track.wmgt.io/c15ae9d7-5f53-4f08-9253-3bac6d78b38c?offer=&sub2=annettecowley@slurpmail.net&from=MEMORY%20KILLER-support@wakeup-lean.com&subject=1%20veggie%20all%20seniors%20MUST%20avoid&sub1=mw6b_032523
18.193.209.105302 0 B URL HTTP/1.1 track.wmgt.io/c15ae9d7-5f53-4f08-9253-3bac6d78b38c?offer=&sub2=annettecowley@slurpmail.net&from=MEMORY%20KILLER-support@wakeup-lean.com&subject=1%20veggie%20all%20seniors%20MUST%20avoid&sub1=mw6b_032523
IP 18.193.209.105:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /c15ae9d7-5f53-4f08-9253-3bac6d78b38c?offer=&sub2=annettecowley@slurpmail.net&from=MEMORY%20KILLER-support@wakeup-lean.com&subject=1%20veggie%20all%20seniors%20MUST%20avoid&sub1=mw6b_032523 HTTP/1.1
Host: track.wmgt.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302
Server: nginx
Date: Sat, 25 Mar 2023 09:18:09 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, pre-check=0, post-check=0
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Location: https://www.wm74trk.com/28KL6/25ZGGDQ/?sub1=mw6b_032523&sub5=w19d9eban6qhuhhn2hjeb4i4&sub3=91.90.42.154
Pragma: no-cache
Set-Cookie: c15ae9d7-5f53-4f08-9253-3bac6d78b38c-v4=uA1MqCng00zw5YPS_0xTrkywBkFOVkTfGApL-nTIFUc; Max-Age=86400; Expires=Sun, 26-Mar-2023 09:18:09 GMT; Domain=track.wmgt.io; Path=/; HttpOnly
cc-v4=XmdRu2BhXHoEHonRf7YhIu4CmqXawVE43uYdP35cR8G9nm8FCVgJ9eq2pgxCP4WsDjq%2BB2XdYGle6eoefKDWFVBRbvusbza56iWWEOcytDmIS%2FpbAVY4ciZCuGluIInMa9bTDKxuYJEWQycDYyy6cw%3D%3D; Max-Age=31536000; Expires=Sun, 24-Mar-2024 09:18:09 GMT; Domain=track.wmgt.io; Path=/; HttpOnly
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 5d9435c884bf4a0777fdf4b57079ae09
7f04b9db47ffeec90ac6397416b7553e5336a550
fe77420ec3a11f547cf5172b68d30faa4fe0c13165ae305f0013b02914e61084
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FE77420EC3A11F547CF5172B68D30FAA4FE0C13165AE305F0013B02914E61084"
Last-Modified: Sat, 25 Mar 2023 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4024
Expires: Sat, 25 Mar 2023 10:25:13 GMT
Date: Sat, 25 Mar 2023 09:18:09 GMT
Connection: keep-alive
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash dfd491ebe7381221b3674c2c8bf9e566
d2ac5badf17f348c28a52e9db10e6eb80e5a231a
34a026664386054b0b73c36cd1ddfce023551ee41963df0e38248bac1e1eb56c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "34A026664386054B0B73C36CD1DDFCE023551EE41963DF0E38248BAC1E1EB56C"
Last-Modified: Fri, 24 Mar 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6143
Expires: Sat, 25 Mar 2023 11:00:32 GMT
Date: Sat, 25 Mar 2023 09:18:09 GMT
Connection: keep-alive
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash dc2752d83fbed82852248898a132467a
b27a6b4af2e07663a58cafb641513f7224c7a7c3
ea7838393d83805a7b8a2b01bd09e4423617c4da285b983a11e9ba36266810d5
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EA7838393D83805A7B8A2B01BD09E4423617C4DA285B983A11E9BA36266810D5"
Last-Modified: Wed, 22 Mar 2023 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13042
Expires: Sat, 25 Mar 2023 12:55:31 GMT
Date: Sat, 25 Mar 2023 09:18:09 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 4ad6984a756720fbfff47b37a75513a2
355e35258114452af8b9638985ed9d8ef3bf0aca
43181fccb10652c68cae86e5e32b4e8f426fb5ad49d8125cb99e072cff573cf5
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Content-Length, Alert, Content-Type, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sat, 25 Mar 2023 09:15:23 GMT
content-type: application/json
age: 166
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash e7bace7c1e04d44012e37ddffe36e5d5
3ac8d7c0a9d3e3f0b28b2530c7b8d8407b4042c2
6b4f80f2e95b26f6122ea8dcd0ef8d762299be822c69e839fc37581ca2bcb5f2
GET /chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: b0HQsFBi/Emvd7DUAEFvcDOo1akNjL8S7RRC+Z7dxTNHW0BDdAtE0CBPi5z8Kc6Ij5rrpnevpXc=
x-amz-request-id: 9SBYHC1RFFYMXH31
x-amz-server-side-encryption: AES256
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sat, 25 Mar 2023 08:54:51 GMT
age: 1398
last-modified: Sat, 11 Mar 2023 16:53:15 GMT
etag: "e7bace7c1e04d44012e37ddffe36e5d5"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 25 Mar 2023 09:18:09 GMT
content-type: application/json
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.starfieldtech.com/
192.124.249.41200 OK 1.8 kB IP 192.124.249.41:0
Hash 2c4f04a50b32b24ca1c9ebea15de3e46
4395db2e2be87a5c15a4cf66d4e45eef01ab7833
78d4713c272dde3310fd869db03b19fbbcf68b41356b4d87fe84de9959a08bee
POST / HTTP/1.1
Host: ocsp.starfieldtech.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Sat, 25 Mar 2023 09:18:09 GMT
Content-Type: application/ocsp-response
Content-Length: 1846
Connection: keep-alive
X-Sucuri-ID: 19041
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Fri, 24 Mar 2023 19:27:00 GMT
Expires: Sat, 25 Mar 2023 19:27:00 GMT
ETag: "4395db2e2be87a5c15a4cf66d4e45eef01ab7833"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
www.wm74trk.com/28KL6/25ZGGDQ/?sub1=mw6b_032523&sub5=w19d9eban6qhuhhn2hjeb4i4&sub3=91.90.42.154
34.107.190.195302 Found 236 B URL HTTP/2 www.wm74trk.com/28KL6/25ZGGDQ/?sub1=mw6b_032523&sub5=w19d9eban6qhuhhn2hjeb4i4&sub3=91.90.42.154
IP 34.107.190.195:0
File type HTML document, ASCII text
Hash 536594e91ec42c7278a87b278f5985f1
60758a07d5bf1c664e53d24c91a10640f5ec02e9
7c72d6ede2c9be9fc8c1ccb36db9504e7839310d92d979cdc9ceb1b20464a973
GET /28KL6/25ZGGDQ/?sub1=mw6b_032523&sub5=w19d9eban6qhuhhn2hjeb4i4&sub3=91.90.42.154 HTTP/1.1
Host: www.wm74trk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 302 Found
server: nginx
date: Sat, 25 Mar 2023 09:18:10 GMT
content-type: text/html; charset=utf-8
content-length: 236
accept-ch: Sec-Ch-Ua-Platform-Version
location: https://aff.brainc13-trk.com/aff_c?offer_id=79&aff_id=1495&url_id=195&source=&aff_sub=mw6b_032523&aff_sub2=&aff_sub3=91.90.42.154&aff_sub4=&aff_sub5=cb87078c5049461887ff7ce7135ed327
set-cookie: uniqueClick_25ZGGDQ=96906471-03ea-4d41-80bf-f2c804a3e1f5:1679735890; Path=/; Expires=Tue, 28 Mar 2023 09:18:10 GMT; Secure; SameSite=None
transaction_id=cb87078c5049461887ff7ce7135ed327; Path=/; Expires=Fri, 23 Jun 2023 09:18:10 GMT; Secure; SameSite=None
vary: Origin
x-eflow-request-id: 4c0ef7c8-12f6-41bd-9681-c140de5ee650
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.starfieldtech.com/
192.124.249.41200 OK 1.8 kB IP 192.124.249.41:0
Hash 2c4f04a50b32b24ca1c9ebea15de3e46
4395db2e2be87a5c15a4cf66d4e45eef01ab7833
78d4713c272dde3310fd869db03b19fbbcf68b41356b4d87fe84de9959a08bee
POST / HTTP/1.1
Host: ocsp.starfieldtech.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Sat, 25 Mar 2023 09:18:10 GMT
Content-Type: application/ocsp-response
Content-Length: 1846
Connection: keep-alive
X-Sucuri-ID: 19041
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Fri, 24 Mar 2023 19:27:00 GMT
Expires: Sat, 25 Mar 2023 19:27:00 GMT
ETag: "4395db2e2be87a5c15a4cf66d4e45eef01ab7833"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
aff.brainc13-trk.com/aff_c?offer_id=79&aff_id=1495&url_id=195&source=&aff_sub=mw6b_032523&aff_sub2=&aff_sub3=91.90.42.154&aff_sub4=&aff_sub5=cb87078c5049461887ff7ce7135ed327
172.67.219.4302 Found 583 B URL HTTP/2 aff.brainc13-trk.com/aff_c?offer_id=79&aff_id=1495&url_id=195&source=&aff_sub=mw6b_032523&aff_sub2=&aff_sub3=91.90.42.154&aff_sub4=&aff_sub5=cb87078c5049461887ff7ce7135ed327
IP 172.67.219.4:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (329)
Hash 93b6554b70034f9c3096346eaa674ca8
7d93f9cb66e6b8f7de46c893d427cfde5fad9b68
2b2d62c4d082f420970f702d75bf60ac6140802be8decf9a4e470be15c28ec5a
GET /aff_c?offer_id=79&aff_id=1495&url_id=195&source=&aff_sub=mw6b_032523&aff_sub2=&aff_sub3=91.90.42.154&aff_sub4=&aff_sub5=cb87078c5049461887ff7ce7135ed327 HTTP/1.1
Host: aff.brainc13-trk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 302 Found
date: Sat, 25 Mar 2023 09:18:10 GMT
content-type: text/html; charset=iso-8859-1
location: https://betterbrainperformance.com/?tid=1027ec93256c16abc9447f2e2b3452
cache-control: no-cache, no-store, must-revalidate
expires: Sat, 26 Jul 1997 05:00:00 GMT
p3p: CP="NOI CUR OUR NOR INT"
pragma: no-cache
set-cookie: aff_ran_url_79=195; expires=Sun, 26 Mar 2023 09:18:10 GMT; path=/; SameSite=None; Secure
enc_aff_session_79=ENC03a73ce658e79341a3b31b353e376e7741e69fdf90424eaf70da2b7bf79aea440d368917cb7a6ad68c3200810353c5756efa25323ce7e69eaf95d04afeec92294295e77f3f01c30dfdd95758b04244a0d14036017835bf093ff7bd7ce5ccdf050baabc827099e71dd3e79025b1a7279e330fb2932a8c633ab46361574f49688ca2f0ae7b78898c353f287edb7dcf82076b034538f9055918038a1b78e183bd296409d92982; expires=Thu, 25 May 2023 09:18:10 GMT; path=/; SameSite=None; Secure
ho_mob=eyJtb2JpbGVfZGV2aWNlX29zIjoiRGVza3RvcCIsIm1vYmlsZV9kZXZpY2VfbW9kZWwiOiJGaXJlZm94IiwibW9iaWxlX2RldmljZV9icmFuZCI6Ik1vemlsbGEiLCJtb2JpbGVfYnJvd3NlciI6IkZpcmVmb3ggRGVza3RvcCIsIm1vYmlsZV9icm93c2VyX3ZlcnNpb24iOiIxMDUuMCIsIm1vYmlsZV9jYXJyaWVyIjoiPyIsInVzZXJfYWdlbnQiOiJNb3ppbGxhLzUuMCAoV2luZG93cyBOVCAxMC4wOyBXaW42NDsgWDY0OyBSdjoxMDUuMCkgR2Vja28vMjAxMDAxMDEgRmlyZWZveC8xMDUuMCIsImFjY2VwdF9sYW5ndWFnZSI6ImVuLVVTLGVuO3E9MC41IiwiY29ubmVjdGlvbl9zcGVlZCI6ImJyb2FkYmFuZCJ9; expires=Mon, 16 Feb 2026 19:58:10 GMT; path=/; SameSite=None; Secure
tracking_id: 1027ec93256c16abc9447f2e2b3452
x-robots-tag: noindex, nofollow
access-control-allow-origin: *
x-request-id: 7a10a633374771e71445f0d41ca13cbf
access-control-allow-headers: Tune-SDK-Version
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=cIlgU4EVPgJbXWghmpyfXZKrIweHansMQK6GEnoHyP80tbe56mXOshJmzi9XgEvY2EHu4FoKVjRJ%2Fty4%2B9GKEE231EdrAxRuVzWFQVV%2Fw6lK2YSdnW9lompGG1FmL%2FwC0I9112eeMw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7ad610a1ab5fb515-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 717ebcc65cb1390c2509851bac7b5878
1e04e3058329f3809bc01022d441172dcacc1aaa
3c8d41efe14dc75e001ce50aae65e133d90bcb2e2f86b2426cefe7abe4c7b588
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3C8D41EFE14DC75E001CE50AAE65E133D90BCB2E2F86B2426CEFE7ABE4C7B588"
Last-Modified: Fri, 24 Mar 2023 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9192
Expires: Sat, 25 Mar 2023 11:51:22 GMT
Date: Sat, 25 Mar 2023 09:18:10 GMT
Connection: keep-alive
push.services.mozilla.com/
52.12.97.27101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 52.12.97.27:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: YJibZUNhUvnLagqxRWbjpg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: iAHVvGXldnF87UmZR+kXIqc85Lg=
cdnjs.cloudflare.com/ajax/libs/ouibounce/0.0.11/ouibounce.min.js
104.17.25.14200 OK 652 B URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/ouibounce/0.0.11/ouibounce.min.js
IP 104.17.25.14:0
File type ASCII text, with very long lines (1594), with no line terminators
Hash c818d82aa5e3bdccc5b03a0817e79019
eefd8067c955a16ae95700c381e8566d0d92f22d
f2b131b2496d03050cd1b882e74d3ecdfbad3b8e167525ea2aa580921e447793
GET /ajax/libs/ouibounce/0.0.11/ouibounce.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://betterbrainperformance.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 25 Mar 2023 09:18:10 GMT
content-type: application/javascript; charset=utf-8
content-length: 652
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03f3f-63a"
last-modified: Mon, 04 May 2020 16:13:51 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
vary: Accept-Encoding
cf-cache-status: HIT
age: 25179871
expires: Thu, 14 Mar 2024 09:18:10 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JAqyV185ymZrGL9mi%2FihTy3NAl8H1g7c%2B6Nu7agMdcTU7AgHGsZpi%2FIFjxBCQbRerwlbUMgK22Au3fHvJyJjejpyBQzRx916CS3tBhZFFhtIISjmLDXBT1dBwIhG5TSZ3aCwCQNR"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 7ad610a60abe1bfe-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 3a85d9c2de0b1015b62c81a1ab7fe625
389c7fe2d0d53ff607a3fd8e27283c8f1cb3a238
717fa1c4098bd6e282c24452a39aafc0b436941b2f398ef0086960effcc3f2ca
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 25 Mar 2023 09:18:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 3a85d9c2de0b1015b62c81a1ab7fe625
389c7fe2d0d53ff607a3fd8e27283c8f1cb3a238
717fa1c4098bd6e282c24452a39aafc0b436941b2f398ef0086960effcc3f2ca
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 25 Mar 2023 09:18:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ajax.googleapis.com/ajax/libs/jquery/2.2.0/jquery.min.js
142.250.74.170200 OK 30 kB URL HTTP/2 ajax.googleapis.com/ajax/libs/jquery/2.2.0/jquery.min.js
IP 142.250.74.170:0
File type ASCII text, with very long lines (32069)
Hash 4ae540714475aa934955496d990ab15f
b7724c4d72a422b86f5dc06571ff4bc86f0308a3
ca0222f8799d862ca8c427d6c612878f47043c9445ad0e1567f1f80e83c965e2
GET /ajax/libs/jquery/2.2.0/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://betterbrainperformance.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30089
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 25 Mar 2023 06:37:26 GMT
expires: Sun, 24 Mar 2024 06:37:26 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 9644
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 3a85d9c2de0b1015b62c81a1ab7fe625
389c7fe2d0d53ff607a3fd8e27283c8f1cb3a238
717fa1c4098bd6e282c24452a39aafc0b436941b2f398ef0086960effcc3f2ca
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 25 Mar 2023 09:18:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 3a85d9c2de0b1015b62c81a1ab7fe625
389c7fe2d0d53ff607a3fd8e27283c8f1cb3a238
717fa1c4098bd6e282c24452a39aafc0b436941b2f398ef0086960effcc3f2ca
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 25 Mar 2023 09:18:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ajax.googleapis.com/ajax/libs/jqueryui/1.12.0/jquery-ui.min.js
142.250.74.170200 OK 68 kB URL HTTP/2 ajax.googleapis.com/ajax/libs/jqueryui/1.12.0/jquery-ui.min.js
IP 142.250.74.170:0
File type ASCII text, with very long lines (32250)
Hash 4cce6089a385afed0cf53e1a918c09a6
2ae32ed83daefef2940d993c0643fe1ecd17e43a
a9edbefa458da0266f540d9ccfa0b5d3d2fb5894170a6261518ddc5471f7f910
GET /ajax/libs/jqueryui/1.12.0/jquery-ui.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://betterbrainperformance.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 67885
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 24 Mar 2023 22:21:28 GMT
expires: Sat, 23 Mar 2024 22:21:28 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 39403
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 3a85d9c2de0b1015b62c81a1ab7fe625
389c7fe2d0d53ff607a3fd8e27283c8f1cb3a238
717fa1c4098bd6e282c24452a39aafc0b436941b2f398ef0086960effcc3f2ca
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 25 Mar 2023 09:18:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ajax.googleapis.com/ajax/libs/jqueryui/1.12.0/themes/smoothness/jquery-ui.css
142.250.74.170200 OK 8.4 kB URL HTTP/2 ajax.googleapis.com/ajax/libs/jqueryui/1.12.0/themes/smoothness/jquery-ui.css
IP 142.250.74.170:0
File type ASCII text, with very long lines (2363)
Hash de9bb8d47e1580640782b3eab858f03f
f3d227a1c7e253edf7d81c256363b6539640a7ce
9235ed785c01b71d95569858aef7512da7614b91915cba9d59e5ef83a8cae20c
GET /ajax/libs/jqueryui/1.12.0/themes/smoothness/jquery-ui.css HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://betterbrainperformance.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 8425
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 19 Mar 2023 17:43:18 GMT
expires: Mon, 18 Mar 2024 17:43:18 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/css; charset=UTF-8
vary: Accept-Encoding
age: 488093
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.digicert.com/
192.229.221.95200 OK 471 B IP 192.229.221.95:0
Hash 90b1c3da58195497dc546078dcb9793d
2f815cb9be01d66cc9bbe3d1d91339bcdc1fae02
6636f2fa595fd7597bdd4d0155c3a146e02a8d56c33456c4a20a1f48e3cbad0f
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3012
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 25 Mar 2023 09:18:11 GMT
Last-Modified: Sat, 25 Mar 2023 08:27:59 GMT
Server: ECAcc (ska/F7A5)
X-Cache: HIT
Content-Length: 471
www.paypalobjects.com/en_US/i/scr/pixel.gif
192.229.221.25200 OK 43 B URL HTTP/2 www.paypalobjects.com/en_US/i/scr/pixel.gif
IP 192.229.221.25:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash fc94fb0c3ed8a8f909dbc7630a0987ff
56d45f8a17f5078a20af9962c992ca4678450765
2dfe28cbdb83f01c940de6a88ab86200154fd772d568035ac568664e52068363
GET /en_US/i/scr/pixel.gif HTTP/1.1
Host: www.paypalobjects.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://betterbrainperformance.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
cache-control: s-maxage=31536000, public,max-age=3600
content-type: image/gif
date: Sat, 25 Mar 2023 09:18:11 GMT
dc: ccg11-origin-www-1.paypal.com
etag: "5d5637be-2b"
expires: Sat, 25 Mar 2023 10:18:11 GMT
last-modified: Fri, 16 Aug 2019 04:57:34 GMT
paypal-debug-id: d1c4cfe1ff620
server: ECAcc (ska/F6E2)
strict-transport-security: max-age=63072000; includeSubDomains; preload
timing-allow-origin: https://www.paypal.com,https://www.sandbox.paypal.com
x-cache: HIT
x-content-type-options: nosniff
content-length: 43
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 4355291ec58b85ddde02c2446ecb2bb4
4ad43e10f82193f83e862e8a78f3e46de9490ac4
e32fd5635627751770ee13e8f77b14b2555163cfc2d7db98aa8edb5b4bae4d9a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 25 Mar 2023 09:18:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 1.1 kB IP 142.250.74.131:0
File type gzip compressed data, from Unix\012- data
Hash 2f93a91197af474809456b53fb667061
e4da7f0b1951956f6621e44069ba0905081aa32e
726de08e0cc88670bee950c160293fe62e95eca663d9784b9903350dcdb14a07
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 25 Mar 2023 09:18:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash ce6948c57f579a85042a4388c45514d6
4b3002c036034ef0cb8d9eb73b7bf7f561862b99
85e655e198ac1724ffca7bf4efc4f98de8c436cebf41ed665cc397fbb02a243a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 25 Mar 2023 09:18:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
d39ldsmboekjvi.cloudfront.net/js/sticky.js
143.204.42.114200 OK 3.4 kB URL HTTP/2 d39ldsmboekjvi.cloudfront.net/js/sticky.js
IP 143.204.42.114:0
Hash a9c6d69bb4eb38d5f5767a535ab11d75
8815cab941524fc24ef6122e44e4642cb25921c4
d417d6a7dbd641a1055254f587c90866a7a5a75759fbe6b3cecb73d04afa39a9
GET /js/sticky.js HTTP/1.1
Host: d39ldsmboekjvi.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://betterbrainperformance.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
last-modified: Wed, 21 Nov 2018 01:33:41 GMT
x-amz-meta-s3b-last-modified: 20181121T013321Z
x-amz-version-id: _crCZ4Vke2EKoCQQZkz2OEsoe5JB0EIE
server: AmazonS3
content-encoding: gzip
date: Sat, 25 Mar 2023 06:16:20 GMT
etag: W/"458d2b53be232f5ff60c7439530b516b"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 bcd5dadccb0831729969c938747ff79a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: aKg7G1R525Xm9hFQukIjQRpeZGNRMQQVmEaeyaI1OGTuwbXQbE8DAw==
age: 10912
X-Firefox-Spdy: h2
zenithlabs.com/fonts/fontawesome-webfont.woff2
188.114.96.1200 OK 77 kB URL HTTP/2 zenithlabs.com/fonts/fontawesome-webfont.woff2
IP 188.114.96.1:0
File type Web Open Font Format (Version 2), TrueType, length 77160, version 4.459\012- data
Hash af7ae505a9eed503f8b8e6982036873e
d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c
2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe
GET /fonts/fontawesome-webfont.woff2 HTTP/1.1
Host: zenithlabs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://betterbrainperformance.com
Connection: keep-alive
Referer: https://d39ldsmboekjvi.cloudfront.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 25 Mar 2023 09:18:11 GMT
content-type: font/woff2
content-length: 77160
last-modified: Sat, 26 Aug 2017 14:42:16 GMT
access-control-allow-origin: *
expires: Sun, 21 May 2023 16:10:39 GMT
cache-control: max-age=5184000
pragma: public
cf-cache-status: HIT
age: 234452
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2Wl8cubNuNyCKavjCYUxy42jG2Qws103blob8VU6ZLstvl0jP%2Fgn9WMuX0MFdXhI5G7iB588Zh%2FGT%2ByvL9WuU%2Fn66Ya9uGhcnwypmC%2Fy4zQNeoMo8OVR7Cev3virxCsPIA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7ad610a8bb4c1c02-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash ce6948c57f579a85042a4388c45514d6
4b3002c036034ef0cb8d9eb73b7bf7f561862b99
85e655e198ac1724ffca7bf4efc4f98de8c436cebf41ed665cc397fbb02a243a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 25 Mar 2023 09:18:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.googleapis.com/css?family=Anton|Lato|Oswald:400,500,600,700|Lora:400,400i,700,700i|Titillium+Web:900|Wendy+One
172.217.21.170200 OK 100 kB URL HTTP/2 fonts.googleapis.com/css?family=Anton|Lato|Oswald:400,500,600,700|Lora:400,400i,700,700i|Titillium+Web:900|Wendy+One
IP 172.217.21.170:0
Hash cf70c256ca2b2f760d1b458b553c36ee
fd227923bd45033b0c1f10e86cfec8d90c9af8ab
8b0911e90d2f9f0e883d81561d483e777484802450037cda00983bcfa5c5996b
GET /css?family=Anton|Lato|Oswald:400,500,600,700|Lora:400,400i,700,700i|Titillium+Web:900|Wendy+One HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://d39ldsmboekjvi.cloudfront.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 25 Mar 2023 09:18:11 GMT
date: Sat, 25 Mar 2023 09:18:11 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/oswald/v49/TK3IWkUHHAIjg75cFRf3bXL8LICs1_Fv40pKlN4NNSeSASz7FmlWHYg.woff2
216.58.207.227200 OK 18 kB URL HTTP/2 fonts.gstatic.com/s/oswald/v49/TK3IWkUHHAIjg75cFRf3bXL8LICs1_Fv40pKlN4NNSeSASz7FmlWHYg.woff2
IP 216.58.207.227:0
File type Web Open Font Format (Version 2), TrueType, length 17908, version 1.0\012- data
Hash e46b4e2e3b47cc232937ebf72b4c537e
2675bc06ee643b8c935370325a327efb74746e6a
d8543b5dcaea1fc4a0301dc12b5b2adc9079e0794dd6a45879588fb844f3438e
GET /s/oswald/v49/TK3IWkUHHAIjg75cFRf3bXL8LICs1_Fv40pKlN4NNSeSASz7FmlWHYg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://betterbrainperformance.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 17908
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 24 Mar 2023 10:27:01 GMT
expires: Sat, 23 Mar 2024 10:27:01 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 18 Jul 2022 19:23:34 GMT
content-type: font/woff2
age: 82270
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/montserrat/v25/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2
216.58.207.227200 OK 31 kB URL HTTP/2 fonts.gstatic.com/s/montserrat/v25/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2
IP 216.58.207.227:0
File type Web Open Font Format (Version 2), TrueType, length 30928, version 1.0\012- data
Hash ac0d2859ea5f8fd6bcb3c305c08ec184
7f6c17e3e592cd8bd346b9cc261d8dd961b8aef7
ae919a7c9f25f0fd97fc18e398ae8e453fcaae487e4a4cb4f896e7fecde4a780
GET /s/montserrat/v25/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://betterbrainperformance.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 30928
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 24 Mar 2023 10:26:48 GMT
expires: Sat, 23 Mar 2024 10:26:48 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 11 Jul 2022 18:57:39 GMT
content-type: font/woff2
age: 82283
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 4355291ec58b85ddde02c2446ecb2bb4
4ad43e10f82193f83e862e8a78f3e46de9490ac4
e32fd5635627751770ee13e8f77b14b2555163cfc2d7db98aa8edb5b4bae4d9a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 25 Mar 2023 09:18:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash ce6948c57f579a85042a4388c45514d6
4b3002c036034ef0cb8d9eb73b7bf7f561862b99
85e655e198ac1724ffca7bf4efc4f98de8c436cebf41ed665cc397fbb02a243a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 25 Mar 2023 09:18:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.sca1b.amazontrust.com/
54.230.245.118200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 54.230.245.118:0
Hash 5f54d6de2309ccae428278f735825f18
6bd27b8b4db1bb55ba6514ddbe302a5b8b198d9e
badf6b7b2b5dec14513493d6a3c06b96bc0b8894f53fd8687905b85677a2806e
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=105203
Date: Sat, 25 Mar 2023 09:18:11 GMT
Etag: "641d9c43-1d7"
Expires: Sun, 26 Mar 2023 14:31:34 GMT
Last-Modified: Fri, 24 Mar 2023 12:49:07 GMT
Server: ECAcc (bsa/EB2E)
X-Cache: Miss from cloudfront
Via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: gqIRwDnsgG9_V_aJZYLVVMRqb_9ObVOsgP79TsARceH8rFDdokrJrw==
Age: 6147
zenithlabs-global-resources.s3.amazonaws.com/images/cover.png
54.231.140.201200 OK 358 B URL HTTP/1.1 zenithlabs-global-resources.s3.amazonaws.com/images/cover.png
IP 54.231.140.201:0
File type PNG image data, 666 x 382, 8-bit colormap, non-interlaced\012- data
Hash 13910ff750192f062b2671e818dc2865
ab8479474ccc63b8900c93ab4686b1fc23e28765
067dcab543a3b7d9e0db0550eb52e7ab79844e89f3de5143920e96c1c4fb7df6
GET /images/cover.png HTTP/1.1
Host: zenithlabs-global-resources.s3.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://betterbrainperformance.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: MkCF3gBJ0E7iP48gzKvATL1T9AA6zlRh2ySknkdn5ihIYzBOGZSJueBk6YrW28/71IzwKfTX5Bk=
x-amz-request-id: S4GYFZHX2SBWQRK4
Date: Sat, 25 Mar 2023 09:18:12 GMT
Last-Modified: Mon, 01 Apr 2019 16:15:10 GMT
ETag: "13910ff750192f062b2671e818dc2865"
Expires: 2030-03-28
x-amz-version-id: mwNcMmmDLDEafPeyhmqVArfHCBTIpOiE
Accept-Ranges: bytes
Content-Type: image/png
Server: AmazonS3
Content-Length: 358
d39ldsmboekjvi.cloudfront.net/js/no_right_click_protection.js
143.204.42.114200 OK 5.2 kB URL HTTP/2 d39ldsmboekjvi.cloudfront.net/js/no_right_click_protection.js
IP 143.204.42.114:0
Hash 8a81ffc62161981a2296272262a81026
2d42ce8fc4912724c7a17687ec7d13ebce7c2c92
94d670c28db7181b4a05a49a37fb3029c35b94fc0bd85b6c798e7c6f3a70f28d
GET /js/no_right_click_protection.js HTTP/1.1
Host: d39ldsmboekjvi.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://betterbrainperformance.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
last-modified: Mon, 24 Oct 2022 12:24:57 GMT
x-amz-version-id: cmSmmvuDsx4yfCKtTZkvyABGalIIFNRP
server: AmazonS3
content-encoding: gzip
date: Sat, 25 Mar 2023 05:53:40 GMT
etag: W/"779b5023129218445bc90c03689bd733"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 bcd5dadccb0831729969c938747ff79a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: xkqMNjfJk9Z2_-kcQ5U_Fbr0lHauK8X4qS_hI4e1k1yuIWypkVsaTA==
age: 13116
X-Firefox-Spdy: h2
d39ldsmboekjvi.cloudfront.net/images/products/brainc13/6pack.jpg
143.204.42.114200 OK 106 kB URL HTTP/2 d39ldsmboekjvi.cloudfront.net/images/products/brainc13/6pack.jpg
IP 143.204.42.114:0
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 600x820, components 3\012- data
Size 106 kB (105755 bytes)
Hash f7e6d24ff32d6f14ffcdf99bbc75d1c2
89bac29add712deb5040337d302320564eae4c62
502af3bcbcaceda060a839f84399fe37199f1cb7025f1ccd0e41acee406a3284
GET /images/products/brainc13/6pack.jpg HTTP/1.1
Host: d39ldsmboekjvi.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://betterbrainperformance.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 105755
last-modified: Thu, 27 Jan 2022 17:47:48 GMT
x-amz-version-id: KfLoaVGP.KslHl5GhQ1cfBAmRBnKiaCI
accept-ranges: bytes
server: AmazonS3
date: Fri, 24 Mar 2023 15:35:51 GMT
etag: "f7e6d24ff32d6f14ffcdf99bbc75d1c2"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 bcd5dadccb0831729969c938747ff79a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: M6nYmSSJZD8lSZB0XL_h3VFA6mJaCqasczfk-TO4TR2aeksEV2PI8Q==
age: 63741
X-Firefox-Spdy: h2
d39ldsmboekjvi.cloudfront.net/images/dr-ryan-shelton.png
143.204.42.114200 OK 78 kB URL HTTP/2 d39ldsmboekjvi.cloudfront.net/images/dr-ryan-shelton.png
IP 143.204.42.114:0
File type PNG image data, 402 x 601, 8-bit colormap, non-interlaced\012- data
Hash 2eedbec81b07802678e17a462d3840ef
4cef1f7b2f6a8208aabf2d083364a96d5e264dfd
4f2f4bb52429ce2bbe04f32c60fd6f6ff9f0a785bf9abb0d3e5529504f247d38
GET /images/dr-ryan-shelton.png HTTP/1.1
Host: d39ldsmboekjvi.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://betterbrainperformance.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 77512
last-modified: Tue, 22 Feb 2022 02:58:07 GMT
x-amz-version-id: KY_fosChUjvreADt9xHMUrckclyt4cBt
accept-ranges: bytes
server: AmazonS3
date: Sat, 25 Mar 2023 05:56:52 GMT
etag: "2eedbec81b07802678e17a462d3840ef"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 bcd5dadccb0831729969c938747ff79a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: eq36epFlPBeLWlgM3GMQs-JmT85HWdMo57fOCxwTewbUlo3HNzBE-Q==
age: 29173
X-Firefox-Spdy: h2
d39ldsmboekjvi.cloudfront.net/images/free_shipping.jpg
143.204.42.114200 OK 10 kB URL HTTP/2 d39ldsmboekjvi.cloudfront.net/images/free_shipping.jpg
IP 143.204.42.114:0
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=\302\251ileezhun - stock.adobe.com], baseline, precision 8, 300x100, components 3\012- data
Hash 8f282f99e63923648fbd6ca73d74936e
8a684ffa9746a787d3cc138c0cd75b24c3ee4498
80d7edf7a24031f445afc6c4056014fc7cd5f368105f485bdb79d73d0e251baa
GET /images/free_shipping.jpg HTTP/1.1
Host: d39ldsmboekjvi.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://betterbrainperformance.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 10538
last-modified: Thu, 28 Feb 2019 22:22:53 GMT
x-amz-version-id: An62LR9YAH_31xHq_1rq6WDy7.kEpoCN
accept-ranges: bytes
server: AmazonS3
date: Sat, 25 Mar 2023 05:56:52 GMT
etag: "8f282f99e63923648fbd6ca73d74936e"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 bcd5dadccb0831729969c938747ff79a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: a-1r2XSgH88KCK-a79-db1C-CgLIQvZcAC-iiK3n8uqK4fw2-VJ-NQ==
age: 12340
X-Firefox-Spdy: h2
d39ldsmboekjvi.cloudfront.net/images/products/brainc13/3pack.jpg
143.204.42.114200 OK 93 kB URL HTTP/2 d39ldsmboekjvi.cloudfront.net/images/products/brainc13/3pack.jpg
IP 143.204.42.114:0
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 600x820, components 3\012- data
Hash ea62c9021e36f7b9bd97f0990c9c24c1
b6413d33be428e23389a263e301cecc211f444f6
dbc80657a318a858511c5095cf7432cfbaef8dab0bf2600154d0dd1b1e867e90
GET /images/products/brainc13/3pack.jpg HTTP/1.1
Host: d39ldsmboekjvi.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://betterbrainperformance.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 92775
last-modified: Thu, 27 Jan 2022 17:47:47 GMT
x-amz-version-id: 61eCO9o0raM99ozgjNtHuqrcdO.bnOSw
accept-ranges: bytes
server: AmazonS3
date: Fri, 24 Mar 2023 14:34:12 GMT
etag: "ea62c9021e36f7b9bd97f0990c9c24c1"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 bcd5dadccb0831729969c938747ff79a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: _LqIu5e9A92qIhtGFHCUS5B4xSiM5YC28tiOjY6eYHWz3K7eA8rQog==
age: 67439
X-Firefox-Spdy: h2
d39ldsmboekjvi.cloudfront.net/images/products/brainc13/1pack.jpg
143.204.42.114200 OK 76 kB URL HTTP/2 d39ldsmboekjvi.cloudfront.net/images/products/brainc13/1pack.jpg
IP 143.204.42.114:0
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 600x820, components 3\012- data
Hash 33c907e11cdd001b61fac11581a420a2
293a76b0d045dc22af586b05e432e3ba29f5066f
4f70f9def960587b3e863376d97a132111ba49c8a4e0e694215cc37e62dbf326
GET /images/products/brainc13/1pack.jpg HTTP/1.1
Host: d39ldsmboekjvi.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://betterbrainperformance.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 75548
last-modified: Thu, 27 Jan 2022 17:47:46 GMT
x-amz-version-id: sly.6qh09oGG2c3wNC9iTB_9v7Tba9Qi
accept-ranges: bytes
server: AmazonS3
date: Fri, 24 Mar 2023 12:46:15 GMT
etag: "33c907e11cdd001b61fac11581a420a2"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 bcd5dadccb0831729969c938747ff79a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: L2g943c4Yuxz7tRuSgYGJ0MiuvB-p9NhB62T4csWs98j2Qnp4hen6w==
age: 73917
X-Firefox-Spdy: h2
d39ldsmboekjvi.cloudfront.net/images/product_labels_web/Z-BRAINC13-CODE_zoom.jpg
143.204.42.114200 OK 141 kB URL HTTP/2 d39ldsmboekjvi.cloudfront.net/images/product_labels_web/Z-BRAINC13-CODE_zoom.jpg
IP 143.204.42.114:0
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 804x405, components 3\012- data
Size 141 kB (140775 bytes)
Hash 0b09bde63d135642e274db9e9b927596
d325ddc5a4812132603b0ebc2b24c081e9f85ac2
6bcae73f3f511209437d65004e1ef562e01b3bd907e791ee31ec6e4684fe92d4
GET /images/product_labels_web/Z-BRAINC13-CODE_zoom.jpg HTTP/1.1
Host: d39ldsmboekjvi.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://betterbrainperformance.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 140775
last-modified: Wed, 22 Jun 2022 16:27:32 GMT
x-amz-version-id: cR7DJu48sWDvBpS5EfHBExbQ0nnAP0b4
accept-ranges: bytes
server: AmazonS3
date: Sat, 25 Mar 2023 06:16:20 GMT
etag: "0b09bde63d135642e274db9e9b927596"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 bcd5dadccb0831729969c938747ff79a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: rHWEBIzaDlp76WVJQmDzNSXmJugUpqSDz0okefOayZ0aVc4onI3Dtg==
age: 10912
X-Firefox-Spdy: h2
d39ldsmboekjvi.cloudfront.net/images/credit-card-icons.png
143.204.42.114200 OK 41 kB URL HTTP/2 d39ldsmboekjvi.cloudfront.net/images/credit-card-icons.png
IP 143.204.42.114:0
File type PNG image data, 1000 x 157, 8-bit/color RGBA, non-interlaced\012- data
Hash 181466e4a7ad68649bdb69c7f05e746a
5751e3ac857fccfa96275a0696fed9dc76b477a1
ef887236c76fd7bdc9569ebcb6ef29cdc26665cf434ddbe2f53bd0a951c82e13
GET /images/credit-card-icons.png HTTP/1.1
Host: d39ldsmboekjvi.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://betterbrainperformance.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 40927
last-modified: Tue, 20 Nov 2018 17:38:17 GMT
x-amz-meta-s3b-last-modified: 20181120T173745Z
x-amz-version-id: oQuxlmnU8cmfF0JZpftczL02bDDo2VKK
accept-ranges: bytes
server: AmazonS3
date: Sat, 25 Mar 2023 05:53:40 GMT
etag: "181466e4a7ad68649bdb69c7f05e746a"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 bcd5dadccb0831729969c938747ff79a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: wWab3PnjPuz8v0leaP_E2E3C3Fk4ZRqQr2z0E2YDBlj-RERTncpAmQ==
age: 19665
X-Firefox-Spdy: h2
d39ldsmboekjvi.cloudfront.net/images/badges/wii.png
143.204.42.114200 OK 11 kB URL HTTP/2 d39ldsmboekjvi.cloudfront.net/images/badges/wii.png
IP 143.204.42.114:0
File type PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced\012- data
Hash 383b97625af6456a4c941de066979ff7
b995c77e0ace45c90049a6397590b26389b29cb4
6d1989b0f4a75ee0afc16f0e101e97bbaa8ce86997466900e3fb50f5565e9519
GET /images/badges/wii.png HTTP/1.1
Host: d39ldsmboekjvi.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://betterbrainperformance.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 11329
last-modified: Fri, 10 Jun 2022 16:07:58 GMT
x-amz-version-id: o81g8xRE0bhm43QfTs8_LIfBFNXqYzVT
accept-ranges: bytes
server: AmazonS3
date: Sat, 25 Mar 2023 05:53:40 GMT
etag: "383b97625af6456a4c941de066979ff7"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 bcd5dadccb0831729969c938747ff79a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: FVwHAsIrWj-T5x300WmgK6tMaajsPfU5bniW8CG5ixrvxekjms7JHA==
age: 12340
X-Firefox-Spdy: h2
d2w2as8qpte6k1.cloudfront.net/vsl/radiobox-inactive.png
143.204.42.189200 OK 1.7 kB URL HTTP/2 d2w2as8qpte6k1.cloudfront.net/vsl/radiobox-inactive.png
IP 143.204.42.189:0
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash af50e0fbf12f0ae42220d45b3a9fa448
9d39e892c592159e2e8986240ded60e306bbf9a7
c04b296f9fb066aa3c80cc563a4844edc3d82fc0271b67f4b9c17a80ac116a8e
GET /vsl/radiobox-inactive.png HTTP/1.1
Host: d2w2as8qpte6k1.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://betterbrainperformance.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/png
content-length: 1740
last-modified: Fri, 23 Nov 2018 20:26:41 GMT
x-amz-meta-s3b-last-modified: 20181123T200404Z
accept-ranges: bytes
server: AmazonS3
date: Sat, 25 Mar 2023 06:16:19 GMT
etag: "af50e0fbf12f0ae42220d45b3a9fa448"
x-cache: Hit from cloudfront
via: 1.1 a034aae43a19aef875fa395182990970.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: V8v4xNZGYu04YgFgo0dcZ3VMfhYLHHI7yhbYEQB6cl1bPGI9nu5NAg==
age: 40339
X-Firefox-Spdy: h2
d39ldsmboekjvi.cloudfront.net/images/badges/gp.png
143.204.42.114200 OK 30 kB URL HTTP/2 d39ldsmboekjvi.cloudfront.net/images/badges/gp.png
IP 143.204.42.114:0
File type PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced\012- data
Hash db932faef0f9b4f17895f0242637f204
cb7584c626bd41001f112ea47322bdc124515bec
c605bbc404f97b7cd8de456819115507d89319a844ef984bb38746aba68496b2
GET /images/badges/gp.png HTTP/1.1
Host: d39ldsmboekjvi.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://betterbrainperformance.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 29634
last-modified: Wed, 01 Jun 2022 18:13:48 GMT
x-amz-version-id: msVBPyqQwbPlvdnuU3ADvRN7EfRcpVhs
accept-ranges: bytes
server: AmazonS3
date: Sat, 25 Mar 2023 05:53:40 GMT
etag: "db932faef0f9b4f17895f0242637f204"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 bcd5dadccb0831729969c938747ff79a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: pPCEjHXZxZpP3eFK62bXn-FMCOlB9wvCE3voXwfqmfHOL7yOiWLqwA==
age: 15018
X-Firefox-Spdy: h2
d2w2as8qpte6k1.cloudfront.net/vsl/radiobox-active.png
143.204.42.189200 OK 2.1 kB URL HTTP/2 d2w2as8qpte6k1.cloudfront.net/vsl/radiobox-active.png
IP 143.204.42.189:0
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 971215ee6fa2febf56ecd5b53370b512
dabb96c18a7c3d5a0aeedabf2dab3c909c5d7670
39fe92512e7ddde374974d48c3f1819ed0be5650f6750fa2e12604f6e068f1b8
GET /vsl/radiobox-active.png HTTP/1.1
Host: d2w2as8qpte6k1.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://betterbrainperformance.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/png
content-length: 2057
last-modified: Fri, 23 Nov 2018 20:26:41 GMT
x-amz-meta-s3b-last-modified: 20181123T200404Z
accept-ranges: bytes
server: AmazonS3
date: Sat, 25 Mar 2023 06:16:19 GMT
etag: "971215ee6fa2febf56ecd5b53370b512"
x-cache: Hit from cloudfront
via: 1.1 a034aae43a19aef875fa395182990970.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: RvFBZKqVLNP5JdDuggthsS_9eMXKutZVqDVhhJZggE45WkpSoYcuUg==
age: 40339
X-Firefox-Spdy: h2
zenithlabs.xyz/_testimonials/js/script.js
104.21.78.2200 OK 19 kB URL HTTP/2 zenithlabs.xyz/_testimonials/js/script.js
IP 104.21.78.2:0
File type HTML document, Unicode text, UTF-8 text, with very long lines (3569)
Hash c6f8a55a6124dffdd33c413debdf51d2
16ff6091e9f1108c80c2dc54a714193a0605fc93
52093cbaedf25b43a35d9851a6c8e0985a42ffc095415848ef9a2f0aa1087eb4
GET /_testimonials/js/script.js HTTP/1.1
Host: zenithlabs.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://betterbrainperformance.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 25 Mar 2023 09:18:11 GMT
content-type: application/javascript
cache-control: public, max-age=604800
expires: Sat, 01 Apr 2023 09:18:11 GMT
last-modified: Mon, 27 Sep 2021 19:23:32 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gbDDZRK%2FuOgDYF6RnBYE9YxiOI%2FIfdiMgHtKhSWBy%2B1XOuIva%2Fl5pV6I4IffWZukOM%2BeaWWNydLszYQTokIkdnrjRQ1zKQO%2F1nTMsN6iLijSDwxbZnCUjb%2FyGutUNgqQXQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7ad610a6cd51b50c-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
zenithlabs.xyz/_testimonials/view/?site_id=12
104.21.78.2200 OK 102 kB URL HTTP/2 zenithlabs.xyz/_testimonials/view/?site_id=12
IP 104.21.78.2:0
File type JSON data\012- , ASCII text, with very long lines (10738), with no line terminators
Size 102 kB (102057 bytes)
Hash 1e2f4e737743079e16a60e9a75704d6a
a8105a4fa0804731bff7604cf10db20b313d3a3e
8a7c52095ee3792af4564b3c5a8423736ae9e95ba5da36bd4bcf10699191a1b1
GET /_testimonials/view/?site_id=12 HTTP/1.1
Host: zenithlabs.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://betterbrainperformance.com/
Origin: https://betterbrainperformance.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 25 Mar 2023 09:18:11 GMT
content-type: application/json; charset=UTF-8
access-control-allow-origin: *
access-control-allow-methods: POST
access-control-max-age: 3600
access-control-allow-headers: Content-Type, Access-Control-Allow-Headers, Authorization, X-Requested-With
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=p1qS3RABZhyzb3z5d7idtd5u6iT4UzVivwGR%2BY2870BqnpUmCrrJB1rtOUsPzekNX9s%2B4FdonKPGkKCS%2BKN6xq21CGvA8fEiG08rcn1GC9cWQ8rfzYyf1wEV13U7NU1BeQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7ad610a909d0b524-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
d39ldsmboekjvi.cloudfront.net/images/badges/gmp.png
143.204.42.114200 OK 39 kB URL HTTP/2 d39ldsmboekjvi.cloudfront.net/images/badges/gmp.png
IP 143.204.42.114:0
File type PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced\012- data
Hash b7da930c2b9d986c863d88d9a010e7bc
23db9ec69f72ef63b8bc647c8c491704aa999aaa
facde1ec12f6de29c591c513c31f739ca42ddc401def7431cb7f50cbef6f15bc
GET /images/badges/gmp.png HTTP/1.1
Host: d39ldsmboekjvi.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://betterbrainperformance.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 38923
last-modified: Thu, 17 Nov 2022 21:29:37 GMT
x-amz-version-id: GFxBehPBZxzSg8GJk.ZbT78FwR9BLFIZ
accept-ranges: bytes
server: AmazonS3
date: Sat, 25 Mar 2023 05:53:40 GMT
etag: "b7da930c2b9d986c863d88d9a010e7bc"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 bcd5dadccb0831729969c938747ff79a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: GxFmTnJoUuzCnEvv_6ndmVa-lM5z0U99j0ytUi1TURi0avmQr7pn1A==
age: 24907
X-Firefox-Spdy: h2
d39ldsmboekjvi.cloudfront.net/images/badges/ef.png
143.204.42.114200 OK 19 kB URL HTTP/2 d39ldsmboekjvi.cloudfront.net/images/badges/ef.png
IP 143.204.42.114:0
File type PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced\012- data
Hash e1c9a64811b4fddcc2bf795f96191e22
21d761ca6eda27c107c6273f113be080769d6cb3
0416762a5050872c5e86a140ca3d6520a2c0f7f791f23bb26e0751e7446d9d62
GET /images/badges/ef.png HTTP/1.1
Host: d39ldsmboekjvi.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://betterbrainperformance.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 19276
last-modified: Wed, 01 Jun 2022 18:13:45 GMT
x-amz-version-id: 5r.Nxfj0rQ09ps.mZhfhBmV9d2_JwDGH
accept-ranges: bytes
server: AmazonS3
date: Sat, 25 Mar 2023 05:53:40 GMT
etag: "e1c9a64811b4fddcc2bf795f96191e22"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 bcd5dadccb0831729969c938747ff79a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: z6mbvXs-4b8P2uUpGVvOge9KAXMG0Lm2wkR82RXTQ8qL6FLCZcCXEA==
age: 16962
X-Firefox-Spdy: h2
d39ldsmboekjvi.cloudfront.net/images/product_labels_web/Z-BRAINC13-CODE.jpg
143.204.42.114200 OK 349 kB URL HTTP/2 d39ldsmboekjvi.cloudfront.net/images/product_labels_web/Z-BRAINC13-CODE.jpg
IP 143.204.42.114:0
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1500x750, components 3\012- data
Size 349 kB (348910 bytes)
Hash 11bfc2f35ed3433ccb677e9d79c18929
a53779e87647fd79b0c8c01a307b654d0d3127c2
9c7b98d5eb86578b3b03195d8707670bdfdbff87e1925af35834106245507f32
GET /images/product_labels_web/Z-BRAINC13-CODE.jpg HTTP/1.1
Host: d39ldsmboekjvi.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://betterbrainperformance.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 348910
last-modified: Wed, 22 Jun 2022 16:27:27 GMT
x-amz-version-id: fLvyHl3sprViz_yarZMo_e74MKqZfMwB
accept-ranges: bytes
server: AmazonS3
date: Sat, 25 Mar 2023 06:16:20 GMT
etag: "11bfc2f35ed3433ccb677e9d79c18929"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 bcd5dadccb0831729969c938747ff79a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: re5_eQjQdJmCp3cNfBxy8JQsJJSQmziXdy2e90Ek8tNHmAD-I9WiFQ==
age: 10912
X-Firefox-Spdy: h2
d39ldsmboekjvi.cloudfront.net/css/uikit_zenith_sites.css
143.204.42.114200 OK 47 kB URL HTTP/2 d39ldsmboekjvi.cloudfront.net/css/uikit_zenith_sites.css
IP 143.204.42.114:0
Hash c28ad57eef1337248a4a6ffb51e820fd
a3ac38d135118b4ece9f06bbb5a49d26684e1875
a8c3e717c3eadd1b4c2f824349f16aeefd085b76a773a27d9907724b1b4ce307
GET /css/uikit_zenith_sites.css HTTP/1.1
Host: d39ldsmboekjvi.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://betterbrainperformance.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css
last-modified: Tue, 22 Feb 2022 03:17:17 GMT
x-amz-version-id: UfzQIDZH5r9R9X9gOxYnRaIGySpcRRBZ
server: AmazonS3
content-encoding: gzip
date: Sat, 25 Mar 2023 05:56:52 GMT
etag: W/"a4dc43ded5b1196e2ccac97b633ad2eb"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 bcd5dadccb0831729969c938747ff79a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 3EakTTW1eRturhcvtXqJAeeCIoktkkd_kLeNEqataNMZuGb1ncol9A==
age: 24907
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash f0f306ea49f1bd3f358f7579513e7377
c2845c696f6685a211bc040895d28ebf23fa1bc0
cda7588d5040ef3c8e83955838618a0ed0a6ee242d24abf5af697b2289fc8bdb
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 25 Mar 2023 09:18:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
192.229.221.95200 OK 471 B IP 192.229.221.95:0
Hash f91bec0a4e5b6ec5598800635807a333
58e65c61d3622379fbdfc5a3344706cdd04df398
3312157f1da8d91cfe3727fe0c61082c65d33a3fc68e691db711cdc339f7eb02
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5204
Cache-Control: max-age=156841
Content-Type: application/ocsp-response
Date: Sat, 25 Mar 2023 09:18:11 GMT
Etag: "641e69a8-1d7"
Expires: Mon, 27 Mar 2023 04:52:12 GMT
Last-Modified: Sat, 25 Mar 2023 03:25:28 GMT
Server: ECAcc (ska/F7A3)
X-Cache: HIT
Content-Length: 471
bat.bing.com/bat.js
13.107.21.200200 OK 12 kB IP 13.107.21.200:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type Unicode text, UTF-8 text, with very long lines (40607), with no line terminators
Hash 04651bf0c51742f9007b1ae2b4486dee
6ffc71fcb5db1cf0283b60150a62f2c219ac3dbd
5d7392c44731e52810337eb1a3eb3ae1ffab31b8f8d55daba20d658701604666
GET /bat.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://betterbrainperformance.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: private,max-age=1800
content-length: 11894
content-type: application/javascript
content-encoding: gzip
last-modified: Thu, 16 Feb 2023 18:31:53 GMT
accept-ranges: bytes
etag: "8072cff03442d91:0"
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 41398B43BB7A4EAEAE82BFE2577FD421 Ref B: OSL30EDGE0209 Ref C: 2023-03-25T09:18:11Z
date: Sat, 25 Mar 2023 09:18:11 GMT
X-Firefox-Spdy: h2
d39ldsmboekjvi.cloudfront.net/images/badges/bpa.png
143.204.42.114200 OK 22 kB URL HTTP/2 d39ldsmboekjvi.cloudfront.net/images/badges/bpa.png
IP 143.204.42.114:0
File type PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced\012- data
Hash 5b03d03de1fe40ad35a499ebb04bde80
1a3955e79982e828fdd3223261e462498061c214
3ef33394d38388702b5243ee6283bb8926f60f8a05ce5c8e4425360103a1dfe3
GET /images/badges/bpa.png HTTP/1.1
Host: d39ldsmboekjvi.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://betterbrainperformance.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 21977
last-modified: Wed, 01 Jun 2022 18:13:42 GMT
x-amz-version-id: 0azimArKYcCNV_S3nSzrlv1t8z9P2L9L
accept-ranges: bytes
server: AmazonS3
date: Sat, 25 Mar 2023 05:53:40 GMT
etag: "5b03d03de1fe40ad35a499ebb04bde80"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 bcd5dadccb0831729969c938747ff79a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: VMC4_jf6EhKkrxD2BcGxazQz14K_Tm9ZeG878u8rNcixa6xz2nGmHg==
age: 23539
X-Firefox-Spdy: h2
ocsp.starfieldtech.com/
192.124.249.41200 OK 1.8 kB IP 192.124.249.41:0
Hash 7983181d2439dea87aba03ea2207d08a
09315a9fd386bbab2a6a971cdad09c4502e64790
15d7aa448add3d94f640fb224664f760c3ec161e7eab7dd7c7c6886313f89436
POST / HTTP/1.1
Host: ocsp.starfieldtech.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Sat, 25 Mar 2023 09:18:11 GMT
Content-Type: application/ocsp-response
Content-Length: 1845
Connection: keep-alive
X-Sucuri-ID: 19041
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Fri, 24 Mar 2023 21:54:59 GMT
Expires: Sat, 25 Mar 2023 21:54:59 GMT
ETag: "09315a9fd386bbab2a6a971cdad09c4502e64790"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
www.google-analytics.com/analytics.js
216.58.207.206200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP 216.58.207.206:0
File type ASCII text, with very long lines (1490)
Hash ca7fbbfd120e3e329633044190bbf134
d17f81e03dd827554ddd207ea081fb46b3415445
847004cefb32f85a9cc16b0b1eb77529ff5753680c145bfcb23f651d214737db
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://betterbrainperformance.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20085
date: Sat, 25 Mar 2023 08:05:11 GMT
expires: Sat, 25 Mar 2023 10:05:11 GMT
cache-control: public, max-age=7200
age: 4380
last-modified: Tue, 10 Jan 2023 21:29:14 GMT
content-type: text/javascript
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
d2w2as8qpte6k1.cloudfront.net/vsl/hair-popup1.jpg
143.204.42.189200 OK 12 kB URL HTTP/2 d2w2as8qpte6k1.cloudfront.net/vsl/hair-popup1.jpg
IP 143.204.42.189:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 600x420, components 3\012- data
Hash 9cae6cfc95a46e5aad79686e8888d059
c354abb9e4deaa75c7ae1a0888ab920cca27543f
c99d0785937b9135b399704a8c50b9c8c67211500c609d89ae3543d4b62d58aa
GET /vsl/hair-popup1.jpg HTTP/1.1
Host: d2w2as8qpte6k1.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://betterbrainperformance.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/jpeg
content-length: 12173
last-modified: Fri, 23 Nov 2018 20:26:29 GMT
x-amz-meta-s3b-last-modified: 20181123T200403Z
accept-ranges: bytes
server: AmazonS3
date: Sat, 25 Mar 2023 06:16:20 GMT
etag: "9cae6cfc95a46e5aad79686e8888d059"
x-cache: Hit from cloudfront
via: 1.1 a034aae43a19aef875fa395182990970.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: XMKfS5EGKuAyDnUt8RdHKjUiSlBxRbVibmcWkXYct5il8o0aFfJK2g==
age: 10912
X-Firefox-Spdy: h2
amplify.outbrain.com/cp/obtp.js
23.38.201.81200 OK 6.3 kB URL HTTP/1.1 amplify.outbrain.com/cp/obtp.js
IP 23.38.201.81:0
File type ASCII text, with very long lines (19718), with no line terminators
Hash e072c2eeb57e57e4a307195a51fc750a
3109ce8e5ccba038646b6ddc290f63a2d8edd98a
64f77a0e6f8760825a06da7538a6ea06a4723478e1b7895078a39f2671456138
GET /cp/obtp.js HTTP/1.1
Host: amplify.outbrain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://betterbrainperformance.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Type: application/x-javascript
ETag: "d19ad32008c4bc3916ea7137df776b3d:1678969189.53513"
Last-Modified: Thu, 16 Mar 2023 09:30:47 GMT
Server: AkamaiNetStorage
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=1200
Expires: Sat, 25 Mar 2023 09:38:11 GMT
Date: Sat, 25 Mar 2023 09:18:11 GMT
Content-Length: 6278
Connection: keep-alive
X-RG: EU
X-CC: NO
d39ldsmboekjvi.cloudfront.net/images/certified.png
143.204.42.114200 OK 927 B URL HTTP/2 d39ldsmboekjvi.cloudfront.net/images/certified.png
IP 143.204.42.114:0
File type PNG image data, 1 x 1, 8-bit/color RGB, non-interlaced\012- data
Hash ccb1526a4e3aa3293076d12422be69a7
386e285c1c5cece52fe6c36c0735a42a5e4c645c
0fb521cbdc0189975b190f5d149cd68b89b5d04cd3cb42f493fed7079bfbd7bd
GET /images/certified.png HTTP/1.1
Host: d39ldsmboekjvi.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://betterbrainperformance.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 927
last-modified: Fri, 29 Apr 2022 13:15:56 GMT
x-amz-version-id: Te6iIZq.T369aj4SJ31VxQS0hlKTXtDq
accept-ranges: bytes
server: AmazonS3
date: Sat, 25 Mar 2023 05:53:41 GMT
etag: "ccb1526a4e3aa3293076d12422be69a7"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 bcd5dadccb0831729969c938747ff79a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: GVyIXT869wfBLHRJc8UDn8CL4O6HzutdnbZ9OfHkt95TNLuMoUWyhA==
age: 22858
X-Firefox-Spdy: h2
maxcdn.bootstrapcdn.com/bootstrap/3.3.6/css/bootstrap.min.css
104.18.10.207200 OK 25 kB URL HTTP/2 maxcdn.bootstrapcdn.com/bootstrap/3.3.6/css/bootstrap.min.css
IP 104.18.10.207:0
File type ASCII text, with very long lines (65371)
Hash 06d3d15eebb0ebc2c8ad904fba2f1336
a48888e0b5c4072e832c3e060d529ce652e025a2
eae44e21fa099f7907c8e418f35b7d7e169f4271d40b13c0ae3f565593be734b
GET /bootstrap/3.3.6/css/bootstrap.min.css HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://betterbrainperformance.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 25 Mar 2023 09:18:10 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
etag: W/"2f624089c65f12185e79925bc5a7fc42"
last-modified: Mon, 25 Jan 2021 22:03:59 GMT
cdn-cachedat: 02/17/2022 20:27:53
cdn-proxyver: 1.02
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 860
cdn-status: 200
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-requestid: 441a5c346e6138207e493340368ec0b9
cdn-cache: HIT
cf-cache-status: HIT
age: 25182251
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 7ad610a5d92bb503-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
d39ldsmboekjvi.cloudfront.net/images/badges/ngmo.png
143.204.42.114200 OK 22 kB URL HTTP/2 d39ldsmboekjvi.cloudfront.net/images/badges/ngmo.png
IP 143.204.42.114:0
Hash af4f82f7660d4499ee91a48a18a52e9c
3572e031deb56c63690b0308db1c0b8aff23851c
0ca9ce6f8c15093f365923937d6c182df5d6b9a76a9b430818788b6cf612066d
GET /images/badges/ngmo.png HTTP/1.1
Host: d39ldsmboekjvi.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://betterbrainperformance.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 18151
last-modified: Wed, 01 Jun 2022 18:13:49 GMT
x-amz-version-id: 4HeBB4nlCf.pHNts4ns.xVYpPcwOaC1s
accept-ranges: bytes
server: AmazonS3
date: Sat, 25 Mar 2023 09:18:11 GMT
etag: "e7b7f5606aaa08ee8c8c140ec6e1deb6"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 bcd5dadccb0831729969c938747ff79a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: kCFGWP-dkhHYEiictxkb-PJq-_kGzAzRQBOupvKCjii4Ox0EAxmVLg==
age: 9950
X-Firefox-Spdy: h2
d39ldsmboekjvi.cloudfront.net/images/logo_vitamin_angels.png
143.204.42.114200 OK 13 kB URL HTTP/2 d39ldsmboekjvi.cloudfront.net/images/logo_vitamin_angels.png
IP 143.204.42.114:0
File type PNG image data, 519 x 518, 8-bit/color RGBA, non-interlaced\012- data
Hash 267abba3ee756561fc089a385784366c
9d442cd197817822f6589474492188a600abf978
8b4394abaeaee8b62be442b567fd9cf0759d17af0a90353962fe9e50c72daf51
GET /images/logo_vitamin_angels.png HTTP/1.1
Host: d39ldsmboekjvi.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://betterbrainperformance.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 12686
last-modified: Tue, 03 Mar 2020 18:35:37 GMT
x-amz-version-id: OuKUrtD6HwXd0PmjkmylxPJLJBcyapi.
accept-ranges: bytes
server: AmazonS3
date: Sat, 25 Mar 2023 09:18:11 GMT
etag: "267abba3ee756561fc089a385784366c"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 bcd5dadccb0831729969c938747ff79a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 4HninFxLJpHvSLdJaiFLNwoEqKIblicUE3ORQIhDWoSKcPBYpEpKgg==
age: 10177
X-Firefox-Spdy: h2
d39ldsmboekjvi.cloudfront.net/images/intl_shipping.jpg
143.204.42.114200 OK 13 kB URL HTTP/2 d39ldsmboekjvi.cloudfront.net/images/intl_shipping.jpg
IP 143.204.42.114:0
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=\302\251ileezhun - stock.adobe.com], baseline, precision 8, 300x100, components 3\012- data
Hash 436cfd316279d6abfa9b81feecc0b4aa
f37ae836b9e2a47e0352feec56e9f30b27e86fe3
885845a9670614c0b8dbbf100d2ba0378921667178048afdb42b19d43d2c10ca
GET /images/intl_shipping.jpg HTTP/1.1
Host: d39ldsmboekjvi.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://betterbrainperformance.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 13304
last-modified: Thu, 28 Feb 2019 22:22:54 GMT
x-amz-version-id: gtN4o4onoB33_wgnNK9VywPUIf4t56l_
accept-ranges: bytes
server: AmazonS3
date: Sat, 25 Mar 2023 09:18:11 GMT
etag: "436cfd316279d6abfa9b81feecc0b4aa"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 bcd5dadccb0831729969c938747ff79a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: Ysveb8N8EwaUcVeOoVGkpDBHW8eZSsRldO8zgBmGwQtYDXS-e6B1bg==
age: 4023
X-Firefox-Spdy: h2
d39ldsmboekjvi.cloudfront.net/js/global.js
143.204.42.114200 OK 29 kB URL HTTP/2 d39ldsmboekjvi.cloudfront.net/js/global.js
IP 143.204.42.114:0
File type HTML document, ASCII text, with very long lines (62906)
Hash 31cca0fad80efae0cf6e51b3d0044fc4
74421ea564476ca2e177c0c179a7524ee5471578
168b52f4bb52d0f92da2442a993e2c0e78d8778471cedf314f9f909363f14f78
GET /js/global.js HTTP/1.1
Host: d39ldsmboekjvi.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://betterbrainperformance.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
last-modified: Wed, 04 Mar 2020 20:38:43 GMT
x-amz-version-id: bmHLfsPez_HWSYfR3Krj0Af.V9ixTXJx
server: AmazonS3
content-encoding: gzip
date: Fri, 24 Mar 2023 13:15:11 GMT
etag: W/"0a1b6db2892f7f2acd5fef15f9fe3468"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 bcd5dadccb0831729969c938747ff79a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: Xn7wnWsLv_sHH0WdjCi7v6Mf7YAYYnZHa1YjE0J7svvk-fusifVV2w==
age: 78671
X-Firefox-Spdy: h2
d39ldsmboekjvi.cloudfront.net/images/vitamin-angels-vsl-lfsl.jpg
143.204.42.114200 OK 368 kB URL HTTP/2 d39ldsmboekjvi.cloudfront.net/images/vitamin-angels-vsl-lfsl.jpg
IP 143.204.42.114:0
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 600x600, components 3\012- data
Size 368 kB (367952 bytes)
Hash 0d6852179e829463aa3d4f0f118e5f53
7b0098a4bd87c3c1067eddff5218ac815b933219
d28c0dd1d6d509daf8e3333f4ae83e732d9a95ee1986bed993cbed2a18e370cd
GET /images/vitamin-angels-vsl-lfsl.jpg HTTP/1.1
Host: d39ldsmboekjvi.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://betterbrainperformance.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 367952
last-modified: Wed, 04 Mar 2020 18:14:10 GMT
x-amz-version-id: oc2xwqc8xIVaaxoh4kVHs4xY1OdBLDGp
accept-ranges: bytes
server: AmazonS3
date: Sat, 25 Mar 2023 09:18:11 GMT
etag: "0d6852179e829463aa3d4f0f118e5f53"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 bcd5dadccb0831729969c938747ff79a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: YPuOVL7OkJvp2OgYNL9kFFjIdQwf9pP9ZknABEOyhg1de-YPNCdbKg==
age: 3216
X-Firefox-Spdy: h2
d39ldsmboekjvi.cloudfront.net/images/badges/bgf.png
143.204.42.114200 OK 10 kB URL HTTP/2 d39ldsmboekjvi.cloudfront.net/images/badges/bgf.png
IP 143.204.42.114:0
File type PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced\012- data
Hash 1a339f8416769bec76ea59f8dfd8471a
5806e4d9b6d9a259bfec7da3acb718ff43fa727f
1a3bbc136565839f61660daacc232d925e00c7624fb708f52574827331c10b48
GET /images/badges/bgf.png HTTP/1.1
Host: d39ldsmboekjvi.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://betterbrainperformance.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 10166
last-modified: Fri, 10 Jun 2022 16:07:51 GMT
x-amz-version-id: BP_Rs4AAndKeZGxQBP_YrdM4vRrvNXxd
accept-ranges: bytes
server: AmazonS3
date: Sat, 25 Mar 2023 09:18:11 GMT
etag: "1a339f8416769bec76ea59f8dfd8471a"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 bcd5dadccb0831729969c938747ff79a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: K1u4UOfzG6ahvn_pzISP5QhYcFJrbYkanPByrumTx-tQ3NJ8rF5zhw==
age: 4023
X-Firefox-Spdy: h2
www.google-analytics.com/j/collect?v=1&_v=j99&a=1536990752&t=pageview&_s=1&dl=https%3A%2F%2Fbetterbrainperformance.com%2F%3Ftid%3D1027ec93256c16abc9447f2e2b3452&dr=&ul=en-us&de=UTF-8&dt=Zenith%20Brain%20C-13%C2%AE%20-%20Official%20Website&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=YGBACEABBAAAACABI~&jid=9358917&gjid=361365849&cid=421320538.1679735905&tid=UA-156185630-1&_gid=705478701.1679735905&_r=1&_slc=1>m=45He33m0n81N3HNC48&z=268207064
216.58.207.206200 OK 4 B URL HTTP/2 www.google-analytics.com/j/collect?v=1&_v=j99&a=1536990752&t=pageview&_s=1&dl=https%3A%2F%2Fbetterbrainperformance.com%2F%3Ftid%3D1027ec93256c16abc9447f2e2b3452&dr=&ul=en-us&de=UTF-8&dt=Zenith%20Brain%20C-13%C2%AE%20-%20Official%20Website&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=YGBACEABBAAAACABI~&jid=9358917&gjid=361365849&cid=421320538.1679735905&tid=UA-156185630-1&_gid=705478701.1679735905&_r=1&_slc=1>m=45He33m0n81N3HNC48&z=268207064
IP 216.58.207.206:0
File type ASCII text, with no line terminators
Hash 9e92e190700c1af4539b40c2171320a9
209bcdb79e6067b51091ce8586d4b977f25b67d8
aec60bc104db041b1512185839f18f52986df7e569e5445f740dd60f763fbca8
POST /j/collect?v=1&_v=j99&a=1536990752&t=pageview&_s=1&dl=https%3A%2F%2Fbetterbrainperformance.com%2F%3Ftid%3D1027ec93256c16abc9447f2e2b3452&dr=&ul=en-us&de=UTF-8&dt=Zenith%20Brain%20C-13%C2%AE%20-%20Official%20Website&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=YGBACEABBAAAACABI~&jid=9358917&gjid=361365849&cid=421320538.1679735905&tid=UA-156185630-1&_gid=705478701.1679735905&_r=1&_slc=1>m=45He33m0n81N3HNC48&z=268207064 HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://betterbrainperformance.com
Connection: keep-alive
Referer: https://betterbrainperformance.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://betterbrainperformance.com
date: Sat, 25 Mar 2023 09:18:11 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Montserrat:400,600
172.217.21.170200 OK 26 kB URL HTTP/2 fonts.googleapis.com/css?family=Montserrat:400,600
IP 172.217.21.170:0
Hash 043acbe08b1a3cc26dd268d7ac399090
30cba13d138eecc4a6fa69ff6f742480e4b25c2b
3c4a3df1b563e3a57b90e4fc58507cbf252fa30359f44e06b2c1f313998eb936
GET /css?family=Montserrat:400,600 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://betterbrainperformance.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 25 Mar 2023 09:18:11 GMT
date: Sat, 25 Mar 2023 09:18:11 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
d39ldsmboekjvi.cloudfront.net/images/badges/nf.png
143.204.42.114200 OK 15 kB URL HTTP/2 d39ldsmboekjvi.cloudfront.net/images/badges/nf.png
IP 143.204.42.114:0
File type PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced\012- data
Hash 428a86ca4a94c3d724eadc3d98e672ce
40198c262ffd91eacf7b5eb3fbbb1f97ffea3da3
8ab0f11fbeb343ffe1b5e199c6b1941239f33d551f82aac838983c1b2bf32f6e
GET /images/badges/nf.png HTTP/1.1
Host: d39ldsmboekjvi.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://betterbrainperformance.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 15219
last-modified: Wed, 01 Jun 2022 18:13:48 GMT
x-amz-version-id: fZ8EbMs6OE0Iun4oDVfKqV8w_AM2Epwd
accept-ranges: bytes
server: AmazonS3
date: Sat, 25 Mar 2023 09:18:11 GMT
etag: "428a86ca4a94c3d724eadc3d98e672ce"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 bcd5dadccb0831729969c938747ff79a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: j3RheSSYluuOTGswHzYIFAjXFHxPrB8KrWeSR5qxYL3du-Vx0F5ttw==
age: 1335
X-Firefox-Spdy: h2
d39ldsmboekjvi.cloudfront.net/images/icon-sound-white-left.png
143.204.42.114200 OK 2.7 kB URL HTTP/2 d39ldsmboekjvi.cloudfront.net/images/icon-sound-white-left.png
IP 143.204.42.114:0
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 2860a46a929a34328b4dc8eea3a3158e
27cfd962ae4e39d18fcbd9af088dc2060cbfac3c
104d58ef6836f59af39cc368ca44d02ee5d24e96f4c66f9381a7a8d61fbeb23a
GET /images/icon-sound-white-left.png HTTP/1.1
Host: d39ldsmboekjvi.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://betterbrainperformance.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 2661
last-modified: Fri, 19 Mar 2021 17:19:56 GMT
x-amz-version-id: XEnvvJY0CwpW_iyy4sEwFQNxvWcegx7T
accept-ranges: bytes
server: AmazonS3
date: Sat, 25 Mar 2023 09:18:11 GMT
etag: "2860a46a929a34328b4dc8eea3a3158e"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 bcd5dadccb0831729969c938747ff79a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: Lnzs7Z-SGkuzrqaUzLe-XCVdn67DgYLxrLkfSRQbab2j0f4eVzK0bw==
age: 1335
X-Firefox-Spdy: h2
d39ldsmboekjvi.cloudfront.net/images/dr-ryan-shelton-overlay.png
143.204.42.114200 OK 13 kB URL HTTP/2 d39ldsmboekjvi.cloudfront.net/images/dr-ryan-shelton-overlay.png
IP 143.204.42.114:0
File type PNG image data, 579 x 129, 8-bit/color RGBA, non-interlaced\012- data
Hash 446ef616ec92d84ced503824ce0bc3ed
0c69fb6c7ebef35c017f44d2bc1e60b632d51b6e
b45a61b6311dfb0b72551f2a1f5eca1b372b14f46c0c96830b15c95aaf388e17
GET /images/dr-ryan-shelton-overlay.png HTTP/1.1
Host: d39ldsmboekjvi.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://betterbrainperformance.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 12678
last-modified: Tue, 20 Nov 2018 01:46:02 GMT
x-amz-meta-s3b-last-modified: 20181120T014554Z
x-amz-version-id: LBbNwy_30csW1HuPkd6YbyClMjReAbFh
accept-ranges: bytes
server: AmazonS3
date: Sat, 25 Mar 2023 09:18:11 GMT
etag: "446ef616ec92d84ced503824ce0bc3ed"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 bcd5dadccb0831729969c938747ff79a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: ntr931QdXN5PDPIzrO5AJoxfbMxsTSdAo0kzebeYODhRvJuL_56u2g==
age: 1335
X-Firefox-Spdy: h2
d39ldsmboekjvi.cloudfront.net/images/badges/d-f.png
143.204.42.114200 OK 10 kB URL HTTP/2 d39ldsmboekjvi.cloudfront.net/images/badges/d-f.png
IP 143.204.42.114:0
File type gzip compressed data, max compression\012- data
Hash dc771139e7a3f33186a7c8edbc6d156a
2bbdffc833ac9885d267c47240dadd2737b11db7
8e6b103a4904d4b62a62e0429c3466e4e6d4758bc4b959703e7f2dae8335faf3
GET /images/badges/d-f.png HTTP/1.1
Host: d39ldsmboekjvi.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://betterbrainperformance.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 9832
last-modified: Fri, 10 Jun 2022 16:07:52 GMT
x-amz-version-id: cJoh1SrGbxog2W_25PAtTsADFCFVjreT
accept-ranges: bytes
server: AmazonS3
date: Sat, 25 Mar 2023 09:18:11 GMT
etag: "f343e39e17123c807aa619b909fdf30d"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 bcd5dadccb0831729969c938747ff79a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 4CigX4MY_qpHgVS1SwiF_duIkGGItisw0BqIwvzGeqaAU_Q_lb-cAg==
age: 8846
X-Firefox-Spdy: h2
bat.bing.com/action/0?ti=56323860&tm=gtm002&Ver=2&mid=55133b92-24b6-4cea-84af-63cf6aebc3e1&sid=fe9288e0caed11ed8d7f5b60ec58d3e7&vid=fe928540caed11edaa6453717854ce43&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=Zenith%20Brain%20C-13%C2%AE%20-%20Official%20Website&p=https%3A%2F%2Fbetterbrainperformance.com%2F%3Ftid%3D1027ec93256c16abc9447f2e2b3452&r=<=1979&evt=pageLoad&sv=1&rn=417497
13.107.21.200204 No Content 0 B URL HTTP/2 bat.bing.com/action/0?ti=56323860&tm=gtm002&Ver=2&mid=55133b92-24b6-4cea-84af-63cf6aebc3e1&sid=fe9288e0caed11ed8d7f5b60ec58d3e7&vid=fe928540caed11edaa6453717854ce43&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=Zenith%20Brain%20C-13%C2%AE%20-%20Official%20Website&p=https%3A%2F%2Fbetterbrainperformance.com%2F%3Ftid%3D1027ec93256c16abc9447f2e2b3452&r=<=1979&evt=pageLoad&sv=1&rn=417497
IP 13.107.21.200:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /action/0?ti=56323860&tm=gtm002&Ver=2&mid=55133b92-24b6-4cea-84af-63cf6aebc3e1&sid=fe9288e0caed11ed8d7f5b60ec58d3e7&vid=fe928540caed11edaa6453717854ce43&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=Zenith%20Brain%20C-13%C2%AE%20-%20Official%20Website&p=https%3A%2F%2Fbetterbrainperformance.com%2F%3Ftid%3D1027ec93256c16abc9447f2e2b3452&r=<=1979&evt=pageLoad&sv=1&rn=417497 HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://betterbrainperformance.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
cache-control: no-cache, must-revalidate
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
set-cookie: MUID=05176574587967C8304777AB598C66AA; domain=.bing.com; expires=Thu, 18-Apr-2024 09:18:11 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 05F66B75C78E4B00A04AF4EC1BA7FB13 Ref B: OSL30EDGE0209 Ref C: 2023-03-25T09:18:11Z
date: Sat, 25 Mar 2023 09:18:11 GMT
X-Firefox-Spdy: h2
ocsp.digicert.com/
192.229.221.95200 OK 471 B IP 192.229.221.95:0
Hash f91bec0a4e5b6ec5598800635807a333
58e65c61d3622379fbdfc5a3344706cdd04df398
3312157f1da8d91cfe3727fe0c61082c65d33a3fc68e691db711cdc339f7eb02
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5021
Cache-Control: max-age=156658
Content-Type: application/ocsp-response
Date: Sat, 25 Mar 2023 09:18:11 GMT
Etag: "641e69a8-1d7"
Expires: Mon, 27 Mar 2023 04:49:09 GMT
Last-Modified: Sat, 25 Mar 2023 03:25:28 GMT
Server: ECAcc (ska/F775)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash f0f306ea49f1bd3f358f7579513e7377
c2845c696f6685a211bc040895d28ebf23fa1bc0
cda7588d5040ef3c8e83955838618a0ed0a6ee242d24abf5af697b2289fc8bdb
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 25 Mar 2023 09:18:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.sectigo.com/
104.18.32.68200 OK 472 B IP 104.18.32.68:0
Hash b6640f46c1a9ef8088e4f877f3fece48
00c37eed832d3e253a4195f8621d27d835662199
79a9f6c485156ed09a7f26768aff3db3e092ef6f713720f5b8a347a4815b2ce4
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 25 Mar 2023 09:18:11 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Wed, 22 Mar 2023 10:39:18 GMT
Expires: Wed, 29 Mar 2023 10:39:17 GMT
Etag: "00c37eed832d3e253a4195f8621d27d835662199"
Cache-Control: max-age=349865,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7ad610ac9ba5b52d-OSL
d39ldsmboekjvi.cloudfront.net/images/testimonials_real_people_real_results.png
143.204.42.114200 OK 90 kB URL HTTP/2 d39ldsmboekjvi.cloudfront.net/images/testimonials_real_people_real_results.png
IP 143.204.42.114:0
File type PNG image data, 774 x 70, 8-bit/color RGB, non-interlaced\012- data
Hash 56b78c68a45c2bd964a2e2df7bfaa493
024d51e8160b4bdebf7467ccd353d0bab1aafa72
b6aff7810136271105ab2c807f1e6d624a49904dee9206c41ad07ae5c5fe4f44
GET /images/testimonials_real_people_real_results.png HTTP/1.1
Host: d39ldsmboekjvi.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://betterbrainperformance.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 89998
last-modified: Mon, 03 May 2021 16:15:52 GMT
x-amz-version-id: Svrofxew.CxAJZiIXYwYP0EvIWvxTEWX
accept-ranges: bytes
server: AmazonS3
date: Fri, 24 Mar 2023 13:15:14 GMT
etag: "56b78c68a45c2bd964a2e2df7bfaa493"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 bcd5dadccb0831729969c938747ff79a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 2RXl7Nbp6vf0Vn_ETxAQxCuoThLj3FmkGh3qgb2xfoM8iwOCKrGuzA==
age: 83642
X-Firefox-Spdy: h2
bat.bing.com/p/action/56323860.js
13.107.21.200204 No Content 0 B URL HTTP/2 bat.bing.com/p/action/56323860.js
IP 13.107.21.200:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /p/action/56323860.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://betterbrainperformance.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
cache-control: private,max-age=1800
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 7380494C33D34AF2BA22F890BB268EF4 Ref B: OSL30EDGE0209 Ref C: 2023-03-25T09:18:11Z
date: Sat, 25 Mar 2023 09:18:11 GMT
X-Firefox-Spdy: h2
script.hotjar.com/modules.936575bc1767492884db.js
54.230.111.93200 OK 69 kB URL HTTP/2 script.hotjar.com/modules.936575bc1767492884db.js
IP 54.230.111.93:0
File type Unicode text, UTF-8 text, with very long lines (50842)
Hash d6165b54ac1bedfdf423823cc05855ac
c59efe41c8303c4954af5b4fda66b06c54ca30f3
4008352d5fd357e2dc85ca061c490b16707e690bf74489ccb0cb72d2a792c701
GET /modules.936575bc1767492884db.js HTTP/1.1
Host: script.hotjar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://betterbrainperformance.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
content-length: 69056
date: Fri, 24 Mar 2023 15:40:07 GMT
accept-ranges: bytes
access-control-allow-origin: *
cache-control: max-age=31536000
content-encoding: br
cross-origin-resource-policy: cross-origin
etag: "d6165b54ac1bedfdf423823cc05855ac"
last-modified: Fri, 24 Mar 2023 15:39:54 GMT
strict-transport-security: max-age=2592000; includeSubDomains
x-content-type-options: nosniff
x-robots-tag: none
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 04c4f064943f75498361739eb063cb7a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 9mdHwgs3p4KDmwdO0o8NA_J76m_dhpveyzE-Jcr91g5TOe4d9oPeEA==
age: 63485
X-Firefox-Spdy: h2
pro.ip-api.com/json/?fields=status,message,countryCode,regionName&key=5vWn1Ta5eS1fVrD
51.77.64.70200 OK 66 B URL HTTP/1.1 pro.ip-api.com/json/?fields=status,message,countryCode,regionName&key=5vWn1Ta5eS1fVrD
IP 51.77.64.70:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 187b25317d9dc668ae1b3791df28e465
bfa44d2b55fcf75ef4bd88559fda297ee45e2312
0b6cd5b7c92567d4117e8eaac50933cc01ffdfeaf20457fa89623c653fe8c132
GET /json/?fields=status,message,countryCode,regionName&key=5vWn1Ta5eS1fVrD HTTP/1.1
Host: pro.ip-api.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://betterbrainperformance.com
Connection: keep-alive
Referer: https://betterbrainperformance.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Content-Type: application/json; charset=utf-8
Date: Sat, 25 Mar 2023 09:18:11 GMT
Content-Length: 66
cdn.taboola.com/libtrc/unip/1270828/tfa.js
151.101.193.44200 OK 18 kB URL HTTP/2 cdn.taboola.com/libtrc/unip/1270828/tfa.js
IP 151.101.193.44:0
File type ASCII text, with very long lines (59020)
Hash 274a3c4cbe8aca2016d0e2741dde897d
b90335bc192de63a3fbc77f2b4c555f5b219b7a6
44dcf6b256e0b222a9a90ec5d69177706e42b3fb68d96d1476f689dd0f1b407b
GET /libtrc/unip/1270828/tfa.js HTTP/1.1
Host: cdn.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://betterbrainperformance.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: TsX3h8c1L41Qlh/tm4XWYIE8+Y5uqovtOLl7/GKT2GfPgXhoz7KsmPA+lw7OuTbT1oOXMSUdWSM=
x-amz-request-id: E3VA0EPRPHRZ8ANS
x-amz-replication-status: COMPLETED
last-modified: Sun, 19 Mar 2023 11:43:31 GMT
etag: "24e05293c18380a9169dceba3c1c62ec"
x-amz-server-side-encryption: AES256
x-amz-version-id: TbHiU66jrqQaKk5lNM1i0lO0D3Kvx92m
content-type: application/javascript; charset=utf-8
server: AmazonS3
content-encoding: gzip
accept-ranges: bytes
date: Sat, 25 Mar 2023 09:18:12 GMT
via: 1.1 varnish
age: 0
x-served-by: cache-bma1656-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1679735892.855309,VS0,VE193
cache-control: private,max-age=14401
vary: Accept-Encoding
abp: 17
access-control-allow-origin: *
content-length: 18167
X-Firefox-Spdy: h2
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash b62c9b9530dd66bb7f03ba2ce3d835da
bf8560766de78dd925e395f59610ab2f1335e565
62a45c1bedd4241448ab43b535518e423b0500901328b3a0b984d758c9b0540d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "62A45C1BEDD4241448AB43B535518E423B0500901328B3A0B984D758C9B0540D"
Last-Modified: Fri, 24 Mar 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5319
Expires: Sat, 25 Mar 2023 10:46:51 GMT
Date: Sat, 25 Mar 2023 09:18:12 GMT
Connection: keep-alive
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash b62c9b9530dd66bb7f03ba2ce3d835da
bf8560766de78dd925e395f59610ab2f1335e565
62a45c1bedd4241448ab43b535518e423b0500901328b3a0b984d758c9b0540d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "62A45C1BEDD4241448AB43B535518E423B0500901328B3A0B984D758C9B0540D"
Last-Modified: Fri, 24 Mar 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5319
Expires: Sat, 25 Mar 2023 10:46:51 GMT
Date: Sat, 25 Mar 2023 09:18:12 GMT
Connection: keep-alive
d39ldsmboekjvi.cloudfront.net/images/badges/mag.png
143.204.42.114200 OK 8.6 kB URL HTTP/2 d39ldsmboekjvi.cloudfront.net/images/badges/mag.png
IP 143.204.42.114:0
File type PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced\012- data
Hash a74715554fca43cf777c0d17fc0ff6d1
47c2e1b82e348cb693a429f4f0c1830eefb2e3f9
05c5c74be093b9b85a9ae8fcd407c537b6ec5b1719aba7408d28a758072509fc
GET /images/badges/mag.png HTTP/1.1
Host: d39ldsmboekjvi.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://betterbrainperformance.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 8622
last-modified: Fri, 10 Jun 2022 16:07:53 GMT
x-amz-version-id: U1j40scFkhP_l1_9UjiWUf57uF8.9Z1i
accept-ranges: bytes
server: AmazonS3
date: Sat, 25 Mar 2023 09:18:13 GMT
etag: "a74715554fca43cf777c0d17fc0ff6d1"
vary: Accept-Encoding
x-cache: RefreshHit from cloudfront
via: 1.1 bcd5dadccb0831729969c938747ff79a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: iU1uFa4UKOzz7PU9oZOAuto-GumugggnPdb1Iko-1x2tT4ltfvggfQ==
X-Firefox-Spdy: h2
cdn.taboola.com/libtrc/unip/1498912/tfa.js
151.101.193.44200 OK 18 kB URL HTTP/2 cdn.taboola.com/libtrc/unip/1498912/tfa.js
IP 151.101.193.44:0
File type ASCII text, with very long lines (59007)
Hash b698faf7a2e4958e2de47f939c04a203
0d44fe9d366157f833066c1470e597b4ff0f78b2
970d363f92f7d458e122331a408cfcfdf43d9a4f22c4ba41123bcf971dee066b
GET /libtrc/unip/1498912/tfa.js HTTP/1.1
Host: cdn.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://betterbrainperformance.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: SoQYKSz6eHZt5yeHxUvjKQ2W/t5pDLld5w9OsbS0v0SE6MuCToZYpT4oK/p/bmYH2dWtF9AnGDU=
x-amz-request-id: PHTMV6TG2781D1JH
x-amz-replication-status: COMPLETED
last-modified: Sun, 19 Mar 2023 11:43:07 GMT
etag: "60f39d5ae5b03634df4a1dc48362518c"
x-amz-server-side-encryption: AES256
x-amz-version-id: WJQ7Iyy5826qt4ZXUkgI5cKECZMg3L8C
content-type: application/javascript; charset=utf-8
server: AmazonS3
content-encoding: gzip
accept-ranges: bytes
date: Sat, 25 Mar 2023 09:18:12 GMT
via: 1.1 varnish
age: 0
x-served-by: cache-bma1656-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1679735892.855563,VS0,VE219
cache-control: private,max-age=14401
vary: Accept-Encoding
abp: 17
access-control-allow-origin: *
content-length: 18158
X-Firefox-Spdy: h2
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash b62c9b9530dd66bb7f03ba2ce3d835da
bf8560766de78dd925e395f59610ab2f1335e565
62a45c1bedd4241448ab43b535518e423b0500901328b3a0b984d758c9b0540d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "62A45C1BEDD4241448AB43B535518E423B0500901328B3A0B984D758C9B0540D"
Last-Modified: Fri, 24 Mar 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5319
Expires: Sat, 25 Mar 2023 10:46:51 GMT
Date: Sat, 25 Mar 2023 09:18:12 GMT
Connection: keep-alive
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash b62c9b9530dd66bb7f03ba2ce3d835da
bf8560766de78dd925e395f59610ab2f1335e565
62a45c1bedd4241448ab43b535518e423b0500901328b3a0b984d758c9b0540d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "62A45C1BEDD4241448AB43B535518E423B0500901328B3A0B984D758C9B0540D"
Last-Modified: Fri, 24 Mar 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5319
Expires: Sat, 25 Mar 2023 10:46:51 GMT
Date: Sat, 25 Mar 2023 09:18:12 GMT
Connection: keep-alive
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash b62c9b9530dd66bb7f03ba2ce3d835da
bf8560766de78dd925e395f59610ab2f1335e565
62a45c1bedd4241448ab43b535518e423b0500901328b3a0b984d758c9b0540d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "62A45C1BEDD4241448AB43B535518E423B0500901328B3A0B984D758C9B0540D"
Last-Modified: Fri, 24 Mar 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5319
Expires: Sat, 25 Mar 2023 10:46:51 GMT
Date: Sat, 25 Mar 2023 09:18:12 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fca67e232-d39a-48ac-a0be-316741df0c53.jpeg
34.120.237.76200 OK 5.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fca67e232-d39a-48ac-a0be-316741df0c53.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash aecd210f66f83c73c3450d047ae7448a
d68861e96e12e8a3f293dbae8b687f05b6e15afb
22b69c41c56e5538d91f824d5dc2e63ab5563f99ae8e429c9166f4b397cacd0e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fca67e232-d39a-48ac-a0be-316741df0c53.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5296
x-amzn-requestid: 11fdf0c8-244c-4cd5-bfa7-4c77d777174f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CTiuzEqkIAMFXOw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641e17f8-5c241d63598dbf595b54ead5;Sampled=0
x-amzn-remapped-date: Fri, 24 Mar 2023 21:36:56 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: b1KWFmKdRQ4DU0v5JmC7AJatpv2B5FAHKVWL7pFiyh13fqYDA5qydA==
via: 1.1 b5695e36d7fbc522ece27885d73757ae.cloudfront.net (CloudFront), 1.1 deaaf0548506de20925615eb51a7ea7e.cloudfront.net (CloudFront), 1.1 google
date: Fri, 24 Mar 2023 21:57:13 GMT
age: 40859
etag: "d68861e96e12e8a3f293dbae8b687f05b6e15afb"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
d39ldsmboekjvi.cloudfront.net/images/verified-buyer.svg
143.204.42.114200 OK 4.7 kB URL HTTP/2 d39ldsmboekjvi.cloudfront.net/images/verified-buyer.svg
IP 143.204.42.114:0
Hash f457454999f334c4bda99ae0e35465d9
296ddc2de3311fed3442fd0668d5fec1958e8988
ed920883e0ba6da30d83f2c719df3cda7f1c60ee05bcf9f4c0ca8215be38f877
GET /images/verified-buyer.svg HTTP/1.1
Host: d39ldsmboekjvi.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://betterbrainperformance.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
last-modified: Thu, 15 Apr 2021 17:56:43 GMT
x-amz-version-id: p_xHlXAtcWZ3rqhR0u8jpfTwEazkXjVf
server: AmazonS3
content-encoding: gzip
date: Fri, 24 Mar 2023 13:15:14 GMT
etag: W/"e77287b71241ba8e06b56ed233bbc0cf"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 bcd5dadccb0831729969c938747ff79a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: mA_CoMNU2sYbZ9G3IdUTGARAuCvo3u1Vj7MINBRUZZFq_DClRjos4A==
age: 83642
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fee780ea6-5b5e-419f-916d-42d0f5e1912a.jpeg
34.120.237.76200 OK 9.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fee780ea6-5b5e-419f-916d-42d0f5e1912a.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c7950abafdbc9bbc363ac4cd490f864f
d1356ae16dd758eb699eb62402122d4fb2f307c9
7e98a04cefe4e21aafdf261d0e819352c515695cb9250a64e316c0a5cafc143d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fee780ea6-5b5e-419f-916d-42d0f5e1912a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9196
x-amzn-requestid: a63eade0-457b-48f3-bfdc-50d4f6a97363
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CK89kGECIAMFdpg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641aa856-5ce23570768e4a753ee47cf5;Sampled=0
x-amzn-remapped-date: Wed, 22 Mar 2023 07:03:50 GMT
x-amz-cf-pop: SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: Z76yj2_GJNtlI2FJQzYffZaBxC9LnaOg0quPYrSSA5LlLfUyDJoZ-g==
via: 1.1 5502255f9557c1e2c098b94110b6151c.cloudfront.net (CloudFront), 1.1 6a6653dfb47ccc5082f2a5b9d0d168ce.cloudfront.net (CloudFront), 1.1 google
date: Sat, 25 Mar 2023 07:24:43 GMT
age: 6809
etag: "d1356ae16dd758eb699eb62402122d4fb2f307c9"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe6f9abe8-74dc-41f6-984c-4a9e53a6198a.jpeg
34.120.237.76200 OK 6.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe6f9abe8-74dc-41f6-984c-4a9e53a6198a.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash dd191e3a122d6e31f81e6e9d434c58d6
aec88022970c93289434f8097e4a663da33e5271
1f00c901ef479637ec703d7924526a970cb13dd2635b2bbb68b285df9d98e011
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe6f9abe8-74dc-41f6-984c-4a9e53a6198a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6185
x-amzn-requestid: 223de50b-9a7e-4ac7-9305-336658eec4ac
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CTiwYHoLoAMFXtg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641e1802-226bd8524ade75234053ff50;Sampled=0
x-amzn-remapped-date: Fri, 24 Mar 2023 21:37:06 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: Ye0ADORg1hFVLxcNVj-qS60tlfguOEtyTx_XFU4ooJOcDHqNsqV3kw==
via: 1.1 3698a5f586d9ecca74d570e41f4c8516.cloudfront.net (CloudFront), 1.1 1ec2938341958d70d56193d709c89dee.cloudfront.net (CloudFront), 1.1 google
date: Fri, 24 Mar 2023 21:57:14 GMT
age: 40858
etag: "aec88022970c93289434f8097e4a663da33e5271"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdcbf42d9-9670-45f8-b425-a162a5e30b3f.jpeg
34.120.237.76200 OK 8.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdcbf42d9-9670-45f8-b425-a162a5e30b3f.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2af85a45729fe89653835173ffb1822c
00d118bd4343e36e69217d8c1baeecea253e7b48
45df61a4c5a5a555a09881035ccd36b950af783505cc14e4a28446f05c34348b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdcbf42d9-9670-45f8-b425-a162a5e30b3f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8876
x-amzn-requestid: 4a8c3364-d9e9-49ff-afa0-1f49a90f9f6a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CM-xpFZIIAMFhgw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641b780a-205addd335ac20c16c5a1a58;Sampled=0
x-amzn-remapped-date: Wed, 22 Mar 2023 21:50:02 GMT
x-amz-cf-pop: SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: j5wNyBJQU_dvub550k1vWq6darXoOv-oJ5brvPh44JdSWFsbUviJKw==
via: 1.1 c7c3cdef911c9ee3c1a83a78f425dc5a.cloudfront.net (CloudFront), 1.1 b48dedcc55e63f14261aa92cf2d61522.cloudfront.net (CloudFront), 1.1 google
date: Fri, 24 Mar 2023 17:28:43 GMT
age: 56969
etag: "00d118bd4343e36e69217d8c1baeecea253e7b48"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4af2ab94-b5c3-4517-b9d7-97ddb369f62d.jpeg
34.120.237.76200 OK 7.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4af2ab94-b5c3-4517-b9d7-97ddb369f62d.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5773974a7341690f006b052ad02c94db
1b11316c952e2195da1646dd94671669e7e3bc2b
a06b72138745500cacc919fea29536ebd4188a1c483f6123e3402458e299f16a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4af2ab94-b5c3-4517-b9d7-97ddb369f62d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7800
x-amzn-requestid: bad99b1e-3923-4de9-8bea-4dd04e96f7cd
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CTigfFGcIAMFdBA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641e179c-0826b92d4c4af16553503600;Sampled=0
x-amzn-remapped-date: Fri, 24 Mar 2023 21:35:24 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: 9AGLmjvUSTKIsYIWECOR8QwdF4PP1tP1TweUm0VYvxQ0qskqj3YuLA==
via: 1.1 3698a5f586d9ecca74d570e41f4c8516.cloudfront.net (CloudFront), 1.1 995664ee945c06fc706b5cb8e0e650dc.cloudfront.net (CloudFront), 1.1 google
date: Fri, 24 Mar 2023 21:43:53 GMT
age: 41659
etag: "1b11316c952e2195da1646dd94671669e7e3bc2b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
dev.visualwebsiteoptimizer.com/v.gif?cd=0&a=231917&d=betterbrainperformance.com&u=D71972A233A80F74483C0227711CD62D0&h=d9a70ee78724f2d549590b22dd124fa7&t=false&r=0.9688390556281115
34.96.102.137200 OK 35 B URL HTTP/2 dev.visualwebsiteoptimizer.com/v.gif?cd=0&a=231917&d=betterbrainperformance.com&u=D71972A233A80F74483C0227711CD62D0&h=d9a70ee78724f2d549590b22dd124fa7&t=false&r=0.9688390556281115
IP 34.96.102.137:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28d6814f309ea289f847c69cf91194c6
0f4e929dd5bb2564f7ab9c76338e04e292a42ace
8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
GET /v.gif?cd=0&a=231917&d=betterbrainperformance.com&u=D71972A233A80F74483C0227711CD62D0&h=d9a70ee78724f2d549590b22dd124fa7&t=false&r=0.9688390556281115 HTTP/1.1
Host: dev.visualwebsiteoptimizer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://betterbrainperformance.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 25 Mar 2023 09:18:12 GMT
content-type: image/gif
cache-control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate
expires: Mon, 10 Jan 2005 00:00:01 GMT
pragma: no-cache
x-content-type-options: nosniff
content-length: 35
server: gnv1c
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
d39ldsmboekjvi.cloudfront.net/css/global.css
143.204.42.114200 OK 7.9 kB URL HTTP/2 d39ldsmboekjvi.cloudfront.net/css/global.css
IP 143.204.42.114:0
Hash a3cbd8234a45df57c4cd5b9b648bf998
b5d08d88019df0712db1db9fe595ae9aa96c8d80
2557c9698aa620a9ae687ef0f47086453dc7010a2af2946f7c3de463badcd37d
GET /css/global.css HTTP/1.1
Host: d39ldsmboekjvi.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://betterbrainperformance.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css
last-modified: Mon, 21 Nov 2022 23:03:28 GMT
x-amz-version-id: Ryn86_7zx09YjFdUirirwN1FP1FYxPzK
server: AmazonS3
content-encoding: gzip
date: Sat, 25 Mar 2023 05:53:40 GMT
etag: W/"21d28e3976a3784f5ac7900b22857747"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 bcd5dadccb0831729969c938747ff79a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: _nXfmRgsZKjSivAGMgD0XGqbfzkEK4YmAdxH6suwPwTzj2xe3dMZMA==
age: 26118
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
216.58.207.227200 OK 15 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
IP 216.58.207.227:0
File type Web Open Font Format (Version 2), TrueType, length 15344, version 1.0\012- data
Hash 5d4aeb4e5f5ef754e307d7ffaef688bd
06db651cdf354c64a7383ea9c77024ef4fb4cef8
3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 24 Mar 2023 10:26:44 GMT
expires: Sat, 23 Mar 2024 10:26:44 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
age: 82288
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
216.58.207.227200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP 216.58.207.227:0
File type Web Open Font Format (Version 2), TrueType, length 15552, version 1.0\012- data
Hash 285467176f7fe6bb6a9c6873b3dad2cc
ea04e4ff5142ddd69307c183def721a160e0a64e
5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 24 Mar 2023 10:26:45 GMT
expires: Sat, 23 Mar 2024 10:26:45 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
age: 82287
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.starfieldtech.com/
192.124.249.41200 OK 1.8 kB IP 192.124.249.41:0
Hash 7983181d2439dea87aba03ea2207d08a
09315a9fd386bbab2a6a971cdad09c4502e64790
15d7aa448add3d94f640fb224664f760c3ec161e7eab7dd7c7c6886313f89436
POST / HTTP/1.1
Host: ocsp.starfieldtech.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Sat, 25 Mar 2023 09:18:12 GMT
Content-Type: application/ocsp-response
Content-Length: 1845
Connection: keep-alive
X-Sucuri-ID: 19041
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Fri, 24 Mar 2023 21:54:59 GMT
Expires: Sat, 25 Mar 2023 21:54:59 GMT
ETag: "09315a9fd386bbab2a6a971cdad09c4502e64790"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
dev.visualwebsiteoptimizer.com/7.0/va-a84b2b2ef3ad495f79afaa20352a7699.js
34.96.102.137200 OK 66 kB URL HTTP/2 dev.visualwebsiteoptimizer.com/7.0/va-a84b2b2ef3ad495f79afaa20352a7699.js
IP 34.96.102.137:0
File type ASCII text, with very long lines (62897)
Hash d90077b8dee159d55ee34c000d555e1b
d2c6624e0a64308348552b88abc783d7589ffad2
793d7d33231970e981e44734e4dbaaf7031c4990bfcd64db09fe0cf55f0b211d
GET /7.0/va-a84b2b2ef3ad495f79afaa20352a7699.js HTTP/1.1
Host: dev.visualwebsiteoptimizer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://betterbrainperformance.com
Connection: keep-alive
Referer: https://betterbrainperformance.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 25 Mar 2023 09:18:11 GMT
content-type: text/javascript; charset=UTF-8
content-length: 66033
last-modified: Thu, 23 Mar 2023 11:08:34 GMT
content-encoding: br
etag: "641c3332-101f1"
server: gams1
vary: Accept-Encoding
cache-control: public, max-age=604800
access-control-allow-origin: *
accept-ranges: bytes
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash eef4409d0ad90e2899e538028bd3fa76
2d6edd13cbd2d201ef921fc33c053aec8f8b740c
61eef3a534769ac291c82d37206b392dea96af36a38e9d7da4cf0fb2d5d2342d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 25 Mar 2023 09:18:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
status.thawte.com/
192.229.221.95200 OK 471 B IP 192.229.221.95:0
Hash 3f29dd1ba201c3d578f18e0685ee97bc
f576e67dba40256caf0fd28ecf8a4c0d7d8054f6
b831ea594d5932196c2031b367b40d2daadf9af8afce9d45a3272b5b1866ea56
POST / HTTP/1.1
Host: status.thawte.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2544
Cache-Control: max-age=128254
Content-Type: application/ocsp-response
Date: Sat, 25 Mar 2023 09:18:12 GMT
Etag: "641e0462-1d7"
Expires: Sun, 26 Mar 2023 20:55:46 GMT
Last-Modified: Fri, 24 Mar 2023 20:13:22 GMT
Server: ECAcc (ska/F7A5)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash eef4409d0ad90e2899e538028bd3fa76
2d6edd13cbd2d201ef921fc33c053aec8f8b740c
61eef3a534769ac291c82d37206b392dea96af36a38e9d7da4cf0fb2d5d2342d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 25 Mar 2023 09:18:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
tr.outbrain.com/cachedClickId?marketerId=undefined
70.42.32.95200 OK 35 B URL HTTP/1.1 tr.outbrain.com/cachedClickId?marketerId=undefined
IP 70.42.32.95:0
File type ASCII text, with no line terminators
Hash 75c843c7b717e7b722777907475c67a3
983d1c9a05b315288039b9d4694ce3b402259240
1d348f9f803c95305f63def9d75fd50e79e54a375e1a4a888edbbea366845580
GET /cachedClickId?marketerId=undefined HTTP/1.1
Host: tr.outbrain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://betterbrainperformance.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sat, 25 Mar 2023 09:18:12 GMT
Content-Type: application/javascript
Content-Length: 35
X-TraceId: 3ec57f6067c3607b7635f52a3b97f5d9
tr.outbrain.com/unifiedPixel?optOut=false&bust=039801907190585584&referrer=&marketerId=006a8dc9da81ab08022e55b61fb875da32&name=PAGE_VIEW&dl=https%3A%2F%2Fbetterbrainperformance.com%2F%3Ftid%3D1027ec93256c16abc9447f2e2b3452&g=1&obApiVersion=1.1&obtpVersion=2.0.5
70.42.32.95200 OK 53 B URL HTTP/1.1 tr.outbrain.com/unifiedPixel?optOut=false&bust=039801907190585584&referrer=&marketerId=006a8dc9da81ab08022e55b61fb875da32&name=PAGE_VIEW&dl=https%3A%2F%2Fbetterbrainperformance.com%2F%3Ftid%3D1027ec93256c16abc9447f2e2b3452&g=1&obApiVersion=1.1&obtpVersion=2.0.5
IP 70.42.32.95:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 414bd2a5161db03fdd910327b42c6daa
65d4cf50496813c5f1a34eddd5c50dc67d44ff47
b51f3497b0a65f1e1e87e75f5e7e823d871c23bcf76a5ee4101783c8f939e553
GET /unifiedPixel?optOut=false&bust=039801907190585584&referrer=&marketerId=006a8dc9da81ab08022e55b61fb875da32&name=PAGE_VIEW&dl=https%3A%2F%2Fbetterbrainperformance.com%2F%3Ftid%3D1027ec93256c16abc9447f2e2b3452&g=1&obApiVersion=1.1&obtpVersion=2.0.5 HTTP/1.1
Host: tr.outbrain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://betterbrainperformance.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sat, 25 Mar 2023 09:18:12 GMT
Content-Type: image/gif;
Content-Length: 53
Cache-Control: no-cache
X-TraceId: 22a328979495cf17fb780ec80eddeff8
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 112 kB IP 142.250.74.131:0
File type gzip compressed data, max compression\012- data
Size 112 kB (112506 bytes)
Hash 32981c3373151de69c0a58845b0fcada
0e256314f26907ff01be55525dfe1e5aebddb5f1
0a14c91722351488b6277cde7eca7e93073edbbaab416501dcb8b42c1d500fb3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 25 Mar 2023 09:18:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
googleads.g.doubleclick.net/pagead/id
142.250.74.34302 Found 2.1 kB URL HTTP/2 googleads.g.doubleclick.net/pagead/id
IP 142.250.74.34:0
File type gzip compressed data, from Unix\012- data
Hash c7fb69e29736692895daa1de6bbd9b68
d407c46c9a61de449aea99a02cee0ebd0e16a637
aa9133f4f496fc5cb97a37a472808f6670f0a45e3fa36ceca83cf28302d5aa56
GET /pagead/id HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
location: https://googleads.g.doubleclick.net/pagead/id?slf_rd=1
access-control-allow-credentials: true
access-control-allow-origin: https://www.youtube.com
date: Sat, 25 Mar 2023 09:18:12 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
server: cafe
content-length: 0
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
static.doubleclick.net/instream/ad_status.js
142.250.74.166200 OK 29 B URL HTTP/2 static.doubleclick.net/instream/ad_status.js
IP 142.250.74.166:0
Hash 1fa71744db23d0f8df9cce6719defcb7
e4be9b7136697942a036f97cf26ebaf703ad2067
eed0dc1fdb5d97ed188ae16fd5e1024a5bb744af47340346be2146300a6c54b9
GET /instream/ad_status.js HTTP/1.1
Host: static.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="ads-doubleclick-media"
report-to: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]}
timing-allow-origin: *
content-length: 29
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 25 Mar 2023 09:05:11 GMT
expires: Sat, 25 Mar 2023 09:20:11 GMT
cache-control: public, max-age=900
age: 781
last-modified: Thu, 12 Dec 2013 23:40:16 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash fa363658b10afd87af493d2c443e3106
6d1f5da75206662432381be4dd22e72fb3cb968a
f0d0e2a38e51f762415e65b7f49f2acd09b4651b5c111875ff9184a58f0cc8f4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 25 Mar 2023 09:18:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
142.250.74.138200 OK 0 B URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
IP 142.250.74.138:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-goog-api-key,x-user-agent
Referer: https://www.youtube.com/
Origin: https://www.youtube.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://www.youtube.com
vary: origin, referer, x-origin
access-control-allow-credentials: true
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
access-control-allow-headers: content-type,x-goog-api-key,x-user-agent
access-control-max-age: 3600
date: Sat, 25 Mar 2023 09:18:12 GMT
content-type: text/html
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
142.250.74.138200 OK 31 kB URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
IP 142.250.74.138:0
File type JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Hash f49d7d873356f0c34899e31eee72286f
6c654042ae64cc66e0e10e04f97e1856cffd6e00
4bba6a713711c08d72f4598871ccf19ada429a16d74d4bcc0417020c403d7112
POST /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 24
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Sat, 25 Mar 2023 09:18:12 GMT
server: ESF
cache-control: private
content-length: 30994
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 9b762efe5751eb25cd26ca67ad6dcf22
661f1247ecc842236957d05747967ec4f20835a2
c51c54e54ffc33cc7643bb0a64da2265f93efaf38838351ec0f2a2fe102efa2e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 25 Mar 2023 09:18:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/js/th/vfL9pRLeM2I8igeDEoZ-6BrdQvIN_PEUsYwY2am7_pk.js
142.250.74.132200 OK 14 kB URL HTTP/2 www.google.com/js/th/vfL9pRLeM2I8igeDEoZ-6BrdQvIN_PEUsYwY2am7_pk.js
IP 142.250.74.132:0
File type ASCII text, with very long lines (36332)
Hash cd29bf7b28c6b469cad7a00de4f03d7d
ef2a6c612bba820e59447e344ed823cfa199d534
9c8a7a3abb40e232ea3bbed04b3753beff2c30dab3e6e00bbada79ab8e788652
GET /js/th/vfL9pRLeM2I8igeDEoZ-6BrdQvIN_PEUsYwY2am7_pk.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: br
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="botguard-scs"
report-to: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]}
content-length: 14311
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 22 Mar 2023 05:04:26 GMT
expires: Thu, 21 Mar 2024 05:04:26 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 20 Mar 2023 09:30:00 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 274426
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.facebook.com/tr/?id=2933385093392789&ev=PageView&dl=https%3A%2F%2Fbetterbrainperformance.com%2F%3Ftid%3D1027ec93256c16abc9447f2e2b3452&rl=&if=false&ts=1679735905555&sw=1280&sh=1024&v=2.9.100&r=stable&ec=0&o=30&cs_est=true&fbp=fb.1.1679735905552.1799955032&it=1679735904588&coo=false&rqm=GET
31.13.72.36200 OK 0 B URL HTTP/2 www.facebook.com/tr/?id=2933385093392789&ev=PageView&dl=https%3A%2F%2Fbetterbrainperformance.com%2F%3Ftid%3D1027ec93256c16abc9447f2e2b3452&rl=&if=false&ts=1679735905555&sw=1280&sh=1024&v=2.9.100&r=stable&ec=0&o=30&cs_est=true&fbp=fb.1.1679735905552.1799955032&it=1679735904588&coo=false&rqm=GET
IP 31.13.72.36:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=2933385093392789&ev=PageView&dl=https%3A%2F%2Fbetterbrainperformance.com%2F%3Ftid%3D1027ec93256c16abc9447f2e2b3452&rl=&if=false&ts=1679735905555&sw=1280&sh=1024&v=2.9.100&r=stable&ec=0&o=30&cs_est=true&fbp=fb.1.1679735905552.1799955032&it=1679735904588&coo=false&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://betterbrainperformance.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Sat, 25 Mar 2023 09:18:12 GMT
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash a229e13ab0262306e8233705569c7866
d389ff1fc114c031f85a57a9ebf1845ead515e38
9865a8767eed63858b778ab5774d5ae48fc46d0adcb1693c76eabb9ad9e81bc1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 25 Mar 2023 09:18:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 994368e9cd3edd7245f8ad39ac8565c5
0b08a0465cb418aba7dd3d401b727613315166f2
a2e99e3e0f86d8e1d5fb288e943518a03c05196ac592cefaaaa8dfc962fba4f7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 25 Mar 2023 09:18:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
yt3.ggpht.com/ytc/AL5GRJV5FB2JhY6ajFaHWe83ujrGPHn7QXH0jSuyw_3f=s68-c-k-c0x00ffffff-no-rj
142.250.74.161200 OK 1.9 kB URL HTTP/2 yt3.ggpht.com/ytc/AL5GRJV5FB2JhY6ajFaHWe83ujrGPHn7QXH0jSuyw_3f=s68-c-k-c0x00ffffff-no-rj
IP 142.250.74.161:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 68x68, components 3\012- data
Hash 6e17d5a956e8d6fb8f2828639a152691
ca4c4c3a4bcbc10d29b213bd5302dbc0d4ad3a90
d5c741dfb91d5bf68f60d95e096b5c169eb9bed03007cb4e7fbc0cf2714b9085
GET /ytc/AL5GRJV5FB2JhY6ajFaHWe83ujrGPHn7QXH0jSuyw_3f=s68-c-k-c0x00ffffff-no-rj HTTP/1.1
Host: yt3.ggpht.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="unnamed.jpg"
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 1925
x-xss-protection: 0
date: Sat, 25 Mar 2023 05:53:41 GMT
expires: Thu, 23 Mar 2023 04:19:06 GMT
cache-control: public, max-age=86400, no-transform
age: 12271
etag: "v10"
content-type: image/jpeg
vary: Origin
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
i.ytimg.com/vi/xOF3yTZcFug/maxresdefault.jpg?sqp=-oaymwEmCIAKENAF8quKqQMa8AEB-AH-CYAC0AWKAgwIABABGGQgZSguMA8=&rs=AOn4CLAMQTd0B9OJZdpBWQQel4490q_Jtw
142.250.74.86200 OK 72 kB URL HTTP/2 i.ytimg.com/vi/xOF3yTZcFug/maxresdefault.jpg?sqp=-oaymwEmCIAKENAF8quKqQMa8AEB-AH-CYAC0AWKAgwIABABGGQgZSguMA8=&rs=AOn4CLAMQTd0B9OJZdpBWQQel4490q_Jtw
IP 142.250.74.86:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1280x720, components 3\012- data
Hash 859254d5000e5b7b336e30842de3360a
30260a1dee074859f2f1bcfde616451c4bfc281c
6d55e0d60ca1ec8790df78115dad27ffb44d52a86a179448b972678a5c64dced
GET /vi/xOF3yTZcFug/maxresdefault.jpg?sqp=-oaymwEmCIAKENAF8quKqQMa8AEB-AH-CYAC0AWKAgwIABABGGQgZSguMA8=&rs=AOn4CLAMQTd0B9OJZdpBWQQel4490q_Jtw HTTP/1.1
Host: i.ytimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
timing-allow-origin: *
content-length: 71651
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 25 Mar 2023 09:18:12 GMT
expires: Sat, 25 Mar 2023 09:23:12 GMT
cache-control: public, max-age=300
etag: "0"
content-type: image/jpeg
vary: Origin
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash a229e13ab0262306e8233705569c7866
d389ff1fc114c031f85a57a9ebf1845ead515e38
9865a8767eed63858b778ab5774d5ae48fc46d0adcb1693c76eabb9ad9e81bc1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 25 Mar 2023 09:18:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 994368e9cd3edd7245f8ad39ac8565c5
0b08a0465cb418aba7dd3d401b727613315166f2
a2e99e3e0f86d8e1d5fb288e943518a03c05196ac592cefaaaa8dfc962fba4f7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 25 Mar 2023 09:18:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 248b003a4a6dda3d2c481cfd45e49176
ae6e1dbc704dbe302549888e545689eb88e83bb9
14df223924711cca8488c64942b656023cb6e69cb83863ccd0f9cdb8ac4682fb
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 25 Mar 2023 09:18:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-156185630-1&cid=421320538.1679735905&jid=9358917&_u=YGBACEAABAAAACABI~&z=1957868210
142.250.74.163200 OK 42 B URL HTTP/2 www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-156185630-1&cid=421320538.1679735905&jid=9358917&_u=YGBACEAABAAAACABI~&z=1957868210
IP 142.250.74.163:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-156185630-1&cid=421320538.1679735905&jid=9358917&_u=YGBACEAABAAAACABI~&z=1957868210 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://betterbrainperformance.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sat, 25 Mar 2023 09:18:13 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
142.250.74.138200 OK 0 B URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
IP 142.250.74.138:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-goog-api-key,x-user-agent
Referer: https://www.youtube.com/
Origin: https://www.youtube.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://www.youtube.com
vary: origin, referer, x-origin
access-control-allow-credentials: true
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
access-control-allow-headers: content-type,x-goog-api-key,x-user-agent
access-control-max-age: 3600
date: Sat, 25 Mar 2023 09:18:13 GMT
content-type: text/html
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 248b003a4a6dda3d2c481cfd45e49176
ae6e1dbc704dbe302549888e545689eb88e83bb9
14df223924711cca8488c64942b656023cb6e69cb83863ccd0f9cdb8ac4682fb
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 25 Mar 2023 09:18:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
142.250.74.138200 OK 114 B URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
IP 142.250.74.138:0
File type JSON data\012- , ASCII text, with no line terminators
Hash b5ad82c97f9a1ef5338553b44f05d7b3
4458253aa57e765917905487cc56e48d35783909
024e31d806fc30e575b2494c645b91b6998801260ad01a73bfdaf27a4279a55d
POST /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 1168
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Sat, 25 Mar 2023 09:18:13 GMT
server: ESF
cache-control: private
content-length: 114
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 7803be7906c6ed0c34130e05be084e74
d2dd475c6f25a5b8e140cb0ca5fb4581124c8701
2ea7a0e203f4edbf956f9b78f74a24bdd7e153da173b6c16dbfcb22909c7daf3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 25 Mar 2023 09:18:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 7803be7906c6ed0c34130e05be084e74
d2dd475c6f25a5b8e140cb0ca5fb4581124c8701
2ea7a0e203f4edbf956f9b78f74a24bdd7e153da173b6c16dbfcb22909c7daf3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 25 Mar 2023 09:18:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
rr2---sn-capm-vnae.googlevideo.com/videoplayback?expire=1679757493&ei=VbweZM3AEq2K0u8PzZaPuAw&ip=91.90.42.154&id=o-ALnwEvI34VjDMOanTD4TjNq3RyJAN8_NBtdX-BQG8Asd&itag=243&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C278&source=youtube&requiressl=yes&mh=95&mm=31%2C29&mn=sn-capm-vnae%2Csn-5go7ynlk&ms=au%2Crdu&mv=m&mvi=2&pl=21&pcm2=yes&initcwndbps=2467500&spc=99c5CcjOXf2MIw6fddPMk8TgcU7dAG0b2vVG2nHlTzagDmjRmg&vprv=1&mime=video%2Fwebm&ns=YpI13W1MqRxedQLM--S9tDoM&gir=yes&clen=78594413&dur=3839.967&lmt=1679704855907039&mt=1679735605&fvip=1&keepalive=yes&fexp=24007246&c=WEB_EMBEDDED_PLAYER&txp=5319224&n=vqoYFqQPeXsYcg&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cpcm2%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=AG3C_xAwRgIhAIvUvK2nKHOztlCjv0XAcKO0G_wWWvJeaWE7Jr469jHSAiEAmsK7huvweiMRqwOWE2MLJx1SElvJhAfxhCZMB-hdC9U%3D&alr=yes&sig=AOq0QJ8wRQIgZNlViElhCc2hw8FIUs3EkJ4ceQDJCBL0VMJGP6opLYACIQD3V3wvkU5JDPVXWR5cJpl4FB5-6rSISOSkQHGycIKD5Q%3D%3D&cpn=ENP4yh0sfaRbcruU&cver=1.20230321.00.00&range=0-137144&rn=1&rbuf=0&pot=Mmdoi5O9SNTAF2iwMSO9DBqTFWmTi_IwHWbaznUr5TbiIoG8RzU7yEPc7bY72kGOL_TUmbxI640MCBM3Z9QG1Vua29wypX4MInvLwKv5meiJ5K0jw_f3b8hXXRGSbwBXAcrvSFjpii7e
91.90.45.173200 OK 137 kB URL HTTP/1.1 rr2---sn-capm-vnae.googlevideo.com/videoplayback?expire=1679757493&ei=VbweZM3AEq2K0u8PzZaPuAw&ip=91.90.42.154&id=o-ALnwEvI34VjDMOanTD4TjNq3RyJAN8_NBtdX-BQG8Asd&itag=243&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C278&source=youtube&requiressl=yes&mh=95&mm=31%2C29&mn=sn-capm-vnae%2Csn-5go7ynlk&ms=au%2Crdu&mv=m&mvi=2&pl=21&pcm2=yes&initcwndbps=2467500&spc=99c5CcjOXf2MIw6fddPMk8TgcU7dAG0b2vVG2nHlTzagDmjRmg&vprv=1&mime=video%2Fwebm&ns=YpI13W1MqRxedQLM--S9tDoM&gir=yes&clen=78594413&dur=3839.967&lmt=1679704855907039&mt=1679735605&fvip=1&keepalive=yes&fexp=24007246&c=WEB_EMBEDDED_PLAYER&txp=5319224&n=vqoYFqQPeXsYcg&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cpcm2%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=AG3C_xAwRgIhAIvUvK2nKHOztlCjv0XAcKO0G_wWWvJeaWE7Jr469jHSAiEAmsK7huvweiMRqwOWE2MLJx1SElvJhAfxhCZMB-hdC9U%3D&alr=yes&sig=AOq0QJ8wRQIgZNlViElhCc2hw8FIUs3EkJ4ceQDJCBL0VMJGP6opLYACIQD3V3wvkU5JDPVXWR5cJpl4FB5-6rSISOSkQHGycIKD5Q%3D%3D&cpn=ENP4yh0sfaRbcruU&cver=1.20230321.00.00&range=0-137144&rn=1&rbuf=0&pot=Mmdoi5O9SNTAF2iwMSO9DBqTFWmTi_IwHWbaznUr5TbiIoG8RzU7yEPc7bY72kGOL_TUmbxI640MCBM3Z9QG1Vua29wypX4MInvLwKv5meiJ5K0jw_f3b8hXXRGSbwBXAcrvSFjpii7e
IP 91.90.45.173:0
ASN #50304 Blix Solutions AS
File type WebM\012- EBML file, creator webmB\20\012- data
Size 137 kB (137145 bytes)
Hash de7cfc11750b3aed33ec9a5654cbac3a
459cc2b5c412967583723a50b4e70976241cbb19
ac0779f472a6a4621ea671f2cbb51f7b629c2520fd45a56953c629d9abbe2c68
POST /videoplayback?expire=1679757493&ei=VbweZM3AEq2K0u8PzZaPuAw&ip=91.90.42.154&id=o-ALnwEvI34VjDMOanTD4TjNq3RyJAN8_NBtdX-BQG8Asd&itag=243&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C278&source=youtube&requiressl=yes&mh=95&mm=31%2C29&mn=sn-capm-vnae%2Csn-5go7ynlk&ms=au%2Crdu&mv=m&mvi=2&pl=21&pcm2=yes&initcwndbps=2467500&spc=99c5CcjOXf2MIw6fddPMk8TgcU7dAG0b2vVG2nHlTzagDmjRmg&vprv=1&mime=video%2Fwebm&ns=YpI13W1MqRxedQLM--S9tDoM&gir=yes&clen=78594413&dur=3839.967&lmt=1679704855907039&mt=1679735605&fvip=1&keepalive=yes&fexp=24007246&c=WEB_EMBEDDED_PLAYER&txp=5319224&n=vqoYFqQPeXsYcg&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cpcm2%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=AG3C_xAwRgIhAIvUvK2nKHOztlCjv0XAcKO0G_wWWvJeaWE7Jr469jHSAiEAmsK7huvweiMRqwOWE2MLJx1SElvJhAfxhCZMB-hdC9U%3D&alr=yes&sig=AOq0QJ8wRQIgZNlViElhCc2hw8FIUs3EkJ4ceQDJCBL0VMJGP6opLYACIQD3V3wvkU5JDPVXWR5cJpl4FB5-6rSISOSkQHGycIKD5Q%3D%3D&cpn=ENP4yh0sfaRbcruU&cver=1.20230321.00.00&range=0-137144&rn=1&rbuf=0&pot=Mmdoi5O9SNTAF2iwMSO9DBqTFWmTi_IwHWbaznUr5TbiIoG8RzU7yEPc7bY72kGOL_TUmbxI640MCBM3Z9QG1Vua29wypX4MInvLwKv5meiJ5K0jw_f3b8hXXRGSbwBXAcrvSFjpii7e HTTP/1.1
Host: rr2---sn-capm-vnae.googlevideo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Length: 2
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Last-Modified: Sat, 25 Mar 2023 00:40:55 GMT
Content-Type: video/webm
Date: Sat, 25 Mar 2023 09:18:13 GMT
Expires: Sat, 25 Mar 2023 09:18:13 GMT
Cache-Control: private, max-age=21300
Accept-Ranges: bytes
Content-Length: 137145
Connection: keep-alive
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
Access-Control-Allow-Origin: https://www.youtube.com
Access-Control-Allow-Credentials: true
Timing-Allow-Origin: https://www.youtube.com
Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms
Vary: Origin
Cross-Origin-Resource-Policy: cross-origin
X-Restrict-Formats-Hint: None
X-Content-Type-Options: nosniff
Server: gvs 1.0
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 7803be7906c6ed0c34130e05be084e74
d2dd475c6f25a5b8e140cb0ca5fb4581124c8701
2ea7a0e203f4edbf956f9b78f74a24bdd7e153da173b6c16dbfcb22909c7daf3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 25 Mar 2023 09:18:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
rr2---sn-capm-vnae.googlevideo.com/videoplayback?expire=1679757493&ei=VbweZM3AEq2K0u8PzZaPuAw&ip=91.90.42.154&id=o-ALnwEvI34VjDMOanTD4TjNq3RyJAN8_NBtdX-BQG8Asd&itag=251&source=youtube&requiressl=yes&mh=95&mm=31%2C29&mn=sn-capm-vnae%2Csn-5go7ynlk&ms=au%2Crdu&mv=m&mvi=2&pl=21&pcm2=yes&initcwndbps=2467500&spc=99c5CcjOXf2MIw6fddPMk8TgcU7dAG0b2vVG2nHlTzagDmjRmg&vprv=1&mime=audio%2Fwebm&ns=YpI13W1MqRxedQLM--S9tDoM&gir=yes&clen=64683033&dur=3840.001&lmt=1679709004318241&mt=1679735605&fvip=1&keepalive=yes&fexp=24007246&c=WEB_EMBEDDED_PLAYER&txp=5318224&n=vqoYFqQPeXsYcg&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cpcm2%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=AG3C_xAwRQIgWMpMrb0yrG6pK9J9aJnyblOn8a-NqUuBDUv0K3yun0YCIQDZLZriH7oXgiYF2Z_G1Sk-EC7kwzOj2WW9sigZO5-K-Q%3D%3D&alr=yes&sig=AOq0QJ8wRQIgWT0vqRkJM30ME29zeN32erhjm0efjRshi4cENJcMyTICIQCuBNMoKNmKBnh1PblIAGZ_iEkePqDxvTDN3Ir10Nh5zg%3D%3D&cpn=ENP4yh0sfaRbcruU&cver=1.20230321.00.00&range=0-72610&rn=2&rbuf=0&pot=Mmdoi5O9SNTAF2iwMSO9DBqTFWmTi_IwHWbaznUr5TbiIoG8RzU7yEPc7bY72kGOL_TUmbxI640MCBM3Z9QG1Vua29wypX4MInvLwKv5meiJ5K0jw_f3b8hXXRGSbwBXAcrvSFjpii7e
91.90.45.173200 OK 73 kB URL HTTP/1.1 rr2---sn-capm-vnae.googlevideo.com/videoplayback?expire=1679757493&ei=VbweZM3AEq2K0u8PzZaPuAw&ip=91.90.42.154&id=o-ALnwEvI34VjDMOanTD4TjNq3RyJAN8_NBtdX-BQG8Asd&itag=251&source=youtube&requiressl=yes&mh=95&mm=31%2C29&mn=sn-capm-vnae%2Csn-5go7ynlk&ms=au%2Crdu&mv=m&mvi=2&pl=21&pcm2=yes&initcwndbps=2467500&spc=99c5CcjOXf2MIw6fddPMk8TgcU7dAG0b2vVG2nHlTzagDmjRmg&vprv=1&mime=audio%2Fwebm&ns=YpI13W1MqRxedQLM--S9tDoM&gir=yes&clen=64683033&dur=3840.001&lmt=1679709004318241&mt=1679735605&fvip=1&keepalive=yes&fexp=24007246&c=WEB_EMBEDDED_PLAYER&txp=5318224&n=vqoYFqQPeXsYcg&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cpcm2%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=AG3C_xAwRQIgWMpMrb0yrG6pK9J9aJnyblOn8a-NqUuBDUv0K3yun0YCIQDZLZriH7oXgiYF2Z_G1Sk-EC7kwzOj2WW9sigZO5-K-Q%3D%3D&alr=yes&sig=AOq0QJ8wRQIgWT0vqRkJM30ME29zeN32erhjm0efjRshi4cENJcMyTICIQCuBNMoKNmKBnh1PblIAGZ_iEkePqDxvTDN3Ir10Nh5zg%3D%3D&cpn=ENP4yh0sfaRbcruU&cver=1.20230321.00.00&range=0-72610&rn=2&rbuf=0&pot=Mmdoi5O9SNTAF2iwMSO9DBqTFWmTi_IwHWbaznUr5TbiIoG8RzU7yEPc7bY72kGOL_TUmbxI640MCBM3Z9QG1Vua29wypX4MInvLwKv5meiJ5K0jw_f3b8hXXRGSbwBXAcrvSFjpii7e
IP 91.90.45.173:0
ASN #50304 Blix Solutions AS
File type WebM\012- EBML file, creator webmB\20\012- data
Hash 2d9d544e91939f6703f88621784ac2b3
f5e38fcecfd64ae49f335a077fbc5e393620c3cf
460b9dd940e810dbb94f76378fc38a30293b837963d948a704f3833479cbff7c
POST /videoplayback?expire=1679757493&ei=VbweZM3AEq2K0u8PzZaPuAw&ip=91.90.42.154&id=o-ALnwEvI34VjDMOanTD4TjNq3RyJAN8_NBtdX-BQG8Asd&itag=251&source=youtube&requiressl=yes&mh=95&mm=31%2C29&mn=sn-capm-vnae%2Csn-5go7ynlk&ms=au%2Crdu&mv=m&mvi=2&pl=21&pcm2=yes&initcwndbps=2467500&spc=99c5CcjOXf2MIw6fddPMk8TgcU7dAG0b2vVG2nHlTzagDmjRmg&vprv=1&mime=audio%2Fwebm&ns=YpI13W1MqRxedQLM--S9tDoM&gir=yes&clen=64683033&dur=3840.001&lmt=1679709004318241&mt=1679735605&fvip=1&keepalive=yes&fexp=24007246&c=WEB_EMBEDDED_PLAYER&txp=5318224&n=vqoYFqQPeXsYcg&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cpcm2%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=AG3C_xAwRQIgWMpMrb0yrG6pK9J9aJnyblOn8a-NqUuBDUv0K3yun0YCIQDZLZriH7oXgiYF2Z_G1Sk-EC7kwzOj2WW9sigZO5-K-Q%3D%3D&alr=yes&sig=AOq0QJ8wRQIgWT0vqRkJM30ME29zeN32erhjm0efjRshi4cENJcMyTICIQCuBNMoKNmKBnh1PblIAGZ_iEkePqDxvTDN3Ir10Nh5zg%3D%3D&cpn=ENP4yh0sfaRbcruU&cver=1.20230321.00.00&range=0-72610&rn=2&rbuf=0&pot=Mmdoi5O9SNTAF2iwMSO9DBqTFWmTi_IwHWbaznUr5TbiIoG8RzU7yEPc7bY72kGOL_TUmbxI640MCBM3Z9QG1Vua29wypX4MInvLwKv5meiJ5K0jw_f3b8hXXRGSbwBXAcrvSFjpii7e HTTP/1.1
Host: rr2---sn-capm-vnae.googlevideo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Length: 2
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Last-Modified: Sat, 25 Mar 2023 01:50:04 GMT
Content-Type: audio/webm
Date: Sat, 25 Mar 2023 09:18:13 GMT
Expires: Sat, 25 Mar 2023 09:18:13 GMT
Cache-Control: private, max-age=21300
Accept-Ranges: bytes
Content-Length: 72611
Connection: keep-alive
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
Access-Control-Allow-Origin: https://www.youtube.com
Access-Control-Allow-Credentials: true
Timing-Allow-Origin: https://www.youtube.com
Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms
Vary: Origin
Cross-Origin-Resource-Policy: cross-origin
X-Content-Type-Options: nosniff
Server: gvs 1.0
rr2---sn-capm-vnae.googlevideo.com/videoplayback?expire=1679757493&ei=VbweZM3AEq2K0u8PzZaPuAw&ip=91.90.42.154&id=o-ALnwEvI34VjDMOanTD4TjNq3RyJAN8_NBtdX-BQG8Asd&itag=244&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C278&source=youtube&requiressl=yes&mh=95&mm=31%2C29&mn=sn-capm-vnae%2Csn-5go7ynlk&ms=au%2Crdu&mv=m&mvi=2&pl=21&pcm2=yes&initcwndbps=2467500&spc=99c5CcjOXf2MIw6fddPMk8TgcU7dAG0b2vVG2nHlTzagDmjRmg&vprv=1&mime=video%2Fwebm&ns=YpI13W1MqRxedQLM--S9tDoM&gir=yes&clen=125342721&dur=3839.967&lmt=1679712890489539&mt=1679735605&fvip=1&keepalive=yes&fexp=24007246&c=WEB_EMBEDDED_PLAYER&txp=5319224&n=vqoYFqQPeXsYcg&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cpcm2%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=AG3C_xAwRAIgK4_IsIKYffoN50hbYozMsK8in0FpxMS4pjRt3dnpzVICIEwi6c81RAuLBey0S-vPKD3Ezp2b1XkI2n0jSgW3zY7_&alr=yes&sig=AOq0QJ8wRQIgf-Ln_7DBvvjI0n6Da1qlnG-LptXvEmbGtsVzUmsxQQ4CIQDc6V7727p0G7CpPQ2N3KjRJ-U9pbDfaxegI4qg51oYow%3D%3D&cpn=ENP4yh0sfaRbcruU&cver=1.20230321.00.00&range=0-13117&rn=3&rbuf=0&pot=Mmdoi5O9SNTAF2iwMSO9DBqTFWmTi_IwHWbaznUr5TbiIoG8RzU7yEPc7bY72kGOL_TUmbxI640MCBM3Z9QG1Vua29wypX4MInvLwKv5meiJ5K0jw_f3b8hXXRGSbwBXAcrvSFjpii7e
91.90.45.173200 OK 13 kB URL HTTP/1.1 rr2---sn-capm-vnae.googlevideo.com/videoplayback?expire=1679757493&ei=VbweZM3AEq2K0u8PzZaPuAw&ip=91.90.42.154&id=o-ALnwEvI34VjDMOanTD4TjNq3RyJAN8_NBtdX-BQG8Asd&itag=244&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C278&source=youtube&requiressl=yes&mh=95&mm=31%2C29&mn=sn-capm-vnae%2Csn-5go7ynlk&ms=au%2Crdu&mv=m&mvi=2&pl=21&pcm2=yes&initcwndbps=2467500&spc=99c5CcjOXf2MIw6fddPMk8TgcU7dAG0b2vVG2nHlTzagDmjRmg&vprv=1&mime=video%2Fwebm&ns=YpI13W1MqRxedQLM--S9tDoM&gir=yes&clen=125342721&dur=3839.967&lmt=1679712890489539&mt=1679735605&fvip=1&keepalive=yes&fexp=24007246&c=WEB_EMBEDDED_PLAYER&txp=5319224&n=vqoYFqQPeXsYcg&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cpcm2%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=AG3C_xAwRAIgK4_IsIKYffoN50hbYozMsK8in0FpxMS4pjRt3dnpzVICIEwi6c81RAuLBey0S-vPKD3Ezp2b1XkI2n0jSgW3zY7_&alr=yes&sig=AOq0QJ8wRQIgf-Ln_7DBvvjI0n6Da1qlnG-LptXvEmbGtsVzUmsxQQ4CIQDc6V7727p0G7CpPQ2N3KjRJ-U9pbDfaxegI4qg51oYow%3D%3D&cpn=ENP4yh0sfaRbcruU&cver=1.20230321.00.00&range=0-13117&rn=3&rbuf=0&pot=Mmdoi5O9SNTAF2iwMSO9DBqTFWmTi_IwHWbaznUr5TbiIoG8RzU7yEPc7bY72kGOL_TUmbxI640MCBM3Z9QG1Vua29wypX4MInvLwKv5meiJ5K0jw_f3b8hXXRGSbwBXAcrvSFjpii7e
IP 91.90.45.173:0
ASN #50304 Blix Solutions AS
File type WebM\012- EBML file, creator webmB\20\012- data
Hash 986de7fc7169e95a98b1f244372cfc13
e8e1fe5fc84db90b92576bb6df0c0ee8d01ad646
c17401bf045d89eaf0704159660132eed36d732e5f40de60e4a9903a42b66b8b
POST /videoplayback?expire=1679757493&ei=VbweZM3AEq2K0u8PzZaPuAw&ip=91.90.42.154&id=o-ALnwEvI34VjDMOanTD4TjNq3RyJAN8_NBtdX-BQG8Asd&itag=244&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C278&source=youtube&requiressl=yes&mh=95&mm=31%2C29&mn=sn-capm-vnae%2Csn-5go7ynlk&ms=au%2Crdu&mv=m&mvi=2&pl=21&pcm2=yes&initcwndbps=2467500&spc=99c5CcjOXf2MIw6fddPMk8TgcU7dAG0b2vVG2nHlTzagDmjRmg&vprv=1&mime=video%2Fwebm&ns=YpI13W1MqRxedQLM--S9tDoM&gir=yes&clen=125342721&dur=3839.967&lmt=1679712890489539&mt=1679735605&fvip=1&keepalive=yes&fexp=24007246&c=WEB_EMBEDDED_PLAYER&txp=5319224&n=vqoYFqQPeXsYcg&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cpcm2%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=AG3C_xAwRAIgK4_IsIKYffoN50hbYozMsK8in0FpxMS4pjRt3dnpzVICIEwi6c81RAuLBey0S-vPKD3Ezp2b1XkI2n0jSgW3zY7_&alr=yes&sig=AOq0QJ8wRQIgf-Ln_7DBvvjI0n6Da1qlnG-LptXvEmbGtsVzUmsxQQ4CIQDc6V7727p0G7CpPQ2N3KjRJ-U9pbDfaxegI4qg51oYow%3D%3D&cpn=ENP4yh0sfaRbcruU&cver=1.20230321.00.00&range=0-13117&rn=3&rbuf=0&pot=Mmdoi5O9SNTAF2iwMSO9DBqTFWmTi_IwHWbaznUr5TbiIoG8RzU7yEPc7bY72kGOL_TUmbxI640MCBM3Z9QG1Vua29wypX4MInvLwKv5meiJ5K0jw_f3b8hXXRGSbwBXAcrvSFjpii7e HTTP/1.1
Host: rr2---sn-capm-vnae.googlevideo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Length: 2
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Last-Modified: Sat, 25 Mar 2023 02:54:50 GMT
Content-Type: video/webm
Date: Sat, 25 Mar 2023 09:18:13 GMT
Expires: Sat, 25 Mar 2023 09:18:13 GMT
Cache-Control: private, max-age=21300
Accept-Ranges: bytes
Content-Length: 13118
Connection: keep-alive
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
Access-Control-Allow-Origin: https://www.youtube.com
Access-Control-Allow-Credentials: true
Timing-Allow-Origin: https://www.youtube.com
Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms
Vary: Origin
Cross-Origin-Resource-Policy: cross-origin
X-Restrict-Formats-Hint: None
X-Content-Type-Options: nosniff
Server: gvs 1.0
trc-events.taboola.com/1526976/log/3/unip?en=pre_d_eng_tb&tos=1585&scd=0&ssd=1&est=1679735904747&ver=36&isls=true&src=i&invt=1500&msa=462&rv=1&tim=1679735906334&vi=1679735904746&ri=7aded00d8f51fd25c0125cf2b8590b59&ref=null&cv=20230319-5-RELEASE&item-url=https%3A%2F%2Fbetterbrainperformance.com%2F%3Ftid%3D1027ec93256c16abc9447f2e2b3452
141.226.228.48204 No Content 0 B URL HTTP/2 trc-events.taboola.com/1526976/log/3/unip?en=pre_d_eng_tb&tos=1585&scd=0&ssd=1&est=1679735904747&ver=36&isls=true&src=i&invt=1500&msa=462&rv=1&tim=1679735906334&vi=1679735904746&ri=7aded00d8f51fd25c0125cf2b8590b59&ref=null&cv=20230319-5-RELEASE&item-url=https%3A%2F%2Fbetterbrainperformance.com%2F%3Ftid%3D1027ec93256c16abc9447f2e2b3452
IP 141.226.228.48:0
ASN #200478 Taboola.com ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /1526976/log/3/unip?en=pre_d_eng_tb&tos=1585&scd=0&ssd=1&est=1679735904747&ver=36&isls=true&src=i&invt=1500&msa=462&rv=1&tim=1679735906334&vi=1679735904746&ri=7aded00d8f51fd25c0125cf2b8590b59&ref=null&cv=20230319-5-RELEASE&item-url=https%3A%2F%2Fbetterbrainperformance.com%2F%3Ftid%3D1027ec93256c16abc9447f2e2b3452 HTTP/1.1
Host: trc-events.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://betterbrainperformance.com
Connection: keep-alive
Referer: https://betterbrainperformance.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: nginx
date: Sat, 25 Mar 2023 09:18:14 GMT
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: https://betterbrainperformance.com
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
X-Firefox-Spdy: h2
trc-events.taboola.com/1270828/log/3/unip?en=pre_d_eng_tb&tos=1584&scd=0&ssd=1&est=1679735904747&ver=36&isls=true&src=i&invt=1500&msa=462&rv=1&tim=1679735906333&vi=1679735904746&ri=c849f0daf3b65243b2b1293bb7bba6b4&ref=null&cv=20230319-5-RELEASE&item-url=https%3A%2F%2Fbetterbrainperformance.com%2F%3Ftid%3D1027ec93256c16abc9447f2e2b3452
141.226.228.48204 No Content 0 B URL HTTP/2 trc-events.taboola.com/1270828/log/3/unip?en=pre_d_eng_tb&tos=1584&scd=0&ssd=1&est=1679735904747&ver=36&isls=true&src=i&invt=1500&msa=462&rv=1&tim=1679735906333&vi=1679735904746&ri=c849f0daf3b65243b2b1293bb7bba6b4&ref=null&cv=20230319-5-RELEASE&item-url=https%3A%2F%2Fbetterbrainperformance.com%2F%3Ftid%3D1027ec93256c16abc9447f2e2b3452
IP 141.226.228.48:0
ASN #200478 Taboola.com ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /1270828/log/3/unip?en=pre_d_eng_tb&tos=1584&scd=0&ssd=1&est=1679735904747&ver=36&isls=true&src=i&invt=1500&msa=462&rv=1&tim=1679735906333&vi=1679735904746&ri=c849f0daf3b65243b2b1293bb7bba6b4&ref=null&cv=20230319-5-RELEASE&item-url=https%3A%2F%2Fbetterbrainperformance.com%2F%3Ftid%3D1027ec93256c16abc9447f2e2b3452 HTTP/1.1
Host: trc-events.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://betterbrainperformance.com
Connection: keep-alive
Referer: https://betterbrainperformance.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: nginx
date: Sat, 25 Mar 2023 09:18:14 GMT
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: https://betterbrainperformance.com
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
X-Firefox-Spdy: h2
trc-events.taboola.com/1270828/log/3/unip?en=pre_d_eng_tb&tos=4588&scd=0&ssd=1&est=1679735904747&ver=36&isls=true&src=i&invt=3000&msa=462&rv=1&tim=1679735909337&vi=1679735904746&ri=c849f0daf3b65243b2b1293bb7bba6b4&ref=null&cv=20230319-5-RELEASE&item-url=https%3A%2F%2Fbetterbrainperformance.com%2F%3Ftid%3D1027ec93256c16abc9447f2e2b3452
141.226.228.48204 No Content 0 B URL HTTP/2 trc-events.taboola.com/1270828/log/3/unip?en=pre_d_eng_tb&tos=4588&scd=0&ssd=1&est=1679735904747&ver=36&isls=true&src=i&invt=3000&msa=462&rv=1&tim=1679735909337&vi=1679735904746&ri=c849f0daf3b65243b2b1293bb7bba6b4&ref=null&cv=20230319-5-RELEASE&item-url=https%3A%2F%2Fbetterbrainperformance.com%2F%3Ftid%3D1027ec93256c16abc9447f2e2b3452
IP 141.226.228.48:0
ASN #200478 Taboola.com ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /1270828/log/3/unip?en=pre_d_eng_tb&tos=4588&scd=0&ssd=1&est=1679735904747&ver=36&isls=true&src=i&invt=3000&msa=462&rv=1&tim=1679735909337&vi=1679735904746&ri=c849f0daf3b65243b2b1293bb7bba6b4&ref=null&cv=20230319-5-RELEASE&item-url=https%3A%2F%2Fbetterbrainperformance.com%2F%3Ftid%3D1027ec93256c16abc9447f2e2b3452 HTTP/1.1
Host: trc-events.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://betterbrainperformance.com
Connection: keep-alive
Referer: https://betterbrainperformance.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Sat, 25 Mar 2023 09:18:16 GMT
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: https://betterbrainperformance.com
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
X-Firefox-Spdy: h2
trc-events.taboola.com/1526976/log/3/unip?en=pre_d_eng_tb&tos=4590&scd=0&ssd=1&est=1679735904747&ver=36&isls=true&src=i&invt=3000&msa=462&rv=1&tim=1679735909339&vi=1679735904746&ri=7aded00d8f51fd25c0125cf2b8590b59&ref=null&cv=20230319-5-RELEASE&item-url=https%3A%2F%2Fbetterbrainperformance.com%2F%3Ftid%3D1027ec93256c16abc9447f2e2b3452
141.226.228.48204 No Content 0 B URL HTTP/2 trc-events.taboola.com/1526976/log/3/unip?en=pre_d_eng_tb&tos=4590&scd=0&ssd=1&est=1679735904747&ver=36&isls=true&src=i&invt=3000&msa=462&rv=1&tim=1679735909339&vi=1679735904746&ri=7aded00d8f51fd25c0125cf2b8590b59&ref=null&cv=20230319-5-RELEASE&item-url=https%3A%2F%2Fbetterbrainperformance.com%2F%3Ftid%3D1027ec93256c16abc9447f2e2b3452
IP 141.226.228.48:0
ASN #200478 Taboola.com ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /1526976/log/3/unip?en=pre_d_eng_tb&tos=4590&scd=0&ssd=1&est=1679735904747&ver=36&isls=true&src=i&invt=3000&msa=462&rv=1&tim=1679735909339&vi=1679735904746&ri=7aded00d8f51fd25c0125cf2b8590b59&ref=null&cv=20230319-5-RELEASE&item-url=https%3A%2F%2Fbetterbrainperformance.com%2F%3Ftid%3D1027ec93256c16abc9447f2e2b3452 HTTP/1.1
Host: trc-events.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://betterbrainperformance.com
Connection: keep-alive
Referer: https://betterbrainperformance.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Sat, 25 Mar 2023 09:18:16 GMT
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: https://betterbrainperformance.com
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
X-Firefox-Spdy: h2
d39ldsmboekjvi.cloudfront.net/js/uikit.js
143.204.42.114200 OK 0 B URL HTTP/2 d39ldsmboekjvi.cloudfront.net/js/uikit.js
IP 143.204.42.114:0
GET /js/uikit.js HTTP/1.1
Host: d39ldsmboekjvi.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://betterbrainperformance.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
last-modified: Tue, 20 Nov 2018 00:00:25 GMT
x-amz-meta-s3b-last-modified: 20181120T000006Z
x-amz-version-id: duhEjCraPA4oBZnQrp_5xZaGERwotBcm
server: AmazonS3
content-encoding: gzip
date: Sat, 25 Mar 2023 05:56:52 GMT
etag: W/"01c6752b3407d2855387e7ebdce2c9b4"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 bcd5dadccb0831729969c938747ff79a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: LL9lc82tlVdOATQHmjq6pd1qcjQDgFi1nUj9kXsdPcBavFnbuhntgQ==
age: 24907
X-Firefox-Spdy: h2
d39ldsmboekjvi.cloudfront.net/js/exit.js
143.204.42.114200 OK 0 B URL HTTP/2 d39ldsmboekjvi.cloudfront.net/js/exit.js
IP 143.204.42.114:0
GET /js/exit.js HTTP/1.1
Host: d39ldsmboekjvi.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://betterbrainperformance.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
last-modified: Tue, 20 Nov 2018 01:19:39 GMT
x-amz-meta-s3b-last-modified: 20181120T011925Z
x-amz-version-id: WcoW9CDTqWsVAozmBYHPs87Lb_o4ebVb
server: AmazonS3
content-encoding: gzip
date: Sat, 25 Mar 2023 06:16:18 GMT
etag: W/"2f6491198e9bc6054b95100d234c333e"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 bcd5dadccb0831729969c938747ff79a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: V1NqY7EPXyid1Ca9wckDP4-oGV0fCNwseJ0d4rW0vGHaKIe8HXrD4A==
age: 18570
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Barlow+Condensed
172.217.21.170200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Barlow+Condensed
IP 172.217.21.170:0
GET /css?family=Barlow+Condensed HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://d39ldsmboekjvi.cloudfront.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 25 Mar 2023 09:18:11 GMT
date: Sat, 25 Mar 2023 09:18:11 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
trc.taboola.com/1270828/trc/3/json?tim=1679735904752&data=%7B%22id%22%3A245%2C%22ii%22%3A%22%2F%22%2C%22it%22%3A%22video%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22vi%22%3A1679735904746%2C%22cv%22%3A%2220230319-5-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fbetterbrainperformance.com%2F%3Ftid%3D1027ec93256c16abc9447f2e2b3452%22%2C%22e%22%3Anull%2C%22cb%22%3A%22TFASC.trkCallback%22%2C%22qs%22%3A%22%3Ftid%3D1027ec93256c16abc9447f2e2b3452%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Dzenithlabs-network%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1679735904752%2C%22ref%22%3Anull%2C%22item-url%22%3A%22https%3A%2F%2Fbetterbrainperformance.com%2F%3Ftid%3D1027ec93256c16abc9447f2e2b3452%22%2C%22tos%22%3A3%2C%22ssd%22%3A1%2C%22scd%22%3A0%2C%22supv%22%3Atrue%7D%7D&pubit=i
151.101.193.44200 OK 0 B URL HTTP/2 trc.taboola.com/1270828/trc/3/json?tim=1679735904752&data=%7B%22id%22%3A245%2C%22ii%22%3A%22%2F%22%2C%22it%22%3A%22video%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22vi%22%3A1679735904746%2C%22cv%22%3A%2220230319-5-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fbetterbrainperformance.com%2F%3Ftid%3D1027ec93256c16abc9447f2e2b3452%22%2C%22e%22%3Anull%2C%22cb%22%3A%22TFASC.trkCallback%22%2C%22qs%22%3A%22%3Ftid%3D1027ec93256c16abc9447f2e2b3452%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Dzenithlabs-network%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1679735904752%2C%22ref%22%3Anull%2C%22item-url%22%3A%22https%3A%2F%2Fbetterbrainperformance.com%2F%3Ftid%3D1027ec93256c16abc9447f2e2b3452%22%2C%22tos%22%3A3%2C%22ssd%22%3A1%2C%22scd%22%3A0%2C%22supv%22%3Atrue%7D%7D&pubit=i
IP 151.101.193.44:0
GET /1270828/trc/3/json?tim=1679735904752&data=%7B%22id%22%3A245%2C%22ii%22%3A%22%2F%22%2C%22it%22%3A%22video%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22vi%22%3A1679735904746%2C%22cv%22%3A%2220230319-5-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fbetterbrainperformance.com%2F%3Ftid%3D1027ec93256c16abc9447f2e2b3452%22%2C%22e%22%3Anull%2C%22cb%22%3A%22TFASC.trkCallback%22%2C%22qs%22%3A%22%3Ftid%3D1027ec93256c16abc9447f2e2b3452%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Dzenithlabs-network%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1679735904752%2C%22ref%22%3Anull%2C%22item-url%22%3A%22https%3A%2F%2Fbetterbrainperformance.com%2F%3Ftid%3D1027ec93256c16abc9447f2e2b3452%22%2C%22tos%22%3A3%2C%22ssd%22%3A1%2C%22scd%22%3A0%2C%22supv%22%3Atrue%7D%7D&pubit=i HTTP/1.1
Host: trc.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://betterbrainperformance.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: *
access-control-allow-credentials: true
content-encoding: gzip
accept-ranges: bytes
date: Sat, 25 Mar 2023 09:18:12 GMT
via: 1.1 varnish
x-served-by: cache-bma1656-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1679735892.117850,VS0,VE126
vary: Accept-Encoding
x-vcl-time-ms: 126
X-Firefox-Spdy: h2
trc.taboola.com/1526976/trc/3/json?tim=1679735904985&data=%7B%22id%22%3A70%2C%22ii%22%3A%22%2F%22%2C%22it%22%3A%22video%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22vi%22%3A1679735904746%2C%22cv%22%3A%2220230319-5-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fbetterbrainperformance.com%2F%3Ftid%3D1027ec93256c16abc9447f2e2b3452%22%2C%22e%22%3Anull%2C%22cb%22%3A%22TFASC.trkCallback1%22%2C%22qs%22%3A%22%3Ftid%3D1027ec93256c16abc9447f2e2b3452%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Dzenithlabs-network%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1679735904756%2C%22ref%22%3Anull%2C%22item-url%22%3A%22https%3A%2F%2Fbetterbrainperformance.com%2F%3Ftid%3D1027ec93256c16abc9447f2e2b3452%22%2C%22tos%22%3A7%2C%22ssd%22%3A1%2C%22scd%22%3A0%2C%22supv%22%3Atrue%7D%7D&pubit=i
151.101.193.44200 OK 0 B URL HTTP/2 trc.taboola.com/1526976/trc/3/json?tim=1679735904985&data=%7B%22id%22%3A70%2C%22ii%22%3A%22%2F%22%2C%22it%22%3A%22video%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22vi%22%3A1679735904746%2C%22cv%22%3A%2220230319-5-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fbetterbrainperformance.com%2F%3Ftid%3D1027ec93256c16abc9447f2e2b3452%22%2C%22e%22%3Anull%2C%22cb%22%3A%22TFASC.trkCallback1%22%2C%22qs%22%3A%22%3Ftid%3D1027ec93256c16abc9447f2e2b3452%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Dzenithlabs-network%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1679735904756%2C%22ref%22%3Anull%2C%22item-url%22%3A%22https%3A%2F%2Fbetterbrainperformance.com%2F%3Ftid%3D1027ec93256c16abc9447f2e2b3452%22%2C%22tos%22%3A7%2C%22ssd%22%3A1%2C%22scd%22%3A0%2C%22supv%22%3Atrue%7D%7D&pubit=i
IP 151.101.193.44:0
GET /1526976/trc/3/json?tim=1679735904985&data=%7B%22id%22%3A70%2C%22ii%22%3A%22%2F%22%2C%22it%22%3A%22video%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22vi%22%3A1679735904746%2C%22cv%22%3A%2220230319-5-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fbetterbrainperformance.com%2F%3Ftid%3D1027ec93256c16abc9447f2e2b3452%22%2C%22e%22%3Anull%2C%22cb%22%3A%22TFASC.trkCallback1%22%2C%22qs%22%3A%22%3Ftid%3D1027ec93256c16abc9447f2e2b3452%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Dzenithlabs-network%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1679735904756%2C%22ref%22%3Anull%2C%22item-url%22%3A%22https%3A%2F%2Fbetterbrainperformance.com%2F%3Ftid%3D1027ec93256c16abc9447f2e2b3452%22%2C%22tos%22%3A7%2C%22ssd%22%3A1%2C%22scd%22%3A0%2C%22supv%22%3Atrue%7D%7D&pubit=i HTTP/1.1
Host: trc.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://betterbrainperformance.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: *
access-control-allow-credentials: true
content-encoding: gzip
accept-ranges: bytes
date: Sat, 25 Mar 2023 09:18:12 GMT
via: 1.1 varnish
x-served-by: cache-bma1656-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1679735892.335982,VS0,VE129
vary: Accept-Encoding
x-vcl-time-ms: 129
X-Firefox-Spdy: h2
www.youtube.com/iframe_api
216.58.207.238200 OK 0 B URL HTTP/2 www.youtube.com/iframe_api
IP 216.58.207.238:0
GET /iframe_api HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://betterbrainperformance.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
x-content-type-options: nosniff
expires: Sat, 25 Mar 2023 09:18:11 GMT
date: Sat, 25 Mar 2023 09:18:11 GMT
cache-control: private, max-age=0
strict-transport-security: max-age=31536000
x-frame-options: SAMEORIGIN
cross-origin-opener-policy-report-only: same-origin; report-to="youtube_main"
cross-origin-resource-policy: cross-origin
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-platform=*, ch-ua-platform-version=*
report-to: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]}
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info."
content-encoding: br
server: ESF
x-xss-protection: 0
set-cookie: YSC=c6OzbutrJ_k; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none
VISITOR_INFO1_LIVE=hykzj54w6nw; Domain=.youtube.com; Expires=Thu, 21-Sep-2023 09:18:11 GMT; Path=/; Secure; HttpOnly; SameSite=none
CONSENT=PENDING+901; expires=Mon, 24-Mar-2025 09:18:11 GMT; path=/; domain=.youtube.com; Secure
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Open+Sans:400,700
172.217.21.170200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Open+Sans:400,700
IP 172.217.21.170:0
GET /css?family=Open+Sans:400,700 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://d39ldsmboekjvi.cloudfront.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 25 Mar 2023 09:18:11 GMT
date: Sat, 25 Mar 2023 09:18:11 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Permanent+Marker
172.217.21.170200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Permanent+Marker
IP 172.217.21.170:0
GET /css?family=Permanent+Marker HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://betterbrainperformance.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 25 Mar 2023 09:18:11 GMT
date: Sat, 25 Mar 2023 09:18:11 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Oswald:400,500,600,700
172.217.21.170200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Oswald:400,500,600,700
IP 172.217.21.170:0
GET /css?family=Oswald:400,500,600,700 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://d39ldsmboekjvi.cloudfront.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 25 Mar 2023 09:18:11 GMT
date: Sat, 25 Mar 2023 09:18:11 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
static.hotjar.com/c/hotjar-1423769.js?sv=6
54.230.111.113200 OK 0 B URL HTTP/2 static.hotjar.com/c/hotjar-1423769.js?sv=6
IP 54.230.111.113:0
GET /c/hotjar-1423769.js?sv=6 HTTP/1.1
Host: static.hotjar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://betterbrainperformance.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
content-encoding: br
cross-origin-resource-policy: cross-origin
strict-transport-security: max-age=2592000; includeSubDomains
x-cache-hit: 1
x-content-type-options: nosniff
date: Sat, 25 Mar 2023 09:18:11 GMT
cache-control: max-age=60
etag: W/fa16f37387208904a38e9b5f4ea411c3
vary: Accept-Encoding
x-cache: RefreshHit from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Dw9KYktNu04Kz-WrU1g23Ut0kjNRUppcyhYDrpyKTMEVhEesdjKRbA==
X-Firefox-Spdy: h2
maxcdn.bootstrapcdn.com/bootstrap/3.3.6/js/bootstrap.min.js
104.18.10.207200 OK 0 B URL HTTP/2 maxcdn.bootstrapcdn.com/bootstrap/3.3.6/js/bootstrap.min.js
IP 104.18.10.207:0
GET /bootstrap/3.3.6/js/bootstrap.min.js HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://betterbrainperformance.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 25 Mar 2023 09:18:10 GMT
content-type: application/javascript; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
last-modified: Mon, 25 Jan 2021 22:03:59 GMT
cdn-cachedat: 11/05/2021 16:36:29
cdn-edgestorageid: 722
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-proxyver: 1.0
cdn-requestid: bfa40aed2fbee600eecd4f43bc8c0656
cdn-cache: HIT
cf-cache-status: HIT
age: 1440408
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 7ad610a5d92cb503-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
betterbrainperformance.com/?tid=1027ec93256c16abc9447f2e2b3452
172.67.152.101200 OK 0 B URL HTTP/2 betterbrainperformance.com/?tid=1027ec93256c16abc9447f2e2b3452
IP 172.67.152.101:0
GET /?tid=1027ec93256c16abc9447f2e2b3452 HTTP/1.1
Host: betterbrainperformance.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Sat, 25 Mar 2023 09:18:10 GMT
content-type: text/html; charset=UTF-8
set-cookie: tid=1027ec93256c16abc9447f2e2b3452; path=/; secure
PHPSESSID=3eee46c65969f053de3c1c8db4072c64; path=/; secure
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DbfSvYH7qv8LIKUx8ob8UUcaD7dpnoMeB2Bdv4UdX68BT2XoQOz%2FZnpruWnGWz1mvPX%2B7na3nFqNN9JCfVpHCZvKHrKbJMqD%2FlEt4MC1OFOwN7yn24lfvKfSUY2dSdNapyKSNTHfMW7hOKCZsA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7ad610a328e4b4ed-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2