank.nl royalbank.com sbanken.no securecode.com securesuite.co.uk securesuite.net sia.eu slsp.sk snsbank.nl sofort.com sparebank1.no sparkasse.at sparkassen-kreditkarten.de swedbank.se swisscard.ch targobank.de touchtechpayments.com verifiedbyvisa.com westpac.com.au wlp-acs.com www.greenchef-biologischh.de www.greenchef-specialdiets.de mastercard.us".split(" "),
        b = RegExp("https?://([^/:]+)").exec(google_tag_manager["GTM-P2Q9ZFQ"].macro(67));
    if (b)
        for (var c = a.length; c--;)
            if ((new RegExp(a[c] + "$")).test(b[1])) return "true"
})();
#29 JavaScript::Eval (size: 171) - SHA256: ffbd4c0161a80fe9644379627ebbf06ffcff7466a6deb69b81f9061d48f522f0
(function() {
    return google_tag_manager["GTM-P2Q9ZFQ"].macro(78) || window.location.protocol + "//" + window.location.hostname + window.location.pathname + window.location.search
})();
#30 JavaScript::Eval (size: 1915) - SHA256: 343d6c43991ff0597ce65a59714b85c774be820c2d96e0905a889a4bfc8fd2c6
/////////////////  refire affiliate link on cart  ////////////////////////////////////
AddShoppersWidget._asReFireAffLinkString = "https://www.tkqlhce.com/click-7738547-15259383"; //VARIABLE
AddShoppersWidget._asReFireAffLink = "asReFireAffLink";
if (window.location.href.indexOf('utm_source=AddShoppers') == -1) { //VARIABLE
    //if (window.location.pathname == '/plans') { //VARIABLE
    var lastLinkRefire = localStorage.getItem(AddShoppersWidget._asReFireAffLink);
    if (lastLinkRefire == null) lastLinkRefire = -1;
    if (lastLinkRefire < Date.now() - 86400000) {
        var url = 'https://app.shop.pe/app/attribution';
        var data = {
            siteId: AddShoppersWidget.id,
            sessionId: AddShoppersWidget.session_id
        };
        AddShoppersWidget.ajax({
                type: 'POST',
                data: AddShoppersWidget.jsonPoly.stringify(data),
                url: url,
                contentType: 'application/json',
                success: function(r) {
                    var json = JSON.parse(r.response);
                    if (json.results) {
                        if (json.results.triggered_email_click) {
                            if (json.results.triggered_email_click.whence == 'Email Click') {
                                var created_at = json.results.triggered_email_click.created_at;
                                created_at = created_at.replace('.Z', 'Z');
                                created_at = Date.parse(created_at);
                                //If event is created in last 24 hours
                                if (created_at > Date.now() - AddShoppersWidget.attribution_hours * 60 * 60 * 1000) {
                                    localStorage.setItem(AddShoppersWidget._asReFireAffLink, Date.now());

                                    window.location.href = AddShoppersWidget._asReFireAffLinkString;
                                }
                            }
                        }
                    }
                },
                error: function() {}
            }, {})
            /////////////////
    }
    // if url end: }
}
//////////////   eof # refire affiliate link on cart    ////////////////////////////
#31 JavaScript::Eval (size: 1419) - SHA256: a07360788b5a68f95beff997b84423b2ff17356bc3e6f501d785de3e35d5b468
(function() {
    var a = "analytics-training.pl 3ds-hanseaticbank.de 3dsecure-vrp.de 3dsecure.com 3dsecure.no abnamro.nl acs.sia.eu activa-card.com adyen.com americanexpress.com ampproject.org arcot.com asnbank.nl bankieren.ideal.ing.nl betalen.rabobank.nl bnz.co.nz bunq.com cardcomplete.com cardinalcommerce.com cartasi.it cic.fr cm-cic.com comdirect.de commerzbank.de consorsbank.de creditmutuel.fr deutsche-bank.de diensten.snsbank.nl easybank.at edb.com europabank.be everyplate.de hanseaticbank.de hellofresh.zendesk.com icscards.nl ideal.ing.nl ideal.knab.nl ideal.regiobank.nl ideal.snsbank.nl ideal.triodos.nl ideal.vanlanschot.com ing.be ing.com ing.de ing.nl klarna.com lcl.fr live.adyen.com lloydstsb.com mastercard.us mercurypaymentservices.it modirum.com mycardplace.com mycardsecure.com nab.com.au nxt.to paylife.at paypal.com pluscard.de psa.at rabobank.n rabobank.nl redsys.es regiobank.nl royalbank.com sbanken.no securecode.com securesuite.co.uk securesuite.net sia.eu slsp.sk snsbank.nl sofort.com sparebank1.no sparkasse.at sparkassen-kreditkarten.de swedbank.se swisscard.ch targobank.de touchtechpayments.com verifiedbyvisa.com westpac.com.au wlp-acs.com www.greenchef-biologischh.de www.greenchef-specialdiets.de mastercard.us".split(" "),
        b = RegExp("https?://([^/:]+)").exec(google_tag_manager["GTM-P2Q9ZFQ"].macro(9));
    if (b)
        for (var c = a.length; c--;)
            if ((new RegExp(a[c] + "$")).test(b[1])) return "true"
})();
#32 JavaScript::Eval (size: 1420) - SHA256: f5f1c661e46e40163740810c010556ebf753b61581bb33f04f663373f31cbdcc
(function() {
    var a = "analytics-training.pl 3ds-hanseaticbank.de 3dsecure-vrp.de 3dsecure.com 3dsecure.no abnamro.nl acs.sia.eu activa-card.com adyen.com americanexpress.com ampproject.org arcot.com asnbank.nl bankieren.ideal.ing.nl betalen.rabobank.nl bnz.co.nz bunq.com cardcomplete.com cardinalcommerce.com cartasi.it cic.fr cm-cic.com comdirect.de commerzbank.de consorsbank.de creditmutuel.fr deutsche-bank.de diensten.snsbank.nl easybank.at edb.com europabank.be everyplate.de hanseaticbank.de hellofresh.zendesk.com icscards.nl ideal.ing.nl ideal.knab.nl ideal.regiobank.nl ideal.snsbank.nl ideal.triodos.nl ideal.vanlanschot.com ing.be ing.com ing.de ing.nl klarna.com lcl.fr live.adyen.com lloydstsb.com mastercard.us mercurypaymentservices.it modirum.com mycardplace.com mycardsecure.com nab.com.au nxt.to paylife.at paypal.com pluscard.de psa.at rabobank.n rabobank.nl redsys.es regiobank.nl royalbank.com sbanken.no securecode.com securesuite.co.uk securesuite.net sia.eu slsp.sk snsbank.nl sofort.com sparebank1.no sparkasse.at sparkassen-kreditkarten.de swedbank.se swisscard.ch targobank.de touchtechpayments.com verifiedbyvisa.com westpac.com.au wlp-acs.com www.greenchef-biologischh.de www.greenchef-specialdiets.de mastercard.us".split(" "),
        b = RegExp("https?://([^/:]+)").exec(google_tag_manager["GTM-P2Q9ZFQ"].macro(24));
    if (b)
        for (var c = a.length; c--;)
            if ((new RegExp(a[c] + "$")).test(b[1])) return "true"
})();
#33 JavaScript::Eval (size: 1420) - SHA256: e4b611c9127aab7fda1eb3ba1b18983d8825de86e4443744d8878ddc539744c7
(function() {
    var a = "analytics-training.pl 3ds-hanseaticbank.de 3dsecure-vrp.de 3dsecure.com 3dsecure.no abnamro.nl acs.sia.eu activa-card.com adyen.com americanexpress.com ampproject.org arcot.com asnbank.nl bankieren.ideal.ing.nl betalen.rabobank.nl bnz.co.nz bunq.com cardcomplete.com cardinalcommerce.com cartasi.it cic.fr cm-cic.com comdirect.de commerzbank.de consorsbank.de creditmutuel.fr deutsche-bank.de diensten.snsbank.nl easybank.at edb.com europabank.be everyplate.de hanseaticbank.de hellofresh.zendesk.com icscards.nl ideal.ing.nl ideal.knab.nl ideal.regiobank.nl ideal.snsbank.nl ideal.triodos.nl ideal.vanlanschot.com ing.be ing.com ing.de ing.nl klarna.com lcl.fr live.adyen.com lloydstsb.com mastercard.us mercurypaymentservices.it modirum.com mycardplace.com mycardsecure.com nab.com.au nxt.to paylife.at paypal.com pluscard.de psa.at rabobank.n rabobank.nl redsys.es regiobank.nl royalbank.com sbanken.no securecode.com securesuite.co.uk securesuite.net sia.eu slsp.sk snsbank.nl sofort.com sparebank1.no sparkasse.at sparkassen-kreditkarten.de swedbank.se swisscard.ch targobank.de touchtechpayments.com verifiedbyvisa.com westpac.com.au wlp-acs.com www.greenchef-biologischh.de www.greenchef-specialdiets.de mastercard.us".split(" "),
        b = RegExp("https?://([^/:]+)").exec(google_tag_manager["GTM-P2Q9ZFQ"].macro(77));
    if (b)
        for (var c = a.length; c--;)
            if ((new RegExp(a[c] + "$")).test(b[1])) return "true"
})();
#34 JavaScript::Eval (size: 260) - SHA256: 23f6bb2bf69256661c531072b42e74f544d609a828ab2918c285b454ecc45d57
(function() {
    var b = document.location.pathname,
        a = document.location.search,
        d = RegExp("prefillEmail|mi_u|prefillFirstName|prefillLastName");
    return a ? (a = a.substring(1), a = a.split("\x26"), a = a.filter(function(c) {
        if (!d.test(c)) return c
    }), a = a.join("\x26"), b + "?" + a) : b
})();
#35 JavaScript::Eval (size: 144) - SHA256: 00170ec6864ad1b1e1d5d015c4623fb7eeba8f6dcd20ac2358ef710acfe912f3
(function() {
    var b = window.dataLayer.filter(function(a) {
        return a["gtm.uniqueEventId"] == google_tag_manager["GTM-P2Q9ZFQ"].macro(82)
    });
    return b
})();
#36 JavaScript::Eval (size: 91) - SHA256: 3bdf553a70f0797b9d4acc0e1c6f00f492b904653b71de38fac01e38a8224e99
(function() {
    var a = google_tag_manager["GTM-P2Q9ZFQ"].macro(84);
    return a.split(" | ")[2]
})();
#37 JavaScript::Eval (size: 85) - SHA256: 2f9f60e38cfb07b4f5f8ded4dc78821872afccf0e7c6bebd78ecd6add9a136b4
(function() {
    var a = google_tag_manager["GTM-P2Q9ZFQ"].macro(39);
    if (a) return "US-" + a
})();
#38 JavaScript::Eval (size: 68) - SHA256: dba9548a74568742c5f058172eb98a0b94a46265c49aec0d1d37c0b53aec661a
(function() {
    return window.screen.width + "x" + window.screen.height
})();
#39 JavaScript::Eval (size: 88) - SHA256: c7c5a76efc739a55534f9d32c21e209cb6f605c3de6e3d6abc2f5a1158f652fc
(function() {
    var a = window.navigator.userLanguage || window.navigator.language;
    return a
})();
#40 JavaScript::Eval (size: 47) - SHA256: 0b0baeb1d9c708a2ebe0feced3d1f71ed6144e89b3e243f1f6d66df89a038fa1
(function() {
    return (new Date).toISOString()
})();
#41 JavaScript::Eval (size: 144) - SHA256: 885a41f0e1b63ef9c5455fe7031b0e202035958e05ae0d6a7e15eb354aedcbc4
(function() {
    var b = window.dataLayer.filter(function(a) {
        return a["gtm.uniqueEventId"] == google_tag_manager["GTM-P2Q9ZFQ"].macro(22)
    });
    return b
})();
#42 JavaScript::Eval (size: 85) - SHA256: b1a25ae378b3ac87fda442fa15b61c930a1e0b69ee532316cd9121523624c49b
(function() {
    var a = google_tag_manager["GTM-P2Q9ZFQ"].macro(74);
    if (a) return "US-" + a
})();
#43 JavaScript::Eval (size: 85) - SHA256: 40094d0e457cca4c5a3588ad6331637d76560d166747873af46a43690316314b
(function() {
    var a = google_tag_manager["GTM-P2Q9ZFQ"].macro(83);
    if (a) return "US-" + a
})();
#44 JavaScript::Eval (size: 171) - SHA256: e3a39d925729d3252c254f404b3ff7e5706fdcd1b1522b7449893f93f7d0a38a
(function() {
    return google_tag_manager["GTM-P2Q9ZFQ"].macro(86) || window.location.protocol + "//" + window.location.hostname + window.location.pathname + window.location.search
})();
#45 JavaScript::Eval (size: 1420) - SHA256: f64b6cab9c25a06a128484b6ffa7d8543e1348f0e7ad0ab4e6b90ad5c80f8bba
(function() {
    var a = "analytics-training.pl 3ds-hanseaticbank.de 3dsecure-vrp.de 3dsecure.com 3dsecure.no abnamro.nl acs.sia.eu activa-card.com adyen.com americanexpress.com ampproject.org arcot.com asnbank.nl bankieren.ideal.ing.nl betalen.rabobank.nl bnz.co.nz bunq.com cardcomplete.com cardinalcommerce.com cartasi.it cic.fr cm-cic.com comdirect.de commerzbank.de consorsbank.de creditmutuel.fr deutsche-bank.de diensten.snsbank.nl easybank.at edb.com europabank.be everyplate.de hanseaticbank.de hellofresh.zendesk.com icscards.nl ideal.ing.nl ideal.knab.nl ideal.regiobank.nl ideal.snsbank.nl ideal.triodos.nl ideal.vanlanschot.com ing.be ing.com ing.de ing.nl klarna.com lcl.fr live.adyen.com lloydstsb.com mastercard.us mercurypaymentservices.it modirum.com mycardplace.com mycardsecure.com nab.com.au nxt.to paylife.at paypal.com pluscard.de psa.at rabobank.n rabobank.nl redsys.es regiobank.nl royalbank.com sbanken.no securecode.com securesuite.co.uk securesuite.net sia.eu slsp.sk snsbank.nl sofort.com sparebank1.no sparkasse.at sparkassen-kreditkarten.de swedbank.se swisscard.ch targobank.de touchtechpayments.com verifiedbyvisa.com westpac.com.au wlp-acs.com www.greenchef-biologischh.de www.greenchef-specialdiets.de mastercard.us".split(" "),
        b = RegExp("https?://([^/:]+)").exec(google_tag_manager["GTM-P2Q9ZFQ"].macro(16));
    if (b)
        for (var c = a.length; c--;)
            if ((new RegExp(a[c] + "$")).test(b[1])) return "true"
})();
#46 JavaScript::Eval (size: 171) - SHA256: 3a57cd1b171bb4803a48834826088d5cb3f6e7859376c4aac1937b2a37c0631a
(function() {
    return google_tag_manager["GTM-P2Q9ZFQ"].macro(25) || window.location.protocol + "//" + window.location.hostname + window.location.pathname + window.location.search
})();
#47 JavaScript::Eval (size: 85) - SHA256: 73011906f9c7ece0d625e5e4b20cafcbd64b939cf3e5f982dc72f9210d536305
(function() {
    var a = google_tag_manager["GTM-P2Q9ZFQ"].macro(52);
    if (a) return "US-" + a
})();
#48 JavaScript::Eval (size: 85) - SHA256: a04c3943442defab7094288a6d20b07a844d53e39fbbdb544a772da02904073c
(function() {
    var a = google_tag_manager["GTM-P2Q9ZFQ"].macro(66);
    if (a) return "US-" + a
})();
#49 JavaScript::Eval (size: 85) - SHA256: dd224413296d13268755f61422a73bb19317ec1a443c16e5702013379c2efd07
(function() {
    var a = google_tag_manager["GTM-P2Q9ZFQ"].macro(15);
    if (a) return "US-" + a
})();
#50 JavaScript::Eval (size: 1420) - SHA256: 35b7276a71cd51008fff87ff69a8c51e2664cb8d5249fb064c257a70cb679a7d
(function() {
    var a = "analytics-training.pl 3ds-hanseaticbank.de 3dsecure-vrp.de 3dsecure.com 3dsecure.no abnamro.nl acs.sia.eu activa-card.com adyen.com americanexpress.com ampproject.org arcot.com asnbank.nl bankieren.ideal.ing.nl betalen.rabobank.nl bnz.co.nz bunq.com cardcomplete.com cardinalcommerce.com cartasi.it cic.fr cm-cic.com comdirect.de commerzbank.de consorsbank.de creditmutuel.fr deutsche-bank.de diensten.snsbank.nl easybank.at edb.com europabank.be everyplate.de hanseaticbank.de hellofresh.zendesk.com icscards.nl ideal.ing.nl ideal.knab.nl ideal.regiobank.nl ideal.snsbank.nl ideal.triodos.nl ideal.vanlanschot.com ing.be ing.com ing.de ing.nl klarna.com lcl.fr live.adyen.com lloydstsb.com mastercard.us mercurypaymentservices.it modirum.com mycardplace.com mycardsecure.com nab.com.au nxt.to paylife.at paypal.com pluscard.de psa.at rabobank.n rabobank.nl redsys.es regiobank.nl royalbank.com sbanken.no securecode.com securesuite.co.uk securesuite.net sia.eu slsp.sk snsbank.nl sofort.com sparebank1.no sparkasse.at sparkassen-kreditkarten.de swedbank.se swisscard.ch targobank.de touchtechpayments.com verifiedbyvisa.com westpac.com.au wlp-acs.com www.greenchef-biologischh.de www.greenchef-specialdiets.de mastercard.us".split(" "),
        b = RegExp("https?://([^/:]+)").exec(google_tag_manager["GTM-P2Q9ZFQ"].macro(40));
    if (b)
        for (var c = a.length; c--;)
            if ((new RegExp(a[c] + "$")).test(b[1])) return "true"
})();
#51 JavaScript::Eval (size: 274) - SHA256: 9acc977704569aa9c179f29799b7f6efcdea0690920991ab78bd0eb51d96fee3
(function() {
    var b = window.dataLayer.filter(function(a) {
        if ("gaEventTrigger" == a.event && a.hasOwnProperty("gaEventAction") && "applyVoucher" == a.gaEventCategory && a.gaEventAction.includes("notificationImpression | valid")) return a
    });
    return b[0].gaEventLabel.split("|")[0].trim()
})();
#52 JavaScript::Eval (size: 171) - SHA256: c15eafcfca84d114c5c240e3dec441eaa06b053aaf19a2917ff309c9eb46922d
(function() {
    return google_tag_manager["GTM-P2Q9ZFQ"].macro(68) || window.location.protocol + "//" + window.location.hostname + window.location.pathname + window.location.search
})();
#53 JavaScript::Eval (size: 91) - SHA256: 234ab0e7b721721e814afc697c8dd0ea416a890f5cbd409a74cc066d66962820
(function() {
    var a = google_tag_manager["GTM-P2Q9ZFQ"].macro(76);
    return a.split(" | ")[2]
})();
#54 JavaScript::Eval (size: 6452) - SHA256: 31f5890232343beec75ab42b45e5b825c09b677644f6064d75f4115d6256baf5
;
(function(trigger, id, start, end) {
    var now = Date.now();
    if (now > start && (end == null || now < end)) {
        window.AddShoppersTriggerRunner(trigger, function() {
            window.AddShoppersTriggerRunner.updateUsersActiveEmailCampaign(id);
            _add.push({
                campaign_id: id,
                active_cart: true
            })
        })
    }
})({
    "id": null,
    "combinator": "all",
    "rules": [{
        "field": "cart-count",
        "id": "id_37neqcl0sv2",
        "value": 0,
        "operator": "greater-than"
    }]
}, "60e86ffa27f7c314acfdf9f6", 1657303258354, null);;
(function(trigger, id, start, end) {
    var now = Date.now();
    if (now > start && (end == null || now < end)) {
        window.AddShoppersTriggerRunner(trigger, function() {
            window.AddShoppersTriggerRunner.updateUsersActiveEmailCampaign(id);
            _add.push({
                campaign_id: id,
                active_cart: true
            })
        })
    }
})({
    "combinator": "all",
    "rules": [{
        "id": "id_rctj615r2ll",
        "value": {
            "duration": 720,
            "unitOfTime": "hours",
            "count": 0
        },
        "operator": "greater-than",
        "field": "product-views"
    }, {
        "id": "id_jej8qr0iz9",
        "operator": "greater-than",
        "value": 3,
        "field": "page-views"
    }, {
        "id": "id_8sdwd1402md",
        "value": "60e86ffa27f7c314acfdf9f6",
        "operator": "is-not",
        "field": "users-active-campaign"
    }],
    "id": null
}, "60ff126b27f7c3756142546e", 1657303234988, null);

(function() {
    // User code
    function asIsProductPage() {
            if (document.querySelector('[data-test-id="select-plan-button"]')) {
                try {
                    return {
                        'product_name': document.querySelector('#page h1').textContent.replace(';', ',').trim(),
                        'image': document.querySelector('img[alt="Top Rated"]').src.split('?')[0],
                        'price': parseFloat(document.querySelector('[data-test-id="box-price"]').textContent.replace(';', ',').replace(/[^0-9\.]/g, '')),
                        'quantity': 1,
                        'sku': document.URL.split('?')[0]
                    }
                } catch (e) {
                    _add.push({
                        'push_response': true,
                        'custom_values': {
                            'broken_selectors': 'product',
                            'url': document.URL.split('?')[0]
                        }
                    });
                }
            }
        }
        // End of user code
    if (typeof asIsProductPage === 'function') {
        window.asIsProductPage = asIsProductPage;
    }
})();


(function() {
    // User code
    function asCartRows() {
            try {
                return document.querySelectorAll('form+section');
            } catch (e) {
                _add.push({
                    'push_response': true,
                    'custom_values': {
                        'broken_selectors': 'cart',
                        'url': document.URL.split('?')[0]
                    }
                });
            }
        }
        // End of user code
    if (typeof asCartRows === 'function') {
        window.asCartRows = asCartRows;
    }
})();


(function() {
    // User code
    function asOfferRedemption(callback) {
            var element = document.querySelector('#voucherCode')
            if (typeof(element) != 'undefined' && element != null) {
                element.addEventListener('change', (event) => {
                    callback(element.value);
                });
            }
        }
        // End of user code
    if (typeof asOfferRedemption === 'function') {
        window.asOfferRedemption = asOfferRedemption;
    }
})();


(function() {
    // User code
    function asCartItems(cartRows) {
            if (cartRows.length > 0) {
                var asCartArr = [];
                for (let x = 0; x < cartRows.length; x++) {
                    try {
                        let asCartProduct = {
                            'product_name': cartRows[x].querySelector('form+section>dl:first-child>dt>div>span').innerText.trim().replace(/\r?\n|\r/g, ''),
                            'price': cartRows[x].querySelector('form+section>dl:first-child>dd>span').textContent.replace(/[^0-9\.]/g, ''),
                            'image': document.querySelector('img').src,
                            'quantity': 1,
                            'sku': document.URL.split('?')[0]
                        }
                        asCartArr.push(asCartProduct);
                    } catch (e) {
                        _add.push({
                            'push_response': true,
                            'custom_values': {
                                'broken_selectors': 'cart',
                                'url': document.URL.split('?')[0]
                            }
                        });
                    }
                }
                return asCartArr;
            }
        }
        // End of user code
    if (typeof asCartItems === 'function') {
        window.asCartItems = asCartItems;
    }
})();


(function() {
    // User code
    function asCart(isCartPage) {
            // console.log('asCart');
            isCartPage();

            function isCartPage() {
                if (document.URL.search('/checkout') > -1) {
                    return true;
                }
            }
        }
        // End of user code
    if (typeof asCart === 'function') {
        window.asCart = asCart;
    }
})();


(function() {
    // User code
    //Preventing takeback - Marinko
    try {
        localStorage.setItem(AddShoppersWidget._asPreventPopSpamLocalStorageItemKey, Date.now());
    } catch (eRr) {
        console.log(eRr)
    }

    // End of user code
    if (typeof asLoggedIn === 'function') {
        window.asLoggedIn = asLoggedIn;
    }
})();;
AddShoppersTriggerRunner.dataLayerLoaded();
AddShoppersWidget && AddShoppersWidget.dataLayerLoaded && AddShoppersWidget.dataLayerLoaded();
#55 JavaScript::Eval (size: 55) - SHA256: 7298340c9215e92c591ef8f21c78035181c3cc1ffd71ccc91e062f563f6e3fac
(function() {
    return window.screen.colorDepth + "-bit"
})();
#56 JavaScript::Eval (size: 437) - SHA256: f58a94b1c4ce4beb544851d2eda967102edaf7a7f2f3a656666e38b8420a9146
(function() {
    var a = 0,
        b = 0;
    "number" == typeof window.innerWidth ? (a = window.innerWidth, b = window.innerHeight) : document.documentElement && (document.documentElement.clientWidth || document.documentElement.clientHeight) ? (a = document.documentElement.clientWidth, b = document.documentElement.clientHeight) : document.body && (document.body.clientWidth || document.body.clientHeight) && (a = document.body.clientWidth, b = document.body.clientHeight);
    return a + "x" + b
})();
#57 JavaScript::Eval (size: 114) - SHA256: 362a2a6f4dbbdf4c918eb85330b39e5fa399974d6bd68cc39aef370c6f8b5590
(function() {
    var a = localStorage.getItem("em_base64"),
        b = google_tag_manager["GTM-P2Q9ZFQ"].macro(26);
    return b || a
})();
#58 JavaScript::Eval (size: 144) - SHA256: 48e610939e52d2b0e302c2e13647f83332bcef6d7ecda3a55a6d137cc516bd35
(function() {
    var b = window.dataLayer.filter(function(a) {
        return a["gtm.uniqueEventId"] == google_tag_manager["GTM-P2Q9ZFQ"].macro(51)
    });
    return b
})();
#59 JavaScript::Eval (size: 144) - SHA256: dd1b8c4063733dd45a514f6db9b8ca6726279dbd122bed5bf04a3280ecfaa97a
(function() {
    var b = window.dataLayer.filter(function(a) {
        return a["gtm.uniqueEventId"] == google_tag_manager["GTM-P2Q9ZFQ"].macro(65)
    });
    return b
})();
#60 JavaScript::Eval (size: 1420) - SHA256: ec9ecc6d2a0a86f0a69a46a001297ef62da0858fdb65e7f8a0460a8994273163
(function() {
    var a = "analytics-training.pl 3ds-hanseaticbank.de 3dsecure-vrp.de 3dsecure.com 3dsecure.no abnamro.nl acs.sia.eu activa-card.com adyen.com americanexpress.com ampproject.org arcot.com asnbank.nl bankieren.ideal.ing.nl betalen.rabobank.nl bnz.co.nz bunq.com cardcomplete.com cardinalcommerce.com cartasi.it cic.fr cm-cic.com comdirect.de commerzbank.de consorsbank.de creditmutuel.fr deutsche-bank.de diensten.snsbank.nl easybank.at edb.com europabank.be everyplate.de hanseaticbank.de hellofresh.zendesk.com icscards.nl ideal.ing.nl ideal.knab.nl ideal.regiobank.nl ideal.snsbank.nl ideal.triodos.nl ideal.vanlanschot.com ing.be ing.com ing.de ing.nl klarna.com lcl.fr live.adyen.com lloydstsb.com mastercard.us mercurypaymentservices.it modirum.com mycardplace.com mycardsecure.com nab.com.au nxt.to paylife.at paypal.com pluscard.de psa.at rabobank.n rabobank.nl redsys.es regiobank.nl royalbank.com sbanken.no securecode.com securesuite.co.uk securesuite.net sia.eu slsp.sk snsbank.nl sofort.com sparebank1.no sparkasse.at sparkassen-kreditkarten.de swedbank.se swisscard.ch targobank.de touchtechpayments.com verifiedbyvisa.com westpac.com.au wlp-acs.com www.greenchef-biologischh.de www.greenchef-specialdiets.de mastercard.us".split(" "),
        b = RegExp("https?://([^/:]+)").exec(google_tag_manager["GTM-P2Q9ZFQ"].macro(85));
    if (b)
        for (var c = a.length; c--;)
            if ((new RegExp(a[c] + "$")).test(b[1])) return "true"
})();

Executed Writes (2)
#1 JavaScript::Write (size: 173) - SHA256: 91dab7dfa62dd25a6c15b12e0266fe25b4a7a1bc74abfc0a052af189e4611ee1
< head > < /head><body onload="var d=document;d.getElementsByTagName('head')[0].appendChild(d.createElement('script')).src='https:/ / w.usabilla.com / 6349 bf73fcae.js ? lv = 1 '"></body>
#2 JavaScript::Write (size: 496) - SHA256: 8ac4ebd656f5f5598b6be266e80221522b3c18fa87ddbf9aaf01e90b49d1ae52
< !DOCTYPE html >
    < html lang = "en-US" >
    < base href = "https://d6tizftlrpuof.cloudfront.net/live/" > < /base> < title > Usabilla Feedback Button < /title> < style type = 'text/css'
nonce = '6349bf73fcae' >
    body {
        background: transparent;padding: 0;margin: 0;text - align: left;
    }
img {
    cursor: pointer;display: block;margin: 0 auto;
} < /style> < body >
    < img src = 'https://d6tizftlrpuof.cloudfront.net/themes/production/hellofresh-button-e43a26541055ffe8644286114c4c9d3c.png'
width = '35'
height = '100' / >
    < /body> < /html>


HTTP Transactions (109)


Request Response
                                        
                                            GET /q570gv32L/v16/KONMORMP/KJJMMNQSP/J/J/J?i=cE4z=1zTzMQSNNNQMQPVyw1VyxUV10yzTPQNU%3C%3C3FFBE://III.6CLK15.yA8/y74y6-NMMPPQTVS-NRQPRUPS%3C%3Cc%3C3FFB://III.6CLK15.yA8%3C%3CN%3CN%3CM%3CM%3CM%3C HTTP/1.1 
Host: cj.dotomi.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

                                        
                                             89.207.16.75
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                            
Server: Resin/4.0.66
P3P: policyref="/w3c/p3p-d.xml", CP="NOI DSP NID OUR STP"
Cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Expires: Thu, 23 Mar 2023 15:03:47 GMT
Set-Cookie: CJSession=5f42f2a5-be8e-47b9-91a6-f9666b9ca374; Max-Age=-1; Domain=.dotomi.com; Path=/; Secure; SameSite=None cjae=r9Dlw0OhD38B; Max-Age=34041593; Domain=.dotomi.com; Path=/; Secure; SameSite=None DotomiUser=400105114862173206$0$1; Max-Age=34041593; Domain=.dotomi.com; Path=/; Secure; SameSite=None LCLK=cjo!x9br-ymklzi2; Max-Age=34041593; Domain=.dotomi.com; Path=/; Secure; SameSite=None
Location: https://www.emjcd.com/9h115birqA/ipu/7BA9BE9C/76699ADFC/6/A6676B77AEC87D986C:xFJr16UnJ9EH/kFBj9BjjiFEh77kjE8jAB98g6g7EhElh?h=w0ql%3DnlFl8CE999C8CBHkinHkjGHnmklFBC9G%3ckrw!5Hjz-6ust7qA%3cp11x0%3A%2F%2F444.sy76nr.kwu%2Fktqks-988BBCFHE-9DCBDGBE%3c%3cO%3cp11x%3A%2F%2F444.sy76nr.kwu%3cDnCAnAiD-jmGm-CFjH-H9iE-nHEEEjHkiBFC%3c9%3c9%3c8%3c8%3c8%3c
Content-Length: 823
Date: Thu, 23 Mar 2023 15:03:47 GMT


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (409)
Size:   823
Md5:    afc5483c997a916f9f409d4004d1b452
Sha1:   414a0a363395f7a46326c3809aba11ef8d0b123f
Sha256: 48a4030114d81221ddb5b31865cef688474bc200ad91394b9ecf729085423a4f
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.196.236.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "469B97BF9F57401B3C9571039483589F2815F4794212B75C7C85CFEFE0AE71E9"
Last-Modified: Wed, 22 Mar 2023 14:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2360
Expires: Thu, 23 Mar 2023 15:43:07 GMT
Date: Thu, 23 Mar 2023 15:03:47 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.196.236.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "D93D50C523C7F735987ABA09DB628259441EB75EFE713A2DF3C214E1FB8B5171"
Last-Modified: Wed, 22 Mar 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15148
Expires: Thu, 23 Mar 2023 19:16:15 GMT
Date: Thu, 23 Mar 2023 15:03:47 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.196.236.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "8794223D5E8D4D276C35E2FDCC24BF99694240634DD749CD9B5BF874DEC055CF"
Last-Modified: Wed, 22 Mar 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14846
Expires: Thu, 23 Mar 2023 19:11:13 GMT
Date: Thu, 23 Mar 2023 15:03:47 GMT
Connection: keep-alive

                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             35.241.9.150
HTTP/2 200 OK
content-type: application/json
                                            
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Content-Length, Alert, Content-Type, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Thu, 23 Mar 2023 14:27:33 GMT
age: 2174
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    4ad6984a756720fbfff47b37a75513a2
Sha1:   355e35258114452af8b9638985ed9d8ef3bf0aca
Sha256: 43181fccb10652c68cae86e5e32b4e8f426fb5ad49d8125cb99e072cff573cf5
                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             34.160.144.191
HTTP/2 200 OK
content-type: binary/octet-stream
                                            
x-amz-id-2: odPhgwg5VGHljfPMaBaI7VW9O60Ro42N48rdgbOmjhoP/jR1RAwhmnGqow4JLKSRGhtJ3SnfJCU=
x-amz-request-id: W5MDTQG944VE9YGC
x-amz-server-side-encryption: AES256
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 23 Mar 2023 15:00:00 GMT
age: 227
last-modified: Sat, 11 Mar 2023 16:53:15 GMT
etag: "e7bace7c1e04d44012e37ddffe36e5d5"
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    e7bace7c1e04d44012e37ddffe36e5d5
Sha1:   3ac8d7c0a9d3e3f0b28b2530c7b8d8407b4042c2
Sha256: 6b4f80f2e95b26f6122ea8dcd0ef8d762299be822c69e839fc37581ca2bcb5f2
                                        
                                            POST /gsrsaovsslca2018 HTTP/1.1 
Host: ocsp.globalsign.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             104.18.20.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Thu, 23 Mar 2023 15:03:47 GMT
Content-Length: 1432
Connection: keep-alive
Expires: Mon, 27 Mar 2023 11:53:35 GMT
ETag: "f3fe1d02807b48b311f909793b07dde51ba7d4fa"
Last-Modified: Thu, 23 Mar 2023 11:53:36 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 2620
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7ac7902a0fd5b50c-OSL


--- Additional Info ---
Magic:  data
Size:   1432
Md5:    9314e67558fdee4490dc889cac73bd92
Sha1:   f3fe1d02807b48b311f909793b07dde51ba7d4fa
Sha256: 0094371e031d3cdd74010dc04eed334d58261f2ad70c3813c27d07f1b00e9913
                                        
                                            GET /9h115birqA/ipu/7BA9BE9C/76699ADFC/6/A6676B77AEC87D986C:xFJr16UnJ9EH/kFBj9BjjiFEh77kjE8jAB98g6g7EhElh?h=w0ql%3DnlFl8CE999C8CBHkinHkjGHnmklFBC9G%3ckrw!5Hjz-6ust7qA%3cp11x0%3A%2F%2F444.sy76nr.kwu%2Fktqks-988BBCFHE-9DCBDGBE%3c%3cO%3cp11x%3A%2F%2F444.sy76nr.kwu%3cDnCAnAiD-jmGm-CFjH-H9iE-nHEEEjHkiBFC%3c9%3c9%3c8%3c8%3c8%3c HTTP/1.1 
Host: www.emjcd.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: S=400304691067107314:pV.o1z2jD9Zf; LCLK=cjo!xdxv-an9g851-xeu3-wiu1cky
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

                                        
                                             89.207.16.75
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                            
Server: Resin/4.0.66
Set-Cookie: S=400105114862173206:r9Dlw0OhD38B; Max-Age=34041593; Domain=.emjcd.com; Path=/; Secure; SameSite=None LCLK=cjo!x9br-ymklzi2; Max-Age=34041593; Domain=.emjcd.com; Path=/; Secure; SameSite=None CJSession=5f42f2a5-be8e-47b9-91a6-f9666b9ca374; Max-Age=-1; Domain=.emjcd.com; Path=/; Secure; SameSite=None S=400105114862173206:r9Dlw0OhD38B; Max-Age=34041593; Domain=.emjcd.com; Path=/; Secure; SameSite=None
P3P: policyref="/w3c/p3p.xml", CP="ALL BUS LEG DSP COR ADM CUR DEV PSA OUR NAV INT"
Cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Expires: Thu, 23 Mar 2023 15:03:47 GMT
Location: https://www.everyplate.com/plans?mealsize=4-5&c_comms=PER-SERVING&c=MVO139E&utm_source=M1&utm_medium=cpa&utm_campaign=100334796&utm_id=cj~15435836&cjevent=e95d35ddc98b11ed82d4532a0a18b8fb
Content-Length: 549
Date: Thu, 23 Mar 2023 15:03:47 GMT
X-VC-HTTPS: On


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text
Size:   549
Md5:    eb883d251d9db2121194d10debc1ecc3
Sha1:   d1dc9819fb287628cea3ee2028c9883464d401f4
Sha256: 2827309e6bc789efd8a349fbc4d53cbaa0050d6fe2d12f835b63c7586ded7332
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                            
server: nginx
date: Thu, 23 Mar 2023 15:03:47 GMT
content-length: 12
access-control-expose-headers: content-type
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             35.241.9.150
HTTP/2 200 OK
content-type: application/json
                                            
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Last-Modified, Content-Length, Pragma, Expires, ETag, Backoff, Alert, Cache-Control
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Thu, 23 Mar 2023 14:17:23 GMT
age: 2784
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.196.236.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "B6129B9D1848F75265DCA4446C5399927BDAF15C7B49C083765847B0FE276EAF"
Last-Modified: Wed, 22 Mar 2023 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9633
Expires: Thu, 23 Mar 2023 17:44:21 GMT
Date: Thu, 23 Mar 2023 15:03:48 GMT
Connection: keep-alive

                                        
                                            POST /s/gts1d4/dHjUbCpt8_E HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.163
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Thu, 23 Mar 2023 15:03:48 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   5954
Md5:    b044645879e8ddc8390b230bf6aab65b
Sha1:   0e5c2ea3cd105bdf293933cf674da65d3efdd767
Sha256: cc598bd6a8ce53c9c54c0751ec50a39a822dfd499b7d8b788355e2fc521b1485
                                        
                                            POST /s/gts1d4/dHjUbCpt8_E HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.163
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Thu, 23 Mar 2023 15:03:48 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   8760
Md5:    093b1eb4dc93076f36003100b43a5f70
Sha1:   fe61ba6ce19fdfe3a9e9acd49bcccdd286d6c8d3
Sha256: 592e9bf4ecd0a813dc205a18d650741dddb1994caff1dd8861c768935249c318
                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: QoQ1v40UeuXwCTfgtOd/zA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

                                        
                                             54.200.178.235
HTTP/1.1 101 Switching Protocols
                                            
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: PDxCL6dpbwGZ3GZbRK0aOkDqKww=

                                        
                                            POST /s/gts1d4/dHjUbCpt8_E HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.163
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Thu, 23 Mar 2023 15:03:48 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   7931
Md5:    3975333377dfe0f8bbdeb72c3d49987b
Sha1:   08e0777b43ecf41c192f7a82024a0a490daec012
Sha256: 6dd9319f6c0474802c508f308257f2758dfa44c3927cc4df60455dad833ff3eb
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.196.236.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "584FA8D0DEE40CFB0B503173012A0BF41D3B77DB78BC80FBBB903ED931B27673"
Last-Modified: Wed, 22 Mar 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16319
Expires: Thu, 23 Mar 2023 19:35:47 GMT
Date: Thu, 23 Mar 2023 15:03:48 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   10050
Md5:    cab856365ab3332318be2924a10e4530
Sha1:   861fe5faaeec10ca2e1e1354291c64beb5e56a70
Sha256: 6e1fcf4ab72b45173cadc5fe55cff3e28f9827bd04fd8d95bf2c62fc22859e9b
                                        
                                            POST /api/5396938/envelope/?sentry_key=5c397ef08a6c49098d09dfd70fddf09e&sentry_version=7&sentry_client=sentry.javascript.react%2F7.20.0 HTTP/1.1 
Host: o46710.ingest.sentry.io
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.everyplate.com/
Content-Type: text/plain;charset=UTF-8
Origin: https://www.everyplate.com
Content-Length: 421
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.195.249
HTTP/2 200 OK
content-type: application/json
                                            
server: nginx
date: Thu, 23 Mar 2023 15:03:48 GMT
content-length: 2
access-control-allow-origin: https://www.everyplate.com
access-control-expose-headers: x-sentry-rate-limits, retry-after, x-sentry-error
vary: Origin
x-envoy-upstream-service-time: 0
strict-transport-security: max-age=31536000; includeSubDomains; preload
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   34542
Md5:    e22279a3780ced07711af453803092be
Sha1:   ded3d56034e82430f6fa2379ca5f655cbdaace3e
Sha256: e9861b05c6dd7c883561518b522aecd05b2d16578fdd3433dab3683df4419d2e
                                        
                                            GET /core-tagging-container HTTP/1.1 
Host: tms.hft.everyplate.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.everyplate.com/
Cookie: __cf_bm=yFo1gS.A.tsxp6mJLAfw48cclJs7HyLZvBzJSjwbuHI-1679583827-0-AcEhQbkCYuC5De7uU7uV9fb+J2Ol/avRWFsg5dGxY3OllKgzvpSe4Q2W+9ZkDKJH92Q0U/ku2hBLYMA4/W/6piw=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site

                                        
                                             34.160.69.63
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                            
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
vary: Accept-Encoding, Accept-Encoding
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000, h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
accept-ranges: none
x-cloud-trace-context: 8ac1b3679af4ff26557507b9a17dcd4b
date: Thu, 23 Mar 2023 15:03:48 GMT
server: Google Frontend
via: 1.1 google
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (43234)
Size:   71560
Md5:    3c7ec14ba6e707d628c43cc64eeeaa24
Sha1:   a5bacfdd8552b0c787d69025ef9b5012783a46a7
Sha256: 219b2584cef70b332e27cb0eacc6f85a1a0ada5a7b5b89138f2f236a3ec75b56
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.196.236.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "C8FF32C6809A506D4C656D3200DBFC6682C156C3DE0647D13AB8F07A6F9A38BA"
Last-Modified: Tue, 21 Mar 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5657
Expires: Thu, 23 Mar 2023 16:38:06 GMT
Date: Thu, 23 Mar 2023 15:03:49 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   8318
Md5:    2cc7e217fb705fe7ca98e6ce94349041
Sha1:   9a942783fd37691a127b3f67a4222e326d8d7249
Sha256: 181c8e4c20e73c7ebfd092577db6ebaf791974c4598e0acb00808530473fbf06
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.196.236.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "C8FF32C6809A506D4C656D3200DBFC6682C156C3DE0647D13AB8F07A6F9A38BA"
Last-Modified: Tue, 21 Mar 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5657
Expires: Thu, 23 Mar 2023 16:38:06 GMT
Date: Thu, 23 Mar 2023 15:03:49 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   172975
Md5:    45799993501e0efa2efc845090a1d7b2
Sha1:   c38f7efc1814081f3eb38cdc53b2cd0bc0e49e29
Sha256: ab5d62f27596d45d610ac01a29e41d531307df04850deb4001101e5e27194515
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.196.236.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "C8FF32C6809A506D4C656D3200DBFC6682C156C3DE0647D13AB8F07A6F9A38BA"
Last-Modified: Tue, 21 Mar 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5657
Expires: Thu, 23 Mar 2023 16:38:06 GMT
Date: Thu, 23 Mar 2023 15:03:49 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   3000
Md5:    65033b40b086cd60bddc6784a0634a00
Sha1:   0f98f5e12647bfa87abdddf683a31daafddb16b5
Sha256: a10b25989044360118fe23c6fc880465d355f49934492bc3d2aee15fb8aad106
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5be1b286-007a-44a5-a6fd-872190ecfa0b.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 6692
x-amzn-requestid: 3a0f6a8d-89b1-43f4-8a15-8749bdbc047b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CM9d9FcOoAMFaFQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641b75f2-3540256d6be3d4f85bba65ea;Sampled=0
x-amzn-remapped-date: Wed, 22 Mar 2023 21:41:06 GMT
x-amz-cf-pop: SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: Jj5lAwItWYm45j5kLqQnd3fhsiGsiuSiSVtrBUOolyHvPAmCc0S71A==
via: 1.1 e92cc925fc8895560cd0628c67f58828.cloudfront.net (CloudFront), 1.1 b23fb37cd7fff033ab21e3284f558a28.cloudfront.net (CloudFront), 1.1 google
date: Thu, 23 Mar 2023 07:54:24 GMT
age: 25765
etag: "156ef59e53564a4f2b27002b2695fafecd578d82"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   81784
Md5:    e41903f187ab219f12ae74e6cc09afd7
Sha1:   3551248a0435fc6dcfc298ea5de33107ca15fce5
Sha256: 7ea32b828bdd8f1c877652aa096b62764d73559b8de08b60a05b76fa82ab7955
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9a816157-9568-4e7f-a034-14b2f1982949.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 4912
x-amzn-requestid: d8fcf495-12af-42ae-ad69-0ea07b1a8669
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CM8H3Fl1IAMFYgA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641b73cb-01cbd1981a57e53b3d3cde93;Sampled=0
x-amzn-remapped-date: Wed, 22 Mar 2023 21:31:55 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: soxgrR0B6Rz79QysB7qbMTsNYmkYfG8doOMPpTEd9uLlrE6WTcDKdw==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 995664ee945c06fc706b5cb8e0e650dc.cloudfront.net (CloudFront), 1.1 google
date: Wed, 22 Mar 2023 21:47:44 GMT
age: 62165
etag: "d07fe53e4ac41048497b2732c017f6666c3eda9e"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   17919
Md5:    f05a64209ab5e61800663b246d2b2d47
Sha1:   312d1b206cc5a7b9731a192940549044d2628d48
Sha256: 7f9eb1c4034f2de083a0fce855e0d83994c25ce3852b106385d2c768f9f8c35b
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F08561a1f-1d19-45db-be98-107d6b1ed25d.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 10480
x-amzn-requestid: 58aa8272-4b4e-4a2f-9d6e-d47f70891c49
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CJptHG7JoAMFSwA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641a2320-2fd6502b1271d5c13b4ebbe9;Sampled=0
x-amzn-remapped-date: Tue, 21 Mar 2023 21:35:28 GMT
x-amz-cf-pop: SEA19-C1, SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: pFCYGtd2b7lK7OBFHjCsgqqLfhtMAQDB0vyYFyf1sv-3CkSHbEh3mA==
via: 1.1 2241406ac19fffc8f35d6ddef8e22f56.cloudfront.net (CloudFront), 1.1 4c48e9fb20d53d40e9fe273dbdae1098.cloudfront.net (CloudFront), 1.1 google
date: Wed, 22 Mar 2023 21:59:52 GMT
age: 61437
etag: "5f7ea91288a2170bcabdca6be296718c4191eacd"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   10723
Md5:    fbd4a9b292ffe315236046a6afc35921
Sha1:   4d940bbf1860d42d17828bcddb304f0ade163f09
Sha256: 54eaee54eba0b010c4b40dcb2f673a22923ae1f81e08acb959b5b1887ac1cb8d
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F261caab9-983c-4eb1-9fca-fd73dc738e9e.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 10284
x-amzn-requestid: e4d2c324-d0b0-436d-9739-29269e62aed0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CM6hjEqtIAMFvXA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641b713c-5a5bd6b60c1f52ab580f1757;Sampled=0
x-amzn-remapped-date: Wed, 22 Mar 2023 21:21:00 GMT
x-amz-cf-pop: SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: Pv-MA9gQ4PmXuY3EWSC77_g2fn_C9-bYUQ4azcrxLNvtwY6CZZg1nA==
via: 1.1 ffc1e24c06bfbb135c0a4d240b382048.cloudfront.net (CloudFront), 1.1 174acb08636ac7d9e9a778bbf1bcbc52.cloudfront.net (CloudFront), 1.1 google
date: Thu, 23 Mar 2023 07:55:01 GMT
age: 25728
etag: "5035ed41f497c97faefae9cdaf42dc07ab468557"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   14983
Md5:    378a13847ea840411fe9f935275722e3
Sha1:   b406d56cf09c1920b6efd385a70ee69614274120
Sha256: 4440bd5313cd1a55aa4111fba4820a9822d0366a6cf0be25930e1b39f98d5e6d
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.196.236.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "C8FF32C6809A506D4C656D3200DBFC6682C156C3DE0647D13AB8F07A6F9A38BA"
Last-Modified: Tue, 21 Mar 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5657
Expires: Thu, 23 Mar 2023 16:38:06 GMT
Date: Thu, 23 Mar 2023 15:03:49 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   33288
Md5:    dffff82655aa6728e997a20fdf88218b
Sha1:   9e0503793bdf2e5bf3a5846050a7070c76fa0c66
Sha256: 88e883b8ea15be06bdb3d39fc6bd9dfe7cf3347ad3e4a2f87df58eb2cfee4d69
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.196.236.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "C8FF32C6809A506D4C656D3200DBFC6682C156C3DE0647D13AB8F07A6F9A38BA"
Last-Modified: Tue, 21 Mar 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5657
Expires: Thu, 23 Mar 2023 16:38:06 GMT
Date: Thu, 23 Mar 2023 15:03:49 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   6604
Md5:    6af44fd07cb27f8fded70f948c14ff29
Sha1:   8c8d81b49af43811616493b2bfe3fd9aa8120350
Sha256: 0cb130ea0479b0011f9ce477a4b919e47bd3f7563069a14e41ed4b10f212ec47
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6cff797b-5560-422b-9907-7a2fbe8dd123.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 7424
x-amzn-requestid: 9a2bd57a-40d2-4bc0-b4ca-183e9a928bdc
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CM-3aGPzoAMFj6Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641b782f-0dc56e4a7c4aaeb45b45c75b;Sampled=0
x-amzn-remapped-date: Wed, 22 Mar 2023 21:50:39 GMT
x-amz-cf-pop: SEA19-C1
x-cache: Miss from cloudfront
x-amz-cf-id: 8mTKClr9GKzzrm1TtEmMeBnOQfMLTO4dBuAO-fE4UEfV-SwrFbkjZQ==
via: 1.1 ec27e2bbc77d9805bead471453d2094c.cloudfront.net (CloudFront), 1.1 0bb842bd5868b86440983b936bb0adee.cloudfront.net (CloudFront), 1.1 google
date: Thu, 23 Mar 2023 02:54:31 GMT
age: 43758
etag: "709b01a360624eceafb1876f56378824aa4936b3"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   11352
Md5:    3d3f5646789dc8394e6a09a4003dfb5d
Sha1:   714938ac14e86d17a2f0b60d020ed8d9b10190d8
Sha256: 5630ce42db8b813058479fcfc5c00c943a8a7f45f846d92e39b78b5cc43a636b
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F772d9c75-9796-494f-9fc4-91d04e2bac53.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 4905
x-amzn-requestid: f2297c3e-1187-48f5-bffb-c5ea1a79a10b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CBFgcF4_oAMFd6A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6416b602-02696af01c0d586c631c5b45;Sampled=0
x-amzn-remapped-date: Sun, 19 Mar 2023 07:13:06 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: R9mjcik3i0kISOeO4gVZP6XhhvZO00mriabAtJ8vv1kNhRpz_lfsHQ==
via: 1.1 1b0911478686968732f973d6e5e31d10.cloudfront.net (CloudFront), 1.1 618052a0d9c86c1a3bf663f82d041d1c.cloudfront.net (CloudFront), 1.1 google
date: Thu, 23 Mar 2023 06:31:03 GMT
age: 30766
etag: "4f25bdbffca3803b02c196c38491223684d36b4d"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   7340
Md5:    76ade9fe2cfad128daaeb6a7f2254750
Sha1:   ce0efc60add5487343eda853a5d224a9b99a4ad1
Sha256: fea9ed02a40885a7054fa162b164943b58811669b69bc34eb91b2fc3166a3e21
                                        
                                            GET /w_384,q_auto,f_auto,c_limit,fl_lossy/hellofresh_website/er/assets/plansPage/recipeTypes/Top.png HTTP/1.1 
Host: images.everyplate.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.everyplate.com/
Cookie: __cf_bm=yFo1gS.A.tsxp6mJLAfw48cclJs7HyLZvBzJSjwbuHI-1679583827-0-AcEhQbkCYuC5De7uU7uV9fb+J2Ol/avRWFsg5dGxY3OllKgzvpSe4Q2W+9ZkDKJH92Q0U/ku2hBLYMA4/W/6piw=; __cfruid=5067ae7fec8bbf167323fec2c144ae21d9d30851-1679583828
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site

                                        
                                             2.18.173.70
HTTP/2 200 OK
content-type: image/avif
                                            
etag: "b06c2dc98449f364c5b7da4d7dc40020"
last-modified: Tue, 28 Feb 2023 07:40:18 GMT
content-length: 22111
date: Thu, 23 Mar 2023 15:03:49 GMT
cache-control: private, no-transform, immutable, max-age=31536000
access-control-expose-headers: Content-Length,Content-Disposition,Content-Range,Etag,Server-Timing,Vary,X-Cld-Error,X-Content-Type-Options
access-control-allow-origin: *
accept-ranges: bytes
timing-allow-origin: *
server: Cloudinary
strict-transport-security: max-age=604800
vary: Accept,User-Agent,Save-Data
x-content-type-options: nosniff
server-timing: cld-akam;dur=5;start=2023-03-23T15:03:49.836Z;desc=hit,rtt;dur=1
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ISO Media, AVIF Image\012- data
Size:   22111
Md5:    b06c2dc98449f364c5b7da4d7dc40020
Sha1:   41a1ce5f43e501238839750c1f0e53efe557fb26
Sha256: ad1ce5774a590f13d1416a291d01b391d521876e5c83778285cc64c52181d083
                                        
                                            GET /w_384,q_auto,f_auto,c_limit,fl_lossy/hellofresh_website/er/assets/plansPage/recipeTypes/Family.png HTTP/1.1 
Host: images.everyplate.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.everyplate.com/
Cookie: __cf_bm=yFo1gS.A.tsxp6mJLAfw48cclJs7HyLZvBzJSjwbuHI-1679583827-0-AcEhQbkCYuC5De7uU7uV9fb+J2Ol/avRWFsg5dGxY3OllKgzvpSe4Q2W+9ZkDKJH92Q0U/ku2hBLYMA4/W/6piw=; __cfruid=5067ae7fec8bbf167323fec2c144ae21d9d30851-1679583828
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site

                                        
                                             2.18.173.70
HTTP/2 200 OK
content-type: image/avif
                                            
etag: "a8d9876f839f33ba95f151d68ba153e5"
last-modified: Tue, 28 Feb 2023 07:40:18 GMT
content-length: 26304
date: Thu, 23 Mar 2023 15:03:49 GMT
cache-control: private, no-transform, immutable, max-age=31536000
access-control-expose-headers: Content-Length,Content-Disposition,Content-Range,Etag,Server-Timing,Vary,X-Cld-Error,X-Content-Type-Options
access-control-allow-origin: *
accept-ranges: bytes
timing-allow-origin: *
server: Cloudinary
strict-transport-security: max-age=604800
vary: Accept,User-Agent,Save-Data
x-content-type-options: nosniff
server-timing: cld-akam;dur=4;start=2023-03-23T15:03:49.837Z;desc=hit,rtt;dur=1
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ISO Media, AVIF Image\012- data
Size:   26304
Md5:    a8d9876f839f33ba95f151d68ba153e5
Sha1:   b9fbb2dd72e1f1eb9d33bd8cbf6855ec8de82ea0
Sha256: 15d8f4f54522413c92e2019e758ab2349a345e2f10359132efed5d0f5a19f0da
                                        
                                            GET /w_384,q_auto,f_auto,c_limit,fl_lossy/hellofresh_website/er/assets/plansPage/recipeTypes/Spicy.png HTTP/1.1 
Host: images.everyplate.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.everyplate.com/
Cookie: __cf_bm=yFo1gS.A.tsxp6mJLAfw48cclJs7HyLZvBzJSjwbuHI-1679583827-0-AcEhQbkCYuC5De7uU7uV9fb+J2Ol/avRWFsg5dGxY3OllKgzvpSe4Q2W+9ZkDKJH92Q0U/ku2hBLYMA4/W/6piw=; __cfruid=5067ae7fec8bbf167323fec2c144ae21d9d30851-1679583828
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site

                                        
                                             2.18.173.70
HTTP/2 200 OK
content-type: image/avif
                                            
etag: "b8d39cd1e0a3ebb731137379993351b9"
last-modified: Tue, 28 Feb 2023 07:40:18 GMT
content-length: 26421
date: Thu, 23 Mar 2023 15:03:49 GMT
cache-control: private, no-transform, immutable, max-age=31536000
access-control-expose-headers: Content-Length,Content-Disposition,Content-Range,Etag,Server-Timing,Vary,X-Cld-Error,X-Content-Type-Options
access-control-allow-origin: *
accept-ranges: bytes
timing-allow-origin: *
server: Cloudinary
strict-transport-security: max-age=604800
vary: Accept,User-Agent,Save-Data
x-content-type-options: nosniff
server-timing: cld-akam;dur=5;start=2023-03-23T15:03:49.837Z;desc=hit,rtt;dur=1
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ISO Media, AVIF Image\012- data
Size:   26421
Md5:    b8d39cd1e0a3ebb731137379993351b9
Sha1:   1d587f9bbd4eac00ab52c8ac6bc7a4f50b214a35
Sha256: 2119ea94cbc46fe4605ab8fb2f5e929024aed2c00cfec5cf8093cf5012f15b89
                                        
                                            GET /w_384,q_auto,f_auto,c_limit,fl_lossy/hellofresh_website/er/assets/plansPage/recipeTypes/Veggie.png HTTP/1.1 
Host: images.everyplate.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.everyplate.com/
Cookie: __cf_bm=yFo1gS.A.tsxp6mJLAfw48cclJs7HyLZvBzJSjwbuHI-1679583827-0-AcEhQbkCYuC5De7uU7uV9fb+J2Ol/avRWFsg5dGxY3OllKgzvpSe4Q2W+9ZkDKJH92Q0U/ku2hBLYMA4/W/6piw=; __cfruid=5067ae7fec8bbf167323fec2c144ae21d9d30851-1679583828
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site

                                        
                                             2.18.173.70
HTTP/2 200 OK
content-type: image/avif
                                            
etag: "4a55b34d36bb12c356ad3fbec3cad66e"
last-modified: Tue, 28 Feb 2023 07:40:19 GMT
content-length: 37771
date: Thu, 23 Mar 2023 15:03:49 GMT
cache-control: private, no-transform, immutable, max-age=31536000
access-control-expose-headers: Content-Length,Content-Disposition,Content-Range,Etag,Server-Timing,Vary,X-Cld-Error,X-Content-Type-Options
access-control-allow-origin: *
accept-ranges: bytes
timing-allow-origin: *
server: Cloudinary
strict-transport-security: max-age=604800
vary: Accept,User-Agent,Save-Data
x-content-type-options: nosniff
server-timing: cld-akam;dur=5;start=2023-03-23T15:03:49.841Z;desc=hit,rtt;dur=1
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ISO Media, AVIF Image\012- data
Size:   37771
Md5:    4a55b34d36bb12c356ad3fbec3cad66e
Sha1:   4556be7ce6b2281c1a818f3158d9bf4611f8ab42
Sha256: ea8f5cfc23388356abf715e036d9de2da88e3c73545a5ef770d2ec60e983fe4a
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.196.236.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "8D9D91A09D77AFEBBF204D381DD0858D2B8C28F49D55715EFE3947F0CA6F832D"
Last-Modified: Wed, 22 Mar 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4044
Expires: Thu, 23 Mar 2023 16:11:14 GMT
Date: Thu, 23 Mar 2023 15:03:50 GMT
Connection: keep-alive

                                        
                                            GET /4613/i.js HTTP/1.1 
Host: tag.wknd.ai
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.everyplate.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.253.250
HTTP/2 200 OK
content-type: text/plain; charset=utf-8
                                            
server: istio-envoy
content-length: 4274
timing-allow-origin: *
x-region: us-central1
access-control-allow-origin: *
link: <https://assets.bounceexchange.com>; rel=dns-prefetch, <https://events.bouncex.net>; rel=dns-prefetch, <https://data.cdnbasket.net>; rel=dns-prefetch, <https://page.cdnbasket.net>; rel=dns-prefetch, <https://view.cdnbasket.net>; rel=dns-prefetch, <https://ids.cdnwidget.com>; rel=dns-prefetch, <https://u.cdnwidget.com>; rel=dns-prefetch, <https://pix.cdnwidget.com>; rel=dns-prefetch, <https://api.bounceexchange.com>; rel=preconnect, <https://pd.cdnwidget.com>; rel=preconnect
content-encoding: gzip
x-envoy-upstream-service-time: 1
via: 1.1 google
date: Thu, 23 Mar 2023 13:11:30 GMT
age: 6740
etag: 22d061191adb01
vary: Accept-Encoding
cache-control: public,max-age=60
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   17115
Md5:    71021fd661294ec0acc61829465dafd1
Sha1:   a81a07c7e31ead4d377403e80d8232c10610f893
Sha256: 4290aa75523596370c69f1332cb07a4f062732b956153d041c19b03349a422db
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.196.236.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "8D9D91A09D77AFEBBF204D381DD0858D2B8C28F49D55715EFE3947F0CA6F832D"
Last-Modified: Wed, 22 Mar 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4044
Expires: Thu, 23 Mar 2023 16:11:14 GMT
Date: Thu, 23 Mar 2023 15:03:50 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.196.236.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "8B50610F2F1F12CA94D258BE634F1AFFC0A66F74F5146AF62670C206AB7C8D4C"
Last-Modified: Tue, 21 Mar 2023 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3544
Expires: Thu, 23 Mar 2023 16:02:54 GMT
Date: Thu, 23 Mar 2023 15:03:50 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: ocsp.r2m01.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             54.230.80.227
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=87495
Date: Thu, 23 Mar 2023 15:03:50 GMT
Etag: "641b05ca-1d7"
Expires: Fri, 24 Mar 2023 15:22:05 GMT
Last-Modified: Wed, 22 Mar 2023 13:42:34 GMT
Server: ECAcc (nya/1C1E)
X-Cache: Miss from cloudfront
Via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: y3ty80uhViVd5qSLfTvz3346_mOIiXpQZm_0KGsLTWeoj3umxwiKZA==
Age: 5971

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             192.229.221.95
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 4816
Cache-Control: max-age=104375
Date: Thu, 23 Mar 2023 15:03:50 GMT
Etag: "641b4c3d-2d7"
Expires: Fri, 24 Mar 2023 20:03:25 GMT
Last-Modified: Wed, 22 Mar 2023 18:43:09 GMT
Server: ECAcc (ska/F6AF)
X-Cache: HIT
Content-Length: 727


--- Additional Info ---
Magic:  data
Size:   27378
Md5:    aab157dbee8782c416c95b3e39efda7c
Sha1:   f0e421ff3923f3a8a93edf7c15314eecc3a2f896
Sha256: 4fc486ad230c1b30fd2fdb4d8c8ba36a9fa12e00fe96e739b5530e5c6277102b
                                        
                                            GET /_/ad/8826af35621f4d989db31f02b360c0b9/pixel?tag=ViewContent&i=gtm&u=https%3A%2F%2Fwww.everyplate.com%2Fplans%3Fmealsize%3D4-5%26c_comms%3DPER-SERVING%26c%3DMVO139E%26utm_source%3DM1%26utm_medium%3Dcpa%26utm_campaign%3D100334796%26utm_id%3Dcj~15435836%26cjevent%3De95d35ddc98b11ed82d4532a0a18b8fb HTTP/1.1 
Host: q.quora.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.everyplate.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             52.0.8.169
HTTP/1.1 200 OK
Content-Type: image/gif
                                            
Date: Thu, 23 Mar 2023 15:03:50 GMT
Server: nginx
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
X-Q-Stat: ,723016a26b4852419d7c1d58b04dcb50,10.0.0.163,5618,91.90.42.154,,112126092102,1,1679583830.611,0.001,,.,0,0,0.000,0.000,-,0,0,197,104,52,10,34729,,,,,,-,
Content-Length: 43
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   11214
Md5:    0f3a2ac1efa8c637074927b4b2a576fb
Sha1:   72236325861e5f11c5e0f453496ed2577e174a9f
Sha256: 2532ebc9c89bcccc51a33600262ccd3e061706e9505af73356405d6b133d7bfa
                                        
                                            GET /x/EPUS HTTP/1.1 
Host: i.geistm.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.everyplate.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             18.208.121.3
HTTP/2 200 OK
content-type: image/gif
                                            
date: Thu, 23 Mar 2023 15:03:50 GMT
content-length: 43
server: nginx
x-powered-by: Express
access-control-allow-origin: *
access-control-allow-headers: X-Requested-With, Content-Type, Accept
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    57f187c7a868faeac558007a8eb6cb2e
Sha1:   11ab10ab109fdb53d91d444ac781101f5a6360c6
Sha256: aa03dc59bdca72631d2301e4297cfa030bd31b907dc138e7b973d12311c90a22
                                        
                                            GET /widget/widget_async.js HTTP/1.1 
Host: shop.pe
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.everyplate.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             35.227.244.1
HTTP/2 301 Moved Permanently
content-type: text/html
                                            
server: nginx
date: Thu, 23 Mar 2023 15:03:50 GMT
content-length: 178
location: https://d3rr3d0n31t48m.cloudfront.net/widget/widget_async.js
x-frame-options: deny
content-security-policy: frame-ancestors none;
strict-transport-security: max-age=31536000; includeSubDomains
referrer-policy: no-referrer-when-downgrade
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size:   178
Md5:    cd2e0e43980a00fb6a2742d3afd803b8
Sha1:   81ffbd1712afe8cdf138b570c0fc9934742c33c1
Sha256: bd9df047d51943acc4bc6cf55d88edb5b6785a53337ee2a0f74dd521aedde87d
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             192.229.221.95
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 2053
Cache-Control: max-age=101612
Date: Thu, 23 Mar 2023 15:03:50 GMT
Etag: "641b4c3d-2d7"
Expires: Fri, 24 Mar 2023 19:17:22 GMT
Last-Modified: Wed, 22 Mar 2023 18:43:09 GMT
Server: ECAcc (ska/F7A5)
X-Cache: HIT
Content-Length: 727

                                        
                                            POST / HTTP/1.1 
Host: ocsp.sca1b.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             54.230.245.110
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Thu, 23 Mar 2023 15:03:50 GMT
Last-Modified: Thu, 23 Mar 2023 13:14:16 GMT
Server: ECAcc (nya/79E6)
X-Cache: Miss from cloudfront
Via: 1.1 8ac66e1d6983a0f44cf391b1ec3b1cce.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: G8tg4g9abrJP9X40iyYEUNCjB9xt_1AW2kGJMoev3Ihr0O4SGNwMHQ==
Age: 6574

                                        
                                            GET /live/chat-live.js HTTP/1.1 
Host: web-chat-tag-cdn.s3.eu-west-1.amazonaws.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.everyplate.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             3.5.68.152
HTTP/1.1 200 OK
Content-Type: text/javascript
                                            
x-amz-id-2: Bfted+sqRD8OowzqzNhD77EgzZcSUDqVNbYqU9onKERUmQ59L53SwH99C6YKsQIiJuweN9F/gSK0odNET91ffg==
x-amz-request-id: WHQA0KRY4P4XM8A8
Date: Thu, 23 Mar 2023 15:03:52 GMT
x-amz-replication-status: FAILED
Last-Modified: Tue, 07 Feb 2023 09:25:10 GMT
ETag: "02866e2f4919b743a6fc28e322c8b805"
x-amz-server-side-encryption: AES256
Cache-Control: no-cache,max-age=0,immutable
Content-Encoding: gzip
x-amz-version-id: bNodLFIyGgX.LCyl1WPp1nBqQRKnpOWR
Accept-Ranges: bytes
Server: AmazonS3
Content-Length: 53127


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (65459)
Size:   53127
Md5:    02866e2f4919b743a6fc28e322c8b805
Sha1:   b213e9c00c046f9df62e059017462e55a8d1e766
Sha256: b3b71bffba704efed44b4715f0ae26719c1725ddfa77b7fe88f0b4778c1efb07
                                        
                                            POST / HTTP/1.1 
Host: ocsp.r2m01.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             54.230.80.227
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Thu, 23 Mar 2023 15:03:51 GMT
Etag: "641ba4a9-1d7"
Last-Modified: Thu, 23 Mar 2023 14:01:10 GMT
Server: ECAcc (nya/79CE)
X-Cache: Miss from cloudfront
Via: 1.1 a343e36742f64defd0a2caf1f96ff772.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: jX_l4HWOK56-tOZOH4bi8kh6TMScqNbNlTnrpgd_x-f8fXuyfgJtZQ==
Age: 3761

                                        
                                            POST / HTTP/1.1 
Host: ocsp.r2m01.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             54.230.80.227
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Thu, 23 Mar 2023 15:03:51 GMT
Last-Modified: Thu, 23 Mar 2023 14:20:21 GMT
Server: ECAcc (bsa/EAE4)
X-Cache: Miss from cloudfront
Via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 1kKUhfLHt3CbuU1Cn8NADStGDdnf-6lW8aXh_pIhGZhOvrM-t3yZwQ==
Age: 2610


--- Additional Info ---
Magic:  data
Size:   3645
Md5:    d84c4938295654ba9d5ba3d565e27302
Sha1:   d3d90f48e0e55058a40b81478a16e6db9eb2c6f0
Sha256: 2dc6a9249e3809ad1f3d5e9d5ba46f25014bfaf9cc96750042fde00bb3b8ad8d
                                        
                                            GET /live/core-bubble.js HTTP/1.1 
Host: web-chat-tag-cdn.s3.eu-west-1.amazonaws.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.everyplate.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             3.5.68.152
HTTP/1.1 200 OK
Content-Type: text/javascript
                                            
x-amz-id-2: wJFwkE54f06tqAM41GY05XteJUFi2aSQ1ABRLvdVMJm96z7fupisfoaLcEeLsNBDTqngUB7cxkIVpJAelg/gfA==
x-amz-request-id: WHQ3VEZBY1CN0VM5
Date: Thu, 23 Mar 2023 15:03:52 GMT
x-amz-replication-status: FAILED
Last-Modified: Tue, 07 Feb 2023 09:25:10 GMT
ETag: "4f9eca1bb3e3abc3a0b39117cc9b54d2"
x-amz-server-side-encryption: AES256
Cache-Control: no-cache,max-age=0,immutable
Content-Encoding: gzip
x-amz-version-id: K08vsidhhiopMq7SzX4miABpOCHpzM6X
Accept-Ranges: bytes
Server: AmazonS3
Content-Length: 1031


--- Additional Info ---
Magic:  ASCII text, with very long lines (2132), with no line terminators
Size:   1031
Md5:    4f9eca1bb3e3abc3a0b39117cc9b54d2
Sha1:   67a1564ce97d6e7d5c0139de09a4bdaf35cca517
Sha256: f275a273641cea011f4a9cba98091e0cf57090db9f6e0a8b35b919d629ffd0af
                                        
                                            POST / HTTP/1.1 
Host: ocsp.r2m01.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             54.230.80.227
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Thu, 23 Mar 2023 15:03:51 GMT
Last-Modified: Thu, 23 Mar 2023 14:05:11 GMT
Server: ECAcc (nya/79F2)
X-Cache: Miss from cloudfront
Via: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: w4XagPCO_LlZtcSkacT88AQCDC851mKPZ4vFYbzVUg88sg-UULuCgw==
Age: 3520

                                        
                                            GET /6349bf73fcae.js?lv=1 HTTP/1.1 
Host: w.usabilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.everyplate.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             34.252.19.64
HTTP/2 200 OK
content-type: text/javascript
                                            
date: Thu, 23 Mar 2023 15:03:51 GMT
content-length: 10810
cache-control: public,max-age=0
content-encoding: gzip
etag: "7c99f56e390cf09a44550249efaee5b9"
pragma: no-cache
x-widget-server: 2.1
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   39854
Md5:    3a9fe713f4cbf045632531b941b385d9
Sha1:   6e563a919b09b02e10e455334ae34a3a1a84d8ed
Sha256: e07818576f588c16d93463f0c5870edc46ac5c483c07a87fd4ace9a75ae57f36
                                        
                                            OPTIONS /v1/events HTTP/1.1 
Host: logx.optimizely.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://www.everyplate.com/
Origin: https://www.everyplate.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             18.235.42.52
HTTP/1.1 200 OK
Content-Type: text/plain
                                            
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: X-Requested-With,Content-Type,Accept,Origin,X-App-Trace-Id
Access-Control-Allow-Methods: GET,POST,OPTIONS
Access-Control-Allow-Origin: https://www.everyplate.com
Access-Control-Max-Age: 1800
Allow: POST,OPTIONS
Date: Thu, 23 Mar 2023 15:03:51 GMT
Server: nginx/1.21.0
X-Request-Id: 0f891957-bfbc-4863-9984-2604aea76745
Content-Length: 13
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   5939
Md5:    a96374c8851efeb86a0921e027bbc739
Sha1:   63178a9f7e637122d240dbf6e8fbaa8b1fcf32f8
Sha256: d9037d52322695d64e6ec98d04d84a3ef54dddeccef95e7db3342495c2ece362
                                        
                                            GET /themes/production/hellofresh-button-e43a26541055ffe8644286114c4c9d3c.png HTTP/1.1 
Host: d6tizftlrpuof.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.everyplate.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             54.230.245.25
HTTP/1.1 200 OK
Content-Type: image/png
                                            
Content-Length: 1662
Connection: keep-alive
Date: Mon, 19 Sep 2022 01:41:08 GMT
Last-Modified: Tue, 11 Sep 2018 14:13:18 GMT
ETag: "e43a26541055ffe8644286114c4c9d3c"
Cache-Control: max-age=315360000, no-transform, public
x-amz-version-id: Lqf1EAdAKTfQxfeWY77naff5qlmASary
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: LwmcNYTMDE7xOWCSXthsoF8qki_mYAPJT3ayunPH0svvdlpUzLHVPg==
Age: 16032164


--- Additional Info ---
Magic:  PNG image data, 70 x 200, 8-bit colormap, non-interlaced\012- data
Size:   1662
Md5:    e43a26541055ffe8644286114c4c9d3c
Sha1:   05bfab45fbbced43709d6c7980e583b29d3fe4b1
Sha256: ae023d69b1633912960a55720c9d3d94e6c22fae5d30a9a9a59ed3e908c05483
                                        
                                            POST /v1/events HTTP/1.1 
Host: logx.optimizely.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 1035
Origin: https://www.everyplate.com
Connection: keep-alive
Referer: https://www.everyplate.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             18.235.42.52
HTTP/1.1 204 No Content
Content-Type: text/plain
                                            
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://www.everyplate.com
Access-Control-Expose-Headers: X-Results-Data-Source
Date: Thu, 23 Mar 2023 15:03:51 GMT
Server: nginx/1.21.0
Timing-Allow-Origin: *
X-Request-Id: 3ed98207-0bc5-4858-a1f5-523337d16801
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: status.geotrust.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             192.229.221.95
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 5020
Cache-Control: 'max-age=158059'
Date: Thu, 23 Mar 2023 15:03:51 GMT
Last-Modified: Thu, 23 Mar 2023 13:40:11 GMT
Server: ECAcc (ska/F7A3)
X-Cache: HIT
Content-Length: 471

                                        
                                            POST / HTTP/1.1 
Host: status.geotrust.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             192.229.221.95
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 5458
Cache-Control: 'max-age=158059'
Date: Thu, 23 Mar 2023 15:03:51 GMT
Last-Modified: Thu, 23 Mar 2023 13:32:53 GMT
Server: ECAcc (ska/F757)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /vchk2 HTTP/1.1 
Host: cdn9.forter.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: eyJyIjowLjMzNzM0NzcyMDA0ODcwNDk1LCJ1IjoiYTMyY2Q1NDczNTQ2NDE1ZmJkYjEzN2NhZjg2YjJkY2EiLCJzIjoiN2EzN2VkMGY2Nzk3In0=
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.everyplate.com
Connection: keep-alive
Referer: https://www.everyplate.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             54.230.111.53
HTTP/2 301 Moved Permanently
                                            
location: https://cdn9.forter.com/vchk2/v1/2fbc58c8684f287c3e21b61c18af03e9a2e7cc0a2d8f1534eeee670dbd909145ac7f4bc96a125fe4d1f348d6a577
date: Thu, 23 Mar 2023 15:03:51 GMT
access-control-allow-origin: *
timing-allow-origin: *
cache-control: private, s-maxage=0, proxy-revalidate
strict-transport-security: max-age=86400; includeSubDomains
x-cache: Miss from cloudfront
via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ih-Ykm8iI0jg2LP9UF6XBjxFtrSudZ9i7isl2ACaUTOMcUFGXLRfSw==
X-Firefox-Spdy: h2

                                        
                                            POST /g/collect?v=2&tid=G-RB96MJVJ27&cid=810284700.1679583839&gtm=45he33k0&aip=1 HTTP/1.1 
Host: stats.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.everyplate.com
Connection: keep-alive
Referer: https://www.everyplate.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0

                                        
                                             209.85.233.156
HTTP/2 204 No Content
content-type: text/plain
                                            
access-control-allow-origin: https://www.everyplate.com
date: Thu, 23 Mar 2023 15:03:51 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   4119
Md5:    95bfca33118510e18f45354774f6dbd9
Sha1:   a596bbc55480acc1d47d96a5dc39a656f7d06ef3
Sha256: 94897a794ca1f9e1c12b3fd4f9cad5956b6264120544ed38bc72aca3c47df29f
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.163
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Thu, 23 Mar 2023 15:03:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /prop.json HTTP/1.1 
Host: a32cd5473546415fbdb137caf86b2dca-7a37ed0f6797.cdn.forter.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 0
Origin: https://www.everyplate.com
Connection: keep-alive
Referer: https://www.everyplate.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             3.234.25.89
HTTP/1.1 200 OK
Content-Type: application/json
                                            
Date: Thu, 23 Mar 2023 15:03:51 GMT
Server: Apache
Last-Modified: Thu, 23 Mar 2023 12:09:14 GMT
ETag: "2-5f7902532c082"
Accept-Ranges: bytes
Content-Length: 2
Cache-Control: max-age=0, no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Access-Control-Allow-Origin: https://www.everyplate.com
Access-Control-Allow-Credentials: true
Timing-Allow-Origin: *
Access-Control-Allow-Headers: origin, x-requested-with, content-type, x-csrf-token
Access-Control-Allow-Methods: PUT, GET, POST, DELETE, OPTIONS
Connection: close


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   2
Md5:    99914b932bd37a50b983c5e7c90ae93b
Sha1:   bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
Sha256: 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                        
                                            GET /7a37ed0f6797/a32cd5473546415fbdb137caf86b2dca/prop.json?_=1679583839538 HTTP/1.1 
Host: cdn0.forter.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.everyplate.com
Connection: keep-alive
Referer: https://www.everyplate.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.225.5.197
HTTP/1.1 200 OK
Content-Type: application/json
                                            
Access-Control-Allow-Origin: https://www.everyplate.com
Vary: Origin
Access-Control-Allow-Credentials: true
Timing-Allow-Origin: *
Cache-Control: no-cache
Expires: -1
Pragma: no-cache
Connection: keep-alive
Date: Thu, 23 Mar 2023 15:03:51 GMT
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   20
Md5:    5820854f62a6eb3d38ba7ba0d1b3ea75
Sha1:   639df0b84fe699b4a290a713fd6b9a94bd4deb95
Sha256: 912d0c07da7bdb22cdae025b96da26d01523aaab7362edb28544e3949deb369d
                                        
                                            GET /7a37ed0f6797/a32cd5473546415fbdb137caf86b2dca/prop.json?_=1679583840109 HTTP/1.1 
Host: cdn0.forter.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.everyplate.com
Connection: keep-alive
Referer: https://www.everyplate.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.225.5.197
HTTP/1.1 200 OK
Content-Type: application/json
                                            
Access-Control-Allow-Origin: https://www.everyplate.com
Vary: Origin
Access-Control-Allow-Credentials: true
Timing-Allow-Origin: *
Cache-Control: no-cache
Expires: -1
Pragma: no-cache
Connection: keep-alive
Date: Thu, 23 Mar 2023 15:03:51 GMT
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   20
Md5:    5820854f62a6eb3d38ba7ba0d1b3ea75
Sha1:   639df0b84fe699b4a290a713fd6b9a94bd4deb95
Sha256: 912d0c07da7bdb22cdae025b96da26d01523aaab7362edb28544e3949deb369d
                                        
                                            GET /widget/widget_async.js HTTP/1.1 
Host: d3rr3d0n31t48m.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.everyplate.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             54.230.111.123
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                            
content-length: 906
date: Thu, 23 Mar 2023 14:14:23 GMT
last-modified: Tue, 21 Mar 2023 15:08:55 GMT
etag: "9ab65ad65189c43fcf8835d4fcf3706e"
x-amz-server-side-encryption: AES256
cache-control: max-age=3600, public
content-encoding: gzip
x-amz-meta-mtime: 1679411333.36
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 fc5e625db631bc657fc73f189d53fa14.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 6IdytFQKSVH-rjEBDpteLNlvEkguqaNKhYOF6sPTlt0hNdUJ13gDsw==
age: 2969
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (559)
Size:   906
Md5:    9ab65ad65189c43fcf8835d4fcf3706e
Sha1:   454ff8fc1aafe07cae539fe7fcdd6eafc8c03530
Sha256: 59dd73f4e546587fc554e714e976fc85cd2d3e68501737277760c67c730e2e4b
                                        
                                            GET /bat.js HTTP/1.1 
Host: bat.bing.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.everyplate.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             13.107.21.200
HTTP/2 200 OK
content-type: application/javascript
                                            
cache-control: private,max-age=1800
content-length: 11894
content-encoding: gzip
last-modified: Thu, 16 Feb 2023 18:31:53 GMT
accept-ranges: bytes
etag: "8072cff03442d91:0"
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: D42901B318384CF2AFE3D3EDA81F95B8 Ref B: OSL30EDGE0207 Ref C: 2023-03-23T15:03:52Z
date: Thu, 23 Mar 2023 15:03:51 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (40607), with no line terminators
Size:   11894
Md5:    04651bf0c51742f9007b1ae2b4486dee
Sha1:   6ffc71fcb5db1cf0283b60150a62f2c219ac3dbd
Sha256: 5d7392c44731e52810337eb1a3eb3ae1ffab31b8f8d55daba20d658701604666
                                        
                                            GET /c/hotjar-919432.js?sv=7 HTTP/1.1 
Host: static.hotjar.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.everyplate.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             54.230.111.66
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                            
date: Thu, 23 Mar 2023 15:03:28 GMT
access-control-allow-origin: *
cache-control: max-age=60
content-encoding: br
cross-origin-resource-policy: cross-origin
etag: W/fa83d8dfe8fe1afd136ae7aee7cfc863
strict-transport-security: max-age=2592000; includeSubDomains
x-cache-hit: 1
x-content-type-options: nosniff
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: p9ktcco6JBraZ8hcDJWFFuKz4kseBI58meAOtLLx6QhwoZEmBhcheA==
age: 24
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   4168
Md5:    0ad37eaefe5fc5fb0bcb99958d5d71c6
Sha1:   e68f537974d60d285c39b958a9704169bac4c97b
Sha256: 9e3d33c02241ed3ca2b999765f96ff13d6c66862a67f43ef94d775b05c56f41d
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.163
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Thu, 23 Mar 2023 15:03:52 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.163
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Thu, 23 Mar 2023 15:03:52 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /ads/ga-audiences?t=sr&aip=1&v=1&_r=4&_v=j108&slf_rd=1&tid=UA-115749411-1&cid=758788000.1679583838&jid=938569930 HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.everyplate.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             142.250.74.164
HTTP/2 200 OK
content-type: image/gif
                                            
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 23 Mar 2023 15:03:52 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /pagead/viewthroughconversion/812248422/?random=1679583831066&cv=10&fst=1679583831066&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e33l1&url=https%3A%2F%2Fwww.everyplate.com%2Fplans%3Fmealsize%3D4-5%26c_comms%3DPER-SERVING%26c%3DMVO139E%26utm_source%3DM1%26utm_medium%3Dcpa%26utm_campaign%3D100334796%26utm_id%3Dcj~15435836%26cjevent%3De95d35ddc98b11ed82d4532a0a18b8fb&tiba=Select%20your%20plan&auid=1364030066.1679583831 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.everyplate.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             216.58.211.2
HTTP/2 302 Found
content-type: image/gif
                                            
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 23 Mar 2023 15:03:52 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
location: https://www.google.com/pagead/1p-user-list/812248422/?random=1679583831066&cv=10&fst=1679583600000&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e33l1&url=https%3A%2F%2Fwww.everyplate.com%2Fplans%3Fmealsize%3D4-5%26c_comms%3DPER-SERVING%26c%3DMVO139E%26utm_source%3DM1%26utm_medium%3Dcpa%26utm_campaign%3D100334796%26utm_id%3Dcj~15435836%26cjevent%3De95d35ddc98b11ed82d4532a0a18b8fb&tiba=Select%20your%20plan&is_vtc=1&random=108113612
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Thu, 23-Mar-2023 15:18:52 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /pagead/conversion/812248422/?random=404152982&fst=1679583831068&cv=10&fmt=3&label=GMHsCOagyJ0DEP367MUB&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e33l1&value=0&url=https%3A%2F%2Fwww.everyplate.com%2Fplans%3Fmealsize%3D4-5%26c_comms%3DPER-SERVING%26c%3DMVO139E%26utm_source%3DM1%26utm_medium%3Dcpa%26utm_campaign%3D100334796%26utm_id%3Dcj~15435836%26cjevent%3De95d35ddc98b11ed82d4532a0a18b8fb&tiba=Select%20your%20plan&data=event%3Dpage_view%3Bcd42%3DUS%3Bcd5%3DMVO139E%3Bcd6%3DMVO139E%3Bsd%3D24-bit%3Bsr%3D1280x1024%3Bvp%3D1280x939%3Bul%3Den-US%3Bhashed_em%3D%3Bcd9%3D%2Fplans%3Bcd10%3D%3Fmealsize%3D4-5%26c_comms%3DPER-SERVING%26c%3DMVO139E%26utm_source%3DM1%26utm_medium%3Dcpa%26utm_campaign%3D100334796%26utm_id%3Dcj~15435836%26cjevent%3De95d35ddc98b11ed82d4532a0a18b8fb%3Bdh%3Dwww.everyplate.com%3Bpage_hostname%3Dwww.everyplate.com%3Bde%3DUTF-8%3Bgjid%3D967429014%3Bhftr%3D758788000.1679583838%3Bpage_path%3D%2Fplans%3Fmealsize%3D4-5%26c_comms%3DPER-SERVING%26c%3DMVO139E%26utm_source%3DM1%26utm_medium%3Dcpa%26utm_campaign%3D100334796%26utm_id%3Dcj~15435836%26cjevent%3De95d35ddc98b11ed82d4532a0a18b8fb%3Bhf_event_name%3Dpage_view%3Btimestamp_seconds%3D1679583839&auid=1364030066.1679583831&bttype=purchase&uip=91.90.42.0&s3p=1 HTTP/1.1 
Host: www.googleadservices.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.everyplate.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             142.250.74.162
HTTP/2 302 Found
content-type: image/gif
                                            
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 23 Mar 2023 15:03:52 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
location: https://googleads.g.doubleclick.net/pagead/viewthroughconversion/812248422/?random=1915808621&fst=1679583831068&cv=10&fmt=3&label=GMHsCOagyJ0DEP367MUB&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e33l1&value=0&url=https%3A%2F%2Fwww.everyplate.com%2Fplans%3Fmealsize%3D4-5%26c_comms%3DPER-SERVING%26c%3DMVO139E%26utm_source%3DM1%26utm_medium%3Dcpa%26utm_campaign%3D100334796%26utm_id%3Dcj~15435836%26cjevent%3De95d35ddc98b11ed82d4532a0a18b8fb&tiba=Select%20your%20plan&data=event%3Dpage_view%3Bcd42%3DUS%3Bcd5%3DMVO139E%3Bcd6%3DMVO139E%3Bsd%3D24-bit%3Bsr%3D1280x1024%3Bvp%3D1280x939%3Bul%3Den-US%3Bhashed_em%3D%3Bcd9%3D%2Fplans%3Bcd10%3D%3Fmealsize%3D4-5%26c_comms%3DPER-SERVING%26c%3DMVO139E%26utm_source%3DM1%26utm_medium%3Dcpa%26utm_campaign%3D100334796%26utm_id%3Dcj~15435836%26cjevent%3De95d35ddc98b11ed82d4532a0a18b8fb%3Bdh%3Dwww.everyplate.com%3Bpage_hostname%3Dwww.everyplate.com%3Bde%3DUTF-8%3Bgjid%3D967429014%3Bhftr%3D758788000.1679583838%3Bpage_path%3D%2Fplans%3Fmealsize%3D4-5%26c_comms%3DPER-SERVING%26c%3DMVO139E%26utm_source%3DM1%26utm_medium%3Dcpa%26utm_campaign%3D100334796%26utm_id%3Dcj~15435836%26cjevent%3De95d35ddc98b11ed82d4532a0a18b8fb%3Bhf_event_name%3Dpage_view%3Btimestamp_seconds%3D1679583839&auid=1364030066.1679583831&uip=91.90.42.0&s3p=1&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&ocp_id=WGocZJCODZq0Za6sgNgB&sscte=1&crd=&eitems=ChEI8PHvoAYQ4MDuh9vm8PSEARIdAIIL5W9FQn3FsW0jhC4YKmUxdtaFct6eDdQGZQM&pscrd=Ek5DaEFJOFBIdm9BWVFpSV9WcWVlU284RmZFaVlBV0JGajl1X204ajBaZ0pxT0ZRcm5IN1hKek1RclpYbzhocTJyVWRCNTI3VXp2S3lpcmcaWENoQUk4UEh2b0FZUV9hNk5wUGY1bFA1d0VpNEFFQXQxa1FHR3ZKUnhCM1d6dFVBY2p6Ui1sUGRwRjFsVnpZdnAxWUFIejloNkNjejh4ZEFGYTJKVlc2WEc
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.163
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Thu, 23 Mar 2023 15:03:52 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.163
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Thu, 23 Mar 2023 15:03:52 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.163
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Thu, 23 Mar 2023 15:03:52 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /7a37ed0f6797/a32cd5473546415fbdb137caf86b2dca/prop.json?_=1679583840356 HTTP/1.1 
Host: cdn0.forter.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.everyplate.com
Connection: keep-alive
Referer: https://www.everyplate.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.225.5.197
HTTP/1.1 200 OK
Content-Type: application/json
                                            
Access-Control-Allow-Origin: https://www.everyplate.com
Vary: Origin
Access-Control-Allow-Credentials: true
Timing-Allow-Origin: *
Cache-Control: no-cache
Expires: -1
Pragma: no-cache
Connection: keep-alive
Date: Thu, 23 Mar 2023 15:03:52 GMT
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   20
Md5:    5820854f62a6eb3d38ba7ba0d1b3ea75
Sha1:   639df0b84fe699b4a290a713fd6b9a94bd4deb95
Sha256: 912d0c07da7bdb22cdae025b96da26d01523aaab7362edb28544e3949deb369d
                                        
                                            GET /widget/triggerRunner.js?v=bbf7e2b HTTP/1.1 
Host: d3rr3d0n31t48m.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.everyplate.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             54.230.111.123
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                            
content-length: 3812
date: Tue, 21 Mar 2023 15:09:15 GMT
last-modified: Tue, 21 Mar 2023 15:08:54 GMT
etag: "b5196f0a4553d619ed9ef3349b7e4fce"
x-amz-server-side-encryption: AES256
cache-control: max-age=2592000, public
content-encoding: gzip
x-amz-meta-mtime: 1679411333.34
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 fc5e625db631bc657fc73f189d53fa14.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 8LJxoQsRoLGyIKUEF1cet-jHGCA9o7BLmYIX-pCKcBNVlWyXaF4JuA==
age: 172478
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (577)
Size:   3812
Md5:    b5196f0a4553d619ed9ef3349b7e4fce
Sha1:   db05ad806144093227bae7727689ded6e5e6ed8c
Sha256: f69e50a50a7f2e02144631f9b8f079d7a4f4ce4c4c5d9cf38ae25ad2832f3f76
                                        
                                            GET /logo_small.gif?dfpadname=&check=1679583840499 HTTP/1.1 
Host: duuytoqss3gu4.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.everyplate.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             54.230.245.223
HTTP/2 200 OK
content-type: image/gif
                                            
content-length: 43
date: Tue, 21 Mar 2023 07:08:19 GMT
last-modified: Thu, 16 Mar 2017 14:48:30 GMT
etag: "b4491705564909da7f9eaf749dbbfbb1"
cache-control: max-age=1296000
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 8wI60wcEGAlf9_r_2fUZapS2xC4u1QMgZtYkqxnH0M_-XdxJJKD9Hg==
age: 201334
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    b4491705564909da7f9eaf749dbbfbb1
Sha1:   279315d507855c6a4351e1e2c2f39dd9cd2fccd8
Sha256: 4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
                                        
                                            GET /logo_large.gif?1679583840499&-linkd-32. HTTP/1.1 
Host: duuytoqss3gu4.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.everyplate.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             54.230.245.223
HTTP/2 200 OK
content-type: image/gif
                                            
content-length: 43
date: Wed, 15 Mar 2023 03:31:03 GMT
last-modified: Thu, 16 Mar 2017 14:48:02 GMT
etag: "b4491705564909da7f9eaf749dbbfbb1"
cache-control: max-age=1296000
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: mm4qKESqzsBSCUpC-ymDnGxFRIPZazHZn9e2uXaNKOvETHjSRyuRsw==
age: 732770
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    b4491705564909da7f9eaf749dbbfbb1
Sha1:   279315d507855c6a4351e1e2c2f39dd9cd2fccd8
Sha256: 4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
                                        
                                            GET /modules.6af44455668b675aade1.js HTTP/1.1 
Host: script.hotjar.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.everyplate.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             54.230.111.73
HTTP/2 200 OK
content-type: application/javascript
                                            
content-length: 69096
date: Thu, 23 Mar 2023 14:31:09 GMT
accept-ranges: bytes
access-control-allow-origin: *
cache-control: max-age=31536000
content-encoding: br
cross-origin-resource-policy: cross-origin
etag: "77f3f89a0a86a9ed3647edf2670ebff3"
last-modified: Thu, 23 Mar 2023 14:31:08 GMT
strict-transport-security: max-age=2592000; includeSubDomains
x-content-type-options: nosniff
x-robots-tag: none
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 5ylvN3jQYUJH59pUeLWbYUTCt4tWRFUf4Ktaa7nnuv6yZn_91G5EoQ==
age: 1963
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (50842)
Size:   69096
Md5:    77f3f89a0a86a9ed3647edf2670ebff3
Sha1:   53016e740b30c545ea018af0d2412d1ddf80ad18
Sha256: c82b9db33bfaa349a2a8bc520787f21f5d2519307404e02df877ddf5cb0bdb30
                                        
                                            GET /logo_medium.gif?check=1679583840499&refererPageDetail= HTTP/1.1 
Host: duuytoqss3gu4.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.everyplate.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             54.230.245.223
HTTP/2 200 OK
content-type: image/gif
                                            
content-length: 43
last-modified: Thu, 16 Mar 2017 14:48:14 GMT
accept-ranges: bytes
server: AmazonS3
date: Wed, 15 Mar 2023 16:01:44 GMT
cache-control: max-age=1296000
etag: "b4491705564909da7f9eaf749dbbfbb1"
x-cache: Hit from cloudfront
via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: vwtT6DY6A03T1VAj_B2NShf4zvtIcv4tAdBbXs_ZHDCfQLKoKn9WRw==
age: 1040980
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    b4491705564909da7f9eaf749dbbfbb1
Sha1:   279315d507855c6a4351e1e2c2f39dd9cd2fccd8
Sha256: 4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
                                        
                                            GET /action/0?ti=26018772&Ver=2&mid=483964d7-addb-4f3d-8b02-a0ac250edc67&sid=f14e4aa0c98b11ed90747d270b461fda&vid=f14e6770c98b11edbf19a1519a85af6c&vids=0&msclkid=N&ea=PageView&en=Y&sw=1280&sh=1024&sc=24&evt=custom&rn=789697 HTTP/1.1 
Host: bat.bing.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.everyplate.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             13.107.21.200
HTTP/2 204 No Content
                                            
cache-control: no-cache, must-revalidate
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
set-cookie: MUID=3292E24DFF4F6FF025A0F090FEBA6E3F; domain=.bing.com; expires=Tue, 16-Apr-2024 15:03:52 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 438F5C5B66C741639BB6B7C29555D28A Ref B: OSL30EDGE0207 Ref C: 2023-03-23T15:03:52Z
date: Thu, 23 Mar 2023 15:03:51 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   1710
Md5:    baeb0c8508aece201d741d23c9f72693
Sha1:   bb3893b9ed9f050cd4b9195ca2d22cca8672ec0c
Sha256: 36385187dd9ec63ef9045d3a0712cb210c21a36cb1835e3a1d487af4713076f5
                                        
                                            GET /action/0?ti=26018772&Ver=2&mid=483964d7-addb-4f3d-8b02-a0ac250edc67&sid=f14e4aa0c98b11ed90747d270b461fda&vid=f14e6770c98b11edbf19a1519a85af6c&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=Select%20your%20plan&kw=cooking,%20EveryPlate&p=https%3A%2F%2Fwww.everyplate.com%2Fplans%3Fmealsize%3D4-5%26c_comms%3DPER-SERVING%26c%3DMVO139E%26utm_source%3DM1%26utm_medium%3Dcpa%26utm_campaign%3D100334796%26utm_id%3Dcj~15435836%26cjevent%3De95d35ddc98b11ed82d4532a0a18b8fb&r=&lt=3220&evt=pageLoad&sv=1&rn=156383 HTTP/1.1 
Host: bat.bing.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.everyplate.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             13.107.21.200
HTTP/2 204 No Content
                                            
cache-control: no-cache, must-revalidate
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
set-cookie: MUID=27C449D539C76EA93CF05B0838326FFC; domain=.bing.com; expires=Tue, 16-Apr-2024 15:03:52 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: DB04C5037D444C0DBFCA7E39848F2B03 Ref B: OSL30EDGE0207 Ref C: 2023-03-23T15:03:52Z
date: Thu, 23 Mar 2023 15:03:51 GMT
X-Firefox-Spdy: h2

                                        
                                            GET /p/action/26018772.js HTTP/1.1 
Host: bat.bing.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.everyplate.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             13.107.21.200
HTTP/2 204 No Content
                                            
cache-control: private,max-age=1800
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: D83646D918BF4B3292BBD6FDC0C277D2 Ref B: OSL30EDGE0207 Ref C: 2023-03-23T15:03:52Z
date: Thu, 23 Mar 2023 15:03:51 GMT
X-Firefox-Spdy: h2

                                        
                                            OPTIONS /7a37ed0f6797/a32cd5473546415fbdb137caf86b2dca/wpt.json HTTP/1.1 
Host: cdn0.forter.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://www.everyplate.com/
Origin: https://www.everyplate.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.225.5.197
HTTP/1.1 204 No Content
                                            
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE
Vary: Access-Control-Request-Headers
Access-Control-Allow-Headers: content-type
Content-Length: 0
Date: Thu, 23 Mar 2023 15:03:52 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: status.geotrust.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             192.229.221.95
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 2914
Cache-Control: max-age=113641
Date: Thu, 23 Mar 2023 15:03:52 GMT
Etag: "641b77df-1d7"
Expires: Fri, 24 Mar 2023 22:37:53 GMT
Last-Modified: Wed, 22 Mar 2023 21:49:19 GMT
Server: ECAcc (amb/6B67)
X-Cache: HIT
Content-Length: 471

                                        
                                            POST /7a37ed0f6797/a32cd5473546415fbdb137caf86b2dca/wpt.json HTTP/1.1 
Host: cdn0.forter.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json; charset=utf-8
Content-Length: 29
Origin: https://www.everyplate.com
Connection: keep-alive
Referer: https://www.everyplate.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.225.5.197
HTTP/1.1 200 OK
Content-Type: application/json; charset=utf-8
                                            
Access-Control-Allow-Origin: https://www.everyplate.com
Vary: Origin
Access-Control-Allow-Credentials: true
Timing-Allow-Origin: *
Cache-Control: private, no-cache, no-store
Expires: -1
Pragma: no-cache
Content-Length: 20
ETag: W/"14-Y53wuE/mmbSikKcT/WualL1N65U"
Date: Thu, 23 Mar 2023 15:03:52 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   20
Md5:    5820854f62a6eb3d38ba7ba0d1b3ea75
Sha1:   639df0b84fe699b4a290a713fd6b9a94bd4deb95
Sha256: 912d0c07da7bdb22cdae025b96da26d01523aaab7362edb28544e3949deb369d
                                        
                                            GET /sessions/919432?s=0.25&r=0.09068683032729874 HTTP/1.1 
Host: vc.hotjar.io
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.everyplate.com
Connection: keep-alive
Referer: https://www.everyplate.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             54.230.111.70
HTTP/2 204 No Content
                                            
access-control-allow-origin: *
cache-control: no-store
date: Thu, 23 Mar 2023 15:03:52 GMT
server: Python/3.8 aiohttp/3.8.4
x-cache: Miss from cloudfront
via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: exdKsIAkidSyoX412Kv_hjuGEt4PSj5Wi_zwhj4xlF34_rvcCxII0w==
X-Firefox-Spdy: h2

                                        
                                            GET /widget/widget.js?v=c98ff27 HTTP/1.1 
Host: d3rr3d0n31t48m.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.everyplate.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             54.230.111.123
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                            
content-length: 48478
date: Tue, 21 Mar 2023 15:09:14 GMT
last-modified: Tue, 21 Mar 2023 15:08:55 GMT
etag: "77efb5e80c2b14bb2e6cced80e1dfe96"
x-amz-server-side-encryption: AES256
cache-control: max-age=2592000, public
content-encoding: gzip
x-amz-meta-mtime: 1679411331.62
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 fc5e625db631bc657fc73f189d53fa14.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: TM2RaXPIqmuHI-kllvT7jRwVT_hhFD9vhNIC0Sjzl_8HTp5VSMSOuA==
age: 172478
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (817)
Size:   48478
Md5:    77efb5e80c2b14bb2e6cced80e1dfe96
Sha1:   f924851b294a1dc98d44083606ba680016c236cd
Sha256: 91f5ee622d3beadb2e899dff1c1cbf107eb4e5d1168aee060668984d99c77d0f
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.163
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Thu, 23 Mar 2023 15:03:52 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /pagead/1p-user-list/812248422/?random=1679583831066&cv=10&fst=1679583600000&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e33l1&url=https%3A%2F%2Fwww.everyplate.com%2Fplans%3Fmealsize%3D4-5%26c_comms%3DPER-SERVING%26c%3DMVO139E%26utm_source%3DM1%26utm_medium%3Dcpa%26utm_campaign%3D100334796%26utm_id%3Dcj~15435836%26cjevent%3De95d35ddc98b11ed82d4532a0a18b8fb&tiba=Select%20your%20plan&is_vtc=1&random=108113612&ipr=y HTTP/1.1 
Host: www.google.no
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.everyplate.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             216.58.207.227
HTTP/2 200 OK
content-type: image/gif
                                            
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 23 Mar 2023 15:03:52 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.163
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Thu, 23 Mar 2023 15:03:52 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /input.js HTTP/1.1 
Host: shopper.shop.pe
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.everyplate.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             35.190.54.17
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                            
x-guploader-uploadid: ADPycdtYE9V_jW_J2z-Z7SJUhhWvSwJx1qaEiCuDbj90B6yiDhIq3l85SsAQ3onuOhnui6hSzWYnp-xwhB03Gmp0jcnoN7zHW1Sc
x-goog-generation: 1676478788444714
x-goog-metageneration: 2
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 8877
content-encoding: gzip
x-goog-hash: crc32c=cHI6Vg==, md5=Vr5hc7XQu8Voms0uTcQM8g==
x-goog-storage-class: STANDARD
accept-ranges: bytes
content-length: 8877
access-control-allow-origin: *
access-control-expose-headers: Access-Control-Allow-Origin
server: UploadServer
date: Thu, 23 Mar 2023 13:21:03 GMT
expires: Thu, 23 Mar 2023 17:21:03 GMT
cache-control: public, max-age=14400
age: 6170
last-modified: Wed, 15 Feb 2023 16:33:08 GMT
etag: "56be6173b5d0bbc5689acd2e4dc40cf2"
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (17023)
Size:   8877
Md5:    56be6173b5d0bbc5689acd2e4dc40cf2
Sha1:   a48f9c0ac17d02994370c71af4e0f5ab6ce5401e
Sha256: 7cac3b28a677a56fb194ea4bb877e4648d3d9b0f24f2f946f75d94d74d78e0f3
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sca1b.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             54.230.245.110
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=169797
Date: Thu, 23 Mar 2023 15:03:53 GMT
Etag: "641c4acb-1d7"
Expires: Sat, 25 Mar 2023 14:13:50 GMT
Last-Modified: Thu, 23 Mar 2023 12:49:15 GMT
Server: ECAcc (nya/1C3C)
X-Cache: Miss from cloudfront
Via: 1.1 8ac66e1d6983a0f44cf391b1ec3b1cce.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: H3gt11cJnTrUD1_WLYmqGkwwCUygGzZvqSsrKcvoEQMaC9VxNy3kBQ==
Age: 5075

                                        
                                            POST / HTTP/1.1 
Host: ocsp.sca1b.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             54.230.245.110
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=167351
Date: Thu, 23 Mar 2023 15:03:53 GMT
Etag: "641c4acb-1d7"
Expires: Sat, 25 Mar 2023 13:33:04 GMT
Last-Modified: Thu, 23 Mar 2023 12:49:15 GMT
Server: ECAcc (nya/1C6C)
X-Cache: Miss from cloudfront
Via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: Wan8wElndvoiI8CU42uw1kTOsU7obX4HXsMWj7vpyTfC3C03Zqv7cA==
Age: 2629

                                        
                                            POST / HTTP/1.1 
Host: ocsp.sca1b.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             54.230.245.110
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=169797
Date: Thu, 23 Mar 2023 15:03:53 GMT
Etag: "641c4acb-1d7"
Expires: Sat, 25 Mar 2023 14:13:50 GMT
Last-Modified: Thu, 23 Mar 2023 12:49:15 GMT
Server: ECAcc (nya/1C3C)
X-Cache: Miss from cloudfront
Via: 1.1 227a1815a1677b9cf6dd587e443000b8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: kuTnlTHaitM_LFaCHPxmVfBRSCETv5opn6cYcjWYqLWGCLuCJhKUkw==
Age: 5075

                                        
                                            GET /5e583961e694aa04a4e32b17/640f90f4b8357f03c9638364/A.js?_t=1679426009 HTTP/1.1 
Host: addshoppers.s3.amazonaws.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.everyplate.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             52.217.90.140
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                            
x-amz-id-2: 5pCe41NMtHOwr97N0r2bsDhEaEo8sIKyfHassmkKW2o+EgwRcAHf6bV6TB1b4ux1GwHIv5zTc0U=
x-amz-request-id: E8X72F5M6E9JRY7S
Date: Thu, 23 Mar 2023 15:03:54 GMT
Last-Modified: Tue, 21 Mar 2023 19:13:31 GMT
ETag: "b1561dc28c086e590879557e979372cb"
x-amz-server-side-encryption: AES256
Cache-Control: max-age=2592000, public
Content-Encoding: gzip
x-amz-version-id: _.AcgeAavocLOZqnWks2xpFFxdBmyVvB
Accept-Ranges: bytes
Server: AmazonS3
Content-Length: 1196


--- Additional Info ---
Magic:  ASCII text, with very long lines (4850), with no line terminators
Size:   1991
Md5:    d9ed92f335330e307a8629e6df085019
Sha1:   610474caefee4f0e9c6d2afbfc77e9e3d13eb3bd
Sha256: 982447e39d07a1c27e488f9f3a53a663b217321858ad6e4eb889e0d1bff157b8
                                        
                                            GET /customize/5e583961e694aa04a4e32b17/5522f21c998642228d40763002e33e18.js?_t=1679573197 HTTP/1.1 
Host: addshoppers.s3.amazonaws.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.everyplate.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             52.217.90.140
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                            
x-amz-id-2: 8fm0jgaPrNlMRQgKXAyJ9H+i4Ki0Ej2Cm83GMpIhy3cksr+lXBhAYVlBX7NSQK+IlemAtJfVjRY=
x-amz-request-id: E8X4VAK299R8S754
Date: Thu, 23 Mar 2023 15:03:54 GMT
Last-Modified: Thu, 23 Mar 2023 12:06:39 GMT
ETag: "28aa5e4aa5fbca451ec15050d843e139"
x-amz-server-side-encryption: AES256
Cache-Control: max-age=2592000, public
Content-Encoding: gzip
x-amz-version-id: CkV2cshRxijiyS3LknyH8Ye54xre5kzm
Accept-Ranges: bytes
Server: AmazonS3
Content-Length: 1595


--- Additional Info ---
Magic:  ASCII text, with very long lines (6858), with no line terminators
Size:   1595
Md5:    28aa5e4aa5fbca451ec15050d843e139
Sha1:   e15636912f8b74ca88a944d69fd3ecc2d6699cb4
Sha256: 0ab5d3e9dd91f51b4a84ec1cfa53e34fd20ad6a605beda2024c40ebbec884f0b
                                        
                                            GET /5e583961e694aa04a4e32b17/5ecd5aa7d559300469446a88/A.js?_t=1663082965 HTTP/1.1 
Host: addshoppers.s3.amazonaws.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.everyplate.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             52.217.90.140
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                            
x-amz-id-2: L2+MM/5UTqpPOzBJYq0humJu1d9j7RyjFKeoeOUyx2c1puj1dVC7KXtMnGWnJfJSUJEE1qdehUA=
x-amz-request-id: E8X76N42DZ630BEA
Date: Thu, 23 Mar 2023 15:03:54 GMT
Last-Modified: Tue, 13 Sep 2022 15:29:26 GMT
ETag: "770a0a06a68de5aca73a7fedaed6b5e5"
Cache-Control: max-age=2592000, public
Content-Encoding: gzip
x-amz-version-id: UafNIQ4XPZkFy5l52GGKUhPZw4bwSwUT
Accept-Ranges: bytes
Server: AmazonS3
Content-Length: 3817


--- Additional Info ---
Magic:  ASCII text, with very long lines (15885), with no line terminators
Size:   3817
Md5:    770a0a06a68de5aca73a7fedaed6b5e5
Sha1:   d0e5fa9b991724514d7c6af5999b6d6bf4ae8ba5
Sha256: be05855c74d826886090640a79bef857a3880a5385160d7a87fe902f3428f5f1
                                        
                                            GET /live/602.js HTTP/1.1 
Host: web-chat-tag-cdn.s3.eu-west-1.amazonaws.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.everyplate.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             3.5.68.152
HTTP/1.1 200 OK
Content-Type: text/javascript
                                            
x-amz-id-2: JKkWNdyIsi0/fSSzgCPlfK1cztMGOaHqq/cPzgDjB2ms/7z9xUIMqVrtD2k4kIiUig68rMZo3XlSyjgMzmxy5g==
x-amz-request-id: E8XEA982Y42HN0T2
Date: Thu, 23 Mar 2023 15:03:54 GMT
x-amz-replication-status: FAILED
Last-Modified: Tue, 07 Feb 2023 09:25:10 GMT
ETag: "4fe7ae4a40dd8f2f40a3f586a70eca31"
x-amz-server-side-encryption: AES256
Cache-Control: no-cache,max-age=0,immutable
Content-Encoding: gzip
x-amz-version-id: 6199rnvwCZO3HmAidJnpmvo3krE0A6XS
Accept-Ranges: bytes
Server: AmazonS3
Content-Length: 6479


--- Additional Info ---
Magic:  ASCII text, with very long lines (16174)
Size:   6479
Md5:    4fe7ae4a40dd8f2f40a3f586a70eca31
Sha1:   c6cfbaa1ff3b5dbbf644a2c8e5b89d1f3c7fdd15
Sha256: a1752c50200e40e9b56f5799f45ed1d9c4af41916973bc956ecdc66c6bcf0720
                                        
                                            POST / HTTP/1.1 
Host: ocsp.r2m01.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             54.230.80.227
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=87367
Date: Thu, 23 Mar 2023 15:03:53 GMT
Etag: "641b047c-1d7"
Expires: Fri, 24 Mar 2023 15:20:00 GMT
Last-Modified: Wed, 22 Mar 2023 13:37:00 GMT
Server: ECAcc (bsa/EB32)
X-Cache: Miss from cloudfront
Via: 1.1 a343e36742f64defd0a2caf1f96ff772.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: FOb6AzxWKDm5DjjeWCu_6tp2N0mz_Yb4x2BkEiPJyuWhd11Bzd-2Wg==
Age: 6180

                                        
                                            OPTIONS /app/attribution HTTP/1.1 
Host: app.shop.pe
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://www.everyplate.com/
Origin: https://www.everyplate.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             35.227.244.1
HTTP/2 204 No Content
                                            
server: nginx
date: Thu, 23 Mar 2023 15:03:53 GMT
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: X-Requested-With, Content-Type, X-XSRFToken
access-control-allow-methods: POST, GET, OPTIONS, DELETE, PATCH
x-frame-options: deny
strict-transport-security: max-age=31536000; includeSubDomains
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

                                        
                                            GET /iframe?vcp=4dd5h0np&as_id=01dfa64e8a9445bdbc51f7fe1f546553 HTTP/1.1 
Host: nytrng.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.everyplate.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

                                        
                                             99.83.128.14
HTTP/2 200 OK
content-type: text/html; charset=utf-8
                                            
date: Thu, 23 Mar 2023 15:03:53 GMT
content-length: 417
server: gunicorn
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (417), with no line terminators
Size:   417
Md5:    176fc443eec154374a5dcc81e0de7992
Sha1:   80ccb980478104f9faaaf8e5cfb1252297bb44a5
Sha256: acd51a883fb62fd145707cd7a6d444cf4b35d635c34f9fe05f96135b40d93b21
                                        
                                            POST / HTTP/1.1 
Host: ocsp.r2m01.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             54.230.80.227
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=144679
Date: Thu, 23 Mar 2023 15:03:53 GMT
Etag: "641bf0aa-1d7"
Expires: Sat, 25 Mar 2023 07:15:12 GMT
Last-Modified: Thu, 23 Mar 2023 06:24:42 GMT
Server: ECAcc (bsa/EB26)
X-Cache: Miss from cloudfront
Via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: -rv7HaXW9CvhI_RUy1AKCpvce4Qj-HebQII_FjIfmrk6ZCIWqN7NhA==
Age: 3030

                                        
                                            GET /pl.2.2.min.js HTTP/1.1 
Host: cdn.nytrng.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nytrng.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site

                                        
                                             54.230.111.74
HTTP/2 200 OK
content-type: text/plain
                                            
content-length: 0
date: Thu, 09 Mar 2023 01:09:36 GMT
last-modified: Wed, 31 Jul 2019 16:57:19 GMT
etag: "d41d8cd98f00b204e9800998ecf8427e"
x-amz-version-id: null
accept-ranges: bytes
server: AmazonS3
x-cache: Error from cloudfront
via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 6kxbEPghxUbLBv5Tm8lTxYD-lv4SNhSZjV6dMGvBjRcfEDw0i-9QUw==
age: 1259657
X-Firefox-Spdy: h2

                                        
                                            GET /plans?mealsize=4-5&c_comms=PER-SERVING&c=MVO139E&utm_source=M1&utm_medium=cpa&utm_campaign=100334796&utm_id=cj~15435836&cjevent=e95d35ddc98b11ed82d4532a0a18b8fb HTTP/1.1 
Host: www.everyplate.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

                                        
                                             104.16.55.89
HTTP/2 200 OK
content-type: text/html; charset=utf-8
                                            
date: Thu, 23 Mar 2023 15:03:47 GMT
cf-ray: 7ac7902a8a00b4ed-OSL
age: 23
cache-control: public, max-age=14400
content-language: en-US
last-modified: Thu, 23 Mar 2023 05:46:07 GMT
vary: Accept-Encoding
cf-cache-status: HIT
x-content-type-options: nosniff
x-envoy-upstream-service-time: 1138
x-frame-options: SAMEORIGIN
x-powered-by: Next.js
x-xss-protection: 1; mode=block
set-cookie: __cf_bm=yFo1gS.A.tsxp6mJLAfw48cclJs7HyLZvBzJSjwbuHI-1679583827-0-AcEhQbkCYuC5De7uU7uV9fb+J2Ol/avRWFsg5dGxY3OllKgzvpSe4Q2W+9ZkDKJH92Q0U/ku2hBLYMA4/W/6piw=; path=/; expires=Thu, 23-Mar-23 15:33:47 GMT; domain=.everyplate.com; HttpOnly; Secure; SameSite=None
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: 
                                        
                                            GET /local-tagging-container HTTP/1.1 
Host: tms.hft.everyplate.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.everyplate.com/
Cookie: __cf_bm=yFo1gS.A.tsxp6mJLAfw48cclJs7HyLZvBzJSjwbuHI-1679583827-0-AcEhQbkCYuC5De7uU7uV9fb+J2Ol/avRWFsg5dGxY3OllKgzvpSe4Q2W+9ZkDKJH92Q0U/ku2hBLYMA4/W/6piw=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site

                                        
                                             34.160.69.63
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                            
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
vary: Accept-Encoding, Accept-Encoding
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000, h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
accept-ranges: none
x-cloud-trace-context: 657a1438f00365ea61a0ac9227d512b9
date: Thu, 23 Mar 2023 15:03:48 GMT
server: Google Frontend
via: 1.1 google
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: 
                                        
                                            GET /sn/7a37ed0f6797/script.js HTTP/1.1 
Host: 7a37ed0f6797.cdn4.forter.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.everyplate.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             54.230.111.105
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                            
date: Thu, 23 Mar 2023 13:34:45 GMT
strict-transport-security: max-age=86400; includeSubDomains
access-control-allow-origin: *
timing-allow-origin: *
last-modified: Thu, 23 Mar 2023 13:34:45 GMT
expires: Thu, 23 Mar 2023 13:39:45 GMT
cache-control: private, max-age=300
x-sourcemap: https://cdn4.forter.com/map/suid/7a37ed0f6797/81053984317
content-encoding: br
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: egYifqTL8g_2Zyro4oruHwgwhrkTRsMHkQZzQZjB4GmdtZta7n2y7g==
age: 5345
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: 
                                        
                                            POST /events HTTP/1.1 
Host: cdn3.forter.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain; charset=utf-8
Content-Length: 20043
Origin: https://www.everyplate.com
Connection: keep-alive
Referer: https://www.everyplate.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             44.213.151.157
HTTP/2 200 OK
                                            
date: Thu, 23 Mar 2023 15:03:52 GMT
access-control-allow-origin: https://www.everyplate.com
vary: Origin
access-control-allow-credentials: true
timing-allow-origin: *
cache-control: private, no-cache, no-store
expires: -1
pragma: no-cache
strict-transport-security: max-age=86400; includeSubDomains
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: 
                                        
                                            GET /app/datapartners/status?usersite_id=5e583961e694aa04a4e32b17 HTTP/1.1 
Host: app.shop.pe
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.everyplate.com
Connection: keep-alive
Referer: https://www.everyplate.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             35.227.244.1
HTTP/2 200 OK
content-type: application/json; charset=UTF-8
                                            
server: nginx
date: Thu, 23 Mar 2023 15:03:53 GMT
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: X-Requested-With, Content-Type, X-XSRFToken
access-control-allow-methods: POST, GET, OPTIONS, DELETE, PATCH
p3p: policyref="/w3c/p3p.xml", CP="CAO PSA OUR"
etag: W/"0467ba22658b680d6de72dc567071b5bc495547f"
set-cookie: _xsrf=2|10d98101|9ecd18dd77d636c95b83470c2105a50a|1679583833; Path=/
x-frame-options: deny
strict-transport-security: max-age=31536000; includeSubDomains
content-encoding: gzip
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: 
                                        
                                            POST /app/attribution HTTP/1.1 
Host: app.shop.pe
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 84
Origin: https://www.everyplate.com
Connection: keep-alive
Referer: https://www.everyplate.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             35.227.244.1
HTTP/2 200 OK
content-type: application/json; charset=UTF-8
                                            
server: nginx
date: Thu, 23 Mar 2023 15:03:53 GMT
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: X-Requested-With, Content-Type, X-XSRFToken
access-control-allow-methods: POST, GET, OPTIONS, DELETE, PATCH
p3p: policyref="/w3c/p3p.xml", CP="CAO PSA OUR"
set-cookie: _xsrf=2|48064c59|c34e5a32f4c4306c17d035622c587d31|1679583833; Path=/
x-frame-options: deny
strict-transport-security: max-age=31536000; includeSubDomains
content-encoding: gzip
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: 
                                        
                                            POST /events HTTP/1.1 
Host: cdn3.forter.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain; charset=utf-8
Content-Length: 1461
Origin: https://www.everyplate.com
Connection: keep-alive
Referer: https://www.everyplate.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             44.213.151.157
HTTP/2 200 OK
                                            
date: Thu, 23 Mar 2023 15:03:55 GMT
access-control-allow-origin: https://www.everyplate.com
vary: Origin
access-control-allow-credentials: true
timing-allow-origin: *
cache-control: private, no-cache, no-store
expires: -1
pragma: no-cache
strict-transport-security: max-age=86400; includeSubDomains
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: