pages.upwellness.com/uc-grplus-fps/?offer=67&session_id=10290265cbed53f23d905efdd75177&n=tune&AFFID=477232&subid=37_UW221124PM
200 OK 44 kB URL HTTP/1.1 pages.upwellness.com/uc-grplus-fps/?offer=67&session_id=10290265cbed53f23d905efdd75177&n=tune&AFFID=477232&subid=37_UW221124PM
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text
Hash 95f56da273d42f22057b0426628a0b76
927aa5e24c193bd2a587fe79bd719e3d22ac18e2
e218cc5dbd012a7ba54a39aef2cc153867bac4acd9ba96a20a0e967b36e688a5
GET /uc-grplus-fps/?offer=67&session_id=10290265cbed53f23d905efdd75177&n=tune&AFFID=477232&subid=37_UW221124PM HTTP/1.1
Host: pages.upwellness.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
date: Thu, 24 Nov 2022 22:53:07 GMT
content-type: text/html; charset=utf-8
content-length: 43472
set-cookie: ubvs=15ff8b53-9669-430a-ab67-d537655e1f6c; Max-Age=15552000; Path=/; SameSite=Lax
ubvt=15ff8b53-9669-430a-ab67-d537655e1f6c; Max-Age=259200; Domain=upwellness.com; Path=/; SameSite=Lax
ubpv=at%2C6d2c7105-ebae-455a-91f2-47af4209ed5f; Max-Age=15897600; Path=/uc-grplus-fps/; SameSite=Lax
content-location: http://pages.upwellness.com/uc-grplus-fps/
etag: "at:15ff8b539669430aab67d537655e1f6c"
link: <http://pages.upwellness.com/uc-grplus-fps/>; rel="canonical"
x-unbounce-pageid: 6d2c7105-ebae-455a-91f2-47af4209ed5f
x-unbounce-variant: at
x-unbounce-visitorid: 15ff8b53-9669-430a-ab67-d537655e1f6c
content-encoding: gzip
x-proxy-backend: page-server
connection: close
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7c60904d097cde276e4e5632cef1b9f1
4f805026462589345d85e8df2d18eafba6237504
12af026999398f4976749e320667d43da3f99b7a2e8254aca7a410a964a106aa
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "12AF026999398F4976749E320667D43DA3F99B7A2E8254ACA7A410A964A106AA"
Last-Modified: Thu, 24 Nov 2022 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4513
Expires: Fri, 25 Nov 2022 00:08:20 GMT
Date: Thu, 24 Nov 2022 22:53:07 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash af40a2fcf8debb90c3608002da6c907a
3c75d6c0b557a3bd8d5db50155b8d896e852c145
555617a51ee3077552545a29a3baf0b43e8a82367e4c08110ee480ebedc8b523
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4880
Cache-Control: max-age=133164
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 22:53:07 GMT
Etag: "637f47ef-1d7"
Expires: Sat, 26 Nov 2022 11:52:31 GMT
Last-Modified: Thu, 24 Nov 2022 10:31:11 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 260e9998c20d831b66f1029c8f47aac9
716d630f647c54dc69a7f9c63a6cac294b3df7f7
c9951a909f354174f0075a01c01c3c3aa6960983040e328bfbbbea81aeb405c2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C9951A909F354174F0075A01C01C3C3AA6960983040E328BFBBBEA81AEB405C2"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3339
Expires: Thu, 24 Nov 2022 23:48:46 GMT
Date: Thu, 24 Nov 2022 22:53:07 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 4d7e4eed097b9c4e5d509419f1cfc85a
290bb3d428a7c6330e2e3d73a952b16f820896c8
0dc9ca0f57af15adcd416035e92794711434e3d53a1feff21d8481d6d500986c
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Content-Length, Alert, Backoff, Retry-After
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Thu, 24 Nov 2022 22:17:20 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 2147
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: jYTDaJHHkTiMshoM6tVZr1VlCUBkO490OxC67LcaKSBacOg5I7J7FKXvQ4OU7Ni+uTuJQOhj44c=
x-amz-request-id: W7M818TXCADAF61F
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 24 Nov 2022 22:40:34 GMT
age: 753
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
builder-assets.unbounce.com/published-css/main-7b78720.z.css
200 OK 2.9 kB URL HTTP/1.1 builder-assets.unbounce.com/published-css/main-7b78720.z.css
IP
File type ASCII text, with very long lines (15017)
Hash 4458a4d76a70cb207bcc34d6bc6f872f
f484b0b1737f7de59ca699e6cc3169d234e8f6a8
0825f8972704bc1b84e30170cd77f5ecde2d6a7dbf9e43be96c6809c2c5228d7
GET /published-css/main-7b78720.z.css HTTP/1.1
Host: builder-assets.unbounce.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pages.upwellness.com/
HTTP/1.1 200 OK
Content-Type: text/css
Content-Length: 2902
Connection: keep-alive
Date: Tue, 30 Aug 2022 02:28:13 GMT
Last-Modified: Mon, 04 Jul 2022 16:47:32 GMT
ETag: "4458a4d76a70cb207bcc34d6bc6f872f"
Cache-Control: max-age=31536000
Content-Encoding: gzip
x-amz-version-id: L4ZmeoxkTVchyWCkJ77TONE89Elaj8X7
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: Ouak84ryHum_BkbUkr5mWV4b4gUKf0NlEZUKhHxC2qRdtTTHPP0nOQ==
Age: 7503896
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 22:53:07 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/jquery/3.1.0/jquery.min.js
200 OK 27 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/jquery/3.1.0/jquery.min.js
IP
File type ASCII text, with very long lines (32014)
Hash b0a538eca8603c37c15e4ccd04500c57
f89f4099777ae63be4e09fee2b1227bc6874fd73
917decede324477626db7f615c8ee595556bafb7a875bdc9d3c3b1b94b345307
GET /ajax/libs/jquery/3.1.0/jquery.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pages.upwellness.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 24 Nov 2022 22:53:08 GMT
content-type: application/javascript; charset=utf-8
content-length: 27198
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ec4-1514f"
last-modified: Mon, 04 May 2020 16:11:48 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1917856
expires: Tue, 14 Nov 2023 22:53:08 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Ew0%2FsYbtiaqCOp2R%2BpKMOmrrW3J31vWtbR6tb3DkQbARmmuEwkLrBIII613O9D7Yz6cDXz6IzNfgAiE4qFvQmWVLqHCelRahANwUu6dbJOMEUsKpTs504G%2FpLnp07ixhxKxjaXOa"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 76f5b80d5adcb4fd-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 278 B IP
Hash d54e2cd8e1ceab1370f3eca6d1f3f793
6337f404b41c2a8fff1dadb3bf009f971fad469f
367ae1618327ffdfdadb398d5088a44494034c3b6741bb27d2cdba9c9263d8d0
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4488
Cache-Control: max-age=87411
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 22:53:08 GMT
Etag: "637e96bf-116"
Expires: Fri, 25 Nov 2022 23:09:59 GMT
Last-Modified: Wed, 23 Nov 2022 21:55:11 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 278
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash a0111a2443450172e5d2b48d350a8f57
75e89d4cd001303e66a93880f96d6c47e7d665ab
c9865c82b8f373aeb3a7333b0f65408211d832aba753c35d3544ecb2913f4f64
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 22:53:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash dd0dd96ca622aa07354fabdd0da767bf
a29eaa02a81dabed2c12be20a89d65a5a0417524
6a670e9031ec8c94bdc91c47a2d6a4ca2bd95fe032fec28888a8e6d7dc163cb4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 22:53:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash dd0dd96ca622aa07354fabdd0da767bf
a29eaa02a81dabed2c12be20a89d65a5a0417524
6a670e9031ec8c94bdc91c47a2d6a4ca2bd95fe032fec28888a8e6d7dc163cb4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 22:53:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash dd0dd96ca622aa07354fabdd0da767bf
a29eaa02a81dabed2c12be20a89d65a5a0417524
6a670e9031ec8c94bdc91c47a2d6a4ca2bd95fe032fec28888a8e6d7dc163cb4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 22:53:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cdn.useproof.com/proof.js?acc=trtc0limNRYJwhvfi9uRqUFQo0w1
200 OK 498 kB URL HTTP/2 cdn.useproof.com/proof.js?acc=trtc0limNRYJwhvfi9uRqUFQo0w1
IP
File type Unicode text, UTF-8 text, with very long lines (60034), with no line terminators
Size 498 kB (497733 bytes)
Hash 0426397a9b31146729ac86c5be8595d3
953342b7defc23d1c552eba63f42bb915aae90f3
418614329e831c01f8232ddf31feefe6f63c6b52b9c6cbdd5bd5ac314540cfaf
GET /proof.js?acc=trtc0limNRYJwhvfi9uRqUFQo0w1 HTTP/1.1
Host: cdn.useproof.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pages.upwellness.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 24 Nov 2022 22:53:08 GMT
content-type: application/javascript
content-length: 497733
x-amz-id-2: XfamGhBMjZBo/sWrg3mxYdwUMUL0rpYArqF2RUd2t+2nxyqUognVNx+1xnHz8Eg7hGncdCbH6WA=
x-amz-request-id: RVX6E6XRK17ASENB
last-modified: Mon, 29 Jun 2020 14:15:25 GMT
etag: "0426397a9b31146729ac86c5be8595d3"
cache-control: public, max-age=315360000, no-transform
x-amz-version-id: F0WxJo6k6ZqSk5t4_qZ.mqlg1RkwiqAq
cf-cache-status: HIT
age: 50177187
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2Fk%2Brve%2Bndvz51YwlXw3ulZEqqBKEdU%2BictXm71uKke10YvGQ7%2FE1lX7yXajAyv2hknIDRw%2FZYYUGycaPaWMECnWVUxmF8q94n0%2BKUE46ZR4y%2FeAayxBoa1ONf%2Brsu74gkfDC"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76f5b80d9a73b512-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
fast.wistia.com/assets/external/E-v1.js
200 OK 117 kB URL HTTP/2 fast.wistia.com/assets/external/E-v1.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Size 117 kB (116637 bytes)
Hash daf6f411893d0a2adeebb8a9878f54dc
7359be87a83e4bf392c7465d0619f8d1a456be7b
311032200014a4c8f4650c783ebddec6f839112f53916a25b45afbbe7b318c50
GET /assets/external/E-v1.js HTTP/1.1
Host: fast.wistia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pages.upwellness.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
cache-control: public, max-age=3600
content-encoding: br
content-type: application/javascript
etag: "637ce334-1c79d"
last-modified: Tue, 22 Nov 2022 14:56:52 GMT
timing-allow-origin: *
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 24 Nov 2022 22:53:08 GMT
age: 1017
x-served-by: cache-iad-kiad7000159-IAD, cache-bma1678-BMA
x-cache: HIT, HIT
x-cache-hits: 38, 35
x-timer: S1669330388.131804,VS0,VE0
vary: Accept-Encoding
strict-transport-security: max-age=0
x-ecma-v: modern
x-browser: firefox
x-browser-version: 105
content-length: 116637
X-Firefox-Spdy: h2
0505c62f0b6942afbaf22991f0778de5.js.ubembed.com/
200 OK 12 kB URL HTTP/1.1 0505c62f0b6942afbaf22991f0778de5.js.ubembed.com/
IP
File type ASCII text, with very long lines (11879), with no line terminators
Hash b08aad2ef1dfef1576d4cbddd3ddd8fd
25e799f9b661b4cb2bd3c8c70455d1c928caa2d7
af8e0cdb45f6d957d59370dd3bbc96e2b3808be1c264569338784e4010d3ae10
GET / HTTP/1.1
Host: 0505c62f0b6942afbaf22991f0778de5.js.ubembed.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pages.upwellness.com/
HTTP/1.1 200 OK
Connection: keep-alive
Content-Type: application/json
x-amz-apigw-id: cINZKGgVDoEFcrg=
X-Amz-Cf-Pop: ARN56-P2
X-Backend-Region: eu_west_1
Date: Thu, 24 Nov 2022 22:53:08 GMT
Age: 0
X-Cache: Miss from cloudfront, MISS
Access-Control-Allow-Origin: *
Cache-Control: max-age=0, must-revalidate
Vary: Accept-Encoding, Referer
ETag: c1a25e1d6816d6d62e7914c952b1818c-v0.179.2
transfer-encoding: chunked
www.googletagmanager.com/gtag/js?id=AW-10838597190
200 OK 53 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=AW-10838597190
IP
File type ASCII text, with very long lines (1921)
Hash 3525c05b3e0e9bfc3b4f222e241e47dc
0583059751cd02a78d76f21e3ebfa27f140b8424
a084717d2541ebb13b6be898a5ae5c35a078735dcce07a8ae3217be13eb0f8f4
GET /gtag/js?id=AW-10838597190 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pages.upwellness.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 24 Nov 2022 22:53:08 GMT
expires: Thu, 24 Nov 2022 22:53:08 GMT
cache-control: private, max-age=900
last-modified: Thu, 24 Nov 2022 21:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 53031
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fast.wistia.com/embed/medias/e8xcaqkjm4/swatch
200 OK 4.9 kB URL HTTP/2 fast.wistia.com/embed/medias/e8xcaqkjm4/swatch
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 100x56, components 3\012- data
Hash b19e58663d1da3818b3f065f84d86819
f3a3a8984290854c597ba2dc398cb523d6b0a7a6
7cecfaabceb831e4142db41aba15050527bc5c3bb3182f115739dda6e90a3aaa
GET /embed/medias/e8xcaqkjm4/swatch HTTP/1.1
Host: fast.wistia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pages.upwellness.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-methods: GET, HEAD, OPTIONS
access-control-allow-origin: *, *
access-control-expose-headers: Origin, Content-Type, Accept, Server, x-amz-version-id, X-Cache
access-control-request-method: *
cache-control: public, no-cache, max-age=30932684
content-disposition: inline
content-type: image/jpeg
last-modified: Tue, 05 Oct 2021 16:24:56 UTC
timing-allow-origin: *
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 24 Nov 2022 22:53:08 GMT
age: 25410
x-served-by: cache-iad-kcgs7200082-IAD, cache-bma1678-BMA
x-cache: HIT, MISS
x-cache-hits: 186, 0
x-timer: S1669330388.107568,VS0,VE92
strict-transport-security: max-age=0
x-ecma-v: modern
x-browser: firefox
x-browser-version: 105
content-length: 4891
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=AW-862759327
200 OK 70 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=AW-862759327
IP
File type ASCII text, with very long lines (5236)
Hash d79d16a0cdd95d462ad78249ffe9328b
e4f8aa0798a5cd5163b78673b0ad556e4fc30bcb
84a8d8bb489ad4c5e4af3c63b395e5f42e9486325dd3fb216df6276bdecc6d27
GET /gtag/js?id=AW-862759327 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pages.upwellness.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 24 Nov 2022 22:53:08 GMT
expires: Thu, 24 Nov 2022 22:53:08 GMT
cache-control: private, max-age=900
last-modified: Thu, 24 Nov 2022 21:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 69821
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fast.wistia.com/embed/medias/e8xcaqkjm4.jsonp
200 OK 1.8 kB URL HTTP/2 fast.wistia.com/embed/medias/e8xcaqkjm4.jsonp
IP
File type ASCII text, with very long lines (5809)
Hash 15a0705d30ca9cdea79a80cf6830fa1b
99db3aa40675f7e746036bcedf7ed629249c5475
e4f9ebe38b444c26b9292b702afcf22c64998e59fb82026e078154183df36197
GET /embed/medias/e8xcaqkjm4.jsonp HTTP/1.1
Host: fast.wistia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pages.upwellness.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
cache-control: public, no-cache
content-encoding: br
content-type: application/javascript; charset=utf-8
etag: W/"232848d1c516457126dc377a0edd68af"
p3p: CP="CURi ADMa DEVa IVAa IVDa CONi OUR IND DSP CAO COR"
referrer-policy: strict-origin-when-cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
x-download-options: noopen
x-permitted-cross-domain-policies: none
x-request-id: 0b3db31f0d2ee6eec93ade3d8d6b5685
x-runtime: 0.063584
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 24 Nov 2022 22:53:08 GMT
age: 25410
x-served-by: cache-iad-kcgs7200159-IAD, cache-bma1678-BMA
x-cache: HIT, MISS
x-cache-hits: 135, 0
x-timer: S1669330388.149089,VS0,VE93
vary: Accept-Encoding,X-Forwarded-Proto,X-ECMA-Override
strict-transport-security: max-age=0
x-ecma-v: modern
x-browser: firefox
x-browser-version: 105
content-length: 1825
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash dd0dd96ca622aa07354fabdd0da767bf
a29eaa02a81dabed2c12be20a89d65a5a0417524
6a670e9031ec8c94bdc91c47a2d6a4ca2bd95fe032fec28888a8e6d7dc163cb4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 22:53:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 19286c6a0360d32460573ddf3fc27027
b14b4288cf0415da6448e40c836683c896e7ff7e
49f8ed785296cc28c55af66b7d871034428f0935e6d713bbd70b759ac1083469
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "49F8ED785296CC28C55AF66B7D871034428F0935E6D713BBD70B759AC1083469"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16754
Expires: Fri, 25 Nov 2022 03:32:22 GMT
Date: Thu, 24 Nov 2022 22:53:08 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 50e18bc3c320590115d0a70f1cfd914d
9b177aa986e68e2a24f3381976b75cbbd1b80724
f79a562cb32fa803f6f4635b25d9232213b59bf432cdfabbe4fda914cc04eb51
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F79A562CB32FA803F6F4635B25D9232213B59BF432CDFABBE4FDA914CC04EB51"
Last-Modified: Wed, 23 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2069
Expires: Thu, 24 Nov 2022 23:27:37 GMT
Date: Thu, 24 Nov 2022 22:53:08 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8635d5eafa19971429ef44ab7bce748c
2a484a8d986970cde94cceb82c047dc60070d740
6a8f2579710defb58d178518ef7d738096ea33a1f9bef423b3b69eea8296fb97
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6A8F2579710DEFB58D178518EF7D738096EA33A1F9BEF423B3B69EEA8296FB97"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21545
Expires: Fri, 25 Nov 2022 04:52:13 GMT
Date: Thu, 24 Nov 2022 22:53:08 GMT
Connection: keep-alive
store.upwellness.com/cgi-bin/UCAffiliateNetworkPixel
200 OK 744 B URL HTTP/2 store.upwellness.com/cgi-bin/UCAffiliateNetworkPixel
IP
File type ASCII text, with CRLF line terminators
Hash 3110f39a7f2fe9edef25454e9b7a57c2
273c540727af9f5f57cf7f0164d8eb43c56c1b71
b6591997ffdba5b81c1af7fa96a8f6cf26597eb4046d64f91301eb1000a54853
GET /cgi-bin/UCAffiliateNetworkPixel HTTP/1.1
Host: store.upwellness.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pages.upwellness.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 24 Nov 2022 22:53:08 GMT
content-type: text/javascript; charset=utf-8
content-length: 744
set-cookie: AWSALB=r+7ruNcMgNcNLMzt37Yrzf0ZkBWTr8RpZAcdlp/f0wZnlJc4p6RWpcMevD8eGdyK/FtwyDb5ML2rjyPBFUIj6+Xsqa6XPy+vxPle6GAl2ITUEyHvtXGQY4Gvbiy0; Expires=Thu, 01 Dec 2022 22:53:08 GMT; Path=/
AWSALBCORS=r+7ruNcMgNcNLMzt37Yrzf0ZkBWTr8RpZAcdlp/f0wZnlJc4p6RWpcMevD8eGdyK/FtwyDb5ML2rjyPBFUIj6+Xsqa6XPy+vxPle6GAl2ITUEyHvtXGQY4Gvbiy0; Expires=Thu, 01 Dec 2022 22:53:08 GMT; Path=/; SameSite=None; Secure
server: Apache
x-content-type-options: nosniff
p3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
store.upwellness.com/cgi-bin/UCInvisibleLink?merchantId=UPWEL
200 OK 251 B URL HTTP/2 store.upwellness.com/cgi-bin/UCInvisibleLink?merchantId=UPWEL
IP
File type ASCII text, with CRLF line terminators
Hash e6735c6f608ee64c784286185e5ec194
fc90f684a019712ed8bba84418bd7aee5e691bb9
5a74dbf85d18206e84e65be38b869a0a2cc8bc71ac8adeb26321ccc5ef1411e2
GET /cgi-bin/UCInvisibleLink?merchantId=UPWEL HTTP/1.1
Host: store.upwellness.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pages.upwellness.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 24 Nov 2022 22:53:08 GMT
content-type: text/javascript; charset=utf-8
content-length: 251
set-cookie: AWSALB=0gfA3VNbDip+FsnAZbXuSrZwV7RjPdFF7m5VjD5AgopI4k0hJd7V+WGdeqm9G/6uGWsECrIH1e0AudBF28E92r9vdgKu0rxZiBu68E4WEffmh7+pLHBm2BSD67Ci; Expires=Thu, 01 Dec 2022 22:53:08 GMT; Path=/
AWSALBCORS=0gfA3VNbDip+FsnAZbXuSrZwV7RjPdFF7m5VjD5AgopI4k0hJd7V+WGdeqm9G/6uGWsECrIH1e0AudBF28E92r9vdgKu0rxZiBu68E4WEffmh7+pLHBm2BSD67Ci; Expires=Thu, 01 Dec 2022 22:53:08 GMT; Path=/; SameSite=None; Secure
server: Apache
x-content-type-options: nosniff
p3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
fast.wistia.com/assets/external/wistia-mux.js
200 OK 31 kB URL HTTP/2 fast.wistia.com/assets/external/wistia-mux.js
IP
File type ASCII text, with very long lines (65468)
Hash 8ca4953da62f6c8a05b7f2d7333a83f7
c68e554587e7e3dc6da836b6501e926ae543f933
9d7adbd9c2243a23cf7cb8ab534ce188da6f2b78d75e52ab79fb6af490dc6279
GET /assets/external/wistia-mux.js HTTP/1.1
Host: fast.wistia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pages.upwellness.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
cache-control: public, max-age=3600
content-encoding: br
content-type: application/javascript
etag: "637ce334-7a30"
last-modified: Tue, 22 Nov 2022 14:56:52 GMT
timing-allow-origin: *
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 24 Nov 2022 22:53:08 GMT
age: 1017
x-served-by: cache-iad-kcgs7200128-IAD, cache-bma1678-BMA
x-cache: HIT, HIT
x-cache-hits: 4, 17
x-timer: S1669330389.606140,VS0,VE0
vary: Accept-Encoding
strict-transport-security: max-age=0
x-ecma-v: modern
x-browser: firefox
x-browser-version: 105
content-length: 31280
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=AW-624541243
200 OK 20 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=AW-624541243
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 95ea5c70b7b57e5d27aeae638c293447
f9d4577aa7199d3de1f3aa97f59550e56e6a5680
394f3bde7c52645c87752a164402c4aa0936cf21c3f469f4ea81cd5d5a19a73e
GET /gtag/js?id=AW-624541243 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pages.upwellness.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 24 Nov 2022 22:53:08 GMT
expires: Thu, 24 Nov 2022 22:53:08 GMT
cache-control: private, max-age=900
last-modified: Thu, 24 Nov 2022 21:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 53029
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ea62cfec950257353e9924867a493351
03990cfbd0dffb1e735d4b482844e52c69a888b7
87067badfc8babcef3fca860be2f4b44778142461a5aea97b09f1d8e8b389cf2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "87067BADFC8BABCEF3FCA860BE2F4B44778142461A5AEA97B09F1D8E8B389CF2"
Last-Modified: Wed, 23 Nov 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21525
Expires: Fri, 25 Nov 2022 04:51:53 GMT
Date: Thu, 24 Nov 2022 22:53:08 GMT
Connection: keep-alive
fast.wistia.com/assets/external/thumbnailTextOverlay-v2.js
200 OK 27 kB URL HTTP/2 fast.wistia.com/assets/external/thumbnailTextOverlay-v2.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash a686c0bdd166da361e392970ebc6a3c4
36ecf480d71b173712b94c10e1b1cea3a89ba910
be3589dd82bc15545e29628e62b7e6ea6269a58bb86f4b97ca25507fcdb54f9e
GET /assets/external/thumbnailTextOverlay-v2.js HTTP/1.1
Host: fast.wistia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pages.upwellness.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
cache-control: public, max-age=3600
content-encoding: br
content-type: application/javascript
etag: "637ce334-683f"
last-modified: Tue, 22 Nov 2022 14:56:52 GMT
timing-allow-origin: *
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 24 Nov 2022 22:53:08 GMT
age: 981
x-served-by: cache-iad-kiad7000094-IAD, cache-bma1678-BMA
x-cache: HIT, HIT
x-cache-hits: 39, 1
x-timer: S1669330389.607520,VS0,VE7
vary: Accept-Encoding
strict-transport-security: max-age=0
x-ecma-v: modern
x-browser: firefox
x-browser-version: 105
content-length: 26687
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 05c4af622be1226c15bb6bb6f6f431d6
d23c989df550993820675156521b59cf2c20e9ed
b69240f438f7b8cd110c7b60a29b4a2cd9dc00199262c398b68198f7a4c1fb52
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=91476
Date: Thu, 24 Nov 2022 22:53:08 GMT
Etag: "637ea784-1d7"
Expires: Sat, 26 Nov 2022 00:17:44 GMT
Last-Modified: Wed, 23 Nov 2022 23:06:44 GMT
Server: ECS (bsa/EB20)
X-Cache: Miss from cloudfront
Via: 1.1 83a23d85c009b0c0e3626072e9f997fe.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: RGOcC7VipFaAfNYGOzLAEc798CX6erYL0X3qIQziL98oI-BVyjfxOg==
Age: 4260
h.upwellnessfeed.com/v1/lst/universal-script?ph=b27b2d9cab4edb79ea8d8031ae1cdcab396d994adeed7dcf9ab186020a45dbd3&tag=!tracking
200 OK 49 B URL HTTP/1.1 h.upwellnessfeed.com/v1/lst/universal-script?ph=b27b2d9cab4edb79ea8d8031ae1cdcab396d994adeed7dcf9ab186020a45dbd3&tag=!tracking
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 1467ad668080ed4ab50a1408a712cdcc
e0e5faa2d11a93edc33ee27f07885e0dd48110b4
7d7d1c1b75be5d8b716b9c137e025932f6f2e8391c978f08620b6ad892775096
GET /v1/lst/universal-script?ph=b27b2d9cab4edb79ea8d8031ae1cdcab396d994adeed7dcf9ab186020a45dbd3&tag=!tracking HTTP/1.1
Host: h.upwellnessfeed.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pages.upwellness.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 24 Nov 2022 22:53:08 GMT
Content-Type: text/plain;charset=utf-8
Content-Length: 49
Connection: keep-alive
Access-Control-Allow-Methods: GET, PUT, POST, OPTIONS, DELETE
Access-Control-Expose-Headers: Session-ID
Access-Control-Max-Age: 86400
Access-Control-Allow-Credentials: true
Front-End-Https: off
live.upwellness.com/services/scripts/jquery/jquery.min.js
200 OK 84 kB URL HTTP/2 live.upwellness.com/services/scripts/jquery/jquery.min.js
IP
Hash e54afb24ac5c19bb407d9b9afd9700ba
6b62900b1d1155878ad1c579313d707a1949beae
9a5a600d9acce76d740334c2f0ab2cbf883ee8a448968535b106fb8dc5dab94f
GET /services/scripts/jquery/jquery.min.js HTTP/1.1
Host: live.upwellness.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pages.upwellness.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 22:53:08 GMT
content-type: application/javascript; charset=utf-8
last-modified: Tue, 20 Sep 2022 09:48:00 GMT
vary: Accept-Encoding
etag: W/"63298c50-15d84"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Content-Length, Alert, Cache-Control, ETag, Pragma, Expires, Backoff, Last-Modified
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Thu, 24 Nov 2022 22:08:53 GMT
cache-control: public,max-age=3600
age: 2655
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
fast.wistia.com/assets/external/engines/hls_video.js
200 OK 114 kB URL HTTP/2 fast.wistia.com/assets/external/engines/hls_video.js
IP
File type ASCII text, with very long lines (65469)
Size 114 kB (114373 bytes)
Hash ddbf94a47f16fcd8a99d8c45572ac852
fabe447aee7408e90c4fcfc1de127d98987b8ca0
cb2cba64e3b0a0797031ca64b918bed7c1c58b6f3b40d92b4f45f93b3ea55109
GET /assets/external/engines/hls_video.js HTTP/1.1
Host: fast.wistia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pages.upwellness.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
cache-control: public, max-age=3600
content-encoding: br
content-type: application/javascript
etag: "637ce334-1bec5"
last-modified: Tue, 22 Nov 2022 14:56:52 GMT
timing-allow-origin: *
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 24 Nov 2022 22:53:08 GMT
age: 1017
x-served-by: cache-iad-kiad7000086-IAD, cache-bma1678-BMA
x-cache: HIT, HIT
x-cache-hits: 12, 10
x-timer: S1669330389.907693,VS0,VE0
vary: Accept-Encoding
strict-transport-security: max-age=0
x-ecma-v: modern
x-browser: firefox
x-browser-version: 105
content-length: 114373
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash fb6949e7abaa473393f7c604691de14f
599681bba3947709baa603bbae2dd7afd04059a4
36c5165526ea9d34de14d36655ed494d0cffaa11ca3271ee47824ac11246ba13
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5849
Cache-Control: max-age=129070
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 22:53:08 GMT
Etag: "637f3429-1d7"
Expires: Sat, 26 Nov 2022 10:44:18 GMT
Last-Modified: Thu, 24 Nov 2022 09:06:49 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 471
embed-ssl.wistia.com/deliveries/0b76a8eda7c331eb805ad8af326f611e.png?image_crop_resized=1280x720
200 OK 64 kB URL HTTP/2 embed-ssl.wistia.com/deliveries/0b76a8eda7c331eb805ad8af326f611e.png?image_crop_resized=1280x720
IP
File type PNG image data, 1280 x 720, 8-bit/color RGBA, non-interlaced\012- data
Hash 808236fc966e514d2c3d0151a8891dc4
f0d39277f6bf234f23d740df270966e9afdb2d3a
10f99e0082b3da3c5719bdc775f8ecc7b5962caf22d8f7ad73e34c09fed2b1b8
GET /deliveries/0b76a8eda7c331eb805ad8af326f611e.png?image_crop_resized=1280x720 HTTP/1.1
Host: embed-ssl.wistia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pages.upwellness.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/png
access-control-expose-headers: Origin, Content-Type, Accept, Server, x-amz-version-id, X-Cache
cache-control: max-age=31536000
content-disposition: inline
edge-cache-tag: 0b76a8eda7c331eb805ad8af326f611e
last-modified: Thu, 23 Sep 2021 14:58:31 UTC
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 24 Nov 2022 22:53:08 GMT
age: 290015
access-control-allow-origin: *
access-control-request-method: *
access-control-allow-methods: GET, HEAD, OPTIONS
x-served-by: cache-iad-kjyo7100106-IAD, cache-bma1660-BMA
x-cache: HIT, MISS
x-cache-hits: 79, 0
x-timer: S1669330389.862742,VS0,VE91
content-length: 64356
X-Firefox-Spdy: h2
flask.nextdoor.com/pixel?pid=77b5f184-78b6-4a8f-8547-6b081e5774db&ev=PAGE_VIEW&pl=http%3A%2F%2Fpages.upwellness.com%2Fuc-grplus-fps%2F%3Foffer%3D67%26session_id%3D10290265cbed53f23d905efdd75177%26n%3Dtune%26AFFID%3D477232%26subid%3D37_UW221124PM&ndclid=&rf=&sem=&tm=0
204 No Content 0 B URL HTTP/2 flask.nextdoor.com/pixel?pid=77b5f184-78b6-4a8f-8547-6b081e5774db&ev=PAGE_VIEW&pl=http%3A%2F%2Fpages.upwellness.com%2Fuc-grplus-fps%2F%3Foffer%3D67%26session_id%3D10290265cbed53f23d905efdd75177%26n%3Dtune%26AFFID%3D477232%26subid%3D37_UW221124PM&ndclid=&rf=&sem=&tm=0
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pixel?pid=77b5f184-78b6-4a8f-8547-6b081e5774db&ev=PAGE_VIEW&pl=http%3A%2F%2Fpages.upwellness.com%2Fuc-grplus-fps%2F%3Foffer%3D67%26session_id%3D10290265cbed53f23d905efdd75177%26n%3Dtune%26AFFID%3D477232%26subid%3D37_UW221124PM&ndclid=&rf=&sem=&tm=0 HTTP/1.1
Host: flask.nextdoor.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pages.upwellness.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Thu, 24 Nov 2022 22:53:08 GMT
server: istio-envoy
context-id: 9ee97fcb-f5e6-4117-8768-26706a9c1300
x-envoy-upstream-service-time: 2
X-Firefox-Spdy: h2
fast.wistia.com/assets/images/blank.gif
200 OK 1.2 kB URL HTTP/2 fast.wistia.com/assets/images/blank.gif
IP
File type GIF image data, version 89a, 100 x 100\012- data
Hash fbdc4ed9a1e2ee4917a265306927bcf1
6d177725d8230df0457e72004080f712e26fe624
a78759ea185fd0fa42ca9be1fc5bca4d3167a2836dc6c85e479a19dbf57fe2c2
GET /assets/images/blank.gif HTTP/1.1
Host: fast.wistia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pages.upwellness.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
cache-control: max-age=315360000, public
content-type: image/gif
etag: "637e83f2-4be"
expires: Thu, 31 Dec 2037 23:55:55 GMT
last-modified: Wed, 23 Nov 2022 20:34:58 GMT
timing-allow-origin: *
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 24 Nov 2022 22:53:09 GMT
age: 94617
x-served-by: cache-iad-kiad7000052-IAD, cache-bma1678-BMA
x-cache: HIT, HIT
x-cache-hits: 44, 2053
x-timer: S1669330389.102756,VS0,VE0
vary: Accept-Encoding
strict-transport-security: max-age=0
x-ecma-v: modern
x-browser: firefox
x-browser-version: 105
content-length: 1214
X-Firefox-Spdy: h2
ads.nextdoor.com/public/pixel/ndp.js
200 OK 3.1 kB URL HTTP/2 ads.nextdoor.com/public/pixel/ndp.js
IP
File type ASCII text, with very long lines (6599), with CRLF, LF line terminators
Hash 9f1d45c667d08e588b68d7b558f7a79a
95f84d1d1efefa6145cb489b124812c5bf06f261
2bfa31c35582b02ba2873b000fa9c46d7e5c21569af291739d9aa46b525c1c72
GET /public/pixel/ndp.js HTTP/1.1
Host: ads.nextdoor.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pages.upwellness.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 24 Nov 2022 22:53:08 GMT
content-type: application/javascript
server: istio-envoy
last-modified: Mon, 21 Nov 2022 21:46:16 GMT
vary: Accept-Encoding
etag: W/"637bf1a8-19c7"
content-security-policy: frame-ancestors 'self' *.lightning.force.com nextdoor.com *.nextdoor.com nextdoor-test.com *.nextdoor-test.com;
content-encoding: gzip
x-envoy-upstream-service-time: 1
X-Firefox-Spdy: h2
fast.wistia.com/embed/medias/e8xcaqkjm4.m3u8
200 OK 915 B URL HTTP/2 fast.wistia.com/embed/medias/e8xcaqkjm4.m3u8
IP
Hash 25ea967da6e5c813826ffbce75f055f7
9f2281420c949154062595cf99972e4379bf7954
787a8ab6ac9372e6fab4e9561b20640ff148997d8981580846deb38248a230b7
GET /embed/medias/e8xcaqkjm4.m3u8 HTTP/1.1
Host: fast.wistia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://pages.upwellness.com
Connection: keep-alive
Referer: http://pages.upwellness.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
cache-control: public, no-cache
content-type: application/x-mpegURL
etag: W/"787a8ab6ac9372e6fab4e9561b20640f"
p3p: CP="CURi ADMa DEVa IVAa IVDa CONi OUR IND DSP CAO COR"
referrer-policy: strict-origin-when-cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
x-download-options: noopen
x-permitted-cross-domain-policies: none
x-request-id: 878fa152ef4ea1504d57953977393829
x-runtime: 0.021515
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 24 Nov 2022 22:53:09 GMT
age: 24692
x-served-by: cache-iad-kjyo7100147-IAD, cache-bma1678-BMA
x-cache: HIT, MISS
x-cache-hits: 319, 0
x-timer: S1669330389.101764,VS0,VE92
vary: Accept-Encoding,X-Forwarded-Proto,X-ECMA-Override
strict-transport-security: max-age=0
x-ecma-v: modern
x-browser: firefox
x-browser-version: 105
content-length: 915
X-Firefox-Spdy: h2
embed-fastly.wistia.com/deliveries/a18adcb3fe4d694342677106235399fede11a10f.m3u8
200 OK 622 B URL HTTP/2 embed-fastly.wistia.com/deliveries/a18adcb3fe4d694342677106235399fede11a10f.m3u8
IP
Hash 70608c033fc52b200c2c9a62a46f4a44
f2171867d97d2403ce72159334d2faac9362372d
c916923df66b311c656d2ad3980bbc914d55977b2ff960b545f3aa0636cc92d1
GET /deliveries/a18adcb3fe4d694342677106235399fede11a10f.m3u8 HTTP/1.1
Host: embed-fastly.wistia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://pages.upwellness.com
Connection: keep-alive
Referer: http://pages.upwellness.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/vnd.apple.mpegurl
expires: Wed, 25 Oct 2023 08:18:53 GMT
cache-control: max-age=31536000
access-control-allow-headers: *
access-control-expose-headers: Server,range,Content-Length,Content-Range
last-modified: Mon, 05 Nov 2018 10:11:00 GMT
edge-cache-tag: a18adcb3fe4d694342677106235399fede11a10f-hls-segment a227918e831bad87448fc210e029b3c9b5b84f05
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 24 Nov 2022 22:53:09 GMT
age: 2644456
access-control-allow-origin: *
access-control-request-method: *
access-control-allow-methods: GET, HEAD, OPTIONS
x-served-by: cache-iad-kjyo7100134-IAD, cache-bma1649-BMA
x-cache: HIT, HIT
x-cache-hits: 796, 1
x-timer: S1669330389.247075,VS0,VE1
vary: Accept-Encoding
content-length: 622
X-Firefox-Spdy: h2
views.unsplash.com/v?app_id=27955&photo_id=0tgmnmiyq9y,0tgmnmiyq9y,0tgmnmiyq9y
200 OK 17 B URL HTTP/2 views.unsplash.com/v?app_id=27955&photo_id=0tgmnmiyq9y,0tgmnmiyq9y,0tgmnmiyq9y
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 5b64e8b89092b2e3dfd448b10700627f
484b3032619fa1acd135d114565b0a5166281c22
f1ea07a1e51a389c8de07120ae5c2e432e9dd8f4fbd6f92489f185b0523a3fd4
GET /v?app_id=27955&photo_id=0tgmnmiyq9y,0tgmnmiyq9y,0tgmnmiyq9y HTTP/1.1
Host: views.unsplash.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pages.upwellness.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: Varnish
retry-after: 0
content-type: application/json
accept-ranges: bytes
date: Thu, 24 Nov 2022 22:53:09 GMT
via: 1.1 varnish
x-served-by: cache-bma1671-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1669330389.248920,VS0,VE0
set-cookie: ugid=902f3b43db9d172013c1b56c23d892975564434;domain=.unsplash.com;path=/;expires=Fri, 24 Nov 2023 22:53:09 GMT;SameSite=None;Secure
access-control-allow-origin: *
content-length: 17
X-Firefox-Spdy: h2
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: sukEtcCHP2roDLSf6aB8Yw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: X+1StKL/sViubXFQVVo4plTH/Kw=
cdn.js.customerlabs.co/cl4975ot4arrr6.js
200 OK 191 kB URL HTTP/1.1 cdn.js.customerlabs.co/cl4975ot4arrr6.js
IP
File type ASCII text, with very long lines (33540)
Size 191 kB (191202 bytes)
Hash 9bc0790bc835c816132d6d632d1fe678
d7ff94e3db5e659963e7a828053c2472af6d751d
989a353c87693ae8700e24dacf7d12637287b303896573ac84fa0211244f4615
GET /cl4975ot4arrr6.js HTTP/1.1
Host: cdn.js.customerlabs.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Origin: http://pages.upwellness.com
Connection: keep-alive
Referer: http://pages.upwellness.com/
HTTP/1.1 200 OK
Content-Type: binary/octet-stream
Content-Length: 191202
Connection: keep-alive
Date: Thu, 24 Nov 2022 22:53:09 GMT
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: HEAD, GET, PUT, POST, DELETE
Access-Control-Expose-Headers: ETag, x-amz-meta-custom-header
x-amz-replication-status: COMPLETED
Last-Modified: Mon, 21 Nov 2022 21:23:13 GMT
ETag: "9bc0790bc835c816132d6d632d1fe678"
Cache-Control: max-age=60
x-amz-version-id: C1DASnfA0sWthFzaWaR0QLMU9MXInfPn
Accept-Ranges: bytes
Server: AmazonS3
Vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method
X-Cache: Miss from cloudfront
Via: 1.1 185768229530368be94556dcab1c486a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
Alt-Svc: h3=":443"; ma=86400
X-Amz-Cf-Id: VCfv2xRqdlJwC_lMC8-8M0zWmdj8wvsJcGdlIcNpxsYEh3olcXBj-Q==
store.upwellness.com/cgi-bin/UCAffiliateNetworkPixel?t=0.022687679683538686&r=&u=http%3A%2F%2Fpages.upwellness.com%2Fuc-grplus-fps%2F%3Foffer%3D67%26session_id%3D10290265cbed53f23d905efdd75177%26n%3Dtune%26AFFID%3D477232%26subid%3D37_UW221124PM
200 OK 0 B URL HTTP/1.1 store.upwellness.com/cgi-bin/UCAffiliateNetworkPixel?t=0.022687679683538686&r=&u=http%3A%2F%2Fpages.upwellness.com%2Fuc-grplus-fps%2F%3Foffer%3D67%26session_id%3D10290265cbed53f23d905efdd75177%26n%3Dtune%26AFFID%3D477232%26subid%3D37_UW221124PM
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cgi-bin/UCAffiliateNetworkPixel?t=0.022687679683538686&r=&u=http%3A%2F%2Fpages.upwellness.com%2Fuc-grplus-fps%2F%3Foffer%3D67%26session_id%3D10290265cbed53f23d905efdd75177%26n%3Dtune%26AFFID%3D477232%26subid%3D37_UW221124PM HTTP/1.1
Host: store.upwellness.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pages.upwellness.com/
Cookie: ubvt=15ff8b53-9669-430a-ab67-d537655e1f6c; _gcl_au=1.1.1674732438.1669330388; AWSALB=l/hZjsRzxJ0Vo3ojkBm/uzLZbRmfkqjEX2yQzQpmGNhSveFf9pOa0CtCbSwhMqhJFK5BqNoSTX5PVK0YskRaNjAWE4uEW/OHe7QIOKIBis5e69NJ8z8+tubObEFT; UltraCartShoppingCartID=18EE9DEF9769740184ABD8482F205B00; ucacid=1540149089.066506; ucacid=1540149089.066506; JSESSIONID=abcppXXEIZeqHUQ-cej0O; LBJSESSIONID=abcppXXEIZeqHUQ-cej0O.n225
HTTP/1.1 200 OK
Date: Thu, 24 Nov 2022 22:53:09 GMT
Content-Length: 0
Connection: keep-alive
Set-Cookie: AWSALB=DLqx1DkqwcG/cc0R85qkVlA9vS3um6qi/bl3EhsXKcuJ7xto7sHK2oZKs3Ptk+/I3pLY+XWJgv4JRSWFZaQ5cWunju4w8KmsruV4cXsFZbbV/CcOBnddg4kdHnMS; Expires=Thu, 01 Dec 2022 22:53:09 GMT; Path=/
AWSALBCORS=DLqx1DkqwcG/cc0R85qkVlA9vS3um6qi/bl3EhsXKcuJ7xto7sHK2oZKs3Ptk+/I3pLY+XWJgv4JRSWFZaQ5cWunju4w8KmsruV4cXsFZbbV/CcOBnddg4kdHnMS; Expires=Thu, 01 Dec 2022 22:53:09 GMT; Path=/; SameSite=None
UPWEL-ANP=6141; domain=store.upwellness.com; path=/; expires=Fri, 24-Nov-2023 22:53:09 GMT; HttpOnly
Server: Apache
P3P: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
builder-assets.unbounce.com/published-js/main.bundle-5dc4c52.z.js
200 OK 34 kB URL HTTP/1.1 builder-assets.unbounce.com/published-js/main.bundle-5dc4c52.z.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 0bf2d86152e7e3622dcf4ab19253e64e
9a015eef382e2480a2c3b73d544c09be863e61f5
b3c5554c340fffc058eed76a88380e202f5ff8389753a180860498f76ab70643
GET /published-js/main.bundle-5dc4c52.z.js HTTP/1.1
Host: builder-assets.unbounce.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pages.upwellness.com/
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Length: 33506
Connection: keep-alive
Date: Thu, 24 Nov 2022 00:17:12 GMT
Last-Modified: Wed, 23 Nov 2022 23:24:26 GMT
ETag: "0bf2d86152e7e3622dcf4ab19253e64e"
Cache-Control: max-age=31536000
Content-Encoding: gzip
x-amz-version-id: pKHv9xoCp.Oeede.gA0bUZ9Qn6jRS9cc
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 9WCTl9WDJow8aFz7ZWHJCuI7wqWtB_U6YMUALfjGVjenjGJTmzfkaQ==
Age: 81358
b-code.liadm.com/a-057g.min.js
200 OK 11 kB URL HTTP/1.1 b-code.liadm.com/a-057g.min.js
IP
File type Unicode text, UTF-8 text, with very long lines (30660)
Hash 649973a951d4a0b63b7a9504dd502b33
44029549df4e673add495cd965049dd3b1c2ca11
18c3fa47e2de6bc61ccaba3dd6a9836c0246856473bbe3e73739ac38cb6ea54e
GET /a-057g.min.js HTTP/1.1
Host: b-code.liadm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pages.upwellness.com/
HTTP/1.1 200 OK
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Date: Thu, 24 Nov 2022 06:49:16 GMT
Cache-Control: "public, max-age=86400"
Content-Encoding: gzip
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 83a23d85c009b0c0e3626072e9f997fe.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: sbaqGL_slqn35P2Qr72XerUZhW5TZu3GFOO2VnTAx7AuBwnNAmaKaA==
Age: 57833
amplify.outbrain.com/cp/obtp.js
200 OK 5.3 kB URL HTTP/1.1 amplify.outbrain.com/cp/obtp.js
IP
File type ASCII text, with very long lines (16620), with no line terminators
Hash a73a09a868a98d7505575c520aaf6616
ed4e4c3fe9ad7ed18564e5f9aed6a9a68b522c7f
8b22d2e0e3e79c7ea27bf76720b302fd18ba1240fbf8dd99e54ced655d17c8e4
GET /cp/obtp.js HTTP/1.1
Host: amplify.outbrain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pages.upwellness.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Type: application/x-javascript
ETag: "c83bb35b39c166b49387a9cb3633d4be:1668418404.864545"
Last-Modified: Mon, 14 Nov 2022 09:17:09 GMT
Server: AkamaiNetStorage
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=1200
Expires: Thu, 24 Nov 2022 23:13:09 GMT
Date: Thu, 24 Nov 2022 22:53:09 GMT
Content-Length: 5276
Connection: keep-alive
d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-grplus-fps/cfc9c39c-gr-back-background2-2_11hc0r300000000000001o.jpg
200 OK 35 kB URL HTTP/1.1 d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-grplus-fps/cfc9c39c-gr-back-background2-2_11hc0r300000000000001o.jpg
IP
File type JPEG image data, baseline, precision 8, 1920x975, components 3\012- data
Hash 57ad6757695bd394d132dffc6cf3d1fd
43d19810fc3b2ac45f66b009c2c45b2f62c5e6d4
99b45c780c3978925e824b8be4ad2fb8b99f2dbc9b758ca025fb90a4b4de4abe
GET /pages.upwellness.com/uc-grplus-fps/cfc9c39c-gr-back-background2-2_11hc0r300000000000001o.jpg HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pages.upwellness.com/
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 35034
Connection: keep-alive
Date: Thu, 10 Nov 2022 16:44:02 GMT
Last-Modified: Wed, 09 Nov 2022 21:02:27 GMT
ETag: "57ad6757695bd394d132dffc6cf3d1fd"
Cache-Control: max-age=31557600
x-amz-version-id: V_spOGLLuaE2eVeVwuKS20qztsH5JkOK
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: enD7ZWibIghE49Aksm0C6qEzzX-KMiyr8Irjk_me4X0OGLWmRjMZNQ==
Age: 1231748
d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-grplus-fps/edd7e19c-goldenrevive-fireworks-blackfriday-298338020-01_11hz0fk1hc0fk00b00001o.jpg
200 OK 55 kB URL HTTP/1.1 d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-grplus-fps/edd7e19c-goldenrevive-fireworks-blackfriday-298338020-01_11hz0fk1hc0fk00b00001o.jpg
IP
File type JPEG image data, baseline, precision 8, 1920x560, components 3\012- data
Hash 82dd04d69088b1c8955ca9a2e63d4c57
0cb5c7dd627f0374b69a7ff547c56b0d05ff23ab
51b5405679beef8ef8345171b32440942df189d2a73f0c95e1c62269ebd151df
GET /pages.upwellness.com/uc-grplus-fps/edd7e19c-goldenrevive-fireworks-blackfriday-298338020-01_11hz0fk1hc0fk00b00001o.jpg HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pages.upwellness.com/
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 54646
Connection: keep-alive
Date: Wed, 23 Nov 2022 21:44:07 GMT
Last-Modified: Wed, 23 Nov 2022 20:42:55 GMT
ETag: "82dd04d69088b1c8955ca9a2e63d4c57"
Cache-Control: max-age=31557600
x-amz-version-id: P.U_qwx2Yg0KkUULdiI2tuLEeu6HPpVd
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 a343e36742f64defd0a2caf1f96ff772.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: Zpm7qTpwtE02Ftp1u2IQq9cNAtV0H1feOG8ZK4N2NOUupA751_AhJA==
Age: 90543
d34qb8suadcc4g.cloudfront.net/ub.js?1618514269
200 OK 1.9 kB URL HTTP/2 d34qb8suadcc4g.cloudfront.net/ub.js?1618514269
IP
Hash f6420c864830b5860bfaadd47a2bb21b
935d2ed35f43eb0f1aea9b0642df0d7f4770def7
6f36d2d4b4b9df950fd0dd0d57e0eacb7c4217e8086b4ef940cbd6e526930462
GET /ub.js?1618514269 HTTP/1.1
Host: d34qb8suadcc4g.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pages.upwellness.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
content-length: 1856
date: Mon, 29 Aug 2022 01:57:45 GMT
last-modified: Thu, 15 Apr 2021 19:15:08 GMT
etag: "f6420c864830b5860bfaadd47a2bb21b"
cache-control: max-age=31536000
content-encoding: gzip
x-amz-version-id: bKC28ufbc849z_LglraHgQe9TbPw1SIU
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 fc5e625db631bc657fc73f189d53fa14.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: mmjtJqzcl1SthB2u3WalkLJ5CgJ5XR4AT0iSgDy1IRVGgZFEtMhQ7A==
age: 7592125
X-Firefox-Spdy: h2
d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-grplus-fps/a5fcadd7-unsplash-0tgmnmiyq9y-i-wont-a-new-background-and-i-found-this_11hc0zl00000000000001o.jpg
200 OK 190 kB URL HTTP/1.1 d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-grplus-fps/a5fcadd7-unsplash-0tgmnmiyq9y-i-wont-a-new-background-and-i-found-this_11hc0zl00000000000001o.jpg
IP
File type JPEG image data, baseline, precision 8, 1920x1281, components 3\012- data
Size 190 kB (189879 bytes)
Hash ce5156cacf580d0e35ff189b67aacfbc
e1fe6be724d582eb2098b22f43eeffbd0b0d8c3d
016f3089be3cd58baa9552819c60b18f61d081222a9962614917b6f19180a772
GET /pages.upwellness.com/uc-grplus-fps/a5fcadd7-unsplash-0tgmnmiyq9y-i-wont-a-new-background-and-i-found-this_11hc0zl00000000000001o.jpg HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pages.upwellness.com/
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 189879
Connection: keep-alive
Date: Fri, 18 Nov 2022 05:17:15 GMT
Last-Modified: Mon, 14 Nov 2022 12:03:24 GMT
ETag: "ce5156cacf580d0e35ff189b67aacfbc"
Cache-Control: max-age=31557600
x-amz-version-id: Yxl752hDcsStPzzC94612pyLbsj.viBK
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: hFY3jf0MaohHhVQZm0HJAzdA2paDp0U_ohf-0xp6wqnHbRt1CkBXhg==
Age: 581755
d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-grplus-fps/5065891f-manuka-background-orange-01-1_11lc0mj1hc0mj01z000028.png
200 OK 119 kB URL HTTP/1.1 d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-grplus-fps/5065891f-manuka-background-orange-01-1_11lc0mj1hc0mj01z000028.png
IP
File type PNG image data, 1920 x 811, 8-bit colormap, non-interlaced\012- data
Size 119 kB (119389 bytes)
Hash 3e061c61f1b29bc2e19ae6c9a78f8819
0fd6179e62109625c5f0e3973ef293ca67212797
b49930c3d02891d24e32e4861d709780513e5280a83e1dbcd9218d4381ea1638
GET /pages.upwellness.com/uc-grplus-fps/5065891f-manuka-background-orange-01-1_11lc0mj1hc0mj01z000028.png HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pages.upwellness.com/
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 119389
Connection: keep-alive
Date: Mon, 14 Nov 2022 21:15:14 GMT
Last-Modified: Mon, 14 Nov 2022 12:03:24 GMT
ETag: "3e061c61f1b29bc2e19ae6c9a78f8819"
Cache-Control: max-age=31557600
x-amz-version-id: ZHpv9o4ttsJ00XPvzSFbi5Cso15Tui8O
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 a343e36742f64defd0a2caf1f96ff772.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: xSgLOzdknke1CiSBPz68wXb56lvO_WcSmj5H3tHMzqdD46UoLBXfew==
Age: 869876
d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-grplus-fps/aa3dfdb7-artboard-2_127q12o1hc12o0d7000028.png
200 OK 171 kB URL HTTP/1.1 d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-grplus-fps/aa3dfdb7-artboard-2_127q12o1hc12o0d7000028.png
IP
File type PNG image data, 1920 x 1392, 8-bit colormap, non-interlaced\012- data
Size 171 kB (170550 bytes)
Hash 981ccd318264bd584234aaec828d43ce
179960edd327a92675d57ea93fd53d1d7cb1568b
89f8ffe9473e26b24906479aefd78e22ef55680ea2579d74d420549fca787ac1
GET /pages.upwellness.com/uc-grplus-fps/aa3dfdb7-artboard-2_127q12o1hc12o0d7000028.png HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pages.upwellness.com/
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 170550
Connection: keep-alive
Date: Wed, 02 Nov 2022 10:38:33 GMT
Last-Modified: Mon, 31 Oct 2022 09:43:55 GMT
ETag: "981ccd318264bd584234aaec828d43ce"
Cache-Control: max-age=31557600
x-amz-version-id: ojx1HhX1L0cAq1WAxv49Eb89MfN.QPuM
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: -bm201sNM_lvGWguUw3cdUBDcAe2MMcF9cOjTdqi5MnGodJdxPwY2A==
Age: 1944877
bat.bing.com/bat.js
200 OK 11 kB IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type Unicode text, UTF-8 text, with very long lines (39007), with no line terminators
Hash 22e2e3226eb5ada04929a2e43307eeda
04615fa88f80567974bdeb0f103ca5909746ebd7
41feebdfb0b03cd7fee2eb886adef6f3f1f85d3f14215e9a388d2a50e42efb9b
GET /bat.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pages.upwellness.com/
HTTP/1.1 200 OK
Cache-Control: private,max-age=1800
Content-Length: 11421
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Wed, 09 Nov 2022 21:23:50 GMT
Accept-Ranges: bytes
ETag: "077538f81f4d81:0"
Vary: Accept-Encoding
Set-Cookie: MUID=2260569EE3E56F7637AD44F8E2106E02; domain=.bing.com; expires=Tue, 19-Dec-2023 22:53:09 GMT; path=/; SameSite=None; Secure; Priority=High;
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
Access-Control-Allow-Origin: *
X-Cache: CONFIG_NOCACHE
X-MSEdge-Ref: Ref A: E55DE17C302F47E9939683B2F36316EB Ref B: OSL30EDGE0122 Ref C: 2022-11-24T22:53:09Z
Date: Thu, 24 Nov 2022 22:53:09 GMT
embed-fastly.wistia.com/deliveries/a18adcb3fe4d694342677106235399fede11a10f.m3u8/seg-1-v1-a1.ts
200 OK 1.1 kB URL HTTP/2 embed-fastly.wistia.com/deliveries/a18adcb3fe4d694342677106235399fede11a10f.m3u8/seg-1-v1-a1.ts
IP
File type ASCII text, with very long lines (1146), with no line terminators
Hash 8d9d0550c915347e312e24f00d311e50
cb44712b22cb011b759da4e741b543238839c735
57d73d188a6162bec272876156addbd7b02a2c6941c45653b8d3453e998e0b5b
GET /deliveries/a18adcb3fe4d694342677106235399fede11a10f.m3u8/seg-1-v1-a1.ts HTTP/1.1
Host: embed-fastly.wistia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://pages.upwellness.com
Connection: keep-alive
Referer: http://pages.upwellness.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: video/MP2T
expires: Wed, 08 Nov 2023 06:25:24 GMT
cache-control: max-age=31536000
access-control-allow-headers: *
access-control-expose-headers: Server,range,Content-Length,Content-Range
last-modified: Mon, 05 Nov 2018 10:11:00 GMT
edge-cache-tag: a18adcb3fe4d694342677106235399fede11a10f-hls-segment 35018ad58e1324405997174e10416378d22b7a2e
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 24 Nov 2022 22:53:09 GMT
age: 1441664
access-control-allow-origin: *
access-control-request-method: *
access-control-allow-methods: GET, HEAD, OPTIONS
x-served-by: cache-iad-kiad7000161-IAD, cache-bma1649-BMA
x-cache: HIT, MISS
x-cache-hits: 2354, 0
x-timer: S1669330389.270130,VS0,VE99
content-length: 1690872
X-Firefox-Spdy: h2
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1325)
Hash 47e6f374ca946fddd5b59871b325736c
baa9282efc8785e84d247c3bff518eaa45f101c4
16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pages.upwellness.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Thu, 24 Nov 2022 22:41:08 GMT
expires: Fri, 25 Nov 2022 00:41:08 GMT
cache-control: public, max-age=7200
age: 721
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash f86429279e19a89ba7fae87ba2406b4e
abfa5369a7feb4dfebf13f5eb902c3e860976238
76d03c181e150e7e3a61bfa8489231999fb562f6cb0b382c456b9a37da1106a6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 22:53:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash f86429279e19a89ba7fae87ba2406b4e
abfa5369a7feb4dfebf13f5eb902c3e860976238
76d03c181e150e7e3a61bfa8489231999fb562f6cb0b382c456b9a37da1106a6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 22:53:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash f86429279e19a89ba7fae87ba2406b4e
abfa5369a7feb4dfebf13f5eb902c3e860976238
76d03c181e150e7e3a61bfa8489231999fb562f6cb0b382c456b9a37da1106a6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 22:53:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 471 B IP
Hash 670dda5fda45a89db08867e9109f65b7
2a64bc381f8e795fe7a46a98c3e8add2f1ade404
7c2085a52a32eab3f4ab73c4ab3718cf1e7d67502e83001ce45d2857b37a0755
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4231
Cache-Control: max-age=113033
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 22:53:09 GMT
Etag: "637efbd7-1d7"
Expires: Sat, 26 Nov 2022 06:17:02 GMT
Last-Modified: Thu, 24 Nov 2022 05:06:31 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash f86429279e19a89ba7fae87ba2406b4e
abfa5369a7feb4dfebf13f5eb902c3e860976238
76d03c181e150e7e3a61bfa8489231999fb562f6cb0b382c456b9a37da1106a6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 22:53:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fast.wistia.com/assets/external/interFontFace.js
200 OK 18 kB URL HTTP/2 fast.wistia.com/assets/external/interFontFace.js
IP
File type ASCII text, with very long lines (45349), with no line terminators
Hash 53c97190603845aa22fe260f7ec735c4
a16cfa041fdd5e6652d23cde3ac4c207b8dd5276
091e2d49b6d1c2a135481ce5d39810dcf6debcc9da5879c450ee7d40765237a5
GET /assets/external/interFontFace.js HTTP/1.1
Host: fast.wistia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pages.upwellness.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
cache-control: public, max-age=3600
content-encoding: br
content-type: application/javascript
etag: "637ce334-46e6"
last-modified: Tue, 22 Nov 2022 14:56:52 GMT
timing-allow-origin: *
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 24 Nov 2022 22:53:09 GMT
age: 1017
x-served-by: cache-iad-kcgs7200123-IAD, cache-bma1678-BMA
x-cache: HIT, HIT
x-cache-hits: 7, 2
x-timer: S1669330390.670546,VS0,VE0
vary: Accept-Encoding
strict-transport-security: max-age=0
x-ecma-v: modern
x-browser: firefox
x-browser-version: 105
content-length: 18150
X-Firefox-Spdy: h2
embed-fastly.wistia.com/deliveries/577f3270a4263d0fcb0af4e8f17a06003ca4628e.m3u8
200 OK 622 B URL HTTP/2 embed-fastly.wistia.com/deliveries/577f3270a4263d0fcb0af4e8f17a06003ca4628e.m3u8
IP
Hash dfc47b8176a5b500f03cf7ec96b6b7a1
d9801ae9f2181cb26d48f09dc5eb95d75504b090
49ee37563734f36cf3f573b146216b39eea6eb5ab0860a8b925d1787a6b2bda3
GET /deliveries/577f3270a4263d0fcb0af4e8f17a06003ca4628e.m3u8 HTTP/1.1
Host: embed-fastly.wistia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://pages.upwellness.com
Connection: keep-alive
Referer: http://pages.upwellness.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/vnd.apple.mpegurl
expires: Wed, 01 Nov 2023 10:04:44 GMT
cache-control: max-age=31536000
access-control-allow-headers: *
access-control-expose-headers: Server,range,Content-Length,Content-Range
last-modified: Mon, 05 Nov 2018 10:11:00 GMT
edge-cache-tag: 577f3270a4263d0fcb0af4e8f17a06003ca4628e-hls-segment a227918e831bad87448fc210e029b3c9b5b84f05
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 24 Nov 2022 22:53:09 GMT
age: 2033305
access-control-allow-origin: *
access-control-request-method: *
access-control-allow-methods: GET, HEAD, OPTIONS
x-served-by: cache-iad-kjyo7100040-IAD, cache-bma1649-BMA
x-cache: HIT, HIT
x-cache-hits: 1035, 1
x-timer: S1669330390.680179,VS0,VE1
vary: Accept-Encoding
content-length: 622
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/viewthroughconversion/458254939/?random=1669330388127&cv=11&fst=1669330388127&bg=ffffff&guid=ON&async=1>m=2oab90&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=http%3A%2F%2Fpages.upwellness.com%2Fuc-grplus-fps%2F%3Foffer%3D67%26session_id%3D10290265cbed53f23d905efdd75177%26n%3Dtune%26AFFID%3D477232%26subid%3D37_UW221124PM&auid=1674732438.1669330388&data=event%3Dgtag.config&rfmt=3&fmt=4
200 OK 957 B URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/458254939/?random=1669330388127&cv=11&fst=1669330388127&bg=ffffff&guid=ON&async=1>m=2oab90&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=http%3A%2F%2Fpages.upwellness.com%2Fuc-grplus-fps%2F%3Foffer%3D67%26session_id%3D10290265cbed53f23d905efdd75177%26n%3Dtune%26AFFID%3D477232%26subid%3D37_UW221124PM&auid=1674732438.1669330388&data=event%3Dgtag.config&rfmt=3&fmt=4
IP
File type ASCII text, with very long lines (2037), with no line terminators
Hash 5292ae94f3ee1c484d92c5ad5364a76a
a05d989916f267f3ec3fb391335a98a8dab510ed
a0c6bd7ee41fc745e7619a14ba5571a234cfef09be0ba7d18abaff65bdda1033
GET /pagead/viewthroughconversion/458254939/?random=1669330388127&cv=11&fst=1669330388127&bg=ffffff&guid=ON&async=1>m=2oab90&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=http%3A%2F%2Fpages.upwellness.com%2Fuc-grplus-fps%2F%3Foffer%3D67%26session_id%3D10290265cbed53f23d905efdd75177%26n%3Dtune%26AFFID%3D477232%26subid%3D37_UW221124PM&auid=1674732438.1669330388&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pages.upwellness.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 24 Nov 2022 22:53:09 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 957
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Thu, 24-Nov-2022 23:08:09 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/viewthroughconversion/862759327/?random=1669330388108&cv=11&fst=1669330388108&bg=ffffff&guid=ON&async=1>m=2oab90&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=http%3A%2F%2Fpages.upwellness.com%2Fuc-grplus-fps%2F%3Foffer%3D67%26session_id%3D10290265cbed53f23d905efdd75177%26n%3Dtune%26AFFID%3D477232%26subid%3D37_UW221124PM&auid=1674732438.1669330388&data=event%3Dgtag.config&rfmt=3&fmt=4
200 OK 955 B URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/862759327/?random=1669330388108&cv=11&fst=1669330388108&bg=ffffff&guid=ON&async=1>m=2oab90&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=http%3A%2F%2Fpages.upwellness.com%2Fuc-grplus-fps%2F%3Foffer%3D67%26session_id%3D10290265cbed53f23d905efdd75177%26n%3Dtune%26AFFID%3D477232%26subid%3D37_UW221124PM&auid=1674732438.1669330388&data=event%3Dgtag.config&rfmt=3&fmt=4
IP
File type ASCII text, with very long lines (2037), with no line terminators
Hash 07f2f47e96f9442296491cd8573f51e7
a449e0879e3b5e5f64ca2a5dbf2ed64e5e9884fb
00da7b120da69558cb2bc0a56a320647d95ad4d7074249cd801dc202f8b19033
GET /pagead/viewthroughconversion/862759327/?random=1669330388108&cv=11&fst=1669330388108&bg=ffffff&guid=ON&async=1>m=2oab90&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=http%3A%2F%2Fpages.upwellness.com%2Fuc-grplus-fps%2F%3Foffer%3D67%26session_id%3D10290265cbed53f23d905efdd75177%26n%3Dtune%26AFFID%3D477232%26subid%3D37_UW221124PM&auid=1674732438.1669330388&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pages.upwellness.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 24 Nov 2022 22:53:09 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 955
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Thu, 24-Nov-2022 23:08:09 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/viewthroughconversion/675938688/?random=1669330388403&cv=11&fst=1669330388403&bg=ffffff&guid=ON&async=1>m=2oab90&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=http%3A%2F%2Fpages.upwellness.com%2Fuc-grplus-fps%2F%3Foffer%3D67%26session_id%3D10290265cbed53f23d905efdd75177%26n%3Dtune%26AFFID%3D477232%26subid%3D37_UW221124PM&auid=1674732438.1669330388&data=event%3Dgtag.config&rfmt=3&fmt=4
200 OK 956 B URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/675938688/?random=1669330388403&cv=11&fst=1669330388403&bg=ffffff&guid=ON&async=1>m=2oab90&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=http%3A%2F%2Fpages.upwellness.com%2Fuc-grplus-fps%2F%3Foffer%3D67%26session_id%3D10290265cbed53f23d905efdd75177%26n%3Dtune%26AFFID%3D477232%26subid%3D37_UW221124PM&auid=1674732438.1669330388&data=event%3Dgtag.config&rfmt=3&fmt=4
IP
File type ASCII text, with very long lines (2037), with no line terminators
Hash 5142eac89518c2b97abe5f9ae826388b
31f14e7606b4f170ea1a2b079ab37a5b6526b37c
a0103522cd12fea7642b966cb81673841e904796ebfa33bee2e5a6810f3afc3c
GET /pagead/viewthroughconversion/675938688/?random=1669330388403&cv=11&fst=1669330388403&bg=ffffff&guid=ON&async=1>m=2oab90&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=http%3A%2F%2Fpages.upwellness.com%2Fuc-grplus-fps%2F%3Foffer%3D67%26session_id%3D10290265cbed53f23d905efdd75177%26n%3Dtune%26AFFID%3D477232%26subid%3D37_UW221124PM&auid=1674732438.1669330388&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pages.upwellness.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 24 Nov 2022 22:53:09 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 956
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Thu, 24-Nov-2022 23:08:09 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/viewthroughconversion/624541243/?random=1669330388001&cv=11&fst=1669330388001&bg=ffffff&guid=ON&async=1>m=2oab90&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=http%3A%2F%2Fpages.upwellness.com%2Fuc-grplus-fps%2F%3Foffer%3D67%26session_id%3D10290265cbed53f23d905efdd75177%26n%3Dtune%26AFFID%3D477232%26subid%3D37_UW221124PM&auid=1674732438.1669330388&data=event%3Dgtag.config&rfmt=3&fmt=4
200 OK 955 B URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/624541243/?random=1669330388001&cv=11&fst=1669330388001&bg=ffffff&guid=ON&async=1>m=2oab90&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=http%3A%2F%2Fpages.upwellness.com%2Fuc-grplus-fps%2F%3Foffer%3D67%26session_id%3D10290265cbed53f23d905efdd75177%26n%3Dtune%26AFFID%3D477232%26subid%3D37_UW221124PM&auid=1674732438.1669330388&data=event%3Dgtag.config&rfmt=3&fmt=4
IP
File type ASCII text, with very long lines (2037), with no line terminators
Hash 4c5e9f84d6fdd6310ecf1ff3d16a3386
9bef89478145d864bbfc01476428c1051fa957a9
21be72331cd97448a58500a8a2c9a426abe829118877fcffeba5b76a62c0c916
GET /pagead/viewthroughconversion/624541243/?random=1669330388001&cv=11&fst=1669330388001&bg=ffffff&guid=ON&async=1>m=2oab90&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=http%3A%2F%2Fpages.upwellness.com%2Fuc-grplus-fps%2F%3Foffer%3D67%26session_id%3D10290265cbed53f23d905efdd75177%26n%3Dtune%26AFFID%3D477232%26subid%3D37_UW221124PM&auid=1674732438.1669330388&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pages.upwellness.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 24 Nov 2022 22:53:09 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 955
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Thu, 24-Nov-2022 23:08:09 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash cb3dbeb752bbb4b359b6700cfec713fa
cbf6e69e1463db6bf1824e6b927228832986ad20
66a5b6fdf9927c8dbd250ea1d8dbb228fd442a0d4c6b54e1a9135af4da8433ea
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1887
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 22:53:09 GMT
Last-Modified: Thu, 24 Nov 2022 22:21:42 GMT
Server: ECS (amb/6BBC)
X-Cache: HIT
Content-Length: 471
googleads.g.doubleclick.net/pagead/viewthroughconversion/10838597190/?random=1669330388092&cv=11&fst=1669330388092&bg=ffffff&guid=ON&async=1>m=2oab90&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=http%3A%2F%2Fpages.upwellness.com%2Fuc-grplus-fps%2F%3Foffer%3D67%26session_id%3D10290265cbed53f23d905efdd75177%26n%3Dtune%26AFFID%3D477232%26subid%3D37_UW221124PM&auid=1674732438.1669330388&data=event%3Dgtag.config&rfmt=3&fmt=4
200 OK 957 B URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/10838597190/?random=1669330388092&cv=11&fst=1669330388092&bg=ffffff&guid=ON&async=1>m=2oab90&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=http%3A%2F%2Fpages.upwellness.com%2Fuc-grplus-fps%2F%3Foffer%3D67%26session_id%3D10290265cbed53f23d905efdd75177%26n%3Dtune%26AFFID%3D477232%26subid%3D37_UW221124PM&auid=1674732438.1669330388&data=event%3Dgtag.config&rfmt=3&fmt=4
IP
File type ASCII text, with very long lines (2041), with no line terminators
Hash 495bd0d28ed009b4c6c8ae08ff6aef95
b57df8664f1731945a8fedc6daed1cadd146bb30
74bceff22a0506ba88f585dccf7cedf739c74c74b6e1457a6cb8d95d9d038dc0
GET /pagead/viewthroughconversion/10838597190/?random=1669330388092&cv=11&fst=1669330388092&bg=ffffff&guid=ON&async=1>m=2oab90&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=http%3A%2F%2Fpages.upwellness.com%2Fuc-grplus-fps%2F%3Foffer%3D67%26session_id%3D10290265cbed53f23d905efdd75177%26n%3Dtune%26AFFID%3D477232%26subid%3D37_UW221124PM&auid=1674732438.1669330388&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pages.upwellness.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 24 Nov 2022 22:53:09 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 957
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Thu, 24-Nov-2022 23:08:09 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
cdn.taboola.com/libtrc/unip/1225872/tfa.js
200 OK 18 kB URL HTTP/1.1 cdn.taboola.com/libtrc/unip/1225872/tfa.js
IP
File type ASCII text, with very long lines (58488)
Hash cba749de2564af41c25142b52b1a9254
e089b2dc346c754fa6e5e0e50a0345ea18451ba9
e6e99427e313b68c6d3f27864a13a23169f5fbee3f59d2f78bd097df5982864c
GET /libtrc/unip/1225872/tfa.js HTTP/1.1
Host: cdn.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pages.upwellness.com/
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 17946
x-amz-id-2: qpT2YeNsswasDSXp4oIEw2V6wynzthrbYTOC8bhFiL4qCH6hg/qqHSFkKTZ/Zrxf7zlOUwqUpsU=
x-amz-request-id: 33PYZ55ZGB9SHA15
x-amz-replication-status: COMPLETED
Last-Modified: Sun, 20 Nov 2022 11:20:49 GMT
ETag: "529c36a298268cdab3b94c05d8d39bfc"
x-amz-version-id: 1ISsJshg78FFwoPyGORj_DGaRAfZZEpP
Content-Type: application/javascript; charset=utf-8
Server: AmazonS3
Content-Encoding: gzip
Accept-Ranges: bytes
Date: Thu, 24 Nov 2022 22:53:09 GMT
Via: 1.1 varnish
Age: 0
X-Served-By: cache-bma1631-BMA
X-Cache: HIT
X-Cache-Hits: 1
X-Timer: S1669330389.494635,VS0,VE228
Cache-Control: private,max-age=14401
Vary: Accept-Encoding
abp: 12
cdn.useproof.com/proxy/index.html
200 OK 325 B URL HTTP/2 cdn.useproof.com/proxy/index.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (325), with no line terminators
Hash f92252b1f21fd30ac52b59395971ecdb
ecb588481454091dcfea3c925c83577425497626
0adeedede6d3bdf7e7258108ead2ed80af83b9fec8ba560d29fce2f3a957a261
GET /proxy/index.html HTTP/1.1
Host: cdn.useproof.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pages.upwellness.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 24 Nov 2022 22:53:09 GMT
content-type: text/html
content-length: 325
x-amz-id-2: G8yxtuPhtX5hxfBfvRICgNdTA3mxVSFcfW51Ro32M4AZJedKHeubS23XCBYiW1Rf7TmOlds9sZY=
x-amz-request-id: 41X0ZPH076X54YJC
last-modified: Mon, 29 Jun 2020 14:15:25 GMT
etag: "f92252b1f21fd30ac52b59395971ecdb"
cache-control: max-age=315360000, no-transform, public
x-amz-version-id: 6OysE9MvUGgGn.qn_BXpeYijOLHR8713
accept-ranges: bytes
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DBdBud1c4d6A1Zc8MbOv2Oi4whHYVGrj1PX8%2Fp0SmypfOvRcpV0a9vMmyc41WJxWa%2FegHRVgN6w9mUoISXTZSLxPEnb%2BPI68I9%2FqNtLgk1Klw%2B9X0KZlbddxOtt7mVGYms0B"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76f5b814ad0fb512-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
embed-fastly.wistia.com/deliveries/577f3270a4263d0fcb0af4e8f17a06003ca4628e.m3u8/seg-1-v1-a1.ts
200 OK 289 kB URL HTTP/2 embed-fastly.wistia.com/deliveries/577f3270a4263d0fcb0af4e8f17a06003ca4628e.m3u8/seg-1-v1-a1.ts
IP
File type MPEG transport stream data\012- data
Size 289 kB (289144 bytes)
Hash 87538cee8bee871202d1391c16243993
c54511cd4eca32e3212650c6a655664d6434d0e0
485f687ae27c3019133f01f973611e67985d148f86b106104e87fa04ad0dcde7
GET /deliveries/577f3270a4263d0fcb0af4e8f17a06003ca4628e.m3u8/seg-1-v1-a1.ts HTTP/1.1
Host: embed-fastly.wistia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://pages.upwellness.com
Connection: keep-alive
Referer: http://pages.upwellness.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: video/MP2T
expires: Sat, 04 Nov 2023 13:55:57 GMT
cache-control: max-age=31536000
access-control-allow-headers: *
access-control-expose-headers: Server,range,Content-Length,Content-Range
last-modified: Mon, 05 Nov 2018 10:11:00 GMT
edge-cache-tag: 577f3270a4263d0fcb0af4e8f17a06003ca4628e-hls-segment 35018ad58e1324405997174e10416378d22b7a2e
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 24 Nov 2022 22:53:09 GMT
age: 1760232
access-control-allow-origin: *
access-control-request-method: *
access-control-allow-methods: GET, HEAD, OPTIONS
x-served-by: cache-iad-kjyo7100144-IAD, cache-bma1649-BMA
x-cache: HIT, HIT
x-cache-hits: 102, 1
x-timer: S1669330390.727053,VS0,VE1
content-length: 289144
X-Firefox-Spdy: h2
connect.facebook.net/en_US/fbevents.js
200 OK 27 kB URL HTTP/2 connect.facebook.net/en_US/fbevents.js
IP
File type ASCII text, with very long lines (64348)
Hash 44ecaa3c2a4929a40141edc4540aaf84
f29a573182333b2500d41bfc389d6c5232dfb348
6589fe14578dedd4df678a909afadd7e5bc7f57c7e3e24518a7f5faac7383396
GET /en_US/fbevents.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pages.upwellness.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: application/x-javascript; charset=utf-8
content-security-policy: default-src facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com data: blob: 'self';script-src *.fbcdn.net *.facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com;connect-src *.fbcdn.net *.facebook.net wss://*.fbcdn.net attachment.fbsbx.com blob: 'self';block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: 9QKabXhIRpIhbfjg6l8jVv2NQIxFLXOUi2C1uZjzdUa1ljRAmQiOhzpNwF0TZJzI0euwQh0BghmJ6R1De8ZAWg==
priority: u=3,i
content-length: 27340
x-fb-trip-id: 1679558926
date: Thu, 24 Nov 2022 22:53:09 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash f86429279e19a89ba7fae87ba2406b4e
abfa5369a7feb4dfebf13f5eb902c3e860976238
76d03c181e150e7e3a61bfa8489231999fb562f6cb0b382c456b9a37da1106a6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 22:53:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 471 B IP
Hash 670dda5fda45a89db08867e9109f65b7
2a64bc381f8e795fe7a46a98c3e8add2f1ade404
7c2085a52a32eab3f4ab73c4ab3718cf1e7d67502e83001ce45d2857b37a0755
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4231
Cache-Control: max-age=113033
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 22:53:09 GMT
Etag: "637efbd7-1d7"
Expires: Sat, 26 Nov 2022 06:17:02 GMT
Last-Modified: Thu, 24 Nov 2022 05:06:31 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 471
cdn.useproof.com/proxy/proxy.js
200 OK 114 kB URL HTTP/2 cdn.useproof.com/proxy/proxy.js
IP
File type Unicode text, UTF-8 text, with very long lines (65514), with no line terminators
Size 114 kB (114404 bytes)
Hash 9f4d60f4f2b143cadacb2b8b3a901401
8c25b07f5122f9875920498c20ede6045320f479
f4d712c5a2901b92d4baa6e18554c3db8e5ce1d8f4d3189054e39489b37c982c
GET /proxy/proxy.js HTTP/1.1
Host: cdn.useproof.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cdn.useproof.com/proxy/index.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 24 Nov 2022 22:53:09 GMT
content-type: application/javascript
content-length: 114404
cache-control: public, max-age=315360000, no-transform
cf-bgj: minify
etag: "9f4d60f4f2b143cadacb2b8b3a901401"
last-modified: Mon, 29 Jun 2020 14:15:25 GMT
x-amz-id-2: yoAjzcyRlZUSIcodHaLndl6c776jIrkHPBSIgiDtxS12xvdyq2MKSDzEETmCnivt0ELZRmo4dWc=
x-amz-request-id: YH3Z1CT1HCFY0HSJ
x-amz-version-id: FhtEkyvjyNE68BTwRHm.pMLrP83vtI4K
cf-cache-status: HIT
age: 48976687
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=kV%2FWm3aksLA1zAl%2FtTEgbKgrEuZzjJ9MRR1gfWtlbV64b4QKzWyghoRSM3xyY1ynGzTvnnWGzpBIMRc5fYAKACpNMKN5wpL9a6bWfNr7qcrDxA0s7gzjaLYtCQOAu2WtDxJq"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76f5b8184988b512-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
tr.outbrain.com/cachedClickId?marketerId=00e83052a71a1dff3bc62d5d40765808fc
200 OK 56 B URL HTTP/1.1 tr.outbrain.com/cachedClickId?marketerId=00e83052a71a1dff3bc62d5d40765808fc
IP
File type ASCII text, with no line terminators
Hash 77fbe8ab311fa20557d95906363035ed
5806df80f09a37e070d5f37c49f19797c2763fd0
4fa9f4ca5bfa56b9f8467324e3654f4a717dcd40b70c05b538092d8a101b0599
GET /cachedClickId?marketerId=00e83052a71a1dff3bc62d5d40765808fc HTTP/1.1
Host: tr.outbrain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pages.upwellness.com/
HTTP/1.1 200 OK
Date: Thu, 24 Nov 2022 22:53:09 GMT
Content-Type: application/javascript
Content-Length: 56
X-TraceId: da7e5e2aa5e689febaeaa253c4140a59
content-encoding: gzip
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash aee1eaa2ef2d0edbb0bc5703979e6439
8baa6d1cdd85ce2c5b6e30bd7a60096eeafce4db
095cc1e6ce8241ba22f88cb66d752587909fea3dc66936a72c369ef74b3134f1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 22:53:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.gstatic.com/firebasejs/4.5.0/firebase.js
200 OK 116 kB URL HTTP/2 www.gstatic.com/firebasejs/4.5.0/firebase.js
IP
File type ASCII text, with very long lines (16738)
Size 116 kB (116073 bytes)
Hash 0ff319bf584fbc1049438249c206242d
2adccf821c87d51efbc577cc3f091d6f254f0a35
2571c05e9c76a275e38235dc4b7256c971cccd9c1a40367b8d2f8fc9a14b4efb
GET /firebasejs/4.5.0/firebase.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cdn.useproof.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 116073
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 23 Nov 2022 08:31:51 GMT
expires: Thu, 23 Nov 2023 08:31:51 GMT
cache-control: public, max-age=31536000
age: 138078
last-modified: Tue, 03 Oct 2017 14:56:39 GMT
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash aee1eaa2ef2d0edbb0bc5703979e6439
8baa6d1cdd85ce2c5b6e30bd7a60096eeafce4db
095cc1e6ce8241ba22f88cb66d752587909fea3dc66936a72c369ef74b3134f1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 22:53:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.ub-assets.com/css?family=Lato:900,regular,700,700italic,300%7COswald:700,300,500%7CRoboto:300,500%7CMuli:800
200 OK 925 B URL HTTP/2 fonts.ub-assets.com/css?family=Lato:900,regular,700,700italic,300%7COswald:700,300,500%7CRoboto:300,500%7CMuli:800
IP
Hash 647a0816584a04d849b6ab5a3c19ef82
5e0d64cedffafcf5b244451443fcca52c06c7bf5
e573b43d6749473b22f58088e2456bdaa5e36167b9971842b13a470ee8d8f607
GET /css?family=Lato:900,regular,700,700italic,300%7COswald:700,300,500%7CRoboto:300,500%7CMuli:800 HTTP/1.1
Host: fonts.ub-assets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pages.upwellness.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
content-length: 925
date: Thu, 24 Nov 2022 22:53:09 GMT
x-amzn-requestid: 63c76bb5-a161-443e-a836-7cefcee464c7
x-xss-protection: 0
access-control-allow-origin: *
content-encoding: gzip
strict-transport-security: max-age=31536000
x-frame-options: SAMEORIGIN
timing-allow-origin: *
cross-origin-opener-policy: same-origin-allow-popups
x-amz-apigw-id: cINZdFgOoAMFZHQ=
cache-control: private, max-age=86400
x-content-type-options: nosniff
cross-origin-resource-policy: cross-origin
x-amzn-trace-id: Root=1-637ff5d5-7111a2e35252f95005247b99
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 4U91b8MxL8KkcWgpLZEoRuLmnK0pVT0pb7QOxKHrHuGbolM4LsyKTw==
X-Firefox-Spdy: h2
d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-grplus-fps/d2902373-f57a20-wave-gr-01-2_11no0i61hc0i6035000028.png
200 OK 94 kB URL HTTP/1.1 d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-grplus-fps/d2902373-f57a20-wave-gr-01-2_11no0i61hc0i6035000028.png
IP
File type PNG image data, 1920 x 654, 8-bit colormap, non-interlaced\012- data
Hash fc4db20401afee8c48e1ca79db0f0ec7
4cacdf7327125bfe07b72724ff9818ea8449b211
2f5f858f8a827eb5932b60db8ae14a20d131ab64186a47df2a2ad23188d8bd48
GET /pages.upwellness.com/uc-grplus-fps/d2902373-f57a20-wave-gr-01-2_11no0i61hc0i6035000028.png HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pages.upwellness.com/
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 93607
Connection: keep-alive
Date: Thu, 03 Nov 2022 12:32:32 GMT
Last-Modified: Wed, 02 Nov 2022 12:51:42 GMT
ETag: "fc4db20401afee8c48e1ca79db0f0ec7"
Cache-Control: max-age=31557600
x-amz-version-id: U8yhqUopFOXHoBD7I8O_aXaM3xhVZ5vW
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: f-UP9BYhGH8wE3Oje8uIjK5qk9h4lErsl-Bml0-UXXeiVyeY3D8F6g==
Age: 1851639
d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-grplus-fps/f4af4028-adobestock-320128207-1_12hy0u000000000000001o.jpg
200 OK 402 kB URL HTTP/1.1 d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-grplus-fps/f4af4028-adobestock-320128207-1_12hy0u000000000000001o.jpg
IP
File type JPEG image data, baseline, precision 8, 3238x1080, components 3\012- data
Size 402 kB (402177 bytes)
Hash 056ca93a156b7b1ffad3e735ce3b7550
c94925aee6af54705e111ae0c04e9caa2c2e125a
4bc4d761ffc88a4167dec06196d1c85a68b2a0c979b92d872555c416c227ddf5
GET /pages.upwellness.com/uc-grplus-fps/f4af4028-adobestock-320128207-1_12hy0u000000000000001o.jpg HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pages.upwellness.com/
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 402177
Connection: keep-alive
Date: Thu, 10 Nov 2022 16:44:02 GMT
Last-Modified: Wed, 09 Nov 2022 21:02:27 GMT
ETag: "056ca93a156b7b1ffad3e735ce3b7550"
Cache-Control: max-age=31557600
x-amz-version-id: EgpCZY1nLv1YeZcWkeeQk2qwGFPBLB.r
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: ohcnw9G1r3bzq0nE3mmF8RHhUG3RirQn0GndnR7e46jvGhHpZYDtfw==
Age: 1231749
fonts.ub-assets.com/fonts/s/lato/v23/S6uyw4BMUTPHjx4wXg.woff2
200 OK 24 kB URL HTTP/2 fonts.ub-assets.com/fonts/s/lato/v23/S6uyw4BMUTPHjx4wXg.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 23580, version 1.0\012- data
Hash e1b3b5908c9cf23dfb2b9c52b9a023ab
fcd4136085f2a03481d9958cc6793a5ed98e714c
918b7dc3e2e2d015c16ce08b57bcb64d2253bafc1707658f361e72865498e537
GET /fonts/s/lato/v23/S6uyw4BMUTPHjx4wXg.woff2 HTTP/1.1
Host: fonts.ub-assets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://pages.upwellness.com
Connection: keep-alive
Referer: https://fonts.ub-assets.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: font/woff2
content-length: 23580
date: Thu, 24 Nov 2022 07:26:11 GMT
x-amzn-requestid: 229c539e-f578-4cbe-ad90-4700e38173bb
last-modified: Tue, 26 Apr 2022 15:48:56 GMT
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
x-xss-protection: 0
access-control-allow-origin: *
x-amzn-remapped-content-length: 23580
timing-allow-origin: *
cross-origin-opener-policy: same-origin; report-to="apps-themes"
x-amz-apigw-id: cGFm_F5joAMFxkg=
cache-control: public, max-age=31536000
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
x-content-type-options: nosniff
cross-origin-resource-policy: cross-origin
x-amzn-trace-id: Root=1-637f1c92-22753e44241a7b6d6802460c
x-cache: Hit from cloudfront
via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: gSDRNBrXRsPUCkmlXMpNSeUhOFxGo6i5WQLbjSH0SZJnvZVD-1axAQ==
age: 55619
X-Firefox-Spdy: h2
fonts.ub-assets.com/fonts/s/lato/v23/S6u9w4BMUTPHh7USSwiPGQ.woff2
200 OK 23 kB URL HTTP/2 fonts.ub-assets.com/fonts/s/lato/v23/S6u9w4BMUTPHh7USSwiPGQ.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 23236, version 1.0\012- data
Hash 716309aab2bca045f9627f63ad79d0bf
38804233a29aaf975d557fe14e762c627bef76e0
115f6a626ca115d4ad5581b59275327e0e860b30330a52b0f785561332dd2429
GET /fonts/s/lato/v23/S6u9w4BMUTPHh7USSwiPGQ.woff2 HTTP/1.1
Host: fonts.ub-assets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://pages.upwellness.com
Connection: keep-alive
Referer: https://fonts.ub-assets.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: font/woff2
content-length: 23236
date: Thu, 24 Nov 2022 07:26:10 GMT
x-amzn-requestid: f808830b-58c0-4877-82c5-9159a6ca7663
last-modified: Tue, 26 Apr 2022 16:04:12 GMT
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
x-xss-protection: 0
access-control-allow-origin: *
x-amzn-remapped-content-length: 23236
timing-allow-origin: *
cross-origin-opener-policy: same-origin; report-to="apps-themes"
x-amz-apigw-id: cGFm_Fj6IAMFjug=
cache-control: public, max-age=31536000
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
x-content-type-options: nosniff
cross-origin-resource-policy: cross-origin
x-amzn-trace-id: Root=1-637f1c92-099d7e9c47d7f60a5a2654f3
x-cache: Hit from cloudfront
via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: wP1eTw_NIWjScBl-ZqqqjOgCcSldYyQGN0DPwD7YMjkimRYrii7u4Q==
age: 55619
X-Firefox-Spdy: h2
fonts.ub-assets.com/fonts/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
200 OK 16 kB URL HTTP/2 fonts.ub-assets.com/fonts/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15920, version 1.0\012- data
Hash 3a44e06eb954b96aa043227f3534189d
23cef6993ddb2b2979e8e7647fc3763694e2ba7d
b019538234514166ec7665359d097403358f8a4c991901983922fb4d56989f1e
GET /fonts/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.ub-assets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://pages.upwellness.com
Connection: keep-alive
Referer: https://fonts.ub-assets.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: font/woff2
content-length: 15920
date: Thu, 24 Nov 2022 09:03:12 GMT
x-amzn-requestid: 7122c95e-5cb3-469f-bd22-75d9e84db194
last-modified: Wed, 11 May 2022 19:24:45 GMT
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
x-xss-protection: 0
access-control-allow-origin: *
x-amzn-remapped-content-length: 15920
timing-allow-origin: *
cross-origin-opener-policy: same-origin; report-to="apps-themes"
x-amz-apigw-id: cGT0rGRVIAMFWkA=
cache-control: public, max-age=31536000
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
x-content-type-options: nosniff
cross-origin-resource-policy: cross-origin
x-amzn-trace-id: Root=1-637f3350-5bc4e75e0c749a0b43996567
x-cache: Hit from cloudfront
via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: WUumKrsmCWlwmGwCx69Ng_6zSIX6AaxioPTQIsRec8ldyKI5UtMAPg==
age: 49797
X-Firefox-Spdy: h2
tr.outbrain.com/unifiedPixel?marketerId=00e83052a71a1dff3bc62d5d40765808fc&apiObjVersion=1.1&obtpVersion=2.0.4&name=PAGE_VIEW&dl=http%3A%2F%2Fpages.upwellness.com%2Fuc-grplus-fps%2F%3Foffer%3D67%26session_id%3D10290265cbed53f23d905efdd75177%26n%3Dtune%26AFFID%3D477232%26subid%3D37_UW221124PM&optOut=false&bust=07480071793514722&referrer=
200 OK 60 B URL HTTP/1.1 tr.outbrain.com/unifiedPixel?marketerId=00e83052a71a1dff3bc62d5d40765808fc&apiObjVersion=1.1&obtpVersion=2.0.4&name=PAGE_VIEW&dl=http%3A%2F%2Fpages.upwellness.com%2Fuc-grplus-fps%2F%3Foffer%3D67%26session_id%3D10290265cbed53f23d905efdd75177%26n%3Dtune%26AFFID%3D477232%26subid%3D37_UW221124PM&optOut=false&bust=07480071793514722&referrer=
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash fb0fc5c090282e372b8bf8ff13ae3ee2
2de3834253ece606ce4d2a6f10a59654b6fa378b
90a8ffa59ad6227daafa10083d4cff2e9b295c9c82135b5f5cedd65b2e7c8ceb
GET /unifiedPixel?marketerId=00e83052a71a1dff3bc62d5d40765808fc&apiObjVersion=1.1&obtpVersion=2.0.4&name=PAGE_VIEW&dl=http%3A%2F%2Fpages.upwellness.com%2Fuc-grplus-fps%2F%3Foffer%3D67%26session_id%3D10290265cbed53f23d905efdd75177%26n%3Dtune%26AFFID%3D477232%26subid%3D37_UW221124PM&optOut=false&bust=07480071793514722&referrer= HTTP/1.1
Host: tr.outbrain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pages.upwellness.com/
HTTP/1.1 200 OK
Date: Thu, 24 Nov 2022 22:53:10 GMT
Content-Type: image/gif;
Content-Length: 60
Cache-Control: no-cache
X-TraceId: 23e2269bd63b182c44f06073c93064ee
content-encoding: gzip
fonts.ub-assets.com/fonts/s/lato/v23/S6u_w4BMUTPHjxsI5wq_Gwft.woff2
200 OK 24 kB URL HTTP/2 fonts.ub-assets.com/fonts/s/lato/v23/S6u_w4BMUTPHjxsI5wq_Gwft.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 24448, version 1.0\012- data
Hash 865e46af816320c9f32234e8968558d0
6791e9f732fcbde0f375f84ccbc14c4ac72795a3
6c84348296ebe2e2a0830c3962eb02156419d9bc76371c2eadaf7329d827d550
GET /fonts/s/lato/v23/S6u_w4BMUTPHjxsI5wq_Gwft.woff2 HTTP/1.1
Host: fonts.ub-assets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://pages.upwellness.com
Connection: keep-alive
Referer: https://fonts.ub-assets.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: font/woff2
content-length: 24448
date: Thu, 24 Nov 2022 20:28:29 GMT
x-amzn-requestid: f249c606-0437-40ee-af42-fad2afe99766
last-modified: Tue, 26 Apr 2022 16:41:42 GMT
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
x-xss-protection: 0
access-control-allow-origin: *
x-amzn-remapped-content-length: 24448
timing-allow-origin: *
cross-origin-opener-policy: same-origin; report-to="apps-themes"
x-amz-apigw-id: cH4NFHIFIAMFSaw=
cache-control: public, max-age=31536000
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
x-content-type-options: nosniff
cross-origin-resource-policy: cross-origin
x-amzn-trace-id: Root=1-637fd3ed-16963c97736661d561a76dd2
x-cache: Hit from cloudfront
via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: epJWZcsIvduaYXPng5WEIGJtQ6YqOxfaz88dVlYcFH9RCnYol9gv6A==
age: 8681
X-Firefox-Spdy: h2
fonts.ub-assets.com/fonts/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2
200 OK 16 kB URL HTTP/2 fonts.ub-assets.com/fonts/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15740, version 1.0\012- data
Hash b9c29351c46f3e8c8631c4002457f48a
e57e59c5780995ff2937ab2b511a769212974a87
f75911313e1c7802c23345ab57e754d87801581706780c993fb23ff4e0fe62ef
GET /fonts/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2 HTTP/1.1
Host: fonts.ub-assets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://pages.upwellness.com
Connection: keep-alive
Referer: https://fonts.ub-assets.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: font/woff2
content-length: 15740
date: Thu, 24 Nov 2022 09:03:12 GMT
x-amzn-requestid: eb32f326-3950-41dd-8488-d844929cbbba
last-modified: Wed, 11 May 2022 19:24:56 GMT
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
x-xss-protection: 0
access-control-allow-origin: *
x-amzn-remapped-content-length: 15740
timing-allow-origin: *
cross-origin-opener-policy: same-origin; report-to="apps-themes"
x-amz-apigw-id: cGT0qFNKIAMFvMQ=
cache-control: public, max-age=31536000
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
x-content-type-options: nosniff
cross-origin-resource-policy: cross-origin
x-amzn-trace-id: Root=1-637f3350-2d35c3414d8fb1bf5440d7b8
x-cache: Hit from cloudfront
via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: wmdQUICHafqbguywduqZS0Tt5W81SXAxZiou-H7sTqeRLbTrdFVUwA==
age: 49797
X-Firefox-Spdy: h2
fonts.ub-assets.com/fonts/s/lato/v23/S6u9w4BMUTPHh50XSwiPGQ.woff2
200 OK 22 kB URL HTTP/2 fonts.ub-assets.com/fonts/s/lato/v23/S6u9w4BMUTPHh50XSwiPGQ.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 22504, version 1.0\012- data
Hash 1c6c65523675abc6fcd78e804325bd77
898d9808304dc157f5dcb18ca169ec6e2b96b3d7
08664859baab5ed98f0bf818ed77e38464ff1826dc6406d5ecbd651409afbd92
GET /fonts/s/lato/v23/S6u9w4BMUTPHh50XSwiPGQ.woff2 HTTP/1.1
Host: fonts.ub-assets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://pages.upwellness.com
Connection: keep-alive
Referer: https://fonts.ub-assets.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: font/woff2
content-length: 22504
date: Thu, 24 Nov 2022 07:26:11 GMT
x-amzn-requestid: 10d11814-5d1f-47e1-828f-89dd4489fea4
last-modified: Tue, 26 Apr 2022 16:04:16 GMT
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
x-xss-protection: 0
access-control-allow-origin: *
x-amzn-remapped-content-length: 22504
timing-allow-origin: *
cross-origin-opener-policy: same-origin; report-to="apps-themes"
x-amz-apigw-id: cGFnBHjXIAMFsuA=
cache-control: public, max-age=31536000
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
x-content-type-options: nosniff
cross-origin-resource-policy: cross-origin
x-amzn-trace-id: Root=1-637f1c93-49a6dce95d9dcad632ec49d9
x-cache: Hit from cloudfront
via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: jpH8uDa7u93HqyTNgw0p8RXoyzbhkFM3VoB7AFs00FhvcuE7v4a2pQ==
age: 55619
X-Firefox-Spdy: h2
fonts.ub-assets.com/fonts/s/lato/v23/S6u9w4BMUTPHh6UVSwiPGQ.woff2
200 OK 23 kB URL HTTP/2 fonts.ub-assets.com/fonts/s/lato/v23/S6u9w4BMUTPHh6UVSwiPGQ.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 23040, version 1.0\012- data
Hash de69cf9e514df447d1b0bb16f49d2457
2ac78601179c3a63ba3f3f3081556b12ddcaf655
c447dd7677b419db7b21dbdfc6277c7816a913ffda76fd2e52702df538de0e49
GET /fonts/s/lato/v23/S6u9w4BMUTPHh6UVSwiPGQ.woff2 HTTP/1.1
Host: fonts.ub-assets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://pages.upwellness.com
Connection: keep-alive
Referer: https://fonts.ub-assets.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: font/woff2
content-length: 23040
date: Thu, 24 Nov 2022 07:26:11 GMT
x-amzn-requestid: 7e52a9fc-ff43-4771-8f47-5b3e971d9b76
last-modified: Tue, 26 Apr 2022 15:56:42 GMT
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
x-xss-protection: 0
access-control-allow-origin: *
x-amzn-remapped-content-length: 23040
timing-allow-origin: *
cross-origin-opener-policy: same-origin; report-to="apps-themes"
x-amz-apigw-id: cGFnAGmXIAMFs4w=
cache-control: public, max-age=31536000
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
x-content-type-options: nosniff
cross-origin-resource-policy: cross-origin
x-amzn-trace-id: Root=1-637f1c93-0f2f4c09511149ef5772fff8
x-cache: Hit from cloudfront
via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 3IzI45GXvwlKbWxenUwc5HefvD_dvuGizhYvLPcaVHkFHb79vzpSHA==
age: 55619
X-Firefox-Spdy: h2
static.hotjar.com/c/hotjar-795540.js?sv=6
200 OK 28 kB URL HTTP/2 static.hotjar.com/c/hotjar-795540.js?sv=6
IP
File type ASCII text, with very long lines (5908)
Hash f1da9a1889384694932db58d9ab3b9cc
81363c479deead743a15a5e03d8b74fb310b9979
3d712494a70d995d06c1c605546a9cb8c4d5540ce5ccb8fa30e651dc9b100abe
GET /c/hotjar-795540.js?sv=6 HTTP/1.1
Host: static.hotjar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pages.upwellness.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
date: Thu, 24 Nov 2022 22:53:09 GMT
access-control-allow-origin: *
cache-control: max-age=60
content-encoding: br
cross-origin-resource-policy: cross-origin
strict-transport-security: max-age=2592000; includeSubDomains
x-cache-hit: 1
x-content-type-options: nosniff
etag: W/d4d3053c7660180d3be653f65d89191c
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 f46f7100ad6fc83a021f62212f945830.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 6nPiZidIks8PZQmPF5_DCOclUhkMpsgRLf0aFbQ7CS2ovpE6sHx_3g==
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 278 B IP
Hash fc51db5d953e45e6fd90fc92d8300f00
e1784a937b79a25f852ce9dbcde9a0308b40c573
abfd99278df4516bd3708974e477c8811c901597fb172cb4b80251a68795a58b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=87566
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 22:53:10 GMT
Etag: "637ea8e4-116"
Expires: Fri, 25 Nov 2022 23:12:36 GMT
Last-Modified: Wed, 23 Nov 2022 23:12:36 GMT
Server: nginx
Content-Length: 278
io.v2.customerlabs.co/externalIds?customerlabs_user_id=cl4975ot4arrr687eb6635-f5db-42af-9103-3f8823789579&id=cl4975ot4arrr6&uid=cl4975ot4arrr687eb6635-f5db-42af-9103-3f8823789579
200 OK 178 B URL HTTP/1.1 io.v2.customerlabs.co/externalIds?customerlabs_user_id=cl4975ot4arrr687eb6635-f5db-42af-9103-3f8823789579&id=cl4975ot4arrr6&uid=cl4975ot4arrr687eb6635-f5db-42af-9103-3f8823789579
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 20a15b2e737e752079a0181dc8932f30
c25f9b75ce1af077aa8a482234fe4e3b5cd30502
fe1dbeca5d8c6a917f868a27306ff0a91542c3661693cd2e5b31caf5574b0805
GET /externalIds?customerlabs_user_id=cl4975ot4arrr687eb6635-f5db-42af-9103-3f8823789579&id=cl4975ot4arrr6&uid=cl4975ot4arrr687eb6635-f5db-42af-9103-3f8823789579 HTTP/1.1
Host: io.v2.customerlabs.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pages.upwellness.com/
HTTP/1.1 200 OK
Access-Control-Allow-Headers: Origin, Accept, Content-Type, Max-Age, X-CL-APP-ID, X-Content-Type-Options
Access-Control-Allow-Methods: POST, OPTIONS
Content-Type: application/json
Date: Thu, 24 Nov 2022 22:53:10 GMT
Server: nginx/1.12.1
Content-Length: 178
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 34bb0e5fa5833e8a7b4d0a69564e6257
44df77bd8988136e44abd3cbead7404417a1d9e2
397ee078a4d76a1274959075c6f875a6f9ee61cce732327dddc0140816ee676d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "397EE078A4D76A1274959075C6F875A6F9EE61CCE732327DDDC0140816EE676D"
Last-Modified: Wed, 23 Nov 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15430
Expires: Fri, 25 Nov 2022 03:10:20 GMT
Date: Thu, 24 Nov 2022 22:53:10 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 34bb0e5fa5833e8a7b4d0a69564e6257
44df77bd8988136e44abd3cbead7404417a1d9e2
397ee078a4d76a1274959075c6f875a6f9ee61cce732327dddc0140816ee676d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "397EE078A4D76A1274959075C6F875A6F9EE61CCE732327DDDC0140816EE676D"
Last-Modified: Wed, 23 Nov 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Fri, 25 Nov 2022 04:53:10 GMT
Date: Thu, 24 Nov 2022 22:53:10 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 278 B IP
Hash e68a54b924d5f66234e53c63de0ac8ca
33f41b1e6242315736314681a51ae774a9429193
0524c2d2148b8f7d8b015050b5a18e36427c546cd7461b92d0f74eb42ab58ff5
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2151
Cache-Control: max-age=168946
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 22:53:10 GMT
Etag: "637fde61-116"
Expires: Sat, 26 Nov 2022 21:48:56 GMT
Last-Modified: Thu, 24 Nov 2022 21:13:05 GMT
Server: ECS (amb/6BBC)
X-Cache: HIT
Content-Length: 278
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6827d82f488045e02e40d6a2fdbae4b3
4944139a4b08769511ffc6aa913857d88a0db7bc
0e4ef6ddef97ec03d43df4c0bada61d792b9f030e4d9fab5bd3cf904aeaa3bc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E4EF6DDEF97EC03D43DF4C0BADA61D792B9F030E4D9FAB5BD3CF904AEAA3BC9"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4121
Expires: Fri, 25 Nov 2022 00:01:51 GMT
Date: Thu, 24 Nov 2022 22:53:10 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6827d82f488045e02e40d6a2fdbae4b3
4944139a4b08769511ffc6aa913857d88a0db7bc
0e4ef6ddef97ec03d43df4c0bada61d792b9f030e4d9fab5bd3cf904aeaa3bc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E4EF6DDEF97EC03D43DF4C0BADA61D792B9F030E4D9FAB5BD3CF904AEAA3BC9"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4121
Expires: Fri, 25 Nov 2022 00:01:51 GMT
Date: Thu, 24 Nov 2022 22:53:10 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6827d82f488045e02e40d6a2fdbae4b3
4944139a4b08769511ffc6aa913857d88a0db7bc
0e4ef6ddef97ec03d43df4c0bada61d792b9f030e4d9fab5bd3cf904aeaa3bc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E4EF6DDEF97EC03D43DF4C0BADA61D792B9F030E4D9FAB5BD3CF904AEAA3BC9"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4121
Expires: Fri, 25 Nov 2022 00:01:51 GMT
Date: Thu, 24 Nov 2022 22:53:10 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6827d82f488045e02e40d6a2fdbae4b3
4944139a4b08769511ffc6aa913857d88a0db7bc
0e4ef6ddef97ec03d43df4c0bada61d792b9f030e4d9fab5bd3cf904aeaa3bc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E4EF6DDEF97EC03D43DF4C0BADA61D792B9F030E4D9FAB5BD3CF904AEAA3BC9"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4121
Expires: Fri, 25 Nov 2022 00:01:51 GMT
Date: Thu, 24 Nov 2022 22:53:10 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F25123759-9d71-477d-9857-9cc07cc12173.jpeg
200 OK 6.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F25123759-9d71-477d-9857-9cc07cc12173.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 92171fa8fbc051aefeb8ceb6072848de
377775b7c7b085efa6dd653d285ba3a52af6a549
537c4d5cc3ef2e60c3d0171ac31c1dba4ab2ff340108015787a9dd20dc76b7ed
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F25123759-9d71-477d-9857-9cc07cc12173.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6891
x-amzn-requestid: 6da0ae90-c3cc-4e9c-9a0e-3c72b4eb7605
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b7m2NGsvoAMF_fQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637aeb5a-1ed2badf0e84d40e6a052f7a;Sampled=0
x-amzn-remapped-date: Mon, 21 Nov 2022 03:07:06 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: daiU0caUPDqn0vVDY_eK8eaMxgIenjmw1vLyUOtVYOs-FmuSIgY3Nw==
via: 1.1 1cc6ed0d2d3dd9529ce544f9dfe61a52.cloudfront.net (CloudFront), 1.1 aef00f14752da9aa504d392fd46eff94.cloudfront.net (CloudFront), 1.1 google
date: Thu, 24 Nov 2022 11:37:02 GMT
age: 40568
etag: "377775b7c7b085efa6dd653d285ba3a52af6a549"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6827d82f488045e02e40d6a2fdbae4b3
4944139a4b08769511ffc6aa913857d88a0db7bc
0e4ef6ddef97ec03d43df4c0bada61d792b9f030e4d9fab5bd3cf904aeaa3bc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E4EF6DDEF97EC03D43DF4C0BADA61D792B9F030E4D9FAB5BD3CF904AEAA3BC9"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4121
Expires: Fri, 25 Nov 2022 00:01:51 GMT
Date: Thu, 24 Nov 2022 22:53:10 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F216636c8-4200-4f0d-83d2-8579be32f1ac.jpeg
200 OK 4.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F216636c8-4200-4f0d-83d2-8579be32f1ac.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 648677a7e7bab1896a190d2e5fb7243c
6217a262002244ef3f2e8034076a735cafd9888a
72f2913f7c0770ebab0f2683bdc1ec5a5db8872e8f2c62a8fd5c9178b95dbb06
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F216636c8-4200-4f0d-83d2-8579be32f1ac.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4270
x-amzn-requestid: 7327f8fb-804b-4d09-83dc-628e35ffa74b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cIB8xFwXoAMFkqQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637fe384-33f83cea2c585279140f4f59;Sampled=0
x-amzn-remapped-date: Thu, 24 Nov 2022 21:35:00 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: rKROwsZ-X8yDd4iVaYBaNFe6bgHaThxafIt76PBgLoOTrPMqAVQ9iQ==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 112d82578d402a38d8d02e8b857617e0.cloudfront.net (CloudFront), 1.1 google
date: Thu, 24 Nov 2022 22:22:43 GMT
age: 1827
etag: "6217a262002244ef3f2e8034076a735cafd9888a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1dd98515-d0af-440a-8f3d-4c9986928081.jpeg
200 OK 4.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1dd98515-d0af-440a-8f3d-4c9986928081.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 841a4b110022a99ddea6f7bf66df0fa1
126771b86638108050cf57c0d12faa27f80f0edb
240fbffc1f9104433297d3ff7afba2d0b58d7f1b13d9a9260a1bad25216665db
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1dd98515-d0af-440a-8f3d-4c9986928081.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4309
x-amzn-requestid: 47c2739d-73c5-4d91-914c-fe635cb09772
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b1U8xGxgIAMF-qQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63786851-6fbe19dc5c4c20dd657604e3;Sampled=0
x-amzn-remapped-date: Sat, 19 Nov 2022 05:23:29 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: j_8oVo464QMWMnmkxQJIDRhaIVmwhzCTHe4A57OdmaUr9HcyTtBUjg==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 2750b94b402c92287d764b5fa115a042.cloudfront.net (CloudFront), 1.1 google
date: Thu, 24 Nov 2022 05:04:28 GMT
age: 64122
etag: "126771b86638108050cf57c0d12faa27f80f0edb"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
a.remarketstats.com/px/smart/?c=24a3d6f0fe7dd9c&seg=uc-grplus-fps&partner_id=cl4975ot4arrr687eb6635-f5db-42af-9103-3f8823789579
302 Found 12 kB URL HTTP/2 a.remarketstats.com/px/smart/?c=24a3d6f0fe7dd9c&seg=uc-grplus-fps&partner_id=cl4975ot4arrr687eb6635-f5db-42af-9103-3f8823789579
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6673267df195141739d1018c17101368
b80047da428636adb7027f12718c8d11bd461da4
de30af07eed7326a1326c831e04727649a112c20d0c485a7e973edd96f91bfaa
GET /px/smart/?c=24a3d6f0fe7dd9c&seg=uc-grplus-fps&partner_id=cl4975ot4arrr687eb6635-f5db-42af-9103-3f8823789579 HTTP/1.1
Host: a.remarketstats.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pages.upwellness.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Thu, 24 Nov 2022 22:53:10 GMT
content-type: text/html
location: https://a.clickcertain.com/px/smart/a/?seg=uc-grplus-fps&c=24a3d6f0fe7dd9c&partner_id=cl4975ot4arrr687eb6635-f5db-42af-9103-3f8823789579
x-frontend: cc-nginx-c76b96594-x4d2x:cc-nginx-c76b96594-x4d2x
x-requestid: 6968fb62-211d-4241-aacd-e17f2026ef2a
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=WHL%2BkyYyRdGs%2F24E4My5giXSZqSXOkXpZiA%2BNfy0skTphTz%2BGEWACSlFwRUmDMTRSZI88muDJJITSUFLIaewgmLliIvz%2F%2FNUrgwVhnflaGVp%2BBU49VIvY23QWTMmuc%2BsiU8SNdw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76f5b81b0b33b4eb-OSL
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F012ad1d7-e278-4523-b537-853fcf51e3c0.jpeg
200 OK 15 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F012ad1d7-e278-4523-b537-853fcf51e3c0.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 58d104a028a45c82a7310de66477b256
e94f119e32bcff525f9b1a1c239e77747b6fc101
84d79596f4a2c255d1ecb98f557cfa4a2a42230eb92228122df7db6662140250
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F012ad1d7-e278-4523-b537-853fcf51e3c0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 15116
x-amzn-requestid: 8babc46e-4964-4296-b13d-a3ad113d3095
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cCDsiGC8oAMFwLQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637d7fe9-38b816f81940abb71ad60fdd;Sampled=0
x-amzn-remapped-date: Wed, 23 Nov 2022 02:05:29 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: FBWmZXoDHzX-tjUXMn4pkKwf1XU28Mz2JkuiikoIcKtYEqx3NFWpUw==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 be082a2326b7d49643607b097f1e7180.cloudfront.net (CloudFront), 1.1 google
date: Thu, 24 Nov 2022 06:12:03 GMT
age: 60067
etag: "e94f119e32bcff525f9b1a1c239e77747b6fc101"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1abe4f62-70d8-471a-89fc-79dd854e637c.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1abe4f62-70d8-471a-89fc-79dd854e637c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 7e97ba6c4c94a299553238e643a3acc7
9be5a5497a8566ea66e81765ef8566e6b716ab5b
bda1bb57f0198e711c3018417513237b9533cfe2e5856ada5383f7461090f40a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1abe4f62-70d8-471a-89fc-79dd854e637c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10955
x-amzn-requestid: 49acad5a-bb12-4da8-a303-ea2b76b53822
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cF8HPEIdoAMF3tQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637f0d61-674576450ade0e1e4bd601fd;Sampled=0
x-amzn-remapped-date: Thu, 24 Nov 2022 06:21:21 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: rAHhaTW3Gn6HW5DWXuUMyR68h5DAgKK5qDBiAbhk4VVu4rbSebZEmg==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 82ea95080f526df99896343fb7269b06.cloudfront.net (CloudFront), 1.1 google
date: Thu, 24 Nov 2022 11:24:38 GMT
age: 41312
etag: "9be5a5497a8566ea66e81765ef8566e6b716ab5b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
fonts.ub-assets.com/fonts/s/muli/v28/7Aulp_0qiz-aVz7u3PJLcUMYOFlOl0k30eg.woff2
200 OK 17 kB URL HTTP/2 fonts.ub-assets.com/fonts/s/muli/v28/7Aulp_0qiz-aVz7u3PJLcUMYOFlOl0k30eg.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 16972, version 1.0\012- data
Hash 9bdd3c471a8e3f86e9d5a8915629d551
dab664381b22cd72da80ebc1ce716984ee7bace1
e4a48a7ffa79edbaced5ad08bc912c14e5aedecf229bf9d576bb9554e374863c
GET /fonts/s/muli/v28/7Aulp_0qiz-aVz7u3PJLcUMYOFlOl0k30eg.woff2 HTTP/1.1
Host: fonts.ub-assets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://pages.upwellness.com
Connection: keep-alive
Referer: https://fonts.ub-assets.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: font/woff2
content-length: 16972
date: Thu, 24 Nov 2022 22:53:10 GMT
x-amzn-requestid: 8e1de4ae-79e2-4c84-bca6-ba46220b9852
last-modified: Mon, 11 Jul 2022 20:43:34 GMT
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
x-xss-protection: 0
access-control-allow-origin: *
x-amzn-remapped-content-length: 16972
timing-allow-origin: *
cross-origin-opener-policy: same-origin; report-to="apps-themes"
x-amz-apigw-id: cINZhHRxIAMFXmA=
cache-control: public, max-age=31536000
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
x-content-type-options: nosniff
cross-origin-resource-policy: cross-origin
x-amzn-trace-id: Root=1-637ff5d6-4832f00a4b785ec44d088401
x-cache: Miss from cloudfront
via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: FrDATl2Gvx64TA6GYIk-6PldNqh_hEWTT4QQsUNxy55Ce468k6NZmQ==
X-Firefox-Spdy: h2
www.upwellness.com/wp-content/uploads/2015/10/favicon-152.png
200 OK 18 kB URL HTTP/2 www.upwellness.com/wp-content/uploads/2015/10/favicon-152.png
IP
File type PNG image data, 152 x 152, 8-bit/color RGBA, non-interlaced\012- data
Hash d094840fd6b5b489b25f18a22a493822
29a59e8c0250e81421609d5c7c25f20776fdaa4a
c0647c9ef6024399a19f5043445d5063bf899fcae9d33d64bb3b8b2708d28421
GET /wp-content/uploads/2015/10/favicon-152.png HTTP/1.1
Host: www.upwellness.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pages.upwellness.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 24 Nov 2022 22:53:10 GMT
content-type: image/png
content-length: 18176
server: Pagely-ARES/1.10.15
x-gateway-request-id: c65ed3d58dfb3974ed440f09c78e61c4
last-modified: Fri, 23 Sep 2022 23:00:59 GMT
etag: "4700-5e96026c123c4"
expires: Wed, 21 Dec 2022 08:04:16 GMT
cache-control: max-age=2592000
x-gateway-cache-key: 0||https|www.upwellness.com|||/wp-content/uploads/2015/10/favicon-152.png
x-gateway-cache-status: HIT
x-gateway-skip-cache: 0
accept-ranges: bytes
X-Firefox-Spdy: h2
www.upwellness.com/wp-content/uploads/2016/08/apple-touch-icon-144x144.png
200 OK 8.6 kB URL HTTP/2 www.upwellness.com/wp-content/uploads/2016/08/apple-touch-icon-144x144.png
IP
File type PNG image data, 144 x 144, 8-bit colormap, non-interlaced\012- data
Hash b5dc3661602dcf8810766c01556df41b
a84687898568cf8ae0ba6c4b35886b3ee4dfbd17
91e84a8da7499abc9388eed1192e8363c8dfe07e28e6300c69ee25be1a4eb994
GET /wp-content/uploads/2016/08/apple-touch-icon-144x144.png HTTP/1.1
Host: www.upwellness.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pages.upwellness.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 24 Nov 2022 22:53:10 GMT
content-type: image/png
content-length: 8622
server: Pagely-ARES/1.10.15
x-gateway-request-id: e83c0715487d2f5ad22e52e1fcb09db4
last-modified: Fri, 23 Sep 2022 23:01:07 GMT
etag: "21ae-5e960272eb24c"
expires: Wed, 21 Dec 2022 08:04:16 GMT
cache-control: max-age=2592000
x-gateway-cache-key: 0||https|www.upwellness.com|||/wp-content/uploads/2016/08/apple-touch-icon-144x144.png
x-gateway-cache-status: HIT
x-gateway-skip-cache: 0
accept-ranges: bytes
X-Firefox-Spdy: h2
io.v2.customerlabs.co/cl
200 OK 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cl HTTP/1.1
Host: io.v2.customerlabs.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: text/plain;charset=UTF-8
Content-Length: 830
Origin: http://pages.upwellness.com
Connection: keep-alive
Referer: http://pages.upwellness.com/
HTTP/1.1 200 OK
Access-Control-Allow-Headers: Origin, Accept, Content-Type, Max-Age, X-CL-APP-ID, X-Content-Type-Options
Access-Control-Allow-Methods: POST, OPTIONS
Access-Control-Allow-Origin: http://pages.upwellness.com
Date: Thu, 24 Nov 2022 22:53:10 GMT
Server: nginx/1.12.1
Content-Length: 0
Connection: keep-alive
ocsp.digicert.com/
200 OK 278 B IP
Hash fcde710e9043bc4502e7505006104d6a
da75e0a33cc84cc814597ac091426d82531ddac1
d71a55b0cf26c9fa1b90aa9dade3bfa0de603947c95d0d81f182e92a60be2242
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1106
Cache-Control: max-age=91215
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 22:53:10 GMT
Etag: "637eb2d3-116"
Expires: Sat, 26 Nov 2022 00:13:25 GMT
Last-Modified: Wed, 23 Nov 2022 23:54:59 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 278
io.v2.customerlabs.co/cl
200 OK 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cl HTTP/1.1
Host: io.v2.customerlabs.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: text/plain;charset=UTF-8
Content-Length: 832
Origin: http://pages.upwellness.com
Connection: keep-alive
Referer: http://pages.upwellness.com/
HTTP/1.1 200 OK
Access-Control-Allow-Headers: Origin, Accept, Content-Type, Max-Age, X-CL-APP-ID, X-Content-Type-Options
Access-Control-Allow-Methods: POST, OPTIONS
Access-Control-Allow-Origin: http://pages.upwellness.com
Date: Thu, 24 Nov 2022 22:53:10 GMT
Server: nginx/1.12.1
Content-Length: 0
Connection: keep-alive
a.clickcertain.com/px/?c=24a3d6f0fe7dd9c
200 OK 2.1 kB URL HTTP/2 a.clickcertain.com/px/?c=24a3d6f0fe7dd9c
IP
File type ASCII text, with very long lines (2807)
Hash 407e85b452e366f88a61196bcb200ff3
2ad8f4de1faa861c4cbf13e8fb9f3e68bcb5924c
49f23281526113aa0d1b98515f52b0fa79430db6b000463c266c3d280b086993
GET /px/?c=24a3d6f0fe7dd9c HTTP/1.1
Host: a.clickcertain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://pages.upwellness.com/
Connection: keep-alive
Cookie: _ccpx_u=f2387451%2d6984%2d4a26%2d8e7d%2d5c74afeb98a4
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 24 Nov 2022 22:53:10 GMT
content-type: text/javascript
set-cookie: _ccpx=24a3d6f0fe7dd9c; Expires=Fri, 24 Nov 2023 22:53:10 GMT; Path=/; HttpOnly; SameSite=None; Secure
_ccpx_24a3d6f0fe7dd9c=1; Expires=Fri, 24 Nov 2023 22:53:10 GMT; Path=/; HttpOnly; SameSite=None; Secure
_ccpx_u=f2387451%2d6984%2d4a26%2d8e7d%2d5c74afeb98a4; Expires=Fri, 24 Nov 2023 22:53:10 GMT; Path=/; HttpOnly; SameSite=None; Secure
x-frontend: cc-nginx-c76b96594-qkfxw:cc-nginx-c76b96594-qkfxw
x-requestid: 2ea97d58-ec9b-4033-b04b-17a03dab810e
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tSZPMTMFmVvmIWEfsh5iXJbf9NftgIbu1LnLjeLfscpXc4%2F2HobLrzl%2B746HwuTkLX0YDdoAe5au8Kfeg0IAiJLWNvvMyQp%2Fecf4hOoSNxZWkzwqABcQNVvQN0QtulnKwqiSaw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76f5b81d59bbfac4-OSL
content-encoding: br
X-Firefox-Spdy: h2
d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-grplus-fps/50b06592-pf-266e1b68-fivestarsoriginal_104w01g000000000000028.png
200 OK 926 B URL HTTP/1.1 d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-grplus-fps/50b06592-pf-266e1b68-fivestarsoriginal_104w01g000000000000028.png
IP
File type PNG image data, 176 x 52, 8-bit colormap, non-interlaced\012- data
Hash c4dea36dfe1ed65d42e45c3b855c61e3
2cda3cb3fc11db73d9f93f49082f7720bbe09b25
5129638f2a3885d9a64c037aee442e91edacde2eb85f42207557e8f49ed689cc
GET /pages.upwellness.com/uc-grplus-fps/50b06592-pf-266e1b68-fivestarsoriginal_104w01g000000000000028.png HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pages.upwellness.com/
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 926
Connection: keep-alive
Date: Fri, 04 Nov 2022 23:23:06 GMT
Last-Modified: Thu, 03 Nov 2022 21:58:01 GMT
ETag: "c4dea36dfe1ed65d42e45c3b855c61e3"
Cache-Control: max-age=31557600
x-amz-version-id: nFY38ISepOsZ5nspB3ttdtNt1USpydjF
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 a343e36742f64defd0a2caf1f96ff772.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: ml-YADLzGZQWLp7pPo3I1ryz1itZvooMnXQ5hsQ9T2p3ODg86RnLIA==
Age: 1726205
d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-grplus-fps/5cee692a-quote-d54c27-orange-adobestock-152465838-converted-01_102a02b000000000000028.png
200 OK 1.1 kB URL HTTP/1.1 d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-grplus-fps/5cee692a-quote-d54c27-orange-adobestock-152465838-converted-01_102a02b000000000000028.png
IP
File type PNG image data, 82 x 83, 8-bit colormap, non-interlaced\012- data
Hash 6f566bf0ca15c5ac601a04d4b7fb5559
ff5616f89ec7af27293d39b6c0e8a07612ae9050
df418ecf12c321d6a010e44652d4a33ad8785abf2a5e3f0d64d1a1f728f0412e
GET /pages.upwellness.com/uc-grplus-fps/5cee692a-quote-d54c27-orange-adobestock-152465838-converted-01_102a02b000000000000028.png HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pages.upwellness.com/
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 1092
Connection: keep-alive
Date: Thu, 03 Nov 2022 12:32:33 GMT
Last-Modified: Wed, 02 Nov 2022 12:51:42 GMT
ETag: "6f566bf0ca15c5ac601a04d4b7fb5559"
Cache-Control: max-age=31557600
x-amz-version-id: j2qR3F63V1vxjAFB6janOU43eNgxHS_8
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 1NsS4vk2uSgC7nibWfIQ8HrVvIVXQMk5RXZBL8PnRMFS51KGU2QR9g==
Age: 1851638
d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-grplus-fps/0a4cf109-rightarrow-hr_102v02w000000000000028.png
200 OK 1.0 kB URL HTTP/1.1 d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-grplus-fps/0a4cf109-rightarrow-hr_102v02w000000000000028.png
IP
File type PNG image data, 103 x 104, 8-bit colormap, non-interlaced\012- data
Hash efe6e12ca3ee76495ec9ae8ee9198ca5
ae8b0d8aa520293a2a6d07c09df5cecc46cf1e9e
0b779cc02a6edea8c2d87a0d7f63d0180400c6f8a4924866a85f560c51276c29
GET /pages.upwellness.com/uc-grplus-fps/0a4cf109-rightarrow-hr_102v02w000000000000028.png HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pages.upwellness.com/
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 1020
Connection: keep-alive
Date: Mon, 07 Nov 2022 04:39:49 GMT
Last-Modified: Thu, 03 Nov 2022 21:58:01 GMT
ETag: "efe6e12ca3ee76495ec9ae8ee9198ca5"
Cache-Control: max-age=31557600
x-amz-version-id: 795JvwrzxV0bVyEYb7vJkmmllhokvg_Z
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: oux-ScCiTnb5UnQgUq19T2gZWDIHcorEgLMX153wuNqh-DXesx8hcg==
Age: 1534402
d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-grplus-fps/0e914824-gr-verticalcollage-testimonials_100000000000000000001o.jpg
200 OK 68 kB URL HTTP/1.1 d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-grplus-fps/0e914824-gr-verticalcollage-testimonials_100000000000000000001o.jpg
IP
File type JPEG image data, baseline, precision 8, 308x1304, components 3\012- data
Hash 8a35e1ec124590183b3b65717bbdf858
806d5c038f4aeb93b55dbedbb89b17fa00636079
574a2a09f304d95c3d37d0a4b67b49c06f1cf82a41219c423fdda53ef9e13ee3
GET /pages.upwellness.com/uc-grplus-fps/0e914824-gr-verticalcollage-testimonials_100000000000000000001o.jpg HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pages.upwellness.com/
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 68470
Connection: keep-alive
Date: Fri, 18 Nov 2022 05:17:21 GMT
Last-Modified: Mon, 14 Nov 2022 12:03:24 GMT
ETag: "8a35e1ec124590183b3b65717bbdf858"
Cache-Control: max-age=31557600
x-amz-version-id: SC7JFCaZB74NhKZv2Ayz6370ze5uV3vC
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: HxQuPAiVT1S-H6GpvteTNl_NT0z4XuJnkFPqkcMd05ycXgm83SwpYg==
Age: 581750
d34qb8suadcc4g.cloudfront.net/sp-2.14.0.js
200 OK 30 kB URL HTTP/2 d34qb8suadcc4g.cloudfront.net/sp-2.14.0.js
IP
File type ASCII text, with very long lines (64903)
Hash 73de733c308b8b5e44d2a6242dc4bd99
2f43a0cd155124d65ab5ce3574abc5f82b45fcf9
cf4ff4a67675a54e9a9469d967c77fba778ccf839a98119d246012447eb44ea3
GET /sp-2.14.0.js HTTP/1.1
Host: d34qb8suadcc4g.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pages.upwellness.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 30399
date: Wed, 31 Aug 2022 03:46:21 GMT
last-modified: Wed, 04 Nov 2020 01:35:32 GMT
etag: "73de733c308b8b5e44d2a6242dc4bd99"
cache-control: max-age=31536000
content-encoding: gzip
x-amz-version-id: rVTqklA1qqyT_0VdOCY323BKPISR0uej
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 fc5e625db631bc657fc73f189d53fa14.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: LPmoXJ2sC8HGOIxr0qk4nyEqBDLQqvMZUFGsSi4LCkgHqa19nWUDjg==
age: 7412809
X-Firefox-Spdy: h2
io.v2.customerlabs.co/cl/firstVisit
200 OK 0 B URL HTTP/1.1 io.v2.customerlabs.co/cl/firstVisit
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cl/firstVisit HTTP/1.1
Host: io.v2.customerlabs.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: text/plain;charset=UTF-8
Content-Length: 482
Origin: http://pages.upwellness.com
Connection: keep-alive
Referer: http://pages.upwellness.com/
HTTP/1.1 200 OK
Access-Control-Allow-Headers: Origin, Accept, Content-Type, Max-Age, X-CL-APP-ID, X-Content-Type-Options
Access-Control-Allow-Methods: POST, OPTIONS
Access-Control-Allow-Origin: http://pages.upwellness.com
Date: Thu, 24 Nov 2022 22:53:10 GMT
Server: nginx/1.12.1
Content-Length: 0
Connection: keep-alive
d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-grplus-fps/29f0369a-lefftarrow-hr_102v02w000000000000028.png
200 OK 1.2 kB URL HTTP/1.1 d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-grplus-fps/29f0369a-lefftarrow-hr_102v02w000000000000028.png
IP
File type PNG image data, 103 x 104, 8-bit colormap, non-interlaced\012- data
Hash 032c54654550e68afaa8897a89466d3b
2e8a23ed340e416ed61d48391db11f729ffb39f7
5b59589532474b277aae70bf17979e97ac0c335e7f633e0148b8a5f6e259a3cb
GET /pages.upwellness.com/uc-grplus-fps/29f0369a-lefftarrow-hr_102v02w000000000000028.png HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pages.upwellness.com/
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 1155
Connection: keep-alive
Date: Sat, 12 Nov 2022 16:03:49 GMT
Last-Modified: Wed, 09 Nov 2022 21:02:26 GMT
ETag: "032c54654550e68afaa8897a89466d3b"
Cache-Control: max-age=31557600
x-amz-version-id: Xk92QYmNJefTrrSFcBk4Uz_VdCHT0wHy
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: BK6GXFeKrMltxv6d30lNheML0G3jk5k79DX0UqXpsldgOOK43w0VrA==
Age: 1061362
d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-grplus-fps/32f07f71-whitecheck_100m00t000000000000028.png
200 OK 464 B URL HTTP/1.1 d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-grplus-fps/32f07f71-whitecheck_100m00t000000000000028.png
IP
File type PNG image data, 22 x 29, 8-bit colormap, non-interlaced\012- data
Hash a04ce831c57d2ab68e6238b18207182b
477c54ca36bd828eaebca0065bf3a5ab5c37dd69
d3a68575df410bc51a704527a749d5494ed65798304954b369c5ba91a2258650
GET /pages.upwellness.com/uc-grplus-fps/32f07f71-whitecheck_100m00t000000000000028.png HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pages.upwellness.com/
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 464
Connection: keep-alive
Date: Sat, 05 Nov 2022 01:41:56 GMT
Last-Modified: Thu, 03 Nov 2022 21:58:01 GMT
ETag: "a04ce831c57d2ab68e6238b18207182b"
Cache-Control: max-age=31557600
x-amz-version-id: q8QDq93TO.DlumuaXE.WeGp2f8EaUkWi
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 a343e36742f64defd0a2caf1f96ff772.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: sVF3_BE61LRbmlQz85hQBtuKyNVPRk9j8UVD56U5Bo2LI35y7g59ZQ==
Age: 1717875
d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-grplus-fps/70db8b32-gr-charleyhull-color-square1643654151841-1646087587850.jpg
200 OK 392 kB URL HTTP/1.1 d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-grplus-fps/70db8b32-gr-charleyhull-color-square1643654151841-1646087587850.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 3024x3024, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Size 392 kB (391562 bytes)
Hash eebff3d5cbe85e83397993d25c26a739
b5fa5731fba3adf0e685dab49911eb0f558a677d
042095a945a89bdee47dce9e27f452ee539aaa495f247e0967ae28ef37ac8d42
GET /pages.upwellness.com/uc-grplus-fps/70db8b32-gr-charleyhull-color-square1643654151841-1646087587850.jpg HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pages.upwellness.com/
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 391562
Connection: keep-alive
Date: Sun, 30 Oct 2022 15:51:17 GMT
Last-Modified: Wed, 26 Oct 2022 17:25:44 GMT
ETag: "eebff3d5cbe85e83397993d25c26a739"
Cache-Control: max-age=31557600
x-amz-version-id: 9428CXLFrm7taUwfiB8ZidqSY5KabqzZ
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: tW9d10wg4SYOM0eh8aub2p7JlA1KsvcwZKzsapiLKLgKV80wTfz7gw==
Age: 2185314
d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-grplus-fps/2181c4f3-upwellness-logo_104201o000000000000028.png
200 OK 3.7 kB URL HTTP/1.1 d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-grplus-fps/2181c4f3-upwellness-logo_104201o000000000000028.png
IP
File type PNG image data, 146 x 60, 8-bit colormap, non-interlaced\012- data
Hash 7b6c725ae1e3af92af160df87ba31720
fc0d76321efc84dd8c926a657c4c8e2bcd4a1c8f
0f475e7e1b6a0880db2523554814a82c89bdf1c1f3f947856b111f6f06999f02
GET /pages.upwellness.com/uc-grplus-fps/2181c4f3-upwellness-logo_104201o000000000000028.png HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pages.upwellness.com/
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 3678
Connection: keep-alive
Date: Sat, 12 Nov 2022 16:03:48 GMT
Last-Modified: Wed, 09 Nov 2022 21:02:26 GMT
ETag: "7b6c725ae1e3af92af160df87ba31720"
Cache-Control: max-age=31557600
x-amz-version-id: c4eUrBU0Mo6XvYzMurKAzTISrfTyHeCS
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: KOc9XpqQ9cLuQXUQ6qZg05X5OluQ5zxx9n9NOSAhF35J0zjsDxJQ-w==
Age: 1061363
d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-grplus-fps/fbb721db-circlecheck_100g00g000000000000028.png
200 OK 301 B URL HTTP/1.1 d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-grplus-fps/fbb721db-circlecheck_100g00g000000000000028.png
IP
File type PNG image data, 16 x 16, 8-bit colormap, non-interlaced\012- data
Hash f8422fa84a7973c0bc5aaa9a9dcb2e73
af6a43db3be1f80c737b162d3d2243bbba369f55
89bdf93fd2791ec2a0c6466ea0c630f30d9bf2550ea369081ab8c275c0a2baf1
GET /pages.upwellness.com/uc-grplus-fps/fbb721db-circlecheck_100g00g000000000000028.png HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pages.upwellness.com/
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 301
Connection: keep-alive
Date: Wed, 23 Nov 2022 21:44:09 GMT
Last-Modified: Wed, 23 Nov 2022 20:42:55 GMT
ETag: "f8422fa84a7973c0bc5aaa9a9dcb2e73"
Cache-Control: max-age=31557600
x-amz-version-id: 92WFmB0h8m8TfteCDukPtd3Gcg6g1b0E
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 6joZEafj0BCJ4UcH6fZQ3ThCGD5RHqgFUaFmPuPlua_Nmu9fGWAH2w==
Age: 90542
d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-grplus-fps/95f860a4-60daymoneybackguarantee-logo_105e05e000000000000028.png
200 OK 16 kB URL HTTP/1.1 d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-grplus-fps/95f860a4-60daymoneybackguarantee-logo_105e05e000000000000028.png
IP
File type PNG image data, 194 x 194, 8-bit colormap, non-interlaced\012- data
Hash 65bf040063564f89972c66052d155a51
4d6999f156e6c90eaa799c696e920126767e0422
018330acd256ded2afc2a8a4ae96cc32e64b5097d2eb1424ecc68781a169be29
GET /pages.upwellness.com/uc-grplus-fps/95f860a4-60daymoneybackguarantee-logo_105e05e000000000000028.png HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pages.upwellness.com/
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 16499
Connection: keep-alive
Date: Thu, 03 Nov 2022 10:31:44 GMT
Last-Modified: Wed, 02 Nov 2022 12:51:42 GMT
ETag: "65bf040063564f89972c66052d155a51"
Cache-Control: max-age=31557600
x-amz-version-id: SCAl5U2RNqvmwXWjslQzIC4FwqmdATR.
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: fORMssCmH5hWBoGaguNgM4i4ho-Y0SiHqmzAdqajOi9kES4GE6av5Q==
Age: 1858887
a.clickcertain.com/px/smart/a/?seg=uc-grplus-fps&c=24a3d6f0fe7dd9c&partner_id=cl4975ot4arrr687eb6635-f5db-42af-9103-3f8823789579
302 Found 3.0 kB URL HTTP/2 a.clickcertain.com/px/smart/a/?seg=uc-grplus-fps&c=24a3d6f0fe7dd9c&partner_id=cl4975ot4arrr687eb6635-f5db-42af-9103-3f8823789579
IP
File type PNG image data, 193 x 79, 8-bit colormap, non-interlaced\012- data
Hash 88263fec2db483b6e115f831a65022a9
590c662dd75e717c6fdb22b3cf96a7516fd8117b
b9e0c749babae72a68409ddb333e46a70bedad02c976fc1b2dcf176be530fdc8
GET /px/smart/a/?seg=uc-grplus-fps&c=24a3d6f0fe7dd9c&partner_id=cl4975ot4arrr687eb6635-f5db-42af-9103-3f8823789579 HTTP/1.1
Host: a.clickcertain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://pages.upwellness.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Thu, 24 Nov 2022 22:53:10 GMT
content-type: text/javascript
location: https://a.clickcertain.com/px/?c=24a3d6f0fe7dd9c
set-cookie: _ccpx_u=f2387451%2d6984%2d4a26%2d8e7d%2d5c74afeb98a4; Expires=Fri, 24 Nov 2023 22:53:10 GMT; Path=/; HttpOnly; SameSite=None; Secure
x-frontend: cc-nginx-c76b96594-hwrfg:cc-nginx-c76b96594-hwrfg
x-requestid: ea3de96a-6b0b-46ac-8ce5-fafc03773ce9
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Ex9wPN%2BdCVu%2Fa3EDRefZICohmHSkreg%2F42TxwBGympgYU1652UOGlqDIfvXJbt8tPTgLrzA%2F9yDBH%2BZ9D%2F%2BjUajFQID5zwiEO4pMbYLDb%2B3WcW8rY0hhdT%2FsWvxtLlfX1GRXQA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76f5b81c4951fac4-OSL
X-Firefox-Spdy: h2
d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-grplus-fps/ac1a08cd-inflammation-1_108t09u08b09p009005028.png
200 OK 45 kB URL HTTP/1.1 d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-grplus-fps/ac1a08cd-inflammation-1_108t09u08b09p009005028.png
IP
File type PNG image data, 299 x 349, 8-bit colormap, non-interlaced\012- data
Hash 359ed3bb81729f290b18d9b109cf06a1
da83427855037011aaccb2d92d4c7c03c04d70b7
cd67108bfcb47b5184059b16a4b7f8d39d0dd26b6d717628f2280bd770afa2f7
GET /pages.upwellness.com/uc-grplus-fps/ac1a08cd-inflammation-1_108t09u08b09p009005028.png HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pages.upwellness.com/
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 44857
Connection: keep-alive
Date: Thu, 10 Nov 2022 16:44:04 GMT
Last-Modified: Wed, 09 Nov 2022 21:02:27 GMT
ETag: "359ed3bb81729f290b18d9b109cf06a1"
Cache-Control: max-age=31557600
x-amz-version-id: XRDSO.3_Rxn1AKpurhWx.EsoT6lHLreI
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: DDYGR4xZnwF9QA0ZyQJodOaBNqokFmwQV5_ennPkNbTM_TunyMJTIg==
Age: 1231747
d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-grplus-fps/4cac7528-white-215136347-1_10dm0c7000000000000028.png
200 OK 27 kB URL HTTP/1.1 d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-grplus-fps/4cac7528-white-215136347-1_10dm0c7000000000000028.png
IP
File type PNG image data, 490 x 439, 8-bit colormap, non-interlaced\012- data
Hash 816661072aa7266a68ff0387b3c14c4e
1542253bc83e631e25a2e53b27cef33e63b1c8d7
26d8ea7222ae63e278879992c7ffa36458a34e0de21a94b53de90363908eab09
GET /pages.upwellness.com/uc-grplus-fps/4cac7528-white-215136347-1_10dm0c7000000000000028.png HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pages.upwellness.com/
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 27101
Connection: keep-alive
Date: Sat, 12 Nov 2022 16:03:48 GMT
Last-Modified: Wed, 09 Nov 2022 21:02:26 GMT
ETag: "816661072aa7266a68ff0387b3c14c4e"
Cache-Control: max-age=31557600
x-amz-version-id: ur9_cOkUMfjkwwBe_2cB7Sxp0P02vdLD
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: OxO6Ql0uE48SgWk5xvoY6UK0yXkT1KkJ6Nc_M9gtRNSHV5u-eqMghQ==
Age: 1061362
d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-grplus-fps/100773b4-lr-134712307-1_10ce0ik09f0ho01x00g01o.jpg
200 OK 23 kB URL HTTP/1.1 d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-grplus-fps/100773b4-lr-134712307-1_10ce0ik09f0ho01x00g01o.jpg
IP
File type JPEG image data, baseline, precision 8, 339x636, components 3\012- data
Hash 9e943cd62e2bfe0bc4e138564aa93a3e
83fcc073bcee0eb4ff4cb3bc3fe4ad8e38b0cfa2
bb7094c95568cc14bcce044afc3ab2700111c361b670ba4afad984a871beeab8
GET /pages.upwellness.com/uc-grplus-fps/100773b4-lr-134712307-1_10ce0ik09f0ho01x00g01o.jpg HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pages.upwellness.com/
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 23241
Connection: keep-alive
Date: Mon, 14 Nov 2022 21:15:22 GMT
Last-Modified: Mon, 14 Nov 2022 12:03:24 GMT
ETag: "9e943cd62e2bfe0bc4e138564aa93a3e"
Cache-Control: max-age=31557600
x-amz-version-id: xErD4shrb.wYaWyWxaESnIZdoPZxyYXz
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 a343e36742f64defd0a2caf1f96ff772.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: fTdkBpHRSNWIARpyrie4ne8KUFUk97iuEan_IB5Zx7njZJ-Wo43ZRQ==
Age: 869869
d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-grplus-fps/55c22076-extracted-345080294-1-1_10bw0az0bd0ar008005028.png
200 OK 94 kB URL HTTP/1.1 d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-grplus-fps/55c22076-extracted-345080294-1-1_10bw0az0bd0ar008005028.png
IP
File type PNG image data, 409 x 387, 8-bit colormap, non-interlaced\012- data
Hash 49e2d3fbfeb102084be57d44c2246bb6
9538099776a20e5066600d61a9caaab6514892e5
0d0518a6b35aa7a5ad21c3fd031e6e963fcec23e700bd1267d8cb4caad243ea7
GET /pages.upwellness.com/uc-grplus-fps/55c22076-extracted-345080294-1-1_10bw0az0bd0ar008005028.png HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pages.upwellness.com/
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 94271
Connection: keep-alive
Date: Sun, 13 Nov 2022 19:50:19 GMT
Last-Modified: Wed, 09 Nov 2022 21:02:26 GMT
ETag: "49e2d3fbfeb102084be57d44c2246bb6"
Cache-Control: max-age=31557600
x-amz-version-id: l.AN0i5MIAqLF8jBGtPiy5ooHRVxU3d0
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: UdLncxewCeGx0bTzyh11FrtmeYfnTAX42eAgdUElEN2FobxicxGKUQ==
Age: 961371
d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-grplus-fps/d7376dba-adobestock-77164958-1-copy_10d40jn0830dl03303o01o.jpeg
200 OK 22 kB URL HTTP/1.1 d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-grplus-fps/d7376dba-adobestock-77164958-1-copy_10d40jn0830dl03303o01o.jpeg
IP
File type JPEG image data, baseline, precision 8, 291x489, components 3\012- data
Hash 4b457e95483072fff9080800977a4a8c
f97a5b9849bd6d18d472ba2c07b5af7d40bb42a2
24840dc0e1ed69e48a3c4e17d720e029740b1023a35ead2470c51a1aa1fb9a7a
GET /pages.upwellness.com/uc-grplus-fps/d7376dba-adobestock-77164958-1-copy_10d40jn0830dl03303o01o.jpeg HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pages.upwellness.com/
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 22266
Connection: keep-alive
Date: Mon, 31 Oct 2022 16:59:44 GMT
Last-Modified: Mon, 31 Oct 2022 09:43:56 GMT
ETag: "4b457e95483072fff9080800977a4a8c"
Cache-Control: max-age=31557600
x-amz-version-id: _uQf1xzn8ZUvBl6b99F6llfMewzMXHxG
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 6XrI4ZuSmEMLwf6xJQVjd_Vxta3Nw1AYwY7uxP0HO3bgKw9IIoX-jA==
Age: 2094807
bat.bing.com/action/0?ti=27015508&Ver=2&mid=b9520a2b-1da9-4c9d-8bab-9c0df79a2c4c&sid=c425f8206c4a11edb83233f6d4b52e36&vid=c4262a706c4a11ed8f5331137801f7cc&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&p=http%3A%2F%2Fpages.upwellness.com%2Fuc-grplus-fps%2F%3Foffer%3D67%26session_id%3D10290265cbed53f23d905efdd75177%26n%3Dtune%26AFFID%3D477232%26subid%3D37_UW221124PM&r=<=1521&evt=pageLoad&sv=1&rn=477793
204 No Content 0 B URL HTTP/2 bat.bing.com/action/0?ti=27015508&Ver=2&mid=b9520a2b-1da9-4c9d-8bab-9c0df79a2c4c&sid=c425f8206c4a11edb83233f6d4b52e36&vid=c4262a706c4a11ed8f5331137801f7cc&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&p=http%3A%2F%2Fpages.upwellness.com%2Fuc-grplus-fps%2F%3Foffer%3D67%26session_id%3D10290265cbed53f23d905efdd75177%26n%3Dtune%26AFFID%3D477232%26subid%3D37_UW221124PM&r=<=1521&evt=pageLoad&sv=1&rn=477793
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /action/0?ti=27015508&Ver=2&mid=b9520a2b-1da9-4c9d-8bab-9c0df79a2c4c&sid=c425f8206c4a11edb83233f6d4b52e36&vid=c4262a706c4a11ed8f5331137801f7cc&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&p=http%3A%2F%2Fpages.upwellness.com%2Fuc-grplus-fps%2F%3Foffer%3D67%26session_id%3D10290265cbed53f23d905efdd75177%26n%3Dtune%26AFFID%3D477232%26subid%3D37_UW221124PM&r=<=1521&evt=pageLoad&sv=1&rn=477793 HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pages.upwellness.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
cache-control: no-cache, must-revalidate
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
set-cookie: MUID=3A4ACB0F6E1F60131E63D9696FEA6109; domain=.bing.com; expires=Tue, 19-Dec-2023 22:53:10 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 71A7E969115348978973E4C1FD45C87E Ref B: OSL30EDGE0516 Ref C: 2022-11-24T22:53:10Z
date: Thu, 24 Nov 2022 22:53:10 GMT
X-Firefox-Spdy: h2
d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-grplus-fps/d70288ad-adobestock-87210322-1_108s0ep00000000000001o.jpeg
200 OK 18 kB URL HTTP/1.1 d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-grplus-fps/d70288ad-adobestock-87210322-1_108s0ep00000000000001o.jpeg
IP
File type JPEG image data, baseline, precision 8, 316x529, components 3\012- data
Hash 1ec345ee01c3de0754cc0a131de2cc90
1344f8213cc49118f2a6db4d6779773333cc21ed
4487716d5d8ea3d1e886f2451c6e14f3611cb19b7f6e6932da2907e2bf32a265
GET /pages.upwellness.com/uc-grplus-fps/d70288ad-adobestock-87210322-1_108s0ep00000000000001o.jpeg HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pages.upwellness.com/
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 17818
Connection: keep-alive
Date: Sat, 05 Nov 2022 00:23:57 GMT
Last-Modified: Thu, 03 Nov 2022 21:58:02 GMT
ETag: "1ec345ee01c3de0754cc0a131de2cc90"
Cache-Control: max-age=31557600
x-amz-version-id: VOgk0B.1G6l0gJiyUc2uHJSPpytlnLiE
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: H6HiDemUf6HFLU7iXRU5OUd9bhVVqnsTXaD9DoZhENZbY_rrugRsyw==
Age: 1722554
api.useproof.com/pixel/trtc0limNRYJwhvfi9uRqUFQo0w1?url=http:%2F%2Fpages.upwellness.com%2Fuc-grplus-fps%2F%3Foffer%3D67%26session_id%3D10290265cbed53f23d905efdd75177%26n%3Dtune%26AFFID%3D477232%26subid%3D37_UW221124PM
200 OK 75 kB URL HTTP/2 api.useproof.com/pixel/trtc0limNRYJwhvfi9uRqUFQo0w1?url=http:%2F%2Fpages.upwellness.com%2Fuc-grplus-fps%2F%3Foffer%3D67%26session_id%3D10290265cbed53f23d905efdd75177%26n%3Dtune%26AFFID%3D477232%26subid%3D37_UW221124PM
IP
File type JSON data\012- , ASCII text, with very long lines (787), with no line terminators
Hash 59a2381a38d6ae77a013f88020a1fa4f
12e45920d6f69cab305218a5fa67b265d6c8d3f8
36a799229c45da977e10f527bee32aeee58701c593e1022927bbeba55687ef21
GET /pixel/trtc0limNRYJwhvfi9uRqUFQo0w1?url=http:%2F%2Fpages.upwellness.com%2Fuc-grplus-fps%2F%3Foffer%3D67%26session_id%3D10290265cbed53f23d905efdd75177%26n%3Dtune%26AFFID%3D477232%26subid%3D37_UW221124PM HTTP/1.1
Host: api.useproof.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://cdn.useproof.com
Connection: keep-alive
Referer: https://cdn.useproof.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Thu, 24 Nov 2022 22:53:10 GMT
content-type: application/json; charset=utf-8
x-amzn-requestid: cc146302-d509-41f7-8ea7-6068923a06c9
access-control-allow-origin: *
surrogate-control: no-store
x-amzn-remapped-content-length: 787
x-amzn-remapped-connection: keep-alive
x-amz-apigw-id: cINZhH6LIAMFnqQ=
cache-control: no-store, no-cache, must-revalidate, proxy-revalidate
expires: 0
etag: W/"313-+rkeP2UpHjKs6MCqLnNipDqgc1I"
pragma: no-cache
x-amzn-remapped-date: Thu, 24 Nov 2022 22:53:10 GMT
x-cache: Miss from cloudfront
via: 1.1 a034aae43a19aef875fa395182990970.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: vROJ1heMmhh1r4-agN_QToEJHmN5w_VE4V0ke7darjEU9JoFk9LENw==
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ICHEqj0kFHzwVhZOzt2nY%2F7FTZqgFpUcc6nZWVSayzehCQkdJ9T7r%2FGwyUfrqiJt%2BeTwhh3hYTcbp%2FW%2FglbX0vx2O%2BNnAwXQn9n7Sbm6KN6ZDrdpwA%2F%2Fr4EPR5%2BorBwQ18SX"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76f5b819d9dfb4eb-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-grplus-fps/a72f1bbb-lr-283136986-1_109o0en000000000000028.png
200 OK 52 kB URL HTTP/1.1 d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-grplus-fps/a72f1bbb-lr-283136986-1_109o0en000000000000028.png
IP
File type PNG image data, 348 x 527, 8-bit colormap, non-interlaced\012- data
Hash 6de55b9cb1893772e0b63bbbfd24d503
90fb243008ddc7a4e03e8c5c8da666554aebdb74
30662b8aafa46372630fad1767f4a9a340ec2b5a0246a194e7a5e342ed63f5e7
GET /pages.upwellness.com/uc-grplus-fps/a72f1bbb-lr-283136986-1_109o0en000000000000028.png HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pages.upwellness.com/
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 52060
Connection: keep-alive
Date: Sun, 06 Nov 2022 11:57:15 GMT
Last-Modified: Thu, 03 Nov 2022 21:58:02 GMT
ETag: "6de55b9cb1893772e0b63bbbfd24d503"
Cache-Control: max-age=31557600
x-amz-version-id: zRs_Ur7AXoyRoeOq8yamP9h6kFFUW7az
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: nX051vcjxRHysgmeqRmJuDnFuePBmYjcrgnZmEnfbFhVLmu3obNFtQ==
Age: 1594556
d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-grplus-fps/d150f539-goldenrevive-label-05042021-r4-01_10bf0d8000000000000028.png
200 OK 27 kB URL HTTP/1.1 d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-grplus-fps/d150f539-goldenrevive-label-05042021-r4-01_10bf0d8000000000000028.png
IP
File type PNG image data, 411 x 476, 8-bit colormap, non-interlaced\012- data
Hash e0f67241c0cda7c8283f88e34e2a62b1
e8698bda011ec1d5ce7a1905abc02948f98a2126
77a0b3d00b12c8520ffc0340505a63f2c24ecab1740147640d26132b9ec2e39d
GET /pages.upwellness.com/uc-grplus-fps/d150f539-goldenrevive-label-05042021-r4-01_10bf0d8000000000000028.png HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pages.upwellness.com/
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 26863
Connection: keep-alive
Date: Sat, 12 Nov 2022 16:03:49 GMT
Last-Modified: Wed, 09 Nov 2022 21:02:27 GMT
ETag: "e0f67241c0cda7c8283f88e34e2a62b1"
Cache-Control: max-age=31557600
x-amz-version-id: N1Y1J5y27hFNR6Jd53chYz_I_L5.Adoa
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: LIqNPKfsJTUqDcnPK--brD5UEdR88XVNx_tEKhfVrP6e_RX7vhQ-kA==
Age: 1061362
d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-grplus-fps/da253d5f-orange-fb7f07-circle-extracted-drjosh-1_10aw0ba08r0ao01f00m028.png
200 OK 46 kB URL HTTP/1.1 d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-grplus-fps/da253d5f-orange-fb7f07-circle-extracted-drjosh-1_10aw0ba08r0ao01f00m028.png
IP
File type PNG image data, 315 x 384, 8-bit colormap, non-interlaced\012- data
Hash 95c55c95d92c456dd43b16b64f4b3ff5
67a07adfeb68df37b5eadd1091530b4136e0ac18
2fa4ca6b70211d73c63898ffb5ede1d7d4c6723e3027edbe74ee5e1d3cfeb7c4
GET /pages.upwellness.com/uc-grplus-fps/da253d5f-orange-fb7f07-circle-extracted-drjosh-1_10aw0ba08r0ao01f00m028.png HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pages.upwellness.com/
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 45619
Connection: keep-alive
Date: Sat, 12 Nov 2022 16:03:49 GMT
Last-Modified: Wed, 09 Nov 2022 21:02:27 GMT
ETag: "95c55c95d92c456dd43b16b64f4b3ff5"
Cache-Control: max-age=31557600
x-amz-version-id: m3iOQ3R0bKB7ia8N7FjXREE0_Kxk5.Ii
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: Z7cA34_0SRtJHXAcqNtLw98zLIGL_0pNK5xDy1KRXhVeJQvqb9pGjw==
Age: 1061362
d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-grplus-fps/56f40964-lr-adobestock-216305168-converted-_10ao0io08v0ge00w00v028.png
200 OK 16 kB URL HTTP/1.1 d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-grplus-fps/56f40964-lr-adobestock-216305168-converted-_10ao0io08v0ge00w00v028.png
IP
File type PNG image data, 319 x 590, 8-bit colormap, non-interlaced\012- data
Hash 8ca90ce9d5610ced95d378903074b5dd
a4d1f38e33a301d40ac35b291a4299ffcb8261af
bf9a4fb40ff7e16d83a4c7ceee4d57331a75ca629f42d303c3d011fdbf011c90
GET /pages.upwellness.com/uc-grplus-fps/56f40964-lr-adobestock-216305168-converted-_10ao0io08v0ge00w00v028.png HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pages.upwellness.com/
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 16228
Connection: keep-alive
Date: Wed, 16 Nov 2022 03:17:15 GMT
Last-Modified: Mon, 14 Nov 2022 12:03:24 GMT
ETag: "8ca90ce9d5610ced95d378903074b5dd"
Cache-Control: max-age=31557600
x-amz-version-id: 4Qyvi0uPv7jFU.UEdhT2JBz4uxvXUUEY
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: f-Lv2BUqyN2u_aryAx18EWgOsVBPSiZUAOjQnWYVKY-haitNOZgxcw==
Age: 761755
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash ac4a14fdb8a8ac0bb56636c74d06965f
326a1fd45c01f55e54c1be6b7a971e2ea3660e60
1d7137634292f05911421b7f0abfe291dbafee2795720e6ecab8d1c0ef130cde
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=103450
Date: Thu, 24 Nov 2022 22:53:10 GMT
Etag: "637edfdf-1d7"
Expires: Sat, 26 Nov 2022 03:37:20 GMT
Last-Modified: Thu, 24 Nov 2022 03:07:11 GMT
Server: ECS (dcb/7FA3)
X-Cache: Miss from cloudfront
Via: 1.1 83a23d85c009b0c0e3626072e9f997fe.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 19y0r1t8RL4Q6JZg8u6IQU-_-fqapo92j37m2Jkhs5jV6TY4nY5lLA==
Age: 1809
d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-grplus-fps/7f01bac7-five-stars-original_103m012000000000000028.png
200 OK 778 B URL HTTP/1.1 d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-grplus-fps/7f01bac7-five-stars-original_103m012000000000000028.png
IP
File type PNG image data, 130 x 38, 8-bit colormap, non-interlaced\012- data
Hash 918ec8903473fef53c9ba0b9cf21cd8b
7d9932c9cc538b92ec94d8c1c7f99f3e3c81d46f
3a1cbaa47e2e01dc2f43b6e10894923f4d690092b3b5f4fe0319e17f5c9fe53b
GET /pages.upwellness.com/uc-grplus-fps/7f01bac7-five-stars-original_103m012000000000000028.png HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pages.upwellness.com/
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 778
Connection: keep-alive
Date: Sat, 12 Nov 2022 16:03:49 GMT
Last-Modified: Wed, 09 Nov 2022 21:02:27 GMT
ETag: "918ec8903473fef53c9ba0b9cf21cd8b"
Cache-Control: max-age=31557600
x-amz-version-id: ph.ntTkH22ZxVRpbR_dPVAlKFFmunQyi
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: GqpZzWt92ea-O3OWe8V-CU7EPYcF6_OzFTomH4ezAfDZSVM_T9e25g==
Age: 1061362
bat.bing.com/p/action/27015508.js
204 No Content 0 B URL HTTP/2 bat.bing.com/p/action/27015508.js
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /p/action/27015508.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pages.upwellness.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
cache-control: private,max-age=1800
set-cookie: MUID=030BBD6F12D46A602FFDAF0913216B1B; domain=.bing.com; expires=Tue, 19-Dec-2023 22:53:10 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-powered-by: ARR/3.0
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: EF4AF063F4C04D7AA489667864B64773 Ref B: OSL30EDGE0516 Ref C: 2022-11-24T22:53:10Z
date: Thu, 24 Nov 2022 22:53:10 GMT
X-Firefox-Spdy: h2
d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-grplus-fps/8c77d1de-rightarrow-angle_102n02m000000000000028.png
200 OK 1.0 kB URL HTTP/1.1 d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-grplus-fps/8c77d1de-rightarrow-angle_102n02m000000000000028.png
IP
File type PNG image data, 95 x 94, 8-bit colormap, non-interlaced\012- data
Hash 6eeccde26d2dc7f37f4370ec5f7bdef3
0842e21ac8a5a57abebe05108d6b97f1fb390256
1ba9ac8b06365638433cb55f70742ffcb72b341e0ea19f517c3f91c359e8ef67
GET /pages.upwellness.com/uc-grplus-fps/8c77d1de-rightarrow-angle_102n02m000000000000028.png HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pages.upwellness.com/
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 1009
Connection: keep-alive
Date: Sat, 05 Nov 2022 06:04:33 GMT
Last-Modified: Thu, 03 Nov 2022 21:58:02 GMT
ETag: "6eeccde26d2dc7f37f4370ec5f7bdef3"
Cache-Control: max-age=31557600
x-amz-version-id: ei3XGMHBVEZJzEKh0j91ejsx.XtPjT9a
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: Q4WQAWNztS-_USplJyEoaX1yJVSTdwRqQ2zivH03_ExP_E0fJdEHng==
Age: 1702119
d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-grplus-fps/382a6532-leftarrow-angle_102n02m000000000000028.png
200 OK 1.1 kB URL HTTP/1.1 d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-grplus-fps/382a6532-leftarrow-angle_102n02m000000000000028.png
IP
File type PNG image data, 95 x 94, 8-bit colormap, non-interlaced\012- data
Hash 38636c9904e9e46c854a0c55d99255c9
34b0375950bbfda1e3514d3d0d6caa608cc2ace3
a0ed1fd156e16b95275ef30f2229c0509ea00eeb1cce4173678dea14ba033c67
GET /pages.upwellness.com/uc-grplus-fps/382a6532-leftarrow-angle_102n02m000000000000028.png HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pages.upwellness.com/
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 1060
Connection: keep-alive
Date: Sat, 12 Nov 2022 16:03:49 GMT
Last-Modified: Wed, 09 Nov 2022 21:02:26 GMT
ETag: "38636c9904e9e46c854a0c55d99255c9"
Cache-Control: max-age=31557600
x-amz-version-id: iqM.AJ51h594l04Vn6IxaCLRRyP_pckx
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: ga03L-qZRC2Cp8HLMHvAwGe7feyISB8rwTY-5XINFiJqO-iqcyBDKw==
Age: 1061363
d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-grplus-fps/382a6532-leftarrow-angle_1046045000000000000028.png
200 OK 1.9 kB URL HTTP/1.1 d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-grplus-fps/382a6532-leftarrow-angle_1046045000000000000028.png
IP
File type PNG image data, 150 x 149, 8-bit colormap, non-interlaced\012- data
Hash c1a8b03787621838c3a03591dad5f219
91ff8d7e8aca28687d1105af0e138875bcba1ced
d4c165deb7000d457fa1459bd15d5e3503ccab7948d4d6751c38e3eddb451c38
GET /pages.upwellness.com/uc-grplus-fps/382a6532-leftarrow-angle_1046045000000000000028.png HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pages.upwellness.com/
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 1875
Connection: keep-alive
Date: Sat, 12 Nov 2022 16:03:49 GMT
Last-Modified: Wed, 09 Nov 2022 21:02:26 GMT
ETag: "c1a8b03787621838c3a03591dad5f219"
Cache-Control: max-age=31557600
x-amz-version-id: .Zw3kpL7phu2GR6zNnjuADYt2b1Ja27u
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: iye_dAdRxwOj8QAWt1FL4x1jLq16gKuCdslRBxCoYX-YJknmOxW7sQ==
Age: 1061363
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash ac4a14fdb8a8ac0bb56636c74d06965f
326a1fd45c01f55e54c1be6b7a971e2ea3660e60
1d7137634292f05911421b7f0abfe291dbafee2795720e6ecab8d1c0ef130cde
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=105427
Date: Thu, 24 Nov 2022 22:53:10 GMT
Etag: "637edfdf-1d7"
Expires: Sat, 26 Nov 2022 04:10:17 GMT
Last-Modified: Thu, 24 Nov 2022 03:07:11 GMT
Server: ECS (bsa/EB19)
X-Cache: Miss from cloudfront
Via: 1.1 6480520a5e02f3163410e3134bd77baa.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: bvVhXZh3RIhrIOUZYqPc2iPAsMuC-Q8D2lThyWjEF7noluxxsG26Vg==
Age: 3786
d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-grplus-fps/9e30cf5c-upwellness-marketing-chrissy-oneill-co-south-florida-wedding-photographer60-1-1646922951104_10b10b100000000000001o.jpeg
200 OK 17 kB URL HTTP/1.1 d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-grplus-fps/9e30cf5c-upwellness-marketing-chrissy-oneill-co-south-florida-wedding-photographer60-1-1646922951104_10b10b100000000000001o.jpeg
IP
File type JPEG image data, baseline, precision 8, 397x397, components 3\012- data
Hash e740fdf442268622328ba5ff3657a223
e897be016e3a868fda0b24bc5882623f3d0d30df
780dd06801c452a3e54f4c9571c34c58c8de41420e1c94098e122b9b5bf7ebb9
GET /pages.upwellness.com/uc-grplus-fps/9e30cf5c-upwellness-marketing-chrissy-oneill-co-south-florida-wedding-photographer60-1-1646922951104_10b10b100000000000001o.jpeg HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pages.upwellness.com/
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 16570
Connection: keep-alive
Date: Tue, 15 Nov 2022 13:00:17 GMT
Last-Modified: Mon, 14 Nov 2022 12:03:24 GMT
ETag: "e740fdf442268622328ba5ff3657a223"
Cache-Control: max-age=31557600
x-amz-version-id: 4.D2S8jX0smnShATw6MSqq2CIZS.bOel
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: eRk56ovyeynI2Ce_aKdtypZYBme-MNDNM19d38EJ33Qxeni-mjFGdg==
Age: 813175
d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-grplus-fps/85dd4373-newshadow-goldenrevive-rt-front_103p06z000000000000028.png
200 OK 12 kB URL HTTP/1.1 d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-grplus-fps/85dd4373-newshadow-goldenrevive-rt-front_103p06z000000000000028.png
IP
File type PNG image data, 133 x 251, 8-bit colormap, non-interlaced\012- data
Hash 5cb3c3f5b3507c11c9caac73d0935f02
5b3f5c179d7fb89d4b59de357c77d30ec2842a79
75c3b9ffd05b79e3d802d05a92a07258fe29e97ab1bc2820f13de7cabbe163ae
GET /pages.upwellness.com/uc-grplus-fps/85dd4373-newshadow-goldenrevive-rt-front_103p06z000000000000028.png HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pages.upwellness.com/
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 11539
Connection: keep-alive
Date: Sat, 12 Nov 2022 16:03:49 GMT
Last-Modified: Wed, 09 Nov 2022 21:02:27 GMT
ETag: "5cb3c3f5b3507c11c9caac73d0935f02"
Cache-Control: max-age=31557600
x-amz-version-id: NgjnxLaUFpw_gPBYKCjjXBdVNWlk6msY
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: obMwh6qve88rCYdn6xSXmwJqOuUEdluMBk7acDDDg934G2FcY2tTHw==
Age: 1061363
s.yimg.com/wi/config/10175858.json
200 OK 46 B URL HTTP/2 s.yimg.com/wi/config/10175858.json
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 7ad716787c5ee7f50ab6806a8dfac76d
31d18a36b7472a44913f9871c1ea0d3530f17060
abfa88f1779dab4ebc144e49e4ed3b01567d93441a93dd09ed0099652aa08a2e
GET /wi/config/10175858.json HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://pages.upwellness.com
Connection: keep-alive
Referer: http://pages.upwellness.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: 8ZSrDjVJsTec9rpUB6vnszDqMF6Po0ulvXOTknYES2B9mRP1RpbNXOulOKNUrY1LljBjjTkiSOM=
x-amz-request-id: RA8ZS8N6377GNP6A
date: Thu, 24 Nov 2022 05:05:14 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method
last-modified: Fri, 14 Jan 2022 20:54:46 GMT
x-amz-expiration: expiry-date="Sun, 19 Feb 2023 00:00:00 GMT", rule-id="oath-standard-lifecycle"
x-amz-server-side-encryption: AES256
x-amz-version-id: fa2aBktS.tlgTipU0DLTD9VeWF6_YTMO
accept-ranges: bytes
content-type: application/octet-stream
server: ATS
content-length: 46
referrer-policy: no-referrer-when-downgrade
etag: "7ad716787c5ee7f50ab6806a8dfac76d"
age: 64078
strict-transport-security: max-age=15552000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
s.yimg.com/wi/config/10056129.json
200 OK 46 B URL HTTP/2 s.yimg.com/wi/config/10056129.json
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash fc5f6676b4f2531b36b8c7120da6ecca
e7ddbe9b016bc7594e9d5f3a7bf960b56226d5de
53e808254e77628c2ca0b926487688a3d92f2b145b6b2aac4d7b425a34f22f85
GET /wi/config/10056129.json HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://pages.upwellness.com
Connection: keep-alive
Referer: http://pages.upwellness.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: T1EIW3PR4N+PsmCrbe4YeaDdjYgdKUW61JyUxU0iBq+dmNTGKOW8JFc+HumFXj8aXI1hEzLpqz8=
x-amz-request-id: RA8JCJ8B3F2XYXXW
date: Thu, 24 Nov 2022 05:05:14 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method
last-modified: Tue, 27 Sep 2022 22:00:05 GMT
x-amz-expiration: expiry-date="Thu, 02 Nov 2023 00:00:00 GMT", rule-id="oath-standard-lifecycle"
x-amz-server-side-encryption: AES256
x-amz-version-id: 2rRdRVYlbk84_TZOhKVDmB8X1gW3WGzs
accept-ranges: bytes
content-type: application/json
server: ATS
content-length: 46
referrer-policy: no-referrer-when-downgrade
etag: "fc5f6676b4f2531b36b8c7120da6ecca"
age: 64078
strict-transport-security: max-age=15552000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-grplus-fps/8558abfe-shadow-goldenreviveplus-back-updated_109w0ip000000000000028.png
200 OK 57 kB URL HTTP/1.1 d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-grplus-fps/8558abfe-shadow-goldenreviveplus-back-updated_109w0ip000000000000028.png
IP
File type PNG image data, 356 x 673, 8-bit colormap, non-interlaced\012- data
Hash b1ac86144722d6bb5139c086266e3a29
7691c33e6ec4b01c20a53e7f1e7e0ca5ea00dc07
205853c0ef45d0842feba60b08786717cd443f0a650010e36a0fb3a91a067062
GET /pages.upwellness.com/uc-grplus-fps/8558abfe-shadow-goldenreviveplus-back-updated_109w0ip000000000000028.png HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pages.upwellness.com/
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 57139
Connection: keep-alive
Date: Wed, 02 Nov 2022 10:38:33 GMT
Last-Modified: Mon, 31 Oct 2022 09:43:55 GMT
ETag: "b1ac86144722d6bb5139c086266e3a29"
Cache-Control: max-age=31557600
x-amz-version-id: a96fgxlc2hZpggHB6S31gyKN8m7FQ.Lr
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: iwfelFdIRsSjyBH4IUP1YTj1yLJCvmYtpgC3Vk8LW_j2OZBmiP6VnQ==
Age: 1944878
live-visitor-counts.herokuapp.com/lvc/register
204 No Content 0 B URL HTTP/1.1 live-visitor-counts.herokuapp.com/lvc/register
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /lvc/register HTTP/1.1
Host: live-visitor-counts.herokuapp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://cdn.useproof.com/
Origin: https://cdn.useproof.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Server: Cowboy
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Headers: Origin,Content-Length,Content-Type
Access-Control-Allow-Methods: GET,POST,PUT,PATCH,DELETE,HEAD
Access-Control-Allow-Origin: https://cdn.useproof.com
Access-Control-Max-Age: 43200
Vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
Date: Thu, 24 Nov 2022 22:53:11 GMT
Via: 1.1 vegur
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-28307243-3&cid=661723866.1669330389&jid=534245474&gjid=941972928&_gid=832237409.1669330389&_u=YGBAiEABBAAAAEAAI~&z=1153642711
200 OK 4 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-28307243-3&cid=661723866.1669330389&jid=534245474&gjid=941972928&_gid=832237409.1669330389&_u=YGBAiEABBAAAAEAAI~&z=1153642711
IP
File type ASCII text, with no line terminators
Hash 48c0473b7821185d937e685216e2168b
3743e47f8a429a5e87b86cb582d78940733d9d2e
570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-28307243-3&cid=661723866.1669330389&jid=534245474&gjid=941972928&_gid=832237409.1669330389&_u=YGBAiEABBAAAAEAAI~&z=1153642711 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: http://pages.upwellness.com
Connection: keep-alive
Referer: http://pages.upwellness.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: http://pages.upwellness.com
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Thu, 24 Nov 2022 22:53:11 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-grplus-fps/2e909c98-298502280-extracted-updated-rt_10dx09o000000000000028.png
200 OK 64 kB URL HTTP/1.1 d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-grplus-fps/2e909c98-298502280-extracted-updated-rt_10dx09o000000000000028.png
IP
File type PNG image data, 501 x 348, 8-bit colormap, non-interlaced\012- data
Hash c20ef03d9c4142b86e99acdee2bda368
c67ca00988eabf4d89d7c918069aea6b34499f52
13d55c54af12b15b6999e715e67b91da9abaceee5b40a136fbae2df9ef1cf11d
GET /pages.upwellness.com/uc-grplus-fps/2e909c98-298502280-extracted-updated-rt_10dx09o000000000000028.png HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pages.upwellness.com/
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 63662
Connection: keep-alive
Date: Mon, 31 Oct 2022 16:59:44 GMT
Last-Modified: Mon, 31 Oct 2022 09:43:55 GMT
ETag: "c20ef03d9c4142b86e99acdee2bda368"
Cache-Control: max-age=31557600
x-amz-version-id: dZFlmY4GZIJkJfE6EeIeu7euHD2VxJbw
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: __sSoIj6NxGq2XMvchf4h8o5zYzD0AQtD42MtNdzwdf4oAbz-2DoqQ==
Age: 2094808
d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-grplus-fps/85dd4373-newshadow-goldenrevive-rt-front_108b0fr000000000000028.png
200 OK 42 kB URL HTTP/1.1 d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-grplus-fps/85dd4373-newshadow-goldenrevive-rt-front_108b0fr000000000000028.png
IP
File type PNG image data, 299 x 567, 8-bit colormap, non-interlaced\012- data
Hash 3a2b95d01cb23a2899f17b0099a335ca
76be01e963d93a542827cecd65d3a14717974456
a1fc8420705b69db0c5c0e2248e79b2f8c33506580b296202c3965870ab9adf5
GET /pages.upwellness.com/uc-grplus-fps/85dd4373-newshadow-goldenrevive-rt-front_108b0fr000000000000028.png HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pages.upwellness.com/
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 41717
Connection: keep-alive
Date: Sat, 12 Nov 2022 16:03:49 GMT
Last-Modified: Wed, 09 Nov 2022 21:02:27 GMT
ETag: "3a2b95d01cb23a2899f17b0099a335ca"
Cache-Control: max-age=31557600
x-amz-version-id: KH5bAbWw4II1OajY1zNtI_FOjiwg3Rn8
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: sUynC3wY-B3UuccQqMsE2KhwRr-S0fhYmZsFLjKAOJTVFnrW2up1fQ==
Age: 1061363
d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-grplus-fps/85dd4373-newshadow-goldenrevive-rt-front_10910h3000000000000028.png
200 OK 50 kB URL HTTP/1.1 d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-grplus-fps/85dd4373-newshadow-goldenrevive-rt-front_10910h3000000000000028.png
IP
File type PNG image data, 325 x 615, 8-bit colormap, non-interlaced\012- data
Hash 2b195f509b97cf523257ce393cf5e75f
9d4cae2c81aa5b53c72c956c070f450f653bf9a8
c5444b48af5940e46bff886e60bba6fc2c1c6705f30a1c8d0577d710fcb9b5b0
GET /pages.upwellness.com/uc-grplus-fps/85dd4373-newshadow-goldenrevive-rt-front_10910h3000000000000028.png HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pages.upwellness.com/
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 49713
Connection: keep-alive
Date: Mon, 31 Oct 2022 16:59:44 GMT
Last-Modified: Mon, 31 Oct 2022 09:43:55 GMT
ETag: "2b195f509b97cf523257ce393cf5e75f"
Cache-Control: max-age=31557600
x-amz-version-id: kVo.LZ9sZoi0x1aVXz3XrTzVK4TxKWaw
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: UxnlOAPqooRFIAgyXOsYpP3c0sDMjlhYmaXGcAvi0j9yP_ns_lP86w==
Age: 2094808
ct.pinterest.com/user/?tid=2614137446842&pd=%7B%22em%22%3A%2224aba99b2defbb47ee981b4200313f61f3ae31541d8717bdac1e463c838939b0%22%7D&cb=1669330390413&dep=2%2CPAGE_LOAD
200 OK 373 B URL HTTP/2 ct.pinterest.com/user/?tid=2614137446842&pd=%7B%22em%22%3A%2224aba99b2defbb47ee981b4200313f61f3ae31541d8717bdac1e463c838939b0%22%7D&cb=1669330390413&dep=2%2CPAGE_LOAD
IP
File type JSON data\012- , ASCII text, with very long lines (533), with no line terminators
Hash 7c95bf1e7580e7dfa7f4f5c10b0addd9
a1e3954cd6a0d4a5fc0a6c344d91e6c24504722b
1f8cb83a1e4eedc470a6d0c6acc5f5ff13fa65639378a8a14d5db82e288b2e17
GET /user/?tid=2614137446842&pd=%7B%22em%22%3A%2224aba99b2defbb47ee981b4200313f61f3ae31541d8717bdac1e463c838939b0%22%7D&cb=1669330390413&dep=2%2CPAGE_LOAD HTTP/1.1
Host: ct.pinterest.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://pages.upwellness.com
Connection: keep-alive
Referer: http://pages.upwellness.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-expose-headers: Epik,Pin-Unauth
pin-unauth: dWlkPU5ERmlZakJsTkdJdFltRTBOeTAwTlRRekxXSTJabUl0WVRZek5UTXpaR0UzWkRZeQ
cache-control: no-cache,no-store,must-revalidate,max-age=0
pragma: no-cache
expires: Sat, 01 Jan 2000 00:00:00 GMT
access-control-allow-origin: http://pages.upwellness.com
content-type: application/json; charset=utf-8
content-encoding: gzip
content-length: 373
x-envoy-upstream-service-time: 2
referrer-policy: origin
x-pinterest-rid: 1649728757986642
date: Thu, 24 Nov 2022 22:53:11 GMT
vary: Accept-Encoding
akamai-grn: 0.274f2417.1669330391.46ab9e29
x-cdn: akamai
strict-transport-security: max-age=31536000 ; includeSubDomains ; preload
X-Firefox-Spdy: h2
d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-grplus-fps/b672226b-nobrackets-blackfriday-deal-onred-227130636-01_10b90970aa08h00k00e028.png
200 OK 5.7 kB URL HTTP/1.1 d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-grplus-fps/b672226b-nobrackets-blackfriday-deal-onred-227130636-01_10b90970aa08h00k00e028.png
IP
File type PNG image data, 370 x 305, 8-bit colormap, non-interlaced\012- data
Hash 38c57c6ee9cb8111a5d52429ecffa5b0
c68d33b55476031760bf7ee61f43da227945eb71
b5a3e3062743d09d257f633a7dbba084bcd07a1faec89dbfcd39de11c24347db
GET /pages.upwellness.com/uc-grplus-fps/b672226b-nobrackets-blackfriday-deal-onred-227130636-01_10b90970aa08h00k00e028.png HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pages.upwellness.com/
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 5657
Connection: keep-alive
Date: Thu, 24 Nov 2022 11:08:18 GMT
Last-Modified: Thu, 24 Nov 2022 08:54:59 GMT
ETag: "38c57c6ee9cb8111a5d52429ecffa5b0"
Cache-Control: max-age=31557600
x-amz-version-id: 8MTjxWHKFPcQ88Zr6WhaDh.h5Worsy2B
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: e5K1KyGDc4mv4BhN5e186XHNQj_EvfQ0k0_rO7Jbmcbt6U8-GSZ83g==
Age: 42294
ct.pinterest.com/v3/?tid=2614137446842&pd=%7B%22em%22%3A%2224aba99b2defbb47ee981b4200313f61f3ae31541d8717bdac1e463c838939b0%22%7D&event=init&ad=%7B%22loc%22%3A%22http%3A%2F%2Fpages.upwellness.com%2Fuc-grplus-fps%2F%3Foffer%3D67%26session_id%3D10290265cbed53f23d905efdd75177%26n%3Dtune%26AFFID%3D477232%26subid%3D37_UW221124PM%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%229a94ee76%22%2C%22ecm_enabled%22%3Afalse%7D&cb=1669330390414
200 OK 35 B URL HTTP/2 ct.pinterest.com/v3/?tid=2614137446842&pd=%7B%22em%22%3A%2224aba99b2defbb47ee981b4200313f61f3ae31541d8717bdac1e463c838939b0%22%7D&event=init&ad=%7B%22loc%22%3A%22http%3A%2F%2Fpages.upwellness.com%2Fuc-grplus-fps%2F%3Foffer%3D67%26session_id%3D10290265cbed53f23d905efdd75177%26n%3Dtune%26AFFID%3D477232%26subid%3D37_UW221124PM%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%229a94ee76%22%2C%22ecm_enabled%22%3Afalse%7D&cb=1669330390414
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 9b8d19f4310c758344e40bf17fbc7e85
2290ef058812d5f5e398736e2316cba8cf8093cf
37b17c5135a176a9474521af147d96dfa1fb4ca0f43f00d1400bd1885be3ab9b
GET /v3/?tid=2614137446842&pd=%7B%22em%22%3A%2224aba99b2defbb47ee981b4200313f61f3ae31541d8717bdac1e463c838939b0%22%7D&event=init&ad=%7B%22loc%22%3A%22http%3A%2F%2Fpages.upwellness.com%2Fuc-grplus-fps%2F%3Foffer%3D67%26session_id%3D10290265cbed53f23d905efdd75177%26n%3Dtune%26AFFID%3D477232%26subid%3D37_UW221124PM%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%229a94ee76%22%2C%22ecm_enabled%22%3Afalse%7D&cb=1669330390414 HTTP/1.1
Host: ct.pinterest.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pages.upwellness.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: no-cache,no-store,must-revalidate,max-age=0
pragma: no-cache
expires: Sat, 01 Jan 2000 00:00:00 GMT
content-type: image/gif
content-length: 35
access-control-allow-origin: *
x-envoy-upstream-service-time: 3
referrer-policy: origin
x-pinterest-rid: 1665364426576863
date: Thu, 24 Nov 2022 22:53:11 GMT
akamai-grn: 0.274f2417.1669330391.46ab9e9e
x-cdn: akamai
strict-transport-security: max-age=31536000 ; includeSubDomains ; preload
X-Firefox-Spdy: h2
trc.taboola.com/1225872/trc/3/json?tim=1669330389363&data=%7B%22id%22%3A56%2C%22ii%22%3A%22%2Fuc-grplus-fps%22%2C%22it%22%3A%22video%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22vi%22%3A1669330389356%2C%22cv%22%3A%2220221117-23-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22http%3A%2F%2Fpages.upwellness.com%2Fuc-grplus-fps%2F%3Foffer%3D67%26session_id%3D10290265cbed53f23d905efdd75177%26n%3Dtune%26AFFID%3D477232%26subid%3D37_UW221124PM%22%2C%22e%22%3Anull%2C%22cb%22%3A%22TFASC.trkCallback%22%2C%22qs%22%3A%22%3Foffer%3D67%26session_id%3D10290265cbed53f23d905efdd75177%26n%3Dtune%26AFFID%3D477232%26subid%3D37_UW221124PM%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Drainmaker-splashdaily-sc%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1669330389363%2C%22ref%22%3Anull%2C%22item-url%22%3A%22http%3A%2F%2Fpages.upwellness.com%2Fuc-grplus-fps%2F%3Foffer%3D67%26session_id%3D10290265cbed53f23d905efdd75177%26n%3Dtune%26AFFID%3D477232%26subid%3D37_UW221124PM%22%2C%22tos%22%3A3%2C%22ssd%22%3A1%2C%22scd%22%3A5%2C%22supv%22%3Atrue%7D%7D&pubit=i
200 OK 1.4 kB URL HTTP/2 trc.taboola.com/1225872/trc/3/json?tim=1669330389363&data=%7B%22id%22%3A56%2C%22ii%22%3A%22%2Fuc-grplus-fps%22%2C%22it%22%3A%22video%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22vi%22%3A1669330389356%2C%22cv%22%3A%2220221117-23-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22http%3A%2F%2Fpages.upwellness.com%2Fuc-grplus-fps%2F%3Foffer%3D67%26session_id%3D10290265cbed53f23d905efdd75177%26n%3Dtune%26AFFID%3D477232%26subid%3D37_UW221124PM%22%2C%22e%22%3Anull%2C%22cb%22%3A%22TFASC.trkCallback%22%2C%22qs%22%3A%22%3Foffer%3D67%26session_id%3D10290265cbed53f23d905efdd75177%26n%3Dtune%26AFFID%3D477232%26subid%3D37_UW221124PM%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Drainmaker-splashdaily-sc%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1669330389363%2C%22ref%22%3Anull%2C%22item-url%22%3A%22http%3A%2F%2Fpages.upwellness.com%2Fuc-grplus-fps%2F%3Foffer%3D67%26session_id%3D10290265cbed53f23d905efdd75177%26n%3Dtune%26AFFID%3D477232%26subid%3D37_UW221124PM%22%2C%22tos%22%3A3%2C%22ssd%22%3A1%2C%22scd%22%3A5%2C%22supv%22%3Atrue%7D%7D&pubit=i
IP
File type ASCII text, with very long lines (2443), with no line terminators
Hash 1c26bb6ec2764316f6a0c6f6aeeca3b1
daea9c04f344fddc1243f4e967a1ccb61c8dbbd2
7ffdb0c40d285515d6e790b1f8e3b6ab0edff8924e724fd5e0acd863483e5432
GET /1225872/trc/3/json?tim=1669330389363&data=%7B%22id%22%3A56%2C%22ii%22%3A%22%2Fuc-grplus-fps%22%2C%22it%22%3A%22video%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22vi%22%3A1669330389356%2C%22cv%22%3A%2220221117-23-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22http%3A%2F%2Fpages.upwellness.com%2Fuc-grplus-fps%2F%3Foffer%3D67%26session_id%3D10290265cbed53f23d905efdd75177%26n%3Dtune%26AFFID%3D477232%26subid%3D37_UW221124PM%22%2C%22e%22%3Anull%2C%22cb%22%3A%22TFASC.trkCallback%22%2C%22qs%22%3A%22%3Foffer%3D67%26session_id%3D10290265cbed53f23d905efdd75177%26n%3Dtune%26AFFID%3D477232%26subid%3D37_UW221124PM%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Drainmaker-splashdaily-sc%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1669330389363%2C%22ref%22%3Anull%2C%22item-url%22%3A%22http%3A%2F%2Fpages.upwellness.com%2Fuc-grplus-fps%2F%3Foffer%3D67%26session_id%3D10290265cbed53f23d905efdd75177%26n%3Dtune%26AFFID%3D477232%26subid%3D37_UW221124PM%22%2C%22tos%22%3A3%2C%22ssd%22%3A1%2C%22scd%22%3A5%2C%22supv%22%3Atrue%7D%7D&pubit=i HTTP/1.1
Host: trc.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pages.upwellness.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: *
access-control-allow-credentials: true
content-encoding: gzip
accept-ranges: bytes
date: Thu, 24 Nov 2022 22:53:10 GMT
via: 1.1 varnish
x-served-by: cache-bma1658-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1669330391.899234,VS0,VE95
vary: Accept-Encoding
x-vcl-time-ms: 95
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash f7801fe8b983652ae788bc952856c2ed
f3898da21792b146a9f856e87ed3520d76277fb8
faa1bc8a9887e2dc694ff645546ea16cb96ac4bd1b0c460aef95f2cced100d6b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 22:53:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 278 B IP
Hash fcde710e9043bc4502e7505006104d6a
da75e0a33cc84cc814597ac091426d82531ddac1
d71a55b0cf26c9fa1b90aa9dade3bfa0de603947c95d0d81f182e92a60be2242
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1107
Cache-Control: max-age=91215
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 22:53:11 GMT
Etag: "637eb2d3-116"
Expires: Sat, 26 Nov 2022 00:13:26 GMT
Last-Modified: Wed, 23 Nov 2022 23:54:59 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 278
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 163d4912a06d8358abc770dc0351d7b4
1e8dc04b95e704679ab729f81716466ea8a3e591
72245d178d481350af611804e557032ffb7bb3a3e8cdb83f3332a5ffba78d193
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 22:53:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/pagead/1p-user-list/458254939/?random=1669330388127&cv=11&fst=1669327200000&bg=ffffff&guid=ON&async=1>m=2oab90&u_w=1280&u_h=1024&frm=0&url=http%3A%2F%2Fpages.upwellness.com%2Fuc-grplus-fps%2F%3Foffer%3D67%26session_id%3D10290265cbed53f23d905efdd75177%26n%3Dtune%26AFFID%3D477232%26subid%3D37_UW221124PM&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=2304195105&rmt_tld=0&ipr=y
200 OK 42 B URL HTTP/2 www.google.com/pagead/1p-user-list/458254939/?random=1669330388127&cv=11&fst=1669327200000&bg=ffffff&guid=ON&async=1>m=2oab90&u_w=1280&u_h=1024&frm=0&url=http%3A%2F%2Fpages.upwellness.com%2Fuc-grplus-fps%2F%3Foffer%3D67%26session_id%3D10290265cbed53f23d905efdd75177%26n%3Dtune%26AFFID%3D477232%26subid%3D37_UW221124PM&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=2304195105&rmt_tld=0&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/458254939/?random=1669330388127&cv=11&fst=1669327200000&bg=ffffff&guid=ON&async=1>m=2oab90&u_w=1280&u_h=1024&frm=0&url=http%3A%2F%2Fpages.upwellness.com%2Fuc-grplus-fps%2F%3Foffer%3D67%26session_id%3D10290265cbed53f23d905efdd75177%26n%3Dtune%26AFFID%3D477232%26subid%3D37_UW221124PM&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=2304195105&rmt_tld=0&ipr=y HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pages.upwellness.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 24 Nov 2022 22:53:11 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.com/pagead/1p-user-list/862759327/?random=1669330388108&cv=11&fst=1669327200000&bg=ffffff&guid=ON&async=1>m=2oab90&u_w=1280&u_h=1024&frm=0&url=http%3A%2F%2Fpages.upwellness.com%2Fuc-grplus-fps%2F%3Foffer%3D67%26session_id%3D10290265cbed53f23d905efdd75177%26n%3Dtune%26AFFID%3D477232%26subid%3D37_UW221124PM&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=3733118361&rmt_tld=0&ipr=y
200 OK 42 B URL HTTP/2 www.google.com/pagead/1p-user-list/862759327/?random=1669330388108&cv=11&fst=1669327200000&bg=ffffff&guid=ON&async=1>m=2oab90&u_w=1280&u_h=1024&frm=0&url=http%3A%2F%2Fpages.upwellness.com%2Fuc-grplus-fps%2F%3Foffer%3D67%26session_id%3D10290265cbed53f23d905efdd75177%26n%3Dtune%26AFFID%3D477232%26subid%3D37_UW221124PM&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=3733118361&rmt_tld=0&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/862759327/?random=1669330388108&cv=11&fst=1669327200000&bg=ffffff&guid=ON&async=1>m=2oab90&u_w=1280&u_h=1024&frm=0&url=http%3A%2F%2Fpages.upwellness.com%2Fuc-grplus-fps%2F%3Foffer%3D67%26session_id%3D10290265cbed53f23d905efdd75177%26n%3Dtune%26AFFID%3D477232%26subid%3D37_UW221124PM&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=3733118361&rmt_tld=0&ipr=y HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pages.upwellness.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 24 Nov 2022 22:53:11 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.com/pagead/1p-user-list/675938688/?random=1669330388403&cv=11&fst=1669327200000&bg=ffffff&guid=ON&async=1>m=2oab90&u_w=1280&u_h=1024&frm=0&url=http%3A%2F%2Fpages.upwellness.com%2Fuc-grplus-fps%2F%3Foffer%3D67%26session_id%3D10290265cbed53f23d905efdd75177%26n%3Dtune%26AFFID%3D477232%26subid%3D37_UW221124PM&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=2792016872&rmt_tld=0&ipr=y
200 OK 42 B URL HTTP/2 www.google.com/pagead/1p-user-list/675938688/?random=1669330388403&cv=11&fst=1669327200000&bg=ffffff&guid=ON&async=1>m=2oab90&u_w=1280&u_h=1024&frm=0&url=http%3A%2F%2Fpages.upwellness.com%2Fuc-grplus-fps%2F%3Foffer%3D67%26session_id%3D10290265cbed53f23d905efdd75177%26n%3Dtune%26AFFID%3D477232%26subid%3D37_UW221124PM&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=2792016872&rmt_tld=0&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/675938688/?random=1669330388403&cv=11&fst=1669327200000&bg=ffffff&guid=ON&async=1>m=2oab90&u_w=1280&u_h=1024&frm=0&url=http%3A%2F%2Fpages.upwellness.com%2Fuc-grplus-fps%2F%3Foffer%3D67%26session_id%3D10290265cbed53f23d905efdd75177%26n%3Dtune%26AFFID%3D477232%26subid%3D37_UW221124PM&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=2792016872&rmt_tld=0&ipr=y HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pages.upwellness.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 24 Nov 2022 22:53:11 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 76544babbcf6515110bd81aaee8e7e63
043497692868c67ac84cdfe70d0a484517abd1c2
a19d5958d683662375a2469d1d7e551188469b967eb6f2bae2d5e43dac51a4f0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 22:53:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.no/pagead/1p-user-list/458254939/?random=1669330388127&cv=11&fst=1669327200000&bg=ffffff&guid=ON&async=1>m=2oab90&u_w=1280&u_h=1024&frm=0&url=http%3A%2F%2Fpages.upwellness.com%2Fuc-grplus-fps%2F%3Foffer%3D67%26session_id%3D10290265cbed53f23d905efdd75177%26n%3Dtune%26AFFID%3D477232%26subid%3D37_UW221124PM&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=2304195105&rmt_tld=1&ipr=y
200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-user-list/458254939/?random=1669330388127&cv=11&fst=1669327200000&bg=ffffff&guid=ON&async=1>m=2oab90&u_w=1280&u_h=1024&frm=0&url=http%3A%2F%2Fpages.upwellness.com%2Fuc-grplus-fps%2F%3Foffer%3D67%26session_id%3D10290265cbed53f23d905efdd75177%26n%3Dtune%26AFFID%3D477232%26subid%3D37_UW221124PM&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=2304195105&rmt_tld=1&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/458254939/?random=1669330388127&cv=11&fst=1669327200000&bg=ffffff&guid=ON&async=1>m=2oab90&u_w=1280&u_h=1024&frm=0&url=http%3A%2F%2Fpages.upwellness.com%2Fuc-grplus-fps%2F%3Foffer%3D67%26session_id%3D10290265cbed53f23d905efdd75177%26n%3Dtune%26AFFID%3D477232%26subid%3D37_UW221124PM&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=2304195105&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pages.upwellness.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 24 Nov 2022 22:53:11 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.no/pagead/1p-user-list/675938688/?random=1669330388403&cv=11&fst=1669327200000&bg=ffffff&guid=ON&async=1>m=2oab90&u_w=1280&u_h=1024&frm=0&url=http%3A%2F%2Fpages.upwellness.com%2Fuc-grplus-fps%2F%3Foffer%3D67%26session_id%3D10290265cbed53f23d905efdd75177%26n%3Dtune%26AFFID%3D477232%26subid%3D37_UW221124PM&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=2792016872&rmt_tld=1&ipr=y
200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-user-list/675938688/?random=1669330388403&cv=11&fst=1669327200000&bg=ffffff&guid=ON&async=1>m=2oab90&u_w=1280&u_h=1024&frm=0&url=http%3A%2F%2Fpages.upwellness.com%2Fuc-grplus-fps%2F%3Foffer%3D67%26session_id%3D10290265cbed53f23d905efdd75177%26n%3Dtune%26AFFID%3D477232%26subid%3D37_UW221124PM&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=2792016872&rmt_tld=1&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/675938688/?random=1669330388403&cv=11&fst=1669327200000&bg=ffffff&guid=ON&async=1>m=2oab90&u_w=1280&u_h=1024&frm=0&url=http%3A%2F%2Fpages.upwellness.com%2Fuc-grplus-fps%2F%3Foffer%3D67%26session_id%3D10290265cbed53f23d905efdd75177%26n%3Dtune%26AFFID%3D477232%26subid%3D37_UW221124PM&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=2792016872&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pages.upwellness.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 24 Nov 2022 22:53:11 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.com/pagead/1p-user-list/624541243/?random=1669330388001&cv=11&fst=1669327200000&bg=ffffff&guid=ON&async=1>m=2oab90&u_w=1280&u_h=1024&frm=0&url=http%3A%2F%2Fpages.upwellness.com%2Fuc-grplus-fps%2F%3Foffer%3D67%26session_id%3D10290265cbed53f23d905efdd75177%26n%3Dtune%26AFFID%3D477232%26subid%3D37_UW221124PM&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=3685505149&rmt_tld=0&ipr=y
200 OK 42 B URL HTTP/2 www.google.com/pagead/1p-user-list/624541243/?random=1669330388001&cv=11&fst=1669327200000&bg=ffffff&guid=ON&async=1>m=2oab90&u_w=1280&u_h=1024&frm=0&url=http%3A%2F%2Fpages.upwellness.com%2Fuc-grplus-fps%2F%3Foffer%3D67%26session_id%3D10290265cbed53f23d905efdd75177%26n%3Dtune%26AFFID%3D477232%26subid%3D37_UW221124PM&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=3685505149&rmt_tld=0&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/624541243/?random=1669330388001&cv=11&fst=1669327200000&bg=ffffff&guid=ON&async=1>m=2oab90&u_w=1280&u_h=1024&frm=0&url=http%3A%2F%2Fpages.upwellness.com%2Fuc-grplus-fps%2F%3Foffer%3D67%26session_id%3D10290265cbed53f23d905efdd75177%26n%3Dtune%26AFFID%3D477232%26subid%3D37_UW221124PM&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=3685505149&rmt_tld=0&ipr=y HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pages.upwellness.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 24 Nov 2022 22:53:11 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.no/pagead/1p-user-list/624541243/?random=1669330388001&cv=11&fst=1669327200000&bg=ffffff&guid=ON&async=1>m=2oab90&u_w=1280&u_h=1024&frm=0&url=http%3A%2F%2Fpages.upwellness.com%2Fuc-grplus-fps%2F%3Foffer%3D67%26session_id%3D10290265cbed53f23d905efdd75177%26n%3Dtune%26AFFID%3D477232%26subid%3D37_UW221124PM&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=3685505149&rmt_tld=1&ipr=y
200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-user-list/624541243/?random=1669330388001&cv=11&fst=1669327200000&bg=ffffff&guid=ON&async=1>m=2oab90&u_w=1280&u_h=1024&frm=0&url=http%3A%2F%2Fpages.upwellness.com%2Fuc-grplus-fps%2F%3Foffer%3D67%26session_id%3D10290265cbed53f23d905efdd75177%26n%3Dtune%26AFFID%3D477232%26subid%3D37_UW221124PM&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=3685505149&rmt_tld=1&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/624541243/?random=1669330388001&cv=11&fst=1669327200000&bg=ffffff&guid=ON&async=1>m=2oab90&u_w=1280&u_h=1024&frm=0&url=http%3A%2F%2Fpages.upwellness.com%2Fuc-grplus-fps%2F%3Foffer%3D67%26session_id%3D10290265cbed53f23d905efdd75177%26n%3Dtune%26AFFID%3D477232%26subid%3D37_UW221124PM&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=3685505149&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pages.upwellness.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 24 Nov 2022 22:53:11 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.com/pagead/1p-user-list/10838597190/?random=1669330388092&cv=11&fst=1669327200000&bg=ffffff&guid=ON&async=1>m=2oab90&u_w=1280&u_h=1024&frm=0&url=http%3A%2F%2Fpages.upwellness.com%2Fuc-grplus-fps%2F%3Foffer%3D67%26session_id%3D10290265cbed53f23d905efdd75177%26n%3Dtune%26AFFID%3D477232%26subid%3D37_UW221124PM&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=3367774846&rmt_tld=0&ipr=y
200 OK 42 B URL HTTP/2 www.google.com/pagead/1p-user-list/10838597190/?random=1669330388092&cv=11&fst=1669327200000&bg=ffffff&guid=ON&async=1>m=2oab90&u_w=1280&u_h=1024&frm=0&url=http%3A%2F%2Fpages.upwellness.com%2Fuc-grplus-fps%2F%3Foffer%3D67%26session_id%3D10290265cbed53f23d905efdd75177%26n%3Dtune%26AFFID%3D477232%26subid%3D37_UW221124PM&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=3367774846&rmt_tld=0&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/10838597190/?random=1669330388092&cv=11&fst=1669327200000&bg=ffffff&guid=ON&async=1>m=2oab90&u_w=1280&u_h=1024&frm=0&url=http%3A%2F%2Fpages.upwellness.com%2Fuc-grplus-fps%2F%3Foffer%3D67%26session_id%3D10290265cbed53f23d905efdd75177%26n%3Dtune%26AFFID%3D477232%26subid%3D37_UW221124PM&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=3367774846&rmt_tld=0&ipr=y HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pages.upwellness.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 24 Nov 2022 22:53:11 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.no/pagead/1p-user-list/10838597190/?random=1669330388092&cv=11&fst=1669327200000&bg=ffffff&guid=ON&async=1>m=2oab90&u_w=1280&u_h=1024&frm=0&url=http%3A%2F%2Fpages.upwellness.com%2Fuc-grplus-fps%2F%3Foffer%3D67%26session_id%3D10290265cbed53f23d905efdd75177%26n%3Dtune%26AFFID%3D477232%26subid%3D37_UW221124PM&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=3367774846&rmt_tld=1&ipr=y
200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-user-list/10838597190/?random=1669330388092&cv=11&fst=1669327200000&bg=ffffff&guid=ON&async=1>m=2oab90&u_w=1280&u_h=1024&frm=0&url=http%3A%2F%2Fpages.upwellness.com%2Fuc-grplus-fps%2F%3Foffer%3D67%26session_id%3D10290265cbed53f23d905efdd75177%26n%3Dtune%26AFFID%3D477232%26subid%3D37_UW221124PM&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=3367774846&rmt_tld=1&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/10838597190/?random=1669330388092&cv=11&fst=1669327200000&bg=ffffff&guid=ON&async=1>m=2oab90&u_w=1280&u_h=1024&frm=0&url=http%3A%2F%2Fpages.upwellness.com%2Fuc-grplus-fps%2F%3Foffer%3D67%26session_id%3D10290265cbed53f23d905efdd75177%26n%3Dtune%26AFFID%3D477232%26subid%3D37_UW221124PM&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=3367774846&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pages.upwellness.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 24 Nov 2022 22:53:11 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash b6a795cdfedb5c954b3000dbb2dc7f90
b17bb97d224d89bc8227cddf5a8386e100751cda
78c411d16c1be2d8da51fc409cb45ec2aca8d32b77ab4d1a1a1fe5d1a33552e1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 22:53:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 471 B IP
Hash 50a92cbd99c9867edeed064914407764
db7add2c14b06d670f307ac15abe6f4f69c3f50b
23ea01318a6602949849daf314622d87672ee4828d50cc01bc3e73a3e1543894
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5356
Cache-Control: max-age=110568
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 22:53:11 GMT
Etag: "637eedd3-1d7"
Expires: Sat, 26 Nov 2022 05:35:59 GMT
Last-Modified: Thu, 24 Nov 2022 04:06:43 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 471
api.useproof.com/reporting/captures/trtc0limNRYJwhvfi9uRqUFQo0w1?pixelId=trtc0limNRYJwhvfi9uRqUFQo0w1&integrationId=-LOTAsTUT3N4RJrbQ3gp&limit=10
200 OK 2 B URL HTTP/2 api.useproof.com/reporting/captures/trtc0limNRYJwhvfi9uRqUFQo0w1?pixelId=trtc0limNRYJwhvfi9uRqUFQo0w1&integrationId=-LOTAsTUT3N4RJrbQ3gp&limit=10
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash d751713988987e9331980363e24189ce
97d170e1550eee4afc0af065b78cda302a97674c
4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
GET /reporting/captures/trtc0limNRYJwhvfi9uRqUFQo0w1?pixelId=trtc0limNRYJwhvfi9uRqUFQo0w1&integrationId=-LOTAsTUT3N4RJrbQ3gp&limit=10 HTTP/1.1
Host: api.useproof.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://cdn.useproof.com
Connection: keep-alive
Referer: https://cdn.useproof.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Thu, 24 Nov 2022 22:53:11 GMT
content-type: application/json; charset=utf-8
content-length: 2
x-amzn-requestid: 8bfae4d0-7621-4dd9-b968-34c0398468e3
access-control-allow-origin: *
surrogate-control: no-store
x-amzn-remapped-content-length: 2
x-amzn-remapped-connection: keep-alive
x-amz-apigw-id: cINZrHl_oAMFTaQ=
cache-control: no-store, no-cache, must-revalidate, proxy-revalidate
expires: 0
etag: W/"2-l9Fw4VUO7kr8CvBlt4zaMCqXZ0w"
pragma: no-cache
x-amzn-remapped-date: Thu, 24 Nov 2022 22:53:11 GMT
x-cache: Miss from cloudfront
via: 1.1 a034aae43a19aef875fa395182990970.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: KfROhFvIKOgL1e9g31ye6dlVSO6z1flNSKcI6ZtL0rgrElXG797bbQ==
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Fu4jAvhGa0s9gea0qat18FQguzt7XXn4ryNOIqq%2FxKij0ef6rdhxcUiHPKpLZmW61fd5powSuWtnMV3KpRDOcdbRjPg14ZD9Zra%2B5BF3JyK6RRZZLIJtinJfVi7qVI6xdq9o"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76f5b820898db4eb-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash b6a795cdfedb5c954b3000dbb2dc7f90
b17bb97d224d89bc8227cddf5a8386e100751cda
78c411d16c1be2d8da51fc409cb45ec2aca8d32b77ab4d1a1a1fe5d1a33552e1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 22:53:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.no/pagead/1p-user-list/862759327/?random=1669330388108&cv=11&fst=1669327200000&bg=ffffff&guid=ON&async=1>m=2oab90&u_w=1280&u_h=1024&frm=0&url=http%3A%2F%2Fpages.upwellness.com%2Fuc-grplus-fps%2F%3Foffer%3D67%26session_id%3D10290265cbed53f23d905efdd75177%26n%3Dtune%26AFFID%3D477232%26subid%3D37_UW221124PM&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=3733118361&rmt_tld=1&ipr=y
200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-user-list/862759327/?random=1669330388108&cv=11&fst=1669327200000&bg=ffffff&guid=ON&async=1>m=2oab90&u_w=1280&u_h=1024&frm=0&url=http%3A%2F%2Fpages.upwellness.com%2Fuc-grplus-fps%2F%3Foffer%3D67%26session_id%3D10290265cbed53f23d905efdd75177%26n%3Dtune%26AFFID%3D477232%26subid%3D37_UW221124PM&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=3733118361&rmt_tld=1&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/862759327/?random=1669330388108&cv=11&fst=1669327200000&bg=ffffff&guid=ON&async=1>m=2oab90&u_w=1280&u_h=1024&frm=0&url=http%3A%2F%2Fpages.upwellness.com%2Fuc-grplus-fps%2F%3Foffer%3D67%26session_id%3D10290265cbed53f23d905efdd75177%26n%3Dtune%26AFFID%3D477232%26subid%3D37_UW221124PM&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=3733118361&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pages.upwellness.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 24 Nov 2022 22:53:11 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 9fc92c2b08d79de75b13c14cd35cf4f9
7be96681fe82e97cefa2c425bf97336108d503db
850d09b66be227a19c00133c1150c6c90e47ff663b6c7326be89d07db1ddcf09
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=171289
Date: Thu, 24 Nov 2022 22:53:11 GMT
Etag: "637fedda-1d7"
Expires: Sat, 26 Nov 2022 22:28:00 GMT
Last-Modified: Thu, 24 Nov 2022 22:19:06 GMT
Server: ECS (dcb/7F16)
X-Cache: Miss from cloudfront
Via: 1.1 83a23d85c009b0c0e3626072e9f997fe.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: ZGTfgC1hrzJ6CNO3e8B56x5C7VCQwpjJIzjYWfGECbs9ADAN-k_VzA==
Age: 534
ocsp.pki.goog/s/gts1d4int/5EXjxzFGjgM
200 OK 471 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4int/5EXjxzFGjgM
IP
Hash cd506845acb0fc39c0257f1b49eae0d5
fc99ba6d27ace35bc45de7aeec9eaddcdeec5244
ef86fd86fa99ae6b7bc8768fe690b789d4e21e58559f523665b4015e53382f37
POST /s/gts1d4int/5EXjxzFGjgM HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 22:53:11 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
live-visitor-counts.herokuapp.com/lvc/domain
204 No Content 0 B URL HTTP/1.1 live-visitor-counts.herokuapp.com/lvc/domain
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /lvc/domain HTTP/1.1
Host: live-visitor-counts.herokuapp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://cdn.useproof.com/
Origin: https://cdn.useproof.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Server: Cowboy
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Headers: Origin,Content-Length,Content-Type
Access-Control-Allow-Methods: GET,POST,PUT,PATCH,DELETE,HEAD
Access-Control-Allow-Origin: https://cdn.useproof.com
Access-Control-Max-Age: 43200
Vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
Date: Thu, 24 Nov 2022 22:53:11 GMT
Via: 1.1 vegur
events.ub-analytics.com/i?stm=1669330390422&e=pv&url=http%3A%2F%2Fpages.upwellness.com%2Fuc-grplus-fps%2F%3Foffer%3D67%26session_id%3D10290265cbed53f23d905efdd75177%26n%3Dtune%26AFFID%3D477232%26subid%3D37_UW221124PM&tv=js-2.14.0&tna=sp-ub&aid=landing_page&p=web&tz=UTC&lang=en-US&cs=UTF-8&res=1280x1024&cd=24&eid=39720b99-cfc5-47d3-a9f1-0438fa34dd0d&dtm=1669330390421&vp=1280x939&ds=1268x17426&vid=1&sid=91b13988-9497-4c1c-ad11-2fab922d8f91&duid=4488bf83-08f4-4e37-9e54-dad503508832&uid=15ff8b53-9669-430a-ab67-d537655e1f6c&cx=eyJzY2hlbWEiOiJpZ2x1OmNvbS5zbm93cGxvd2FuYWx5dGljcy5zbm93cGxvdy9jb250ZXh0cy9qc29uc2NoZW1hLzEtMC0wIiwiZGF0YSI6W3sic2NoZW1hIjoianNfdHJhY2tlcl9jb250ZXh0X3YxLjEuanNvbiIsImRhdGEiOnsicGFnZUlkIjoiNmQyYzcxMDUtZWJhZS00NTVhLTkxZjItNDdhZjQyMDllZDVmIiwidmFyaWFudElkIjoiYXQiLCJldmVudFR5cGUiOiJ2aXNpdCIsImV2ZW50TWV0YWRhdGEiOltdLCJyb3V0aW5nU3RyYXRlZ3kiOiJ3ZWlnaHRlZCJ9fV19
200 OK 43 B URL HTTP/1.1 events.ub-analytics.com/i?stm=1669330390422&e=pv&url=http%3A%2F%2Fpages.upwellness.com%2Fuc-grplus-fps%2F%3Foffer%3D67%26session_id%3D10290265cbed53f23d905efdd75177%26n%3Dtune%26AFFID%3D477232%26subid%3D37_UW221124PM&tv=js-2.14.0&tna=sp-ub&aid=landing_page&p=web&tz=UTC&lang=en-US&cs=UTF-8&res=1280x1024&cd=24&eid=39720b99-cfc5-47d3-a9f1-0438fa34dd0d&dtm=1669330390421&vp=1280x939&ds=1268x17426&vid=1&sid=91b13988-9497-4c1c-ad11-2fab922d8f91&duid=4488bf83-08f4-4e37-9e54-dad503508832&uid=15ff8b53-9669-430a-ab67-d537655e1f6c&cx=eyJzY2hlbWEiOiJpZ2x1OmNvbS5zbm93cGxvd2FuYWx5dGljcy5zbm93cGxvdy9jb250ZXh0cy9qc29uc2NoZW1hLzEtMC0wIiwiZGF0YSI6W3sic2NoZW1hIjoianNfdHJhY2tlcl9jb250ZXh0X3YxLjEuanNvbiIsImRhdGEiOnsicGFnZUlkIjoiNmQyYzcxMDUtZWJhZS00NTVhLTkxZjItNDdhZjQyMDllZDVmIiwidmFyaWFudElkIjoiYXQiLCJldmVudFR5cGUiOiJ2aXNpdCIsImV2ZW50TWV0YWRhdGEiOltdLCJyb3V0aW5nU3RyYXRlZ3kiOiJ3ZWlnaHRlZCJ9fV19
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash fb02f374b8f73825415db1bccd4bd76d
b103aa629cacdd90b39538a7561da7f8e49ad73f
caa849b179befa2645a8e2c474d2e82a76777a3305315ece911013e8ee9a916c
GET /i?stm=1669330390422&e=pv&url=http%3A%2F%2Fpages.upwellness.com%2Fuc-grplus-fps%2F%3Foffer%3D67%26session_id%3D10290265cbed53f23d905efdd75177%26n%3Dtune%26AFFID%3D477232%26subid%3D37_UW221124PM&tv=js-2.14.0&tna=sp-ub&aid=landing_page&p=web&tz=UTC&lang=en-US&cs=UTF-8&res=1280x1024&cd=24&eid=39720b99-cfc5-47d3-a9f1-0438fa34dd0d&dtm=1669330390421&vp=1280x939&ds=1268x17426&vid=1&sid=91b13988-9497-4c1c-ad11-2fab922d8f91&duid=4488bf83-08f4-4e37-9e54-dad503508832&uid=15ff8b53-9669-430a-ab67-d537655e1f6c&cx=eyJzY2hlbWEiOiJpZ2x1OmNvbS5zbm93cGxvd2FuYWx5dGljcy5zbm93cGxvdy9jb250ZXh0cy9qc29uc2NoZW1hLzEtMC0wIiwiZGF0YSI6W3sic2NoZW1hIjoianNfdHJhY2tlcl9jb250ZXh0X3YxLjEuanNvbiIsImRhdGEiOnsicGFnZUlkIjoiNmQyYzcxMDUtZWJhZS00NTVhLTkxZjItNDdhZjQyMDllZDVmIiwidmFyaWFudElkIjoiYXQiLCJldmVudFR5cGUiOiJ2aXNpdCIsImV2ZW50TWV0YWRhdGEiOltdLCJyb3V0aW5nU3RyYXRlZ3kiOiJ3ZWlnaHRlZCJ9fV19 HTTP/1.1
Host: events.ub-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pages.upwellness.com/
HTTP/1.1 200 OK
Date: Thu, 24 Nov 2022 22:53:11 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID PSA OUR IND COM NAV STA"
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Server: akka-http/10.0.9
pixel.tapad.com/idsync/ex/receive?partner_id=3318&partner_device_id=f2387451-6984-4a26-8e7d-5c74afeb98a4&partner_url=https%3a%2f%2fa%2eclickcertain%2ecom%2fpx%2fta%2f%3fdone%3dtrue%26ta_id%3d%24%7bTA_DEVICE_ID%7d
302 Found 0 B URL HTTP/2 pixel.tapad.com/idsync/ex/receive?partner_id=3318&partner_device_id=f2387451-6984-4a26-8e7d-5c74afeb98a4&partner_url=https%3a%2f%2fa%2eclickcertain%2ecom%2fpx%2fta%2f%3fdone%3dtrue%26ta_id%3d%24%7bTA_DEVICE_ID%7d
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /idsync/ex/receive?partner_id=3318&partner_device_id=f2387451-6984-4a26-8e7d-5c74afeb98a4&partner_url=https%3a%2f%2fa%2eclickcertain%2ecom%2fpx%2fta%2f%3fdone%3dtrue%26ta_id%3d%24%7bTA_DEVICE_ID%7d HTTP/1.1
Host: pixel.tapad.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://a.clickcertain.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
date: Thu, 24 Nov 2022 22:53:11 GMT
strict-transport-security: max-age=31536000
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-WoW64
p3p: policyref="http://tapad-taptags.s3.amazonaws.com/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
set-cookie: TapAd_TS=1669330391462;Expires=Mon, 23 Jan 2023 22:53:11 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None
TapAd_DID=4b7f4f8f-fc05-477e-be2f-04db0b02a097;Expires=Mon, 23 Jan 2023 22:53:11 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None
location: https://pixel.tapad.com/idsync/ex/receive/check?partner_id=3318&partner_device_id=f2387451-6984-4a26-8e7d-5c74afeb98a4&partner_url=https%3a%2f%2fa%2eclickcertain%2ecom%2fpx%2fta%2f%3fdone%3dtrue%26ta_id%3d%24%7bTA_DEVICE_ID%7d
content-length: 0
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 6fe23ae41ec0cbb3d702b1c64028cd13
e0e4d852454a5eae80a797aaa6f0991834dcc19a
47a12f27ec1ec271d17295d822c69d1b49c6a24107f3f7ce06a320688fae7f3c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 22:53:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 471 B IP
Hash 50a92cbd99c9867edeed064914407764
db7add2c14b06d670f307ac15abe6f4f69c3f50b
23ea01318a6602949849daf314622d87672ee4828d50cc01bc3e73a3e1543894
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5356
Cache-Control: max-age=110568
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 22:53:11 GMT
Etag: "637eedd3-1d7"
Expires: Sat, 26 Nov 2022 05:35:59 GMT
Last-Modified: Thu, 24 Nov 2022 04:06:43 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 471
io.v2.customerlabs.co/externalIds?customerlabs_user_id=cl4975ot4arrr687eb6635-f5db-42af-9103-3f8823789579&id=cl4975ot4arrr6&uid=cl4975ot4arrr687eb6635-f5db-42af-9103-3f8823789579&t=0&sc=1280%20x%201024
200 OK 512 B URL HTTP/1.1 io.v2.customerlabs.co/externalIds?customerlabs_user_id=cl4975ot4arrr687eb6635-f5db-42af-9103-3f8823789579&id=cl4975ot4arrr6&uid=cl4975ot4arrr687eb6635-f5db-42af-9103-3f8823789579&t=0&sc=1280%20x%201024
IP
File type JSON data\012- , ASCII text, with very long lines (512), with no line terminators
Hash b7a933e21550e088299597f9a3fcb50a
767ff796505c96c0b6a4298bd9bd58cd44e60705
705c85c4f400812b81753ddcfa644a0e267781966387bdf6bfb8db3bc42e9916
GET /externalIds?customerlabs_user_id=cl4975ot4arrr687eb6635-f5db-42af-9103-3f8823789579&id=cl4975ot4arrr6&uid=cl4975ot4arrr687eb6635-f5db-42af-9103-3f8823789579&t=0&sc=1280%20x%201024 HTTP/1.1
Host: io.v2.customerlabs.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pages.upwellness.com/
HTTP/1.1 200 OK
Access-Control-Allow-Headers: Origin, Accept, Content-Type, Max-Age, X-CL-APP-ID, X-Content-Type-Options
Access-Control-Allow-Methods: POST, OPTIONS
Content-Type: application/json
Date: Thu, 24 Nov 2022 22:53:11 GMT
Server: nginx/1.12.1
Content-Length: 512
Connection: keep-alive
pixel.tapad.com/idsync/ex/receive/check?partner_id=3318&partner_device_id=f2387451-6984-4a26-8e7d-5c74afeb98a4&partner_url=https%3a%2f%2fa%2eclickcertain%2ecom%2fpx%2fta%2f%3fdone%3dtrue%26ta_id%3d%24%7bTA_DEVICE_ID%7d
302 Found 0 B URL HTTP/2 pixel.tapad.com/idsync/ex/receive/check?partner_id=3318&partner_device_id=f2387451-6984-4a26-8e7d-5c74afeb98a4&partner_url=https%3a%2f%2fa%2eclickcertain%2ecom%2fpx%2fta%2f%3fdone%3dtrue%26ta_id%3d%24%7bTA_DEVICE_ID%7d
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /idsync/ex/receive/check?partner_id=3318&partner_device_id=f2387451-6984-4a26-8e7d-5c74afeb98a4&partner_url=https%3a%2f%2fa%2eclickcertain%2ecom%2fpx%2fta%2f%3fdone%3dtrue%26ta_id%3d%24%7bTA_DEVICE_ID%7d HTTP/1.1
Host: pixel.tapad.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://a.clickcertain.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
date: Thu, 24 Nov 2022 22:53:11 GMT
strict-transport-security: max-age=31536000
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-WoW64
p3p: policyref="http://tapad-taptags.s3.amazonaws.com/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
set-cookie: TapAd_TS=1669330391516;Expires=Mon, 23 Jan 2023 22:53:11 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None
TapAd_DID=3cb8e7db-d30d-4c23-84d8-8d5cf417dd86;Expires=Mon, 23 Jan 2023 22:53:11 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None
TapAd_3WAY_SYNCS=;Expires=Mon, 23 Jan 2023 22:53:11 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None
location: https://a.clickcertain.com/px/ta/?done=true&ta_id=3cb8e7db-d30d-4c23-84d8-8d5cf417dd86
content-length: 0
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
rp.liadm.com/j?dtstmp=1669330389416&aid=a-057g&se=e30&duid=f0f26c15fa8f--01gjnxgj381w7qzr27ybhcz2jv&tna=v2.5.1&pu=http%3A%2F%2Fpages.upwellness.com%2Fuc-grplus-fps%2F%3Foffer%3D67%26session_id%3D10290265cbed53f23d905efdd75177%26n%3Dtune%26AFFID%3D477232%26subid%3D37_UW221124PM&wpn=lc-bundle&c=PHRpdGxlPjwvdGl0bGU-PG1ldGEgbmFtZT0iZGVzY3JpcHRpb24iIGNvbnRlbnQ9IiI-
302 Found 0 B URL HTTP/2 rp.liadm.com/j?dtstmp=1669330389416&aid=a-057g&se=e30&duid=f0f26c15fa8f--01gjnxgj381w7qzr27ybhcz2jv&tna=v2.5.1&pu=http%3A%2F%2Fpages.upwellness.com%2Fuc-grplus-fps%2F%3Foffer%3D67%26session_id%3D10290265cbed53f23d905efdd75177%26n%3Dtune%26AFFID%3D477232%26subid%3D37_UW221124PM&wpn=lc-bundle&c=PHRpdGxlPjwvdGl0bGU-PG1ldGEgbmFtZT0iZGVzY3JpcHRpb24iIGNvbnRlbnQ9IiI-
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /j?dtstmp=1669330389416&aid=a-057g&se=e30&duid=f0f26c15fa8f--01gjnxgj381w7qzr27ybhcz2jv&tna=v2.5.1&pu=http%3A%2F%2Fpages.upwellness.com%2Fuc-grplus-fps%2F%3Foffer%3D67%26session_id%3D10290265cbed53f23d905efdd75177%26n%3Dtune%26AFFID%3D477232%26subid%3D37_UW221124PM&wpn=lc-bundle&c=PHRpdGxlPjwvdGl0bGU-PG1ldGEgbmFtZT0iZGVzY3JpcHRpb24iIGNvbnRlbnQ9IiI- HTTP/1.1
Host: rp.liadm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://pages.upwellness.com
Connection: keep-alive
Referer: http://pages.upwellness.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Thu, 24 Nov 2022 22:53:11 GMT
content-length: 0
trace-id: 59837e3a7a06d27b
vary: Origin
location: /j?dtstmp=1669330389416&aid=a-057g&se=e30&duid=f0f26c15fa8f--01gjnxgj381w7qzr27ybhcz2jv&tna=v2.5.1&pu=http%3A%2F%2Fpages.upwellness.com%2Fuc-grplus-fps%2F%3Foffer%3D67%26session_id%3D10290265cbed53f23d905efdd75177%26n%3Dtune%26AFFID%3D477232%26subid%3D37_UW221124PM&wpn=lc-bundle&c=PHRpdGxlPjwvdGl0bGU-PG1ldGEgbmFtZT0iZGVzY3JpcHRpb24iIGNvbnRlbnQ9IiI-&n3pc=true
set-cookie: lidid=267eb134-d881-42bb-9157-f7b6827ac8ad; Max-Age=63072000; Expires=Sat, 23 Nov 2024 22:53:11 GMT; SameSite=None; Path=/; Domain=.liadm.com; Secure; HTTPOnly
request-time: 0
referrer-policy: origin-when-cross-origin, strict-origin-when-cross-origin
x-frame-options: DENY
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: http://pages.upwellness.com
access-control-allow-credentials: true
x-permitted-cross-domain-policies: master-only
X-Firefox-Spdy: h2
live-visitor-counts.herokuapp.com/lvc/domain
200 OK 24 B URL HTTP/1.1 live-visitor-counts.herokuapp.com/lvc/domain
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash f1764e4086ba5c10445c7aa6ee3f84ed
548d07155f3f60ab3ec77b65419929069e31dd27
db401458c499d4f3468a30d8d44cc8dbaaec7fcd1f13cb0e1e9bf28a40d78fed
POST /lvc/domain HTTP/1.1
Host: live-visitor-counts.herokuapp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json;charset=utf-8
Content-Length: 143
Origin: https://cdn.useproof.com
Connection: keep-alive
Referer: https://cdn.useproof.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Cowboy
Connection: keep-alive
Access-Control-Allow-Origin: https://cdn.useproof.com
Content-Type: application/json; charset=utf-8
Vary: Origin
Date: Thu, 24 Nov 2022 22:53:11 GMT
Content-Length: 24
Via: 1.1 vegur
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 2ab59c25df8b73e8b1aa4a4c8651ba3f
4574a151ee44e9253367f203cfc7fbd7f0377f61
16464a556a3bedc9dbb00688c6840c761601409fd1259874e94ce189ca51ad54
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=93973
Date: Thu, 24 Nov 2022 22:53:11 GMT
Etag: "637ead1e-1d7"
Expires: Sat, 26 Nov 2022 00:59:24 GMT
Last-Modified: Wed, 23 Nov 2022 23:30:38 GMT
Server: ECS (dcb/7F5B)
X-Cache: Miss from cloudfront
Via: 1.1 6480520a5e02f3163410e3134bd77baa.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: nvnY-Exi7fO7yspkNsJiWrS1RR6HdagTIQR-QGmpwOUfoSilzkO7zg==
Age: 5326
www.facebook.com/tr/?id=302615157369859&ev=ContentView&dl=http%3A%2F%2Fpages.upwellness.com%2Fuc-grplus-fps%2F%3Foffer%3D67%26session_id%3D10290265cbed53f23d905efdd75177%26n%3Dtune%26AFFID%3D477232%26subid%3D37_UW221124PM&rl=&if=false&ts=1669330390640&sw=1280&sh=1024&v=2.9.89&r=stable&ec=0&o=30&fbp=fb.1.1669330390639.1935420484&it=1669330389397&coo=false&rqm=GET
200 OK 0 B URL HTTP/2 www.facebook.com/tr/?id=302615157369859&ev=ContentView&dl=http%3A%2F%2Fpages.upwellness.com%2Fuc-grplus-fps%2F%3Foffer%3D67%26session_id%3D10290265cbed53f23d905efdd75177%26n%3Dtune%26AFFID%3D477232%26subid%3D37_UW221124PM&rl=&if=false&ts=1669330390640&sw=1280&sh=1024&v=2.9.89&r=stable&ec=0&o=30&fbp=fb.1.1669330390639.1935420484&it=1669330389397&coo=false&rqm=GET
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=302615157369859&ev=ContentView&dl=http%3A%2F%2Fpages.upwellness.com%2Fuc-grplus-fps%2F%3Foffer%3D67%26session_id%3D10290265cbed53f23d905efdd75177%26n%3Dtune%26AFFID%3D477232%26subid%3D37_UW221124PM&rl=&if=false&ts=1669330390640&sw=1280&sh=1024&v=2.9.89&r=stable&ec=0&o=30&fbp=fb.1.1669330390639.1935420484&it=1669330389397&coo=false&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pages.upwellness.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Thu, 24 Nov 2022 22:53:11 GMT
X-Firefox-Spdy: h2
www.facebook.com/tr/?id=302615157369859&ev=website_session_start&dl=http%3A%2F%2Fpages.upwellness.com%2Fuc-grplus-fps%2F%3Foffer%3D67%26session_id%3D10290265cbed53f23d905efdd75177%26n%3Dtune%26AFFID%3D477232%26subid%3D37_UW221124PM&rl=&if=false&ts=1669330390651&cd[start_time]=2022-11-24T22%3A53%3A10.076Z&cd[customerlabs_user_id]=cl4975ot4arrr687eb6635-f5db-42af-9103-3f8823789579&sw=1280&sh=1024&v=2.9.89&r=stable&ec=4&o=30&fbp=fb.1.1669330390639.1935420484&it=1669330389397&coo=false&eid=cl4975ot4arrr6cce351cf-f245-4fcd-83c5-769fb01d1b69&tm=2&rqm=GET
200 OK 0 B URL HTTP/2 www.facebook.com/tr/?id=302615157369859&ev=website_session_start&dl=http%3A%2F%2Fpages.upwellness.com%2Fuc-grplus-fps%2F%3Foffer%3D67%26session_id%3D10290265cbed53f23d905efdd75177%26n%3Dtune%26AFFID%3D477232%26subid%3D37_UW221124PM&rl=&if=false&ts=1669330390651&cd[start_time]=2022-11-24T22%3A53%3A10.076Z&cd[customerlabs_user_id]=cl4975ot4arrr687eb6635-f5db-42af-9103-3f8823789579&sw=1280&sh=1024&v=2.9.89&r=stable&ec=4&o=30&fbp=fb.1.1669330390639.1935420484&it=1669330389397&coo=false&eid=cl4975ot4arrr6cce351cf-f245-4fcd-83c5-769fb01d1b69&tm=2&rqm=GET
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=302615157369859&ev=website_session_start&dl=http%3A%2F%2Fpages.upwellness.com%2Fuc-grplus-fps%2F%3Foffer%3D67%26session_id%3D10290265cbed53f23d905efdd75177%26n%3Dtune%26AFFID%3D477232%26subid%3D37_UW221124PM&rl=&if=false&ts=1669330390651&cd[start_time]=2022-11-24T22%3A53%3A10.076Z&cd[customerlabs_user_id]=cl4975ot4arrr687eb6635-f5db-42af-9103-3f8823789579&sw=1280&sh=1024&v=2.9.89&r=stable&ec=4&o=30&fbp=fb.1.1669330390639.1935420484&it=1669330389397&coo=false&eid=cl4975ot4arrr6cce351cf-f245-4fcd-83c5-769fb01d1b69&tm=2&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pages.upwellness.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Thu, 24 Nov 2022 22:53:11 GMT
X-Firefox-Spdy: h2
www.facebook.com/tr/?id=302615157369859&ev=Microdata&dl=http%3A%2F%2Fpages.upwellness.com%2Fuc-grplus-fps%2F%3Foffer%3D67%26session_id%3D10290265cbed53f23d905efdd75177%26n%3Dtune%26AFFID%3D477232%26subid%3D37_UW221124PM&rl=&if=false&ts=1669330391173&cd[DataLayer]=%5B%5D&cd[Meta]=%7B%22title%22%3A%22%22%2C%22meta%3Akeywords%22%3A%22%22%2C%22meta%3Adescription%22%3A%22%22%7D&cd[OpenGraph]=%7B%22og%3Atitle%22%3A%22https%3A%2F%2Fpages.upwellness.com%2Fuc-grplus-fps%2F%22%7D&cd[Schema.org]=%5B%5D&cd[JSON-LD]=%5B%7B%22%40context%22%3A%22http%3A%2F%2Fschema.org%2F%22%2C%22%40id%22%3A%22https%3A%2F%2Ffast.wistia.net%2Fembed%2Fiframe%2Fe8xcaqkjm4%22%2C%22%40type%22%3A%22VideoObject%22%2C%22duration%22%3A%22PT7M34S%22%2C%22name%22%3A%22GRP_FPS_MINIVSL1%22%2C%22thumbnailUrl%22%3A%22https%3A%2F%2Fembed-ssl.wistia.com%2Fdeliveries%2F9c999aa0107b556d5cd5f59d9dd7e014.jpg%3Fimage_crop_resized%3D640x360%22%2C%22embedUrl%22%3A%22https%3A%2F%2Ffast.wistia.net%2Fembed%2Fiframe%2Fe8xcaqkjm4%3Fwseektoaction%3Dtrue%22%2C%22uploadDate%22%3A%222021-09-22%22%2C%22description%22%3A%22an%20UpWellness%20video%22%2C%22contentUrl%22%3A%22https%3A%2F%2Fembed-ssl.wistia.com%2Fdeliveries%2Fa18adcb3fe4d694342677106235399fede11a10f.m3u8%22%2C%22potentialAction%22%3A%7B%22%40type%22%3A%22SeekToAction%22%2C%22target%22%3A%22http%3A%2F%2Fpages.upwellness.com%2Fuc-grplus-fps%2F%3Foffer%3D67%26session_id%3D10290265cbed53f23d905efdd75177%26n%3Dtune%26AFFID%3D477232%26subid%3D37_UW221124PM%26wtime%3D%7Bseek_to_second_number%7D%22%2C%22startOffset-input%22%3A%22required%20name%3Dseek_to_second_number%22%7D%7D%5D&sw=1280&sh=1024&v=2.9.89&r=stable&ec=5&o=30&fbp=fb.1.1669330390639.1935420484&it=1669330389397&coo=false&es=automatic&tm=3&rqm=GET
200 OK 0 B URL HTTP/2 www.facebook.com/tr/?id=302615157369859&ev=Microdata&dl=http%3A%2F%2Fpages.upwellness.com%2Fuc-grplus-fps%2F%3Foffer%3D67%26session_id%3D10290265cbed53f23d905efdd75177%26n%3Dtune%26AFFID%3D477232%26subid%3D37_UW221124PM&rl=&if=false&ts=1669330391173&cd[DataLayer]=%5B%5D&cd[Meta]=%7B%22title%22%3A%22%22%2C%22meta%3Akeywords%22%3A%22%22%2C%22meta%3Adescription%22%3A%22%22%7D&cd[OpenGraph]=%7B%22og%3Atitle%22%3A%22https%3A%2F%2Fpages.upwellness.com%2Fuc-grplus-fps%2F%22%7D&cd[Schema.org]=%5B%5D&cd[JSON-LD]=%5B%7B%22%40context%22%3A%22http%3A%2F%2Fschema.org%2F%22%2C%22%40id%22%3A%22https%3A%2F%2Ffast.wistia.net%2Fembed%2Fiframe%2Fe8xcaqkjm4%22%2C%22%40type%22%3A%22VideoObject%22%2C%22duration%22%3A%22PT7M34S%22%2C%22name%22%3A%22GRP_FPS_MINIVSL1%22%2C%22thumbnailUrl%22%3A%22https%3A%2F%2Fembed-ssl.wistia.com%2Fdeliveries%2F9c999aa0107b556d5cd5f59d9dd7e014.jpg%3Fimage_crop_resized%3D640x360%22%2C%22embedUrl%22%3A%22https%3A%2F%2Ffast.wistia.net%2Fembed%2Fiframe%2Fe8xcaqkjm4%3Fwseektoaction%3Dtrue%22%2C%22uploadDate%22%3A%222021-09-22%22%2C%22description%22%3A%22an%20UpWellness%20video%22%2C%22contentUrl%22%3A%22https%3A%2F%2Fembed-ssl.wistia.com%2Fdeliveries%2Fa18adcb3fe4d694342677106235399fede11a10f.m3u8%22%2C%22potentialAction%22%3A%7B%22%40type%22%3A%22SeekToAction%22%2C%22target%22%3A%22http%3A%2F%2Fpages.upwellness.com%2Fuc-grplus-fps%2F%3Foffer%3D67%26session_id%3D10290265cbed53f23d905efdd75177%26n%3Dtune%26AFFID%3D477232%26subid%3D37_UW221124PM%26wtime%3D%7Bseek_to_second_number%7D%22%2C%22startOffset-input%22%3A%22required%20name%3Dseek_to_second_number%22%7D%7D%5D&sw=1280&sh=1024&v=2.9.89&r=stable&ec=5&o=30&fbp=fb.1.1669330390639.1935420484&it=1669330389397&coo=false&es=automatic&tm=3&rqm=GET
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=302615157369859&ev=Microdata&dl=http%3A%2F%2Fpages.upwellness.com%2Fuc-grplus-fps%2F%3Foffer%3D67%26session_id%3D10290265cbed53f23d905efdd75177%26n%3Dtune%26AFFID%3D477232%26subid%3D37_UW221124PM&rl=&if=false&ts=1669330391173&cd[DataLayer]=%5B%5D&cd[Meta]=%7B%22title%22%3A%22%22%2C%22meta%3Akeywords%22%3A%22%22%2C%22meta%3Adescription%22%3A%22%22%7D&cd[OpenGraph]=%7B%22og%3Atitle%22%3A%22https%3A%2F%2Fpages.upwellness.com%2Fuc-grplus-fps%2F%22%7D&cd[Schema.org]=%5B%5D&cd[JSON-LD]=%5B%7B%22%40context%22%3A%22http%3A%2F%2Fschema.org%2F%22%2C%22%40id%22%3A%22https%3A%2F%2Ffast.wistia.net%2Fembed%2Fiframe%2Fe8xcaqkjm4%22%2C%22%40type%22%3A%22VideoObject%22%2C%22duration%22%3A%22PT7M34S%22%2C%22name%22%3A%22GRP_FPS_MINIVSL1%22%2C%22thumbnailUrl%22%3A%22https%3A%2F%2Fembed-ssl.wistia.com%2Fdeliveries%2F9c999aa0107b556d5cd5f59d9dd7e014.jpg%3Fimage_crop_resized%3D640x360%22%2C%22embedUrl%22%3A%22https%3A%2F%2Ffast.wistia.net%2Fembed%2Fiframe%2Fe8xcaqkjm4%3Fwseektoaction%3Dtrue%22%2C%22uploadDate%22%3A%222021-09-22%22%2C%22description%22%3A%22an%20UpWellness%20video%22%2C%22contentUrl%22%3A%22https%3A%2F%2Fembed-ssl.wistia.com%2Fdeliveries%2Fa18adcb3fe4d694342677106235399fede11a10f.m3u8%22%2C%22potentialAction%22%3A%7B%22%40type%22%3A%22SeekToAction%22%2C%22target%22%3A%22http%3A%2F%2Fpages.upwellness.com%2Fuc-grplus-fps%2F%3Foffer%3D67%26session_id%3D10290265cbed53f23d905efdd75177%26n%3Dtune%26AFFID%3D477232%26subid%3D37_UW221124PM%26wtime%3D%7Bseek_to_second_number%7D%22%2C%22startOffset-input%22%3A%22required%20name%3Dseek_to_second_number%22%7D%7D%5D&sw=1280&sh=1024&v=2.9.89&r=stable&ec=5&o=30&fbp=fb.1.1669330390639.1935420484&it=1669330389397&coo=false&es=automatic&tm=3&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pages.upwellness.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Thu, 24 Nov 2022 22:53:11 GMT
X-Firefox-Spdy: h2
proof-3.firebaseio.com/.ws?v=5
101 Switching Protocols 0 B URL HTTP/1.1 proof-3.firebaseio.com/.ws?v=5
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /.ws?v=5 HTTP/1.1
Host: proof-3.firebaseio.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://cdn.useproof.com
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: fuN+FNMBoVD+mrJwklisXg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Server: nginx
Date: Thu, 24 Nov 2022 22:53:11 GMT
Connection: upgrade
Upgrade: websocket
Sec-WebSocket-Accept: n7MRo/j/Pm808ik5XiF9UeAjCgQ=
Strict-Transport-Security: max-age=31556926; includeSubDomains; preload
www.facebook.com/tr/?id=302615157369859&ev=LPVisit&dl=http%3A%2F%2Fpages.upwellness.com%2Fuc-grplus-fps%2F%3Foffer%3D67%26session_id%3D10290265cbed53f23d905efdd75177%26n%3Dtune%26AFFID%3D477232%26subid%3D37_UW221124PM&rl=&if=false&ts=1669330390645&sw=1280&sh=1024&v=2.9.89&r=stable&ec=1&o=30&fbp=fb.1.1669330390639.1935420484&it=1669330389397&coo=false&rqm=GET
200 OK 0 B URL HTTP/2 www.facebook.com/tr/?id=302615157369859&ev=LPVisit&dl=http%3A%2F%2Fpages.upwellness.com%2Fuc-grplus-fps%2F%3Foffer%3D67%26session_id%3D10290265cbed53f23d905efdd75177%26n%3Dtune%26AFFID%3D477232%26subid%3D37_UW221124PM&rl=&if=false&ts=1669330390645&sw=1280&sh=1024&v=2.9.89&r=stable&ec=1&o=30&fbp=fb.1.1669330390639.1935420484&it=1669330389397&coo=false&rqm=GET
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=302615157369859&ev=LPVisit&dl=http%3A%2F%2Fpages.upwellness.com%2Fuc-grplus-fps%2F%3Foffer%3D67%26session_id%3D10290265cbed53f23d905efdd75177%26n%3Dtune%26AFFID%3D477232%26subid%3D37_UW221124PM&rl=&if=false&ts=1669330390645&sw=1280&sh=1024&v=2.9.89&r=stable&ec=1&o=30&fbp=fb.1.1669330390639.1935420484&it=1669330389397&coo=false&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pages.upwellness.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Thu, 24 Nov 2022 22:53:11 GMT
X-Firefox-Spdy: h2
www.facebook.com/tr/?id=302615157369859&ev=LPVisit_GRPfps&dl=http%3A%2F%2Fpages.upwellness.com%2Fuc-grplus-fps%2F%3Foffer%3D67%26session_id%3D10290265cbed53f23d905efdd75177%26n%3Dtune%26AFFID%3D477232%26subid%3D37_UW221124PM&rl=&if=false&ts=1669330390647&sw=1280&sh=1024&v=2.9.89&r=stable&ec=2&o=30&fbp=fb.1.1669330390639.1935420484&it=1669330389397&coo=false&rqm=GET
302 Found 0 B URL HTTP/2 www.facebook.com/tr/?id=302615157369859&ev=LPVisit_GRPfps&dl=http%3A%2F%2Fpages.upwellness.com%2Fuc-grplus-fps%2F%3Foffer%3D67%26session_id%3D10290265cbed53f23d905efdd75177%26n%3Dtune%26AFFID%3D477232%26subid%3D37_UW221124PM&rl=&if=false&ts=1669330390647&sw=1280&sh=1024&v=2.9.89&r=stable&ec=2&o=30&fbp=fb.1.1669330390639.1935420484&it=1669330389397&coo=false&rqm=GET
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=302615157369859&ev=LPVisit_GRPfps&dl=http%3A%2F%2Fpages.upwellness.com%2Fuc-grplus-fps%2F%3Foffer%3D67%26session_id%3D10290265cbed53f23d905efdd75177%26n%3Dtune%26AFFID%3D477232%26subid%3D37_UW221124PM&rl=&if=false&ts=1669330390647&sw=1280&sh=1024&v=2.9.89&r=stable&ec=2&o=30&fbp=fb.1.1669330390639.1935420484&it=1669330389397&coo=false&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pages.upwellness.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
date: Thu, 24 Nov 2022 22:53:11 GMT
set-cookie:
location: /tr/?coo=false&dl=http%3A%2F%2Fpages.upwellness.com%2Fuc-grplus-fps%2F%3Foffer%3D67%26session_id%3D10290265cbed53f23d905efdd75177%26n%3Dtune%26AFFID%3D477232%26subid%3D37_UW221124PM&ec=2&ev=LPVisit_GRPfps&fbp=fb.1.1669330390639.1935420484&id=302615157369859&if=false&it=1669330389397&o=30&r=stable&redirect=0&rl=&rqm=GET&sh=1024&sw=1280&ts=1669330390647&v=2.9.89
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-type: text/plain
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
www.facebook.com/tr/?id=302615157369859&ev=PageView&dl=http%3A%2F%2Fpages.upwellness.com%2Fuc-grplus-fps%2F%3Foffer%3D67%26session_id%3D10290265cbed53f23d905efdd75177%26n%3Dtune%26AFFID%3D477232%26subid%3D37_UW221124PM&rl=&if=false&ts=1669330390650&sw=1280&sh=1024&v=2.9.89&r=stable&ec=3&o=30&fbp=fb.1.1669330390639.1935420484&it=1669330389397&coo=false&eid=cl4975ot4arrr6b74e95d3-cb95-4b11-b508-0920a5130597&tm=1&rqm=GET
200 OK 0 B URL HTTP/2 www.facebook.com/tr/?id=302615157369859&ev=PageView&dl=http%3A%2F%2Fpages.upwellness.com%2Fuc-grplus-fps%2F%3Foffer%3D67%26session_id%3D10290265cbed53f23d905efdd75177%26n%3Dtune%26AFFID%3D477232%26subid%3D37_UW221124PM&rl=&if=false&ts=1669330390650&sw=1280&sh=1024&v=2.9.89&r=stable&ec=3&o=30&fbp=fb.1.1669330390639.1935420484&it=1669330389397&coo=false&eid=cl4975ot4arrr6b74e95d3-cb95-4b11-b508-0920a5130597&tm=1&rqm=GET
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=302615157369859&ev=PageView&dl=http%3A%2F%2Fpages.upwellness.com%2Fuc-grplus-fps%2F%3Foffer%3D67%26session_id%3D10290265cbed53f23d905efdd75177%26n%3Dtune%26AFFID%3D477232%26subid%3D37_UW221124PM&rl=&if=false&ts=1669330390650&sw=1280&sh=1024&v=2.9.89&r=stable&ec=3&o=30&fbp=fb.1.1669330390639.1935420484&it=1669330389397&coo=false&eid=cl4975ot4arrr6b74e95d3-cb95-4b11-b508-0920a5130597&tm=1&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pages.upwellness.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Thu, 24 Nov 2022 22:53:11 GMT
X-Firefox-Spdy: h2
trc-events.taboola.com/1225872/log/3/unip?en=pre_d_eng_tb&tos=1565&scd=5&ssd=1&est=1669330389358&ver=35&isls=true&src=i&invt=1500&rv=1&tim=1669330390924&vi=1669330389356&ri=332bf83a712c3e4473a6b4ae17b303a1&ref=null&cv=20221117-23-RELEASE&item-url=http%3A%2F%2Fpages.upwellness.com%2Fuc-grplus-fps%2F%3Foffer%3D67%26session_id%3D10290265cbed53f23d905efdd75177%26n%3Dtune%26AFFID%3D477232%26subid%3D37_UW221124PM
204 No Content 0 B URL HTTP/2 trc-events.taboola.com/1225872/log/3/unip?en=pre_d_eng_tb&tos=1565&scd=5&ssd=1&est=1669330389358&ver=35&isls=true&src=i&invt=1500&rv=1&tim=1669330390924&vi=1669330389356&ri=332bf83a712c3e4473a6b4ae17b303a1&ref=null&cv=20221117-23-RELEASE&item-url=http%3A%2F%2Fpages.upwellness.com%2Fuc-grplus-fps%2F%3Foffer%3D67%26session_id%3D10290265cbed53f23d905efdd75177%26n%3Dtune%26AFFID%3D477232%26subid%3D37_UW221124PM
IP
ASN #200478 Taboola.com ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /1225872/log/3/unip?en=pre_d_eng_tb&tos=1565&scd=5&ssd=1&est=1669330389358&ver=35&isls=true&src=i&invt=1500&rv=1&tim=1669330390924&vi=1669330389356&ri=332bf83a712c3e4473a6b4ae17b303a1&ref=null&cv=20221117-23-RELEASE&item-url=http%3A%2F%2Fpages.upwellness.com%2Fuc-grplus-fps%2F%3Foffer%3D67%26session_id%3D10290265cbed53f23d905efdd75177%26n%3Dtune%26AFFID%3D477232%26subid%3D37_UW221124PM HTTP/1.1
Host: trc-events.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://pages.upwellness.com
Connection: keep-alive
Referer: http://pages.upwellness.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: nginx
date: Thu, 24 Nov 2022 22:53:11 GMT
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: http://pages.upwellness.com
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
X-Firefox-Spdy: h2
www.facebook.com/tr/?coo=false&dl=http%3A%2F%2Fpages.upwellness.com%2Fuc-grplus-fps%2F%3Foffer%3D67%26session_id%3D10290265cbed53f23d905efdd75177%26n%3Dtune%26AFFID%3D477232%26subid%3D37_UW221124PM&ec=2&ev=LPVisit_GRPfps&fbp=fb.1.1669330390639.1935420484&id=302615157369859&if=false&it=1669330389397&o=30&r=stable&redirect=0&rl=&rqm=GET&sh=1024&sw=1280&ts=1669330390647&v=2.9.89
200 OK 0 B URL HTTP/2 www.facebook.com/tr/?coo=false&dl=http%3A%2F%2Fpages.upwellness.com%2Fuc-grplus-fps%2F%3Foffer%3D67%26session_id%3D10290265cbed53f23d905efdd75177%26n%3Dtune%26AFFID%3D477232%26subid%3D37_UW221124PM&ec=2&ev=LPVisit_GRPfps&fbp=fb.1.1669330390639.1935420484&id=302615157369859&if=false&it=1669330389397&o=30&r=stable&redirect=0&rl=&rqm=GET&sh=1024&sw=1280&ts=1669330390647&v=2.9.89
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?coo=false&dl=http%3A%2F%2Fpages.upwellness.com%2Fuc-grplus-fps%2F%3Foffer%3D67%26session_id%3D10290265cbed53f23d905efdd75177%26n%3Dtune%26AFFID%3D477232%26subid%3D37_UW221124PM&ec=2&ev=LPVisit_GRPfps&fbp=fb.1.1669330390639.1935420484&id=302615157369859&if=false&it=1669330389397&o=30&r=stable&redirect=0&rl=&rqm=GET&sh=1024&sw=1280&ts=1669330390647&v=2.9.89 HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://pages.upwellness.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Thu, 24 Nov 2022 22:53:11 GMT
X-Firefox-Spdy: h2
a.clickcertain.com/px/r/?ccid=f2387451-6984-4a26-8e7d-5c74afeb98a4
302 Found 88 kB URL HTTP/2 a.clickcertain.com/px/r/?ccid=f2387451-6984-4a26-8e7d-5c74afeb98a4
IP
File type gzip compressed data, from Unix\012- data
Hash 5492e937b153d838d7eb97d2e0a78161
cfc0940aeceb499efde8e879166775c28213155b
bb57419b8d5a11e56781b5387b88a0de2428df617710123b0714b78ff33209d5
GET /px/r/?ccid=f2387451-6984-4a26-8e7d-5c74afeb98a4 HTTP/1.1
Host: a.clickcertain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://a.clickcertain.com/px/cont/?c=24a3d6f0fe7dd9c&ccid=f2387451-6984-4a26-8e7d-5c74afeb98a4&cn=NO
Cookie: _ccpx_u=f2387451%2d6984%2d4a26%2d8e7d%2d5c74afeb98a4; _ccpx=24a3d6f0fe7dd9c; _ccpx_24a3d6f0fe7dd9c=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 302 Found
date: Thu, 24 Nov 2022 22:53:11 GMT
content-type: text/html
location: https://i.liadm.com/s/56408?bidder_id=200441&bidder_uuid=f2387451-6984-4a26-8e7d-5c74afeb98a4&ccid=f2387451-6984-4a26-8e7d-5c74afeb98a4&redir=https%253a%252f%252fcm%252eg%252edoubleclick%252enet%252fpixel%253fgoogle_nid%253dclickcertain%2526google_cm%253d1%2526google_sc%253d1%2526redir%253dhttps%25253a%25252f%25252fsecure%25252eadnxs%25252ecom%25252fgetuidu%25253fhttps%25253a%25252f%25252fa%25252eclickcertain%25252ecom%25252fpx%25252fimg%25252fbidswitch%25252f%25253fdone%25253dtrue%252526ccid%25253df2387451%25252d6984%25252d4a26%25252d8e7d%25252d5c74afeb98a4%252526anx_uId%25253d%252524UID
set-cookie: _ccpx_u=f2387451%2d6984%2d4a26%2d8e7d%2d5c74afeb98a4; Expires=Fri, 24 Nov 2023 22:53:11 GMT; Path=/; HttpOnly; SameSite=None; Secure
x-frontend: cc-nginx-c76b96594-sj4js:cc-nginx-c76b96594-sj4js
x-requestid: e05d2698-e035-42fb-a5ab-f9a89a1cb3e8
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tATRAzH2uGM2yguVan9Vc%2FrQV8LqQQr%2BGzC7dyxlFkxQF5%2B3CIPnY77lJWwSykxuuvBVKRnRu9YhVHd1C5XYRLQHFmV6ue4KhJTw%2BHvtBTYCKDN6YAxqk62UQKGTwzgSU%2FdvyQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76f5b81f8ad9fac4-OSL
X-Firefox-Spdy: h2
rp.liadm.com/j?dtstmp=1669330389416&aid=a-057g&se=e30&duid=f0f26c15fa8f--01gjnxgj381w7qzr27ybhcz2jv&tna=v2.5.1&pu=http%3A%2F%2Fpages.upwellness.com%2Fuc-grplus-fps%2F%3Foffer%3D67%26session_id%3D10290265cbed53f23d905efdd75177%26n%3Dtune%26AFFID%3D477232%26subid%3D37_UW221124PM&wpn=lc-bundle&c=PHRpdGxlPjwvdGl0bGU-PG1ldGEgbmFtZT0iZGVzY3JpcHRpb24iIGNvbnRlbnQ9IiI-&n3pc=true
200 OK 13 B URL HTTP/2 rp.liadm.com/j?dtstmp=1669330389416&aid=a-057g&se=e30&duid=f0f26c15fa8f--01gjnxgj381w7qzr27ybhcz2jv&tna=v2.5.1&pu=http%3A%2F%2Fpages.upwellness.com%2Fuc-grplus-fps%2F%3Foffer%3D67%26session_id%3D10290265cbed53f23d905efdd75177%26n%3Dtune%26AFFID%3D477232%26subid%3D37_UW221124PM&wpn=lc-bundle&c=PHRpdGxlPjwvdGl0bGU-PG1ldGEgbmFtZT0iZGVzY3JpcHRpb24iIGNvbnRlbnQ9IiI-&n3pc=true
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 97efe0b7ee61e154d57e80758bb797d8
810b4e115fe9f5ae697666febf2a9abf0b21c9ec
efabba3678b85fcab831b778ea2ddaad1e2a1e952584d3566bc39b7ccb3429d9
GET /j?dtstmp=1669330389416&aid=a-057g&se=e30&duid=f0f26c15fa8f--01gjnxgj381w7qzr27ybhcz2jv&tna=v2.5.1&pu=http%3A%2F%2Fpages.upwellness.com%2Fuc-grplus-fps%2F%3Foffer%3D67%26session_id%3D10290265cbed53f23d905efdd75177%26n%3Dtune%26AFFID%3D477232%26subid%3D37_UW221124PM&wpn=lc-bundle&c=PHRpdGxlPjwvdGl0bGU-PG1ldGEgbmFtZT0iZGVzY3JpcHRpb24iIGNvbnRlbnQ9IiI-&n3pc=true HTTP/1.1
Host: rp.liadm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://pages.upwellness.com
Referer: http://pages.upwellness.com/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 24 Nov 2022 22:53:11 GMT
content-type: application/json
content-length: 13
trace-id: 8f0a64557ec768ed
vary: Origin
request-time: 0
referrer-policy: origin-when-cross-origin, strict-origin-when-cross-origin
x-frame-options: DENY
x-pixel-event-id: ab993ca7-8112-4429-99ee-c51d57c8be4c
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: http://pages.upwellness.com
access-control-allow-credentials: true
x-permitted-cross-domain-policies: master-only
X-Firefox-Spdy: h2
i.liadm.com/s/56408?bidder_id=200441&bidder_uuid=f2387451-6984-4a26-8e7d-5c74afeb98a4&ccid=f2387451-6984-4a26-8e7d-5c74afeb98a4&redir=https%253a%252f%252fcm%252eg%252edoubleclick%252enet%252fpixel%253fgoogle_nid%253dclickcertain%2526google_cm%253d1%2526google_sc%253d1%2526redir%253dhttps%25253a%25252f%25252fsecure%25252eadnxs%25252ecom%25252fgetuidu%25253fhttps%25253a%25252f%25252fa%25252eclickcertain%25252ecom%25252fpx%25252fimg%25252fbidswitch%25252f%25253fdone%25253dtrue%252526ccid%25253df2387451%25252d6984%25252d4a26%25252d8e7d%25252d5c74afeb98a4%252526anx_uId%25253d%252524UID
303 See Other 0 B URL HTTP/1.1 i.liadm.com/s/56408?bidder_id=200441&bidder_uuid=f2387451-6984-4a26-8e7d-5c74afeb98a4&ccid=f2387451-6984-4a26-8e7d-5c74afeb98a4&redir=https%253a%252f%252fcm%252eg%252edoubleclick%252enet%252fpixel%253fgoogle_nid%253dclickcertain%2526google_cm%253d1%2526google_sc%253d1%2526redir%253dhttps%25253a%25252f%25252fsecure%25252eadnxs%25252ecom%25252fgetuidu%25253fhttps%25253a%25252f%25252fa%25252eclickcertain%25252ecom%25252fpx%25252fimg%25252fbidswitch%25252f%25253fdone%25253dtrue%252526ccid%25253df2387451%25252d6984%25252d4a26%25252d8e7d%25252d5c74afeb98a4%252526anx_uId%25253d%252524UID
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /s/56408?bidder_id=200441&bidder_uuid=f2387451-6984-4a26-8e7d-5c74afeb98a4&ccid=f2387451-6984-4a26-8e7d-5c74afeb98a4&redir=https%253a%252f%252fcm%252eg%252edoubleclick%252enet%252fpixel%253fgoogle_nid%253dclickcertain%2526google_cm%253d1%2526google_sc%253d1%2526redir%253dhttps%25253a%25252f%25252fsecure%25252eadnxs%25252ecom%25252fgetuidu%25253fhttps%25253a%25252f%25252fa%25252eclickcertain%25252ecom%25252fpx%25252fimg%25252fbidswitch%25252f%25253fdone%25253dtrue%252526ccid%25253df2387451%25252d6984%25252d4a26%25252d8e7d%25252d5c74afeb98a4%252526anx_uId%25253d%252524UID HTTP/1.1
Host: i.liadm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://a.clickcertain.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 303 See Other
Date: Thu, 24 Nov 2022 22:53:11 GMT
Content-Length: 0
Connection: keep-alive
Location: /s/56408?redir=https%253a%252f%252fcm%252eg%252edoubleclick%252enet%252fpixel%253fgoogle_nid%253dclickcertain%2526google_cm%253d1%2526google_sc%253d1%2526redir%253dhttps%25253a%25252f%25252fsecure%25252eadnxs%25252ecom%25252fgetuidu%25253fhttps%25253a%25252f%25252fa%25252eclickcertain%25252ecom%25252fpx%25252fimg%25252fbidswitch%25252f%25253fdone%25253dtrue%252526ccid%25253df2387451%25252d6984%25252d4a26%25252d8e7d%25252d5c74afeb98a4%252526anx_uId%25253d%252524UID&bidder_id=200441&bidder_uuid=f2387451-6984-4a26-8e7d-5c74afeb98a4&_li_chk=true&ccid=f2387451-6984-4a26-8e7d-5c74afeb98a4&previous_uuid=f103e6f35d7c45cda126eac4e98b5a32
Set-Cookie: lidid=f103e6f3-5d7c-45cd-a126-eac4e98b5a32; Max-Age=63072000; Expires=Sat, 23 Nov 2024 22:53:11 GMT; SameSite=None; Path=/; Domain=liadm.com; Secure
Request-Time: 0
Strict-Transport-Security: max-age=31536000; includeSubDomains
sp.analytics.yahoo.com/sp.pl?a=10000&d=Thu%2C%2024%20Nov%202022%2022%3A53%3A10%20GMT&n=0&.yp=10056129&f=http%3A%2F%2Fpages.upwellness.com%2Fuc-grplus-fps%2F%3Foffer%3D67%26session_id%3D10290265cbed53f23d905efdd75177%26n%3Dtune%26AFFID%3D477232%26subid%3D37_UW221124PM&enc=UTF-8&yv=1.13.0&tagmgr=gtm
200 OK 43 B URL HTTP/2 sp.analytics.yahoo.com/sp.pl?a=10000&d=Thu%2C%2024%20Nov%202022%2022%3A53%3A10%20GMT&n=0&.yp=10056129&f=http%3A%2F%2Fpages.upwellness.com%2Fuc-grplus-fps%2F%3Foffer%3D67%26session_id%3D10290265cbed53f23d905efdd75177%26n%3Dtune%26AFFID%3D477232%26subid%3D37_UW221124PM&enc=UTF-8&yv=1.13.0&tagmgr=gtm
IP
ASN #34010 Yahoo! UK Services Limited
File type GIF image data, version 89a, 1 x 1\012- data
Hash bff56ce49dd485d195fdfa0a02342568
74fb4071deab7d3ab083562067b735df32c43397
0e4b1e428a2198ef747010c094101c257b568a97cdcc0f31ed5e9868cc835b39
GET /sp.pl?a=10000&d=Thu%2C%2024%20Nov%202022%2022%3A53%3A10%20GMT&n=0&.yp=10056129&f=http%3A%2F%2Fpages.upwellness.com%2Fuc-grplus-fps%2F%3Foffer%3D67%26session_id%3D10290265cbed53f23d905efdd75177%26n%3Dtune%26AFFID%3D477232%26subid%3D37_UW221124PM&enc=UTF-8&yv=1.13.0&tagmgr=gtm HTTP/1.1
Host: sp.analytics.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pages.upwellness.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 24 Nov 2022 22:53:11 GMT
expires: Thu, 24 Nov 2022 22:53:11 GMT
pragma: no-cache
cache-control: no-cache, private, must-revalidate
content-type: image/gif
accept-ranges: bytes
content-length: 43
server: ATS
age: 0
strict-transport-security: max-age=31536000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-frame-options: DENY
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
content-security-policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic
set-cookie: A3=d=AQABBNf1f2MCELB8vtZXoR55uwZ0uLmCFW4FEgEBAQFHgWOJYwAAAAAA_eMAAA&S=AQAAAtTrIUw9zvoXrLWUFPHgG10; Expires=Sat, 25 Nov 2023 04:53:11 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
X-Firefox-Spdy: h2
ocsp.r2m02.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.r2m02.amazontrust.com/
IP
Hash 7e1f10921950e9569eae7e85bd9a1ac6
3b9049609d373b08428e05f6117c368efe721650
bf3d62a2e12d6699abf52a8b08af060d909268901c5518013b99989622a1ca25
POST / HTTP/1.1
Host: ocsp.r2m02.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=116401
Date: Thu, 24 Nov 2022 22:53:11 GMT
Etag: "637f1988-1d7"
Expires: Sat, 26 Nov 2022 07:13:12 GMT
Last-Modified: Thu, 24 Nov 2022 07:13:12 GMT
Server: nginx
X-Cache: Miss from cloudfront
Via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: tHey0-CZOxW10XrhV-gByMcSo0lgC1rPdt8dYJ0PI1THwjLcIxR0mA==
sp.analytics.yahoo.com/sp.pl?a=10000&.yp=10175858&f=http%3A%2F%2Fpages.upwellness.com%2Fuc-grplus-fps%2F%3Foffer%3D67%26session_id%3D10290265cbed53f23d905efdd75177%26n%3Dtune%26AFFID%3D477232%26subid%3D37_UW221124PM&enc=UTF-8&yv=1.13.0&tagmgr=gtm
200 OK 43 B URL HTTP/2 sp.analytics.yahoo.com/sp.pl?a=10000&.yp=10175858&f=http%3A%2F%2Fpages.upwellness.com%2Fuc-grplus-fps%2F%3Foffer%3D67%26session_id%3D10290265cbed53f23d905efdd75177%26n%3Dtune%26AFFID%3D477232%26subid%3D37_UW221124PM&enc=UTF-8&yv=1.13.0&tagmgr=gtm
IP
ASN #34010 Yahoo! UK Services Limited
File type GIF image data, version 89a, 1 x 1\012- data
Hash bff56ce49dd485d195fdfa0a02342568
74fb4071deab7d3ab083562067b735df32c43397
0e4b1e428a2198ef747010c094101c257b568a97cdcc0f31ed5e9868cc835b39
GET /sp.pl?a=10000&.yp=10175858&f=http%3A%2F%2Fpages.upwellness.com%2Fuc-grplus-fps%2F%3Foffer%3D67%26session_id%3D10290265cbed53f23d905efdd75177%26n%3Dtune%26AFFID%3D477232%26subid%3D37_UW221124PM&enc=UTF-8&yv=1.13.0&tagmgr=gtm HTTP/1.1
Host: sp.analytics.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pages.upwellness.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 24 Nov 2022 22:53:11 GMT
expires: Thu, 24 Nov 2022 22:53:11 GMT
pragma: no-cache
cache-control: no-cache, private, must-revalidate
content-type: image/gif
accept-ranges: bytes
content-length: 43
server: ATS
age: 0
strict-transport-security: max-age=31536000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-frame-options: DENY
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
content-security-policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic
set-cookie: A3=d=AQABBNf1f2MCENs_ZzPghePJvVwUtoSe5g4FEgEBAQFHgWOJYwAAAAAA_eMAAA&S=AQAAAigjYPsLuBSOFKva8Knlqpk; Expires=Sat, 25 Nov 2023 04:53:11 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
X-Firefox-Spdy: h2
a.clickcertain.com/px/ta/?ccid=f2387451-6984-4a26-8e7d-5c74afeb98a4
302 Found 0 B URL HTTP/2 a.clickcertain.com/px/ta/?ccid=f2387451-6984-4a26-8e7d-5c74afeb98a4
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /px/ta/?ccid=f2387451-6984-4a26-8e7d-5c74afeb98a4 HTTP/1.1
Host: a.clickcertain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://a.clickcertain.com/px/cont/?c=24a3d6f0fe7dd9c&ccid=f2387451-6984-4a26-8e7d-5c74afeb98a4&cn=NO
Cookie: _ccpx_u=f2387451%2d6984%2d4a26%2d8e7d%2d5c74afeb98a4; _ccpx=24a3d6f0fe7dd9c; _ccpx_24a3d6f0fe7dd9c=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 302 Found
date: Thu, 24 Nov 2022 22:53:11 GMT
content-type: text/html
location: https://pixel.tapad.com/idsync/ex/receive?partner_id=3318&partner_device_id=f2387451-6984-4a26-8e7d-5c74afeb98a4&partner_url=https%3a%2f%2fa%2eclickcertain%2ecom%2fpx%2fta%2f%3fdone%3dtrue%26ta_id%3d%24%7bTA_DEVICE_ID%7d
set-cookie: _ccpx_u=f2387451%2d6984%2d4a26%2d8e7d%2d5c74afeb98a4; Expires=Fri, 24 Nov 2023 22:53:11 GMT; Path=/; HttpOnly; SameSite=None; Secure
x-frontend: cc-nginx-c76b96594-k8vv5:cc-nginx-c76b96594-k8vv5
x-requestid: 47a7b213-017a-4c4c-818a-f9f0985ef633
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QN0QPhTqftKHNRjXSiyFl9MMf2VYvs45jZSObWjvIcdVz3iBYTDogZDz8iiPf5bNNHVgYYDgM5D%2FRYtqmNY8UeuHaDqhZl7wRKCThfdmWG6D%2BZQc33zS56uRzudaiIG6M7SP5Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76f5b81f7ad7fac4-OSL
X-Firefox-Spdy: h2
a.browserspeed.support/cs?puid=8534326b-ec33-538b-889e-ab78aee0510e&pid=lc
302 Found 24 B URL HTTP/2 a.browserspeed.support/cs?puid=8534326b-ec33-538b-889e-ab78aee0510e&pid=lc
IP
File type HTML document, ASCII text
Hash cd5fa747861f510d1d45ab9dc80a16a0
90d910869fbe5e0f79b7f7e58f59f5303f46ad78
5bdd19de1ad3c04f1a88334882b16565cef8ac274902e671a72ebebdb35c697c
GET /cs?puid=8534326b-ec33-538b-889e-ab78aee0510e&pid=lc HTTP/1.1
Host: a.browserspeed.support
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://a.clickcertain.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: awselb/2.0
date: Thu, 24 Nov 2022 22:53:11 GMT
content-type: text/html; charset=utf-8
content-length: 24
location: https://a.browserspeed.support/
set-cookie: tuid=a5833d6b-ef02-41eb-8f49-c2042ad2f1dc; Path=/; Domain=a.browserspeed.support; Max-Age=31536000; HttpOnly; Secure; SameSite=None
X-Firefox-Spdy: h2
a.browserspeed.support/
200 OK 4 B IP
File type ASCII text, with no line terminators
Hash 72054d9a6fbdcc7df012e19f32345b65
52dd4c74c813db3790179c4f236ceadaca3467a8
c48b5b1a9776c84602de2306d7903a7241158a5077e7a8519af75c33441b8334
Analyzer Verdict Alert fortinet Phishing
GET / HTTP/1.1
Host: a.browserspeed.support
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://a.clickcertain.com/
Connection: keep-alive
Cookie: tuid=a5833d6b-ef02-41eb-8f49-c2042ad2f1dc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: awselb/2.0
date: Thu, 24 Nov 2022 22:53:12 GMT
content-type: application/json; charset=utf-8
content-length: 4
set-cookie: tuid=a5833d6b-ef02-41eb-8f49-c2042ad2f1dc; Path=/; Domain=a.browserspeed.support; Max-Age=31536000; HttpOnly; Secure; SameSite=None
X-Firefox-Spdy: h2
fast.wistia.com/embed/medias/e8xcaqkjm4.m3u8
304 Not Modified 0 B URL HTTP/2 fast.wistia.com/embed/medias/e8xcaqkjm4.m3u8
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /embed/medias/e8xcaqkjm4.m3u8 HTTP/1.1
Host: fast.wistia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://pages.upwellness.com
Connection: keep-alive
Referer: http://pages.upwellness.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
If-None-Match: W/"787a8ab6ac9372e6fab4e9561b20640f"
TE: trailers
HTTP/2 304 Not Modified
date: Thu, 24 Nov 2022 22:53:12 GMT
via: 1.1 varnish
cache-control: public, no-cache
etag: W/"787a8ab6ac9372e6fab4e9561b20640f"
age: 24695
x-served-by: cache-bma1678-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669330392.411771,VS0,VE0
vary: Accept-Encoding,X-Forwarded-Proto,X-ECMA-Override
strict-transport-security: max-age=0
x-ecma-v: modern
x-browser: firefox
x-browser-version: 105
X-Firefox-Spdy: h2
a.clickcertain.com/px/img/g/?redir=https%3A%2F%2Fsecure%2Eadnxs%2Ecom%2Fgetuidu%3Fhttps%3A%2F%2Fa%2Eclickcertain%2Ecom%2Fpx%2Fimg%2Fbidswitch%2F%3Fdone%3Dtrue%26ccid%3Df2387451%2D6984%2D4a26%2D8e7d%2D5c74afeb98a4%26anx_uId%3D%24UID&google_error=3
302 Found 0 B URL HTTP/2 a.clickcertain.com/px/img/g/?redir=https%3A%2F%2Fsecure%2Eadnxs%2Ecom%2Fgetuidu%3Fhttps%3A%2F%2Fa%2Eclickcertain%2Ecom%2Fpx%2Fimg%2Fbidswitch%2F%3Fdone%3Dtrue%26ccid%3Df2387451%2D6984%2D4a26%2D8e7d%2D5c74afeb98a4%26anx_uId%3D%24UID&google_error=3
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /px/img/g/?redir=https%3A%2F%2Fsecure%2Eadnxs%2Ecom%2Fgetuidu%3Fhttps%3A%2F%2Fa%2Eclickcertain%2Ecom%2Fpx%2Fimg%2Fbidswitch%2F%3Fdone%3Dtrue%26ccid%3Df2387451%2D6984%2D4a26%2D8e7d%2D5c74afeb98a4%26anx_uId%3D%24UID&google_error=3 HTTP/1.1
Host: a.clickcertain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://a.clickcertain.com/
Connection: keep-alive
Cookie: _ccpx_u=f2387451%2d6984%2d4a26%2d8e7d%2d5c74afeb98a4; _ccpx=24a3d6f0fe7dd9c; _ccpx_24a3d6f0fe7dd9c=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
date: Thu, 24 Nov 2022 22:53:12 GMT
content-type: text/html
location: https://secure.adnxs.com/getuidu?https://a.clickcertain.com/px/img/bidswitch/?done=true&ccid=f2387451-6984-4a26-8e7d-5c74afeb98a4&anx_uId=$UID
x-frontend: cc-nginx-c76b96594-sggch:cc-nginx-c76b96594-sggch
x-requestid: ca2013cc-8d4f-4086-a338-5e89e2fb890a
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=UTrnm%2F92%2FbafKO45zlVxqpejmCAfCHwRzTxzof%2B9YY28GCh%2Bev%2FSQxSEym9WCZuJ1tQPb4CivE7FC%2FWqezZ8Lsgx3KylKdDBOoTsggWnO4Ud%2B85vGOypyz3PymAIO1ph%2BbLfdQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76f5b8271fcefac4-OSL
X-Firefox-Spdy: h2
secure.adnxs.com/bounce?%2Fgetuidu%3Fhttps%3A%2F%2Fa.clickcertain.com%2Fpx%2Fimg%2Fbidswitch%2F%3Fdone%3Dtrue%26ccid%3Df2387451-6984-4a26-8e7d-5c74afeb98a4%26anx_uId%3D%24UID
302 Found 0 B URL HTTP/1.1 secure.adnxs.com/bounce?%2Fgetuidu%3Fhttps%3A%2F%2Fa.clickcertain.com%2Fpx%2Fimg%2Fbidswitch%2F%3Fdone%3Dtrue%26ccid%3Df2387451-6984-4a26-8e7d-5c74afeb98a4%26anx_uId%3D%24UID
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /bounce?%2Fgetuidu%3Fhttps%3A%2F%2Fa.clickcertain.com%2Fpx%2Fimg%2Fbidswitch%2F%3Fdone%3Dtrue%26ccid%3Df2387451-6984-4a26-8e7d-5c74afeb98a4%26anx_uId%3D%24UID HTTP/1.1
Host: secure.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://a.clickcertain.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx/1.21.3
Date: Thu, 24 Nov 2022 22:53:12 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Location: https://a.clickcertain.com/px/img/bidswitch/?done=true&ccid=f2387451-6984-4a26-8e7d-5c74afeb98a4&anx_uId=0
AN-X-Request-Uuid: 3f4b9c2f-f202-4b64-a889-ba43113e0eaa
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 1003.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com
ocsp.sectigo.com/
200 OK 471 B IP
Hash 86776344fc6dd826ff48ca2f315dec8a
23054ddd051e653c90cc3232bbe1ecb88820b29a
7a6a778b4a383d8385e3843a7fd1ad88a5e7182d5627740511dd2c83a6f264c1
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 24 Nov 2022 22:53:12 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Tue, 22 Nov 2022 13:56:48 GMT
Expires: Tue, 29 Nov 2022 13:56:47 GMT
Etag: "23054ddd051e653c90cc3232bbe1ecb88820b29a"
Cache-Control: max-age=399214,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 76f5b82a8aeeb518-OSL
x.bidswitch.net/sync?dsp_id=179&user_id=f2387451-6984-4a26-8e7d-5c74afeb98a4&expires=5&user_group=0
302 Found 62 B URL HTTP/2 x.bidswitch.net/sync?dsp_id=179&user_id=f2387451-6984-4a26-8e7d-5c74afeb98a4&expires=5&user_group=0
IP
Hash a7611ee2b630cdb494710b60b7f6ea66
1e57ae6d5de4c62fcc69e5cb46ae660ba6bdb493
affa254fbdb384c8ee89091d1031ac48bd055871f071268371c77abea8926623
GET /sync?dsp_id=179&user_id=f2387451-6984-4a26-8e7d-5c74afeb98a4&expires=5&user_group=0 HTTP/1.1
Host: x.bidswitch.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://a.clickcertain.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Thu, 24 Nov 2022 22:53:12 GMT
content-length: 0
location: https://x.bidswitch.net/ul_cb/sync?dsp_id=179&user_id=f2387451-6984-4a26-8e7d-5c74afeb98a4&expires=5&user_group=0
cache-control: no-cache, no-store, must-revalidate
set-cookie: tuuid=135d3525-c80c-412a-9a75-e40567a98363; path=/; expires=Fri, 24-Nov-2023 22:53:12 GMT; domain=.bidswitch.net; samesite=none; secure
c=1669330392; path=/; expires=Fri, 24-Nov-2023 22:53:12 GMT; domain=.bidswitch.net; samesite=none; secure
tuuid_lu=1669330392; path=/; expires=Fri, 24-Nov-2023 22:53:12 GMT; domain=.bidswitch.net; samesite=none; secure
c=1669330392; path=/; expires=Fri, 24-Nov-2023 22:53:12 GMT; domain=.bidswitch.net; samesite=none; secure
X-Firefox-Spdy: h2
x.bidswitch.net/ul_cb/sync?dsp_id=179&user_id=f2387451-6984-4a26-8e7d-5c74afeb98a4&expires=5&user_group=0
200 OK 43 B URL HTTP/2 x.bidswitch.net/ul_cb/sync?dsp_id=179&user_id=f2387451-6984-4a26-8e7d-5c74afeb98a4&expires=5&user_group=0
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /ul_cb/sync?dsp_id=179&user_id=f2387451-6984-4a26-8e7d-5c74afeb98a4&expires=5&user_group=0 HTTP/1.1
Host: x.bidswitch.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://a.clickcertain.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 24 Nov 2022 22:53:12 GMT
content-type: image/gif
content-length: 43
cache-control: no-cache, no-store, must-revalidate
X-Firefox-Spdy: h2
fast.wistia.com/assets/external/playPauseLoadingControl.js
200 OK 16 kB URL HTTP/2 fast.wistia.com/assets/external/playPauseLoadingControl.js
IP
File type ASCII text, with very long lines (60125), with no line terminators
Hash 7264d7b49eb6dc6eef062a9511cfd32e
d6724f77d675d740c895a283e4b8e3dbdd1719d5
6cca15bd7bbece1644b8b31db564da9659fa85f73ea22b814cb831cf0113a4e3
GET /assets/external/playPauseLoadingControl.js HTTP/1.1
Host: fast.wistia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pages.upwellness.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
cache-control: public, max-age=3600
content-encoding: br
content-type: application/javascript
etag: "637ce334-3e59"
last-modified: Tue, 22 Nov 2022 14:56:52 GMT
timing-allow-origin: *
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 24 Nov 2022 22:53:13 GMT
age: 1020
x-served-by: cache-iad-kcgs7200113-IAD, cache-bma1678-BMA
x-cache: HIT, HIT
x-cache-hits: 47, 15
x-timer: S1669330393.014876,VS0,VE0
vary: Accept-Encoding
strict-transport-security: max-age=0
x-ecma-v: modern
x-browser: firefox
x-browser-version: 105
content-length: 15961
X-Firefox-Spdy: h2
ct.pinterest.com/ct.html
200 OK 323 B IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (565), with no line terminators
Hash b49b45b63051915a8c657060651eb07f
acaddf8021f220d0e4d30e7c8b3d8330ff781af9
4b00fbca5db49c6e4b29a0c873c43671880bcea1b7b3007655183382a318c2dc
GET /ct.html HTTP/1.1
Host: ct.pinterest.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pages.upwellness.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: max-age=86400
content-type: text/html; charset=utf-8
content-encoding: gzip
content-length: 323
x-envoy-upstream-service-time: 1
referrer-policy: origin
x-pinterest-rid: 1436599018907320
date: Thu, 24 Nov 2022 22:53:13 GMT
vary: Accept-Encoding
akamai-grn: 0.274f2417.1669330393.46abc374
x-cdn: akamai
strict-transport-security: max-age=31536000 ; includeSubDomains ; preload
X-Firefox-Spdy: h2
io.v2.customerlabs.co/cl
200 OK 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cl HTTP/1.1
Host: io.v2.customerlabs.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: text/plain;charset=UTF-8
Content-Length: 741
Origin: http://pages.upwellness.com
Connection: keep-alive
Referer: http://pages.upwellness.com/
HTTP/1.1 200 OK
Access-Control-Allow-Headers: Origin, Accept, Content-Type, Max-Age, X-CL-APP-ID, X-Content-Type-Options
Access-Control-Allow-Methods: POST, OPTIONS
Access-Control-Allow-Origin: http://pages.upwellness.com
Date: Thu, 24 Nov 2022 22:53:13 GMT
Server: nginx/1.12.1
Content-Length: 0
Connection: keep-alive
s.amazon-adsystem.com/iu3?d=generic&ex-fargs=%3Fid%3Dc230f4f4-2471-e083-6695-c6f3f7fc5010%26type%3DUNKNOWN%26m%3D1&ex-fch=416613&ex-src=https://www.upwellness.com/&ex-hargs=v%3D1.0%3Bc%3D593675756572392096%3Bp%3DC230F4F4-2471-E083-6695-C6F3F7FC5010&cb=524642824345876860
301 Moved Permanently 0 B URL HTTP/1.1 s.amazon-adsystem.com/iu3?d=generic&ex-fargs=%3Fid%3Dc230f4f4-2471-e083-6695-c6f3f7fc5010%26type%3DUNKNOWN%26m%3D1&ex-fch=416613&ex-src=https://www.upwellness.com/&ex-hargs=v%3D1.0%3Bc%3D593675756572392096%3Bp%3DC230F4F4-2471-E083-6695-C6F3F7FC5010&cb=524642824345876860
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /iu3?d=generic&ex-fargs=%3Fid%3Dc230f4f4-2471-e083-6695-c6f3f7fc5010%26type%3DUNKNOWN%26m%3D1&ex-fch=416613&ex-src=https://www.upwellness.com/&ex-hargs=v%3D1.0%3Bc%3D593675756572392096%3Bp%3DC230F4F4-2471-E083-6695-C6F3F7FC5010&cb=524642824345876860 HTTP/1.1
Host: s.amazon-adsystem.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pages.upwellness.com/
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Thu, 24 Nov 2022 22:53:13 GMT
Server: Server
Location: https://s.amazon-adsystem.com/iu3?d=generic&ex-fargs=%3Fid%3Dc230f4f4-2471-e083-6695-c6f3f7fc5010%26type%3DUNKNOWN%26m%3D1&ex-fch=416613&ex-src=https://www.upwellness.com/&ex-hargs=v%3D1.0%3Bc%3D593675756572392096%3Bp%3DC230F4F4-2471-E083-6695-C6F3F7FC5010&cb=524642824345876860
Cache-Control: no-cache
Content-Length: 0
x-amz-rid: 1M3C5HXZNFF91TK4YW78
Vary: Accept-Encoding,User-Agent
pipedream.wistia.com/mput?topic=metrics
200 OK 2 B URL HTTP/1.1 pipedream.wistia.com/mput?topic=metrics
IP
File type ASCII text, with no line terminators
Hash e0aa021e21dddbd6d8cecec71e9cf564
9ce3bd4224c8c1780db56b4125ecf3f24bf748b7
565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3
POST /mput?topic=metrics HTTP/1.1
Host: pipedream.wistia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
content-type: application/x-www-form-urlencoded
Content-Length: 7695
Origin: http://pages.upwellness.com
Connection: keep-alive
Referer: http://pages.upwellness.com/
HTTP/1.1 200 OK
Date: Thu, 24 Nov 2022 22:53:13 GMT
Content-Type: text/plain; charset=utf-8
Content-Length: 2
Connection: keep-alive
Access-Control-Allow-Methods: POST, OPTIONS
Access-Control-Allow-Origin: *
pipedream.wistia.com/mput?topic=metrics
200 OK 2 B URL HTTP/1.1 pipedream.wistia.com/mput?topic=metrics
IP
File type ASCII text, with no line terminators
Hash e0aa021e21dddbd6d8cecec71e9cf564
9ce3bd4224c8c1780db56b4125ecf3f24bf748b7
565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3
POST /mput?topic=metrics HTTP/1.1
Host: pipedream.wistia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
content-type: application/x-www-form-urlencoded
Content-Length: 0
Origin: http://pages.upwellness.com
Connection: keep-alive
Referer: http://pages.upwellness.com/
HTTP/1.1 200 OK
Date: Thu, 24 Nov 2022 22:53:13 GMT
Content-Type: text/plain; charset=utf-8
Content-Length: 2
Connection: keep-alive
Access-Control-Allow-Methods: POST, OPTIONS
Access-Control-Allow-Origin: *
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash d00eaf1f7e43489c5718ce3fa5a491e9
eca6d2f9139f3321e20ffe1929755efdc468b981
c8164da57b36002493cdc0983dc9e8a879ef47b2cac532e2ba105142b6b6b09d
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=122548
Date: Thu, 24 Nov 2022 22:53:13 GMT
Etag: "637f2e7e-1d7"
Expires: Sat, 26 Nov 2022 08:55:41 GMT
Last-Modified: Thu, 24 Nov 2022 08:42:38 GMT
Server: ECS (bsa/EB1C)
X-Cache: Miss from cloudfront
Via: 1.1 83a23d85c009b0c0e3626072e9f997fe.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: YxKdruvlsvcRhpErVgbRC840jZuc5f_Wt-9iucQf9CjohxzMdGBxwA==
Age: 783
distillery.wistia.com/x
204 No Content 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /x HTTP/1.1
Host: distillery.wistia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
content-type: text/plain
Content-Length: 1572
Origin: http://pages.upwellness.com
Connection: keep-alive
Referer: http://pages.upwellness.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Thu, 24 Nov 2022 22:53:13 GMT
access-control-allow-origin: *
cache-control: max-age=0, private, must-revalidate
X-Firefox-Spdy: h2
s.amazon-adsystem.com/iu3?d=generic&ex-fargs=%3Fid%3Dc230f4f4-2471-e083-6695-c6f3f7fc5010%26type%3DUNKNOWN%26m%3D1&ex-fch=416613&ex-src=https://www.upwellness.com/&ex-hargs=v%3D1.0%3Bc%3D593675756572392096%3Bp%3DC230F4F4-2471-E083-6695-C6F3F7FC5010&cb=524642824345876860
302 Found 0 B URL HTTP/1.1 s.amazon-adsystem.com/iu3?d=generic&ex-fargs=%3Fid%3Dc230f4f4-2471-e083-6695-c6f3f7fc5010%26type%3DUNKNOWN%26m%3D1&ex-fch=416613&ex-src=https://www.upwellness.com/&ex-hargs=v%3D1.0%3Bc%3D593675756572392096%3Bp%3DC230F4F4-2471-E083-6695-C6F3F7FC5010&cb=524642824345876860
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /iu3?d=generic&ex-fargs=%3Fid%3Dc230f4f4-2471-e083-6695-c6f3f7fc5010%26type%3DUNKNOWN%26m%3D1&ex-fch=416613&ex-src=https://www.upwellness.com/&ex-hargs=v%3D1.0%3Bc%3D593675756572392096%3Bp%3DC230F4F4-2471-E083-6695-C6F3F7FC5010&cb=524642824345876860 HTTP/1.1
Host: s.amazon-adsystem.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://pages.upwellness.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: Server
Date: Thu, 24 Nov 2022 22:53:13 GMT
Content-Length: 0
Connection: keep-alive
x-amz-rid: ST0STF8W6997K9H1MT45
Set-Cookie: ad-id=A5WEWFRdu0ozs-2EVnKjUIk|t; Domain=.amazon-adsystem.com; Expires=Sat, 01-Jul-2023 22:53:13 GMT; Path=/; Secure; HttpOnly; SameSite=None
Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0
Pragma: no-cache
Expires: Thu, 01 Jan 1970 00:00:00 GMT
p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR"
Location: https://s.amazon-adsystem.com/iu3?d=generic&ex-fargs=%3Fid%3Dc230f4f4-2471-e083-6695-c6f3f7fc5010%26type%3DUNKNOWN%26m%3D1&ex-fch=416613&ex-src=https://www.upwellness.com/&ex-hargs=v%3D1.0%3Bc%3D593675756572392096%3Bp%3DC230F4F4-2471-E083-6695-C6F3F7FC5010&cb=524642824345876860&dcc=t
Vary: Content-Type,Accept-Encoding,User-Agent
Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
s.amazon-adsystem.com/iu3?d=generic&ex-fargs=%3Fid%3Dc230f4f4-2471-e083-6695-c6f3f7fc5010%26type%3DUNKNOWN%26m%3D1&ex-fch=416613&ex-src=https://www.upwellness.com/&ex-hargs=v%3D1.0%3Bc%3D593675756572392096%3Bp%3DC230F4F4-2471-E083-6695-C6F3F7FC5010&cb=524642824345876860&dcc=t
200 OK 65 B URL HTTP/1.1 s.amazon-adsystem.com/iu3?d=generic&ex-fargs=%3Fid%3Dc230f4f4-2471-e083-6695-c6f3f7fc5010%26type%3DUNKNOWN%26m%3D1&ex-fch=416613&ex-src=https://www.upwellness.com/&ex-hargs=v%3D1.0%3Bc%3D593675756572392096%3Bp%3DC230F4F4-2471-E083-6695-C6F3F7FC5010&cb=524642824345876860&dcc=t
IP
File type HTML document, ASCII text
Hash 22fdf49482d8200e8f305bbe262eff14
f254bd4053267c2cf46675613e689016d8b7f775
115d83ece49fd1c5769409aab9d78572eed86cd38a0556b4cdeeac82c83091d3
GET /iu3?d=generic&ex-fargs=%3Fid%3Dc230f4f4-2471-e083-6695-c6f3f7fc5010%26type%3DUNKNOWN%26m%3D1&ex-fch=416613&ex-src=https://www.upwellness.com/&ex-hargs=v%3D1.0%3Bc%3D593675756572392096%3Bp%3DC230F4F4-2471-E083-6695-C6F3F7FC5010&cb=524642824345876860&dcc=t HTTP/1.1
Host: s.amazon-adsystem.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://pages.upwellness.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Server
Date: Thu, 24 Nov 2022 22:53:13 GMT
Content-Type: text/html;charset=ISO-8859-1
Content-Length: 65
Connection: keep-alive
x-amz-rid: 4H865PTNCHXAXGC9V9RC
Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0
Pragma: no-cache
Expires: Thu, 01 Jan 1970 00:00:00 GMT
p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR"
Vary: Content-Type,Accept-Encoding,User-Agent
Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
fast.wistia.com/assets/external/allIntegrations.js
200 OK 5.6 kB URL HTTP/2 fast.wistia.com/assets/external/allIntegrations.js
IP
File type ASCII text, with very long lines (21637), with no line terminators
Hash 98d8f1350f159ef9d630464f2677623c
ee33382759ec18abebe452fb065599627d729114
0bcc59bc6540d08234fceefb99483c915ced9406d7b30173817cb18553c462b3
GET /assets/external/allIntegrations.js HTTP/1.1
Host: fast.wistia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pages.upwellness.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
cache-control: public, max-age=3600
content-encoding: br
content-type: application/javascript
etag: "637ce334-15f7"
last-modified: Tue, 22 Nov 2022 14:56:52 GMT
timing-allow-origin: *
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 24 Nov 2022 22:53:13 GMT
age: 1021
x-served-by: cache-iad-kiad7000146-IAD, cache-bma1678-BMA
x-cache: HIT, HIT
x-cache-hits: 2, 6
x-timer: S1669330394.751454,VS0,VE0
vary: Accept-Encoding
strict-transport-security: max-age=0
x-ecma-v: modern
x-browser: firefox
x-browser-version: 105
content-length: 5623
X-Firefox-Spdy: h2
trc-events.taboola.com/1225872/log/3/unip?en=pre_d_eng_tb&tos=4570&scd=5&ssd=1&est=1669330389358&ver=35&isls=true&src=i&invt=3000&rv=1&tim=1669330393929&vi=1669330389356&ri=332bf83a712c3e4473a6b4ae17b303a1&ref=null&cv=20221117-23-RELEASE&item-url=http%3A%2F%2Fpages.upwellness.com%2Fuc-grplus-fps%2F%3Foffer%3D67%26session_id%3D10290265cbed53f23d905efdd75177%26n%3Dtune%26AFFID%3D477232%26subid%3D37_UW221124PM
204 No Content 0 B URL HTTP/2 trc-events.taboola.com/1225872/log/3/unip?en=pre_d_eng_tb&tos=4570&scd=5&ssd=1&est=1669330389358&ver=35&isls=true&src=i&invt=3000&rv=1&tim=1669330393929&vi=1669330389356&ri=332bf83a712c3e4473a6b4ae17b303a1&ref=null&cv=20221117-23-RELEASE&item-url=http%3A%2F%2Fpages.upwellness.com%2Fuc-grplus-fps%2F%3Foffer%3D67%26session_id%3D10290265cbed53f23d905efdd75177%26n%3Dtune%26AFFID%3D477232%26subid%3D37_UW221124PM
IP
ASN #200478 Taboola.com ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /1225872/log/3/unip?en=pre_d_eng_tb&tos=4570&scd=5&ssd=1&est=1669330389358&ver=35&isls=true&src=i&invt=3000&rv=1&tim=1669330393929&vi=1669330389356&ri=332bf83a712c3e4473a6b4ae17b303a1&ref=null&cv=20221117-23-RELEASE&item-url=http%3A%2F%2Fpages.upwellness.com%2Fuc-grplus-fps%2F%3Foffer%3D67%26session_id%3D10290265cbed53f23d905efdd75177%26n%3Dtune%26AFFID%3D477232%26subid%3D37_UW221124PM HTTP/1.1
Host: trc-events.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://pages.upwellness.com
Connection: keep-alive
Referer: http://pages.upwellness.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Thu, 24 Nov 2022 22:53:14 GMT
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: http://pages.upwellness.com
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
X-Firefox-Spdy: h2
s.yimg.com/wi/ytc.js
200 OK 0 B IP
GET /wi/ytc.js HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pages.upwellness.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: f4tNftnl72++17huTqRRIH7tRLPeWLXwIwVadIAbGY94Hlxi+XIfqO/hyEsuBXdi0Xb8tw26smM=
x-amz-request-id: TH5XWK2MG5VFFTS9
date: Thu, 24 Nov 2022 22:39:30 GMT
last-modified: Tue, 14 Jun 2022 12:21:31 GMT
x-amz-expiration: expiry-date="Thu, 20 Jul 2023 00:00:00 GMT", rule-id="oath-standard-lifecycle"
etag: "6a624022b5d271dcefb070b0b6670abc-df"
x-amz-server-side-encryption: AES256
cache-control: public,max-age=3600
x-amz-version-id: .QD3nDfK79S8_ikLSJXTL23Tdis9tg0C
accept-ranges: bytes
content-type: application/javascript
server: ATS
referrer-policy: no-referrer-when-downgrade
vary: Origin, Accept-Encoding
age: 820
content-encoding: gzip
strict-transport-security: max-age=15552000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
assets.ubembed.com/universalscript/releases/v0.179.2/bundle.js
200 OK 0 B URL HTTP/2 assets.ubembed.com/universalscript/releases/v0.179.2/bundle.js
IP
GET /universalscript/releases/v0.179.2/bundle.js HTTP/1.1
Host: assets.ubembed.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pages.upwellness.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
date: Sat, 03 Sep 2022 23:09:05 GMT
last-modified: Tue, 05 Apr 2022 16:31:05 GMT
etag: W/"359008fe01078c59c66e034866170bd2"
cache-control: max-age=31536000
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 410f51195842d9b592b15d6588c36654.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 7JGYS4IQ2TFNmaRUJZMen5X8rOXLPpPojGUldw2FRtWx-xacJ_NAlQ==
age: 7083843
X-Firefox-Spdy: h2
d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-grplus-fps/d2902373-f57a20-wave-gr-01-2_12400n51hc0n50bb000028.png
200 OK 0 B URL HTTP/1.1 d9hhrg4mnvzow.cloudfront.net/pages.upwellness.com/uc-grplus-fps/d2902373-f57a20-wave-gr-01-2_12400n51hc0n50bb000028.png
IP
GET /pages.upwellness.com/uc-grplus-fps/d2902373-f57a20-wave-gr-01-2_12400n51hc0n50bb000028.png HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pages.upwellness.com/
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 123673
Connection: keep-alive
Date: Fri, 28 Oct 2022 10:32:07 GMT
Last-Modified: Wed, 26 Oct 2022 17:25:44 GMT
ETag: "8623460fd509c8bce7623df03b517ef6"
Cache-Control: max-age=31557600
x-amz-version-id: Y2.jty9h0.ts98M_y9eP3vUgwkRDxQM9
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: YlstYg9MxMEf63b3QcV2D6Dz-xuagBODfUVW0dRd5RGqO0oKqTvawQ==
Age: 2377263
a.clickcertain.com/px/img/bidswitch/?done=true&ccid=f2387451-6984-4a26-8e7d-5c74afeb98a4&anx_uId=0
302 Found 0 B URL HTTP/2 a.clickcertain.com/px/img/bidswitch/?done=true&ccid=f2387451-6984-4a26-8e7d-5c74afeb98a4&anx_uId=0
IP
GET /px/img/bidswitch/?done=true&ccid=f2387451-6984-4a26-8e7d-5c74afeb98a4&anx_uId=0 HTTP/1.1
Host: a.clickcertain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://a.clickcertain.com/
Connection: keep-alive
Cookie: _ccpx_u=f2387451%2d6984%2d4a26%2d8e7d%2d5c74afeb98a4; _ccpx=24a3d6f0fe7dd9c; _ccpx_24a3d6f0fe7dd9c=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
date: Thu, 24 Nov 2022 22:53:12 GMT
content-type: text/html
location: https://x.bidswitch.net/sync?dsp_id=179&user_id=f2387451-6984-4a26-8e7d-5c74afeb98a4&expires=5&user_group=0
set-cookie: _ccpx_u=f2387451%2d6984%2d4a26%2d8e7d%2d5c74afeb98a4; Expires=Fri, 24 Nov 2023 22:53:12 GMT; Path=/; HttpOnly; SameSite=None; Secure
x-frontend: cc-nginx-c76b96594-8gps5:cc-nginx-c76b96594-8gps5
x-requestid: e7d954e6-771f-466c-9da8-22c7ee9d97c8
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=BVdVzPHl6pr4UaB62EElxlnM7QvJ0%2FSadipnqI9E8ovTeb34rPIZraICpAExHcrme9D4X4Fsn6q0DlvYuyweoHhjMn4lDoCXpnCr%2BUc1kah1M53eaTkiMTPpVmLWEmA8YSUaYw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76f5b829087efac4-OSL
X-Firefox-Spdy: h2
a.clickcertain.com/px/cont/?c=24a3d6f0fe7dd9c&ccid=f2387451-6984-4a26-8e7d-5c74afeb98a4&cn=NO
200 OK 0 B URL HTTP/2 a.clickcertain.com/px/cont/?c=24a3d6f0fe7dd9c&ccid=f2387451-6984-4a26-8e7d-5c74afeb98a4&cn=NO
IP
GET /px/cont/?c=24a3d6f0fe7dd9c&ccid=f2387451-6984-4a26-8e7d-5c74afeb98a4&cn=NO HTTP/1.1
Host: a.clickcertain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: _ccpx_u=f2387451%2d6984%2d4a26%2d8e7d%2d5c74afeb98a4; _ccpx=24a3d6f0fe7dd9c; _ccpx_24a3d6f0fe7dd9c=1
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 24 Nov 2022 22:53:10 GMT
content-type: text/html
etag: W/"ZjIzODc0NTFnNjk4NGc0YTI2ZzhlN2RnNWM3NGFmZWI5OGE0LXow"
set-cookie: _ccpx_u=f2387451%2d6984%2d4a26%2d8e7d%2d5c74afeb98a4; Expires=Fri, 24 Nov 2023 22:53:10 GMT; Path=/; HttpOnly; SameSite=None; Secure
x-frontend: cc-nginx-c76b96594-k8vv5:cc-nginx-c76b96594-k8vv5
x-requestid: 68ffd444-0745-4148-9a6a-2f01553c6b14
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2ldGb70a4ZRmEQm%2FUt05%2FU33BYKkO9hq3wI9InkZBdQMR0ogQAebRZ%2BZj7keRylJLyG%2B9WvMf%2BIkee37fWpzYreWqk8Khx%2FKBvGHke%2BRzqSJxLL%2BJBH9fywvvYvAtnwIfc%2BQoA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76f5b81e8a60fac4-OSL
content-encoding: br
X-Firefox-Spdy: h2
3.69.136.55
157.240.200.14
70.42.32.223
23.36.77.32
212.82.100.181
104.21.47.12
151.101.86.133
141.226.228.48
93.184.220.29